last executing test programs: 14.718782207s ago: executing program 3 (id=1139): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000580), 0x0) r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) recvmsg$unix(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001800)=""/184, 0xb8}, {0x0}, {&(0x7f00000019c0)=""/237, 0xed}, {0x0}], 0x4, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x200, 0x4) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010100}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000200), 0x810000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x44, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4824}, 0x0) 13.849967696s ago: executing program 1 (id=1141): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000580), 0x0) r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) recvmsg$unix(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001800)=""/184, 0xb8}, {0x0}, {&(0x7f00000019c0)=""/237, 0xed}, {0x0}, {0x0}], 0x5, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x200, 0x4) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010100}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000200), 0x810000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x44, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4824}, 0x0) 13.549171813s ago: executing program 3 (id=1143): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) r6 = syz_open_procfs(r0, &(0x7f0000000180)='smaps\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) lseek(r6, 0x10001, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000100001042bbd70020000000002000000", @ANYRES32=r7, @ANYBLOB="00240000000000001800128008000100677470000c0002800500050000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) 12.776913611s ago: executing program 1 (id=1144): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000580), 0x0) r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) recvmsg$unix(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001800)=""/184, 0xb8}, {0x0}, {&(0x7f00000019c0)=""/237, 0xed}, {0x0}], 0x4, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x200, 0x4) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010100}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000200), 0x810000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x44, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4824}, 0x0) 11.292924724s ago: executing program 1 (id=1146): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@can_delroute={0x34, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0x1d, 0x1, 0x3}, [@CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "c18ab2c782fa073d"}, 0x6}}, @CGW_CS_XOR={0x8, 0x5, {0x6, 0x5, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom1\x00', 0xc04, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000)) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x4}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 11.131362708s ago: executing program 3 (id=1148): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x23, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x3}, 0x2}}, 0x10, 0x0}, 0x10) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r8, 0x3, 0x11, r7, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7.95567844s ago: executing program 2 (id=1149): socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000900000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, 0x0, &(0x7f0000000040)) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 7.449798411s ago: executing program 2 (id=1150): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) r6 = syz_open_procfs(r0, &(0x7f0000000180)='smaps\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) lseek(r6, 0x10001, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000100001042bbd70020000000002000000", @ANYRES32=r7, @ANYBLOB="00240000000000001800128008000100677470000c0002800500050000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) 7.002918291s ago: executing program 0 (id=1151): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000580), 0x0) r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) recvmsg$unix(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001800)=""/184, 0xb8}, {0x0}, {&(0x7f00000019c0)=""/237, 0xed}, {0x0}], 0x4, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x200, 0x4) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010100}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000200), 0x810000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x44, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4824}, 0x0) 6.992022742s ago: executing program 3 (id=1152): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000580), 0x0) r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) recvmsg$unix(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001800)=""/184, 0xb8}, {0x0}, {&(0x7f00000019c0)=""/237, 0xed}, {0x0}, {0x0}], 0x5, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x200, 0x4) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010100}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000200), 0x810000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x44, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4824}, 0x0) 6.926647463s ago: executing program 1 (id=1153): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000480)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sched_setscheduler(r3, 0x2, &(0x7f0000000500)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000180)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x400, 0x70bd25, 0x40000000, {0x0, 0x0, 0x0, r7, {0x8}, {0xe, 0xd}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) 5.881332707s ago: executing program 0 (id=1154): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000580), 0x0) r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) recvmsg$unix(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001800)=""/184, 0xb8}, {0x0}, {&(0x7f00000019c0)=""/237, 0xed}, {0x0}], 0x4, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x200, 0x4) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010100}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000200), 0x810000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x44, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4824}, 0x0) 5.819212598s ago: executing program 3 (id=1155): syz_open_dev$vcsu(&(0x7f00000003c0), 0x7, 0x200000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(0x0, 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c000780180001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) gettid() mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) 4.342772012s ago: executing program 3 (id=1156): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x53, &(0x7f0000000300)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001540)={0x1c, 0x0, 0xd8e0afc25e019b91, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00'], 0x20) 4.342060262s ago: executing program 0 (id=1164): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x86) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 4.341405372s ago: executing program 2 (id=1157): r0 = memfd_create(&(0x7f0000000140)='\x00\x00@Z\x82\x1f\xd7\xdc1yE7\xb4\xa4\xc4\x85s\xedz\xef\x96\xe4:\xec\x14\xb9\xa0\xfeA\x7f0\xee\xde\xb9', 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="030000800000bbd000000000cf4eece688bdeb5edf221484b52b3b6dbd7a2c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x8, &(0x7f0000000940)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) dup(r4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) clock_adjtime(0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.281072813s ago: executing program 1 (id=1158): socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000900000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.845148785s ago: executing program 2 (id=1159): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000580), 0x0) r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) recvmsg$unix(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002c80), 0x0, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x200, 0x4) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010100}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000200), 0x810000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x44, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4824}, 0x0) 2.798191477s ago: executing program 0 (id=1160): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 2.621163121s ago: executing program 1 (id=1161): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x23, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x3}, 0x2}}, 0x10, 0x0}, 0x10) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r8, 0x3, 0x11, r7, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.816952569s ago: executing program 2 (id=1162): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000580), 0x0) r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) recvmsg$unix(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001800)=""/184, 0xb8}, {0x0}, {&(0x7f00000019c0)=""/237, 0xed}, {0x0}], 0x4, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x200, 0x4) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010100}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000200), 0x810000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x44, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4824}, 0x0) 1.368736519s ago: executing program 0 (id=1163): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000580), 0x0) r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) recvmsg$unix(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001800)=""/184, 0xb8}, {0x0}, {&(0x7f00000019c0)=""/237, 0xed}, {0x0}, {0x0}], 0x5, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x200, 0x4) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010100}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000200), 0x810000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x44, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4824}, 0x0) 391.18µs ago: executing program 0 (id=1165): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) shutdown(r0, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x7a, 0x0, 0x9}, 0x28) 0s ago: executing program 2 (id=1166): r0 = syz_open_dev$video(&(0x7f0000000b80), 0x8, 0x42100) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x2, 0x6e5, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000bc0)=0x3000000) r4 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0x8e) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x8ffff) write$capi20(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x12, r5, 0x5000) kernel console output (not intermixed with test programs): ][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.662252][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.676056][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.687904][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.721597][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.730541][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.753484][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.762620][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.796343][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.810656][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.823562][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.845948][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.860472][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.871793][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.888309][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.963287][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.980639][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.991142][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.002333][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.013107][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.043146][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.055865][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.075873][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.086685][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.099430][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.108531][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.213377][ T5842] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 71.393863][ T51] Bluetooth: hci2: command tx timeout [ 71.399743][ T51] Bluetooth: hci3: command tx timeout [ 71.405807][ T5787] Bluetooth: hci0: command tx timeout [ 71.463966][ T5787] Bluetooth: hci1: command tx timeout [ 71.550911][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.570294][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.692785][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.701384][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.720502][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.729459][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.770907][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.780889][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.802779][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.812768][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.865929][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.879306][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.908553][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.917743][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.340617][ T5857] Zero length message leads to an empty skb [ 73.684634][ T5860] trusted_key: encrypted_key: insufficient parameters specified [ 73.803029][ T5787] Bluetooth: hci0: command tx timeout [ 73.811173][ T5787] Bluetooth: hci3: command tx timeout [ 73.816746][ T5781] Bluetooth: hci2: command tx timeout [ 73.816780][ T5781] Bluetooth: hci1: command tx timeout [ 73.928135][ T5857] syz.1.7[5857]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 74.661219][ T5869] loop0: detected capacity change from 0 to 64 [ 74.802379][ T5869] hfs: unable to parse mount options [ 75.371429][ T5871] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.574657][ T5884] netlink: 'syz.2.12': attribute type 3 has an invalid length. [ 76.583638][ T5884] netlink: 'syz.2.12': attribute type 3 has an invalid length. [ 80.574695][ T5912] loop3: detected capacity change from 0 to 764 [ 80.624048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.777665][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 81.796104][ T1190] cfg80211: failed to load regulatory.db [ 82.704674][ T5912] rock: directory entry would overflow storage [ 82.711564][ T5912] rock: sig=0x4654, size=5, remaining=4 [ 84.957016][ T5933] xt_HMARK: spi-set and port-set can't be combined [ 85.981440][ T5947] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.985517][ T5787] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 87.995520][ T5787] CPU: 0 PID: 5787 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 88.003102][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 88.013190][ T5787] Workqueue: hci1 hci_rx_work [ 88.017970][ T5787] Call Trace: [ 88.021275][ T5787] [ 88.024224][ T5787] dump_stack_lvl+0x18c/0x250 [ 88.028918][ T5787] ? show_regs_print_info+0x20/0x20 [ 88.034130][ T5787] ? load_image+0x420/0x420 [ 88.038644][ T5787] sysfs_create_dir_ns+0x26e/0x2a0 [ 88.043755][ T5787] ? __lock_acquire+0x7d80/0x7d80 [ 88.048785][ T5787] ? sysfs_warn_dup+0xa0/0xa0 [ 88.053464][ T5787] ? do_raw_spin_unlock+0x121/0x230 [ 88.058672][ T5787] kobject_add_internal+0x617/0xc90 [ 88.063886][ T5787] kobject_add+0x164/0x240 [ 88.068329][ T5787] ? kobject_init+0x1d0/0x1d0 [ 88.073027][ T5787] ? get_device_parent+0x366/0x390 [ 88.078151][ T5787] device_add+0x3fa/0xc40 [ 88.082493][ T5787] hci_conn_add_sysfs+0xd5/0x1e0 [ 88.087440][ T5787] le_conn_complete_evt+0xe9f/0x1480 [ 88.092735][ T5787] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 88.098983][ T5787] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 88.104616][ T5787] ? mutex_unlock+0x10/0x10 [ 88.109118][ T5787] ? skb_pull_data+0xf0/0x1f0 [ 88.113803][ T5787] hci_le_conn_complete_evt+0x187/0x440 [ 88.119362][ T5787] ? hci_remote_host_features_evt+0x150/0x150 [ 88.125431][ T5787] hci_event_packet+0x7b4/0x1280 [ 88.130376][ T5787] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 88.136018][ T5787] ? bis_list+0x290/0x290 [ 88.140356][ T5787] ? kcov_remote_start+0x1b5/0x7e0 [ 88.145562][ T5787] ? hci_send_to_monitor+0xd7/0x4f0 [ 88.150762][ T5787] hci_rx_work+0x43a/0xd60 [ 88.155200][ T5787] ? process_scheduled_works+0x975/0x1600 [ 88.160926][ T5787] process_scheduled_works+0xa60/0x1600 [ 88.166502][ T5787] ? worker_attach_to_pool+0x370/0x370 [ 88.172066][ T5787] ? assign_work+0x3cc/0x5d0 [ 88.176679][ T5787] worker_thread+0xa5e/0xfe0 [ 88.181294][ T5787] kthread+0x2fa/0x390 [ 88.185362][ T5787] ? pr_cont_work+0x550/0x550 [ 88.190049][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 88.194649][ T5787] ret_from_fork+0x48/0x80 [ 88.199066][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 88.204019][ T5787] ret_from_fork_asm+0x11/0x20 [ 88.208812][ T5787] [ 88.339947][ T5787] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 88.354626][ T5787] Bluetooth: hci1: failed to register connection device [ 90.566164][ T51] Bluetooth: hci1: command tx timeout [ 92.214012][ T5985] random: crng reseeded on system resumption [ 92.277150][ T5983] syz.3.34 (5983) used greatest stack depth: 17288 bytes left [ 92.650908][ T5995] capability: warning: `syz.0.35' uses 32-bit capabilities (legacy support in use) [ 92.998700][ T5782] IPVS: starting estimator thread 0... [ 93.173986][ T5988] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.205861][ T5997] IPVS: using max 21 ests per chain, 50400 per kthread [ 93.887051][ T6004] loop1: detected capacity change from 0 to 4096 [ 94.155861][ T6004] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.787466][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.817525][ T6004] EXT4-fs (loop1): Test dummy encryption mode enabled [ 94.853101][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.877482][ T6004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.971119][ T6010] bond0 (unregistering): Released all slaves [ 95.232925][ T6008] pim6reg: entered allmulticast mode [ 95.256436][ T6015] team0: entered allmulticast mode [ 95.715990][ T6015] team_slave_0: entered allmulticast mode [ 95.728453][ T6015] team_slave_1: entered allmulticast mode [ 95.747130][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.049430][ T6034] loop1: detected capacity change from 0 to 1024 [ 97.131773][ T6034] ext4: Unknown parameter 'nouser_xattr' [ 97.762447][ T6039] loop1: detected capacity change from 0 to 2048 [ 97.981696][ T6039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.994401][ T6039] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.192085][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.447097][ T6046] loop2: detected capacity change from 0 to 16 [ 99.217051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.430894][ T6042] sched: RT throttling activated [ 100.515034][ T6046] erofs: (device loop2): mounted with root inode @ nid 36. [ 100.577444][ T6046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.596661][ T6046] overlayfs: failed to resolve './bus': -2 [ 103.269262][ T6066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 103.279154][ T6066] netlink: 'syz.3.54': attribute type 2 has an invalid length. [ 103.287901][ T6066] netlink: 'syz.3.54': attribute type 1 has an invalid length. [ 104.531360][ T6076] futex_wake_op: syz.3.55 tries to shift op by 144; fix this program [ 105.285373][ T6076] loop3: detected capacity change from 0 to 512 [ 106.050759][ T6089] xt_HMARK: spi-set and port-set can't be combined [ 106.298875][ T6092] loop0: detected capacity change from 0 to 128 [ 106.517155][ T6076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.529993][ T6076] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.576667][ T6092] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.608338][ T6076] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.693851][ T6092] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.898676][ T6112] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 109.388229][ T6120] syz.2.65 uses obsolete (PF_INET,SOCK_PACKET) [ 109.399537][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.888846][ T6124] loop3: detected capacity change from 0 to 32768 [ 110.573098][ T6128] loop1: detected capacity change from 0 to 32768 [ 110.635775][ T6128] (syz.1.64,6128,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 110.652220][ T6128] (syz.1.64,6128,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 110.652717][ T6124] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 111.110226][ T145] Bluetooth: Error in BCSP hdr checksum [ 111.268947][ T6124] XFS (loop3): Ending clean mount [ 111.286611][ T6124] XFS (loop3): Quotacheck needed: Please wait. [ 111.423735][ T6128] (syz.1.64,6128,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 111.440300][ T6128] (syz.1.64,6128,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 111.455839][ T6128] JBD2: Ignoring recovery information on journal [ 111.534868][ T6149] xt_HMARK: spi-set and port-set can't be combined [ 111.830810][ T6124] XFS (loop3): Quotacheck: Done. [ 111.998377][ T6128] (syz.1.64,6128,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 112.014273][ T6128] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 112.027139][ T6128] (syz.1.64,6128,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 112.052289][ T6128] (syz.1.64,6128,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 112.727037][ T6127] (syz.1.64,6127,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 112.756392][ T6127] (syz.1.64,6127,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 112.770322][ T6127] (syz.1.64,6127,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 112.783199][ T6127] (syz.1.64,6127,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 112.792594][ T6127] (syz.1.64,6127,0):ocfs2_quota_read:201 ERROR: status = -5 [ 112.800159][ T6127] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 5 [ 112.812465][ T6127] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 112.824272][ T6127] (syz.1.64,6127,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 112.833860][ T6127] (syz.1.64,6127,0):ocfs2_mknod:314 ERROR: status = -5 [ 112.841241][ T6127] (syz.1.64,6127,0):ocfs2_mknod:502 ERROR: status = -5 [ 112.848588][ T6127] (syz.1.64,6127,0):ocfs2_create:676 ERROR: status = -5 [ 112.872054][ T6155] loop0: detected capacity change from 0 to 512 [ 112.932942][ T6155] EXT4-fs: Ignoring removed i_version option [ 112.972039][ T6155] EXT4-fs: Ignoring removed nobh option [ 113.033210][ T6155] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.051581][ T5787] Bluetooth: hci4: command 0x1003 tx timeout [ 113.059186][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 113.107149][ T5776] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 113.148920][ T6155] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.265507][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 113.312248][ T6155] EXT4-fs (loop0): 1 truncate cleaned up [ 113.358434][ T6155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.378781][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.493246][ T6165] syzkaller0: entered promiscuous mode [ 114.498771][ T6165] syzkaller0: entered allmulticast mode [ 114.736344][ T6165] tipc: Started in network mode [ 115.452212][ T6165] tipc: Node identity e6e1edfb031d, cluster identity 4711 [ 115.491493][ T6173] comedi comedi3: aio_iiro_16: I/O port conflict (0x800100,8) [ 115.534338][ T6165] tipc: Enabled bearer , priority 0 [ 115.745511][ T6164] tipc: Resetting bearer [ 115.794975][ T6164] tipc: Disabling bearer [ 116.208589][ T6177] netlink: 'syz.0.76': attribute type 10 has an invalid length. [ 116.224327][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 116.326985][ T6177] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 117.648485][ T6204] loop3: detected capacity change from 0 to 32768 [ 117.697380][ T6204] (syz.3.81,6204,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.713411][ T6204] (syz.3.81,6204,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.763903][ T6204] (syz.3.81,6204,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 117.779078][ T6204] (syz.3.81,6204,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 117.803960][ T6204] JBD2: Ignoring recovery information on journal [ 118.482866][ T6204] (syz.3.81,6204,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 118.496729][ T6204] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 118.515012][ T6204] (syz.3.81,6204,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 118.631684][ T6204] (syz.3.81,6204,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 118.758035][ T6201] (syz.3.81,6201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 118.776008][ T6201] (syz.3.81,6201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 118.789331][ T6201] (syz.3.81,6201,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 118.801818][ T6201] (syz.3.81,6201,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 118.810581][ T6201] (syz.3.81,6201,0):ocfs2_quota_read:201 ERROR: status = -5 [ 118.817935][ T6201] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 5 [ 118.827133][ T6201] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 118.836711][ T6201] (syz.3.81,6201,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 118.844462][ T6201] (syz.3.81,6201,0):ocfs2_mknod:314 ERROR: status = -5 [ 118.851408][ T6201] (syz.3.81,6201,0):ocfs2_mknod:502 ERROR: status = -5 [ 118.858436][ T6201] (syz.3.81,6201,0):ocfs2_create:676 ERROR: status = -5 [ 119.323122][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 124.613027][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'. [ 125.574071][ T6261] xt_TPROXY: Can be used only with -p tcp or -p udp [ 126.308448][ T6269] syzkaller0: entered promiscuous mode [ 126.314246][ T6269] syzkaller0: entered allmulticast mode [ 126.351550][ T6269] tipc: Enabled bearer , priority 0 [ 126.378717][ T6268] tipc: Resetting bearer [ 126.424364][ T6268] tipc: Disabling bearer [ 128.036159][ T6282] pimreg: entered allmulticast mode [ 128.087838][ T6286] xt_HMARK: spi-set and port-set can't be combined [ 131.661867][ T5787] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 131.672963][ T5787] CPU: 0 PID: 5787 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 131.680652][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 131.690755][ T5787] Workqueue: hci2 hci_rx_work [ 131.695447][ T5787] Call Trace: [ 131.698731][ T5787] [ 131.701653][ T5787] dump_stack_lvl+0x18c/0x250 [ 131.706330][ T5787] ? show_regs_print_info+0x20/0x20 [ 131.711525][ T5787] ? load_image+0x420/0x420 [ 131.716029][ T5787] sysfs_create_dir_ns+0x26e/0x2a0 [ 131.721138][ T5787] ? __lock_acquire+0x7d80/0x7d80 [ 131.726155][ T5787] ? sysfs_warn_dup+0xa0/0xa0 [ 131.730837][ T5787] ? do_raw_spin_unlock+0x121/0x230 [ 131.736041][ T5787] kobject_add_internal+0x617/0xc90 [ 131.741270][ T5787] kobject_add+0x164/0x240 [ 131.745716][ T5787] ? kobject_init+0x1d0/0x1d0 [ 131.750524][ T5787] ? get_device_parent+0x366/0x390 [ 131.755637][ T5787] device_add+0x3fa/0xc40 [ 131.759966][ T5787] hci_conn_add_sysfs+0xd5/0x1e0 [ 131.764903][ T5787] le_conn_complete_evt+0xe9f/0x1480 [ 131.770213][ T5787] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 131.776481][ T5787] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 131.782121][ T5787] ? mutex_unlock+0x10/0x10 [ 131.786641][ T5787] ? skb_pull_data+0xf0/0x1f0 [ 131.791342][ T5787] hci_le_conn_complete_evt+0x187/0x440 [ 131.796894][ T5787] ? hci_remote_host_features_evt+0x150/0x150 [ 131.802955][ T5787] hci_event_packet+0x7b4/0x1280 [ 131.807889][ T5787] ? __lock_acquire+0x7d80/0x7d80 [ 131.812906][ T5787] ? lock_chain_count+0x20/0x20 [ 131.817757][ T5787] ? bis_list+0x290/0x290 [ 131.822108][ T5787] ? lockdep_hardirqs_on+0x98/0x150 [ 131.827302][ T5787] ? hci_send_to_monitor+0xd7/0x4f0 [ 131.832502][ T5787] hci_rx_work+0x43a/0xd60 [ 131.836927][ T5787] ? process_scheduled_works+0x975/0x1600 [ 131.842656][ T5787] process_scheduled_works+0xa60/0x1600 [ 131.848214][ T5787] ? worker_attach_to_pool+0x370/0x370 [ 131.853679][ T5787] ? assign_work+0x3cc/0x5d0 [ 131.858264][ T5787] worker_thread+0xa5e/0xfe0 [ 131.862903][ T5787] kthread+0x2fa/0x390 [ 131.866994][ T5787] ? pr_cont_work+0x550/0x550 [ 131.871686][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 131.876279][ T5787] ret_from_fork+0x48/0x80 [ 131.880691][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 131.885275][ T5787] ret_from_fork_asm+0x11/0x20 [ 131.890133][ T5787] [ 131.897530][ T5787] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 131.911821][ T5787] Bluetooth: hci2: failed to register connection device [ 132.031492][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 133.057415][ T6320] loop2: detected capacity change from 0 to 764 [ 133.086552][ T6320] rock: directory entry would overflow storage [ 133.092918][ T6320] rock: sig=0x4654, size=5, remaining=4 [ 134.150550][ T51] Bluetooth: hci2: command tx timeout [ 134.765179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 136.141017][ T6346] loop3: detected capacity change from 0 to 64 [ 136.148663][ T6346] hfs: unable to parse mount options [ 136.239744][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.246358][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.325720][ T5767] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 137.020397][ T6362] netlink: 'syz.1.120': attribute type 3 has an invalid length. [ 137.028395][ T6362] netlink: 'syz.1.120': attribute type 3 has an invalid length. [ 139.415201][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 139.472709][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 139.480161][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.490251][ T51] Workqueue: hci3 hci_rx_work [ 139.494973][ T51] Call Trace: [ 139.498274][ T51] [ 139.501223][ T51] dump_stack_lvl+0x18c/0x250 [ 139.505947][ T51] ? show_regs_print_info+0x20/0x20 [ 139.511179][ T51] ? load_image+0x420/0x420 [ 139.515736][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 139.520968][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 139.526024][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 139.530728][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 139.535977][ T51] kobject_add_internal+0x617/0xc90 [ 139.541210][ T51] kobject_add+0x164/0x240 [ 139.545660][ T51] ? kobject_init+0x1d0/0x1d0 [ 139.550373][ T51] ? get_device_parent+0x366/0x390 [ 139.555532][ T51] device_add+0x3fa/0xc40 [ 139.559985][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 139.564965][ T51] le_conn_complete_evt+0xe9f/0x1480 [ 139.570287][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 139.576566][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 139.582232][ T51] ? mutex_unlock+0x10/0x10 [ 139.586770][ T51] ? skb_pull_data+0xf0/0x1f0 [ 139.591482][ T51] hci_le_conn_complete_evt+0x187/0x440 [ 139.597073][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 139.603173][ T51] hci_event_packet+0x7b4/0x1280 [ 139.608140][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 139.613193][ T51] ? lock_chain_count+0x20/0x20 [ 139.618073][ T51] ? bis_list+0x290/0x290 [ 139.622432][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 139.627665][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 139.632890][ T51] hci_rx_work+0x43a/0xd60 [ 139.637355][ T51] ? process_scheduled_works+0x975/0x1600 [ 139.643113][ T51] process_scheduled_works+0xa60/0x1600 [ 139.648721][ T51] ? worker_attach_to_pool+0x370/0x370 [ 139.654220][ T51] ? assign_work+0x3cc/0x5d0 [ 139.658853][ T51] worker_thread+0xa5e/0xfe0 [ 139.663510][ T51] kthread+0x2fa/0x390 [ 139.667604][ T51] ? pr_cont_work+0x550/0x550 [ 139.672307][ T51] ? kthread_blkcg+0xd0/0xd0 [ 139.676933][ T51] ret_from_fork+0x48/0x80 [ 139.681654][ T51] ? kthread_blkcg+0xd0/0xd0 [ 139.686289][ T51] ret_from_fork_asm+0x11/0x20 [ 139.691108][ T51] [ 139.726252][ T51] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 139.740757][ T51] Bluetooth: hci3: failed to register connection device [ 139.851989][ T6376] tmpfs: Bad value for 'mpol' [ 141.092191][ T6382] random: crng reseeded on system resumption [ 141.103877][ T6383] loop3: detected capacity change from 0 to 512 [ 142.051578][ T51] Bluetooth: hci3: command tx timeout [ 142.563291][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 142.572416][ T6393] netlink: 'syz.0.130': attribute type 2 has an invalid length. [ 142.581963][ T6393] netlink: 'syz.0.130': attribute type 1 has an invalid length. [ 143.533614][ T6383] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 143.565524][ T6383] FAT-fs (loop3): Filesystem has been set read-only [ 143.674003][ T6396] loop0: detected capacity change from 0 to 512 [ 143.682199][ T6396] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.809266][ T6396] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 143.875890][ T6396] EXT4-fs (loop0): 1 truncate cleaned up [ 143.900415][ T6396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.321178][ T6417] loop1: detected capacity change from 0 to 128 [ 145.552315][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.570005][ T6417] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.611575][ T6417] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.035816][ T6423] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 148.925760][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.078806][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'. [ 149.087893][ T6444] netlink: 'syz.2.142': attribute type 2 has an invalid length. [ 149.095702][ T6444] netlink: 'syz.2.142': attribute type 1 has an invalid length. [ 150.397543][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 150.846343][ T6454] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 150.945491][ T6454] batman_adv: batadv0: Adding interface: gretap1 [ 150.956014][ T6454] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.982185][ T6454] batman_adv: batadv0: Interface activated: gretap1 [ 151.023219][ T6455] loop2: detected capacity change from 0 to 512 [ 152.773741][ T6455] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 152.812404][ T6455] FAT-fs (loop2): Filesystem has been set read-only [ 153.095505][ T6472] loop0: detected capacity change from 0 to 64 [ 154.712581][ T6481] pimreg: entered allmulticast mode [ 155.355731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 156.851983][ T6492] loop2: detected capacity change from 0 to 128 [ 156.914005][ T6492] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.055113][ T6492] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.015169][ T6506] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 158.352344][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.403757][ T23] IPVS: starting estimator thread 0... [ 158.410199][ T6508] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.530412][ T6509] IPVS: using max 24 ests per chain, 57600 per kthread [ 162.065339][ T6530] netlink: 'syz.2.163': attribute type 1 has an invalid length. [ 162.079546][ T6530] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.163'. [ 162.407980][ T6532] loop0: detected capacity change from 0 to 32768 [ 162.521091][ T6532] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 162.643584][ T6532] XFS (loop0): Ending clean mount [ 162.683068][ T6530] loop2: detected capacity change from 0 to 4096 [ 162.696640][ T6532] XFS (loop0): Quotacheck needed: Please wait. [ 162.811815][ T6519] netlink: 'syz.3.164': attribute type 10 has an invalid length. [ 162.872225][ T6519] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 162.921736][ T6544] warning: `syz.1.166' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 162.934850][ T6544] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 162.999942][ T6532] XFS (loop0): Quotacheck: Done. [ 163.307115][ T6519] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 163.894489][ T6530] ntfs3: loop2: Failed to read $UpCase (-4). [ 164.292982][ T5775] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 164.421650][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 165.080125][ T6555] loop2: detected capacity change from 0 to 32768 [ 165.124518][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 165.676659][ T6555] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 165.730731][ T6555] XFS (loop2): Ending clean mount [ 165.752861][ T6555] XFS (loop2): Quotacheck needed: Please wait. [ 165.831186][ T6555] XFS (loop2): Quotacheck: Done. [ 166.048593][ T6570] loop3: detected capacity change from 0 to 8 [ 167.830005][ T5774] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 167.981593][ T6581] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.597838][ T6589] loop3: detected capacity change from 0 to 4096 [ 169.611944][ T6589] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.701057][ T6589] EXT4-fs (loop3): Test dummy encryption mode enabled [ 169.780505][ T6589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.958586][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.820764][ T6617] loop0: detected capacity change from 0 to 1024 [ 175.147962][ T6622] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 175.157363][ T6622] overlayfs: missing 'lowerdir' [ 175.289816][ T6624] netlink: 'syz.2.183': attribute type 24 has an invalid length. [ 175.369292][ T6622] mmap: syz.1.182 (6622) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 175.516972][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 176.098675][ T6617] hfsplus: failed to load attributes file [ 176.099253][ T6624] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 176.645929][ T6634] NILFS (nullb0): couldn't find nilfs on the device [ 178.661906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 179.400573][ T6642] loop2: detected capacity change from 0 to 4096 [ 179.441711][ T6642] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.529278][ T6642] EXT4-fs (loop2): Test dummy encryption mode enabled [ 179.568456][ T6642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.917936][ T6661] misc userio: Invalid payload size [ 181.642551][ T27] audit: type=1800 audit(1783750610.200:2): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.188" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 181.824230][ T6670] netlink: 120 bytes leftover after parsing attributes in process `syz.3.191'. [ 182.203075][ T27] audit: type=1800 audit(1783750610.200:3): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.188" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 182.454598][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.185151][ T6676] process 'syz.3.195' launched '/dev/fd/6' with NULL argv: empty string added [ 185.154711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.886588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.018963][ T6701] loop3: detected capacity change from 0 to 128 [ 187.169924][ T6701] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.198044][ T6701] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.026445][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 188.719388][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.013415][ T6715] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 189.792875][ T6724] loop2: detected capacity change from 0 to 1024 [ 189.829901][ T6724] ======================================================= [ 189.829901][ T6724] WARNING: The mand mount option has been deprecated and [ 189.829901][ T6724] and is ignored by this kernel. Remove the mand [ 189.829901][ T6724] option from the mount to silence this warning. [ 189.829901][ T6724] ======================================================= [ 189.918285][ T6724] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 189.918285][ T6724] [ 189.971110][ T6728] Bluetooth: MGMT ver 1.22 [ 190.024712][ T6728] hsr0: entered promiscuous mode [ 190.103867][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 190.145857][ T6728] hsr_slave_0: left promiscuous mode [ 190.163191][ T6728] hsr_slave_1: left promiscuous mode [ 190.318474][ T6728] hsr0 (unregistering): left promiscuous mode [ 190.365289][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 190.848413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.515029][ T6737] vivid-002: kernel_thread() failed [ 193.545686][ T6750] Cannot find add_set index 0 as target [ 194.556827][ T6754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.214'. [ 194.848633][ T6745] sctp: failed to load transform for md5: -2 [ 195.133131][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 195.179225][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.268239][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.283125][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.295377][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.303340][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.311291][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.318867][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.327147][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.339310][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.348764][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.360494][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.369497][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.382783][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.394690][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.408570][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.416190][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.552605][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.606186][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.671086][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.683536][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.692520][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.701465][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.711996][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.722007][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.772011][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.865106][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 195.971823][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 196.235304][ T5843] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 196.437830][ T6780] loop2: detected capacity change from 0 to 128 [ 196.701620][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.04 Device [syz1] on syz1 [ 196.863485][ T5843] usb 1-1: config 0 has no interfaces? [ 196.927933][ T5843] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 197.110327][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.261221][ T5843] usb 1-1: config 0 descriptor?? [ 197.290551][ T6780] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 197.309337][ T6780] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.411623][ T6786] xt_l2tp: unknown flags: 17 [ 198.512267][ T6791] 9pnet_fd: Insufficient options for proto=fd [ 198.513768][ T6768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.521258][ T6791] netlink: 'syz.3.218': attribute type 10 has an invalid length. [ 198.528491][ T6768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.615934][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 198.617345][ T6791] team0: Port device netdevsim0 added [ 198.622512][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 198.622576][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 198.641653][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 198.978380][ T5781] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 198.996401][ T23] usb 1-1: USB disconnect, device number 2 [ 199.633301][ T6798] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 199.642259][ T6798] overlayfs: missing 'lowerdir' [ 200.546910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 200.853096][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.819939][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.826464][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.333448][ T6815] loop0: detected capacity change from 0 to 128 [ 202.424408][ T6818] loop1: detected capacity change from 0 to 1024 [ 202.465823][ T6815] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.562953][ T6815] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 203.919057][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.624962][ T6835] bridge1: entered promiscuous mode [ 204.883381][ T6837] loop0: detected capacity change from 0 to 128 [ 206.504579][ T27] audit: type=1326 audit(1783750633.464:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.0.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 206.997411][ T27] audit: type=1326 audit(1783750633.464:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.0.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 207.025745][ T27] audit: type=1326 audit(1783750633.473:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.0.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 207.049555][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.143833][ T27] audit: type=1326 audit(1783750633.473:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.0.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 207.271623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.459984][ T27] audit: type=1326 audit(1783750633.473:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.0.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 207.734272][ T27] audit: type=1326 audit(1783750633.473:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.0.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 207.921430][ T27] audit: type=1326 audit(1783750633.473:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.0.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 207.972330][ T27] audit: type=1326 audit(1783750633.473:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.0.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 207.988139][ T6851] loop0: detected capacity change from 0 to 4096 [ 207.997396][ T27] audit: type=1326 audit(1783750633.492:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.0.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 208.017474][ T6851] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.041142][ T27] audit: type=1326 audit(1783750633.492:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.0.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 208.166195][ T6851] EXT4-fs (loop0): Test dummy encryption mode enabled [ 208.253747][ T6851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.361032][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.414824][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.238'. [ 210.908612][ T6884] loop1: detected capacity change from 0 to 128 [ 210.939308][ T6884] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.970029][ T6890] loop2: detected capacity change from 0 to 128 [ 211.249386][ T6884] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.017586][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 213.017601][ T27] audit: type=1326 audit(1783750638.798:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5a99de59 code=0x7ffc0000 [ 213.263333][ T27] audit: type=1326 audit(1783750638.798:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5a99de59 code=0x7ffc0000 [ 213.415645][ T27] audit: type=1326 audit(1783750638.807:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f1c5a99de59 code=0x7ffc0000 [ 213.423448][ T6900] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 213.477042][ T27] audit: type=1326 audit(1783750638.807:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5a99de59 code=0x7ffc0000 [ 214.596379][ T27] audit: type=1326 audit(1783750638.807:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5a99de59 code=0x7ffc0000 [ 214.718067][ T6907] loop0: detected capacity change from 0 to 32768 [ 214.719041][ T27] audit: type=1326 audit(1783750638.817:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c5a99de59 code=0x7ffc0000 [ 214.803629][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.829304][ T27] audit: type=1326 audit(1783750638.826:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5a99de59 code=0x7ffc0000 [ 214.887793][ T6907] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 214.949349][ T27] audit: type=1326 audit(1783750638.826:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5a99de59 code=0x7ffc0000 [ 215.030641][ T6907] XFS (loop0): Ending clean mount [ 215.063070][ T27] audit: type=1326 audit(1783750638.826:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1c5a99de59 code=0x7ffc0000 [ 215.142508][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.246'. [ 215.360850][ T6907] XFS (loop0): Quotacheck needed: Please wait. [ 215.857176][ T6907] XFS (loop0): Quotacheck: Done. [ 215.898645][ T27] audit: type=1326 audit(1783750638.826:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5a99de59 code=0x7ffc0000 [ 216.849785][ T5775] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 217.983987][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 218.007902][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.015449][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.040074][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.047645][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.072189][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.079746][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.093356][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.100883][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.203877][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.252839][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.291196][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.438233][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.474226][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.482105][ T56] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 218.519632][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.853641][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.894976][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.902517][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.914817][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.922395][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.930766][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.938611][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.947158][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.955266][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.963180][ T56] usb 2-1: config 0 has no interfaces? [ 218.968769][ T56] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 219.019197][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 219.040467][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.049199][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 219.080510][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 219.089402][ T56] usb 2-1: config 0 descriptor?? [ 219.108452][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 219.133564][ T8] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.04 Device [syz1] on syz1 [ 219.526150][ T6947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.654495][ T6947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.673706][ T5781] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 219.675555][ T1190] usb 2-1: USB disconnect, device number 2 [ 219.710079][ T6958] fido_id[6958]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 220.617135][ T6963] netlink: 'syz.3.254': attribute type 10 has an invalid length. [ 221.410225][ T6963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.254'. [ 221.460180][ T6963] team0: Port device geneve0 added [ 223.191970][ T6986] loop3: detected capacity change from 0 to 4096 [ 223.224002][ T6986] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.304309][ T6986] EXT4-fs (loop3): Test dummy encryption mode enabled [ 223.321755][ T6986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.427163][ T6995] Cannot find del_set index 0 as target [ 224.850067][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 224.850085][ T27] audit: type=1800 audit(1783750650.542:52): pid=7000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.261" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 225.480010][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.498184][ T27] audit: type=1800 audit(1783750650.542:53): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.261" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 225.962666][ T7017] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 225.971801][ T7017] overlayfs: missing 'lowerdir' [ 226.722944][ T7019] netlink: 36 bytes leftover after parsing attributes in process `syz.3.269'. [ 228.709981][ T7040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.274'. [ 228.816330][ T7044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.276'. [ 228.992650][ T7047] xt_hashlimit: max too large, truncated to 1048576 [ 229.543657][ T5781] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 236.036367][ T7105] xt_CT: No such helper "pptp" [ 236.068285][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 236.506307][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 236.517820][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 238.129835][ T23] usb 1-1: config 131 has an invalid interface number: 27 but max is 0 [ 238.138670][ T23] usb 1-1: config 131 has no interface number 0 [ 238.145233][ T23] usb 1-1: config 131 interface 27 has no altsetting 0 [ 238.155694][ T23] usb 1-1: New USB device found, idVendor=0711, idProduct=0230, bcdDevice=e0.e9 [ 238.330653][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.350414][ T23] usb 1-1: Product: syz [ 238.443270][ T23] usb 1-1: Manufacturer: syz [ 238.448255][ T23] usb 1-1: SerialNumber: syz [ 239.154782][ T23] usb 1-1: can't set config #131, error -71 [ 239.207770][ T23] usb 1-1: USB disconnect, device number 3 [ 240.572063][ T7148] syz.1.302 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 242.592361][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 244.061899][ T7179] ubi0: attaching mtd0 [ 244.105946][ T7179] ubi0: scanning is finished [ 244.111708][ T7179] ubi0: empty MTD device detected [ 244.392244][ T7179] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 245.532334][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.542907][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.552806][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.563340][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.573235][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.583787][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.593663][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.604159][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.698211][ T27] audit: type=1800 audit(1783750669.956:54): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.314" name="file0" dev="overlay" ino=481 res=0 errno=0 [ 247.741716][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1 [ 247.762275][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.003328][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.012183][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.019754][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.450478][ T7213] tipc: Can't bind to reserved service type 1 [ 248.537369][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.546008][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.553445][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.566303][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.575496][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.784287][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 248.794880][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.803403][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.816028][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.827638][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.835287][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.845591][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.853112][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.879702][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.907494][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.914943][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.956511][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 249.018820][ T23] usb 3-1: config 0 has no interfaces? [ 249.047898][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 249.069357][ T23] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 249.125491][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 249.174366][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.205869][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 249.316909][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 249.396712][ T23] usb 3-1: config 0 descriptor?? [ 249.446080][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 249.545126][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 249.645329][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 249.847063][ T1190] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.04 Device [syz1] on syz1 [ 250.187522][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.295799][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.306112][ T7228] Bluetooth: MGMT ver 1.22 [ 250.313572][ T7228] Bluetooth: hci0: unsupported parameter 255 [ 250.321374][ T7228] Bluetooth: hci0: unsupported parameter 255 [ 250.459586][ T5781] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 250.473936][ T5844] usb 3-1: USB disconnect, device number 2 [ 250.551433][ T7227] fido_id[7227]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 256.339913][ T7258] loop1: detected capacity change from 0 to 128 [ 256.579260][ T7260] loop0: detected capacity change from 0 to 512 [ 256.685276][ T27] audit: type=1326 audit(1783750680.432:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d119de59 code=0x7ffc0000 [ 256.834049][ T27] audit: type=1326 audit(1783750680.432:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d119de59 code=0x7ffc0000 [ 257.457177][ T27] audit: type=1326 audit(1783750680.432:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f35d119de59 code=0x7ffc0000 [ 257.505195][ T7260] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.336: corrupted inode contents [ 257.540183][ T27] audit: type=1326 audit(1783750680.432:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d119de59 code=0x7ffc0000 [ 257.596281][ T7260] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 257.640282][ T7260] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.336: corrupted inode contents [ 257.681687][ T27] audit: type=1326 audit(1783750680.432:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d119de59 code=0x7ffc0000 [ 257.705782][ T7260] EXT4-fs error (device loop0): ext4_evict_inode:302: inode #15: comm syz.0.336: mark_inode_dirty error [ 257.717551][ T27] audit: type=1326 audit(1783750680.442:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35d119de59 code=0x7ffc0000 [ 257.743604][ T27] audit: type=1326 audit(1783750680.442:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d119de59 code=0x7ffc0000 [ 257.776129][ T27] audit: type=1326 audit(1783750680.442:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d119de59 code=0x7ffc0000 [ 257.781188][ T7260] EXT4-fs (loop0): 1 orphan inode deleted [ 257.802368][ T27] audit: type=1326 audit(1783750680.442:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f35d119de59 code=0x7ffc0000 [ 257.871647][ T7260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.894825][ T27] audit: type=1326 audit(1783750680.442:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d119de59 code=0x7ffc0000 [ 259.281331][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.109246][ T7333] netlink: 'syz.0.341': attribute type 21 has an invalid length. [ 264.117311][ T7333] netlink: 132 bytes leftover after parsing attributes in process `syz.0.341'. [ 264.807203][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 265.852231][ T7349] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 266.127433][ T7350] loop1: detected capacity change from 0 to 8192 [ 267.267569][ T7364] loop0: detected capacity change from 0 to 512 [ 267.275132][ T7364] EXT4-fs: Ignoring removed orlov option [ 267.296886][ T7364] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 267.378749][ T7364] EXT4-fs (loop0): 1 truncate cleaned up [ 267.385960][ T7364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.464031][ T7379] loop2: detected capacity change from 0 to 128 [ 267.468127][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.489734][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.998035][ T7379] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 268.014589][ T56] IPVS: starting estimator thread 0... [ 268.069908][ T7379] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 268.171959][ T7383] IPVS: using max 24 ests per chain, 57600 per kthread [ 268.360950][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.647566][ T7389] syz.2.350 (pid 7389) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 269.255471][ T56] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 269.547662][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.604107][ T56] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 269.626688][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.085030][ T56] usb 2-1: Product: syz [ 270.117841][ T56] usb 2-1: Manufacturer: syz [ 270.142314][ T56] usb 2-1: SerialNumber: syz [ 271.817522][ T56] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 271.845862][ T56] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 272.004168][ T56] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 272.177384][ T56] lan78xx: probe of 2-1:1.0 failed with error -32 [ 272.365585][ T7417] loop2: detected capacity change from 0 to 32768 [ 272.508138][ T7417] JBD2: Ignoring recovery information on journal [ 272.549720][ T7417] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 273.131369][ T56] usb 2-1: USB disconnect, device number 3 [ 275.399645][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 276.519002][ T56] IPVS: starting estimator thread 0... [ 276.625684][ T7455] loop0: detected capacity change from 0 to 16 [ 276.660410][ T7443] IPVS: using max 21 ests per chain, 50400 per kthread [ 276.668075][ T7455] erofs: (device loop0): mounted with root inode @ nid 36. [ 278.693214][ T7466] IPVS: ip_vs_add_dest(): server weight less than zero [ 278.764770][ T7466] IPVS: rr: FWM 3 0x00000003 - no destination available [ 281.088844][ T7492] NILFS (nullb0): couldn't find nilfs on the device [ 290.171316][ T7556] qrtr: Invalid version 0 [ 291.306773][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 291.306963][ T27] audit: type=1326 audit(1783750712.834:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.2.399" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c5a99de59 code=0x0 [ 293.785396][ T7575] netlink: 60 bytes leftover after parsing attributes in process `syz.3.401'. [ 294.479037][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.487417][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.809777][ T7591] loop1: detected capacity change from 0 to 1024 [ 295.820772][ T7591] hfsplus: unable to parse mount options [ 295.904261][ T5766] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 296.903937][ T5781] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 305.830433][ T7668] loop1: detected capacity change from 0 to 512 [ 305.896376][ T7668] EXT4-fs: Ignoring removed bh option [ 305.969305][ T7668] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 306.266283][ T7668] EXT4-fs (loop1): 1 truncate cleaned up [ 306.297471][ T7668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.083877][ T7678] IPVS: Error connecting to the multicast addr [ 307.816838][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.004446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 311.246472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 311.284704][ T7697] loop0: detected capacity change from 0 to 128 [ 311.814442][ T7697] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.827251][ T7697] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.730596][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.799553][ T7754] netlink: 36 bytes leftover after parsing attributes in process `syz.1.441'. [ 321.018170][ T7758] loop2: detected capacity change from 0 to 16 [ 321.061353][ T7758] erofs: (device loop2): mounted with root inode @ nid 36. [ 321.079012][ T7758] syz.2.443: attempt to access beyond end of device [ 321.079012][ T7758] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 321.126386][ T7758] syz.2.443: attempt to access beyond end of device [ 321.126386][ T7758] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 321.141459][ T7758] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 321.166469][ T27] audit: type=1800 audit(1783750740.756:79): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.443" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 321.643020][ T7762] IPVS: ip_vs_add_dest(): server weight less than zero [ 323.878199][ T5781] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 324.550327][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'. [ 325.018067][ T7801] loop3: detected capacity change from 0 to 736 [ 325.079819][ T5766] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 325.135202][ T7800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.330647][ T7808] IPVS: ip_vs_add_dest(): server weight less than zero [ 325.343487][ T7808] IPVS: rr: FWM 3 0x00000003 - no destination available [ 327.120375][ T7823] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 328.364361][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'. [ 328.399847][ T5781] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 328.664116][ T7820] binder: 7819:7820 ioctl 4018620d 0 returned -22 [ 328.836809][ T7842] lo speed is unknown, defaulting to 1000 [ 328.844247][ T7842] lo speed is unknown, defaulting to 1000 [ 328.860549][ T7842] lo speed is unknown, defaulting to 1000 [ 328.886748][ T7842] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 328.923941][ T7842] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 329.012812][ T7842] lo speed is unknown, defaulting to 1000 [ 329.025096][ T7842] lo speed is unknown, defaulting to 1000 [ 329.038295][ T7842] lo speed is unknown, defaulting to 1000 [ 329.075538][ T7842] lo speed is unknown, defaulting to 1000 [ 330.573328][ T5782] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 331.428327][ T5782] usb 2-1: Using ep0 maxpacket: 32 [ 333.214870][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.221228][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.228060][ T5782] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 333.238143][ T5782] usb 2-1: can't read configurations, error -71 [ 335.986222][ T7884] syz.3.477: attempt to access beyond end of device [ 335.986222][ T7884] loop3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 336.000609][ T7884] gfs2: error 10 reading superblock [ 336.810851][ T5781] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 353.649133][ T27] audit: type=1326 audit(1783750771.129:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.3.502" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f71cdb9de59 code=0x0 [ 355.222463][ T8001] netlink: 'syz.1.505': attribute type 3 has an invalid length. [ 355.230484][ T8001] netlink: 'syz.1.505': attribute type 3 has an invalid length. [ 355.242039][ T8001] netlink: 'syz.1.505': attribute type 3 has an invalid length. [ 355.274608][ T8001] netlink: 'syz.1.505': attribute type 3 has an invalid length. [ 355.306319][ T8001] netlink: 'syz.1.505': attribute type 3 has an invalid length. [ 355.469059][ T8001] netlink: 'syz.1.505': attribute type 3 has an invalid length. [ 355.479986][ T8001] netlink: 'syz.1.505': attribute type 3 has an invalid length. [ 355.490830][ T8001] netlink: 'syz.1.505': attribute type 3 has an invalid length. [ 355.503372][ T8001] netlink: 'syz.1.505': attribute type 3 has an invalid length. [ 355.523017][ T8001] netlink: 'syz.1.505': attribute type 3 has an invalid length. [ 356.997301][ T8014] input: syz1 as /devices/virtual/input/input8 [ 357.544770][ T8020] loop3: detected capacity change from 0 to 512 [ 357.618080][ T8020] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 357.650589][ T8020] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 357.684508][ T8020] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.512: Invalid inode table block 1 in block_group 0 [ 357.770242][ T8020] EXT4-fs (loop3): get root inode failed [ 357.780762][ T8020] EXT4-fs (loop3): mount failed [ 360.598170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.158003][ T8063] ubi0: attaching mtd0 [ 363.171655][ T8063] ubi0: scanning is finished [ 363.685013][ T8063] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 363.852358][ T27] audit: type=1326 audit(1783750780.581:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.0.517" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27bdf9de59 code=0x0 [ 365.316031][ T8080] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 365.346626][ T8080] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 366.182248][ T8081] xt_TPROXY: Can be used only with -p tcp or -p udp [ 375.811563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 379.926226][ T8173] ubi0: attaching mtd0 [ 379.931569][ T8173] ubi0: scanning is finished [ 379.989760][ T8173] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 379.997403][ T8173] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 380.004853][ T8173] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 380.011980][ T8173] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 380.019519][ T8173] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 380.026434][ T8173] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 380.034529][ T8173] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1860211455 [ 380.044678][ T8173] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 380.087743][ T8177] ubi0: background thread "ubi_bgt0d" started, PID 8177 [ 382.793274][ T8190] No such timeout policy "syz1" [ 384.266899][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 394.940754][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 398.797626][ T8249] ceph: No mds server is up or the cluster is laggy [ 398.819516][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 398.951559][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 398.958563][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.964428][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 401.726025][ T8280] loop3: detected capacity change from 0 to 128 [ 402.376662][ T8280] FAT-fs (loop3): Directory bread(block 414) failed [ 402.384105][ T8280] FAT-fs (loop3): Directory bread(block 415) failed [ 402.391108][ T8280] FAT-fs (loop3): Directory bread(block 416) failed [ 402.398319][ T8280] FAT-fs (loop3): Directory bread(block 417) failed [ 402.407297][ T8280] FAT-fs (loop3): Directory bread(block 418) failed [ 402.414936][ T8280] FAT-fs (loop3): Directory bread(block 419) failed [ 402.421942][ T8280] FAT-fs (loop3): Directory bread(block 420) failed [ 402.428605][ T8280] FAT-fs (loop3): Directory bread(block 421) failed [ 403.911775][ T8284] loop0: detected capacity change from 0 to 32768 [ 405.751995][ T8284] read_mapping_page failed! [ 414.095878][ T8325] futex_wake_op: syz.1.584 tries to shift op by 144; fix this program [ 416.846001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 419.894830][ T5781] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 422.258365][ T8368] ipt_REJECT: ECHOREPLY no longer supported. [ 423.287741][ T8379] loop1: detected capacity change from 0 to 512 [ 423.413081][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.595'. [ 424.156072][ T8384] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 426.105543][ T8379] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.596: bad orphan inode 11862016 [ 426.134003][ T8379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 426.147216][ T8379] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.298457][ T8382] binder: 8380:8382 ioctl 4018620d 0 returned -22 [ 427.921590][ T8408] netlink: 'syz.0.603': attribute type 11 has an invalid length. [ 428.903914][ T8410] loop3: detected capacity change from 0 to 1024 [ 429.784928][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 430.032631][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 430.255430][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.469741][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 430.679378][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 430.794556][ T23] usb 1-1: Product: syz [ 430.803357][ T23] usb 1-1: Manufacturer: syz [ 430.811722][ T23] usb 1-1: SerialNumber: syz [ 430.866527][ T8427] validate_nla: 44 callbacks suppressed [ 430.866570][ T8427] netlink: 'syz.2.600': attribute type 1 has an invalid length. [ 431.116872][ T8416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.129330][ T8416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.157641][ T8430] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 431.175326][ T23] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 431.190617][ T8430] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 431.233282][ T8430] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 431.260742][ T8430] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 431.310447][ T8430] bond1: (slave geneve2): making interface the new active one [ 431.340798][ T8430] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 431.351916][ T8432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.600'. [ 431.365156][ T8432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.408675][ T23] usb 1-1: USB disconnect, device number 4 [ 431.436534][ T23] usblp0: removed [ 431.447767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.466249][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.479419][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.490073][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.501326][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.512620][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.523944][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.535934][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.547692][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.557645][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.569107][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.579206][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.591120][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.678362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.133839][ T8445] loop0: detected capacity change from 0 to 64 [ 433.241508][ T8448] loop1: detected capacity change from 0 to 512 [ 434.292497][ T8454] xt_l2tp: v2 sid > 0xffff: 117440512 [ 434.619811][ T8448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 434.876862][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.978006][ T27] audit: type=1800 audit(1783750847.099:82): pid=8445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.610" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 435.030515][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 441.236251][ T8502] befs: (nullb0): invalid magic header [ 441.679956][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 442.423059][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.202256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 444.538441][ T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 444.643357][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.822218][ T8] usb 2-1: config 0 descriptor?? [ 444.842029][ T8] usb 2-1: can't set config #0, error -71 [ 444.945770][ T8] usb 2-1: USB disconnect, device number 6 [ 450.692365][ T8549] pimreg: left allmulticast mode [ 451.698474][ T8559] befs: (nullb0): invalid magic header [ 452.013771][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 452.374771][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.395594][ T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 452.404948][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.421807][ T8] usb 3-1: config 0 descriptor?? [ 453.975727][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 454.136708][ T8559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.145650][ T8559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.209369][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 454.516690][ T5784] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 454.650680][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 455.489101][ C0] hrtimer: interrupt took 24251 ns [ 456.091295][ T8] pwc: recv_control_msg error -71 req 04 val 1000 [ 456.124612][ T8] pwc: recv_control_msg error -71 req 04 val 1300 [ 456.173648][ T8] pwc: recv_control_msg error -71 req 04 val 1400 [ 456.357863][ T8] pwc: recv_control_msg error -71 req 02 val 2000 [ 456.365292][ T8] pwc: recv_control_msg error -71 req 02 val 2100 [ 456.372323][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 456.379874][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 456.387477][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 456.394510][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 456.414625][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 456.757456][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 456.783891][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 456.831446][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 456.994768][ T8] pwc: Registered as video103. [ 457.060395][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 457.475654][ T8] usb 3-1: USB disconnect, device number 3 [ 460.366021][ T8611] loop2: detected capacity change from 0 to 32768 [ 464.604983][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.611419][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.467583][ T8651] befs: (nullb0): invalid magic header [ 467.668721][ T5815] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 467.981655][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.126552][ T8665] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 468.147384][ T8665] VFS: Can't find a romfs filesystem on dev nullb0. [ 468.147384][ T8665] [ 469.170381][ T5815] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 469.179797][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.232118][ T5815] usb 4-1: config 0 descriptor?? [ 469.274487][ T5815] usb 4-1: can't set config #0, error -71 [ 469.292758][ T5815] usb 4-1: USB disconnect, device number 2 [ 471.309618][ T5784] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 474.340122][ T8682] loop3: detected capacity change from 0 to 32768 [ 474.621473][ T5784] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 474.960422][ T8682] read_mapping_page failed! [ 477.618081][ T8708] futex_wake_op: syz.1.673 tries to shift op by 144; fix this program [ 477.665629][ T8715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.674'. [ 478.335815][ T8715] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 478.397480][ T8715] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 478.407151][ T8715] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 479.478333][ T8725] netlink: 'syz.3.676': attribute type 9 has an invalid length. [ 482.456685][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'. [ 483.086886][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.094280][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.924788][ T5784] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 487.177995][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 488.051002][ T8762] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 488.058183][ T8762] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 488.065214][ T8762] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 488.071388][ T8762] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 488.122084][ T8762] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 488.130955][ T8762] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 488.137297][ T8762] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 488.147151][ T8762] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 490.238401][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 490.244492][ T5784] Bluetooth: hci1: command 0x0c1a tx timeout [ 490.244557][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 490.323489][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 490.698178][ T5778] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 492.661704][ T8798] loop2: detected capacity change from 0 to 32768 [ 493.443590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 493.855760][ T8803] loop0: detected capacity change from 0 to 1024 [ 493.949871][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 494.015735][ T27] audit: type=1326 audit(1783750902.386:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 494.031200][ T7975] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 494.134986][ T27] audit: type=1326 audit(1783750902.386:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 494.268717][ T27] audit: type=1326 audit(1783750902.386:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 494.386561][ T27] audit: type=1326 audit(1783750902.424:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 494.455468][ T8809] block device autoloading is deprecated and will be removed. [ 494.476998][ T8803] loop0: detected capacity change from 0 to 512 [ 494.527122][ T27] audit: type=1326 audit(1783750902.424:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 494.651111][ T27] audit: type=1326 audit(1783750902.424:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 494.790962][ T27] audit: type=1326 audit(1783750902.424:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 494.857977][ T27] audit: type=1326 audit(1783750902.424:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 495.019399][ T27] audit: type=1326 audit(1783750902.424:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 495.019444][ T27] audit: type=1326 audit(1783750902.424:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bdf9de59 code=0x7ffc0000 [ 495.186835][ T8827] syz.1.697: attempt to access beyond end of device [ 495.186835][ T8827] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 495.187172][ T8827] SQUASHFS error: Failed to read block 0x0: -5 [ 496.420025][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 496.662121][ T8803] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 496.888583][ T8822] tty tty2: ldisc open failed (-12), clearing slot 1 [ 498.325023][ T8851] loop3: detected capacity change from 0 to 2048 [ 498.405708][ T5778] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 498.475675][ T8848] loop2: detected capacity change from 0 to 128 [ 498.503910][ T8848] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 498.536640][ T8848] ext4 filesystem being mounted at /181/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 498.631586][ T8856] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 498.671800][ T8851] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 500.405467][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 500.683281][ T8863] loop2: detected capacity change from 0 to 256 [ 500.733138][ T8863] FAT-fs (loop2): "posix" option is obsolete, not supported now [ 504.605858][ T5778] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 505.310941][ T8905] loop3: detected capacity change from 0 to 2048 [ 505.669488][ T8905] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 505.965941][ T8905] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 506.860239][ T41] Bluetooth: (null): Invalid header checksum [ 506.866572][ T41] Bluetooth: (null): Invalid header checksum [ 506.873680][ T41] Bluetooth: (null): Invalid header checksum [ 507.289546][ T8921] bridge_slave_1: left allmulticast mode [ 507.309396][ T8921] bridge_slave_1: left promiscuous mode [ 507.327036][ T8921] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.400608][ T8921] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 507.426590][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'. [ 507.519439][ T8924] binder: 8918:8924 ioctl c0306201 200000000240 returned -14 [ 509.517661][ T5778] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 509.529155][ T23] libceph: connect (1)[c::]:6789 error -101 [ 509.550033][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 510.546846][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 510.565202][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 510.818486][ T8941] ceph: No mds server is up or the cluster is laggy [ 510.858476][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 510.901218][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 513.092325][ T5778] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 515.349780][ T5778] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 516.247007][ T8987] trusted_key: syz.1.733 sent an empty control message without MSG_MORE. [ 517.243125][ T8975] binder: 8973:8975 ioctl c0306201 200000000240 returned -14 [ 518.088085][ T9004] bridge_slave_1: left allmulticast mode [ 518.095736][ T9004] bridge_slave_1: left promiscuous mode [ 518.104493][ T9004] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.188891][ T9004] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 520.844571][ T5781] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 520.931698][ T5778] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 521.660687][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 521.725538][ T9030] loop3: detected capacity change from 0 to 256 [ 522.404718][ T5778] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 522.953371][ T23] libceph: connect (1)[c::]:6789 error -101 [ 522.970205][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 523.248220][ T23] libceph: connect (1)[c::]:6789 error -101 [ 523.254310][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 523.530855][ T9035] ceph: No mds server is up or the cluster is laggy [ 524.369328][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.745'. [ 524.378512][ T9055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.411441][ T9055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.446100][ T9055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.453556][ T9055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.254449][ T5778] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 527.377362][ T9090] binder: 9085:9090 ioctl c0306201 200000000240 returned -14 [ 527.802833][ T9099] netlink: 'syz.0.751': attribute type 9 has an invalid length. [ 528.053388][ T9098] bridge_slave_1: left allmulticast mode [ 528.122329][ T9098] bridge_slave_1: left promiscuous mode [ 528.189843][ T9098] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.444950][ T9098] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 529.879091][ T27] kauditd_printk_skb: 64 callbacks suppressed [ 529.879184][ T27] audit: type=1800 audit(1783751191.951:157): pid=9114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.752" name="/" dev="fuse" ino=4 res=0 errno=0 [ 530.249993][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 530.256445][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 530.952306][ T9122] netlink: 72 bytes leftover after parsing attributes in process `syz.2.753'. [ 531.795707][ T5778] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 534.477998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 536.014533][ T9149] netlink: 'syz.1.762': attribute type 9 has an invalid length. [ 536.336531][ T9149] vivid-007: kernel_thread() failed [ 536.418268][ T9140] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 536.712129][ T9162] bridge_slave_1: left allmulticast mode [ 536.721537][ T9159] loop1: detected capacity change from 0 to 4096 [ 536.739536][ T9162] bridge_slave_1: left promiscuous mode [ 536.756235][ T9159] EXT4-fs (loop1): invalid inodes per group: 204800 [ 536.756235][ T9159] [ 536.770155][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.790781][ T9162] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 537.655445][ T9165] syz.1.765 (9165): drop_caches: 2 [ 546.117618][ T9198] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 552.083135][ T9247] loop1: detected capacity change from 0 to 128 [ 552.111181][ T9247] FAT-fs (loop1): Unrecognized mount option "fmask=0000000000000000ăĄ3Oošjnonumtail=0" or missing value [ 552.132631][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.434516][ T27] audit: type=1800 audit(1783751213.680:158): pid=9255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.786" name="/" dev="fuse" ino=4 res=0 errno=0 [ 553.866611][ T5778] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 554.515637][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 557.022822][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 559.560928][ T5813] Process accounting resumed [ 559.929516][ T9289] Process accounting resumed [ 561.608478][ T9304] netlink: 'syz.3.799': attribute type 11 has an invalid length. [ 561.618366][ T9304] netlink: 44 bytes leftover after parsing attributes in process `syz.3.799'. [ 562.003498][ T9304] ip6erspan0: entered allmulticast mode [ 562.132713][ T9304] ALSA: mixer_oss: invalid OSS volume '' [ 564.419792][ T5778] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 566.002348][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'. [ 566.025928][ T9337] netlink: 48 bytes leftover after parsing attributes in process `syz.1.807'. [ 566.298037][ T9349] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.387789][ T9349] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.396221][ T9349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.530482][ T9349] team0: Port device bridge0 added [ 569.663690][ T9370] loop3: detected capacity change from 0 to 32768 [ 569.703344][ T9370] (syz.3.815,9370,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 569.721368][ T9370] (syz.3.815,9370,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 569.775837][ T9370] JBD2: Ignoring recovery information on journal [ 569.826432][ T9370] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 569.959193][ T9379] netlink: 'syz.2.817': attribute type 9 has an invalid length. [ 570.878364][ T9379] vivid-007: kernel_thread() failed [ 571.070383][ T9383] block nbd0: NBD_DISCONNECT [ 573.561252][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 576.567422][ T9419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.825'. [ 576.576710][ T9419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.825'. [ 576.585940][ T9419] netlink: 6 bytes leftover after parsing attributes in process `syz.1.825'. [ 578.917842][ T9434] loop3: detected capacity change from 0 to 256 [ 580.011610][ T9438] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 584.113535][ T9461] netlink: 120 bytes leftover after parsing attributes in process `syz.1.836'. [ 587.427819][ T9480] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 588.084372][ T9487] syz.3.842: attempt to access beyond end of device [ 588.084372][ T9487] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 588.097904][ T9487] syz.3.842: attempt to access beyond end of device [ 588.097904][ T9487] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 588.110882][ T9487] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 588.121115][ T9487] syz.3.842: attempt to access beyond end of device [ 588.121115][ T9487] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 588.134222][ T9487] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 588.143904][ T9487] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 588.151649][ T9487] UDF-fs: Scanning with blocksize 512 failed [ 588.159865][ T9487] syz.3.842: attempt to access beyond end of device [ 588.159865][ T9487] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 588.173116][ T9487] syz.3.842: attempt to access beyond end of device [ 588.173116][ T9487] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 588.186227][ T9487] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 588.196107][ T9487] syz.3.842: attempt to access beyond end of device [ 588.196107][ T9487] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 588.209581][ T9487] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 588.220700][ T9487] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 588.228410][ T9487] UDF-fs: Scanning with blocksize 1024 failed [ 588.235461][ T9487] syz.3.842: attempt to access beyond end of device [ 588.235461][ T9487] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 588.248599][ T9487] syz.3.842: attempt to access beyond end of device [ 588.248599][ T9487] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 588.261779][ T9487] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 588.271660][ T9487] syz.3.842: attempt to access beyond end of device [ 588.271660][ T9487] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 588.284896][ T9487] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 588.294563][ T9487] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 588.302245][ T9487] UDF-fs: Scanning with blocksize 2048 failed [ 588.309080][ T9487] syz.3.842: attempt to access beyond end of device [ 588.309080][ T9487] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 588.322524][ T9487] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 588.332476][ T9487] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 588.342263][ T9487] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 588.350115][ T9487] UDF-fs: Scanning with blocksize 4096 failed [ 588.356213][ T9487] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 591.699259][ T9501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.847'. [ 594.077829][ T9507] netlink: 'syz.0.846': attribute type 2 has an invalid length. [ 594.590655][ T9522] ip6erspan0: entered allmulticast mode [ 595.906328][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 595.912833][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 602.104134][ T9556] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 602.657814][ T5778] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 602.882757][ T9566] mac80211_hwsim hwsim5 »»»»»»: renamed from wlan0 (while UP) [ 604.750032][ T9574] tipc: Started in network mode [ 604.755112][ T9574] tipc: Node identity 4, cluster identity 4711 [ 604.761514][ T9574] tipc: Node number set to 4 [ 606.771237][ T9588] tipc: New replicast peer: 255.255.255.255 [ 606.780836][ T9588] tipc: Enabled bearer , priority 10 [ 606.791255][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'. [ 609.483537][ T9593] futex_wake_op: syz.0.866 tries to shift op by 144; fix this program [ 609.500265][ T5813] tipc: Node number set to 3858558459 [ 609.563422][ T5781] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 611.278360][ T5781] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 612.416091][ T5781] Bluetooth: hci3: Injecting HCI hardware error event [ 612.424375][ T5781] Bluetooth: hci3: hardware error 0x00 [ 614.679029][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 614.685326][ T5781] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 615.609018][ T9598] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 615.660387][ T9598] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 615.695610][ T9598] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 617.881091][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 617.968237][ T5778] Bluetooth: hci1: command 0x0c1a tx timeout [ 620.261742][ T9652] syzkaller0: entered promiscuous mode [ 620.267740][ T9652] syzkaller0: entered allmulticast mode [ 621.504151][ T9652] tipc: Enabled bearer , priority 0 [ 622.483425][ T23] tipc: Resetting bearer [ 622.658341][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 622.672679][ T9670] loop0: detected capacity change from 0 to 512 [ 622.690738][ T9670] EXT4-fs: Conflicting test_dummy_encryption options [ 624.105248][ T23] tipc: Disabling bearer [ 624.223283][ T9674] loop1: detected capacity change from 0 to 512 [ 624.248752][ T9674] ext4: Unknown parameter 'context' [ 624.943007][ T8574] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 625.190816][ T56] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 625.397468][ T56] usb 3-1: Using ep0 maxpacket: 32 [ 625.448405][ T56] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.696267][ T56] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 625.776382][ T5843] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 625.900903][ T56] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 625.924797][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.121377][ T56] usb 3-1: Product: syz [ 626.126166][ T56] usb 3-1: Manufacturer: syz [ 626.130858][ T56] usb 3-1: SerialNumber: syz [ 626.140352][ T56] usb 3-1: config 0 descriptor?? [ 626.347258][ T9692] loop1: detected capacity change from 0 to 8 [ 627.574437][ T5843] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 627.591763][ T5843] usb 1-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 627.603050][ T5843] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 627.612459][ T5843] usb 1-1: config 150 has no interface number 0 [ 627.618979][ T5843] usb 1-1: config 150 interface 204 has no altsetting 0 [ 627.629133][ T5843] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 627.638421][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.646645][ T5843] usb 1-1: Product: syz [ 627.653432][ T5843] usb 1-1: Manufacturer: syz [ 628.435380][ T5843] usb 1-1: SerialNumber: syz [ 628.475300][ T5843] usb 1-1: can't set config #150, error -71 [ 628.817559][ T9692] SQUASHFS error: xz decompression failed, data probably corrupt [ 628.826106][ T9692] SQUASHFS error: Failed to read block 0x108: -5 [ 628.832849][ T9692] SQUASHFS error: Unable to read metadata cache entry [106] [ 628.840502][ T9692] SQUASHFS error: Unable to read inode 0x11f [ 629.036121][ T5843] usb 1-1: USB disconnect, device number 5 [ 630.311819][ T5813] usb 3-1: USB disconnect, device number 4 [ 630.486602][ T56] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 630.611984][ T9709] loop0: detected capacity change from 0 to 1024 [ 630.619247][ T9709] EXT4-fs: Ignoring removed mblk_io_submit option [ 630.625711][ T9709] EXT4-fs: inline encryption not supported [ 631.095115][ T9709] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 631.335381][ T27] audit: type=1326 audit(1783751286.887:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.0.891" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27bdf9de59 code=0x7fc00000 [ 632.200177][ T9715] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 633.357583][ T56] usb 4-1: unable to get BOS descriptor or descriptor too short [ 633.431392][ T56] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 633.590237][ T56] usb 4-1: can't read configurations, error -71 [ 634.771537][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 637.113349][ T9746] tmpfs: Bad value for 'huge' [ 637.123013][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 637.132584][ T9746] netlink: 43 bytes leftover after parsing attributes in process `syz.3.900'. [ 639.987183][ T9770] loop3: detected capacity change from 0 to 128 [ 641.286498][ T9770] FAT-fs (loop3): Directory bread(block 414) failed [ 641.293487][ T9770] FAT-fs (loop3): Directory bread(block 415) failed [ 641.300487][ T9770] FAT-fs (loop3): Directory bread(block 416) failed [ 641.307110][ T9770] FAT-fs (loop3): Directory bread(block 417) failed [ 641.313814][ T9770] FAT-fs (loop3): Directory bread(block 418) failed [ 641.320466][ T9770] FAT-fs (loop3): Directory bread(block 419) failed [ 641.327087][ T9770] FAT-fs (loop3): Directory bread(block 420) failed [ 641.333768][ T9770] FAT-fs (loop3): Directory bread(block 421) failed [ 641.691070][ T9784] loop0: detected capacity change from 0 to 128 [ 641.903377][ T9784] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 642.176555][ T9784] hpfs: filesystem error: improperly stopped [ 642.182754][ T9784] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 642.190798][ T9784] hpfs: You really don't want any checks? You are crazy... [ 642.198949][ T5778] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 642.206459][ T9784] hpfs: Code page index out of array [ 642.212771][ T9784] hpfs: code page support is disabled [ 642.245730][ T9784] hpfs: hpfs_map_4sectors(): unaligned read [ 642.274018][ T9784] hpfs: hpfs_map_4sectors(): unaligned read [ 642.302083][ T9784] hpfs: filesystem error: unable to find root dir [ 642.645236][ T9793] fuse: Bad value for 'fd' [ 644.108108][ T9807] loop3: detected capacity change from 0 to 4096 [ 644.232190][ T9807] EXT4-fs (loop3): Test dummy encryption mode enabled [ 644.761466][ T9807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.768541][ T9810] loop0: detected capacity change from 0 to 4096 [ 644.860904][ T9810] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 644.933587][ T9810] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 645.891135][ T9807] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 646.146485][ T9835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.917'. [ 647.611043][ T5778] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 647.703073][ T9839] loop0: detected capacity change from 0 to 128 [ 647.734246][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.766113][ T9839] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 647.823757][ T9839] ext4 filesystem being mounted at /211/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 650.068211][ T9858] loop1: detected capacity change from 0 to 128 [ 650.102542][ T9858] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 650.116288][ T9854] netlink: 'syz.3.921': attribute type 1 has an invalid length. [ 650.140328][ T9858] ext4 filesystem being mounted at /232/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 650.167826][ T9854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 650.633223][ T9863] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 651.155701][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 651.242081][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 651.755686][ T9870] netlink: 9 bytes leftover after parsing attributes in process `syz.2.923'. [ 654.155971][ T5781] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 654.162995][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 655.851929][ T9905] loop3: detected capacity change from 0 to 32768 [ 655.912511][ T7975] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 656.365372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.122280][ T5778] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 660.415254][ T9946] loop3: detected capacity change from 0 to 512 [ 660.425232][ T9946] EXT4-fs: quotafile must be on filesystem root [ 660.670926][ T9946] serio: Serial port ttyS3 [ 661.905028][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 661.912058][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 663.413593][ T5778] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 663.755440][ T9981] netlink: 'syz.1.956': attribute type 3 has an invalid length. [ 663.767120][ T9981] netlink: 'syz.1.956': attribute type 3 has an invalid length. [ 663.775466][ T9981] netlink: 'syz.1.956': attribute type 3 has an invalid length. [ 663.783310][ T9981] netlink: 'syz.1.956': attribute type 3 has an invalid length. [ 663.791625][ T9981] netlink: 'syz.1.956': attribute type 3 has an invalid length. [ 663.799880][ T9981] netlink: 'syz.1.956': attribute type 3 has an invalid length. [ 663.807759][ T9981] netlink: 'syz.1.956': attribute type 3 has an invalid length. [ 663.816718][ T9981] netlink: 'syz.1.956': attribute type 3 has an invalid length. [ 663.830478][ T9981] netlink: 'syz.1.956': attribute type 3 has an invalid length. [ 663.849973][ T9981] netlink: 'syz.1.956': attribute type 3 has an invalid length. [ 664.408852][ T9985] loop3: detected capacity change from 0 to 8192 [ 664.572540][ T9985] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 664.769013][ T9985] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 664.806305][ T9985] REISERFS (device loop3): using ordered data mode [ 664.813227][ T9985] reiserfs: using flush barriers [ 664.885415][ T9985] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 664.906528][ T9985] REISERFS (device loop3): checking transaction log (loop3) [ 665.442504][ T9985] REISERFS (device loop3): Using r5 hash to sort names [ 665.640370][ T9985] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 666.150231][T10007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.962'. [ 667.914957][ T5778] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 669.105405][T10025] xt_CT: No such helper "pptp" [ 674.883864][T10058] loop1: detected capacity change from 0 to 32768 [ 675.337031][T10058] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.974 (10058) [ 675.388039][T10058] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 675.401786][T10058] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 675.410919][T10058] BTRFS info (device loop1): metadata ratio 0 [ 675.417124][T10058] BTRFS info (device loop1): turning on sync discard [ 675.424806][T10058] BTRFS info (device loop1): using free space tree [ 676.444032][T10058] BTRFS info (device loop1): enabling ssd optimizations [ 677.291840][ T27] audit: type=1800 audit(1783751329.317:160): pid=10097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.974" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 678.073629][ T5778] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 678.492531][ T5773] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 687.291371][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 689.299999][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 693.225092][T10179] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 693.235593][T10179] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 693.543644][T10199] validate_nla: 41 callbacks suppressed [ 693.543671][T10199] netlink: 'syz.1.1003': attribute type 1 has an invalid length. [ 694.325501][T10199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 695.455619][T10205] bond1: (slave geneve2): making interface the new active one [ 695.499321][T10205] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 696.270611][T10217] capability: warning: `syz.3.1008' uses deprecated v2 capabilities in a way that may be insecure [ 699.526531][T10240] loop0: detected capacity change from 0 to 512 [ 699.723549][T10240] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 699.736519][T10240] EXT4-fs error (device loop0): ext4_get_journal_inode:5820: comm syz.0.1005: inode #1792: comm syz.0.1005: iget: illegal inode # [ 699.755131][T10240] EXT4-fs (loop0): Remounting filesystem read-only [ 699.761788][T10240] EXT4-fs (loop0): no journal found [ 699.767050][T10240] EXT4-fs (loop0): can't get journal size [ 699.969830][T10240] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 699.979814][T10240] EXT4-fs (loop0): failed to initialize system zone (-22) [ 699.987164][T10240] EXT4-fs (loop0): mount failed [ 700.071919][ T5813] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 700.669660][T10245] loop0: detected capacity change from 0 to 32768 [ 701.144112][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 701.160237][T10245] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1015 (10245) [ 701.177862][ T5813] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.202901][T10245] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 701.213276][T10245] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 701.222078][T10245] BTRFS info (device loop0): metadata ratio 0 [ 701.228189][T10245] BTRFS info (device loop0): turning on sync discard [ 701.235000][T10245] BTRFS info (device loop0): using free space tree [ 701.272114][ T5813] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 701.301722][ T5813] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 701.335769][T10245] BTRFS info (device loop0): enabling ssd optimizations [ 701.535558][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.544294][ T5813] usb 2-1: Product: syz [ 701.548955][ T5813] usb 2-1: Manufacturer: syz [ 701.553585][ T5813] usb 2-1: SerialNumber: syz [ 701.561591][ T5813] usb 2-1: config 0 descriptor?? [ 702.267786][ T27] audit: type=1800 audit(1783751352.388:161): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1015" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 703.853463][ T5775] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 706.123213][ T42] usb 2-1: USB disconnect, device number 7 [ 709.083409][T10322] loop3: detected capacity change from 0 to 4096 [ 709.125912][T10322] EXT4-fs (loop3): invalid inodes per group: 204800 [ 709.125912][T10322] [ 709.140061][ T49] Bluetooth: (null): Invalid header checksum [ 709.146257][ T49] Bluetooth: (null): Invalid header checksum [ 710.023416][T10332] syz.3.1029 (10332): drop_caches: 2 [ 710.419992][ T6090] Bluetooth: (null): Invalid header checksum [ 710.426233][ T6090] Bluetooth: (null): Invalid header checksum [ 710.441051][ T6090] Bluetooth: (null): Invalid header checksum [ 710.447434][ T6090] Bluetooth: (null): Invalid header checksum [ 710.454020][ T6090] Bluetooth: (null): Invalid header checksum [ 710.463010][ T6090] Bluetooth: (null): Invalid header checksum [ 710.469182][ T6090] Bluetooth: (null): Invalid header checksum [ 710.475387][ T6090] Bluetooth: (null): Invalid header checksum [ 710.481568][ T6090] Bluetooth: (null): Invalid header checksum [ 710.487716][ T6090] Bluetooth: (null): Invalid header checksum [ 718.337617][T10386] syz.2.1041 (10386): drop_caches: 2 [ 721.978345][T10421] loop0: detected capacity change from 0 to 256 [ 722.779547][T10431] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 724.493977][T10449] futex_wake_op: syz.1.1056 tries to shift op by 144; fix this program [ 725.531581][T10435] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1054'. [ 728.458997][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 728.465969][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 731.193536][T10462] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 731.239361][T10462] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 731.247514][T10462] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 731.435622][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 732.971630][T10489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1066'. [ 733.477020][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 733.621991][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 736.933517][T10516] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 738.807989][T10529] loop3: detected capacity change from 0 to 256 [ 739.433213][T10534] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 743.971744][T10554] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 745.569319][T10571] loop0: detected capacity change from 0 to 128 [ 746.215821][T10571] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 746.227905][T10571] hpfs: filesystem error: improperly stopped [ 746.233998][T10571] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 746.241876][T10571] hpfs: You really don't want any checks? You are crazy... [ 746.250105][T10571] hpfs: hpfs_map_sector(): read error [ 746.255793][T10571] hpfs: code page support is disabled [ 746.262508][T10571] hpfs: hpfs_map_4sectors(): unaligned read [ 746.268697][T10571] hpfs: hpfs_map_4sectors(): unaligned read [ 746.275593][T10571] hpfs: filesystem error: unable to find root dir [ 748.842814][T10589] ip6erspan0: entered allmulticast mode [ 751.083878][T10607] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 753.424333][T10622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1102'. [ 756.753698][ T5778] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 759.226913][T10666] loop1: detected capacity change from 0 to 128 [ 759.373274][T10666] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 759.385967][T10666] hpfs: filesystem error: improperly stopped [ 759.392592][T10666] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 759.400998][T10666] hpfs: You really don't want any checks? You are crazy... [ 759.419368][T10666] hpfs: hpfs_map_sector(): read error [ 759.425048][T10666] hpfs: code page support is disabled [ 759.449043][T10666] hpfs: hpfs_map_4sectors(): unaligned read [ 759.461819][T10666] hpfs: hpfs_map_4sectors(): unaligned read [ 759.468074][T10666] hpfs: filesystem error: unable to find root dir [ 761.031640][T10677] loop1: detected capacity change from 0 to 256 [ 763.988798][T10685] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 768.995274][T10726] loop1: detected capacity change from 0 to 8 [ 769.080081][T10726] SQUASHFS error: Failed to read block 0x6de: -5 [ 769.086565][T10726] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 769.094052][T10726] SQUASHFS error: Unable to read inode 0x11f [ 770.817619][T10739] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 771.452770][ T5778] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 774.563150][T10769] loop0: detected capacity change from 0 to 32768 [ 775.911128][ T3435] read_mapping_page failed! [ 775.917915][ T3435] ERROR: (device loop0): txCommit: [ 775.917915][ T3435] [ 776.012926][ T3435] jfs_write_inode: jfs_commit_inode failed! [ 782.498417][T10808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1153'. [ 782.524445][T10822] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 782.592962][T10822] VFS: Can't find a romfs filesystem on dev nullb0. [ 782.592962][T10822] [ 785.405882][T10843] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 787.977131][ T12] [ 787.979510][ T12] ============================================ [ 787.985669][ T12] WARNING: possible recursive locking detected [ 787.991849][ T12] syzkaller #0 Not tainted [ 787.996273][ T12] -------------------------------------------- [ 788.002440][ T12] kworker/u4:1/12 is trying to acquire lock: [ 788.008515][ T12] ffffe8ffffd07d78 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x624/0xa40 [ 788.017797][ T12] [ 788.017797][ T12] but task is already holding lock: [ 788.025146][ T12] ffffe8ffffc07eb0 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4bf/0xa40 [ 788.034367][ T12] [ 788.034367][ T12] other info that might help us debug this: [ 788.042414][ T12] Possible unsafe locking scenario: [ 788.042414][ T12] [ 788.049851][ T12] CPU0 [ 788.053121][ T12] ---- [ 788.056388][ T12] lock(&pd_list->lock); [ 788.060707][ T12] lock(&pd_list->lock); [ 788.065026][ T12] [ 788.065026][ T12] *** DEADLOCK *** [ 788.065026][ T12] [ 788.073164][ T12] May be due to missing lock nesting notation [ 788.073164][ T12] [ 788.081525][ T12] 3 locks held by kworker/u4:1/12: [ 788.086655][ T12] #0: ffff888140069138 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 788.098582][ T12] #1: ffffc90000117d00 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 788.110440][ T12] #2: ffffe8ffffc07eb0 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4bf/0xa40 [ 788.120109][ T12] [ 788.120109][ T12] stack backtrace: [ 788.125988][ T12] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 788.133352][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 788.143408][ T12] Workqueue: pencrypt_parallel padata_parallel_worker [ 788.150187][ T12] Call Trace: [ 788.153537][ T12] [ 788.156527][ T12] dump_stack_lvl+0x18c/0x250 [ 788.161344][ T12] ? show_regs_print_info+0x20/0x20 [ 788.166594][ T12] ? print_deadlock_bug+0x435/0x5d0 [ 788.171798][ T12] __lock_acquire+0x6809/0x7d80 [ 788.176641][ T12] ? __lock_acquire+0x7d80/0x7d80 [ 788.181680][ T12] ? do_raw_spin_unlock+0x121/0x230 [ 788.186873][ T12] ? mark_lock+0x94/0x320 [ 788.191187][ T12] ? verify_lock_unused+0x140/0x140 [ 788.196399][ T12] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 788.202369][ T12] ? lock_chain_count+0x20/0x20 [ 788.207213][ T12] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 788.213457][ T12] ? lockdep_hardirqs_on+0x98/0x150 [ 788.218664][ T12] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 788.224814][ T12] lock_acquire+0x19e/0x420 [ 788.229308][ T12] ? padata_do_serial+0x624/0xa40 [ 788.234331][ T12] ? read_lock_is_recursive+0x20/0x20 [ 788.239687][ T12] ? __rwlock_init+0x150/0x150 [ 788.244467][ T12] ? generic_gcmaes_encrypt+0x289/0x3d0 [ 788.250018][ T12] _raw_spin_lock+0x2e/0x40 [ 788.254586][ T12] ? padata_do_serial+0x624/0xa40 [ 788.259607][ T12] padata_do_serial+0x624/0xa40 [ 788.264468][ T12] ? padata_parallel_worker+0x44/0x1c0 [ 788.269922][ T12] padata_parallel_worker+0x6f/0x1c0 [ 788.275200][ T12] ? process_scheduled_works+0x975/0x1600 [ 788.280921][ T12] process_scheduled_works+0xa60/0x1600 [ 788.286485][ T12] ? worker_attach_to_pool+0x370/0x370 [ 788.291957][ T12] ? assign_work+0x3cc/0x5d0 [ 788.296560][ T12] worker_thread+0xa5e/0xfe0 [ 788.301155][ T12] kthread+0x2fa/0x390 [ 788.305240][ T12] ? pr_cont_work+0x550/0x550 [ 788.309913][ T12] ? kthread_blkcg+0xd0/0xd0 [ 788.314514][ T12] ret_from_fork+0x48/0x80 [ 788.318918][ T12] ? kthread_blkcg+0xd0/0xd0 [ 788.323695][ T12] ret_from_fork_asm+0x11/0x20 [ 788.328494][ T12] [ 795.004129][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 795.010538][ T1280] ieee802154 phy1 wpan1: encryption failed: -22