last executing test programs: 12.12976705s ago: executing program 4 (id=236): r0 = io_uring_setup(0x585f, &(0x7f0000000000)={0x0, 0x2c28, 0x80, 0x0, 0x170}) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000080)={0x7}, 0x0) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f00000000c0), 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='+p', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./config\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8213}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='loop', 0x4) symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r5, &(0x7f0000000540)='transport=loop,nqn=tes', 0x16) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x8) 11.934314149s ago: executing program 3 (id=237): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) setns(0xc9, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000019800)={0x0, 0x1ff, 0xf806, 0x452, 0x0, 0x1}, 0x14) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000019840)='\x00', 0x1, 0x0, &(0x7f0000019880)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11.644129279s ago: executing program 3 (id=240): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x153) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) write$char_usb(r0, &(0x7f0000000180)="bc7984c0", 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x20846, 0x12) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x1e31000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0x9, 0x5}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f80010001"], 0x48) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000540), 0xf9, 0x2a8, &(0x7f0000000a40)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x404801, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f00000011c0)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 10.339722752s ago: executing program 1 (id=243): r0 = syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) r1 = io_uring_setup(0x655, &(0x7f0000001a80)={0x0, 0x5a76, 0x0, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0xf, &(0x7f0000001b00)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) syz_emit_ethernet(0x2a, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000000980)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x7, &(0x7f0000000140)=[{0x9, 0x81, 0x2, 0x5}, {0x8, 0xd5, 0xfc, 0xf}, {0x240, 0x4, 0x0, 0x26}, {0x5, 0xff, 0x9, 0xd}, {0x9, 0x8, 0x2, 0x8}, {0x450, 0xd7, 0x3d, 0xfffff001}, {0xe2cb, 0x5, 0xf, 0x1}]}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4024587b, &(0x7f0000001a40)={{r4, &(0x7f0000000440)='/dev/nullb0\x00', 0x4000, &(0x7f0000000480)={@_ha_fsid={[0xffffffc0, 0xe557]}, {0x7f, 0x737, 0x3, 0x261}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x1}, 0x3, &(0x7f00000019c0)=[{0x3, 0x6, &(0x7f00000005c0)='syz0\x00', &(0x7f0000000600)="d80d4df123067a08584d392b80c179e64b8c4f45722ca5d77b0afa07ee69e10446de939bfdc4dc280fdaa20da591fe4d8939831193369687ddad9af238203520339abac13fcab1587d1a8e63ebb200032f2bf7f6c1ecb71582de6ec29c9e0017f4cfa940a7f32b85324b1b12bc7665057cf7313c50a7602811f746a87fbb227f50a1d95105fc173f24a95a70edc3a4048b593160e0dbae6f884d1bcbc667cc961cdd19023f0ec10bf81f35683c5e7b749c9b49ccdf849486ab7cf8a97876787551682ae88b0e985beae1fd715633e02c4d03bf3818ec87ffcdced26f86c5b7be36d7", 0xe2, 0x20}, {0x3, 0x4, &(0x7f0000000700)='*%(-\\?-(\x00', &(0x7f0000000740)="af41bea5e910b68e8707e4cea6b68ed488bbb811ab0e445175a7fbb40b385430dea705babb8059c4ca081d93b697666b5fe53ff6ab3fb1ad92bd", 0x3a, 0x8}, {0x2, 0x401, &(0x7f0000000780)='sysfs\x00', &(0x7f00000008c0)="eb064c72c36ec0962249c2dbad451f5681df5b14f313d57a2f6db8e045cdd3ae8660c3832dd85f4759305e22fdfcec", 0x2f, 0x18}]}) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) write(r5, &(0x7f0000000400)='dummy_', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)={{0x14}, [@NFT_MSG_NEWTABLE={0xf0, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0xdc, 0x6, "4e7cef132e1a318b865d3da41612c470f5ae53f438f72d8e152d85a9496eef9d8f951f6e08106a3af5aa14f9b1bb7195c778e1effd999fe32a56f129f887e90535daef2ad55ce6442ef2f5ef746bd9e8f3a174ab78cd48335385bf0fc8a848c2a3ad8635379c2fc52b71c53c5b5dc423f1081b793ffde16a96cc5a2c3d95dd14c155f4fb5fee61d39a2da9ee766a6092e8a6cd3a395c762fd8eebc1cd379986a63439a36715c3e0b4244da0900379ce97f6813e17c47001f4a5d336e1721c0d0d1669687b6ff66d09b99c3e28c0d779ecb3b9517abee7c58"}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x19c}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) close(r0) close(0x3) 10.107500715s ago: executing program 4 (id=245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) recvmmsg(r4, &(0x7f0000000880), 0x0, 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/sched/filter\x00', 0x2240, 0x0) readv(r5, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x403}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000480)='./file0/file1\x00', &(0x7f00000004c0)='./file0/file6\x00', 0x0, 0x5000, 0x0) landlock_create_ruleset(&(0x7f00000005c0)={0x2004}, 0x30, 0x0) 9.564364356s ago: executing program 3 (id=247): fcntl$addseals(0xffffffffffffffff, 0x409, 0xa) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) recvmmsg(r0, &(0x7f0000002380)=[{{&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/211, 0xd3}, {&(0x7f00000001c0)=""/239, 0xef}, {&(0x7f00000002c0)=""/200, 0xc8}, {&(0x7f00000003c0)=""/150, 0x96}], 0x4, &(0x7f00000004c0)=""/36, 0x24}, 0x1}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000500)=""/247, 0xf7}, {&(0x7f0000000600)=""/221, 0xdd}, {&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/206, 0xce}, {&(0x7f00000018c0)=""/221, 0xdd}, {&(0x7f00000019c0)=""/67, 0x43}, {&(0x7f0000001a40)=""/16, 0x10}], 0x8, &(0x7f0000001b00)=""/37, 0x25}, 0x9}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001b40)=""/71, 0x47}, {&(0x7f0000001bc0)=""/246, 0xf6}, {&(0x7f0000001cc0)=""/102, 0x66}], 0x3}, 0x100}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000001d80)=""/44, 0x2c}, {&(0x7f0000001dc0)=""/44, 0x2c}, {&(0x7f0000001e00)=""/90, 0x5a}, {&(0x7f0000001e80)=""/236, 0xec}, {&(0x7f0000001f80)=""/241, 0xf1}, {&(0x7f0000002080)=""/140, 0x8c}, {&(0x7f0000002140)=""/207, 0xcf}, {&(0x7f0000002240)=""/47, 0x2f}], 0x8, &(0x7f0000002300)=""/104, 0x68}, 0xfffffffa}], 0x4, 0x40002020, &(0x7f0000002480)={0x77359400}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000003940)={&(0x7f00000024c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003880)=[{&(0x7f0000002500)="b1b6129fca8b1085fcc9cfca7147985d0acf34114492485e313ee2899f7c0db6b74dc0dd02895e680a3fc4c5af7e180b287ce2c6c91ceaf34b6a47fa2f93dbf2b525b306079a962c6e877e28f231d3b8da63afd6f96b619cfcf3a7922ce46132085104d7301dced14610d1a4cc7b4b4ad11e34b6c280da08b782861570b248ee4634bb9498744dd8756d2d3484ee11ff81610075b5e29165d58ca371e8b4742ef854bfb64f992f073761c3f2162ce103ec114170b39661c5ab7bfd3ad796cbb2a741f3a44c1bd5a0dcb25bad9a10fe3d36309b2cb494a89053ee4d2c", 0xdc}, {&(0x7f0000002600)="ec7579fcbf85fbcecfba12f5a5afcc2b447f2fc9e5f5a8a49776d341d34781887e612f287d6689c12a95d2801f4ef4a13a630343378a8e6160630418db34569f2773c251d73d0a19f5e320422a22bcc406375ee9b0f2eff483f5313b937964c49339b3556f0db3625c86a86a92d2d3eb99a90c05d01f34fcb1680df79467ec1d51ccda827915c3efb84299b81a87e4c0a13148715bafa33b516b54f4c74f76b35cadd068", 0xa4}, {&(0x7f00000026c0)="080b446fbcd28f0a1fad2e55617f4e668643224c52f12412e59fda6d1ca94df9c0d864f7752037abd256b8f4531cce6ab6b03d1467bf71eec6f107f7e5c3c5a3c81e8e4051931b82dff056cdb8290f521889c2d49da48aebdcaed740663b1c839b4d6d8b9090f60b17603af99eb7e8587237553fbb92ed18eb22b245965482443432160aecad69424db448205c42edc04eb117026871038781d648336cc86774f603c8a4474db75d5486f49397084dc82bcb7b3aba5be982e97c88a9fd573166c23176af31f9dea6651db4d064e676df2b2bce351b4d816daf9c4fbbacd05b30b9f87a38d768dbff4a272101ebc60b5e2221f625225796959b77eff1", 0xfc}, {&(0x7f00000027c0)="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", 0x1000}, {&(0x7f00000037c0)="0c1a406c7b802f239694f6c851fcabafbad9b55a72a797c3118edb99f833fd1d119479353e298f8e45af4ad6711c54af52f40066a01395962fbe3298181ac4000cf4ae67892772d2f6734f1aea44d1a030b1df81034ccb9b520a66ccf9e67d324072a44153bdaaf5ee6b9ce98fe5acd677b866b340e2007b7a70421cd963cb5e99a7bd74e355b6e8a801cd7beaccdb6ee7e456eae19e5c5f93cc6e4b26260214da2cdb6c15d87cac5bc213f5b22ca31ca0d8f0493be038986033ca", 0xbb}], 0x5, &(0x7f0000003900)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x18}, 0x1) pipe(&(0x7f0000003980)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r3, 0x6, 0x36, &(0x7f00000039c0)=0x6, 0x4) r4 = syz_mount_image$fuse(&(0x7f0000003a00), &(0x7f0000003a40)='./file0\x00', 0x2010084, &(0x7f0000003a80)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xb000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}], [{@fsmagic={'fsmagic', 0x3d, 0xf9db}}, {@dont_measure}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, 'batadv_slave_1\x00'}}]}}, 0x1, 0x0, &(0x7f0000003b80)="860e83ca738a13a7c82d4ea2604f6f2910b81b6f175d6adb748647c5feb33e901a67135067e74854b5db67871631826672ddcd7911a572ab9caba970f9aa8826a893fe8274229a5cf6b6d70d2fff496e18f8216f241e95427a7f4cec00fd756bd77e869e09de7428e6c5e5905d6e015cfbdeacf85da51c1f9b95e7b044095f88e03d47adb27148847890597704e0d2ecbd4398b9b10ad14be30b8d6aa24b3a97081905040637e33f54291bd8a4afc5798c0ea7c7226d90ecf10646ec3953beaa9d6bb1029717f65722859fb8293b913f32d869718ca1d457ecf0adbd7ef7961497d4c18af24b6a711a1551b7bfd57e3fed2b45") r5 = openat(r4, &(0x7f0000003c80)='./file0\x00', 0x22a302, 0xc2) (async) r6 = syz_socket_connect_nvme_tcp() setsockopt(r6, 0x6, 0x7, &(0x7f0000003cc0)="19b5e85b357ebaaad944d340c92b90b77d3ddb5a4f7badd4f243e508e9411b81d928f749b2715207190de68d0b0ead7bef50f60552b33d586c52f9f6e125b7d7f3455f8d4dd2515712e386adc5d88fe9fb0a7ccb072feafee540d0131cfe986e878c6a", 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003d40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000004380)=0x0) lstat(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r7, &(0x7f00000044c0)={&(0x7f0000003d80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004300)=[{&(0x7f0000003e00)="612e4a74a73e4e5755886e18a6544b76743b706a87deca3f0361365d2115547a6e5454aa02137658ee1d452f7b3f03e1f67aeb93d6cda7fbe8e32dc5b296ca02f366159f649470cb3e1c1f814e2d8d879be893e72572824baf41455d34e11cd626f11f8dbc73d02fe6b6309a5c719141f00d40c142d35b338f5ed8594bbb7739195ae6af8903415942bbd310956d9350091c29f7082ffde99e54b7b7b5266e33e3750e5993fce9e3af28cb5898229a63bf357dfeea76ea21013616f4b9914457bf7fa360dd2a7a", 0xc7}, {&(0x7f0000003f00)="cc76bed039c434df5d975338842c95a47a76758f569291e3c24536b75a8e255e9a9a859ce00fa38ad9c37962ea377d3cecad62d0575e98563f821643b9902fa5ea2e5c98d064a50d26a81ac45de9ec3c39b32105dd2cb4bbe923dc", 0x5b}, {&(0x7f0000003f80)="d05cd83b3df30112be060e06b4d45f5a647b88e87bb5d70cfafb7ef1cbb90dfb2403bcd274771057119a2e370cf58062d2850859d40cd72af34deb2bfe1ccaa4d14e", 0x42}, {&(0x7f0000004000)="c6204eae9063ab2e91cabc209373af91f3852916b297320cad447548e016982ec9fa64645f14bdeb52c8ed6f2e7833a64a25d80a00f403e3219279f24006e7ee83a4fa7c0387b36616438fc9ee0be7ee25bb5302be0037ecb9fe1945db72dd590de36a0755512661dc8d93219bb602f4787b1209082026c3e3ef026a70fecaf1226448d677ecab87513834b71ca74c0cd7a3fa1d8917e5d2", 0x98}, {&(0x7f00000040c0)="8874413e60a028c4b1924c20a8cd1badd68f323801aeefe2482bbaec80aaad59f4690741e20b03c26c85ce0521753eeacf3be22bad349f6a7c5d62dbad71d24e5a10e1e3d402d0a7ac73344d837524cd55f6f15346de3f71855c0ed6755a4dd5ea409eafad20834b6663b8730ac95bcd0507ab1b83ed418ea3033b66bfa5eab9d965c3eeee95d47ba301466d00b4a92d5876a5c82ef9ccedcb79fe79515c1e07098eafc66033d1c1c19ee71a75656c41bb379d3ac90b59cbeb9b90432737452945fa8867597f67ac60437f430a47ec8d781d34bd98d146fdc4", 0xd9}, {&(0x7f00000041c0)="29a335d04ef5ac4b6f87c9842f32002955c0cd8d572228b4f0605547bee4d080a77035e85c83743f6ea63a622f9a87015cbc47df0f9e69fad0a4f7e74454f22a4a223acf09a305f0093a7224c2a5c20d2405d643fd6ee07cd0399e94a62fcb05bc7c04634869d667c78d4342f45521db3d97a94f8a46bd44b32c6069feebf64b913d06537240254eec1642e47eac04299ad3443a1224f3bfb48a4d3707508695436d0b2c2ade43e90f85ffff95b109ef3a1eff4e35614e3ea4c5a1cf7722f312270dafce3014481a403f50dd88f9b10a6ed2bef08d12e784d238", 0xda}, {&(0x7f00000042c0)="accae536400a3d8fb5a53601e95a07", 0xf}], 0x7, &(0x7f0000004480)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee00, r10}}}], 0x20, 0x4001004}, 0x20) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000004500)=@x86={0x5, 0xa, 0x85, 0x0, 0x9, 0xff, 0x3, 0xb, 0x94, 0x10, 0x8, 0x0, 0x0, 0x7, 0x1, 0x5, 0x0, 0x0, 0x5, '\x00', 0x7f, 0x7}) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000004540)={0x0, @in6={{0xa, 0x4e21, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7f}}, 0x7, 0x5}, &(0x7f0000004600)=0x90) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000004640)={r11, 0x1000}, &(0x7f0000004680)=0x8) (async, rerun: 64) r12 = creat(&(0x7f00000046c0)='./file0\x00', 0x20) (async, rerun: 64) ioctl$COMEDI_DEVINFO(r3, 0x80b06401, &(0x7f0000004700)) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r13, 0x6, 0xe, &(0x7f00000047c0)={@in6={{0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0x50, 0x0, "ad2d0c2246bea15e62dcb02932f47d4058dc1382c38cde0d3ff42f248979cdb7fb540d97b049fa80d02cc655c3dcc33567ee7557c1537cf381e79682616f00bc31d247bc8aa98b2aa78397350f694cf4"}, 0xd8) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) mount$pvfs2(&(0x7f00000048c0), &(0x7f0000004900)='./file0\x00', &(0x7f0000004940), 0x200020, &(0x7f0000004980)={[{'fuse\x00'}, {'@'}, {'batadv_slave_1\x00'}, {'./+\xf2)+(-,\x0e'}, {}, {'batadv_slave_1\x00'}, {'batadv_slave_1\x00'}, {}], [{@fowner_eq={'fowner', 0x3d, r9}}, {@dont_hash}]}) (async) r14 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000004a00), 0x1, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r14, 0x40786e88, &(0x7f0000004e80)={{&(0x7f0000004a80)=[{0x101, 0x100000001, 0x3, {0x3, 0xcf}, 0x9, 0xbd00000000, 0xfffeffff}, {0x3, 0xffffffffffffffff, 0x8, {0x7fff, 0x9}, 0x8, 0x3260, 0x3}, {0x3, 0x3, 0x6, {0x9, 0x2000000000000}, 0x7fffffffffffffff, 0xff, 0x4}, {0x1a3, 0xfffffffffffffff9, 0xfffffffffffffff7, {0xf2, 0x9}, 0x6b, 0x3, 0x2}, {0x6, 0x2, 0x7, {0xfffffffffffffff8, 0x7fff}, 0x8, 0x9, 0x400000}, {0x57db6875, 0x1, 0x7, {0x5}, 0x8000, 0xf02b, 0x101}, {0x6, 0x3, 0x2, {0xca2, 0x100000001}, 0x800, 0x3, 0x7}, {0x6, 0x9287, 0x1, {0x3, 0x2}, 0x6, 0x5, 0x5}, {0x7, 0xed, 0x6444b98f, {0x5, 0x9c0a}, 0x21, 0x200, 0xac}, {0x7f, 0xffffffff80000001, 0x0, {0x9, 0xffffffff80000001}, 0x4, 0x637f, 0x10}], 0xa, 0x40, 0x5, 0x6}, {&(0x7f0000004d00)=[{0x4, 0x5}, {0x9, 0x3}, {0xe, 0x200000000000}, {0x80, 0x736d}, {0xc9, 0x3}, {0x7fffffff, 0x6}, {0x40, 0x1}], 0x7, 0x10, 0x7f, 0xffff}, {&(0x7f0000004d80)=[0x5, 0xc6, 0x8000000000000000], 0x3, 0x8, 0x1ff, 0x3}, {&(0x7f0000004dc0)=[{0x4, 0x2, 0x5, 0x7, 0x7}, {0x0, 0xfcb3, 0x0, 0xffffffffffffff7f, 0xe637}, {0x6, 0x1d00000, 0x4e5}], 0x3, 0x28, 0x6, 0x9}, {&(0x7f0000004e40)=[0x3, 0x4, 0xd, 0xc1, 0x1fa, 0x2, 0x9], 0x7, 0x8, 0x100, 0x8}}) (async) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004f40), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r12, &(0x7f0000005000)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004f80)={0x2c, r15, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004042}, 0x0) (async, rerun: 32) syz_usb_connect$cdc_ecm(0x3, 0xe4, &(0x7f0000005040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x1, 0x1, 0x9, 0x10, 0x80, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x7, {{0xb, 0x24, 0x6, 0x0, 0x0, "f29f3cdc4192"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x8, 0x26c3, 0x7}, [@acm={0x4}, @mdlm_detail={0x81, 0x24, 0x13, 0x7, "ea9a2ac17d89d79be52ba1272c1a37374ff8f7c3aee1b0d7a07e586aec43b298a70bc7105e94ebbc00fa2338e7e8235668d7ccca366cceb19c20eab4910c1b8701335f37737d7a3987b8c1774177c2db7f834262a68b13110552adba564a62baa6153dde1ad275994f72fcccbc6f360984a04c2c6d30488c8af12f9b0f"}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x7f, 0x5, 0x7, 0x5, 0x3e}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x81, 0x5, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0x3, 0x3}}}}}]}}]}}, &(0x7f0000005280)={0xa, &(0x7f0000005140)={0xa, 0x6, 0x200, 0x7f, 0x9, 0xd0, 0x10, 0xf7}, 0x5, &(0x7f0000005180)={0x5, 0xf, 0x5}, 0x2, [{0x32, &(0x7f00000051c0)=@string={0x32, 0x3, "20091ba76402fdf34e2fe675336d11ec86a1b8f97af8bda0f83823dce5b1c32f8b882cd3405534b196fa755be22c090e"}}, {0x73, &(0x7f0000005200)=@string={0x73, 0x3, "e1605a442d9e55116ae5f88575134bb3fe39edf7b449c5510b95d639b3918d73f4410b30af5eea3f4944c2085a85a42f5e2d93be108f0dc924525aa002fd27d28f7a663beff3f415de27a83f5c54fb7f30a70f3912bc6ec85d52c953af750988fb3ddd5e5d7f0862af2a37bc5cc5635f94"}}]}) (rerun: 32) 9.353161505s ago: executing program 1 (id=248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x89, 0x0, 0x81, 0xffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000200)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0x1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@getpolicy={0x108, 0x15, 0x10, 0x70bd25, 0x25dfdbff, {{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4e22, 0x1, 0x4e24, 0x5, 0xa, 0xc0, 0x80, 0x3c, r4, 0xffffffffffffffff}, 0x6e6bb9, 0x2}, [@replay_val={0x10, 0xa, {0x70bd2c, 0x70bd27, 0x8}}, @mark={0xc, 0x15, {0x35075b, 0x3}}, @lifetime_val={0x24, 0x9, {0x2, 0x8, 0xd71, 0x1}}, @user_kmaddress={0x2c, 0x13, {@in6=@local, @in6=@local, 0x0, 0x2}}, @extra_flags={0x8, 0x18, 0xddf3}, @coaddr={0x14, 0xe, @in6=@mcast1}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd2b, 0x70bd25, 0x70bd29, 0x70bd2a, 0x401, [0x3, 0x1, 0x10000]}}, @replay_thresh={0x8, 0xb, 0x6}]}, 0x108}}, 0x2c000010) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x3f, 0x0, 0x2}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a78000000060a010400000000000000000a0000010900010073797a31000000004c0004802800018007000100637400001c00020005000300010000000800014000000009080002400000000720000180070001006374000014000280080002400000000a08000140000000010900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 7.7901537s ago: executing program 4 (id=249): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000001240)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000001280)={0x24, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000012c0)=0x3) r1 = socket$inet(0x2, 0xa, 0x0) getsockname(r1, 0x0, &(0x7f0000000400)) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001440)={'nat\x00', 0x0, 0x3, 0x69, [0x4, 0x8, 0x1000, 0x8, 0x8df7, 0x5], 0x9, &(0x7f0000001300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000013c0)=""/105}, &(0x7f00000014c0)=0x78) sendmmsg$sock(r1, &(0x7f0000000e40)=[{{&(0x7f0000000440)=@generic={0x1a, "e285c9a4c01a4b9e6a1966ccc5fac047bb40a93fecd78cf62ba28c5f5dc10c5983566704f9e33fb32637e52fe30d384c38dc41b67c7395d67f1852697b3076530daffe32a5bd61205f9bcfea20b9aa0028b49315855c21a931e68f7c577d4eb3ed3bb479b0878b03795cc5e375f540d8f8904cce99ca25955b430c9882f9"}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)="ad5b5d244e5c5559754cbe22b08f090aa95a217bb7fda8934e428a7c7a992174abb769dab883fd8ff618dea8b2303693b90254002b12d71be3fef38e9e866be60bc84a3f7347d993c576e709b8a65115dd5574fadd8457736e9c4c97b2369c297a404b1a064761f2512206903037eccccad58fe3d2830c0b89a19c5e0b9a0454f388db7dca4c935c58b5dc9f31e1f648dfab5505961309112eee9e09f1116c7a83582ef496f346cc87b6fd5fc1bb7bdbeb82ce655e8df555fe8766f2431a4850c94d3573e0e2b862f94ec7ba310c0a439168937d066c578857a23a583bdb9e60", 0xe0}], 0x1, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x1c1}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x48}}, {{&(0x7f0000000680)=@l2={0x1f, 0x100, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x100, 0x1}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000700)="bf5352360ad4992f6a3a436ec3cb120262c07ec879e75f92a1edf25f", 0x1c}, {&(0x7f0000000740)="e7", 0x1}, {&(0x7f0000000780)="86", 0x1}, {&(0x7f00000007c0)="b0abd4d574fa45c8f06fd8cded5c7970ee4bc862327fef4592b24fb1f2a0068fd3b0961a693c26347acc9fd028a63d43ef6a0f8f9d6a26da6d5ab0e8bb6d9203464128a58ec14b69e317a3300f3d7b38a83b60efd20ba05dfe65c77fe0ab6a44135b79c3cbad562a307edadd37290b3b04d12381b96718eb008a3304bb16b00db08a476389bf8fbc307153c502c274f83b96e1e4f89c40fc6a35f7b29cb6d6af04abb432e7", 0xa5}, {&(0x7f0000000880)="4e516382147b84dd4c511a80a815c26fa0fb39a7d6496b0bb8cb035e27364bd42f6a4b78", 0x24}, {&(0x7f00000008c0)="62661b22533dabd549518f534dbee9497c3c36b2340e1625d1c5d669537bea9de91f8c8ce3755552486a80b1746c042d6110192df16cbb34be77dcc748f9166a5b3f7bd06930b807dd4ae9c0f59f473d26cb4b7016be88d9649251d40041fbaaafe9f42c4e1712cf757604481a69491be9fa5945c7129af91cf34b026218f1004c059b4154b865dd2f67d6a541b77b248701", 0x92}], 0x6, &(0x7f0000000a00)=[@timestamping={{0x14}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a40)}, {&(0x7f0000000a80)="5657482221c5c67c158c13d352857b50ec2ac91a5a690d071b643ca8e27be2406d1ae796cb195dcccf5e60061668811713ac318bf998b147d4299492ffb55a59b14a46f0320013ec5a549380f508367b45b073eee24a259e5bfa625124568d873161eb1c8b4a5c955d8f9315585baf9c8f0336f60ece9718498559c92ddae5d0b3b9a0669f7c73", 0x87}, {&(0x7f0000000b40)="2f1a4b1777a80aff1986978d75b9d3a47873c31624ba192c57110692d2a370f399a50111e8bd3963ec108e66bb439bf940e9dfb577dffaec6ca52ef523e5a40b0a1594da1a24389a12e325d2d83783109450a8ad8ae74ba437ee9ce1a4634d887fa597b1f7d970b64ffd2ecd9e40a4939e30eb13d3ca55ad5326f131182397601f2bc294f830a1c0936e569b91664d3d33511742f08ae08a94eff5c7c3bdefd6d1cfab29", 0xa4}], 0x3}}, {{&(0x7f0000000c40)=@can, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000cc0)="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", 0xfd}, {&(0x7f0000000dc0)="08c8d21bb0c5fd5f9d61b9626785d643b45ac06340b11eb53d915636bdde6c", 0x1f}], 0x2}}], 0x4, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000001000)={r1, &(0x7f0000000a40)='\x00', 0x0, &(0x7f0000000f40)={@_ha_fsid={[0x9a3, 0x5]}, {0xfff8, 0x0, 0x10, 0xffff}}, 0x81, &(0x7f0000000f80), &(0x7f0000000fc0)=0x2}) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001040)={0x81, {{0xa, 0x4e23, 0x1, @mcast1, 0x4}}, 0x0, 0x2, [{{0xa, 0x4e24, 0xfffffff9, @loopback, 0xaa}}, {{0xa, 0x4e21, 0x80000000, @private2, 0x80000000}}]}, 0x190) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0xf1, 0xb9, 0xb4, 0x9f, 0x16d8, 0x6002, 0x9a9b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x45, 0x20, 0x8}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1555555555555566, [{0x0, &(0x7f0000000040)=@string={0x0, 0x3, "16925d2b7b2d46c7f66df08070c1cc3bf59c202c7cd28db2309076d543ba440deee8aa86d9c1eb3f3bf5d598d8f0b0369e0ea0fa72d463"}}, {0x0, &(0x7f0000000080)=@string={0x0, 0x3, "0694eb4a749ff7c721d80e31c9b03ada19421d0afc1a29fb569f9db562f784837dd5821ed9ce1d195782e40bcd0f748797b9004b0c3949a6e44c89bbb8fd949335eebfa54bf7ed87b71a9e90db75abe7780320518cde5cabb0f6d5a44f19833449f97972612bef9730b69eeb77b45a5abee4f36ded8393524577b8e82e783d98a3b85156078a4fc34a06931459449025c1e022f20bcd696e137ef44cfe4e3e1df5368984b6580458915722dd6b5c6f1df1d18074cf33f0d48bdada5ebef305083fff18f30ca76cfeedd9c9e8e85f3dbdd241a56f5ea1dc065d038490f307a7c6f0cf438363de797a088d"}}, {0x0, &(0x7f0000000180)=@lang_id={0x0, 0x3, 0x83e}}, {0x0, &(0x7f00000001c0)=@lang_id={0x0, 0x3, 0x83f}}, {0x0, &(0x7f0000000200)=@lang_id={0x0, 0x3, 0x4c47}}, {0x0, &(0x7f0000000240)=@lang_id={0x0, 0x3, 0x418}}, {0x0, &(0x7f0000000280)=@lang_id={0x0, 0x3, 0x401}}, {0x0, &(0x7f00000002c0)=@lang_id={0x0, 0x3, 0x422}}, {0x0, &(0x7f0000000300)=@lang_id={0x0, 0x3, 0x81a}}]}) 7.334347118s ago: executing program 2 (id=251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a78000000060a010400000000000000000a0000010900010073797a31000000004c0004802800018007000100637400001c00020005000300010000000800014000000009080002400000000520000180070001006374000014000280080002400000000a08000140000000010900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 7.202462454s ago: executing program 2 (id=252): socket$inet_tcp(0x2, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000019380)={0x0, 0x0, &(0x7f0000019440)={&(0x7f0000019480)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x2, &(0x7f0000019280)=0x80000000000003) socket(0x1e, 0x1, 0x0) pipe(&(0x7f0000019340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000019380), 0x11000) write$P9_RREADDIR(r5, &(0x7f00000193c0)={0xb, 0x29, 0x1, {0x6}}, 0xb) vmsplice(r4, &(0x7f0000019400)=[{&(0x7f0000019440), 0x3528a9c0}], 0x1, 0x0) 6.466773105s ago: executing program 2 (id=253): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000580)) 6.153038781s ago: executing program 1 (id=255): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000340)='./proc\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0xfffffc7b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f72740000"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) write(r1, &(0x7f00000008c0)='7', 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x1}) 5.900455705s ago: executing program 2 (id=256): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x4) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1c005, &(0x7f00000000c0)={[{@rescan_uuid_tree}, {@datasum}, {@autodefrag}, {@nossd}, {@acl}, {@user_subvol_rm}, {@noacl}, {@clear_cache}, {@rescue={'rescue', 0x3d, 'idatacsums'}}, {@discard_async}, {@nodatacow}, {@space_cache_v2}, {@nodiscard}, {@enospc_debug}, {@nospace_cache}]}, 0x9, 0x559d, &(0x7f0000001f80)="$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") r1 = open(&(0x7f0000007540)='.\x00', 0x20000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r1, 0x40109441, 0x0) 5.034155417s ago: executing program 0 (id=257): socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6ca283, 0x0) openat(r1, 0x0, 0x400, 0x121) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='ntfs3\x00', r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa41080045c50030006800000901907864010102ac1414aa0b01907800000000451c000400680002098400810000000064010101fe37324f83361b12acbea555bd0e8731b01b73fe6a3300d1f081b7946053a59f52a678357d14b51f4006d05c13ef33944ca8f935a33822b4f047fca8bdef7e211311d2cca9703d084fe40d78004793a8120f079726f8fc650981d5edf20e79fa9d983607408f820bf806639512eaf2c336a528fd1628e1191a96c8fb7b4b4d80"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000300), 0x0, 0x47ecf) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) file_getattr(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f00000004c0), 0x18, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)="04080076657273696f6e00020548000004080070726f66696c650007050400666f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000004", 0x6a) 4.457880066s ago: executing program 3 (id=258): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x0, &(0x7f0000000400), 0x21, 0x4a6, &(0x7f00000004c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001140)='./file0/file0\x00', &(0x7f0000001180), &(0x7f00000011c0)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000001200)='./file1\x00', &(0x7f0000001240), &(0x7f0000001280)=ANY=[], 0x835, 0x835) creat(&(0x7f00000012c0)='./file0/file0\x00', 0x129) setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f0000001340), &(0x7f0000001380)=ANY=[], 0x835, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000980), 0x482, 0x0) r1 = epoll_create1(0x80000) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a00)={0x0, 0x9, 0x8, 0x0, 0x81, "00000000000000000000ffff00"}) r2 = syz_open_pts(r0, 0x40) r3 = dup3(r2, r0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000a40)={0x80000001}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000a80)={0x5, 0x7ff, 0x213c, 0x7fffffff, 0x6, "ba5d02bd0d237543563be9dc1cb901de869d6b"}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000200)) r5 = fsmount(0xffffffffffffffff, 0x0, 0xa) fchdir(r5) chdir(&(0x7f0000000480)='./sys\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) rmdir(&(0x7f0000000140)='./file0/file0\x00') r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]}) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x34a}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x2) 4.212134361s ago: executing program 0 (id=259): syz_mount_image$hpfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x3a00041, &(0x7f00000000c0)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c002a8147bd45d266c8b59269"], 0x3, 0x9e24, &(0x7f0000002d00)="$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") syz_mount_image$msdos(&(0x7f000000cb40), &(0x7f000000cb80)='.\x00', 0x18920f4, &(0x7f000000cbc0)=ANY=[], 0x0, 0x0, &(0x7f000000cc00)) r0 = open(&(0x7f000000cc40)='.\x00', 0x100000, 0x0) flock(r0, 0x2) mknod$loop(&(0x7f000000cc80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xb, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018080000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000022000000bf09000000000000c6090100000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ae9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.38756091s ago: executing program 0 (id=260): io_getevents(0x0, 0x2e5, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x402) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0b475173ddd486dd6000000000200601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c2991cf6fd2b053e279e9dcc7f06e734ee72120000907800001e0c6c000900000000f20000"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x11, &(0x7f0000000640)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r6, 0x0, 0xe, 0x0, &(0x7f00000007c0)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.113388058s ago: executing program 2 (id=261): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000100100000100000002000000000000001000000000000000100100000e"], 0x28}, 0x0) recvmmsg(r0, &(0x7f0000009f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000018c0)=""/4111, 0x100f}, {&(0x7f0000000040)=""/155, 0x9b}], 0x2}, 0x20200000}], 0x1, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) 3.031160388s ago: executing program 1 (id=262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000280)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000002c0)='./bus\x00', 0x8000, 0xd02) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000003c0)="1a0000000200", 0x6) setsockopt(r0, 0x81, 0x80, 0x0, 0x2d) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x40811, &(0x7f00000004c0)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/dir\x00', 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/dir\x00', 0x10000, 0x0) syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0x190864, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc4842, 0x1ff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r3, r4, 0x0, 0x18ad414) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x3000408, 0x0, 0x4, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000400), 0x200008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.944448364s ago: executing program 3 (id=263): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000140)=""/14, &(0x7f0000000180), 0x30000}) write(r0, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000001c0)={0x1, r1}) write$tun(r1, &(0x7f0000000200)=ANY=[], 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 2.361840519s ago: executing program 1 (id=264): socket$inet_tcp(0x2, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000019380)={0x0, 0x0, &(0x7f0000019440)={&(0x7f0000019480)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000000280)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000019280)=0x80000000000003) socket(0x1e, 0x1, 0x0) pipe(&(0x7f0000019340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000019380), 0x11000) write$P9_RREADDIR(r6, &(0x7f00000193c0)={0xb, 0x29, 0x1, {0x6}}, 0xb) vmsplice(r5, &(0x7f0000019400)=[{&(0x7f0000019440), 0x3528a9c0}], 0x1, 0x0) 1.006362335s ago: executing program 1 (id=265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000000900)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001a00)=0x3) sched_setscheduler(r2, 0x2, &(0x7f0000001a40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001ac0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001b40), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001b80), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001bc0)={'lo\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sync_file_range(r7, 0x6, 0x9fd, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001c40)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffff7d, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xe, 0xffe0}, {0x10, 0x1}, {0xc, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004b010}, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000001e00), 0xf, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r10, 0x80045505, &(0x7f0000001e40)=0x1) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000001e80), &(0x7f0000001ec0)=0x10) 890.92588ms ago: executing program 0 (id=266): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000580)) 809.378258ms ago: executing program 2 (id=267): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1000800, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x2, 0x5524, &(0x7f00000006c0)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x6c, r3, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) r4 = openat(0xffffffffffffff9c, &(0x7f0000005c00)='./file0\x00', 0x183b41, 0x12b) openat(0xffffffffffffff9c, &(0x7f00000073c0)='.\x00', 0x20080, 0x100) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$squashfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000540)=ANY=[], 0x0, 0x1cc, &(0x7f0000005c40)="$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") r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, 0x0, &(0x7f0000000000)=0x41) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000100)={@desc={0x1, 0x0, @desc2}}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) unshare(0x8040480) r7 = open(&(0x7f0000007440)='.\x00', 0x20000, 0x12) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000005e40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r8, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x24}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8d, 0x8}}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0x800}}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000) getdents64(r7, 0x0, 0x0) 787.864586ms ago: executing program 4 (id=268): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) splice(r4, 0x0, r3, 0x0, 0x9, 0x5) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f00000000c0)={0x1a519, r5}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r6], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 625.372197ms ago: executing program 0 (id=269): socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6ca283, 0x0) openat(r1, 0x0, 0x400, 0x121) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='ntfs3\x00', r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa41080045c50030006800000901907864010102ac1414aa0b01907800000000451c000400680002098400810000000064010101fe37324f83361b12acbea555bd0e8731b01b73fe6a3300d1f081b7946053a59f52a678357d14b51f4006d05c13ef33944ca8f935a33822b4f047fca8bdef7e211311d2cca9703d084fe40d78004793a8120f079726f8fc650981d5edf20e79fa9d983607408f820bf806639512eaf2c336a528fd1628e1191a96c8fb7b4b4d80"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000300), 0x0, 0x47ecf) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) file_getattr(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f00000004c0), 0x18, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)="04080076657273696f6e00020548000004080070726f66696c650007050400666f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000004", 0x6a) 577.865717ms ago: executing program 3 (id=270): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x240400c0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 462.232893ms ago: executing program 4 (id=271): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) 34.632047ms ago: executing program 0 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = gettid() ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000000800)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019800)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000019840)='./pipefs\x00', &(0x7f0000019880)='rpc_pipefs\x00', 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000019900)='./file0\x00', 0x100, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000019940), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000019980)='./file0\x00', &(0x7f00000199c0), 0x0, &(0x7f0000019a00)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r2, &(0x7f0000019a80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f000001bac0)={0x50, 0x0, r3, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) close(r2) chown(&(0x7f000001bb40)='./file0\x00', 0x0, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, r6, 0x1, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000780)=[{0x1a, '\x00', @buffer={"638391fa1b1e194b4c03af56e062fea3ed6500", 0x20}, 0x7bf}]}) 0s ago: executing program 4 (id=273): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (fail_nth: 1) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 57.306576][ T5274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.317803][ T5274] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. syzkaller login: [ 82.047654][ T5600] cgroup: Unknown subsys name 'net' [ 82.186251][ T5600] cgroup: Unknown subsys name 'cpuset' [ 82.195304][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.837860][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.520370][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.521596][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.522115][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.530455][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.530792][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.538765][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.554806][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.564698][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.565379][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.575753][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.578185][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.578779][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.579865][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.584307][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.615781][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.630871][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.638227][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.657470][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.678714][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.679412][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.710328][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.721166][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.730663][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.742979][ T5614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.743725][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.885016][ T5612] rdma_rxe: Failed to create IPv4 UDP tunnel [ 87.891821][ T5611] rdma_rxe: Failed to create IPv4 UDP tunnel [ 87.910834][ T5623] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.932552][ T5613] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 87.934103][ T5620] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 87.947383][ T5623] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.951064][ T5623] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.266570][ T5623] infiniband rxe0: set active [ 88.267684][ T5623] infiniband rxe0: added rxe_eth0 [ 88.295582][ T5623] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 88.295621][ T5623] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 88.295663][ T5623] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 88.300257][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.373720][ T5623] RDS/IB: rxe0: added [ 88.374089][ T5623] smc: adding ib device rxe0 with port count 1 [ 88.374181][ T5623] smc: ib device rxe0 port 1 has no pnetid [ 88.415106][ T32] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.444009][ T5623] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.664252][ T5622] Bluetooth: hci0: command tx timeout [ 88.664401][ T5622] Bluetooth: hci2: command tx timeout [ 88.739085][ T5623] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.742213][ T5622] Bluetooth: hci3: command tx timeout [ 88.742222][ T5614] Bluetooth: hci1: command tx timeout [ 88.823957][ T5622] Bluetooth: hci4: command tx timeout [ 89.209764][ T5623] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.312380][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.312507][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.313015][ T5613] bridge_slave_0: entered allmulticast mode [ 89.316638][ T5613] bridge_slave_0: entered promiscuous mode [ 89.380895][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.381033][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.381148][ T5620] bridge_slave_0: entered allmulticast mode [ 89.388847][ T5620] bridge_slave_0: entered promiscuous mode [ 89.397480][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.397572][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.397694][ T5620] bridge_slave_1: entered allmulticast mode [ 89.400592][ T5620] bridge_slave_1: entered promiscuous mode [ 89.438864][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.438984][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.439172][ T5613] bridge_slave_1: entered allmulticast mode [ 89.441758][ T5613] bridge_slave_1: entered promiscuous mode [ 89.533477][ T5623] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.600916][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.601389][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.601523][ T5612] bridge_slave_0: entered allmulticast mode [ 89.605696][ T5612] bridge_slave_0: entered promiscuous mode [ 89.620762][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.639377][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.664246][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.664378][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.664508][ T5612] bridge_slave_1: entered allmulticast mode [ 89.667212][ T5612] bridge_slave_1: entered promiscuous mode [ 89.679389][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.707030][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.707377][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.707544][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.707643][ T5611] bridge_slave_0: entered allmulticast mode [ 89.710487][ T5611] bridge_slave_0: entered promiscuous mode [ 89.806373][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.806577][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.806708][ T5611] bridge_slave_1: entered allmulticast mode [ 89.809116][ T5611] bridge_slave_1: entered promiscuous mode [ 89.903179][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.907105][ T5620] team0: Port device team_slave_0 added [ 89.910653][ T5613] team0: Port device team_slave_0 added [ 89.957039][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.976751][ T5620] team0: Port device team_slave_1 added [ 89.978777][ T5613] team0: Port device team_slave_1 added [ 90.007054][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.049732][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.050803][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.050816][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.050835][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.062999][ T5612] team0: Port device team_slave_0 added [ 90.129987][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.130004][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.130027][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.177132][ T5612] team0: Port device team_slave_1 added [ 90.179265][ T5611] team0: Port device team_slave_0 added [ 90.180090][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.180106][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.180132][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.187577][ T5611] team0: Port device team_slave_1 added [ 90.187932][ T5623] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.303251][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.303271][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.303314][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.345839][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.345902][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.345975][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.406708][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.406723][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.406743][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.470830][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.470849][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.470892][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.525415][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.525435][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.525462][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.613591][ T5620] hsr_slave_0: entered promiscuous mode [ 90.614749][ T5620] hsr_slave_1: entered promiscuous mode [ 90.629438][ T5613] hsr_slave_0: entered promiscuous mode [ 90.636525][ T5613] hsr_slave_1: entered promiscuous mode [ 90.641622][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 90.641889][ T5613] Cannot create hsr debugfs directory [ 90.742785][ T5622] Bluetooth: hci2: command tx timeout [ 90.742821][ T5622] Bluetooth: hci0: command tx timeout [ 90.745548][ T5611] hsr_slave_0: entered promiscuous mode [ 90.746628][ T5611] hsr_slave_1: entered promiscuous mode [ 90.747471][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 90.747492][ T5611] Cannot create hsr debugfs directory [ 90.815174][ T5612] hsr_slave_0: entered promiscuous mode [ 90.815964][ T5612] hsr_slave_1: entered promiscuous mode [ 90.816486][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 90.816506][ T5612] Cannot create hsr debugfs directory [ 90.823302][ T5614] Bluetooth: hci3: command tx timeout [ 90.823421][ T5614] Bluetooth: hci1: command tx timeout [ 90.913200][ T5622] Bluetooth: hci4: command tx timeout [ 91.381499][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.402727][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.405989][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.422364][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.456925][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.465152][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.471818][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.488951][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.595320][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.598828][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.599760][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.620221][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.643091][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.647327][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.668991][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.669158][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.669285][ T5623] bridge_slave_0: entered allmulticast mode [ 91.670894][ T5623] bridge_slave_0: entered promiscuous mode [ 91.707311][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.711799][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.730185][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.730287][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.730406][ T5623] bridge_slave_1: entered allmulticast mode [ 91.733808][ T5623] bridge_slave_1: entered promiscuous mode [ 91.802832][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.811218][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.867657][ T5623] team0: Port device team_slave_0 added [ 91.870863][ T5623] team0: Port device team_slave_1 added [ 91.931262][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.943074][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.944095][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.944108][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.944131][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.944591][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.948095][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.973078][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.973121][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.973189][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.024945][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.053300][ T2238] cfg80211: failed to load regulatory.db [ 92.067723][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.075280][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.093468][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.166372][ T5623] hsr_slave_0: entered promiscuous mode [ 92.167351][ T5623] hsr_slave_1: entered promiscuous mode [ 92.167883][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 92.167904][ T5623] Cannot create hsr debugfs directory [ 92.305406][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.308428][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.309712][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.316655][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.354906][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.357962][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.380977][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.390815][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.485995][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.550952][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.599073][ T3401] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.599212][ T3401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.625328][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.654973][ T3401] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.655067][ T3401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.656825][ T5623] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.659810][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.660773][ T5623] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.679844][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.714933][ T5623] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.718147][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.744561][ T5623] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.748475][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.792657][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.823787][ T5614] Bluetooth: hci2: command tx timeout [ 92.823887][ T5622] Bluetooth: hci0: command tx timeout [ 92.828798][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.860392][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.860510][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.902429][ T5614] Bluetooth: hci3: command tx timeout [ 92.902528][ T5622] Bluetooth: hci1: command tx timeout [ 92.909726][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.909828][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.969466][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.984024][ T5622] Bluetooth: hci4: command tx timeout [ 93.009515][ T3401] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.009637][ T3401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.049227][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.078334][ T3401] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.078500][ T3401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.209552][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.256654][ T3380] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.256767][ T3380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.299670][ T3380] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.299785][ T3380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.387819][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.461296][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.513660][ T3380] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.513773][ T3380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.563723][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.563837][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.126884][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.341921][ T5620] veth0_vlan: entered promiscuous mode [ 94.408068][ T5620] veth1_vlan: entered promiscuous mode [ 94.529272][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.547090][ T5620] veth0_macvtap: entered promiscuous mode [ 94.598369][ T5620] veth1_macvtap: entered promiscuous mode [ 94.698344][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.740100][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.825294][ T5613] veth0_vlan: entered promiscuous mode [ 94.830969][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.903408][ T5614] Bluetooth: hci2: command tx timeout [ 94.903461][ T5622] Bluetooth: hci0: command tx timeout [ 94.921093][ T5613] veth1_vlan: entered promiscuous mode [ 94.933362][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.933562][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.933601][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.933637][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.993081][ T5614] Bluetooth: hci3: command tx timeout [ 94.993132][ T5622] Bluetooth: hci1: command tx timeout [ 95.022481][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.063078][ T5622] Bluetooth: hci4: command tx timeout [ 95.086817][ T3401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.086841][ T3401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.157231][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.175963][ T3401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.175987][ T3401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.205035][ T5613] veth0_macvtap: entered promiscuous mode [ 95.249998][ T5611] veth0_vlan: entered promiscuous mode [ 95.267113][ T5613] veth1_macvtap: entered promiscuous mode [ 95.334006][ T5611] veth1_vlan: entered promiscuous mode [ 95.391103][ T5612] veth0_vlan: entered promiscuous mode [ 95.405964][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.445298][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.473193][ T5612] veth1_vlan: entered promiscuous mode [ 95.556455][ T5611] veth0_macvtap: entered promiscuous mode [ 95.588856][ T5620] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.631418][ T5611] veth1_macvtap: entered promiscuous mode [ 95.672667][ T1171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.674691][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.674755][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.674800][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.789662][ T5612] veth0_macvtap: entered promiscuous mode [ 95.805108][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.805129][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.969828][ T5623] veth0_vlan: entered promiscuous mode [ 95.985496][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.000802][ T5612] veth1_macvtap: entered promiscuous mode [ 96.078076][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.095406][ T3380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.095428][ T3380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.153881][ T5623] veth1_vlan: entered promiscuous mode [ 96.807994][ T3401] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.823543][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.833117][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.847087][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.430367][ T1156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.463156][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.501236][ T195] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.612634][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.628083][ T5623] veth0_macvtap: entered promiscuous mode [ 98.697124][ T5623] veth1_macvtap: entered promiscuous mode [ 98.724137][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.724160][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.772627][ T1171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.772669][ T1171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.772698][ T1171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.855047][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.855071][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.001373][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.016830][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.016846][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.053251][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.188613][ T3363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.188632][ T3363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.204053][ T1156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.204193][ T1156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.204299][ T1156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.204425][ T1156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.273824][ T5823] FAULT_INJECTION: forcing a failure. [ 99.273824][ T5823] name failslab, interval 1, probability 0, space 0, times 1 [ 99.273861][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 99.273880][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.273896][ T5823] Call Trace: [ 99.273902][ T5823] [ 99.273912][ T5823] dump_stack_lvl+0xe8/0x150 [ 99.273942][ T5823] should_fail_ex+0x3eb/0x540 [ 99.273966][ T5823] should_failslab+0xa8/0x100 [ 99.273993][ T5823] __kmalloc_noprof+0xf9/0x710 [ 99.274018][ T5823] ? hash_ipport6_add+0x79/0x2190 [ 99.274044][ T5823] ? hash_ipport6_add+0xdef/0x2190 [ 99.274078][ T5823] ? hash_ipport6_add+0xdef/0x2190 [ 99.274108][ T5823] hash_ipport6_add+0xdef/0x2190 [ 99.274157][ T5823] hash_ipport6_uadt+0x801/0xaa0 [ 99.274185][ T5823] ? __pfx_hash_ipport6_add+0x10/0x10 [ 99.274210][ T5823] ? __pfx_hash_ipport6_uadt+0x10/0x10 [ 99.274233][ T5823] ? __nla_validate_parse+0x2429/0x2d50 [ 99.274273][ T5823] call_ad+0x18d/0xb50 [ 99.274292][ T5823] ? __lock_acquire+0x747/0x2de0 [ 99.274316][ T5823] ? __pfx_call_ad+0x10/0x10 [ 99.274346][ T5823] ? __nla_parse+0x40/0x60 [ 99.274371][ T5823] ip_set_ad+0x82a/0x9d0 [ 99.274397][ T5823] ? __pfx_ip_set_ad+0x10/0x10 [ 99.274414][ T5823] ? __mutex_lock+0x305/0x15a0 [ 99.274466][ T5823] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 99.274492][ T5823] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 99.274532][ T5823] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 99.274587][ T5823] ? hook_capable+0x1c3/0x5e0 [ 99.274612][ T5823] netlink_rcv_skb+0x226/0x4a0 [ 99.274629][ T5823] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 99.274656][ T5823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.274682][ T5823] ? bpf_lsm_capable+0x9/0x20 [ 99.274702][ T5823] ? security_capable+0x7e/0x2c0 [ 99.274732][ T5823] nfnetlink_rcv+0x2b9/0x28c0 [ 99.274762][ T5823] ? __dev_queue_xmit+0x29b/0x3920 [ 99.274790][ T5823] ? __local_bh_enable_ip+0xd6/0x140 [ 99.274810][ T5823] ? lockdep_hardirqs_on+0x7b/0x110 [ 99.274830][ T5823] ? __dev_queue_xmit+0x29b/0x3920 [ 99.274853][ T5823] ? __local_bh_enable_ip+0xd6/0x140 [ 99.274873][ T5823] ? __dev_queue_xmit+0x29b/0x3920 [ 99.274896][ T5823] ? __dev_queue_xmit+0x1efb/0x3920 [ 99.274923][ T5823] ? __dev_queue_xmit+0x29b/0x3920 [ 99.274952][ T5823] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 99.274984][ T5823] ? __pfx___dev_queue_xmit+0x10/0x10 [ 99.275016][ T5823] ? __copy_skb_header+0xa3/0x4a0 [ 99.275040][ T5823] ? __asan_memcpy+0x40/0x70 [ 99.275071][ T5823] ? __skb_clone+0x5c/0x6c0 [ 99.275097][ T5823] ? __skb_clone+0x449/0x6c0 [ 99.275125][ T5823] ? skb_clone+0x246/0x3a0 [ 99.275150][ T5823] ? __netlink_deliver_tap+0x681/0x6e0 [ 99.275166][ T5823] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.275187][ T5823] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.275203][ T5823] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.275224][ T5823] netlink_unicast+0x8ef/0xa80 [ 99.275263][ T5823] netlink_sendmsg+0x7f0/0xb20 [ 99.275284][ T5823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.275305][ T5823] ? aa_sock_msg_perm+0x144/0x210 [ 99.275325][ T5823] ? apparmor_socket_sendmsg+0x98/0x360 [ 99.275350][ T5823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.275366][ T5823] sock_sendmsg_nosec+0x14e/0x190 [ 99.275385][ T5823] ____sys_sendmsg+0x54e/0x850 [ 99.275411][ T5823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.275441][ T5823] ? import_iovec+0x73/0xa0 [ 99.275463][ T5823] ___sys_sendmsg+0x2a5/0x360 [ 99.275483][ T5823] ? __lock_acquire+0x747/0x2de0 [ 99.275505][ T5823] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.275531][ T5823] ? futex_wait+0x2a2/0x390 [ 99.275572][ T5823] ? __fget_files+0x3a2/0x420 [ 99.275587][ T5823] ? __fget_files+0x2a/0x420 [ 99.275610][ T5823] __x64_sys_sendmsg+0x1b1/0x290 [ 99.275635][ T5823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.275674][ T5823] do_syscall_64+0x166/0x520 [ 99.275696][ T5823] ? trace_irq_disable+0x3b/0x140 [ 99.275716][ T5823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.275732][ T5823] ? clear_bhb_loop+0x70/0xc0 [ 99.275752][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.275768][ T5823] RIP: 0033:0x7fa97299e559 [ 99.275795][ T5823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.275809][ T5823] RSP: 002b:00007fa97392e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.275829][ T5823] RAX: ffffffffffffffda RBX: 00007fa972c25fa0 RCX: 00007fa97299e559 [ 99.275842][ T5823] RDX: 0000000000000080 RSI: 00002000000007c0 RDI: 0000000000000008 [ 99.275852][ T5823] RBP: 00007fa972a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 99.275863][ T5823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.275873][ T5823] R13: 00007fa972c26038 R14: 00007fa972c25fa0 R15: 00007ffcb31f2158 [ 99.275898][ T5823] [ 100.137283][ T3401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.137305][ T3401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.257212][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.257235][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.319428][ T5844] fuse: Bad value for 'fd' [ 102.648943][ T5852] syzkaller0: entered promiscuous mode [ 102.648970][ T5852] syzkaller0: entered allmulticast mode [ 102.738122][ T5852] tipc: Started in network mode [ 102.738158][ T5852] tipc: Node identity 1a4f64ab40d6, cluster identity 4711 [ 102.739328][ T5852] tipc: Enabled bearer , priority 0 [ 102.826954][ T5852] tipc: Resetting bearer [ 103.244495][ T5861] netlink: 'syz.1.11': attribute type 10 has an invalid length. [ 103.416628][ T5849] tipc: Resetting bearer [ 103.710506][ T5860] loop0: detected capacity change from 0 to 2048 [ 103.962122][ T5865] gadgetfs: bound to dummy_udc driver [ 104.101010][ T5860] NILFS (loop0): invalid segment: Magic number mismatch [ 104.101265][ T5860] NILFS (loop0): trying rollback from an earlier position [ 106.288713][ T5860] NILFS (loop0): recovery complete [ 106.306606][ T5860] NILFS (loop0): error -4 creating segctord thread [ 106.373941][ T5849] tipc: Disabling bearer [ 106.427286][ T5871] loop2: detected capacity change from 0 to 256 [ 106.440257][ T5871] exfat: Unknown parameter '0x0000000000000003' [ 106.588729][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.619502][ T5871] loop2: detected capacity change from 0 to 2048 [ 106.638457][ T5861] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 106.644225][ T5775] tipc: Node number set to 1520002219 [ 106.690723][ T5871] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.7: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 106.690928][ T5871] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 106.692226][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 106.692250][ C1] EXT4-fs (loop2): initial error at time 1792317246: ext4_ext_check_inode:521: inode 2 [ 106.692282][ C1] EXT4-fs (loop2): last error at time 1792317246: ext4_ext_check_inode:521: inode 2 [ 106.693998][ T5871] EXT4-fs (loop2): get root inode failed [ 106.694016][ T5871] EXT4-fs (loop2): mount failed [ 106.914459][ T5879] smc: net device vlan1 applied user defined pnetid SYZ2 [ 108.127412][ T5878] loop3: detected capacity change from 0 to 2048 [ 108.163729][ T5878] NILFS (loop3): invalid segment: Magic number mismatch [ 108.163762][ T5878] NILFS (loop3): trying rollback from an earlier position [ 109.702325][ T5882] ima: policy update failed [ 109.774041][ T33] audit: type=1807 audit(1792317248.983:2): action=measure uid>+ res=0 [ 109.774091][ T33] audit: type=1802 audit(1792317248.993:3): pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.5" res=0 errno=-22 [ 109.774131][ T33] audit: type=1802 audit(1792317249.943:4): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.5" res=0 errno=-22 [ 109.948893][ T5878] NILFS (loop3): recovery complete [ 109.999236][ T5878] NILFS (loop3): error -4 creating segctord thread [ 110.227709][ T5891] ipvlan2: entered allmulticast mode [ 110.227734][ T5891] team0: entered allmulticast mode [ 110.227749][ T5891] team_slave_0: entered allmulticast mode [ 110.227767][ T5891] team_slave_1: entered allmulticast mode [ 110.269557][ T5891] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 111.555077][ T5899] process 'syz.2.17' launched '/dev/fd/5' with NULL argv: empty string added [ 112.222794][ T3380] nvmet: connect request for invalid subsystem testsubsys! [ 112.231285][ T5895] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 112.277742][ T5905] loop3: detected capacity change from 0 to 64 [ 113.233523][ T5906] ima: policy update failed [ 113.851149][ T33] audit: type=1804 audit(1792317253.113:5): pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.0.21" name="ima_policy_written" res=0 errno=-17 [ 113.851217][ T33] audit: type=1807 audit(1792317253.113:6): action=measure uid>+ res=0 [ 113.851252][ T33] audit: type=1802 audit(1792317253.113:7): pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.21" res=0 errno=-22 [ 113.851294][ T33] audit: type=1802 audit(1792317253.473:8): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.21" res=0 errno=-22 [ 115.194906][ T5910] ima: policy update failed [ 115.662061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.805739][ T33] audit: type=1804 audit(1792317254.983:9): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.1.23" name="ima_policy_written" res=0 errno=-17 [ 115.805781][ T33] audit: type=1807 audit(1792317254.993:10): action=measure uid>+ res=0 [ 115.805810][ T33] audit: type=1802 audit(1792317254.993:11): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.23" res=0 errno=-22 [ 115.805837][ T33] audit: type=1802 audit(1792317255.433:12): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.23" res=0 errno=-22 [ 116.905997][ T33] audit: type=1400 audit(1792317257.113:13): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="foo" pid=5917 comm="syz.3.26" name="foo" offset=81 [ 117.668236][ T5922] loop2: detected capacity change from 0 to 2048 [ 118.212956][ T5922] NILFS (loop2): invalid segment: Magic number mismatch [ 118.212991][ T5922] NILFS (loop2): trying rollback from an earlier position [ 118.242662][ T5922] NILFS (loop2): recovery complete [ 118.245314][ T5925] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.275411][ T5921] overlay: ./bus is not a directory [ 118.389884][ T5927] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.772303][ T5935] loop2: detected capacity change from 0 to 256 [ 119.773282][ T5935] ======================================================= [ 119.773282][ T5935] WARNING: The mand mount option has been deprecated and [ 119.773282][ T5935] and is ignored by this kernel. Remove the mand [ 119.773282][ T5935] option from the mount to silence this warning. [ 119.773282][ T5935] ======================================================= [ 121.432414][ T5936] ima: policy update failed [ 121.504904][ T33] audit: type=1804 audit(1792317260.813:14): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.1.25" name="ima_policy_written" res=0 errno=-17 [ 121.505018][ T33] audit: type=1807 audit(1792317260.813:15): action=measure uid>+ res=0 [ 121.505052][ T33] audit: type=1802 audit(1792317260.813:16): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.25" res=0 errno=-22 [ 121.505104][ T33] audit: type=1802 audit(1792317261.673:17): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.25" res=0 errno=-22 [ 122.665148][ T5955] loop3: detected capacity change from 0 to 2048 [ 122.734373][ T5955] NILFS (loop3): invalid segment: Magic number mismatch [ 122.734488][ T5955] NILFS (loop3): trying rollback from an earlier position [ 122.870658][ T5955] NILFS (loop3): recovery complete [ 122.958479][ T5957] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.153785][ T5958] overlay: ./bus is not a directory [ 123.729351][ T5961] Zero length message leads to an empty skb [ 124.030665][ T5866] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.193174][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 124.196375][ T5866] usb 1-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 124.201250][ T5866] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 124.201274][ T5866] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 124.201289][ T5866] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 124.201324][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.201340][ T5866] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 124.201357][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 124.201372][ T5866] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 124.201410][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 124.201455][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.761070][ T5866] usb 1-1: config 0 descriptor?? [ 126.843948][ T5866] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 126.919351][ T5866] usb 1-1: USB disconnect, device number 2 [ 127.010331][ T5866] usblp0: removed [ 127.207714][ T5979] tipc: Enabled bearer , priority 0 [ 127.285971][ T5979] tipc: Resetting bearer [ 127.391790][ T5978] loop2: detected capacity change from 0 to 2048 [ 127.453963][ T5978] NILFS (loop2): invalid segment: Magic number mismatch [ 127.454187][ T5978] NILFS (loop2): trying rollback from an earlier position [ 127.590991][ T5978] NILFS (loop2): recovery complete [ 127.685507][ T5980] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.757649][ T5981] overlay: ./bus is not a directory [ 127.945878][ T5973] tipc: Disabling bearer [ 128.462297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 129.989802][ T5998] loop0: detected capacity change from 0 to 512 [ 130.021876][ T5998] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 130.021895][ T5998] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 130.285957][ T5998] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #11: comm syz.0.43: iget: bad extended attribute block 83886080 [ 130.285996][ T5998] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.301036][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 130.301061][ C1] EXT4-fs (loop0): initial error at time 1792317270: ext4_orphan_get:1404: inode 11 [ 130.301110][ C1] EXT4-fs (loop0): last error at time 1792317270: ext4_orphan_get:1404: inode 11 [ 130.508087][ T5998] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.43: couldn't read orphan inode 11 (err -117) [ 130.509016][ T5998] loop0: lost filesystem error report for type 5 error -117 [ 130.629970][ T5998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.745746][ T5998] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.43: iget: bogus i_mode (3355) [ 130.821405][ T6005] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.43: iget: bogus i_mode (3355) [ 131.035438][ T6006] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.43: iget: bogus i_mode (3355) [ 131.091645][ T6005] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.43: iget: bogus i_mode (3355) [ 132.304490][ T6009] loop4: detected capacity change from 0 to 128 [ 132.434216][ T6009] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.461015][ T6009] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.508633][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.783627][ T5775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.993465][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.993580][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.302519][ T5775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.342248][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.398772][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.452780][ T5623] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.210220][ T6038] loop3: detected capacity change from 0 to 2048 [ 134.277652][ T6038] NILFS (loop3): invalid segment: Magic number mismatch [ 134.277719][ T6038] NILFS (loop3): trying rollback from an earlier position [ 134.386281][ T6038] NILFS (loop3): recovery complete [ 134.459018][ T6040] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.705490][ T6038] overlayfs: upper fs does not support tmpfile. [ 134.734483][ T6038] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 134.734687][ T6038] overlayfs: failed to set xattr on upper [ 134.734940][ T6038] overlayfs: ...falling back to redirect_dir=nofollow. [ 134.735070][ T6038] overlayfs: ...falling back to index=off. [ 134.735141][ T6038] overlayfs: ...falling back to uuid=null. [ 134.939543][ T6041] syzkaller0: entered promiscuous mode [ 134.939568][ T6041] syzkaller0: entered allmulticast mode [ 134.954440][ T6041] tipc: Started in network mode [ 134.954471][ T6041] tipc: Node identity c20228184e88, cluster identity 4711 [ 135.723667][ T6041] tipc: Enabled bearer , priority 0 [ 135.725544][ T6049] capability: warning: `syz.0.55' uses 32-bit capabilities (legacy support in use) [ 135.789344][ T6046] tipc: Resetting bearer [ 135.827490][ T6039] tipc: Resetting bearer [ 135.909544][ T6039] tipc: Disabling bearer [ 136.073075][ T5866] tipc: Node number set to 2357864472 [ 136.251137][ T6054] loop0: detected capacity change from 0 to 1024 [ 136.361759][ T33] audit: type=1800 audit(1792317276.593:18): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.56" name="file1" dev="loop0" ino=20 res=0 errno=-22 [ 136.390698][ T6056] loop1: detected capacity change from 0 to 512 [ 136.435617][ T6056] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 136.435632][ T6056] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.514291][ T6056] EXT4-fs (loop1): 1 truncate cleaned up [ 136.537832][ T6058] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.538358][ T6056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.656285][ T6056] EXT4-fs error (device loop1): __ext4_expand_extra_isize:7473: inode #12: comm syz.1.58: bad extra_isize 62 (inode size 256) [ 136.698375][ T6056] EXT4-fs (loop1): Remounting filesystem read-only [ 136.698405][ T6056] EXT4-fs warning (device loop1): ext4_rename_delete:3742: inode #12: comm syz.1.58: Deleting old file: nlink 2, error=-30 [ 136.857901][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.011992][ T6066] FAULT_INJECTION: forcing a failure. [ 137.011992][ T6066] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 137.017471][ T6066] CPU: 1 UID: 0 PID: 6066 Comm: syz.4.59 Not tainted syzkaller #0 PREEMPT(full) [ 137.017501][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 137.017515][ T6066] Call Trace: [ 137.017524][ T6066] [ 137.017533][ T6066] dump_stack_lvl+0xe8/0x150 [ 137.017585][ T6066] should_fail_ex+0x3eb/0x540 [ 137.017617][ T6066] _copy_from_user+0x2d/0xb0 [ 137.017645][ T6066] sctp_setsockopt+0x1c4/0x12c0 [ 137.017680][ T6066] ? sock_common_setsockopt+0x36/0xc0 [ 137.017704][ T6066] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 137.017730][ T6066] do_sock_setsockopt+0x17c/0x1b0 [ 137.017764][ T6066] __x64_sys_setsockopt+0x13d/0x1b0 [ 137.017799][ T6066] do_syscall_64+0x166/0x520 [ 137.017827][ T6066] ? trace_irq_disable+0x3b/0x140 [ 137.017853][ T6066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.017876][ T6066] ? clear_bhb_loop+0x70/0xc0 [ 137.017903][ T6066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.017925][ T6066] RIP: 0033:0x7fb5dfd9e559 [ 137.017950][ T6066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.017968][ T6066] RSP: 002b:00007fb5e0bd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 137.017991][ T6066] RAX: ffffffffffffffda RBX: 00007fb5e0026090 RCX: 00007fb5dfd9e559 [ 137.018007][ T6066] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 137.018020][ T6066] RBP: 00007fb5e0bd7090 R08: 000000000000009c R09: 0000000000000000 [ 137.018034][ T6066] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001 [ 137.018048][ T6066] R13: 00007fb5e0026128 R14: 00007fb5e0026090 R15: 00007fff46308708 [ 137.018083][ T6066] [ 137.604716][ T6052] kexec: Could not allocate control_code_buffer [ 137.718785][ T6071] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.947081][ T6076] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.982645][ T6075] x_tables: duplicate underflow at hook 1 [ 139.491229][ T6088] loop5: detected capacity change from 0 to 7 [ 139.607378][ T6087] loop0: detected capacity change from 0 to 2048 [ 139.626446][ T6088] Dev loop5: unable to read RDB block 7 [ 139.626491][ T6088] loop5: unable to read partition table [ 139.626716][ T6088] loop5: partition table beyond EOD, truncated [ 139.626752][ T6088] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 139.715588][ T6087] NILFS (loop0): invalid segment: Magic number mismatch [ 139.715653][ T6087] NILFS (loop0): trying rollback from an earlier position [ 139.894353][ T6087] NILFS (loop0): recovery complete [ 139.953015][ T6090] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.097620][ T6087] overlayfs: upper fs does not support tmpfile. [ 140.101813][ T6087] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 140.101918][ T6087] overlayfs: failed to set xattr on upper [ 140.101979][ T6087] overlayfs: ...falling back to redirect_dir=nofollow. [ 140.102145][ T6087] overlayfs: ...falling back to index=off. [ 140.102198][ T6087] overlayfs: ...falling back to uuid=null. [ 143.087099][ T6102] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.340778][ T6100] kexec: Could not allocate control_code_buffer [ 143.638610][ T6105] syz.0.75 uses obsolete (PF_INET,SOCK_PACKET) [ 143.641840][ T6105] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3936. macoff=96 [ 147.202157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 148.071491][ T6148] loop0: detected capacity change from 0 to 2048 [ 148.127469][ T6148] NILFS (loop0): invalid segment: Magic number mismatch [ 148.127603][ T6148] NILFS (loop0): trying rollback from an earlier position [ 148.227087][ T6148] NILFS (loop0): recovery complete [ 148.315129][ T6149] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.457012][ T6148] overlayfs: upper fs does not support tmpfile. [ 148.460919][ T6148] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 148.461050][ T6148] overlayfs: failed to set xattr on upper [ 148.461111][ T6148] overlayfs: ...falling back to redirect_dir=nofollow. [ 148.461184][ T6148] overlayfs: ...falling back to index=off. [ 148.461244][ T6148] overlayfs: ...falling back to uuid=null. [ 148.916253][ T6151] loop1: detected capacity change from 0 to 1024 [ 149.025140][ T33] audit: type=1326 audit(1792317289.263:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.1.86" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977979e559 code=0x7ffc0000 [ 149.051511][ T33] audit: type=1326 audit(1792317289.263:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.1.86" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977979e559 code=0x7ffc0000 [ 149.051651][ T33] audit: type=1326 audit(1792317289.263:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.1.86" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977979e559 code=0x7ffc0000 [ 149.070423][ T33] audit: type=1326 audit(1792317289.263:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.1.86" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977979e559 code=0x7ffc0000 [ 149.071106][ T33] audit: type=1326 audit(1792317289.293:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.1.86" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f977979e559 code=0x7ffc0000 [ 149.078135][ T33] audit: type=1326 audit(1792317289.293:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.1.86" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977979e559 code=0x7ffc0000 [ 149.078278][ T33] audit: type=1326 audit(1792317289.293:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.1.86" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977979e559 code=0x7ffc0000 [ 149.093851][ T33] audit: type=1326 audit(1792317289.323:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.1.86" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977979e559 code=0x7ffc0000 [ 149.094002][ T33] audit: type=1326 audit(1792317289.323:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.1.86" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977979e559 code=0x7ffc0000 [ 149.105381][ T33] audit: type=1326 audit(1792317289.343:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.1.86" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f977979e559 code=0x7ffc0000 [ 149.433322][ T6154] loop8: detected capacity change from 0 to 16384 [ 149.491212][ T6154] loop8: detected capacity change from 16384 to 16383 [ 149.522811][ T6158] capability: warning: `syz.4.78' uses deprecated v2 capabilities in a way that may be insecure [ 149.951783][ T6162] FAULT_INJECTION: forcing a failure. [ 149.951783][ T6162] name failslab, interval 1, probability 0, space 0, times 0 [ 149.951815][ T6162] CPU: 1 UID: 0 PID: 6162 Comm: syz.3.89 Not tainted syzkaller #0 PREEMPT(full) [ 149.951838][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 149.951848][ T6162] Call Trace: [ 149.951855][ T6162] [ 149.951863][ T6162] dump_stack_lvl+0xe8/0x150 [ 149.951895][ T6162] should_fail_ex+0x3eb/0x540 [ 149.951921][ T6162] should_failslab+0xa8/0x100 [ 149.951946][ T6162] __kmalloc_noprof+0xf9/0x710 [ 149.951975][ T6162] ? rcu_is_watching+0x16/0xb0 [ 149.952008][ T6162] ? tomoyo_realpath_from_path+0xef/0x640 [ 149.952031][ T6162] ? tomoyo_realpath_from_path+0xef/0x640 [ 149.952069][ T6162] tomoyo_realpath_from_path+0xef/0x640 [ 149.952096][ T6162] ? tomoyo_path_number_perm+0x219/0x5f0 [ 149.952120][ T6162] tomoyo_path_number_perm+0x246/0x5f0 [ 149.952146][ T6162] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 149.952167][ T6162] ? __lock_acquire+0x747/0x2de0 [ 149.952214][ T6162] ? __fget_files+0x2a/0x420 [ 149.952231][ T6162] ? __fget_files+0x2a/0x420 [ 149.952246][ T6162] ? __fget_files+0x2a/0x420 [ 149.952265][ T6162] security_file_ioctl+0xc3/0x2a0 [ 149.952288][ T6162] __se_sys_ioctl+0x47/0x170 [ 149.952311][ T6162] do_syscall_64+0x166/0x520 [ 149.952331][ T6162] ? trace_irq_disable+0x3b/0x140 [ 149.952352][ T6162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.952367][ T6162] ? clear_bhb_loop+0x70/0xc0 [ 149.952386][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.952400][ T6162] RIP: 0033:0x7fe75d19e559 [ 149.952414][ T6162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.952427][ T6162] RSP: 002b:00007fe75e0f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.952443][ T6162] RAX: ffffffffffffffda RBX: 00007fe75d425fa0 RCX: 00007fe75d19e559 [ 149.952454][ T6162] RDX: ffffffffffffffff RSI: 0000000000005401 RDI: 0000000000000003 [ 149.952464][ T6162] RBP: 00007fe75e0f1090 R08: 0000000000000000 R09: 0000000000000000 [ 149.952473][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.952482][ T6162] R13: 00007fe75d426038 R14: 00007fe75d425fa0 R15: 00007ffcee645c38 [ 149.952506][ T6162] [ 149.961154][ T6162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 150.172746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 150.293325][ T5742] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 150.582339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 151.453678][ T5742] usb 2-1: Using ep0 maxpacket: 16 [ 151.468331][ T5742] usb 2-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 151.522334][ T5742] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 151.522356][ T5742] usb 2-1: config 1 has no interface number 0 [ 151.522407][ T5742] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 151.651730][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.651752][ T5742] usb 2-1: Product: syz [ 151.651763][ T5742] usb 2-1: Manufacturer: syz [ 151.651774][ T5742] usb 2-1: SerialNumber: syz [ 151.895178][ T6171] netlink: 68 bytes leftover after parsing attributes in process `syz.3.92'. [ 151.978434][ T5742] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 152.017475][ T6167] loop3: detected capacity change from 0 to 128 [ 152.031135][ T6167] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.058865][ T6167] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.500580][ T5742] usb 2-1: USB disconnect, device number 2 [ 152.775235][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.896948][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.292551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 155.374995][ T6195] netlink: 'syz.0.100': attribute type 7 has an invalid length. [ 155.702666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 156.668938][ T6202] ima: policy update failed [ 157.032374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 157.276161][ T33] kauditd_printk_skb: 90 callbacks suppressed [ 157.276174][ T33] audit: type=1804 audit(1792317296.563:119): pid=6206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.0.102" name="ima_policy_written" res=0 errno=-17 [ 157.276214][ T33] audit: type=1807 audit(1792317296.563:120): action=measure uid>+ res=0 [ 157.276237][ T33] audit: type=1802 audit(1792317296.563:121): pid=6206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.102" res=0 errno=-22 [ 157.276266][ T33] audit: type=1802 audit(1792317296.903:122): pid=6202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.102" res=0 errno=-22 [ 157.431722][ T6209] loop3: detected capacity change from 0 to 128 [ 157.495331][ T6209] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 157.582622][ T6209] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.799244][ T6205] loop4: detected capacity change from 0 to 4096 [ 157.840241][ T6205] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 158.110255][ T6205] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 158.322344][ T195] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 158.754363][ T195] usb 4-1: Using ep0 maxpacket: 32 [ 158.755766][ T195] usb 4-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 158.757196][ T195] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 158.757223][ T195] usb 4-1: config 0 has no interface number 0 [ 158.757266][ T195] usb 4-1: config 0 interface 184 has no altsetting 0 [ 158.759914][ T195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.759940][ T195] usb 4-1: Product: syz [ 158.759955][ T195] usb 4-1: Manufacturer: syz [ 158.759970][ T195] usb 4-1: SerialNumber: syz [ 158.827705][ T195] usb 4-1: config 0 descriptor?? [ 159.182098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 159.392036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 160.686744][ T6230] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 161.472229][ T5722] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 161.632134][ T5722] usb 3-1: Using ep0 maxpacket: 32 [ 161.634410][ T5722] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 161.636071][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.150471][ T6241] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 162.478206][ T195] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 162.478239][ T195] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 162.479161][ T195] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 162.479190][ T195] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 162.479205][ T6238] loop0: detected capacity change from 0 to 128 [ 162.479209][ T195] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 162.479228][ T195] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 162.479694][ T195] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 162.489376][ T195] usb 4-1: USB disconnect, device number 2 [ 162.541221][ T5722] usb 3-1: config 0 descriptor?? [ 162.545144][ T5722] usb 3-1: can't set config #0, error -71 [ 162.549998][ T5722] usb 3-1: USB disconnect, device number 2 [ 162.644764][ T6238] ext4: Unknown parameter 'measure' [ 162.681616][ T6243] loop1: detected capacity change from 0 to 1764 [ 164.084241][ T6256] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 164.802234][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 164.955910][ T10] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 164.958627][ T10] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 164.958646][ T10] usb 4-1: config 1 has no interface number 0 [ 164.981381][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.981456][ T10] usb 4-1: Product: syz [ 164.981499][ T10] usb 4-1: Manufacturer: syz [ 164.981541][ T10] usb 4-1: SerialNumber: syz [ 165.078605][ T10] usb 4-1: 3:0 : does not exist [ 165.078633][ T10] usb 4-1: 3:0 : does not exist [ 166.278944][ T10] usb 4-1: USB disconnect, device number 3 [ 166.498414][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.834751][ T27] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 166.888517][ T27] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.130834][ T6280] loop6: detected capacity change from 0 to 1 [ 168.014130][ T6288] FAULT_INJECTION: forcing a failure. [ 168.014130][ T6288] name failslab, interval 1, probability 0, space 0, times 0 [ 168.014164][ T6288] CPU: 0 UID: 0 PID: 6288 Comm: syz.3.125 Not tainted syzkaller #0 PREEMPT(full) [ 168.014189][ T6288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 168.014203][ T6288] Call Trace: [ 168.014212][ T6288] [ 168.014221][ T6288] dump_stack_lvl+0xe8/0x150 [ 168.014266][ T6288] should_fail_ex+0x3eb/0x540 [ 168.014300][ T6288] should_failslab+0xa8/0x100 [ 168.014332][ T6288] __kmalloc_noprof+0xf9/0x710 [ 168.014367][ T6288] ? hash_ipport6_add+0x79/0x2190 [ 168.014402][ T6288] ? hash_ipport6_add+0x18af/0x2190 [ 168.014434][ T6288] ? hash_ipport6_add+0x18af/0x2190 [ 168.014476][ T6288] hash_ipport6_add+0x18af/0x2190 [ 168.014557][ T6288] hash_ipport6_uadt+0x801/0xaa0 [ 168.014598][ T6288] ? __pfx_hash_ipport6_add+0x10/0x10 [ 168.014635][ T6288] ? __pfx_hash_ipport6_uadt+0x10/0x10 [ 168.014667][ T6288] ? __nla_validate_parse+0x2429/0x2d50 [ 168.014728][ T6288] call_ad+0x18d/0xb50 [ 168.014756][ T6288] ? __lock_acquire+0x747/0x2de0 [ 168.014791][ T6288] ? __pfx_call_ad+0x10/0x10 [ 168.014835][ T6288] ? __nla_parse+0x40/0x60 [ 168.014873][ T6288] ip_set_ad+0x82a/0x9d0 [ 168.014912][ T6288] ? __pfx_ip_set_ad+0x10/0x10 [ 168.014937][ T6288] ? __mutex_lock+0x305/0x15a0 [ 168.015015][ T6288] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 168.015054][ T6288] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 168.015112][ T6288] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 168.015189][ T6288] ? hook_capable+0x1c3/0x5e0 [ 168.015225][ T6288] netlink_rcv_skb+0x226/0x4a0 [ 168.015251][ T6288] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 168.015289][ T6288] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.015327][ T6288] ? bpf_lsm_capable+0x9/0x20 [ 168.015355][ T6288] ? security_capable+0x7e/0x2c0 [ 168.015399][ T6288] nfnetlink_rcv+0x2b9/0x28c0 [ 168.015442][ T6288] ? __dev_queue_xmit+0x29b/0x3920 [ 168.015485][ T6288] ? __local_bh_enable_ip+0xd6/0x140 [ 168.015515][ T6288] ? lockdep_hardirqs_on+0x7b/0x110 [ 168.015568][ T6288] ? __dev_queue_xmit+0x29b/0x3920 [ 168.015602][ T6288] ? __local_bh_enable_ip+0xd6/0x140 [ 168.015630][ T6288] ? __dev_queue_xmit+0x29b/0x3920 [ 168.015663][ T6288] ? __dev_queue_xmit+0x1efb/0x3920 [ 168.015703][ T6288] ? __dev_queue_xmit+0x29b/0x3920 [ 168.015745][ T6288] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 168.015793][ T6288] ? __pfx___dev_queue_xmit+0x10/0x10 [ 168.015839][ T6288] ? __copy_skb_header+0xa3/0x4a0 [ 168.015873][ T6288] ? __asan_memcpy+0x40/0x70 [ 168.015908][ T6288] ? __skb_clone+0x5c/0x6c0 [ 168.015945][ T6288] ? __skb_clone+0x449/0x6c0 [ 168.015984][ T6288] ? skb_clone+0x246/0x3a0 [ 168.016020][ T6288] ? __netlink_deliver_tap+0x681/0x6e0 [ 168.016042][ T6288] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.016074][ T6288] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.016097][ T6288] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.016128][ T6288] netlink_unicast+0x8ef/0xa80 [ 168.016185][ T6288] netlink_sendmsg+0x7f0/0xb20 [ 168.016217][ T6288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.016247][ T6288] ? aa_sock_msg_perm+0x144/0x210 [ 168.016276][ T6288] ? apparmor_socket_sendmsg+0x98/0x360 [ 168.016312][ T6288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.016336][ T6288] sock_sendmsg_nosec+0x14e/0x190 [ 168.016363][ T6288] ____sys_sendmsg+0x54e/0x850 [ 168.016402][ T6288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.016445][ T6288] ? import_iovec+0x73/0xa0 [ 168.016478][ T6288] ___sys_sendmsg+0x2a5/0x360 [ 168.016507][ T6288] ? __lock_acquire+0x747/0x2de0 [ 168.016549][ T6288] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.016587][ T6288] ? futex_wait+0x2a2/0x390 [ 168.016649][ T6288] ? __fget_files+0x3a2/0x420 [ 168.016670][ T6288] ? __fget_files+0x2a/0x420 [ 168.016704][ T6288] __x64_sys_sendmsg+0x1b1/0x290 [ 168.016740][ T6288] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.016797][ T6288] do_syscall_64+0x166/0x520 [ 168.016826][ T6288] ? trace_irq_disable+0x3b/0x140 [ 168.016855][ T6288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.016879][ T6288] ? clear_bhb_loop+0x70/0xc0 [ 168.016908][ T6288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.016931][ T6288] RIP: 0033:0x7fe75d19e559 [ 168.016952][ T6288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.016971][ T6288] RSP: 002b:00007fe75e0f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.016996][ T6288] RAX: ffffffffffffffda RBX: 00007fe75d425fa0 RCX: 00007fe75d19e559 [ 168.017014][ T6288] RDX: 0000000000000080 RSI: 00002000000007c0 RDI: 0000000000000008 [ 168.017029][ T6288] RBP: 00007fe75d235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 168.017043][ T6288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.017056][ T6288] R13: 00007fe75d426038 R14: 00007fe75d425fa0 R15: 00007ffcee645c38 [ 168.017093][ T6288] [ 168.056354][ T6275] loop0: detected capacity change from 0 to 40427 [ 168.435655][ T6275] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 168.435735][ T6275] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 168.554831][ T6275] F2FS-fs (loop0): invalid crc value [ 168.803829][ T6275] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 168.836962][ T6275] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 168.837135][ T6275] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 168.859896][ T6296] loop1: detected capacity change from 0 to 256 [ 168.860889][ T6296] exfat: Unknown parameter '0x0000000000000003' [ 168.900693][ T6296] loop1: detected capacity change from 0 to 2048 [ 168.940838][ T6296] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.127: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 168.940894][ T6296] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 168.942107][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 168.942162][ C0] EXT4-fs (loop1): initial error at time 1792317309: ext4_ext_check_inode:521: inode 2 [ 168.942247][ C0] EXT4-fs (loop1): last error at time 1792317309: ext4_ext_check_inode:521: inode 2 [ 168.946446][ T6296] EXT4-fs (loop1): get root inode failed [ 168.946491][ T6296] EXT4-fs (loop1): mount failed [ 169.020510][ T6305] loop2: detected capacity change from 0 to 16 [ 169.058433][ T6294] netlink: 116 bytes leftover after parsing attributes in process `syz.3.126'. [ 169.058477][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 169.058495][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 169.135034][ T6305] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 169.135647][ T6305] erofs (device loop2): mounted with root inode @ nid 36. [ 169.185463][ T6305] syz.2.128: attempt to access beyond end of device [ 169.185463][ T6305] loop2: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 169.186682][ T6305] syz.2.128: attempt to access beyond end of device [ 169.186682][ T6305] loop2: rw=0, sector=46, nr_sectors = 1 limit=16 [ 169.221564][ T6305] erofs (device loop2): read error -5 @ 0 of nid 36 [ 169.264665][ T6301] netlink: 'syz.3.126': attribute type 2 has an invalid length. [ 169.264687][ T6301] netlink: 'syz.3.126': attribute type 1 has an invalid length. [ 169.350176][ T6301] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 169.517943][ T6309] FAULT_INJECTION: forcing a failure. [ 169.517943][ T6309] name failslab, interval 1, probability 0, space 0, times 0 [ 169.517974][ T6309] CPU: 1 UID: 0 PID: 6309 Comm: syz.4.130 Not tainted syzkaller #0 PREEMPT(full) [ 169.517998][ T6309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 169.518011][ T6309] Call Trace: [ 169.518019][ T6309] [ 169.518029][ T6309] dump_stack_lvl+0xe8/0x150 [ 169.518068][ T6309] should_fail_ex+0x3eb/0x540 [ 169.518100][ T6309] should_failslab+0xa8/0x100 [ 169.518130][ T6309] __kmalloc_noprof+0xf9/0x710 [ 169.518165][ T6309] ? tomoyo_encode+0x2ad/0x570 [ 169.518187][ T6309] ? tomoyo_encode+0x2ad/0x570 [ 169.518218][ T6309] tomoyo_encode+0x2ad/0x570 [ 169.518249][ T6309] tomoyo_realpath_from_path+0x5fa/0x640 [ 169.518284][ T6309] ? tomoyo_path_number_perm+0x219/0x5f0 [ 169.518338][ T6309] tomoyo_path_number_perm+0x246/0x5f0 [ 169.518373][ T6309] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 169.518403][ T6309] ? __lock_acquire+0x747/0x2de0 [ 169.518477][ T6309] ? __fget_files+0x2a/0x420 [ 169.518502][ T6309] ? __fget_files+0x2a/0x420 [ 169.518524][ T6309] ? __fget_files+0x2a/0x420 [ 169.518551][ T6309] security_file_ioctl+0xc3/0x2a0 [ 169.518583][ T6309] __se_sys_ioctl+0x47/0x170 [ 169.518613][ T6309] do_syscall_64+0x166/0x520 [ 169.518642][ T6309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.518666][ T6309] ? clear_bhb_loop+0x70/0xc0 [ 169.518694][ T6309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.518716][ T6309] RIP: 0033:0x7fb5dfd9e559 [ 169.518736][ T6309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.518754][ T6309] RSP: 002b:00007fb5e0bf8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.518777][ T6309] RAX: ffffffffffffffda RBX: 00007fb5e0025fa0 RCX: 00007fb5dfd9e559 [ 169.518793][ T6309] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 169.518806][ T6309] RBP: 00007fb5e0bf8090 R08: 0000000000000000 R09: 0000000000000000 [ 169.518820][ T6309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.518833][ T6309] R13: 00007fb5e0026038 R14: 00007fb5e0025fa0 R15: 00007fff46308708 [ 169.518975][ T6309] [ 169.546782][ T6309] ERROR: Out of memory at tomoyo_realpath_from_path. [ 169.984198][ T6296] loop1: detected capacity change from 0 to 32768 [ 170.100859][ T6296] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 170.161799][ T6296] XFS (loop1): Ending clean mount [ 170.324131][ T6294] kexec: Could not allocate control_code_buffer [ 170.374641][ T5612] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 170.802439][ T6326] tmpfs: Bad value for 'mpol' [ 170.967026][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 171.962385][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 172.122133][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 172.125687][ T10] usb 1-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 172.126948][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 172.126975][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 172.126998][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 172.127045][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 172.127069][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 172.127094][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 172.127118][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 172.127142][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 172.127184][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.170322][ T10] usb 1-1: config 0 descriptor?? [ 172.436109][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 172.471542][ T10] usb 1-1: USB disconnect, device number 3 [ 172.518890][ T10] usblp0: removed [ 173.167018][ T6344] loop4: detected capacity change from 0 to 512 [ 173.183607][ T6344] EXT4-fs: Ignoring removed orlov option [ 173.221030][ T6344] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 173.221051][ T6344] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.259835][ T6330] loop1: detected capacity change from 0 to 32768 [ 173.310346][ T6344] EXT4-fs (loop4): 1 truncate cleaned up [ 173.361689][ T6344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.003046][ T6349] overlayfs: failed to resolve './bus': -2 [ 174.045955][ T6330] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 174.047005][ T6330] (syz.1.133,6330,0):ocfs2_initialize_super:2247 ERROR: status = -12 [ 174.047943][ T6330] (syz.1.133,6330,0):ocfs2_fill_super:1185 ERROR: status = -12 [ 174.089308][ T6348] EXT4-fs (loop4): shut down requested (2) [ 174.368243][ T6351] loop0: detected capacity change from 0 to 4096 [ 174.369917][ T6351] nilfs2: Unknown parameter ' žð-ùËòöè€Ó8/' [ 174.889446][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.124113][ T6357] loop0: detected capacity change from 0 to 4096 [ 175.248458][ T6363] loop4: detected capacity change from 0 to 256 [ 175.251344][ T6363] exfat: Unknown parameter '0x0000000000000003' [ 175.324086][ T6363] loop4: detected capacity change from 0 to 2048 [ 175.371767][ T6363] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #2: comm syz.4.143: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 175.371840][ T6363] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 175.372100][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 175.372122][ C1] EXT4-fs (loop4): initial error at time 1792317315: ext4_ext_check_inode:521: inode 2 [ 175.372176][ C1] EXT4-fs (loop4): last error at time 1792317315: ext4_ext_check_inode:521: inode 2 [ 175.435475][ T6363] EXT4-fs (loop4): get root inode failed [ 175.435497][ T6363] EXT4-fs (loop4): mount failed [ 175.488335][ T6365] loop1: detected capacity change from 0 to 512 [ 176.249887][ T6364] ima: policy update failed [ 176.973806][ T33] audit: type=1804 audit(1792317316.303:123): pid=6370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.2.135" name="ima_policy_written" res=0 errno=-17 [ 176.973864][ T33] audit: type=1807 audit(1792317316.303:124): action=measure uid>+ res=0 [ 176.973899][ T33] audit: type=1802 audit(1792317316.303:125): pid=6370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.135" res=0 errno=-22 [ 176.973940][ T33] audit: type=1802 audit(1792317316.483:126): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.135" res=0 errno=-22 [ 177.149741][ T6365] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 177.371538][ T6375] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 177.807626][ T33] audit: type=1800 audit(1792317318.043:127): pid=6357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.141" name="file1" dev="loop0" ino=33 res=0 errno=-22 [ 177.942887][ T6365] EXT4-fs (loop1): 1 orphan inode deleted [ 177.976549][ T6365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.990794][ T6365] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.779832][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.131718][ T6391] loop0: detected capacity change from 0 to 128 [ 179.199669][ T6391] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.218390][ T6391] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.823510][ T5613] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.835034][ T6407] loop3: detected capacity change from 0 to 256 [ 183.861864][ T6407] exfat: Deprecated parameter 'utf8' [ 183.861888][ T6407] exfat: Deprecated parameter 'utf8' [ 183.881141][ T6407] exfat: Deprecated parameter 'namecase' [ 184.932307][ T6408] ima: policy update failed [ 185.698990][ T33] audit: type=1804 audit(1792317324.723:128): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.1.155" name="ima_policy_written" res=0 errno=-17 [ 185.699042][ T33] audit: type=1807 audit(1792317324.723:129): action=measure uid>+ res=0 [ 185.699078][ T33] audit: type=1802 audit(1792317324.723:130): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.155" res=0 errno=-22 [ 185.699118][ T33] audit: type=1802 audit(1792317325.173:131): pid=6408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.155" res=0 errno=-22 [ 187.354591][ T6407] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xfffcecf0, utbl_chksum : 0xe619d30d) [ 187.580698][ T6413] syz.1.155 (6413) used greatest stack depth: 15872 bytes left [ 187.967477][ T6423] loop2: detected capacity change from 0 to 256 [ 187.983622][ T6423] exfat: Unknown parameter '0x0000000000000003' [ 188.027145][ T6422] FAULT_INJECTION: forcing a failure. [ 188.027145][ T6422] name fail_futex, interval 1, probability 0, space 0, times 1 [ 188.027177][ T6422] CPU: 1 UID: 0 PID: 6422 Comm: syz.0.159 Not tainted syzkaller #0 PREEMPT(full) [ 188.027201][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.027214][ T6422] Call Trace: [ 188.027222][ T6422] [ 188.027231][ T6422] dump_stack_lvl+0xe8/0x150 [ 188.027270][ T6422] should_fail_ex+0x3eb/0x540 [ 188.027302][ T6422] get_futex_key+0x893/0x1410 [ 188.027345][ T6422] ? __pfx_get_futex_key+0x10/0x10 [ 188.027385][ T6422] futex_wake+0x119/0x5f0 [ 188.027415][ T6422] ? __pfx_futex_wake+0x10/0x10 [ 188.027450][ T6422] ? mm_exit_exec_release+0x20/0x290 [ 188.027473][ T6422] do_futex+0x458/0x4e0 [ 188.027502][ T6422] ? __pfx_do_futex+0x10/0x10 [ 188.027529][ T6422] ? __might_fault+0xaf/0x130 [ 188.027553][ T6422] mm_exit_exec_release+0x10d/0x290 [ 188.027575][ T6422] exit_mm+0x50/0x240 [ 188.027602][ T6422] do_exit+0x6a8/0x2360 [ 188.027633][ T6422] ? __pfx_do_exit+0x10/0x10 [ 188.027660][ T6422] ? do_raw_spin_lock+0x12b/0x2f0 [ 188.027692][ T6422] do_group_exit+0x22d/0x2f0 [ 188.027705][ T6422] ? _raw_spin_unlock_irq+0x23/0x50 [ 188.027726][ T6422] get_signal+0x1216/0x12c0 [ 188.027764][ T6422] arch_do_signal_or_restart+0xbb/0x860 [ 188.027792][ T6422] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 188.027837][ T6422] exit_to_user_mode_loop+0x10e/0x770 [ 188.027862][ T6422] ? rcu_is_watching+0x16/0xb0 [ 188.027887][ T6422] do_syscall_64+0x328/0x520 [ 188.027907][ T6422] ? trace_irq_disable+0x3b/0x140 [ 188.027926][ T6422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.027942][ T6422] ? clear_bhb_loop+0x70/0xc0 [ 188.027961][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.027976][ T6422] RIP: 0033:0x7fa97299e559 [ 188.027990][ T6422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.028007][ T6422] RSP: 002b:00007fa97392e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 188.028025][ T6422] RAX: fffffffffffffe00 RBX: 00007fa972c25fa8 RCX: 00007fa97299e559 [ 188.028036][ T6422] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa972c25fa8 [ 188.028046][ T6422] RBP: 00007fa972c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 188.028056][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.028065][ T6422] R13: 00007fa972c26038 R14: 00007ffcb31f2070 R15: 00007ffcb31f2158 [ 188.028090][ T6422] [ 188.384931][ T6423] loop2: detected capacity change from 0 to 2048 [ 188.435547][ T6423] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.158: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 188.435599][ T6423] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 188.442102][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 188.442171][ C0] EXT4-fs (loop2): initial error at time 1792317328: ext4_ext_check_inode:521: inode 2 [ 188.442254][ C0] EXT4-fs (loop2): last error at time 1792317328: ext4_ext_check_inode:521: inode 2 [ 188.482808][ T6423] EXT4-fs (loop2): get root inode failed [ 188.482862][ T6423] EXT4-fs (loop2): mount failed [ 189.739795][ T6423] loop2: detected capacity change from 0 to 32768 [ 189.797638][ T6423] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 191.914186][ T6423] XFS (loop2): Ending clean mount [ 192.152572][ T5620] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 194.991484][ T6457] ima: policy update failed [ 196.364148][ T6458] syz.1.157 (6458) used greatest stack depth: 15752 bytes left [ 196.727338][ T33] audit: type=1804 audit(1792317335.023:132): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.0.167" name="ima_policy_written" res=0 errno=-17 [ 196.727489][ T33] audit: type=1807 audit(1792317335.033:133): action=measure uid>+ res=0 [ 196.727586][ T33] audit: type=1802 audit(1792317335.033:134): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.167" res=0 errno=-22 [ 196.727683][ T33] audit: type=1802 audit(1792317335.233:135): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.167" res=0 errno=-22 [ 196.759994][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.760039][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.440472][ T6469] loop4: detected capacity change from 0 to 64 [ 197.465727][ T6469] hfs: Unknown parameter 'iocharse»¡cp949' [ 198.802132][ T6478] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 199.072187][ T5775] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 199.346934][ T5775] usb 5-1: device descriptor read/64, error -71 [ 199.592200][ T5775] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 199.740016][ T5775] usb 5-1: device descriptor read/64, error -71 [ 199.753949][ T6483] netlink: 'syz.2.176': attribute type 2 has an invalid length. [ 199.753992][ T6483] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.176'. [ 199.754058][ T6483] nbd: must specify at least one socket [ 199.926682][ T5775] usb usb5-port1: attempt power cycle [ 200.862116][ T5775] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 200.991079][ T5775] usb 5-1: device descriptor read/8, error -71 [ 203.143088][ T6495] ima: policy update failed [ 203.635939][ T33] audit: type=1804 audit(1792317342.933:136): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.2.179" name="ima_policy_written" res=0 errno=-17 [ 203.635992][ T33] audit: type=1807 audit(1792317342.933:137): action=measure uid>+ res=0 [ 203.636034][ T33] audit: type=1802 audit(1792317342.933:138): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.179" res=0 errno=-22 [ 203.636074][ T33] audit: type=1802 audit(1792317343.383:139): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.179" res=0 errno=-22 [ 204.428797][ T6501] loop4: detected capacity change from 0 to 1024 [ 204.442998][ T6501] EXT4-fs: Ignoring removed oldalloc option [ 205.369017][ T6501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 205.369103][ T6501] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.407638][ T6500] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.180: bg 0: block 3: invalid block bitmap [ 205.420913][ T6500] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 205.420937][ T6500] EXT4-fs (loop4): This should not happen!! Data will be lost [ 205.420937][ T6500] [ 205.420952][ T6500] EXT4-fs (loop4): Total free blocks count 0 [ 205.420962][ T6500] EXT4-fs (loop4): Free/Dirty block details [ 205.420989][ T6500] EXT4-fs (loop4): free_blocks=0 [ 205.421010][ T6500] EXT4-fs (loop4): dirty_blocks=64 [ 205.421020][ T6500] EXT4-fs (loop4): Block reservation details [ 205.421029][ T6500] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 205.435295][ T6500] EXT4-fs error (device loop4): __ext4_new_inode:1083: comm syz.4.180: reserved inode found cleared - inode=1 [ 205.661713][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 206.263946][ T6514] loop1: detected capacity change from 0 to 256 [ 206.354743][ T6514] loop1: detected capacity change from 0 to 256 [ 206.366400][ T6514] exfat: Unknown parameter '€' [ 208.085553][ T6519] loop3: detected capacity change from 0 to 2048 [ 208.279745][ T6519] NILFS (loop3): invalid segment: Magic number mismatch [ 208.280255][ T6519] NILFS (loop3): trying rollback from an earlier position [ 208.375571][ T6519] NILFS (loop3): recovery complete [ 208.487444][ T6520] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.701129][ T33] audit: type=1800 audit(1792317348.873:140): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.175" name="file1" dev="loop3" ino=13 res=0 errno=-22 [ 208.739651][ T6521] overlayfs: failed to resolve './file0': -2 [ 209.708099][ T6527] loop0: detected capacity change from 0 to 512 [ 209.854538][ T6527] EXT4-fs (loop0): 1 truncate cleaned up [ 209.855839][ T6527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.252699][ T5775] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 210.425629][ T5775] usb 4-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 210.425666][ T5775] usb 4-1: no configurations [ 210.425677][ T5775] usb 4-1: can't read configurations, error -22 [ 210.552147][ T5775] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 210.706139][ T5775] usb 4-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 210.706183][ T5775] usb 4-1: no configurations [ 210.706196][ T5775] usb 4-1: can't read configurations, error -22 [ 210.730269][ T5775] usb usb4-port1: attempt power cycle [ 210.804746][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.102104][ T5775] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 211.129678][ T5775] usb 4-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 211.129724][ T5775] usb 4-1: no configurations [ 211.129739][ T5775] usb 4-1: can't read configurations, error -22 [ 211.268069][ T5775] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 211.287354][ T5775] usb 4-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 211.287397][ T5775] usb 4-1: no configurations [ 211.287410][ T5775] usb 4-1: can't read configurations, error -22 [ 211.288946][ T5775] usb usb4-port1: unable to enumerate USB device [ 213.089828][ T6528] Bluetooth: hci2: command 0x0406 tx timeout [ 213.089900][ T6528] Bluetooth: hci1: command 0x0406 tx timeout [ 213.089928][ T6528] Bluetooth: hci3: command 0x0406 tx timeout [ 213.089954][ T6528] Bluetooth: hci0: command 0x0406 tx timeout [ 213.089979][ T6528] Bluetooth: hci4: command 0x0406 tx timeout [ 214.564432][ T6560] nvme_fabrics: found same hostid d630896c-fac8-422a-a792-231cc0542ea8 but different hostnqn nqÐpÉVAÒY¾å¨@T [ 215.591738][ T33] audit: type=1400 audit(1792317355.823:141): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="foo" pid=6563 comm="syz.0.195" name="foo" offset=81 [ 217.263783][ T6573] loop0: detected capacity change from 0 to 8 [ 218.005678][ T6574] syz.1.198 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 218.136602][ T6574] loop1: detected capacity change from 0 to 256 [ 218.159070][ T6574] exfat: Unknown parameter '' [ 218.861787][ T6581] loop2: detected capacity change from 0 to 2048 [ 218.996271][ T6586] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.101811][ T6581] syz.2.200: attempt to access beyond end of device [ 219.101811][ T6581] loop2: rw=8388608, sector=2198922592328, nr_sectors = 2 limit=2048 [ 219.101854][ T6581] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=1) [ 219.275644][ T6581] netlink: 'syz.2.200': attribute type 2 has an invalid length. [ 219.275670][ T6581] netlink: 25 bytes leftover after parsing attributes in process `syz.2.200'. [ 220.975328][ T6586] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 220.975378][ T6586] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 221.027222][ T6586] Remounting filesystem read-only [ 221.598477][ T6603] ipvlan2: entered allmulticast mode [ 221.598502][ T6603] team0: entered allmulticast mode [ 221.598517][ T6603] team_slave_0: entered allmulticast mode [ 221.598537][ T6603] team_slave_1: entered allmulticast mode [ 221.599321][ T6602] loop3: detected capacity change from 0 to 2048 [ 221.609039][ T6603] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 221.758749][ T6608] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.844654][ T6603] nvme_fabrics: missing parameter 'nqn=%s' [ 223.501129][ T6608] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 223.501161][ T6608] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 223.522266][ T6608] Remounting filesystem read-only [ 223.546276][ T5611] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 223.715245][ T6598] loop2: detected capacity change from 0 to 32768 [ 223.763338][ T6598] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 223.833118][ T6614] loop4: detected capacity change from 0 to 4096 [ 223.887190][ T6598] XFS (loop2): Ending clean mount [ 223.967272][ T5620] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 223.991715][ T6614] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 224.132181][ T195] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 224.230341][ T6614] ntfs3(loop4): ino=1a, mi_enum_attr [ 224.230487][ T6614] ntfs3(loop4): ino=1a, mi_enum_attr [ 224.230507][ T6614] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 224.283007][ T195] usb 4-1: New USB device found: idVendor=1044, idProduct=7a4d, bcdDevice=0.00 [ 224.284632][ T195] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.284667][ T195] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.284692][ T195] usb 4-1: config 0 interface 0 has no altsetting 0 [ 224.284728][ T195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.291457][ T195] usb 4-1: config 0 descriptor?? [ 226.465669][ T6636] loop4: detected capacity change from 0 to 16 [ 226.467679][ T6636] erofs (device loop4): mounted with root inode @ nid 36. [ 226.478299][ T6636] erofs (device loop4): inline data across blocks @ nid 86 [ 226.478941][ T6636] erofs (device loop4): inline data across blocks @ nid 86 [ 227.553633][ T6626] loop3: detected capacity change from 0 to 8192 [ 227.578348][ T6626] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 227.788227][ T195] usbhid 4-1:0.0: can't add hid device: -71 [ 227.788350][ T195] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 227.870196][ T195] usb 4-1: USB disconnect, device number 8 [ 229.452211][ T32] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 229.534423][ T5749] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 229.606195][ T32] usb 2-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 229.606242][ T32] usb 2-1: no configurations [ 229.606256][ T32] usb 2-1: can't read configurations, error -22 [ 229.692729][ T5749] usb 1-1: Using ep0 maxpacket: 32 [ 229.695013][ T5749] usb 1-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 229.699918][ T5749] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 229.699985][ T5749] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 229.700039][ T5749] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 229.700153][ T5749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 229.700210][ T5749] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 229.700274][ T5749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.700338][ T5749] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 229.700394][ T5749] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 229.700510][ T5749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.743226][ T32] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 229.815729][ T5749] usb 1-1: config 0 descriptor?? [ 229.906199][ T32] usb 2-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 229.906245][ T32] usb 2-1: no configurations [ 229.906260][ T32] usb 2-1: can't read configurations, error -22 [ 229.906687][ T32] usb usb2-port1: attempt power cycle [ 229.958316][ T6655] netlink: 632 bytes leftover after parsing attributes in process `syz.3.218'. [ 229.958593][ T6655] netlink: 632 bytes leftover after parsing attributes in process `syz.3.218'. [ 230.040201][ T5749] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 230.099389][ T5749] usb 1-1: USB disconnect, device number 4 [ 230.139796][ T5749] usblp0: removed [ 230.242072][ T32] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 230.275974][ T6658] ipvlan2: entered allmulticast mode [ 230.275999][ T6658] team0: entered allmulticast mode [ 230.276014][ T6658] team_slave_0: entered allmulticast mode [ 230.276031][ T6658] team_slave_1: entered allmulticast mode [ 230.277770][ T32] usb 2-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 230.277812][ T32] usb 2-1: no configurations [ 230.277825][ T32] usb 2-1: can't read configurations, error -22 [ 230.288283][ T6658] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 230.425944][ T13] nvmet: connect request for invalid subsystem tes! [ 230.426129][ T6658] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "tes" [ 230.442272][ T32] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 230.467822][ T32] usb 2-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 230.467866][ T32] usb 2-1: no configurations [ 230.467882][ T32] usb 2-1: can't read configurations, error -22 [ 230.468351][ T32] usb usb2-port1: unable to enumerate USB device [ 230.781440][ T6666] loop0: detected capacity change from 0 to 4096 [ 230.847530][ T6666] ntfs3(loop0): ino=19, mi_enum_attr [ 230.847568][ T6666] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 231.405396][ T6662] orangefs_mount: mount request failed with -4 [ 232.052688][ T6683] PKCS7: Unsupported SignerInfo version [ 232.979264][ T6668] loop4: detected capacity change from 0 to 32768 [ 232.989540][ T6684] loop0: detected capacity change from 0 to 4096 [ 233.008871][ T6668] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.217 (6668) [ 233.158243][ T33] audit: type=1800 audit(1792317373.393:142): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.225" name="file1" dev="loop0" ino=33 res=0 errno=-22 [ 233.465194][ T6668] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.465243][ T6668] BTRFS info (device loop4): using crc32c checksum algorithm [ 233.670138][ T6702] loop1: detected capacity change from 0 to 32768 [ 234.233048][ T6668] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 234.264570][ T6668] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 234.270938][ T6668] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 234.271253][ T6668] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 234.271488][ T6668] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 234.271723][ T6668] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 234.272060][ T6668] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 234.275632][ T6668] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 234.275915][ T6668] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 234.276187][ T6668] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 234.276473][ T6668] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 234.360451][ T6668] BTRFS error (device loop4): open_ctree failed: -ENOMEM [ 236.896331][ T6737] ipvlan2: entered allmulticast mode [ 236.896356][ T6737] team0: entered allmulticast mode [ 236.896370][ T6737] team_slave_0: entered allmulticast mode [ 236.896389][ T6737] team_slave_1: entered allmulticast mode [ 236.910870][ T6737] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 237.052841][ T6738] loop2: detected capacity change from 0 to 4096 [ 237.054810][ T3401] nvmet: connect request for invalid subsystem tes! [ 237.072674][ T6737] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "tes" [ 237.134671][ T6745] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.169595][ T6738] overlay: Unknown parameter 'smackfsfloor' [ 237.985180][ T5620] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 238.119569][ T6758] netlink: 80 bytes leftover after parsing attributes in process `syz.0.241'. [ 238.230080][ T6758] block nbd0: shutting down sockets [ 238.410631][ T6761] loop2: detected capacity change from 0 to 4096 [ 238.506146][ T6761] loop2: detected capacity change from 0 to 128 [ 238.635244][ T6765] smc: net device vlan1 applied user defined pnetid SYZ2 [ 241.013895][ T6780] fuse: fd is not a fuse device [ 241.121162][ T6786] tipc: Can't bind to reserved service type 63 [ 241.352184][ T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 241.438077][ T6789] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 241.633933][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 242.177175][ T27] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 242.193860][ T27] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 16 [ 242.193893][ T27] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1023 [ 242.193918][ T27] usb 4-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.193945][ T27] usb 4-1: config 1 interface 0 has no altsetting 0 [ 242.225625][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.225654][ T27] usb 4-1: Product: syz [ 242.225670][ T27] usb 4-1: Manufacturer: 惡䑚鸭ᅕ藸፵덋㧾䦴凅锋㧖醳玍䇴》庯㿪䑉ࣂ蕚⾤ⵞ뺓輐줍判ꁚﴂ툧窏㭦ᗴ⟞㾨呜翻ꜰ㤏밒졮剝叉疯蠉㷻廝罝戈⪯밷앜彣 [ 242.225701][ T27] usb 4-1: SerialNumber: syz [ 242.289626][ T6785] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 242.289775][ T6785] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 242.494582][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.495306][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.496572][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.533076][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.534434][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.535024][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.540402][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.576004][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.579109][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.592957][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.788889][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'. [ 242.946524][ T6803] tipc: Started in network mode [ 242.946555][ T6803] tipc: Node identity 4, cluster identity 4711 [ 242.946569][ T6803] tipc: Node number set to 4 [ 244.124817][ T27] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 244.210582][ T27] usb 4-1: USB disconnect, device number 9 [ 244.243989][ T33] audit: type=1400 audit(1792317384.483:143): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="foo" pid=6811 comm="syz.0.257" name="foo" offset=81 [ 244.557855][ T6818] loop3: detected capacity change from 0 to 512 [ 244.733643][ T6820] loop0: detected capacity change from 0 to 128 [ 244.830074][ T6820] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 244.830115][ T6820] hpfs: filesystem error: improperly stopped [ 244.830131][ T6820] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 244.830146][ T6820] hpfs: You really don't want any checks? You are crazy... [ 244.830164][ T6820] hpfs: Code page index out of array [ 244.830172][ T6820] hpfs: code page support is disabled [ 244.837841][ T32] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 244.849771][ T6818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.850091][ T6818] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.903779][ T6820] hpfs: hpfs_map_4sectors(): unaligned read [ 244.937427][ T6820] hpfs: hpfs_map_4sectors(): unaligned read [ 244.937441][ T6820] hpfs: filesystem error: unable to find root dir [ 244.940570][ T6809] loop2: detected capacity change from 0 to 32768 [ 244.962201][ T32] usb 5-1: device descriptor read/64, error -71 [ 244.972141][ T6809] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.256 (6809) [ 245.055955][ T6820] hpfs: hpfs_map_4sectors(): unaligned read [ 245.069558][ T6809] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 245.069584][ T6809] BTRFS info (device loop2): using blake2b checksum algorithm [ 245.203099][ T32] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 245.294757][ T6809] BTRFS info (device loop2 state EC): setting nodatasum [ 245.294777][ T6809] BTRFS info (device loop2 state EC): setting nodatacow [ 245.294795][ T6809] BTRFS info (device loop2 state EC): force clearing of disk cache [ 245.294808][ T6809] BTRFS info (device loop2 state EC): enabling auto defrag [ 245.294823][ T6809] BTRFS info (device loop2 state EC): ignoring data csums [ 245.335138][ T32] usb 5-1: device descriptor read/64, error -71 [ 245.442558][ T32] usb usb5-port1: attempt power cycle [ 245.472999][ T5620] BTRFS info (device loop2 state EC): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 245.786313][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.792296][ T32] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 245.816151][ T32] usb 5-1: device descriptor read/8, error -71 [ 245.846470][ T6847] loop1: detected capacity change from 0 to 2048 [ 245.867508][ T6847] NILFS (loop1): invalid segment: Magic number mismatch [ 245.867535][ T6847] NILFS (loop1): trying rollback from an earlier position [ 245.898186][ T6847] NILFS (loop1): recovery complete [ 245.910038][ T6850] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.947406][ T6847] overlayfs: upper fs does not support tmpfile. [ 245.947651][ T6847] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 245.947666][ T6847] overlayfs: failed to set xattr on upper [ 245.947672][ T6847] overlayfs: ...falling back to redirect_dir=nofollow. [ 245.947678][ T6847] overlayfs: ...falling back to index=off. [ 245.947683][ T6847] overlayfs: ...falling back to uuid=null. [ 246.052149][ T32] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 246.075001][ T32] usb 5-1: device descriptor read/8, error -71 [ 246.193415][ T32] usb usb5-port1: unable to enumerate USB device [ 248.028259][ T6867] netlink: 32 bytes leftover after parsing attributes in process `syz.4.268'. [ 248.456039][ T33] audit: type=1400 audit(1792317388.693:144): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="foo" pid=6868 comm="syz.0.269" name="foo" offset=81 [ 248.766645][ T6878] ================================================================== [ 248.766665][ T6878] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x340 [ 248.766695][ T6878] Read of size 8 at addr ffff88802cf0d618 by task syz.0.272/6878 [ 248.766714][ T6878] [ 248.766733][ T6878] CPU: 1 UID: 0 PID: 6878 Comm: syz.0.272 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.766764][ T6878] Tainted: [L]=SOFTLOCKUP [ 248.766773][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 248.766792][ T6878] Call Trace: [ 248.766801][ T6878] [ 248.766815][ T6878] dump_stack_lvl+0xe8/0x150 [ 248.766850][ T6878] print_address_description+0x55/0x1e0 [ 248.766883][ T6878] ? dvb_device_open+0xc4/0x340 [ 248.766903][ T6878] print_report+0x58/0x70 [ 248.766931][ T6878] kasan_report+0x117/0x150 [ 248.766960][ T6878] ? dvb_device_open+0xc4/0x340 [ 248.766993][ T6878] dvb_device_open+0xc4/0x340 [ 248.767015][ T6878] ? do_raw_spin_unlock+0xf5/0x200 [ 248.767053][ T6878] chrdev_open+0x4d9/0x600 [ 248.767085][ T6878] ? __pfx_chrdev_open+0x10/0x10 [ 248.767114][ T6878] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 248.767143][ T6878] ? devcgroup_check_permission+0x31/0x8f0 [ 248.767174][ T6878] ? __pfx_chrdev_open+0x10/0x10 [ 248.767203][ T6878] do_dentry_open+0x80e/0x1360 [ 248.767240][ T6878] vfs_open_consume+0x4a/0x350 [ 248.767270][ T6878] ? path_openat+0x16e1/0x20f0 [ 248.767297][ T6878] path_openat+0x16fc/0x20f0 [ 248.767335][ T6878] do_file_open+0x23e/0x4a0 [ 248.767364][ T6878] ? __pfx_do_file_open+0x10/0x10 [ 248.767402][ T6878] ? _raw_spin_unlock+0x28/0x50 [ 248.767427][ T6878] ? alloc_fd+0x6af/0x760 [ 248.767467][ T6878] do_sys_openat2+0x115/0x200 [ 248.767501][ T6878] ? __pfx_do_sys_openat2+0x10/0x10 [ 248.767537][ T6878] ? do_user_addr_fault+0xd3f/0x1480 [ 248.767565][ T6878] __x64_sys_openat+0x138/0x170 [ 248.767600][ T6878] do_syscall_64+0x166/0x520 [ 248.767628][ T6878] ? trace_irq_disable+0x3b/0x140 [ 248.767656][ T6878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.767680][ T6878] ? clear_bhb_loop+0x70/0xc0 [ 248.767705][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.767728][ T6878] RIP: 0033:0x7fa97295ed8e [ 248.767748][ T6878] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 248.767768][ T6878] RSP: 002b:00007fa97392db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 248.767792][ T6878] RAX: ffffffffffffffda RBX: 00007fa97392e6c0 RCX: 00007fa97295ed8e [ 248.767809][ T6878] RDX: 0000000000000002 RSI: 00007fa97392dc00 RDI: ffffffffffffff9c [ 248.767825][ T6878] RBP: 00007fa97392dc00 R08: 0000000000000000 R09: 0000000000000000 [ 248.767840][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 248.767854][ T6878] R13: 00007fa972c26038 R14: 00007fa972c25fa0 R15: 00007ffcb31f2158 [ 248.767882][ T6878] [ 248.767889][ T6878] [ 248.767902][ T6878] Allocated by task 5611: [ 248.767913][ T6878] kasan_save_track+0x3e/0x80 [ 248.767935][ T6878] __kasan_kmalloc+0x93/0xb0 [ 248.767957][ T6878] __kmalloc_noprof+0x366/0x710 [ 248.767997][ T6878] security_inode_init_security+0x102/0x3e0 [ 248.768020][ T6878] shmem_mknod+0x1ea/0x340 [ 248.768047][ T6878] shmem_mkdir+0x33/0x70 [ 248.768075][ T6878] vfs_mkdir+0x40e/0x630 [ 248.768099][ T6878] filename_mkdirat+0x285/0x510 [ 248.768124][ T6878] __se_sys_mkdirat+0x35/0x150 [ 248.768149][ T6878] do_syscall_64+0x166/0x520 [ 248.768176][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.768196][ T6878] [ 248.768202][ T6878] Freed by task 5611: [ 248.768211][ T6878] kasan_save_track+0x3e/0x80 [ 248.768231][ T6878] kasan_save_free_info+0x40/0x50 [ 248.768261][ T6878] __kasan_slab_free+0x5c/0x80 [ 248.768282][ T6878] kfree+0x1c5/0x650 [ 248.768309][ T6878] security_inode_init_security+0x34e/0x3e0 [ 248.768331][ T6878] shmem_mknod+0x1ea/0x340 [ 248.768358][ T6878] shmem_mkdir+0x33/0x70 [ 248.768384][ T6878] vfs_mkdir+0x40e/0x630 [ 248.768408][ T6878] filename_mkdirat+0x285/0x510 [ 248.768433][ T6878] __se_sys_mkdirat+0x35/0x150 [ 248.768458][ T6878] do_syscall_64+0x166/0x520 [ 248.768484][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.768505][ T6878] [ 248.768510][ T6878] The buggy address belongs to the object at ffff88802cf0d600 [ 248.768510][ T6878] which belongs to the cache kmalloc-256 of size 256 [ 248.768528][ T6878] The buggy address is located 24 bytes inside of [ 248.768528][ T6878] freed 256-byte region [ffff88802cf0d600, ffff88802cf0d700) [ 248.768551][ T6878] [ 248.768557][ T6878] The buggy address belongs to the physical page: [ 248.768578][ T6878] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cf0c [ 248.768599][ T6878] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 248.768617][ T6878] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 248.768643][ T6878] page_type: f5(slab) [ 248.768664][ T6878] raw: 00fff00000000040 ffff88801c041b40 dead000000000100 dead000000000122 [ 248.768683][ T6878] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 248.768705][ T6878] head: 00fff00000000040 ffff88801c041b40 dead000000000100 dead000000000122 [ 248.768725][ T6878] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 248.768745][ T6878] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 248.768765][ T6878] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 248.768778][ T6878] page dumped because: kasan: bad access detected [ 248.768794][ T6878] page_owner tracks the page as allocated [ 248.768802][ T6878] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18865630436 [ 248.768836][ T6878] post_alloc_hook+0x1f9/0x250 [ 248.768867][ T6878] get_page_from_freelist+0x220f/0x2280 [ 248.768888][ T6878] __alloc_frozen_pages_noprof+0x1fe/0x410 [ 248.768909][ T6878] allocate_slab+0x7d/0x5e0 [ 248.768934][ T6878] refill_objects+0x2d5/0x350 [ 248.768960][ T6878] __pcs_replace_empty_main+0x2c8/0x6c0 [ 248.769000][ T6878] __kmalloc_cache_noprof+0x396/0x600 [ 248.769020][ T6878] dvb_register_device+0x309/0x1dd0 [ 248.769052][ T6878] dvb_register_frontend+0x603/0x900 [ 248.769081][ T6878] vidtv_bridge_probe+0xab2/0x10e0 [ 248.769104][ T6878] platform_probe+0xf9/0x190 [ 248.769136][ T6878] really_probe+0x254/0xae0 [ 248.769157][ T6878] __driver_probe_device+0x1e8/0x360 [ 248.769176][ T6878] driver_probe_device+0x4f/0x240 [ 248.769197][ T6878] __driver_attach+0x339/0x600 [ 248.769216][ T6878] bus_for_each_dev+0x23b/0x2c0 [ 248.769242][ T6878] page_owner free stack trace missing [ 248.769250][ T6878] [ 248.769255][ T6878] Memory state around the buggy address: [ 248.769267][ T6878] ffff88802cf0d500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 248.769282][ T6878] ffff88802cf0d580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 248.769296][ T6878] >ffff88802cf0d600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.769308][ T6878] ^ [ 248.769319][ T6878] ffff88802cf0d680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.769334][ T6878] ffff88802cf0d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 248.769345][ T6878] ================================================================== [ 248.769368][ T6878] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 249.481012][ T6878] CPU: 1 UID: 0 PID: 6878 Comm: syz.0.272 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.491900][ T6878] Tainted: [L]=SOFTLOCKUP [ 249.496289][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 249.506381][ T6878] Call Trace: [ 249.509714][ T6878] [ 249.512685][ T6878] vpanic+0x26f/0x710 [ 249.517170][ T6878] panic+0xc5/0xd0 [ 249.520944][ T6878] ? __pfx_panic+0x10/0x10 [ 249.525417][ T6878] ? dvb_device_open+0xc4/0x340 [ 249.530303][ T6878] ? rcu_is_watching+0x16/0xb0 [ 249.535115][ T6878] ? dvb_device_open+0xc4/0x340 [ 249.540005][ T6878] check_panic_on_warn+0x89/0xb0 [ 249.544977][ T6878] ? dvb_device_open+0xc4/0x340 [ 249.549865][ T6878] end_report+0x73/0x170 [ 249.554155][ T6878] ? dvb_device_open+0xc4/0x340 [ 249.559063][ T6878] kasan_report+0x128/0x150 [ 249.563625][ T6878] ? dvb_device_open+0xc4/0x340 [ 249.568548][ T6878] dvb_device_open+0xc4/0x340 [ 249.573265][ T6878] ? do_raw_spin_unlock+0xf5/0x200 [ 249.578436][ T6878] chrdev_open+0x4d9/0x600 [ 249.582958][ T6878] ? __pfx_chrdev_open+0x10/0x10 [ 249.587945][ T6878] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 249.594324][ T6878] ? devcgroup_check_permission+0x31/0x8f0 [ 249.600212][ T6878] ? __pfx_chrdev_open+0x10/0x10 [ 249.605209][ T6878] do_dentry_open+0x80e/0x1360 [ 249.610029][ T6878] vfs_open_consume+0x4a/0x350 [ 249.614845][ T6878] ? path_openat+0x16e1/0x20f0 [ 249.619650][ T6878] path_openat+0x16fc/0x20f0 [ 249.624292][ T6878] do_file_open+0x23e/0x4a0 [ 249.628844][ T6878] ? __pfx_do_file_open+0x10/0x10 [ 249.633923][ T6878] ? _raw_spin_unlock+0x28/0x50 [ 249.638813][ T6878] ? alloc_fd+0x6af/0x760 [ 249.643195][ T6878] do_sys_openat2+0x115/0x200 [ 249.647932][ T6878] ? __pfx_do_sys_openat2+0x10/0x10 [ 249.653177][ T6878] ? do_user_addr_fault+0xd3f/0x1480 [ 249.658508][ T6878] __x64_sys_openat+0x138/0x170 [ 249.663410][ T6878] do_syscall_64+0x166/0x520 [ 249.668053][ T6878] ? trace_irq_disable+0x3b/0x140 [ 249.673118][ T6878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.679223][ T6878] ? clear_bhb_loop+0x70/0xc0 [ 249.683939][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.689868][ T6878] RIP: 0033:0x7fa97295ed8e [ 249.694319][ T6878] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 249.713974][ T6878] RSP: 002b:00007fa97392db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 249.722416][ T6878] RAX: ffffffffffffffda RBX: 00007fa97392e6c0 RCX: 00007fa97295ed8e [ 249.730401][ T6878] RDX: 0000000000000002 RSI: 00007fa97392dc00 RDI: ffffffffffffff9c [ 249.738393][ T6878] RBP: 00007fa97392dc00 R08: 0000000000000000 R09: 0000000000000000 [ 249.746373][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 249.754385][ T6878] R13: 00007fa972c26038 R14: 00007fa972c25fa0 R15: 00007ffcb31f2158 [ 249.762390][ T6878] [ 249.765621][ T6878] Kernel Offset: disabled [ 249.769965][ T6878] Rebooting in 86400 seconds..