last executing test programs: 9m43.856637769s ago: executing program 1 (id=60): socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x6) 9m43.409309858s ago: executing program 1 (id=62): munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) 9m42.845326239s ago: executing program 1 (id=65): mmap$KVM_VCPU(&(0x7f0000c81000/0x2000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000f06000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) 9m42.363432922s ago: executing program 1 (id=69): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) 9m41.603593744s ago: executing program 1 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2003b) execve(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000380)={[0xfffffffffffffffc]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) 9m33.62047238s ago: executing program 1 (id=76): unshare(0x28040680) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x10) r0 = msgget(0x0, 0x2c4) msgsnd(r0, &(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x2000, 0x0) msgctl$IPC_RMID(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) 9m18.377734293s ago: executing program 32 (id=76): unshare(0x28040680) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x10) r0 = msgget(0x0, 0x2c4) msgsnd(r0, &(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x2000, 0x0) msgctl$IPC_RMID(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) 7m13.727862267s ago: executing program 2 (id=340): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) 7m12.055892276s ago: executing program 2 (id=344): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./mnt\x00', 0x3000050, &(0x7f0000000400)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") ftruncate(0xffffffffffffffff, 0x201f) 7m10.61436322s ago: executing program 2 (id=346): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="180000001200050100000000000000df04001900"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, 0x0, 0x4000044) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r6, @ANYBLOB="140004006e696376663000000000000000000000080005000a000000f03729fc66d1692cb1d36e1b9f913833d261f7a36a3b50bf3abf7ecb79f6799e716455469ac782bb568931c44a47d398cc792bb6448ec31abf9206767d89ff9c9fc5309ca168f6bb9ca26a1047992d3909e02d40fcc513fba112a22d61d2a309127916a89458e6e76b67957af8a6c1ce502bbb0695cf518ba7c6c39e5261cf982d5f0b7e9dd6e1135b18ba5702df99589ac5fab92cfdd58e6092c1b6"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) 7m9.519127125s ago: executing program 2 (id=351): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000000e14010027bd7000ffdbdf2508003c0004000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x800) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33) 7m7.937282176s ago: executing program 2 (id=354): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) 7m5.444824069s ago: executing program 2 (id=357): prlimit64(0x0, 0xe, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000002cc0)={0x401, 0x101, 0x4, 0x7, 0x990}, 0x14) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, 0x0, 0x0) mkdir(0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 7m1.917755728s ago: executing program 4 (id=363): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000004c0)='./file1\x00', 0x1804818, &(0x7f0000000180)=ANY=[], 0xfc, 0x6b7, &(0x7f0000000d80)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x8, 0x0, [0x806f, 0xffffffffffffffff, 0x1, 0x1, 0x6], [0x2, 0x2, 0x36, 0x6, 0x7fff, 0xa1e, 0x85, 0x1004, 0x9, 0x800, 0xb, 0x1, 0x0, 0x3ff, 0x20000000004a, 0x9, 0x1, 0x3000000000, 0x2, 0x6, 0x1, 0x2a9, 0x3, 0xfbfffffffffffff9, 0x3, 0x7ffffffffffffffe, 0xa, 0x4125, 0xa51, 0xe372, 0xd, 0x3, 0x7, 0x4, 0x8, 0x100, 0x7f, 0x6, 0x101, 0x1, 0x4000000008001, 0x8000000000000000, 0x7, 0x1, 0x100000000, 0xca, 0x3, 0x5, 0x1, 0x82, 0x538a, 0x73, 0xda, 0x63e8000000000000, 0x0, 0x4, 0x2, 0x7, 0x3, 0x76, 0x4, 0x6, 0x7, 0x5bc, 0x2, 0x7b, 0x100000004, 0x8000, 0xc9, 0x8, 0xa, 0x9, 0x2, 0x7ff, 0x3, 0xe6, 0x5cff, 0x4, 0x9, 0x4, 0x8, 0x800, 0x6, 0x8000000000000000, 0x80000001, 0xc, 0x0, 0x6, 0x3ff, 0x6, 0x3, 0x5, 0x0, 0x7, 0x3, 0x7, 0xa, 0x18401, 0x16d, 0x2, 0x68d, 0xcb, 0x80000000000001, 0x3, 0x5ed, 0x0, 0x0, 0xffffffffffffff5f, 0x18000004, 0x7, 0x4, 0x11e, 0x8, 0xff, 0x0, 0x3, 0x80, 0x7ffffffc, 0x7ff, 0xe]}) 6m58.635429485s ago: executing program 4 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x65, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x5e, &(0x7f0000000080)=[@cr0={0x0, 0x40000000}], 0x1) 6m57.565610432s ago: executing program 4 (id=375): socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}}}, 0x0) rename(0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 6m49.607646624s ago: executing program 33 (id=357): prlimit64(0x0, 0xe, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000002cc0)={0x401, 0x101, 0x4, 0x7, 0x990}, 0x14) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, 0x0, 0x0) mkdir(0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 6m49.509330836s ago: executing program 4 (id=389): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280), 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000180)='./bus\x00', 0x0, 0x1080002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)={0x0, r2}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r1, 0xffffc000) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 6m45.034632173s ago: executing program 4 (id=396): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x201f) 6m43.513323221s ago: executing program 4 (id=399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x65, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x5e, &(0x7f0000000080)=[@cr0={0x0, 0x40000000}], 0x1) 6m39.390853508s ago: executing program 34 (id=399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x65, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x5e, &(0x7f0000000080)=[@cr0={0x0, 0x40000000}], 0x1) 6.221726527s ago: executing program 3 (id=1779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048014) 5.531399249s ago: executing program 7 (id=1782): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 5.474401966s ago: executing program 5 (id=1783): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) close_range(r2, 0xffffffffffffffff, 0x0) 5.456760038s ago: executing program 3 (id=1784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000680)={[{@dioread_lock}, {@nogrpid}, {@abort}, {@nodelalloc}, {@user_xattr}, {@grpjquota, 0x2e}, {@nombcache}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c7, &(0x7f0000000700)="$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") creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) open$dir(&(0x7f0000000080)='./file0\x00', 0x4000, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r5, 0x1276, 0x0) write$qrtrtun(r1, &(0x7f0000000300)="ca0e8007feff87", 0x7) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) 4.849769056s ago: executing program 5 (id=1787): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c00014000000000000000003400"], 0x118}}, 0x0) 4.729699998s ago: executing program 0 (id=1788): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c"], 0x0) 4.583956068s ago: executing program 7 (id=1789): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x81040a, 0x0, 0x1, 0x0, &(0x7f00000007c0)) rename(0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) r3 = memfd_secret(0x80000) fcntl$setlease(r3, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b000000050000000100", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b0e89ae44c9348d4e28f3a91cdec6d37160eae249c953592fdcce02fbc3751f9ebb7cd06f15f6762ef4eefa95422032b2730b9ab1f705d6606c36a862244dc16cd72297d2f3f05621812719c3540871eb72b9e160cf468d30ec641e1927d088c0bac69784308bde7f6d7b83752032c2820622bc465b961c3eb445a611a6dbbd6f236f3e6afbd69e7249fe6a7a233f296ff0ce379b12e6a5ef55e3bd477c11bb918119015b731a584d909c47300de112c000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000000), 0x4800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x40}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r4}) 4.243554206s ago: executing program 0 (id=1790): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) unshare(0x2c020400) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 4.036805989s ago: executing program 6 (id=1791): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.970038713s ago: executing program 5 (id=1792): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb709}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.756043236s ago: executing program 7 (id=1793): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, 0x0) 3.47749979s ago: executing program 3 (id=1794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffd5, 0x0, 0x0, 0x0}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="6103020303020601ab1702"], 0xb) 3.269817713s ago: executing program 6 (id=1795): openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) 3.191023318s ago: executing program 5 (id=1796): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0x3}, 0x18) pwritev(r0, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 3.143897392s ago: executing program 0 (id=1797): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) close_range(r2, 0xffffffffffffffff, 0x0) 2.813565995s ago: executing program 7 (id=1798): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="01002abd7000fedbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="24002d80"], 0x40}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) 2.573195977s ago: executing program 6 (id=1799): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@nodelalloc}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") chdir(&(0x7f0000000140)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 2.525184932s ago: executing program 3 (id=1800): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800054000000004"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c"], 0x0) 2.469946717s ago: executing program 5 (id=1801): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="180000001200050100000000000000df0400"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) close(r0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r3, 0x0, 0x4000044) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000", @ANYRES32=r8, @ANYBLOB="140004006e696376663000000000000000000000080005000a000000f03729fc66d1692cb1d36e1b9f913833d261f7a36a3b50bf3abf7ecb79f6799e716455469ac782bb568931c44a47d398cc792bb6448ec31abf9206767d89ff9c9fc5309ca168f6bb9ca26a1047992d3909e02d40fcc513fba112a22d61d2a309127916a89458e6e76b67957af8a6c1ce502bbb0695cf518ba7c6c39e5261cf982d5f0b7e9d"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r9}, 0x3c) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) 2.309762937s ago: executing program 0 (id=1802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 2.164144999s ago: executing program 7 (id=1803): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r0, &(0x7f0000019dc0)=""/102391, 0x18ff7, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) syz_io_uring_setup(0x160f, &(0x7f0000002180)={0x0, 0x8564, 0x20000, 0x0, 0x330}, &(0x7f0000001540)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000002240)=0x600f, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x69) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[], 0xa0}, 0x4004881) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Le1cYB/CTgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS9hZq7dIWU/rj81ku55znuc89fG/gfy0efmo2m7EQQjPx97u/P8tPFHunxqZnQoiF+RBC/puvfz2JRRW/v/UiWpeidTGRqR3cjr+eddz1PVRTR/Ho/DIewg8hhKWn4+S/vRtfvvPcdXJjc6WwtZZbfCysPw8vDOR7tvPLuyOH2fJsd3Yu+rEu462Zn6qNntw3Sy977YNt1VojcxPVpWOfM5//1p/z3++q1CuNyf7T1aF0Z/2qvBPl/iZ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgk53nrpMbmyuFrbXc4mNh/Xl4YSDfs51f3h05zJZnu7Nz8d/qLuOtmZ+qjZ7cN0sve+2DbdVaI3MT1aVjH1q/+/FzPokW+ja8z3+/q1KvNCb7T1eH0p31q/JOlPvbx/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5SfqLYOzU2PRNCLMyHEMbjHce/7DcT7+suomcp2i8mMrWD2/HXs467vodq6mgqEcIfW5aejpNfteoS/GM/BwAA//8394ZP") 1.96589803s ago: executing program 3 (id=1804): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syslog(0x2, &(0x7f0000000000)=""/127, 0x7f) 1.653008497s ago: executing program 6 (id=1805): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 1.421686535s ago: executing program 0 (id=1806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f0000000180)=r4}, 0x20) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000101ef020000000000000000000000f2"], 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x80) 888.672633ms ago: executing program 5 (id=1807): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) unshare(0x2c020400) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 743.985241ms ago: executing program 6 (id=1808): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2400000022000106"], 0x24}], 0x1}, 0x0) 557.571031ms ago: executing program 0 (id=1809): openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) 557.312904ms ago: executing program 3 (id=1810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffd5, 0x0, 0x0, 0x0}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="6103020303020601ab1702"], 0xb) 518.996323ms ago: executing program 7 (id=1811): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xa}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000980)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@nocompress}, {@map_normal}, {@showassoc}, {@mode={'mode', 0x3d, 0xe}}, {@utf8}, {@mode={'mode', 0x3d, 0x4}}, {@check_strict}, {@gid}, {@nocompress}, {@map_normal}, {@uid}, {@showassoc}, {@unhide}, {@check_strict}, {@showassoc}, {@mode={'mode', 0x3d, 0x1}}, {}]}, 0x1, 0x943, &(0x7f0000001500)="$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") 0s ago: executing program 6 (id=1812): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f0000005b80)=[{{&(0x7f0000000280), 0x6e, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}}, {{0x0, 0x0, 0x0}}], 0x2, 0x1, &(0x7f00000014c0)={0x77359400}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) kernel console output (not intermixed with test programs): ess `syz.6.646'. [ 486.923456][ T8305] netlink: 28 bytes leftover after parsing attributes in process `syz.6.646'. [ 486.936147][ T8305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.341509][ T8319] syzkaller0: entered promiscuous mode [ 489.347195][ T8319] syzkaller0: entered allmulticast mode [ 489.623648][ T8330] loop3: detected capacity change from 0 to 1024 [ 490.460630][ T8344] loop0: detected capacity change from 0 to 1024 [ 490.559347][ T8344] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 490.570319][ T8344] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 490.602793][ T8344] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 490.653963][ T8355] loop3: detected capacity change from 0 to 256 [ 490.739688][ T8344] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.655: Freeing blocks not in datazone - block = 0, count = 4096 [ 490.754462][ T8344] EXT4-fs (loop0): Remounting filesystem read-only [ 490.754739][ T8344] EXT4-fs (loop0): 1 orphan inode deleted [ 490.756637][ T8344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.779105][ T3585] EXT4-fs (loop0): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 490.779220][ T3585] __quota_error: 22 callbacks suppressed [ 490.779330][ T3585] Quota error (device loop0): write_blk: dquota write failed [ 490.779469][ T3585] Quota error (device loop0): free_dqentry: Can't move quota data block (2) to free list [ 490.814346][ T8344] process 'syz.0.655' launched '/dev/fd/4' with NULL argv: empty string added [ 491.338959][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.663654][ T8361] IPVS: nq: FWM 3 0x00000003 - no destination available [ 491.672603][ T3083] IPVS: starting estimator thread 0... [ 491.771956][ T8363] IPVS: using max 240 ests per chain, 12000 per kthread [ 491.848318][ T8365] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 491.979689][ T8370] netlink: 76 bytes leftover after parsing attributes in process `syz.0.661'. [ 492.144108][ T8370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.661'. [ 492.156214][ T8370] 8021q: adding VLAN 0 to HW filter on device bond3 [ 493.724163][ T8382] syzkaller0: entered promiscuous mode [ 493.729850][ T8382] syzkaller0: entered allmulticast mode [ 495.427150][ T8394] loop6: detected capacity change from 0 to 1024 [ 495.901264][ T8398] netlink: 16354 bytes leftover after parsing attributes in process `syz.7.669'. [ 497.029597][ T8411] loop6: detected capacity change from 0 to 256 [ 497.303350][ T8415] netlink: 36 bytes leftover after parsing attributes in process `syz.5.675'. [ 497.313532][ T8415] netlink: 16 bytes leftover after parsing attributes in process `syz.5.675'. [ 497.322898][ T8415] netlink: 36 bytes leftover after parsing attributes in process `syz.5.675'. [ 497.332163][ T8415] netlink: 36 bytes leftover after parsing attributes in process `syz.5.675'. [ 497.581950][ T8417] netlink: 'syz.3.676': attribute type 1 has an invalid length. [ 497.707954][ T8421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.676'. [ 497.709118][ T8420] netlink: 76 bytes leftover after parsing attributes in process `syz.3.676'. [ 498.486406][ T8421] 8021q: adding VLAN 0 to HW filter on device bond5 [ 498.963673][ T8428] syzkaller0: entered promiscuous mode [ 498.969350][ T8428] syzkaller0: entered allmulticast mode [ 500.245505][ T8442] netlink: 16354 bytes leftover after parsing attributes in process `syz.7.683'. [ 500.356927][ T8441] loop5: detected capacity change from 0 to 1024 [ 501.311428][ T8453] loop7: detected capacity change from 0 to 1024 [ 501.474655][ T8453] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.487563][ T8453] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.599979][ T8453] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.608587][ T8467] netlink: 36 bytes leftover after parsing attributes in process `syz.3.689'. [ 502.617971][ T8467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.689'. [ 502.627238][ T8467] netlink: 36 bytes leftover after parsing attributes in process `syz.3.689'. [ 502.636507][ T8467] netlink: 36 bytes leftover after parsing attributes in process `syz.3.689'. [ 504.041665][ T8475] netlink: 'syz.5.691': attribute type 1 has an invalid length. [ 504.294058][ T8475] netlink: 76 bytes leftover after parsing attributes in process `syz.5.691'. [ 505.035106][ T8484] netlink: 28 bytes leftover after parsing attributes in process `syz.5.691'. [ 506.332936][ T8491] netlink: 16354 bytes leftover after parsing attributes in process `syz.7.696'. [ 507.383796][ T8506] syzkaller0: entered promiscuous mode [ 507.389497][ T8506] syzkaller0: entered allmulticast mode [ 507.521432][ T8509] loop5: detected capacity change from 0 to 1024 [ 507.845296][ T8509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.858549][ T8509] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.931604][ T8515] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 508.032468][ T8509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.367425][ T8532] netlink: 'syz.6.708': attribute type 1 has an invalid length. [ 509.731363][ T8538] netlink: 76 bytes leftover after parsing attributes in process `syz.6.708'. [ 510.004069][ T8532] netlink: 28 bytes leftover after parsing attributes in process `syz.6.708'. [ 510.016280][ T8532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 511.247089][ T8557] loop6: detected capacity change from 0 to 128 [ 511.562236][ T8563] syzkaller0: entered promiscuous mode [ 511.568158][ T8563] syzkaller0: entered allmulticast mode [ 512.247834][ T30] audit: type=1326 audit(1758547511.532:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8568 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 512.366743][ T30] audit: type=1326 audit(1758547511.602:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8568 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 512.389431][ T30] audit: type=1326 audit(1758547511.602:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8568 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 512.455847][ T8569] loop0: detected capacity change from 0 to 1024 [ 512.582163][ T8576] syzkaller0: entered promiscuous mode [ 512.587838][ T8576] syzkaller0: entered allmulticast mode [ 512.809139][ T8569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.822586][ T8569] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.000145][ T8584] netlink: 'syz.3.724': attribute type 1 has an invalid length. [ 513.164867][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 513.174475][ T8588] netlink: 32 bytes leftover after parsing attributes in process `syz.3.724'. [ 513.236523][ T8589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.724'. [ 513.569485][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.876084][ T8589] 8021q: adding VLAN 0 to HW filter on device bond6 [ 516.217627][ T8610] netlink: 19 bytes leftover after parsing attributes in process `syz.0.731'. [ 516.927723][ T8620] syzkaller0: entered promiscuous mode [ 516.934270][ T8620] syzkaller0: entered allmulticast mode [ 517.193112][ T8624] loop3: detected capacity change from 0 to 1024 [ 517.382836][ T8624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.395741][ T8624] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.557552][ T8635] netlink: 'syz.7.739': attribute type 1 has an invalid length. [ 517.820702][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.7.739'. [ 517.831569][ T8635] netlink: 32 bytes leftover after parsing attributes in process `syz.7.739'. [ 517.882214][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.995704][ T8635] netlink: 28 bytes leftover after parsing attributes in process `syz.7.739'. [ 518.007915][ T8635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 518.433059][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 518.651165][ T30] audit: type=1326 audit(1758547517.872:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8648 comm="syz.6.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 518.881667][ T30] audit: type=1326 audit(1758547517.972:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8648 comm="syz.6.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 518.904536][ T30] audit: type=1326 audit(1758547518.002:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8648 comm="syz.6.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 518.927370][ T30] audit: type=1326 audit(1758547518.002:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8648 comm="syz.6.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 518.949942][ T30] audit: type=1326 audit(1758547518.002:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8648 comm="syz.6.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 518.975872][ T30] audit: type=1326 audit(1758547518.012:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8648 comm="syz.6.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 518.999929][ T30] audit: type=1326 audit(1758547518.042:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8648 comm="syz.6.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 519.023046][ T30] audit: type=1326 audit(1758547518.092:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8648 comm="syz.6.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 519.045641][ T30] audit: type=1326 audit(1758547518.092:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8648 comm="syz.6.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 519.068615][ T30] audit: type=1326 audit(1758547518.112:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8648 comm="syz.6.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 521.980469][ T8667] netlink: 24 bytes leftover after parsing attributes in process `syz.7.749'. [ 521.992178][ T8667] IPVS: Error connecting to the multicast addr [ 522.364637][ T8673] netlink: 36 bytes leftover after parsing attributes in process `syz.3.751'. [ 523.083708][ T8675] loop5: detected capacity change from 0 to 1024 [ 523.193197][ T8675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.203657][ T8684] netlink: 'syz.0.755': attribute type 1 has an invalid length. [ 523.206474][ T8675] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 523.385957][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 523.395630][ T8684] netlink: 32 bytes leftover after parsing attributes in process `syz.0.755'. [ 523.591800][ T8692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.755'. [ 523.764016][ T6283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.374111][ T8706] netlink: 19 bytes leftover after parsing attributes in process `syz.0.761'. [ 525.666187][ T8726] netlink: 'syz.6.768': attribute type 1 has an invalid length. [ 525.682828][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.766'. [ 525.736327][ T8728] netlink: 32 bytes leftover after parsing attributes in process `syz.5.766'. [ 525.811180][ T8723] loop0: detected capacity change from 0 to 2048 [ 525.915657][ T8729] loop3: detected capacity change from 0 to 1024 [ 525.974433][ T8723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.123009][ T8729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.139160][ T8729] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.273096][ T8723] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.767: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 526.404084][ T8723] EXT4-fs (loop0): Remounting filesystem read-only [ 526.453965][ T8740] netlink: 'syz.6.771': attribute type 1 has an invalid length. [ 526.589744][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.6.771'. [ 526.601819][ T8742] netlink: 16 bytes leftover after parsing attributes in process `syz.6.771'. [ 526.671395][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.764724][ T8740] 8021q: adding VLAN 0 to HW filter on device bond3 [ 526.959056][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.486122][ T8753] __nla_validate_parse: 1 callbacks suppressed [ 527.486200][ T8753] netlink: 19 bytes leftover after parsing attributes in process `syz.0.774'. [ 527.604308][ T8752] loop6: detected capacity change from 0 to 512 [ 527.657850][ T8752] EXT4-fs: Ignoring removed nobh option [ 527.870614][ T8752] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.775: corrupted inode contents [ 527.961732][ T8752] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.775: mark_inode_dirty error [ 528.085737][ T8752] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.775: corrupted inode contents [ 528.132663][ T8752] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.775: mark_inode_dirty error [ 528.211367][ T8752] __quota_error: 1 callbacks suppressed [ 528.211447][ T8752] Quota error (device loop6): write_blk: dquota write failed [ 528.226177][ T8752] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 528.237007][ T8752] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.775: Failed to acquire dquot type 0 [ 528.308284][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.777'. [ 528.497623][ T8752] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.775: corrupted inode contents [ 528.543158][ T8752] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.775: mark_inode_dirty error [ 528.611795][ T3083] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 528.657418][ T8752] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.775: corrupted inode contents [ 528.674258][ T5821] Bluetooth: hci0: command 0x0406 tx timeout [ 528.794819][ T8752] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.775: mark_inode_dirty error [ 528.820035][ T3083] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.831785][ T3083] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.842047][ T3083] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 528.851564][ T3083] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.859732][ T8752] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.775: corrupted inode contents [ 528.904748][ T3083] usb 6-1: config 0 descriptor?? [ 528.953216][ T8752] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 529.021636][ T8752] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.775: corrupted inode contents [ 529.136438][ T8752] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.775: mark_inode_dirty error [ 529.231359][ T8752] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 529.344107][ T8752] EXT4-fs (loop6): 1 truncate cleaned up [ 529.352805][ T3083] usbhid 6-1:0.0: can't add hid device: -32 [ 529.352874][ T8752] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.359700][ T3083] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 529.372273][ T8752] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.793594][ T7365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.939089][ T8789] loop3: detected capacity change from 0 to 1024 [ 530.039023][ T8789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.052149][ T8789] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.112850][ T8795] netlink: 'syz.7.785': attribute type 1 has an invalid length. [ 530.173842][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.7.785'. [ 530.183536][ T8794] netlink: 16 bytes leftover after parsing attributes in process `syz.7.785'. [ 530.404804][ T8795] netlink: 28 bytes leftover after parsing attributes in process `syz.7.785'. [ 530.418867][ T8795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 530.749438][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.193354][ T8806] netlink: 19 bytes leftover after parsing attributes in process `syz.7.788'. [ 531.218513][ T3083] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 531.323574][ T1863] usb 6-1: USB disconnect, device number 4 [ 531.441428][ T3083] usb 1-1: Using ep0 maxpacket: 8 [ 531.533052][ T3083] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 531.541829][ T3083] usb 1-1: config 179 has no interface number 0 [ 531.548295][ T3083] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 531.559860][ T3083] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 531.574277][ T3083] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 531.586898][ T3083] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 531.599605][ T3083] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 531.613398][ T3083] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 531.622817][ T3083] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.735026][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.742450][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 531.822792][ T8804] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 532.273314][ T3083] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input12 [ 532.466076][ T1863] usb 1-1: USB disconnect, device number 12 [ 532.466168][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 532.481790][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 533.679214][ T8828] loop6: detected capacity change from 0 to 1024 [ 533.747342][ T8834] netlink: 'syz.3.798': attribute type 1 has an invalid length. [ 533.768454][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.7.799'. [ 533.871357][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.798'. [ 533.880554][ T8842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.798'. [ 533.929093][ T8834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.798'. [ 533.941442][ T8834] 8021q: adding VLAN 0 to HW filter on device bond7 [ 534.013725][ T8828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.029786][ T8828] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.401273][ T7365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.787274][ T8852] netlink: 'syz.6.803': attribute type 1 has an invalid length. [ 536.420473][ T1863] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 536.661641][ T1863] usb 6-1: Using ep0 maxpacket: 8 [ 536.725858][ T1863] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 536.735221][ T1863] usb 6-1: config 179 has no interface number 0 [ 536.742646][ T1863] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 536.754118][ T1863] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 536.765712][ T1863] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 536.777811][ T1863] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 536.791878][ T1863] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 536.806250][ T1863] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 536.815859][ T1863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.908576][ T8866] loop7: detected capacity change from 0 to 512 [ 537.026349][ T8866] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 537.285819][ T8866] EXT4-fs (loop7): 1 truncate cleaned up [ 537.294110][ T8866] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.580713][ T8863] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 537.683343][ T30] audit: type=1800 audit(1758547536.852:83): pid=8866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.808" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 538.079183][ T1863] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input13 [ 538.460269][ T7411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.539080][ T3083] usb 6-1: USB disconnect, device number 5 [ 538.539218][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 538.561397][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 538.955647][ T8877] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.217943][ T8877] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.311290][ T1863] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 539.425090][ T8877] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.632805][ T1863] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 539.642531][ T1863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.645473][ T8877] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.650689][ T1863] usb 7-1: Product: syz [ 539.651033][ T1863] usb 7-1: Manufacturer: syz [ 539.673403][ T1863] usb 7-1: SerialNumber: syz [ 539.699439][ T8887] loop0: detected capacity change from 0 to 1024 [ 539.762663][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.815'. [ 539.895995][ T8887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.909209][ T8887] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.972078][ T8895] debugfs: 'netdev:nicvf0' already exists in 'phy13' [ 540.086189][ T57] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.184118][ T4205] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.237664][ T1863] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 540.331822][ T57] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.340295][ T57] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.505125][ T8659] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 540.531652][ T8899] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 540.620285][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.884605][ T5871] usb 7-1: USB disconnect, device number 2 [ 540.912946][ C1] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 541.639941][ T8912] netlink: 264 bytes leftover after parsing attributes in process `syz.5.821'. [ 541.663756][ T8659] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 541.672043][ T8659] ath9k_htc: Failed to initialize the device [ 542.155954][ T5871] usb 7-1: ath9k_htc: USB layer deinitialized [ 544.143698][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.6.827'. [ 544.523462][ T30] audit: type=1326 audit(1758547543.782:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.6.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 544.631531][ T30] audit: type=1326 audit(1758547543.842:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.6.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 544.655580][ T30] audit: type=1326 audit(1758547543.842:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.6.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 544.681646][ T30] audit: type=1326 audit(1758547543.842:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.6.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 544.705064][ T30] audit: type=1326 audit(1758547543.892:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.6.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 544.727740][ T30] audit: type=1326 audit(1758547543.902:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.6.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 545.179466][ T30] audit: type=1326 audit(1758547544.062:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.6.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 545.204425][ T30] audit: type=1326 audit(1758547544.062:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.6.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 545.228185][ T30] audit: type=1326 audit(1758547544.062:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.6.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 545.251996][ T30] audit: type=1326 audit(1758547544.062:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.6.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 545.352566][ T8948] netlink: 19 bytes leftover after parsing attributes in process `syz.6.833'. [ 545.516943][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.835'. [ 546.208831][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'. [ 546.248327][ T8958] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000010 [ 546.393024][ T8960] debugfs: 'netdev:nicvf0' already exists in 'phy3' [ 546.940227][ T8967] loop5: detected capacity change from 0 to 512 [ 546.998148][ T8967] EXT4-fs: Ignoring removed i_version option [ 547.004978][ T8967] EXT4-fs: Ignoring removed bh option [ 547.224025][ T8967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.361335][ T8967] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 547.899995][ T8983] netlink: 19 bytes leftover after parsing attributes in process `syz.7.849'. [ 547.963542][ T6283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.479863][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.850'. [ 549.201978][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.856'. [ 549.365349][ T8999] debugfs: 'netdev:nicvf0' already exists in 'phy13' [ 550.076988][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 550.077064][ T30] audit: type=1326 audit(1758547549.292:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.6.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 550.108946][ T30] audit: type=1326 audit(1758547549.332:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.6.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 550.132644][ T30] audit: type=1326 audit(1758547549.332:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.6.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 550.823014][ T9019] netlink: 19 bytes leftover after parsing attributes in process `syz.6.864'. [ 551.265778][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 552.558432][ T9040] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 553.106126][ T9048] loop0: detected capacity change from 0 to 256 [ 553.126348][ T9052] netlink: 19 bytes leftover after parsing attributes in process `syz.6.879'. [ 553.241838][ T30] audit: type=1800 audit(1758547552.522:98): pid=9048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.877" name="bus" dev="loop0" ino=1048631 res=0 errno=0 [ 553.664074][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.882'. [ 555.233276][ T9088] netlink: 19 bytes leftover after parsing attributes in process `syz.7.893'. [ 555.718225][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.7.897'. [ 560.591931][ T9127] netlink: 19 bytes leftover after parsing attributes in process `syz.7.907'. [ 560.749550][ T9128] loop3: detected capacity change from 0 to 1024 [ 560.930677][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 561.706021][ T9144] netlink: 'syz.0.915': attribute type 1 has an invalid length. [ 561.948297][ T9144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.915'. [ 561.966571][ T9151] bridge0: port 3(gretap0) entered blocking state [ 561.973783][ T9151] bridge0: port 3(gretap0) entered disabled state [ 561.984248][ T9151] gretap0: entered allmulticast mode [ 561.993098][ T9151] gretap0: entered promiscuous mode [ 562.000510][ T9151] bridge0: port 3(gretap0) entered blocking state [ 562.007454][ T9151] bridge0: port 3(gretap0) entered forwarding state [ 562.034589][ T9144] 8021q: adding VLAN 0 to HW filter on device bond5 [ 562.615349][ T9155] netlink: 132 bytes leftover after parsing attributes in process `syz.0.917'. [ 562.712285][ T9161] netlink: 19 bytes leftover after parsing attributes in process `syz.5.921'. [ 564.462763][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.925'. [ 565.224526][ T9180] netlink: 'syz.6.927': attribute type 1 has an invalid length. [ 565.392915][ T9180] netlink: 28 bytes leftover after parsing attributes in process `syz.6.927'. [ 565.405375][ T9180] 8021q: adding VLAN 0 to HW filter on device bond4 [ 567.297893][ T9207] loop5: detected capacity change from 0 to 512 [ 567.429905][ T9207] EXT4-fs: Ignoring removed i_version option [ 567.437347][ T9207] EXT4-fs: Ignoring removed bh option [ 567.802503][ T9212] netlink: 19 bytes leftover after parsing attributes in process `syz.3.935'. [ 569.206412][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.7.938'. [ 569.440700][ T9207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.466595][ T9207] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 570.177884][ T6283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.827247][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.6.942'. [ 570.836893][ T9242] netlink: 16 bytes leftover after parsing attributes in process `syz.6.942'. [ 570.846187][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.6.942'. [ 570.855596][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.6.942'. [ 571.465382][ C0] hrtimer: interrupt took 216184 ns [ 572.050945][ T9255] netlink: 19 bytes leftover after parsing attributes in process `syz.6.947'. [ 572.114963][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.7.949'. [ 575.768703][ T9288] netlink: 36 bytes leftover after parsing attributes in process `syz.6.957'. [ 575.768797][ T9288] netlink: 16 bytes leftover after parsing attributes in process `syz.6.957'. [ 575.768886][ T9288] netlink: 36 bytes leftover after parsing attributes in process `syz.6.957'. [ 575.769129][ T9288] netlink: 36 bytes leftover after parsing attributes in process `syz.6.957'. [ 577.101589][ T9303] netlink: 19 bytes leftover after parsing attributes in process `syz.3.961'. [ 578.841883][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.7.962'. [ 580.608090][ T9316] program syz.6.963 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 582.842788][ T9247] Set syz1 is full, maxelem 65536 reached [ 583.065442][ T9332] netlink: 36 bytes leftover after parsing attributes in process `syz.7.973'. [ 583.065541][ T9332] netlink: 16 bytes leftover after parsing attributes in process `syz.7.973'. [ 583.065631][ T9332] netlink: 36 bytes leftover after parsing attributes in process `syz.7.973'. [ 583.065777][ T9332] netlink: 36 bytes leftover after parsing attributes in process `syz.7.973'. [ 583.268545][ T9334] loop0: detected capacity change from 0 to 512 [ 583.308093][ T9334] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 583.443324][ T9334] EXT4-fs (loop0): 1 truncate cleaned up [ 583.445542][ T9334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.867210][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.388579][ T9384] loop6: detected capacity change from 0 to 512 [ 587.443306][ T9384] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 587.593324][ T9384] EXT4-fs (loop6): 1 truncate cleaned up [ 587.652481][ T9384] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.183892][ T7365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.506552][ T8659] IPVS: starting estimator thread 0... [ 588.616289][ T9408] IPVS: using max 240 ests per chain, 12000 per kthread [ 591.017851][ T9437] loop0: detected capacity change from 0 to 512 [ 591.081484][ T9437] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 591.178125][ T9437] EXT4-fs (loop0): 1 truncate cleaned up [ 591.315660][ T9437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.829254][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.774845][ T3083] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 593.026548][ T3083] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.037970][ T3083] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.048304][ T3083] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 593.057832][ T3083] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.267329][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.275001][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.314254][ T3083] usb 7-1: config 0 descriptor?? [ 595.704002][ T3083] input: HID 256c:006d as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0009/input/input14 [ 596.463912][ T3083] uclogic 0003:256C:006D.0009: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 596.645620][ T9482] loop6: detected capacity change from 0 to 512 [ 596.698173][ T3083] usb 7-1: USB disconnect, device number 3 [ 596.805263][ T9482] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 596.875811][ T9481] loop7: detected capacity change from 0 to 1024 [ 596.961221][ T8659] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 596.981685][ T9481] journal_path: Non-blockdev passed as './file2' [ 596.988321][ T9481] EXT4-fs: error: could not find journal device path [ 597.095303][ T9487] fido_id[9487]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 597.108437][ T9490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1020'. [ 597.119299][ T9490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1020'. [ 597.128644][ T9490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1020'. [ 597.138057][ T9490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1020'. [ 597.148508][ T9482] EXT4-fs (loop6): 1 truncate cleaned up [ 597.156545][ T9482] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.261467][ T8659] usb 4-1: Using ep0 maxpacket: 8 [ 597.310730][ T8659] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 597.319594][ T8659] usb 4-1: config 179 has no interface number 0 [ 597.326430][ T8659] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 597.337844][ T8659] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 597.349591][ T8659] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 597.361103][ T8659] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 597.372850][ T8659] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 597.386452][ T8659] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 597.395888][ T8659] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.565383][ T30] audit: type=1326 audit(1758547596.802:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 597.588190][ T30] audit: type=1326 audit(1758547596.812:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 597.613267][ T30] audit: type=1326 audit(1758547596.812:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 597.681847][ T9485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 597.734335][ T7365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.056610][ T8659] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input15 [ 598.322019][ T9499] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1026'. [ 598.542705][ T8659] usb 4-1: USB disconnect, device number 6 [ 598.549079][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 598.549294][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 600.053636][ T9507] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 600.060239][ T9507] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 600.225279][ T9507] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 600.231810][ T9507] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 600.332497][ T9507] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 601.108221][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1029'. [ 601.537887][ T9507] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 601.544356][ T9507] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 601.552259][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 601.561492][ T9507] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 601.567900][ T9507] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 602.498328][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 603.543756][ T9507] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 603.553694][ T9507] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 604.331529][ T9521] Bluetooth: hci2: command 0x0406 tx timeout [ 604.337750][ T9521] Bluetooth: hci3: command 0x0406 tx timeout [ 604.344108][ T9521] Bluetooth: hci5: command 0x0406 tx timeout [ 604.511855][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 605.949870][ T9533] loop7: detected capacity change from 0 to 2048 [ 606.123464][ T9539] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 606.364652][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 606.365412][ T9521] Bluetooth: hci0: command 0x0406 tx timeout [ 606.437287][ T9521] Bluetooth: hci5: command 0x0406 tx timeout [ 606.596412][ T9521] Bluetooth: hci4: command 0x0406 tx timeout [ 607.219133][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1041'. [ 608.123426][ T30] audit: type=1326 audit(1758547607.292:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.6.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 608.146842][ T30] audit: type=1326 audit(1758547607.292:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.6.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 608.443292][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1043'. [ 608.507099][ T9521] Bluetooth: hci0: command 0x0406 tx timeout [ 609.009727][ T9566] loop0: detected capacity change from 0 to 128 [ 613.518708][ T9583] loop5: detected capacity change from 0 to 1024 [ 613.569284][ T9583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 613.609317][ T9583] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 613.671990][ T9587] loop7: detected capacity change from 0 to 256 [ 613.716288][ T9583] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 613.801811][ T9592] loop6: detected capacity change from 0 to 128 [ 613.848447][ T9583] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.1050: Freeing blocks not in datazone - block = 0, count = 4096 [ 613.931247][ T9583] EXT4-fs (loop5): Remounting filesystem read-only [ 613.938273][ T9583] EXT4-fs (loop5): 1 orphan inode deleted [ 613.946470][ T9583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.960221][ T4205] EXT4-fs (loop5): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 613.971686][ T4205] Quota error (device loop5): write_blk: dquota write failed [ 613.975937][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1052'. [ 613.979274][ T4205] Quota error (device loop5): free_dqentry: Can't move quota data block (2) to free list [ 614.024377][ T9592] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1052'. [ 614.138011][ T9587] FAT-fs (loop7): Directory bread(block 64) failed [ 614.145178][ T9587] FAT-fs (loop7): Directory bread(block 65) failed [ 614.152338][ T9587] FAT-fs (loop7): Directory bread(block 66) failed [ 614.159094][ T9587] FAT-fs (loop7): Directory bread(block 67) failed [ 614.166222][ T9587] FAT-fs (loop7): Directory bread(block 68) failed [ 614.173261][ T9587] FAT-fs (loop7): Directory bread(block 69) failed [ 614.180110][ T9587] FAT-fs (loop7): Directory bread(block 70) failed [ 614.187123][ T9587] FAT-fs (loop7): Directory bread(block 71) failed [ 614.194140][ T9587] FAT-fs (loop7): Directory bread(block 72) failed [ 614.204007][ T9587] FAT-fs (loop7): Directory bread(block 73) failed [ 614.553476][ T9592] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1052'. [ 614.645156][ T6283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.872964][ T9617] loop6: detected capacity change from 0 to 512 [ 616.915959][ T9617] EXT4-fs (loop6): #blocks per group too big: 233603072 [ 617.193395][ T9622] loop3: detected capacity change from 0 to 128 [ 618.679345][ T9634] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000000e [ 619.412472][ T9641] tipc: New replicast peer: 10.1.1.2 [ 619.419031][ T9641] tipc: Enabled bearer , priority 10 [ 620.099200][ T9647] fuse: Bad value for 'group_id' [ 620.104770][ T9647] fuse: Bad value for 'group_id' [ 621.175845][ T3083] tipc: Node number set to 2424500903 [ 621.741648][ T30] audit: type=1326 audit(1758547620.952:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.5.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 621.765237][ T30] audit: type=1326 audit(1758547620.972:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.5.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 621.790290][ T30] audit: type=1326 audit(1758547620.982:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.5.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 621.813891][ T30] audit: type=1326 audit(1758547621.002:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.5.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 621.836769][ T30] audit: type=1326 audit(1758547621.002:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.5.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 621.859479][ T30] audit: type=1326 audit(1758547621.022:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.5.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 621.884278][ T30] audit: type=1326 audit(1758547621.022:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.5.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 622.205008][ T30] audit: type=1326 audit(1758547621.192:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.5.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 622.228015][ T30] audit: type=1326 audit(1758547621.202:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.5.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 623.292696][ T9678] fuse: Bad value for 'group_id' [ 623.297983][ T9678] fuse: Bad value for 'group_id' [ 627.566694][ T9713] loop0: detected capacity change from 0 to 164 [ 627.726549][ T9713] Unable to read rock-ridge attributes [ 627.816981][ T9713] Unable to read rock-ridge attributes [ 627.987159][ T9720] loop7: detected capacity change from 0 to 164 [ 632.447428][ T9743] netlink: 'syz.5.1107': attribute type 21 has an invalid length. [ 632.828802][ T9748] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1109'. [ 633.412747][ T9750] sd 0:0:1:0: device reset [ 633.718391][ T30] audit: type=1326 audit(1758547632.982:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.5.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 633.742045][ T30] audit: type=1326 audit(1758547632.982:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.5.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 633.767466][ T30] audit: type=1326 audit(1758547632.982:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.5.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 634.174527][ T9767] loop3: detected capacity change from 0 to 512 [ 634.233349][ T9764] syzkaller0: entered promiscuous mode [ 634.239032][ T9764] syzkaller0: entered allmulticast mode [ 634.274531][ T9767] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 634.562128][ T9767] EXT4-fs (loop3): 1 truncate cleaned up [ 634.740176][ T9767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.506360][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.812726][ T9787] netlink: 19 bytes leftover after parsing attributes in process `syz.6.1123'. [ 636.377597][ T9794] loop0: detected capacity change from 0 to 128 [ 636.444643][ T9794] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 636.494031][ T9794] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 636.677527][ T9799] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000000f [ 637.103038][ T4009] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 637.765118][ T9812] loop7: detected capacity change from 0 to 512 [ 637.800535][ T9809] syzkaller0: entered promiscuous mode [ 637.806379][ T9809] syzkaller0: entered allmulticast mode [ 637.866637][ T9812] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 638.008447][ T9812] EXT4-fs (loop7): 1 truncate cleaned up [ 638.017535][ T9812] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.495349][ T7411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.596339][ T9818] loop6: detected capacity change from 0 to 128 [ 638.723331][ T9818] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 638.840893][ T9818] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 639.151483][ T9827] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1139'. [ 639.403977][ T7365] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 640.792087][ T9839] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000000f [ 641.821814][ T30] audit: type=1326 audit(1758547641.102:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.7.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e958eec9 code=0x7ffc0000 [ 641.845002][ T30] audit: type=1326 audit(1758547641.122:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.7.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f13e958eec9 code=0x7ffc0000 [ 641.871567][ T30] audit: type=1326 audit(1758547641.122:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.7.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e958eec9 code=0x7ffc0000 [ 641.895729][ T30] audit: type=1326 audit(1758547641.122:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.7.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f13e9590de7 code=0x7ffc0000 [ 641.910023][ T9852] loop5: detected capacity change from 0 to 512 [ 641.918592][ T30] audit: type=1326 audit(1758547641.122:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.7.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f13e9590d5c code=0x7ffc0000 [ 641.918813][ T30] audit: type=1326 audit(1758547641.132:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.7.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f13e9590c94 code=0x7ffc0000 [ 641.919020][ T30] audit: type=1326 audit(1758547641.142:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.7.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f13e9590c94 code=0x7ffc0000 [ 641.919226][ T30] audit: type=1326 audit(1758547641.162:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.7.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f13e958db2a code=0x7ffc0000 [ 642.019293][ T30] audit: type=1326 audit(1758547641.162:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.7.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e958eec9 code=0x7ffc0000 [ 642.042938][ T30] audit: type=1326 audit(1758547641.192:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.7.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f13e958eec9 code=0x7ffc0000 [ 642.199421][ T9852] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 642.222936][ T9847] IPv6: Can't replace route, no match found [ 642.292075][ T9852] EXT4-fs (loop5): 1 truncate cleaned up [ 642.294065][ T9852] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.698942][ T6283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.046160][ T9864] netlink: 19 bytes leftover after parsing attributes in process `syz.7.1152'. [ 643.568042][ T9872] loop5: detected capacity change from 0 to 512 [ 643.605540][ T9872] EXT4-fs: Ignoring removed bh option [ 643.611818][ T9872] EXT4-fs: Ignoring removed mblk_io_submit option [ 643.731908][ T9872] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 643.804379][ T9872] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 643.871584][ T9872] EXT4-fs (loop5): orphan cleanup on readonly fs [ 643.936682][ T9872] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1154: Failed to acquire dquot type 1 [ 644.022502][ T9872] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1154: Invalid block bitmap block 0 in block_group 0 [ 644.062892][ T9877] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000000f [ 644.073229][ T9872] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1154: Invalid block bitmap block 0 in block_group 0 [ 644.121465][ T9872] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1154: Invalid block bitmap block 0 in block_group 0 [ 644.192922][ T9872] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1154: Failed to acquire dquot type 1 [ 644.442105][ T9872] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1154: Failed to acquire dquot type 1 [ 644.657612][ T9872] EXT4-fs (loop5): 1 orphan inode deleted [ 645.217340][ T9872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 645.385606][ T9872] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 645.605874][ T9887] loop3: detected capacity change from 0 to 512 [ 645.753232][ T9872] syz.5.1154 (9872) used greatest stack depth: 2528 bytes left [ 645.795880][ T6283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.991146][ T9890] loop6: detected capacity change from 0 to 512 [ 646.235474][ T9890] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 646.307510][ T9887] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 646.528337][ T9890] EXT4-fs (loop6): 1 truncate cleaned up [ 646.536345][ T9890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.591376][ T9887] EXT4-fs (loop3): 1 truncate cleaned up [ 646.599053][ T9887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.872701][ T9903] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1166'. [ 647.040012][ T7365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.093707][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.107948][ T9918] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000000f [ 652.029197][ T9941] loop0: detected capacity change from 0 to 512 [ 652.062261][ T9941] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 652.187355][ T9941] EXT4-fs (loop0): 1 truncate cleaned up [ 652.223948][ T9941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.311236][ T8659] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 652.531563][ T8659] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.543014][ T8659] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.553181][ T8659] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 652.562618][ T8659] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.712663][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.765889][ T8659] usb 7-1: config 0 descriptor?? [ 653.102862][ T9954] vcan0: entered allmulticast mode [ 653.138553][ T9954] vcan0: left allmulticast mode [ 653.254544][ T9956] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000000f [ 654.098629][ T8659] input: HID 256c:006d as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000A/input/input16 [ 654.315377][ T8659] uclogic 0003:256C:006D.000A: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 654.392343][ T8659] usb 7-1: USB disconnect, device number 4 [ 654.617815][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.625273][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 655.385663][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 655.385741][ T30] audit: type=1326 audit(1758547654.662:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 655.779946][ T30] audit: type=1326 audit(1758547654.712:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 655.803022][ T30] audit: type=1326 audit(1758547654.712:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 655.826072][ T30] audit: type=1326 audit(1758547654.732:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 655.848872][ T30] audit: type=1326 audit(1758547654.732:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 655.872038][ T30] audit: type=1326 audit(1758547654.732:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 656.560601][ T9980] loop6: detected capacity change from 0 to 512 [ 656.642653][ T9974] fido_id[9974]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 656.651894][ T9980] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 656.931522][ T9980] EXT4-fs (loop6): 1 truncate cleaned up [ 656.969519][ T9987] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1197'. [ 656.987745][ T9980] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.133139][ T9992] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000000f [ 657.625272][ T7365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.252271][ T8659] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 658.508964][ T8659] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.520454][ T8659] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.532711][ T8659] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 658.544261][ T8659] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.677620][ T8659] usb 6-1: config 0 descriptor?? [ 659.085462][ T30] audit: type=1326 audit(1758547658.362:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.7.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e958eec9 code=0x7ffc0000 [ 659.109235][ T30] audit: type=1326 audit(1758547658.372:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.7.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f13e958eec9 code=0x7ffc0000 [ 659.132369][ T30] audit: type=1326 audit(1758547658.372:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.7.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e958eec9 code=0x7ffc0000 [ 659.157897][ T30] audit: type=1326 audit(1758547658.372:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.7.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13e958eec9 code=0x7ffc0000 [ 659.447525][T10018] loop6: detected capacity change from 0 to 512 [ 659.507277][T10018] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 659.679443][T10018] EXT4-fs (loop6): 1 truncate cleaned up [ 659.710614][T10023] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 659.732631][T10018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 659.954797][ T8659] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000B/input/input17 [ 660.063028][ T8659] uclogic 0003:256C:006D.000B: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 660.162207][ T8659] usb 6-1: USB disconnect, device number 6 [ 660.333236][ T7365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.703496][T10030] fido_id[10030]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 661.285890][T10043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1221'. [ 661.368506][T10044] loop6: detected capacity change from 0 to 512 [ 661.645371][T10044] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.658531][T10044] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.733950][T10049] hub 8-0:1.0: USB hub found [ 661.773670][T10049] hub 8-0:1.0: 1 port detected [ 661.801818][T10044] EXT4-fs error (device loop6): ext4_xattr_block_find:1869: inode #15: comm syz.6.1222: corrupted xattr block 19: overlapping e_value [ 661.937510][T10044] EXT4-fs (loop6): Remounting filesystem read-only [ 662.439565][T10057] loop0: detected capacity change from 0 to 512 [ 662.471411][T10057] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 662.647597][T10057] EXT4-fs (loop0): 1 truncate cleaned up [ 662.656460][T10057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.369002][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.794019][T10070] fuse: Unknown parameter 'group_i00000000000000000000' [ 664.712413][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1234'. [ 664.976071][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1236'. [ 665.039589][T10082] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 665.295739][ T7365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.768430][T10088] loop7: detected capacity change from 0 to 512 [ 666.024243][T10088] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 666.211827][T10088] EXT4-fs (loop7): 1 truncate cleaned up [ 666.223543][T10088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.390133][T10095] fuse: Unknown parameter 'group_i00000000000000000000' [ 666.728261][ T7411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.941636][ T5864] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 668.169448][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.181244][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.191625][ T5864] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 668.200946][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.351920][ T5864] usb 6-1: config 0 descriptor?? [ 668.815562][T10123] loop0: detected capacity change from 0 to 512 [ 668.957806][T10123] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 669.147236][T10123] EXT4-fs (loop0): 1 truncate cleaned up [ 669.156970][T10123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.605453][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.746811][ T5864] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000C/input/input18 [ 669.812986][T10126] fuse: Unknown parameter 'group_id00000000000000000000' [ 669.947978][ T5864] uclogic 0003:256C:006D.000C: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 670.052216][ T5864] usb 6-1: USB disconnect, device number 7 [ 670.715736][T10129] fido_id[10129]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 672.045841][T10149] loop6: detected capacity change from 0 to 512 [ 672.138548][T10151] loop7: detected capacity change from 0 to 512 [ 672.212207][T10151] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 672.359037][T10149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.375566][T10149] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 672.400087][T10151] EXT4-fs (loop7): 1 truncate cleaned up [ 672.408268][T10151] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.922621][ T7411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.966746][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 672.966815][ T30] audit: type=1326 audit(1758547672.242:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.3.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 672.999436][ T30] audit: type=1326 audit(1758547672.242:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.3.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 673.022970][ T30] audit: type=1326 audit(1758547672.242:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.3.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 673.046109][ T30] audit: type=1326 audit(1758547672.242:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.3.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 673.069167][ T30] audit: type=1326 audit(1758547672.252:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.3.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 673.094392][ T30] audit: type=1326 audit(1758547672.252:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.3.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 673.118013][ T30] audit: type=1326 audit(1758547672.262:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.3.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 673.141122][ T30] audit: type=1326 audit(1758547672.282:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.3.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 673.431881][T10149] Quota error (device loop6): do_check_range: Getting block 4128768 out of range 0-7 [ 673.745728][ T7365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.902475][ T5864] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 674.113143][T10171] syzkaller0: entered promiscuous mode [ 674.118822][T10171] syzkaller0: entered allmulticast mode [ 674.148828][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.160223][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.170401][ T5864] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 674.179856][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.317469][ T30] audit: type=1326 audit(1758547673.582:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10174 comm="syz.3.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 674.332967][ T5864] usb 1-1: config 0 descriptor?? [ 675.019183][T10184] loop7: detected capacity change from 0 to 512 [ 675.137462][T10184] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 675.371948][T10184] EXT4-fs (loop7): 1 truncate cleaned up [ 675.381636][T10184] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.624856][ T5864] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000D/input/input19 [ 675.783690][ T5864] uclogic 0003:256C:006D.000D: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 675.849165][ T7411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.917980][ T5864] usb 1-1: USB disconnect, device number 13 [ 676.888209][T10205] loop0: detected capacity change from 0 to 128 [ 676.934471][T10208] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1289'. [ 676.992433][T10200] fido_id[10200]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 677.063131][T10205] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 677.142242][T10205] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 677.725323][T10216] loop5: detected capacity change from 0 to 512 [ 677.760604][T10216] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 677.773721][ T5827] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 677.907637][T10219] syzkaller0: entered promiscuous mode [ 677.913516][T10219] syzkaller0: entered allmulticast mode [ 678.134734][T10216] EXT4-fs (loop5): 1 truncate cleaned up [ 678.142740][T10216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.668054][ T6283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.656396][T10238] fuse: Bad value for 'user_id' [ 679.663120][T10238] fuse: Bad value for 'user_id' [ 679.812688][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 680.031142][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.043380][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.059621][ T9] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 680.069919][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.236928][ T9] usb 7-1: config 0 descriptor?? [ 681.319135][T10260] loop3: detected capacity change from 0 to 512 [ 681.491858][T10260] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 681.500368][T10260] System zones: 0-2, 18-18, 34-34 [ 681.507266][T10260] EXT4-fs (loop3): orphan cleanup on readonly fs [ 681.537581][T10260] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1308: bad orphan inode 13 [ 681.662178][ T9] input: HID 256c:006d as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000E/input/input20 [ 681.689884][T10260] ext4_test_bit(bit=12, block=18) = 1 [ 681.695975][T10260] is_bad_inode(inode)=0 [ 681.700279][T10260] NEXT_ORPHAN(inode)=2130706432 [ 681.705467][T10260] max_ino=32 [ 681.708806][T10260] i_nlink=1 [ 681.732294][T10260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 681.931862][ T9] uclogic 0003:256C:006D.000E: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 681.991369][T10260] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 682.026317][ T9] usb 7-1: USB disconnect, device number 5 [ 682.051409][T10260] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 682.147429][T10260] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 682.157279][T10260] ext4 filesystem being remounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 682.454736][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.501977][T10270] fido_id[10270]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 685.133710][T10302] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 689.032672][T10339] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1336'. [ 689.662506][T10346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 690.881016][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 690.881087][ T30] audit: type=1326 audit(1758547690.162:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 690.912910][ T30] audit: type=1326 audit(1758547690.162:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 691.748053][ T30] audit: type=1326 audit(1758547690.272:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 691.770901][ T30] audit: type=1326 audit(1758547690.272:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 691.794251][ T30] audit: type=1326 audit(1758547690.292:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 691.817107][ T30] audit: type=1326 audit(1758547690.302:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 691.842591][ T30] audit: type=1326 audit(1758547690.312:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 691.866281][ T30] audit: type=1326 audit(1758547690.312:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 692.191106][T10371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1348'. [ 692.200949][T10371] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1348'. [ 692.848948][T10384] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 694.469003][T10407] loop3: detected capacity change from 0 to 512 [ 694.613951][T10407] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 694.793598][T10407] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 694.952063][T10407] EXT4-fs (loop3): 1 truncate cleaned up [ 694.959857][T10407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.753662][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.617384][T10429] netlink: 'syz.0.1368': attribute type 1 has an invalid length. [ 697.986371][T10434] netlink: 'syz.3.1367': attribute type 4 has an invalid length. [ 699.362987][ T30] audit: type=1326 audit(1758547698.642:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.0.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 699.459731][ T30] audit: type=1326 audit(1758547698.682:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.0.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 699.483157][ T30] audit: type=1326 audit(1758547698.682:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.0.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 699.509189][ T30] audit: type=1326 audit(1758547698.702:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.0.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 699.701590][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1379'. [ 700.474010][T10460] loop3: detected capacity change from 0 to 256 [ 700.605177][ T30] audit: type=1800 audit(1758547699.872:193): pid=10460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1382" name="bus" dev="loop3" ino=1048638 res=0 errno=0 [ 700.802903][T10470] netlink: 'syz.7.1384': attribute type 4 has an invalid length. [ 702.857384][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1396'. [ 704.920050][T10524] Driver unsupported XDP return value 0 on prog (id 439) dev N/A, expect packet loss! [ 705.534723][T10531] random: crng reseeded on system resumption [ 705.838111][T10531] Restarting kernel threads ... [ 705.915186][T10531] Done restarting kernel threads. [ 706.042496][T10540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1410'. [ 708.925479][T10567] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1420'. [ 709.890397][ T30] audit: type=1326 audit(1758547709.172:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 709.913560][ T30] audit: type=1326 audit(1758547709.172:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 709.936468][ T30] audit: type=1326 audit(1758547709.172:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 709.961394][ T30] audit: type=1326 audit(1758547709.172:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 709.985305][ T30] audit: type=1326 audit(1758547709.192:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 710.008601][ T30] audit: type=1326 audit(1758547709.192:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 710.031468][ T30] audit: type=1326 audit(1758547709.192:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 710.056254][ T30] audit: type=1326 audit(1758547709.192:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 710.079780][ T30] audit: type=1326 audit(1758547709.192:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 710.102734][ T30] audit: type=1326 audit(1758547709.192:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 710.218259][T10581] loop7: detected capacity change from 0 to 512 [ 710.614472][T10581] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 710.614856][T10581] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 710.716460][T10581] EXT4-fs (loop7): shut down requested (1) [ 711.124043][ T7411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 712.775941][T10609] loop3: detected capacity change from 0 to 512 [ 712.940206][T10609] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1436: dx entry: limit 0 != root limit 125 [ 712.952588][T10609] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1436: Corrupt directory, running e2fsck is recommended [ 712.973397][T10609] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 712.993714][T10609] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1436: corrupted in-inode xattr: invalid ea_ino [ 713.065119][T10609] EXT4-fs (loop3): Remounting filesystem read-only [ 713.077524][T10609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.079965][T10620] loop0: detected capacity change from 0 to 512 [ 713.237036][T10609] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 713.244963][T10620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 713.261820][T10620] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 713.409153][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.861589][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 714.413871][T10629] loop0: detected capacity change from 0 to 512 [ 714.475032][T10630] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1443'. [ 714.517925][T10632] loop5: detected capacity change from 0 to 128 [ 714.665509][T10629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.682562][T10629] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 715.047750][T10629] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1442: corrupted inode contents [ 715.131335][T10629] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1442: mark_inode_dirty error [ 715.213196][T10629] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1442: corrupted inode contents [ 715.303510][ T1863] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 715.343627][T10638] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1442: corrupted inode contents [ 715.412074][T10638] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1442: mark_inode_dirty error [ 715.520062][T10638] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1442: corrupted inode contents [ 715.548355][T10638] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1442: mark_inode_dirty error [ 715.606156][T10638] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1442: corrupted inode contents [ 715.643273][ T1863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.655096][ T1863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.665353][ T1863] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 715.674691][ T1863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.688124][T10638] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1442: mark_inode_dirty error [ 715.718338][ T1863] usb 4-1: config 0 descriptor?? [ 716.078089][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.088705][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.359526][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.000255][ T1863] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000F/input/input21 [ 717.183136][ T1863] uclogic 0003:256C:006D.000F: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 717.262568][ T1863] usb 4-1: USB disconnect, device number 7 [ 717.296748][T10653] netlink: 'syz.7.1452': attribute type 4 has an invalid length. [ 717.378935][T10657] loop6: detected capacity change from 0 to 128 [ 717.665241][T10657] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 717.815876][T10657] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 718.258812][T10661] fido_id[10661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 718.448247][T10665] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1456'. [ 718.466238][ T7365] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 719.268240][T10674] loop6: detected capacity change from 0 to 1024 [ 719.426952][T10680] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1462'. [ 719.504905][T10674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.643620][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 719.643698][ T30] audit: type=1800 audit(1758547718.922:214): pid=10674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1459" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 720.255280][T10689] netlink: 'syz.0.1465': attribute type 4 has an invalid length. [ 720.337704][ T7365] Trying to write to read-only block-device loop6 [ 720.405726][ T7365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.469346][T10691] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 720.895174][T10697] loop0: detected capacity change from 0 to 128 [ 721.043759][T10697] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 721.111701][T10697] ext4 filesystem being mounted at /320/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 721.847403][ T5827] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 722.395378][T10708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1475'. [ 724.327351][T10725] syzkaller0: entered promiscuous mode [ 724.336706][T10725] syzkaller0: entered allmulticast mode [ 725.213892][T10736] loop5: detected capacity change from 0 to 128 [ 725.488715][T10736] FAT-fs (loop5): Directory bread(block 32) failed [ 725.499532][T10736] FAT-fs (loop5): Directory bread(block 33) failed [ 725.510316][T10736] FAT-fs (loop5): Directory bread(block 34) failed [ 725.520389][T10736] FAT-fs (loop5): Directory bread(block 35) failed [ 725.532344][T10736] FAT-fs (loop5): Directory bread(block 36) failed [ 725.539106][T10736] FAT-fs (loop5): Directory bread(block 37) failed [ 725.549823][T10736] FAT-fs (loop5): Directory bread(block 38) failed [ 725.560387][T10736] FAT-fs (loop5): Directory bread(block 39) failed [ 725.571271][T10736] FAT-fs (loop5): Directory bread(block 40) failed [ 725.577996][T10736] FAT-fs (loop5): Directory bread(block 41) failed [ 725.789585][T10736] syz.5.1486: attempt to access beyond end of device [ 725.789585][T10736] loop5: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 725.807225][T10736] Buffer I/O error on dev loop5, logical block 1028, async page read [ 725.823475][T10736] syz.5.1486: attempt to access beyond end of device [ 725.823475][T10736] loop5: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 725.845363][T10736] Buffer I/O error on dev loop5, logical block 41991, async page read [ 725.857532][T10736] FAT-fs (loop5): Filesystem has been set read-only [ 725.868279][T10736] syz.5.1486: attempt to access beyond end of device [ 725.868279][T10736] loop5: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 725.885443][T10736] Buffer I/O error on dev loop5, logical block 1028, async page read [ 725.897406][T10736] syz.5.1486: attempt to access beyond end of device [ 725.897406][T10736] loop5: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 725.914745][T10736] Buffer I/O error on dev loop5, logical block 41991, async page read [ 726.056574][T10742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1489'. [ 726.153081][ T30] audit: type=1326 audit(1758547725.422:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.6.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 726.312185][ T30] audit: type=1326 audit(1758547725.472:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.6.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 726.337375][ T30] audit: type=1326 audit(1758547725.482:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.6.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 726.361547][ T30] audit: type=1326 audit(1758547725.502:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.6.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 726.384305][ T30] audit: type=1326 audit(1758547725.512:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.6.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 726.407911][ T30] audit: type=1326 audit(1758547725.542:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.6.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 726.433158][ T30] audit: type=1326 audit(1758547725.572:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.6.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 726.456755][ T30] audit: type=1326 audit(1758547725.572:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.6.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 726.480126][ T30] audit: type=1326 audit(1758547725.592:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.6.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 726.503921][ T30] audit: type=1326 audit(1758547725.592:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.6.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 728.499391][T10764] syzkaller0: entered promiscuous mode [ 728.508813][T10764] syzkaller0: entered allmulticast mode [ 728.594569][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'. [ 729.069779][T10770] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1502'. [ 729.375076][T10772] loop0: detected capacity change from 0 to 128 [ 729.619460][T10772] FAT-fs (loop0): Directory bread(block 32) failed [ 729.627091][T10772] FAT-fs (loop0): Directory bread(block 33) failed [ 729.634840][T10772] FAT-fs (loop0): Directory bread(block 34) failed [ 729.641663][T10772] FAT-fs (loop0): Directory bread(block 35) failed [ 729.648517][T10772] FAT-fs (loop0): Directory bread(block 36) failed [ 729.656233][T10772] FAT-fs (loop0): Directory bread(block 37) failed [ 729.663373][T10772] FAT-fs (loop0): Directory bread(block 38) failed [ 729.670098][T10772] FAT-fs (loop0): Directory bread(block 39) failed [ 729.677095][T10772] FAT-fs (loop0): Directory bread(block 40) failed [ 729.683955][T10772] FAT-fs (loop0): Directory bread(block 41) failed [ 730.109167][T10772] syz.0.1503: attempt to access beyond end of device [ 730.109167][T10772] loop0: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 730.126628][T10772] Buffer I/O error on dev loop0, logical block 1028, async page read [ 730.145576][T10772] syz.0.1503: attempt to access beyond end of device [ 730.145576][T10772] loop0: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 730.159587][T10772] Buffer I/O error on dev loop0, logical block 41991, async page read [ 730.168239][T10772] FAT-fs (loop0): Filesystem has been set read-only [ 730.175414][T10772] syz.0.1503: attempt to access beyond end of device [ 730.175414][T10772] loop0: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 730.189050][T10772] Buffer I/O error on dev loop0, logical block 1028, async page read [ 730.197698][T10772] syz.0.1503: attempt to access beyond end of device [ 730.197698][T10772] loop0: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 730.211523][T10772] Buffer I/O error on dev loop0, logical block 41991, async page read [ 730.644963][T10781] loop6: detected capacity change from 0 to 128 [ 732.038334][T10800] syzkaller0: entered promiscuous mode [ 732.044240][T10800] syzkaller0: entered allmulticast mode [ 732.080363][T10798] loop6: detected capacity change from 0 to 1024 [ 734.851994][ T30] audit: type=1326 audit(1758547734.122:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10822 comm="syz.5.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 734.875298][ T30] audit: type=1326 audit(1758547734.132:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10822 comm="syz.5.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 734.898456][ T30] audit: type=1326 audit(1758547734.132:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10822 comm="syz.5.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3333b8eec9 code=0x7ffc0000 [ 736.648377][T10839] loop6: detected capacity change from 0 to 128 [ 738.954783][ T30] audit: type=1326 audit(1758547738.232:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.6.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 739.062653][ T30] audit: type=1326 audit(1758547738.282:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.6.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 739.085803][ T30] audit: type=1326 audit(1758547738.282:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.6.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 739.108737][ T30] audit: type=1326 audit(1758547738.282:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.6.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 739.135339][ T30] audit: type=1326 audit(1758547738.292:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.6.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 739.159124][ T30] audit: type=1326 audit(1758547738.292:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.6.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 739.181896][ T30] audit: type=1326 audit(1758547738.292:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.6.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 739.591021][T10857] fuse: Unknown parameter 'user_id00000000000000000000' [ 740.239795][T10864] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 740.989634][T10872] loop7: detected capacity change from 0 to 1024 [ 741.099842][T10872] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 741.311367][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 741.311445][ T30] audit: type=1800 audit(1758547740.582:238): pid=10872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1545" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 741.522159][T10880] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 741.621902][T10881] ksmbd: Unknown IPC event: 16, ignore. [ 741.691810][ T7411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.469674][T10886] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1550'. [ 743.215084][T10890] syz.7.1549 (10890) used greatest stack depth: 2440 bytes left [ 744.213041][T10894] fuse: Bad value for 'fd' [ 746.028296][T10908] loop5: detected capacity change from 0 to 1024 [ 746.186547][T10908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 746.374435][ T30] audit: type=1800 audit(1758547745.642:239): pid=10908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1559" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 746.630332][T10918] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1562'. [ 746.940022][ T6283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.958278][T10955] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1578'. [ 750.388202][ T1863] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 750.605069][ T1863] usb 4-1: Using ep0 maxpacket: 8 [ 750.636597][ T1863] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 750.646083][ T1863] usb 4-1: config 179 has no interface number 0 [ 750.652709][ T1863] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 750.664139][ T1863] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 750.676760][ T1863] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 750.687816][ T1863] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 750.703900][ T1863] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 750.714007][ T1863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.922673][T10957] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 751.227273][ T1863] usb 4-1: USB disconnect, device number 8 [ 752.317475][T10981] loop6: detected capacity change from 0 to 1024 [ 752.399399][T10986] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1592'. [ 754.601052][ T1863] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 754.811415][ T1863] usb 6-1: Using ep0 maxpacket: 8 [ 754.885225][ T1863] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 754.893954][ T1863] usb 6-1: config 179 has no interface number 0 [ 754.902751][ T1863] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 754.915141][ T1863] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 754.926694][ T1863] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 754.929209][T11000] loop3: detected capacity change from 0 to 8192 [ 754.937131][ T1863] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 754.937351][ T1863] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 754.937488][ T1863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.154117][T11005] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 755.158431][T11014] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1605'. [ 755.344162][ T30] audit: type=1326 audit(1758547754.622:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 755.498788][ T9] usb 6-1: USB disconnect, device number 8 [ 755.509464][ T30] audit: type=1326 audit(1758547754.652:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 755.535149][ T30] audit: type=1326 audit(1758547754.682:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 755.558646][ T30] audit: type=1326 audit(1758547754.702:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 755.581909][ T30] audit: type=1326 audit(1758547754.702:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 755.604715][ T30] audit: type=1326 audit(1758547754.722:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 755.629522][ T30] audit: type=1326 audit(1758547754.722:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 755.654712][ T30] audit: type=1326 audit(1758547754.732:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 755.677557][ T30] audit: type=1326 audit(1758547754.732:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2498eec9 code=0x7ffc0000 [ 757.293237][T11036] loop3: detected capacity change from 0 to 512 [ 757.348002][T11036] EXT4-fs: Ignoring removed mblk_io_submit option [ 757.435828][T11036] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 757.629348][T11036] EXT4-fs (loop3): 1 truncate cleaned up [ 757.679318][T11036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.862757][ T30] audit: type=1804 audit(1758547757.152:249): pid=11036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1614" name="/newroot/328/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 757.984797][T11046] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1618'. [ 758.082365][T11049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1619'. [ 758.473976][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.355251][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 759.595114][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 759.625123][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 759.637715][ T9] usb 4-1: config 179 has no interface number 0 [ 759.647916][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 759.663125][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 759.678132][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 759.693710][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 759.707798][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 759.727789][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 759.741673][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.026398][T11059] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 760.056139][ T9] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 760.295848][ T9] usb 4-1: USB disconnect, device number 9 [ 760.680419][T11077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1632'. [ 760.915515][T11080] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1634'. [ 762.410323][T11099] loop6: detected capacity change from 0 to 512 [ 763.316001][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1646'. [ 763.385563][T11110] loop6: detected capacity change from 0 to 1024 [ 765.264435][ T30] audit: type=1326 audit(1758547764.542:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11125 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 765.287571][ T30] audit: type=1326 audit(1758547764.572:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11125 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 765.310459][ T30] audit: type=1326 audit(1758547764.572:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11125 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 765.333456][ T30] audit: type=1326 audit(1758547764.582:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11125 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 765.719006][ T30] audit: type=1326 audit(1758547764.682:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11125 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 765.742109][ T30] audit: type=1326 audit(1758547764.682:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11125 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 765.767056][ T30] audit: type=1326 audit(1758547764.692:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11125 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 765.791186][ T30] audit: type=1326 audit(1758547764.692:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11125 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 766.397746][T11128] loop6: detected capacity change from 0 to 8192 [ 766.419291][T11139] loop5: detected capacity change from 0 to 1024 [ 766.471229][T11139] EXT4-fs: Ignoring removed bh option [ 766.530193][T11139] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 766.636917][T11139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.824990][T11139] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.1658: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 766.866612][T11139] EXT4-fs (loop5): Remounting filesystem read-only [ 767.464573][ T6283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.727315][ T30] audit: type=1326 audit(1758547767.992:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.0.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 768.752127][ T30] audit: type=1326 audit(1758547768.002:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.0.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 769.516307][T11174] loop7: detected capacity change from 0 to 512 [ 769.743185][T11174] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 769.758940][T11174] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 769.862467][T11174] EXT4-fs (loop7): shut down requested (1) [ 770.250522][ T7411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 771.131544][ T1863] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 771.382254][ T1863] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.396273][ T1863] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.407280][ T1863] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 771.416977][ T1863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.613685][ T1863] usb 8-1: config 0 descriptor?? [ 772.942879][ T1863] input: HID 256c:006d as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0010/input/input22 [ 773.107786][ T1863] uclogic 0003:256C:006D.0010: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.7-1/input0 [ 773.341553][ T1863] usb 8-1: USB disconnect, device number 2 [ 773.916488][T11221] fido_id[11221]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 774.299444][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1691'. [ 776.290619][T11248] loop6: detected capacity change from 0 to 2048 [ 777.022050][T11256] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1703'. [ 777.504376][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.511327][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.960253][T11267] loop3: detected capacity change from 0 to 1024 [ 778.023095][T11267] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 778.035518][T11267] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 778.203338][T11267] JBD2: no valid journal superblock found [ 778.209360][T11267] EXT4-fs (loop3): Could not load journal inode [ 779.259056][T11262] raw_sendmsg: syz.0.1705 forgot to set AF_INET. Fix it! [ 779.547925][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 779.548057][ T30] audit: type=1326 audit(1758547778.812:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.6.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 779.579562][ T30] audit: type=1326 audit(1758547778.812:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.6.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 779.603154][ T30] audit: type=1326 audit(1758547778.822:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.6.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 779.626201][ T30] audit: type=1326 audit(1758547778.822:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.6.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 779.649869][ T30] audit: type=1326 audit(1758547778.822:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.6.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 779.674255][ T30] audit: type=1326 audit(1758547778.832:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.6.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 779.699095][ T30] audit: type=1326 audit(1758547778.832:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.6.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 779.722771][ T30] audit: type=1326 audit(1758547778.832:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.6.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 780.154068][T11289] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1717'. [ 780.436904][ T30] audit: type=1326 audit(1758547779.032:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.6.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 780.460325][ T30] audit: type=1326 audit(1758547779.032:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.6.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64bd98eec9 code=0x7ffc0000 [ 780.941109][T11297] loop7: detected capacity change from 0 to 256 [ 782.811780][T11326] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1731'. [ 782.826217][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'. [ 782.838986][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'. [ 782.916732][T11328] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1732'. [ 782.930461][T11328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1732'. [ 783.541403][T11334] loop3: detected capacity change from 0 to 512 [ 783.581818][T11336] loop6: detected capacity change from 0 to 512 [ 783.871622][T11334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.891639][T11334] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.463986][T11347] atomic_op ffff888045878528 conn xmit_atomic 0000000000000000 [ 785.246329][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.006073][T11355] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1743'. [ 786.126509][T11357] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1744'. [ 787.346040][T11361] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1746'. [ 787.679171][T11363] netlink: 'syz.0.1747': attribute type 4 has an invalid length. [ 787.707704][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1748'. [ 787.922717][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1748'. [ 788.604038][T11377] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1752'. [ 789.753297][T11387] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1756'. [ 789.764700][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1758'. [ 791.114995][T11406] netlink: 288 bytes leftover after parsing attributes in process `syz.6.1765'. [ 791.280263][T11406] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1765'. [ 792.268673][T11408] loop6: detected capacity change from 0 to 512 [ 793.175854][T11426] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1770'. [ 793.472966][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 793.473042][ T30] audit: type=1326 audit(1758547792.752:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.0.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 793.504429][ T30] audit: type=1326 audit(1758547792.752:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.0.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 793.528056][ T30] audit: type=1326 audit(1758547792.752:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.0.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b51f8eec9 code=0x7ffc0000 [ 795.779040][T11458] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1785'. [ 795.811877][T11457] loop3: detected capacity change from 0 to 512 [ 795.908828][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1786'. [ 796.003700][T11457] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1784: dx entry: limit 0 != root limit 125 [ 796.016205][T11457] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1784: Corrupt directory, running e2fsck is recommended [ 796.039474][T11461] netlink: 'syz.6.1786': attribute type 10 has an invalid length. [ 796.052409][T11461] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1786'. [ 796.085937][T11457] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 796.126138][T11457] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1784: corrupted in-inode xattr: invalid ea_ino [ 796.189575][T11457] EXT4-fs (loop3): Remounting filesystem read-only [ 796.199964][T11457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.290190][T11457] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1784: dx entry: limit 0 != root limit 125 [ 796.306623][T11457] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1784: Corrupt directory, running e2fsck is recommended [ 796.330654][T11466] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1787'. [ 796.347461][T11466] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1787'. [ 796.418827][T11469] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1784: dx entry: limit 0 != root limit 125 [ 796.434907][T11469] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1784: Corrupt directory, running e2fsck is recommended [ 796.532933][T11472] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1784: dx entry: limit 0 != root limit 125 [ 796.545529][T11472] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1784: Corrupt directory, running e2fsck is recommended [ 796.665985][T11457] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1784: dx entry: limit 0 != root limit 125 [ 796.681289][T11457] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1784: Corrupt directory, running e2fsck is recommended [ 796.855886][T11472] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1784: dx entry: limit 0 != root limit 125 [ 796.872369][T11472] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1784: Corrupt directory, running e2fsck is recommended [ 797.015041][T11457] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 797.378056][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.946312][T11490] macvtap0: refused to change device tx_queue_len [ 798.679019][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1801'. [ 798.687698][T11498] loop6: detected capacity change from 0 to 1024 [ 798.731507][T11498] EXT4-fs: Ignoring removed bh option [ 798.894001][T11501] netlink: 'syz.5.1801': attribute type 10 has an invalid length. [ 798.906540][T11501] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1801'. [ 799.197979][T11501] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 799.211688][T11501] team0: Failed to send options change via netlink (err -105) [ 799.219439][T11501] team0: Port device netdevsim1 added [ 799.253713][ T3585] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 799.557621][T11506] loop7: detected capacity change from 0 to 2048 [ 799.638560][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1805'. [ 800.819946][T11525] macvtap0: refused to change device tx_queue_len [ 800.917953][ T4808] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 800.927423][ T4808] ===================================================== [ 800.934687][ T4808] BUG: KMSAN: uninit-value in nci_ntf_packet+0x2b0b/0x42b0 [ 800.942272][ T4808] nci_ntf_packet+0x2b0b/0x42b0 [ 800.947287][ T4808] nci_rx_work+0x403/0x750 [ 800.952210][ T4808] process_scheduled_works+0xb8e/0x1d80 [ 800.958032][ T4808] worker_thread+0xedf/0x1590 [ 800.963169][ T4808] kthread+0xd59/0xf00 [ 800.967385][ T4808] ret_from_fork+0x233/0x380 [ 800.972366][ T4808] ret_from_fork_asm+0x1a/0x30 [ 800.979872][ T4808] [ 800.983219][ T4808] Uninit was stored to memory at: [ 800.988441][ T4808] nci_ntf_packet+0x1f6e/0x42b0 [ 800.993651][ T4808] nci_rx_work+0x403/0x750 [ 800.998221][ T4808] process_scheduled_works+0xb8e/0x1d80 [ 801.004312][ T4808] worker_thread+0xedf/0x1590 [ 801.009186][ T4808] kthread+0xd59/0xf00 [ 801.013510][ T4808] ret_from_fork+0x233/0x380 [ 801.018243][ T4808] ret_from_fork_asm+0x1a/0x30 [ 801.024552][ T4808] [ 801.027050][ T4808] Uninit was created at: [ 801.031788][ T4808] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 801.037968][ T4808] kmalloc_reserve+0x13c/0x4b0 [ 801.043005][ T4808] __alloc_skb+0x347/0x7d0 [ 801.047583][ T4808] virtual_ncidev_write+0x6b/0x430 [ 801.052995][ T4808] vfs_write+0x48a/0x15d0 [ 801.057491][ T4808] __x64_sys_write+0x1fb/0x4d0 [ 801.062732][ T4808] x64_sys_call+0x3014/0x3e20 [ 801.067599][ T4808] do_syscall_64+0xd9/0x210 [ 801.072900][ T4808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.081617][ T4808] [ 801.084059][ T4808] CPU: 1 UID: 0 PID: 4808 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(none) [ 801.094818][ T4808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 801.105099][ T4808] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 801.110949][ T4808] ===================================================== [ 801.117967][ T4808] Disabling lock debugging due to kernel taint [ 801.124322][ T4808] Kernel panic - not syncing: kmsan.panic set ... [ 801.130872][ T4808] CPU: 1 UID: 0 PID: 4808 Comm: kworker/u8:24 Tainted: G B syzkaller #0 PREEMPT(none) [ 801.142172][ T4808] Tainted: [B]=BAD_PAGE [ 801.146420][ T4808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 801.156609][ T4808] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 801.162347][ T4808] Call Trace: [ 801.165737][ T4808] [ 801.169014][ T4808] __dump_stack+0x26/0x30 [ 801.173529][ T4808] dump_stack_lvl+0x53/0x270 [ 801.178304][ T4808] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 801.184411][ T4808] dump_stack+0x1e/0x25 [ 801.188760][ T4808] vpanic+0x361/0xc50 [ 801.193027][ T4808] panic+0x15d/0x160 [ 801.197156][ T4808] kmsan_report+0x31c/0x320 [ 801.201843][ T4808] ? __msan_warning+0x1b/0x30 [ 801.206692][ T4808] ? nci_ntf_packet+0x2b0b/0x42b0 [ 801.211894][ T4808] ? nci_rx_work+0x403/0x750 [ 801.216636][ T4808] ? process_scheduled_works+0xb8e/0x1d80 [ 801.222582][ T4808] ? worker_thread+0xedf/0x1590 [ 801.227820][ T4808] ? kthread+0xd59/0xf00 [ 801.232294][ T4808] ? ret_from_fork+0x233/0x380 [ 801.237330][ T4808] ? ret_from_fork_asm+0x1a/0x30 [ 801.242480][ T4808] ? vprintk_default+0x3f/0x50 [ 801.247417][ T4808] ? vprintk+0x36/0x50 [ 801.251736][ T4808] ? _printk+0x17e/0x1b0 [ 801.256231][ T4808] ? kmsan_get_metadata+0xfb/0x160 [ 801.261539][ T4808] __msan_warning+0x1b/0x30 [ 801.266210][ T4808] nci_ntf_packet+0x2b0b/0x42b0 [ 801.271237][ T4808] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 801.277510][ T4808] nci_rx_work+0x403/0x750 [ 801.282101][ T4808] ? __pfx_nci_rx_work+0x10/0x10 [ 801.287194][ T4808] process_scheduled_works+0xb8e/0x1d80 [ 801.293010][ T4808] worker_thread+0xedf/0x1590 [ 801.297948][ T4808] kthread+0xd59/0xf00 [ 801.302164][ T4808] ? __pfx_worker_thread+0x10/0x10 [ 801.307507][ T4808] ? __pfx_kthread+0x10/0x10 [ 801.312296][ T4808] ret_from_fork+0x233/0x380 [ 801.317042][ T4808] ? __pfx_kthread+0x10/0x10 [ 801.321782][ T4808] ret_from_fork_asm+0x1a/0x30 [ 801.326760][ T4808] [ 801.330149][ T4808] Kernel Offset: disabled [ 801.334513][ T4808] Rebooting in 86400 seconds..