last executing test programs: 21m39.346655014s ago: executing program 4 (id=5): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmdt(0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704640180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 21m37.509708412s ago: executing program 4 (id=16): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, &(0x7f0000000540)) 21m34.198118748s ago: executing program 4 (id=22): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) poll(0x0, 0x0, 0x9) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2) 21m29.519562563s ago: executing program 4 (id=35): r0 = syz_clone(0x80000080, 0x0, 0xfffffffffffffc84, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$getregset(0x4205, r0, 0x200, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x6, 0x4) sendto$packet(r2, &(0x7f0000000240)="3f031c000302140006001e008900", 0xe, 0x1, &(0x7f0000000540)={0xc9, 0x8100, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) 21m26.694099894s ago: executing program 4 (id=44): r0 = socket$unix(0x1, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x2}, 0x10, 0x0) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 21m25.374439494s ago: executing program 4 (id=50): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x82) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x5) 21m8.727009833s ago: executing program 32 (id=50): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x82) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x5) 4m21.434125936s ago: executing program 5 (id=1889): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2, @local, {[@routing={0x5e}]}}}}}, 0x0) setresgid(0xee00, 0xffffffffffffffff, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 4m7.73918136s ago: executing program 5 (id=1909): memfd_create(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) open$dir(&(0x7f0000000000)='./file1\x00', 0x100, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000380), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==") truncate(&(0x7f0000000080)='./file1\x00', 0xf000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x145802, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0xf4240}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) 4m2.987322619s ago: executing program 5 (id=1913): socket$key(0xf, 0x3, 0x2) eventfd(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5c, 0x80, 0x0, 0x28f}, &(0x7f00000001c0), &(0x7f0000000380)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x80000000000020c, 0x0) 3m55.393688993s ago: executing program 5 (id=1921): socket(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11641e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x647b}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000280)={0x1e, 0x2}) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, 0x0) socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) inotify_init1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3m53.002478665s ago: executing program 5 (id=1927): r0 = socket$inet6(0xa, 0x3, 0x26) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x1c, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x801) read$FUSE(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x400, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x0, 0x0, 0x4e22, 0x0, 0xa}, {0xfffffffffffffffe, 0x0, 0x2, 0x800000}, {}, 0x0, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@rand_addr=0x64010102, 0x800, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x4, 0xfffffffc}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 3m47.674073132s ago: executing program 5 (id=1935): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r4}, 0x18) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) 3m29.49194709s ago: executing program 33 (id=1935): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r4}, 0x18) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) 28.515654139s ago: executing program 7 (id=2225): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x2, &(0x7f00007ad000/0x1000)=nil) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r5, 0x400c55cb, 0x0) ioctl$UI_GET_VERSION(r5, 0x8004552d, &(0x7f0000000180)) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0xfffffffd) 28.152772002s ago: executing program 2 (id=2226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@nodelalloc}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2160, 0x0) pipe2$watch_queue(0x0, 0x80) socket$can_bcm(0x1d, 0x2, 0x2) accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x80, 0x800) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x17, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0xb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @generic={0x7a, 0x9, 0x3, 0x5, 0x3ff}, @jmp={0x5, 0x1, 0x5, 0x9, 0xb, 0xfffffffffffffff8, 0x4}, @ldst={0x1, 0x3, 0x4, 0x9, 0x3, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x11bd8a5163cafae7, 0x6, 0x0, 0x11, 0x0, 0x0, 0x0, 0x100}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 28.148416531s ago: executing program 0 (id=2227): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_setup(0x7055, &(0x7f0000000040)={0x0, 0x3ffffffe}) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 25.196652417s ago: executing program 1 (id=2230): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fanotify_init(0x200, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000140)={{0x6, @rose, 0x2}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockopt$sock_int(r0, 0x1, 0x3, 0x0, &(0x7f0000000140)) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, &(0x7f0000000400)) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) setuid(0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) 25.195959079s ago: executing program 7 (id=2231): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) waitid(0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000000), 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0xcd6, &(0x7f0000000000)={0x0, 0x4c0d, 0x200, 0x0, 0x236}, &(0x7f0000000100), &(0x7f0000000140)) readv(r4, &(0x7f0000000ac0)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000ff9000/0x3000)=nil, 0x3000}) 23.239659381s ago: executing program 0 (id=2234): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000022c0)=@sack_info={0x0, 0x800, 0x1}, &(0x7f0000002300)=0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) r6 = dup(r5) sendmmsg(r6, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='f', 0x1}, {&(0x7f0000000000)="1c401a4e5bd7ce41412c04726561f72bffb2f5c1bbdf3fedcd3ff32ec90d8b3a816ef3694f85d489e7cf32a17986", 0x2e}, {&(0x7f0000000040)="4030e815104180ddd91dde51b0981f8861c28c", 0xfffffd8c}, {&(0x7f00000001c0)="00a1477f72000e9a486aaf7e5be40f0010", 0x5}], 0x4}}], 0x1, 0xc004) 20.770844331s ago: executing program 0 (id=2236): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1, 0x3, 0x0) unshare(0x8000000) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000340)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000d40)=ANY=[@ANYBLOB='dmask=00000000000000000000001,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp949,iocharset=cp862,uid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c646973636172642c6572726f72733d636f6e74696e75652c009efc2fc3867ba7d6f0e030d94b28925c72f8443e739b65b5369d38d1fe638b7512f0c3bfdea6b14c64eb19be8d0eb1798ea448da65e107b884ef2b96a0a7c30961de8e809f78fa06ade5556980fa06147dd48a0119b94779243f215814e98c67459c6a1e5975945120653ec9d9f6359e4f75327ad5b1b11b1c3662be6f26f9eb8ed96665db514896577f90765e435972bc8c81b69db20d023955c6c8516150112f89120a87ddd270c807eefa2cf6f98b0bc7c836d3538e767115aa0765ac4c0054"], 0x5, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") 20.76922756s ago: executing program 1 (id=2237): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r4, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) sched_setaffinity(0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), 0x0, 0x0, r5) 20.766848916s ago: executing program 7 (id=2238): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,errors=continue,iocharset=cp861,uid=', @ANYRESHEX=0x0, @ANYBLOB="c0c4612e417f000000000000004c2d0c471a40e53b0555bd608d582e6a03dc6205c4bc8a193f47774d10bb071f5a49d5cd755f2eeaae1edd506de6b357b6c6228a3d235161e0b17c3bc4caa4bfa8970539720d8f9a2d15308944cb2ee05e861e73faa7763526b4666ffcb0a5f482", @ANYRESHEX=0x0, @ANYBLOB=',discard,errors=continue,errors=continue,\x00'], 0x1, 0x152d, &(0x7f0000001f80)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) write$binfmt_script(r4, &(0x7f0000000280)={'#! ', './file1'}, 0xb) socket$pppl2tp(0x18, 0x1, 0x1) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000700)=0x1c) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r6 = memfd_create(0x0, 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) 20.426333429s ago: executing program 6 (id=2240): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000140)={@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) 17.501521242s ago: executing program 7 (id=2241): socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x0) connect$netrom(r4, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast]}, 0x48) sendto$inet(r3, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r3, 0x0, 0x104) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r5}, &(0x7f00000005c0)=""/66, 0x42, &(0x7f0000000340)={&(0x7f0000000280)={'crc32c-generic\x00'}, &(0x7f00000001c0)="da84f3a2d3e3609dac31c3df47d4a7", 0xf}) 15.290509591s ago: executing program 2 (id=2242): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0x1, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000800000000000000010100800c000000000000000000000014000100fe8000000000000000000000000000aa50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000"], 0x114}], 0x1}, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000000)={0x2, 0x0, 0x0, {0xfffffffe, 0xffffffff}}) 14.910326692s ago: executing program 6 (id=2243): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f00000003c0), 0x12) ftruncate(r5, 0x8979) sendfile(r4, r5, 0x0, 0x108d) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r6, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 14.565358843s ago: executing program 0 (id=2244): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 14.563975539s ago: executing program 1 (id=2245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioperm(0x7, 0x81, 0x2) io_uring_setup(0x536d, &(0x7f0000000380)={0x0, 0x2cf6, 0x8, 0x3, 0x56}) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x17, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000000)={0x1, 0x2, 0x12, 0x2001e, 0x4, 0x0}) ioctl$TCFLSH(0xffffffffffffffff, 0x40384708, 0x20000000) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r5, &(0x7f0000000040)={{0x3, @null, 0x7}, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 14.559258419s ago: executing program 7 (id=2247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000140)={@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) syz_open_dev$mouse(&(0x7f00000000c0), 0x9, 0x402200) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) 14.396774439s ago: executing program 3 (id=2248): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000022c0)=@sack_info={0x0, 0x800, 0x1}, &(0x7f0000002300)=0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) r6 = dup(r5) sendmmsg(r6, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='f', 0x1}, {&(0x7f0000000000)="1c401a4e5bd7ce41412c04726561f72bffb2f5c1bbdf3fedcd3ff32ec90d8b3a816ef3694f85d489e7cf32a17986", 0x2e}, {&(0x7f0000000040)="4030e815104180ddd91dde51b0981f8861c28c", 0xfffffd8c}, {&(0x7f00000001c0)="00a1477f72000e9a486aaf7e5be40f0010", 0x5}], 0x4}}], 0x1, 0xc004) 11.087202683s ago: executing program 2 (id=2249): dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote, @local}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 10.755466941s ago: executing program 3 (id=2250): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000873000/0x1000)=nil, 0x1000, 0x64) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, 0x0}) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 10.677764886s ago: executing program 1 (id=2251): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/udp\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0x4, '\x00', 0x0, r0, 0x2, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000003c0)=ANY=[], 0x0, 0x3, 0x90, &(0x7f0000000100)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open(0x0, 0x143142, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_emit_ethernet(0x0, 0x0, 0x0) 10.327283315s ago: executing program 6 (id=2252): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x6281, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x35c9, &(0x7f0000000380)={0x0, 0x1ffffc, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x104000, 0x0, 0xa5c}, 0x1c) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xe) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$TCFLSH(r9, 0x400455c8, 0x20000000009) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf20000000000000160005003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff020000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0xffffffffffff8000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r12 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r12, 0x4601, 0x20000000) 9.044259978s ago: executing program 3 (id=2253): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0xc2200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 8.077901002s ago: executing program 0 (id=2254): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) mkdir(0x0, 0x1e0) syz_open_dev$ndb(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_uring_setup(0x1155, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, 0x0, 0x0) read(r2, 0x0, 0x2) pwrite64(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, 0x0, 0x0) 7.699467279s ago: executing program 2 (id=2255): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) 5.7042693s ago: executing program 2 (id=2256): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x1ffffe, 0x800, 0x0, 0x109, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000071113100000000008510000002000000850000000500000095000000000000009500a50500000000050b762609392615e9e457172ab9f6542ec242930fc1fb28c9f5a2126704305399165459826ee305da2e2e18b6"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r10, 0xc0045006, &(0x7f0000000180)=0x6) read$dsp(r10, &(0x7f0000000440)=""/171, 0xab) 5.701435185s ago: executing program 3 (id=2257): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000004c0)=ANY=[], 0x3, 0x2c5, &(0x7f00000001c0)="$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") r0 = socket$inet_sctp(0x2, 0x5, 0x84) fstat(r0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x82902c, &(0x7f00000006c0)={[{@nls={'nls', 0x3d, 'cp869'}}, {@uid}, {@force}, {}, {@force}, {@creator={'creator', 0x3d, '$_!i'}}], [{@smackfsfloor}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x2d2e8115e53b50bf, 0x62, 0x31, 0x66, 0x64, 0x35, 0x66], 0x2d, [0x39, 0x61, 0x94, 0x33], 0x2d, [0x1c, 0x31, 0x34, 0x66], 0x2d, [0x65, 0x61, 0x36, 0x32], 0x2d, [0x61, 0x62, 0x66, 0x30, 0x0, 0x65, 0x31, 0x32]}}}]}, 0x2, 0x6f2, &(0x7f0000001000)="$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") mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) dup(r0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', 0x0) 5.268814919s ago: executing program 1 (id=2258): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) recvmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x2102) io_uring_setup(0x1c73, &(0x7f0000000380)={0x0, 0x9dc9, 0x4, 0x3, 0x3a6}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)}, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r5}, &(0x7f0000000040)=""/213, 0xd5, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-avx2\x00'}}) 5.140588499s ago: executing program 0 (id=2259): getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {0x0, 0x0, 0x6}, 0x2d, [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80200001, 0x20008, 0x0, 0x0, 0xfffffffd, 0x0, 0xc3e, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x81, 0x0, 0xfffffffa, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x200000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xfffffffe, 0x0, 0x3, 0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffc, 0x1, 0x8001, 0x0, 0x81f], [0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf25, 0x0, 0x7, 0x0, 0xfffffffe, 0x0, 0x3], [0x1, 0x0, 0xe6c7, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8931, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r6, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r6, r6, 0x3, 0x7fffffffffffffff, 0x4001}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x400}], 0x1, 0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ed, &(0x7f00000051c0)="$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") io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) 2.446808133s ago: executing program 1 (id=2260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(0x0, &(0x7f0000000180)={0x0, 0x5, 0x7}) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000540)="f20ea8accdb7d9e23df4640df90c16152470e8", 0x13, 0xffffffffffffffff) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005900)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x10, &(0x7f0000000000), 0x4) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x1404c841, 0x0, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) splice(r8, 0x0, r7, 0x0, 0x406f413, 0x8) 2.442147717s ago: executing program 3 (id=2261): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x103e, 0x5, 0x0) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x50009405, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)) r3 = socket(0x2, 0x80805, 0x0) preadv(r3, &(0x7f00000010c0)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/86, 0x56}], 0x2, 0x40000000, 0xc3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x8008884}, 0x4000) r5 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000001, 0x1010, r5, 0x0) symlink(0x0, &(0x7f0000000200)='./file0\x00') creat(&(0x7f0000000240)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1200004, &(0x7f0000000200)=ANY=[@ANYBLOB='hpT', @ANYRESHEX=r6, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000002040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r6, &(0x7f0000000100)={0x18, 0x0, r7, {0x908c}}, 0x18) 2.441434285s ago: executing program 6 (id=2262): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000022c0)=@sack_info={0x0, 0x800, 0x1}, &(0x7f0000002300)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup(r3) sendmmsg(r4, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='f', 0x1}, {&(0x7f0000000000)="1c401a4e5bd7ce41412c04726561f72bffb2f5c1bbdf3fedcd3ff32ec90d8b3a816ef3694f85d489e7cf32a17986", 0x2e}, {&(0x7f0000000040)="4030e815104180ddd91dde51b0981f8861c28c", 0xfffffd8c}, {&(0x7f00000001c0)="00a1477f72000e9a486aaf7e5be40f0010", 0x5}], 0x4}}], 0x1, 0xc004) 1.947696964s ago: executing program 3 (id=2263): syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f000001c580)=""/4096, 0x1000}, {&(0x7f000001a440)=""/4096, 0x1000}, {&(0x7f000001b440)=""/183, 0xb7}, {&(0x7f0000019400)=""/87, 0x57}], 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000000340)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xff) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.947007951s ago: executing program 6 (id=2264): mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x16) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlink(&(0x7f0000000580)='./bus\x00') poll(0x0, 0x0, 0xca) chdir(&(0x7f0000000240)='./file0\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_pts(r4, 0x2a0081) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000200)="c402") 1.910980933s ago: executing program 2 (id=2265): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x1, 0x0) syz_io_uring_setup(0x360b, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000005c0)={0x9, {"a2e3ad21ed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b073172090890e0878f0e1ac6e7049b3371959b6e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6b922f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa0b9d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c71568f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897f3411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2de8a50ddefeb12c46342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f02f4cded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4008032, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 693.856328ms ago: executing program 7 (id=2266): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6b3, &(0x7f00000000c0)="$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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r5, 0x1, 0x0, @void}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 0s ago: executing program 6 (id=2267): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xa6, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0, 0x0, 0x8}, 0x18) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x40000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) connect$tipc(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 25799][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.283938][ T7396] bond0: (slave bridge0): Releasing backup interface [ 233.607973][ T7422] xt_nfacct: accounting object `syz0' does not exists [ 235.579450][ T7428] tipc: Failed to remove unknown binding: 66,1,1/0:1805115653/1805115655 [ 235.750211][ T7428] tipc: Failed to remove unknown binding: 66,1,1/0:1805115653/1805115655 [ 235.832770][ T7428] tipc: Failed to remove unknown binding: 66,1,1/0:1805115653/1805115655 [ 235.989630][ T7414] loop3: detected capacity change from 0 to 40427 [ 236.023570][ T7414] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 236.031639][ T7414] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 236.041397][ T7414] F2FS-fs (loop3): Unable to read 2th superblock [ 236.187672][ T7444] loop3: detected capacity change from 0 to 2048 [ 236.392892][ T7444] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 236.432958][ T7452] overlayfs: failed to clone upperpath [ 236.441650][ T7444] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 236.454384][ T7444] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.637409][ T7465] loop5: detected capacity change from 0 to 2048 [ 239.387709][ T7465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.034706][ T5827] Bluetooth: hci6: command 0x0406 tx timeout [ 243.208903][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.748605][ T7552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.796729][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.364'. [ 246.277419][ T7565] loop2: detected capacity change from 0 to 32768 [ 246.286875][ T7565] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.375 (7565) [ 246.339122][ T7565] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 246.349506][ T7565] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 246.358093][ T7565] BTRFS info (device loop2): using free-space-tree [ 247.266007][ T5831] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 247.903814][ T29] audit: type=1800 audit(1735607995.652:12): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.375" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 249.055468][ T7568] loop5: detected capacity change from 0 to 40427 [ 249.392100][ T7568] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff [ 250.414770][ T7623] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 250.765712][ T7568] F2FS-fs (loop5): Image doesn't support compression [ 250.782697][ T7568] F2FS-fs (loop5): heap/no_heap options were deprecated [ 250.792652][ T7568] F2FS-fs (loop5): Image doesn't support compression [ 250.864142][ T7568] F2FS-fs (loop5): invalid crc value [ 250.885442][ T7568] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4) [ 250.927183][ T5824] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 251.080414][ T7621] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.088596][ T7621] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 251.899205][ T7621] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.905222][ T7621] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 253.155852][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 253.295767][ T7621] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 253.345829][ T7621] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 253.551918][ T7621] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 253.568035][ T7621] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 253.963437][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 253.977617][ T7621] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 253.983672][ T7621] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 254.905412][ T7621] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 254.917784][ T7621] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 255.200803][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 255.209606][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.331961][ T7676] 9pnet_fd: p9_fd_create_tcp (7676): problem connecting socket to 127.0.0.1 [ 255.525815][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 255.527019][ T5827] Bluetooth: hci5: unexpected event for opcode 0x080f [ 255.611218][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 256.048953][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 257.320421][ T5831] Bluetooth: hci6: command 0x0406 tx timeout [ 257.746319][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 257.756066][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 259.384267][ T5831] Bluetooth: hci6: command 0x0406 tx timeout [ 259.438704][ T5831] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 259.447256][ T5831] Bluetooth: hci5: Injecting HCI hardware error event [ 259.456586][ T5831] Bluetooth: hci5: hardware error 0x00 [ 259.692896][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 262.370069][ T5831] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 264.409867][ T7771] loop5: detected capacity change from 0 to 1024 [ 264.417868][ T7771] EXT4-fs: inline encryption not supported [ 264.430913][ T7771] EXT4-fs (loop5): filesystem is read-only [ 264.437567][ T7771] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 264.448434][ T7771] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (50428!=20869) [ 264.499650][ T7777] loop2: detected capacity change from 0 to 128 [ 264.527562][ T7771] EXT4-fs error (device loop5): __ext4_fill_super:5505: inode #2: comm syz.5.414: iget: bad extra_isize 65535 (inode size 1024) [ 264.543371][ T7771] EXT4-fs (loop5): get root inode failed [ 264.549110][ T7771] EXT4-fs (loop5): mount failed [ 264.942766][ T7771] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 265.676155][ T7791] binder: 7789:7791 unknown command 0 [ 266.715914][ T7791] binder: 7789:7791 ioctl c0306201 20000a80 returned -22 [ 270.906669][ T7837] loop2: detected capacity change from 0 to 128 [ 271.015882][ T5895] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 271.439648][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.450704][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.463495][ T5895] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 271.473054][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.518957][ T5895] usb 4-1: config 0 descriptor?? [ 273.152917][ T5895] usbhid 4-1:0.0: can't add hid device: -71 [ 273.175809][ T5895] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 273.413961][ T5895] usb 4-1: USB disconnect, device number 5 [ 273.730458][ T7870] netlink: 44 bytes leftover after parsing attributes in process `syz.0.444'. [ 273.889307][ T7877] netlink: 80 bytes leftover after parsing attributes in process `syz.0.444'. [ 274.305942][ T938] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 275.484725][ T938] usb 6-1: Using ep0 maxpacket: 16 [ 275.502927][ T938] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 275.612248][ T938] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 276.578352][ T938] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.606530][ T938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 276.616683][ T938] usb 6-1: SerialNumber: syz [ 276.678249][ T7875] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 277.026845][ T7929] overlayfs: overlapping lowerdir path [ 277.710196][ T938] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 277.729265][ T938] usb 6-1: USB disconnect, device number 2 [ 279.439230][ T7956] loop2: detected capacity change from 0 to 2048 [ 279.550593][ T7956] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 279.571646][ T7963] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.603260][ T7956] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 279.613853][ T7956] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 279.664763][ T7956] Remounting filesystem read-only [ 279.676556][ T7956] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 279.688191][ T7956] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 279.701054][ T7956] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 279.711779][ T7956] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 279.726460][ T7956] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 279.737120][ T7956] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 279.791450][ T7956] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 279.802201][ T7956] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 279.831766][ T7956] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 279.842508][ T7956] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 279.857162][ T7956] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 279.867870][ T7956] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 279.881060][ T7956] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 279.892636][ T7956] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 279.919821][ T7956] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 279.930551][ T7956] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 279.953285][ T7956] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 279.964058][ T7956] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 279.977307][ T7956] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 279.988568][ T7956] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.008563][ T7956] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 280.019458][ T7956] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.038544][ T7956] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 280.049165][ T7956] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.068945][ T7956] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 280.079776][ T7956] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.097184][ T7956] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 280.107918][ T7956] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.127945][ T7956] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 280.138768][ T7956] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.154658][ T29] audit: type=1800 audit(1735608027.912:13): pid=7956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.463" name="file3" dev="loop2" ino=16 res=0 errno=0 [ 280.359214][ T7956] syz.2.463 (7956) used greatest stack depth: 16208 bytes left [ 280.512426][ T5894] IPVS: starting estimator thread 0... [ 280.579870][ T7970] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 280.617604][ T7939] netlink: 32 bytes leftover after parsing attributes in process `syz.1.460'. [ 280.687560][ T7971] IPVS: using max 19 ests per chain, 45600 per kthread [ 280.839602][ T7978] loop0: detected capacity change from 0 to 1024 [ 285.206820][ T8029] loop2: detected capacity change from 0 to 2048 [ 285.296063][ T8029] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 285.394645][ T8033] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.441059][ T8029] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 285.453224][ T8029] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 285.469989][ T8029] Remounting filesystem read-only [ 285.475938][ T8029] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 285.494020][ T8029] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 285.508462][ T8029] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 285.540270][ T8029] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 285.702587][ T8029] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 285.743934][ T8029] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 285.920765][ T8029] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 285.936274][ T8029] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 285.972275][ T8029] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 286.046809][ T8029] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 286.173862][ T8029] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 286.206886][ T8029] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 286.250026][ T8029] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 286.267589][ T8029] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 286.307235][ T8029] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 286.322090][ T8029] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 286.366469][ T8029] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 286.467973][ T8029] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 286.574526][ T8029] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 286.617804][ T8029] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 287.408762][ T8029] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 287.605048][ T8029] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 287.676031][ T8029] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 287.732049][ T8029] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 288.748018][ T8062] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP) [ 289.530234][ T8029] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 289.540653][ T8029] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 289.554011][ T8029] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 289.564370][ T8029] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 289.576543][ T8029] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 289.593652][ T8029] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 289.615778][ T29] audit: type=1800 audit(1735608037.372:14): pid=8029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.482" name="file3" dev="loop2" ino=16 res=0 errno=0 [ 293.485660][ T5827] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 294.285726][ T29] audit: type=1326 audit(1735608042.032:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.1.505" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e985d29 code=0x0 [ 294.459620][ T8109] loop0: detected capacity change from 0 to 128 [ 294.529892][ T8109] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.544549][ T8109] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 295.371982][ T8115] loop5: detected capacity change from 0 to 2048 [ 295.427395][ T8115] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 295.436925][ T8115] UDF-fs: Scanning with blocksize 512 failed [ 295.500525][ T8117] overlayfs: failed to clone upperpath [ 295.519421][ T8115] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.882529][ T5823] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 304.946834][ T5827] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 306.197853][ T8194] loop3: detected capacity change from 0 to 4096 [ 306.808887][ T8203] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.084398][ T8194] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 524288 [ 307.177110][ T8194] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 307.247844][ T8194] Remounting filesystem read-only [ 307.253016][ T8194] NILFS (loop3): error -5 truncating bmap (ino=15) [ 307.310978][ T8210] netlink: 36 bytes leftover after parsing attributes in process `syz.2.534'. [ 307.322342][ T8210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.534'. [ 307.365498][ T8194] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 307.368458][ T8207] Process accounting resumed [ 307.401731][ T8210] netlink: 36 bytes leftover after parsing attributes in process `syz.2.534'. [ 307.445789][ T8210] netlink: 36 bytes leftover after parsing attributes in process `syz.2.534'. [ 307.534240][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 309.827220][ T8243] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 310.986747][ T8251] netlink: 36 bytes leftover after parsing attributes in process `syz.2.546'. [ 311.005789][ T8251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.546'. [ 311.015778][ T8251] netlink: 36 bytes leftover after parsing attributes in process `syz.2.546'. [ 311.024926][ T8251] netlink: 36 bytes leftover after parsing attributes in process `syz.2.546'. [ 314.061199][ T8284] overlayfs: failed to resolve './file0': -2 [ 317.262784][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.850205][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880217fc000: rx timeout, send abort [ 320.860556][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880217fd400: rx timeout, send abort [ 320.869029][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880217fc000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 320.884433][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880217fd400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 322.489879][ T8338] loop0: detected capacity change from 0 to 512 [ 323.708418][ T8336] TCP: out of memory -- consider tuning tcp_mem [ 324.084992][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 325.793624][ T8338] EXT4-fs: error -4 creating inode table initialization thread [ 325.812058][ T8338] EXT4-fs (loop0): mount failed [ 328.709373][ T8374] vcan0: Master is either lo or non-ether device [ 332.625905][ T8421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.595'. [ 337.261722][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 352.320798][ T8535] loop5: detected capacity change from 0 to 1024 [ 354.255234][ T8535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.602839][ T8576] netlink: 'syz.1.634': attribute type 4 has an invalid length. [ 357.642354][ T8574] overlayfs: failed to clone upperpath [ 357.705814][ T8576] netlink: 'syz.1.634': attribute type 4 has an invalid length. [ 358.717011][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.411702][ T8593] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 365.601855][ T8630] xt_hashlimit: invalid rate [ 366.428827][ T8635] netlink: 36 bytes leftover after parsing attributes in process `syz.0.647'. [ 366.448069][ T8635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.647'. [ 366.478896][ T8635] netlink: 36 bytes leftover after parsing attributes in process `syz.0.647'. [ 366.515747][ T8635] netlink: 36 bytes leftover after parsing attributes in process `syz.0.647'. [ 372.162901][ T8681] netlink: 52 bytes leftover after parsing attributes in process `syz.6.664'. [ 373.777028][ T8694] loop0: detected capacity change from 0 to 64 [ 378.126016][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.343472][ T29] audit: type=1804 audit(1735608127.092:16): pid=8731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.677" name="/newroot/116/file1" dev="fuse" ino=1 res=1 errno=0 [ 379.704243][ T8735] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 385.036748][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 387.729120][ T8792] capability: warning: `syz.1.692' uses 32-bit capabilities (legacy support in use) [ 392.512781][ T29] audit: type=1326 audit(1735608140.262:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x7fc00000 [ 392.935966][ T29] audit: type=1326 audit(1735608140.262:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x7fc00000 [ 392.961586][ T29] audit: type=1326 audit(1735608140.362:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x7fc00000 [ 392.990997][ T29] audit: type=1326 audit(1735608140.362:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x7fc00000 [ 393.610795][ T29] audit: type=1326 audit(1735608140.362:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x7fc00000 [ 393.804414][ T29] audit: type=1326 audit(1735608140.362:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x7fc00000 [ 394.122409][ T29] audit: type=1326 audit(1735608140.362:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x7fc00000 [ 394.288676][ T29] audit: type=1326 audit(1735608140.362:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x7fc00000 [ 394.942445][ T29] audit: type=1326 audit(1735608140.362:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x7fc00000 [ 395.227371][ T5888] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 395.570642][ T29] audit: type=1326 audit(1735608140.362:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x7fc00000 [ 398.578571][ T8869] trusted_key: encrypted_key: key user:syz not found [ 400.731874][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 400.731900][ T29] audit: type=1326 audit(1735608148.222:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8876 comm="syz.5.718" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5875785d29 code=0x0 [ 401.522039][ T8891] ipt_rpfilter: unknown options [ 402.227191][ T8894] loop2: detected capacity change from 0 to 32768 [ 402.261436][ T8894] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.721 (8894) [ 402.347367][ T8894] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 402.393634][ T8894] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 402.405273][ T8894] BTRFS info (device loop2): using free-space-tree [ 402.665939][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.723'. [ 403.126096][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.723'. [ 403.441502][ T5827] Bluetooth: hci1: Invalid connection link type handle 0x00c9 [ 407.160483][ T29] audit: type=1326 audit(1735608154.882:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e985d29 code=0x7ffc0000 [ 407.168507][ T8968] loop0: detected capacity change from 0 to 128 [ 407.184771][ T29] audit: type=1326 audit(1735608154.882:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e985d29 code=0x7ffc0000 [ 407.212084][ T29] audit: type=1326 audit(1735608154.952:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7e8e985d29 code=0x7ffc0000 [ 407.234178][ T29] audit: type=1326 audit(1735608154.952:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e985d29 code=0x7ffc0000 [ 407.256349][ T29] audit: type=1326 audit(1735608154.962:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e985d29 code=0x7ffc0000 [ 407.279435][ T29] audit: type=1326 audit(1735608154.962:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f7e8e985d29 code=0x7ffc0000 [ 407.301976][ T29] audit: type=1326 audit(1735608154.962:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e985d29 code=0x7ffc0000 [ 407.324121][ T29] audit: type=1326 audit(1735608154.962:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e985d29 code=0x7ffc0000 [ 407.346299][ T29] audit: type=1326 audit(1735608154.962:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e8e985d29 code=0x7ffc0000 [ 407.368551][ T29] audit: type=1326 audit(1735608154.962:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.1.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e985d29 code=0x7ffc0000 [ 407.427321][ T5824] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 413.891596][ T9011] loop2: detected capacity change from 0 to 8 [ 414.577936][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 417.982670][ T9017] autofs: Unknown parameter 'l7@}EDpkV/%%VyCx`_eQ`ybN Se͖r%჻RTm>hkDM {M@qwD#<*5-4GpY(7d!{X ׹@ng' [ 425.424021][ T9069] netlink: 36 bytes leftover after parsing attributes in process `syz.3.766'. [ 425.437287][ T9069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.766'. [ 425.497328][ T9086] Process accounting resumed [ 425.502696][ T9069] netlink: 36 bytes leftover after parsing attributes in process `syz.3.766'. [ 425.790745][ T9069] netlink: 36 bytes leftover after parsing attributes in process `syz.3.766'. [ 429.794379][ T9107] loop0: detected capacity change from 0 to 256 [ 430.073738][ T9105] loop2: detected capacity change from 0 to 40427 [ 430.121069][ T9105] F2FS-fs (loop2): invalid crc value [ 430.351830][ T9105] F2FS-fs (loop2): Found nat_bits in checkpoint [ 431.659088][ T9105] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 439.461309][ T9164] trusted_key: syz.6.790 sent an empty control message without MSG_MORE. [ 440.025369][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.511620][ T9169] loop5: detected capacity change from 0 to 512 [ 443.817082][ T9169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.004155][ T9169] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.282649][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 444.557790][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.450253][ T9217] loop5: detected capacity change from 0 to 1024 [ 447.079847][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 447.079868][ T29] audit: type=1326 audit(1735608194.832:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.6.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 447.166605][ T29] audit: type=1326 audit(1735608194.832:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.6.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 449.198361][ T62] hfsplus: b-tree write err: -5, ino 4 [ 450.941983][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.6.810'. [ 456.810842][ T9302] loop5: detected capacity change from 0 to 64 [ 456.910047][ T29] audit: type=1800 audit(1735608204.652:103): pid=9302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.822" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 456.944295][ T6299] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 457.283668][ T9295] (unnamed net_device) (uninitialized): (slave geneve0): Device is not bonding slave [ 457.359825][ T9295] (unnamed net_device) (uninitialized): option active_slave: invalid value (geneve0) [ 457.504585][ T5888] IPVS: starting estimator thread 0... [ 457.524647][ T9303] loop0: detected capacity change from 0 to 256 [ 457.635746][ T9298] IPVS: using max 18 ests per chain, 43200 per kthread [ 458.275277][ T9295] FAT-fs (loop0): error, clusters badly computed (1 != 0) [ 458.290757][ T9316] loop2: detected capacity change from 0 to 512 [ 458.486651][ T9316] EXT4-fs: Ignoring removed oldalloc option [ 458.558174][ T9295] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 458.573275][ T9316] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 458.613742][ T9316] EXT4-fs (loop2): 1 truncate cleaned up [ 459.168742][ T9327] overlayfs: failed to clone upperpath [ 459.197540][ T9316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.726413][ T29] audit: type=1326 audit(1735608207.172:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9319 comm="syz.3.830" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x0 [ 461.888152][ T9316] loop2: detected capacity change from 512 to 64 [ 463.597208][ T9348] loop5: detected capacity change from 0 to 32768 [ 463.622501][ T5824] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 465.004184][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.116219][ T9394] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 467.124291][ T9394] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 467.133611][ T9394] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 467.141629][ T9394] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 469.543508][ T9404] loop0: detected capacity change from 0 to 764 [ 473.731655][ T9423] Symlink component flag not implemented [ 473.737651][ T9423] Symlink component flag not implemented [ 473.743469][ T9423] Symlink component flag not implemented (129) [ 473.749643][ T9423] Symlink component flag not implemented (6) [ 478.128127][ T9454] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 480.092035][ T9470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.868'. [ 480.101835][ T9470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.868'. [ 480.186016][ T9470] bond0: entered promiscuous mode [ 480.196516][ T9470] bond_slave_0: entered promiscuous mode [ 480.212004][ T9470] bond_slave_1: entered promiscuous mode [ 480.311383][ T9476] loop0: detected capacity change from 0 to 128 [ 480.362420][ T9476] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 480.374626][ T9476] sysv_free_block: trying to free block not in datazone [ 480.421877][ T9476] sysv_free_block: getblk() failed [ 480.427513][ T9476] sysv_free_block: getblk() failed [ 480.432955][ T9476] sysv_free_block: getblk() failed [ 480.438346][ T9476] sysv_free_block: getblk() failed [ 480.443716][ T9476] sysv_free_block: getblk() failed [ 480.449968][ T9476] sysv_free_block: getblk() failed [ 480.455336][ T9476] sysv_free_block: getblk() failed [ 480.460683][ T9476] sysv_free_block: getblk() failed [ 480.467058][ T9476] sysv_free_block: getblk() failed [ 480.473666][ T9476] sysv_free_block: getblk() failed [ 480.479523][ T9476] sysv_free_block: getblk() failed [ 480.484835][ T9476] sysv_free_block: getblk() failed [ 480.490138][ T9476] sysv_free_block: getblk() failed [ 480.496219][ T9476] sysv_free_block: getblk() failed [ 480.501634][ T9476] sysv_free_block: getblk() failed [ 480.506989][ T9476] sysv_free_block: getblk() failed [ 480.512389][ T9476] sysv_free_block: getblk() failed [ 480.517734][ T9476] sysv_free_block: getblk() failed [ 480.523071][ T9476] sysv_free_block: getblk() failed [ 480.528421][ T9476] sysv_free_block: getblk() failed [ 480.533836][ T9476] sysv_free_block: getblk() failed [ 480.540336][ T9476] sysv_free_block: getblk() failed [ 480.545717][ T9476] sysv_free_block: getblk() failed [ 480.551076][ T9476] sysv_free_block: getblk() failed [ 480.556481][ T9476] sysv_free_block: getblk() failed [ 480.561807][ T9476] sysv_free_block: getblk() failed [ 480.567216][ T9476] sysv_free_block: getblk() failed [ 480.572589][ T9476] sysv_free_block: getblk() failed [ 480.578004][ T9476] sysv_free_block: getblk() failed [ 480.584771][ T9476] sysv_free_block: getblk() failed [ 480.590087][ T9476] sysv_free_block: getblk() failed [ 480.595987][ T9476] sysv_free_block: getblk() failed [ 480.601347][ T9476] sysv_free_block: getblk() failed [ 480.606741][ T9476] sysv_free_block: getblk() failed [ 480.612094][ T9476] sysv_free_block: getblk() failed [ 480.617530][ T9476] sysv_free_block: getblk() failed [ 480.622871][ T9476] sysv_free_block: getblk() failed [ 480.629186][ T9476] sysv_free_block: getblk() failed [ 480.634535][ T9476] sysv_free_block: getblk() failed [ 480.639907][ T9476] sysv_free_block: getblk() failed [ 480.645228][ T9476] sysv_free_block: getblk() failed [ 480.650606][ T9476] sysv_free_block: getblk() failed [ 480.655788][ T9476] sysv_free_block: trying to free block not in datazone [ 480.663216][ T9476] sysv_free_block: trying to free block not in datazone [ 480.670275][ T9476] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 481.070521][ T9478] loop5: detected capacity change from 0 to 64 [ 482.659115][ T9470] batadv_slave_1: entered promiscuous mode [ 484.101746][ T9470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.868'. [ 484.110678][ T9470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.868'. [ 484.381529][ T9501] loop2: detected capacity change from 0 to 64 [ 485.452625][ T9502] loop5: detected capacity change from 0 to 512 [ 486.497386][ T9502] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.581120][ T9502] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 488.525909][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.117201][ T9541] loop0: detected capacity change from 0 to 64 [ 493.598394][ T9564] 9pnet_fd: Insufficient options for proto=fd [ 496.560099][ T9599] overlayfs: failed to clone upperpath [ 497.948707][ T9602] loop0: detected capacity change from 0 to 64 [ 499.716383][ T9616] syz.0.902: attempt to access beyond end of device [ 499.716383][ T9616] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 499.729853][ T9616] Buffer I/O error on dev loop0, logical block 512, async page read [ 499.739022][ T9616] syz.0.902: attempt to access beyond end of device [ 499.739022][ T9616] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 499.752328][ T9616] Buffer I/O error on dev loop0, logical block 56576, async page read [ 502.515520][ T5827] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 503.236997][ T9646] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 503.236997][ T9646] The task syz.6.910 (9646) triggered the difference, watch for misbehavior. [ 503.342135][ T9640] 9pnet_fd: Insufficient options for proto=fd [ 503.481893][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.169447][ T9673] loop0: detected capacity change from 0 to 256 [ 507.796848][ T9673] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 510.546935][ T9697] random: crng reseeded on system resumption [ 514.279503][ T9720] xt_l2tp: unknown flags: 10 [ 515.563590][ T9728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.934'. [ 520.679976][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.6.936'. [ 521.846340][ T29] audit: type=1326 audit(1735608265.919:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9761 comm="syz.1.940" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e8e985d29 code=0x0 [ 528.635880][ T9816] trusted_key: encrypted_key: insufficient parameters specified [ 532.973011][ T9802] Set syz1 is full, maxelem 65536 reached [ 533.482333][ T9853] loop2: detected capacity change from 0 to 1764 [ 533.537878][ T9853] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 536.867360][ T9869] ieee802154 phy1 wpan1: encryption failed: -22 [ 538.815318][ T9886] sock: sock_timestamping_bind_phc: sock not bind to device [ 543.803708][ T9919] loop2: detected capacity change from 0 to 2048 [ 544.997643][ T9920] block device autoloading is deprecated and will be removed. [ 546.283049][ T9892] Set syz1 is full, maxelem 65536 reached [ 546.402078][ T9924] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 548.500376][ T29] audit: type=1326 audit(1735608290.782:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.3.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x7ffc0000 [ 548.554640][ T29] audit: type=1326 audit(1735608290.782:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.3.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x7ffc0000 [ 549.580863][ T29] audit: type=1326 audit(1735608290.782:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.3.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f5444785d29 code=0x7ffc0000 [ 549.769787][ T29] audit: type=1326 audit(1735608290.782:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.3.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x7ffc0000 [ 550.886117][ T29] audit: type=1326 audit(1735608290.782:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.3.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x7ffc0000 [ 551.762942][ T29] audit: type=1326 audit(1735608290.782:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.3.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5444785d29 code=0x7ffc0000 [ 551.884389][ T29] audit: type=1326 audit(1735608290.782:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.3.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x7ffc0000 [ 551.906695][ T29] audit: type=1326 audit(1735608290.782:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.3.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x7ffc0000 [ 551.949486][ T29] audit: type=1326 audit(1735608290.782:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.3.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5444785d29 code=0x7ffc0000 [ 551.972145][ T29] audit: type=1326 audit(1735608290.782:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.3.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x7ffc0000 [ 555.561226][ T9970] Set syz1 is full, maxelem 65536 reached [ 569.515388][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.916045][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 575.310110][T10057] Set syz1 is full, maxelem 65536 reached [ 585.130883][T10182] x_tables: duplicate underflow at hook 2 [ 587.164906][T10179] loop5: detected capacity change from 0 to 4096 [ 589.536918][T10179] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 590.868807][ T2076] IPVS: starting estimator thread 0... [ 590.897658][T10179] ntfs3(loop5): Failed to read $UpCase (-4). [ 592.902515][T10211] IPVS: using max 20 ests per chain, 48000 per kthread [ 594.041421][T10231] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1060'. [ 594.050492][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1060'. [ 594.394384][T10232] loop5: detected capacity change from 0 to 764 [ 597.479474][T10250] set match dimension is over the limit! [ 598.904480][T10250] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 602.126715][T10277] loop5: detected capacity change from 0 to 40427 [ 602.369741][T10277] F2FS-fs (loop5): invalid crc value [ 602.771168][T10277] F2FS-fs (loop5): Found nat_bits in checkpoint [ 602.916323][T10277] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 603.345691][T10296] syz.5.1072: attempt to access beyond end of device [ 603.345691][T10296] loop5: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 603.786063][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 603.786084][ T29] audit: type=1800 audit(1735608342.145:134): pid=10296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1072" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 604.704264][ T5833] syz-executor: attempt to access beyond end of device [ 604.704264][ T5833] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 604.847970][ T5833] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 604.959237][T10304] loop0: detected capacity change from 0 to 24 [ 604.971096][T10304] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 605.099094][T10304] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 609.782621][T10333] loop0: detected capacity change from 0 to 2048 [ 609.877970][T10335] loop5: detected capacity change from 0 to 128 [ 609.977603][T10335] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 610.004770][T10335] syz.5.1079: attempt to access beyond end of device [ 610.004770][T10335] loop5: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 610.019326][T10335] Buffer I/O error on dev loop5, logical block 2066843070, lost async page write [ 610.029010][T10335] syz.5.1079: attempt to access beyond end of device [ 610.029010][T10335] loop5: rw=2049, sector=8767744, nr_sectors = 1 limit=128 [ 610.042857][T10335] Buffer I/O error on dev loop5, logical block 8767744, lost async page write [ 610.052238][T10335] syz.5.1079: attempt to access beyond end of device [ 610.052238][T10335] loop5: rw=2049, sector=13269809, nr_sectors = 1 limit=128 [ 610.066165][T10335] Buffer I/O error on dev loop5, logical block 13269809, lost async page write [ 610.123195][T10335] syz.5.1079: attempt to access beyond end of device [ 610.123195][T10335] loop5: rw=2049, sector=1157, nr_sectors = 1 limit=128 [ 610.136812][T10335] Buffer I/O error on dev loop5, logical block 1157, lost async page write [ 610.145904][T10335] syz.5.1079: attempt to access beyond end of device [ 610.145904][T10335] loop5: rw=2049, sector=3211264, nr_sectors = 1 limit=128 [ 610.159739][T10335] Buffer I/O error on dev loop5, logical block 3211264, lost async page write [ 610.169025][T10335] syz.5.1079: attempt to access beyond end of device [ 610.169025][T10335] loop5: rw=2049, sector=8768635, nr_sectors = 1 limit=128 [ 610.182866][T10335] Buffer I/O error on dev loop5, logical block 8768635, lost async page write [ 610.192293][T10335] syz.5.1079: attempt to access beyond end of device [ 610.192293][T10335] loop5: rw=2049, sector=13466417, nr_sectors = 1 limit=128 [ 610.206842][T10335] Buffer I/O error on dev loop5, logical block 13466417, lost async page write [ 610.216655][T10335] syz.5.1079: attempt to access beyond end of device [ 610.216655][T10335] loop5: rw=2049, sector=209285, nr_sectors = 1 limit=128 [ 610.230466][T10335] Buffer I/O error on dev loop5, logical block 209285, lost async page write [ 610.664615][ T5833] sysv_free_block: trying to free block not in datazone [ 610.768397][ T5833] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 610.924927][T10338] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 612.793664][T10350] syz.0.1087: attempt to access beyond end of device [ 612.793664][T10350] loop0: rw=0, sector=19791209300040, nr_sectors = 2 limit=2048 [ 612.808524][T10350] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 613.018329][T10338] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 613.029433][T10338] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 613.582805][T10360] overlayfs: failed to clone upperpath [ 614.943632][T10338] Remounting filesystem read-only [ 615.800634][ T5823] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 616.061763][T10377] TCP: out of memory -- consider tuning tcp_mem [ 616.928119][T10376] workqueue: Failed to create a rescuer kthread for wq "all": -EINTR [ 621.332190][T10406] loop0: detected capacity change from 0 to 2048 [ 622.984355][T10406] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 622.992054][T10406] UDF-fs: Scanning with blocksize 512 failed [ 623.129916][T10406] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 626.170884][T10432] No such timeout policy "syz1" [ 632.347427][T10441] Set syz1 is full, maxelem 65536 reached [ 633.013523][T10482] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.394329][T10501] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1132'. [ 635.779436][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.046542][T10510] loop2: detected capacity change from 0 to 64 [ 636.159253][T10509] netlink: 'syz.1.1136': attribute type 12 has an invalid length. [ 637.306530][T10484] Bluetooth: hci6: command 0x0406 tx timeout [ 639.332800][T10535] loop0: detected capacity change from 0 to 2048 [ 640.071762][T10539] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 642.443340][T10554] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 661.055985][T10484] Bluetooth: hci6: command 0x0406 tx timeout [ 663.764887][T10689] xt_CT: No such helper "snmp" [ 665.185322][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 665.433423][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 665.494373][T10714] loop0: detected capacity change from 0 to 512 [ 665.831578][ T8] usb 6-1: config 0 has an invalid interface number: 254 but max is 0 [ 665.840860][ T8] usb 6-1: config 0 has no interface number 0 [ 665.934041][ T8] usb 6-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice=1a.af [ 665.947991][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.956006][ T8] usb 6-1: Product: syz [ 665.960556][ T8] usb 6-1: Manufacturer: syz [ 665.965173][ T8] usb 6-1: SerialNumber: syz [ 665.982303][T10714] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1174: invalid indirect mapped block 256 (level 2) [ 666.000391][T10714] EXT4-fs (loop0): Remounting filesystem read-only [ 666.007590][T10714] EXT4-fs (loop0): 2 truncates cleaned up [ 666.013363][ T8] usb 6-1: config 0 descriptor?? [ 666.019477][T10714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.212716][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.246117][ T8] gspca_main: pac207-2.14.0 probing 093a:2476 [ 666.365459][ T8] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 667.519990][ T938] usb 6-1: USB disconnect, device number 3 [ 667.807222][T10726] loop0: detected capacity change from 0 to 8 [ 669.685662][T10726] SQUASHFS error: xz decompression failed, data probably corrupt [ 669.694133][T10726] SQUASHFS error: Failed to read block 0x108: -5 [ 669.700560][T10726] SQUASHFS error: Unable to read metadata cache entry [106] [ 669.707998][T10726] SQUASHFS error: Unable to read inode 0x101f [ 669.949151][T10734] loop2: detected capacity change from 0 to 256 [ 669.956104][T10734] exfat: Deprecated parameter 'namecase' [ 670.504078][T10734] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 671.739707][T10735] syz.0.1183 (10735): drop_caches: 2 [ 672.010267][ T29] audit: type=1326 audit(1735608406.173:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.3.1189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x0 [ 673.336409][T10750] delete_channel: no stack [ 673.552242][T10756] loop0: detected capacity change from 0 to 2048 [ 673.957715][T10763] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 678.378618][T10776] loop2: detected capacity change from 0 to 32768 [ 679.046190][T10779] syz.0.1190: attempt to access beyond end of device [ 679.046190][T10779] loop0: rw=0, sector=19791209300040, nr_sectors = 2 limit=2048 [ 679.061686][T10779] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 679.211546][T10776] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop2": -EINTR [ 679.651262][T10790] loop0: detected capacity change from 0 to 256 [ 681.109088][T10790] FAT-fs (loop0): Directory bread(block 64) failed [ 681.116033][T10790] FAT-fs (loop0): Directory bread(block 65) failed [ 681.123252][T10790] FAT-fs (loop0): Directory bread(block 66) failed [ 682.338534][T10798] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 682.363758][T10798] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 682.550526][T10790] FAT-fs (loop0): Directory bread(block 67) failed [ 682.818282][T10790] FAT-fs (loop0): Directory bread(block 68) failed [ 682.824866][T10790] FAT-fs (loop0): Directory bread(block 69) failed [ 682.903899][T10790] FAT-fs (loop0): Directory bread(block 70) failed [ 682.949120][T10790] FAT-fs (loop0): Directory bread(block 71) failed [ 683.003392][T10790] FAT-fs (loop0): Directory bread(block 72) failed [ 683.053062][T10790] FAT-fs (loop0): Directory bread(block 73) failed [ 686.264379][T10836] Process accounting resumed [ 690.700312][T10869] loop5: detected capacity change from 0 to 256 [ 690.729253][ T29] audit: type=1326 audit(1735608423.886:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.6.1220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80d8f85d29 code=0x0 [ 690.786203][T10872] loop2: detected capacity change from 0 to 256 [ 690.873582][T10869] FAT-fs (loop5): Directory bread(block 64) failed [ 690.901382][T10872] FAT-fs (loop2): Directory bread(block 64) failed [ 690.913378][T10869] FAT-fs (loop5): Directory bread(block 65) failed [ 690.974892][T10872] FAT-fs (loop2): Directory bread(block 65) failed [ 690.981595][T10869] FAT-fs (loop5): Directory bread(block 66) failed [ 691.005363][T10872] FAT-fs (loop2): Directory bread(block 66) failed [ 691.036739][T10869] FAT-fs (loop5): Directory bread(block 67) failed [ 691.067200][T10872] FAT-fs (loop2): Directory bread(block 67) failed [ 691.074504][T10869] FAT-fs (loop5): Directory bread(block 68) failed [ 691.220777][T10869] FAT-fs (loop5): Directory bread(block 69) failed [ 691.228694][T10872] FAT-fs (loop2): Directory bread(block 68) failed [ 691.235947][T10869] FAT-fs (loop5): Directory bread(block 70) failed [ 691.242918][T10872] FAT-fs (loop2): Directory bread(block 69) failed [ 691.256191][T10869] FAT-fs (loop5): Directory bread(block 71) failed [ 691.323833][T10877] netlink: ct family unspecified [ 691.328998][T10877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.086775][T10872] FAT-fs (loop2): Directory bread(block 70) failed [ 692.108855][T10869] FAT-fs (loop5): Directory bread(block 72) failed [ 692.115420][T10869] FAT-fs (loop5): Directory bread(block 73) failed [ 692.123391][T10872] FAT-fs (loop2): Directory bread(block 71) failed [ 692.155344][T10872] FAT-fs (loop2): Directory bread(block 72) failed [ 692.403467][T10872] FAT-fs (loop2): Directory bread(block 73) failed [ 698.797461][T10913] loop0: detected capacity change from 0 to 128 [ 700.997305][T10931] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 701.013657][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 701.476826][T10934] loop5: detected capacity change from 0 to 512 [ 701.484625][T10934] EXT4-fs: Ignoring removed nobh option [ 701.490202][T10934] EXT4-fs: Ignoring removed nobh option [ 702.797173][T10934] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 702.807273][T10934] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1232: invalid indirect mapped block 2683928664 (level 1) [ 702.862996][T10934] EXT4-fs (loop5): 1 truncate cleaned up [ 702.869622][T10934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.688256][T10944] loop2: detected capacity change from 0 to 256 [ 706.628949][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.703239][T10944] FAT-fs (loop2): Directory bread(block 64) failed [ 706.710038][T10944] FAT-fs (loop2): Directory bread(block 65) failed [ 706.716955][T10944] FAT-fs (loop2): Directory bread(block 66) failed [ 706.723652][T10944] FAT-fs (loop2): Directory bread(block 67) failed [ 706.730314][T10944] FAT-fs (loop2): Directory bread(block 68) failed [ 706.737106][T10944] FAT-fs (loop2): Directory bread(block 69) failed [ 706.743964][T10944] FAT-fs (loop2): Directory bread(block 70) failed [ 706.751085][T10944] FAT-fs (loop2): Directory bread(block 71) failed [ 706.758437][T10944] FAT-fs (loop2): Directory bread(block 72) failed [ 706.765218][T10944] FAT-fs (loop2): Directory bread(block 73) failed [ 710.365459][T10978] loop0: detected capacity change from 0 to 256 [ 710.380336][T10978] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a37, chksum : 0xd675b107, utbl_chksum : 0xe619d30d) [ 712.179653][T10990] loop2: detected capacity change from 0 to 128 [ 716.678248][ T6299] kworker/u8:9: attempt to access beyond end of device [ 716.678248][ T6299] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 725.364313][ T5827] Bluetooth: hci6: command 0x0406 tx timeout [ 729.571440][T11106] loop0: detected capacity change from 0 to 128 [ 730.947165][T11106] EXT4-fs: error -4 creating inode table initialization thread [ 730.954992][T11106] EXT4-fs (loop0): mount failed [ 731.150405][T11120] loop5: detected capacity change from 0 to 256 [ 731.157500][T11120] exfat: Bad value for 'uid' [ 731.163169][T11120] exfat: Bad value for 'uid' [ 734.319936][T11141] loop2: detected capacity change from 0 to 1024 [ 734.353853][T11141] EXT4-fs: Ignoring removed bh option [ 734.359430][T11141] EXT4-fs: Ignoring removed oldalloc option [ 734.396829][T11141] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 734.812803][T11141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.546346][T11181] loop5: detected capacity change from 0 to 164 [ 739.583387][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.501494][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'. [ 745.829789][T11217] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 749.987495][ T29] audit: type=1800 audit(1735608479.318:137): pid=11254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1315" name="bus" dev="overlay" ino=1174 res=0 errno=0 [ 751.687434][ T5894] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 751.996853][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 752.025913][ T5894] usb 3-1: descriptor type invalid, skip [ 752.031792][ T5894] usb 3-1: descriptor type invalid, skip [ 752.044656][ T5894] usb 3-1: descriptor type invalid, skip [ 752.050365][ T5894] usb 3-1: descriptor type invalid, skip [ 752.066393][ T5894] usb 3-1: too many endpoints for config 1 interface 0 altsetting 8: 253, using maximum allowed: 30 [ 752.158580][ T5894] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 752.493622][ T5894] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 752.846045][ T5894] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 752.873322][ T5894] usb 3-1: config 1 interface 0 has no altsetting 0 [ 754.627199][ T5894] usb 3-1: string descriptor 0 read error: -71 [ 754.633488][ T5894] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 754.642902][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.827306][ T5894] usb 3-1: can't set config #1, error -71 [ 754.840493][ T5894] usb 3-1: USB disconnect, device number 4 [ 758.283904][T11315] loop5: detected capacity change from 0 to 8 [ 766.185686][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 766.762623][T11370] cgroup: Need name or subsystem set [ 766.939592][T11370] orangefs_mount: mount request failed with -4 [ 767.013434][T11374] CIFS mount error: No usable UNC path provided in device string! [ 767.013434][T11374] [ 767.023643][T11374] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 767.253474][T11372] delete_channel: no stack [ 771.059557][T11399] loop5: detected capacity change from 0 to 2048 [ 771.338526][T11403] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 779.222646][T11441] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 779.236489][T11441] Error validating options; rc = [-22] [ 780.430484][T11460] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1359'. [ 783.085129][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 783.700030][T11485] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1368'. [ 785.823761][T11499] loop2: detected capacity change from 0 to 16 [ 785.898027][T11499] erofs (device loop2): mounted with root inode @ nid 36. [ 785.979391][T11501] loop5: detected capacity change from 0 to 256 [ 786.004794][T11501] exfat: Deprecated parameter 'namecase' [ 786.099922][T11501] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 786.402458][ T938] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 789.488856][ T938] usb 1-1: device descriptor read/all, error -71 [ 790.143020][T11525] loop0: detected capacity change from 0 to 256 [ 790.614283][T11525] FAT-fs (loop0): Directory bread(block 1285) failed [ 792.145374][T11532] FAT-fs (loop0): Directory bread(block 1285) failed [ 792.152769][T11532] FAT-fs (loop0): Directory bread(block 1285) failed [ 792.159861][T11532] FAT-fs (loop0): Directory bread(block 1285) failed [ 792.692539][T11537] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1384'. [ 799.576157][T11569] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 799.585695][T11569] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 805.288455][T11612] binder_alloc: 11602: binder_alloc_buf, no vma [ 811.704378][T11645] ebt_limit: overflow, try lower: 570423552/2483027968 [ 812.668585][ T29] audit: type=1326 audit(1735608537.958:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11652 comm="syz.6.1414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80d8f85d29 code=0x0 [ 812.693847][T11662] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1410'. [ 816.094593][T11686] netlink: 'syz.3.1420': attribute type 10 has an invalid length. [ 822.335507][ T29] audit: type=1326 audit(1735608546.994:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11735 comm="syz.2.1433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a67f85d29 code=0x0 [ 822.639162][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 824.730588][T11760] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1438'. [ 826.339485][ T29] audit: type=1326 audit(1735608550.399:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.6.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 826.432868][ T29] audit: type=1326 audit(1735608550.399:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.6.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 826.583623][ T29] audit: type=1326 audit(1735608550.399:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.6.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 826.711361][T11775] loop5: detected capacity change from 0 to 4096 [ 826.809687][ T29] audit: type=1326 audit(1735608550.399:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.6.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 827.372562][ T29] audit: type=1326 audit(1735608550.399:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.6.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 828.071244][ T29] audit: type=1326 audit(1735608550.399:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.6.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 828.115518][ T29] audit: type=1326 audit(1735608550.399:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.6.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 828.138175][ T29] audit: type=1326 audit(1735608550.408:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.6.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 828.180694][T11786] loop2: detected capacity change from 0 to 2048 [ 828.292016][T11784] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 828.549428][T11792] x_tables: duplicate underflow at hook 3 [ 831.681167][T11781] tty tty25: ldisc open failed (-12), clearing slot 24 [ 831.868741][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 834.138359][T11811] netlink: 'syz.5.1450': attribute type 1 has an invalid length. [ 834.146288][T11811] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1450'. [ 834.291268][T11818] loop0: detected capacity change from 0 to 128 [ 835.395964][T11824] loop2: detected capacity change from 0 to 1764 [ 835.439782][T11824] iso9660: Unknown parameter 'iocharcI[iso8859-13' [ 836.067377][T11834] loop0: detected capacity change from 0 to 128 [ 836.076723][T11834] adfs: Bad value for 'uid' [ 836.081371][T11834] adfs: Bad value for 'uid' [ 847.668126][T11904] loop2: detected capacity change from 0 to 128 [ 848.342292][ T29] audit: type=1326 audit(1735608569.724:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11891 comm="syz.3.1471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5444785d29 code=0x0 [ 849.865299][T11911] loop0: detected capacity change from 0 to 4096 [ 850.204338][T11911] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 850.706350][T11927] loop5: detected capacity change from 0 to 32768 [ 853.662201][T11945] read_mapping_page failed! [ 853.667397][T11945] diRead: read_metapage failed [ 853.672295][T11945] jfs_lookup: iget failed on inum 32 [ 853.924192][T11911] ntfs3(loop0): volume is dirty and "force" flag is not set! [ 861.163658][T11979] Set syz1 is full, maxelem 65536 reached [ 862.576081][T11999] hub 5-0:1.0: USB hub found [ 862.591704][T11999] hub 5-0:1.0: 1 port detected [ 870.906484][T12055] loop2: detected capacity change from 0 to 764 [ 872.135915][T12069] loop5: detected capacity change from 0 to 4096 [ 882.568293][T12126] usb usb8: usbfs: process 12126 (syz.5.1534) did not claim interface 0 before use [ 882.580171][T12121] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 884.271987][T12145] overlayfs: failed to resolve './file1': -2 [ 886.121489][T12148] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 888.385569][T12171] loop2: detected capacity change from 0 to 1024 [ 888.498872][T12173] overlayfs: failed to clone upperpath [ 898.581402][T12216] xt_socket: unknown flags 0x8 [ 900.041112][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 903.076047][ T5888] IPVS: starting estimator thread 0... [ 903.514862][T12230] IPVS: using max 20 ests per chain, 48000 per kthread [ 904.539961][T12249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 907.338739][T12268] usb usb4: usbfs: process 12268 (syz.0.1563) did not claim interface 0 before use [ 910.350140][T12296] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1572'. [ 911.095984][T12299] x_tables: duplicate underflow at hook 2 [ 911.390851][T12285] ceph: No mds server is up or the cluster is laggy [ 911.929213][T12307] loop2: detected capacity change from 0 to 16 [ 911.942668][T12307] erofs (device loop2): mounted with root inode @ nid 36. [ 911.968211][T12307] syz.2.1579: attempt to access beyond end of device [ 911.968211][T12307] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 912.012092][T12307] erofs (device loop2): read error -5 @ 8200 of nid 36 [ 912.067017][T12312] trusted_key: encrypted_key: insufficient parameters specified [ 914.563305][T12322] syz.2.1579 (12322): drop_caches: 2 [ 914.612019][ T29] audit: type=1326 audit(1735609848.662:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a67f85d29 code=0x7ffc0000 [ 914.638337][ T29] audit: type=1326 audit(1735609848.662:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a67f85d29 code=0x7ffc0000 [ 914.939354][ T29] audit: type=1326 audit(1735609848.662:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6a67f85d29 code=0x7ffc0000 [ 914.989327][ T29] audit: type=1326 audit(1735609848.662:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a67f85d29 code=0x7ffc0000 [ 915.702114][ T29] audit: type=1326 audit(1735609848.662:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a67f85d29 code=0x7ffc0000 [ 915.739159][ T29] audit: type=1326 audit(1735609848.662:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f6a67f85d29 code=0x7ffc0000 [ 922.116213][T12366] overlayfs: failed to clone upperpath [ 925.373976][T12378] tty tty30: ldisc open failed (-12), clearing slot 29 [ 930.611375][T12409] loop5: detected capacity change from 0 to 2048 [ 932.666965][T12425] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 939.009187][T12467] loop5: detected capacity change from 0 to 1764 [ 939.032778][T12467] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 952.089015][T12550] loop2: detected capacity change from 0 to 256 [ 952.095989][T12550] exfat: Deprecated parameter 'namecase' [ 952.334998][T12550] exfat: Deprecated parameter 'utf8' [ 952.430327][T12553] kernel profiling enabled (shift: 0) [ 953.364653][T12550] exfat: Deprecated parameter 'namecase' [ 953.631734][T12550] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 954.493137][T12553] syz.5.1631: vmalloc error: size 738197504, failed to allocated page array size 1441792, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 954.511773][T12553] CPU: 0 UID: 0 PID: 12553 Comm: syz.5.1631 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 954.522574][T12553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 954.532647][T12553] Call Trace: [ 954.535940][T12553] [ 954.538887][T12553] dump_stack_lvl+0x241/0x360 [ 954.543608][T12553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 954.548845][T12553] ? __pfx__printk+0x10/0x10 [ 954.553472][T12553] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 954.559924][T12553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.565582][T12553] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 954.572125][T12553] warn_alloc+0x278/0x410 [ 954.576472][T12553] ? __pfx_warn_alloc+0x10/0x10 [ 954.581339][T12553] ? profile_init+0xb1/0x100 [ 954.585950][T12553] ? __get_vm_area_node+0x1c8/0x2d0 [ 954.591173][T12553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.596824][T12553] ? __get_vm_area_node+0x25c/0x2d0 [ 954.602055][T12553] __vmalloc_node_range_noprof+0x62f/0x1380 [ 954.608002][T12553] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 954.614383][T12553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.620029][T12553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.625677][T12553] ? profile_init+0xb1/0x100 [ 954.630280][T12553] ? __pfx_sysfs_kf_write+0x10/0x10 [ 954.635486][T12553] vzalloc_noprof+0x79/0x90 [ 954.640000][T12553] ? profile_init+0xb1/0x100 [ 954.644603][T12553] profile_init+0xb1/0x100 [ 954.649032][T12553] profiling_store+0x6c/0xf0 [ 954.653639][T12553] kernfs_fop_write_iter+0x3a2/0x500 [ 954.658953][T12553] vfs_write+0xaed/0xd30 [ 954.663211][T12553] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 954.669039][T12553] ? __pfx_vfs_write+0x10/0x10 [ 954.673822][T12553] ? __fget_files+0x2a/0x410 [ 954.678438][T12553] ? __fget_files+0x2a/0x410 [ 954.683052][T12553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.689047][T12553] ksys_write+0x18f/0x2b0 [ 954.693388][T12553] ? __pfx_ksys_write+0x10/0x10 [ 954.698281][T12553] ? do_syscall_64+0x100/0x230 [ 954.703076][T12553] ? do_syscall_64+0xb6/0x230 [ 954.707782][T12553] do_syscall_64+0xf3/0x230 [ 954.712317][T12553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.718230][T12553] RIP: 0033:0x7f5875785d29 [ 954.722656][T12553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 954.742271][T12553] RSP: 002b:00007f5876605038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 954.750699][T12553] RAX: ffffffffffffffda RBX: 00007f5875976160 RCX: 00007f5875785d29 [ 954.758679][T12553] RDX: 0000000000000012 RSI: 0000000020000100 RDI: 0000000000000007 [ 954.766657][T12553] RBP: 00007f5875801b08 R08: 0000000000000000 R09: 0000000000000000 [ 954.774636][T12553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 954.782614][T12553] R13: 0000000000000000 R14: 00007f5875976160 R15: 00007ffe225aabb8 [ 954.790639][T12553] [ 954.795412][T12553] Mem-Info: [ 954.798553][T12553] active_anon:15010 inactive_anon:1 isolated_anon:0 [ 954.798553][T12553] active_file:23198 inactive_file:39043 isolated_file:0 [ 954.798553][T12553] unevictable:768 dirty:371 writeback:0 [ 954.798553][T12553] slab_reclaimable:10842 slab_unreclaimable:107458 [ 954.798553][T12553] mapped:40236 shmem:10900 pagetables:927 [ 954.798553][T12553] sec_pagetables:0 bounce:0 [ 954.798553][T12553] kernel_misc_reclaimable:0 [ 954.798553][T12553] free:1261838 free_pcp:1841 free_cma:0 [ 954.845055][T12553] Node 0 active_anon:60040kB inactive_anon:4kB active_file:92744kB inactive_file:156092kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160936kB dirty:1480kB writeback:0kB shmem:42064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11408kB pagetables:3708kB sec_pagetables:0kB all_unreclaimable? no [ 954.877685][T12553] Node 1 active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 954.907984][T12553] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 954.936188][T12553] lowmem_reserve[]: 0 2465 2466 0 0 [ 954.941505][T12553] Node 0 DMA32 free:1220184kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:63504kB inactive_anon:4kB active_file:92744kB inactive_file:155268kB unevictable:1536kB writepending:1480kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:1016kB local_pcp:628kB free_cma:0kB [ 954.971993][T12553] lowmem_reserve[]: 0 0 0 0 0 [ 954.976825][T12553] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 955.003886][T12553] lowmem_reserve[]: 0 0 0 0 0 [ 955.008745][T12553] Node 1 Normal free:3807340kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:80kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:6188kB local_pcp:6188kB free_cma:0kB [ 955.039176][T12553] lowmem_reserve[]: 0 0 0 0 0 [ 955.044047][T12553] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 955.057018][T12553] Node 0 DMA32: 45*4kB (UE) 95*8kB (UME) 95*16kB (UME) 233*32kB (UME) 145*64kB (UME) 125*128kB (UME) 85*256kB (UME) 48*512kB (UME) 34*1024kB (UME) 19*2048kB (UME) 257*4096kB (UM) = 1207932kB [ 955.076484][T12553] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 955.088288][T12553] Node 1 Normal: 3*4kB (UE) 6*8kB (UE) 3*16kB (E) 6*32kB (UE) 7*64kB (UME) 5*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 927*4096kB (M) = 3807340kB [ 955.105825][T12553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 955.115419][T12553] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 955.124757][T12553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 955.134434][T12553] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 955.144808][T12553] 75958 total pagecache pages [ 955.150883][T12553] 1 pages in swap cache [ 955.155058][T12553] Free swap = 124400kB [ 955.159273][T12553] Total swap = 124996kB [ 955.163448][T12553] 2097051 pages RAM [ 955.167285][T12553] 0 pages HighMem/MovableOnly [ 955.172108][T12553] 427007 pages reserved [ 955.176286][T12553] 0 pages cma reserved [ 956.318401][T12562] loop5: detected capacity change from 0 to 256 [ 957.268432][T12568] Invalid ELF header magic: != ELF [ 957.391961][ T29] audit: type=1804 audit(2000001240.287:155): pid=12568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1637" name="/newroot/258/bus/bus" dev="loop5" ino=1048746 res=1 errno=0 [ 957.417839][ T29] audit: type=1800 audit(2000001240.287:156): pid=12568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1637" name="bus" dev="loop5" ino=1048746 res=0 errno=0 [ 959.657578][T12591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1643'. [ 963.817410][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 964.454864][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 965.201176][T12624] loop5: detected capacity change from 0 to 128 [ 965.309100][T12625] 9pnet_virtio: no channels available for device syz [ 965.455965][T12626] befs: (nbd0): No write support. Marking filesystem read-only [ 965.466419][T12626] syz.0.1651: attempt to access beyond end of device [ 965.466419][T12626] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 965.479605][T12626] befs: (nbd0): unable to read superblock [ 966.197094][T12624] affs: No valid root block on device loop5 [ 983.595522][T12739] vlan2: entered promiscuous mode [ 983.601167][T12739] syz_tun: entered promiscuous mode [ 984.534750][T12741] loop5: detected capacity change from 0 to 1024 [ 984.750020][T12746] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1679'. [ 986.076623][T12750] libceph: resolve ' [ 986.076623][T12750] -&fYǝa2i [ 986.076623][T12750] .?&*&' (ret=-3): failed [ 989.343942][ T6621] hfsplus: b-tree write err: -5, ino 4 [ 990.435037][T12781] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 995.059921][T12808] loop2: detected capacity change from 0 to 512 [ 995.312365][T12808] EXT4-fs: Ignoring removed i_version option [ 995.321269][T12808] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 995.360794][T12808] EXT4-fs (loop2): 1 truncate cleaned up [ 995.395943][T12808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 996.401726][T12826] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1695'. [ 998.196342][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.102555][T12850] @: renamed from bond_slave_0 (while UP) [ 1014.738789][T12937] loop2: detected capacity change from 0 to 64 [ 1018.253982][T12964] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1026.490364][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1737'. [ 1026.702016][T13013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1737'. [ 1027.781526][T13030] overlayfs: failed to resolve './file1': -2 [ 1028.914316][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1029.757095][T13033] loop5: detected capacity change from 0 to 16 [ 1029.764179][T13033] erofs: Unknown parameter 'fault_injection' [ 1040.437241][T13092] Process accounting resumed [ 1040.445993][T13094] loop5: detected capacity change from 0 to 8 [ 1040.605056][T13094] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1040.613270][T13094] SQUASHFS error: Failed to read block 0x9b: -5 [ 1040.619683][T13094] SQUASHFS error: Unable to read metadata cache entry [99] [ 1040.626951][T13094] SQUASHFS error: Unable to read inode 0x127 [ 1044.533160][ T5827] Bluetooth: hci4: unexpected event for opcode 0x203d [ 1047.773971][ T2076] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1048.849858][ T5827] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1048.860757][ T5827] Bluetooth: hci4: Injecting HCI hardware error event [ 1048.869869][ T5827] Bluetooth: hci4: hardware error 0x00 [ 1051.170352][ T5827] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1055.860011][T13210] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1056.536617][T13211] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1057.328426][T13219] loop5: detected capacity change from 0 to 16 [ 1057.372719][T13219] erofs (device loop5): mounted with root inode @ nid 36. [ 1057.407425][T13219] syz.5.1794: attempt to access beyond end of device [ 1057.407425][T13219] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1057.520569][T13219] erofs (device loop5): read error -5 @ 8200 of nid 36 [ 1059.931545][T13223] syz.5.1794 (13223): drop_caches: 2 [ 1066.370516][ T29] audit: type=1326 audit(2000001342.620:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a67f85d29 code=0x7ffc0000 [ 1066.425331][ T29] audit: type=1326 audit(2000001342.620:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a67f85d29 code=0x7ffc0000 [ 1067.285476][ T29] audit: type=1326 audit(2000001342.620:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6a67f85d29 code=0x7ffc0000 [ 1067.374460][ T29] audit: type=1326 audit(2000001342.620:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a67f85d29 code=0x7ffc0000 [ 1067.419267][ T29] audit: type=1326 audit(2000001342.620:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a67f85d29 code=0x7ffc0000 [ 1067.472801][ T29] audit: type=1326 audit(2000001342.620:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6a67f85d29 code=0x7ffc0000 [ 1067.514420][ T29] audit: type=1326 audit(2000001342.620:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a67f85d29 code=0x7ffc0000 [ 1067.555666][ T29] audit: type=1326 audit(2000001342.620:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a67f85d29 code=0x7ffc0000 [ 1067.579160][ T29] audit: type=1326 audit(2000001342.620:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f6a67f85d29 code=0x7ffc0000 [ 1067.603071][ T29] audit: type=1326 audit(2000001342.620:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 1067.687454][T13268] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1806'. [ 1067.927111][T13274] binder: transaction release 38 bad handle 1, ret = -22 [ 1068.050059][ T5894] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1069.101426][ T5894] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1069.110884][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.135159][ T5894] usb 1-1: config 0 descriptor?? [ 1069.522395][ T5894] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1069.540080][ T5894] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1070.124106][ T5894] usb 1-1: USB disconnect, device number 10 [ 1073.097056][T13311] overlayfs: failed to clone lowerpath [ 1073.222758][T13314] overlayfs: failed to clone upperpath [ 1076.737259][T13344] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1824'. [ 1076.943586][T13345] ./file0: Can't lookup blockdev [ 1083.182778][T13389] program syz.0.1834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1083.192760][T13389] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1083.665665][ T8892] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1088.780743][T13419] loop5: detected capacity change from 0 to 256 [ 1092.144499][T13450] loop5: detected capacity change from 0 to 1024 [ 1094.965742][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1095.239831][T13450] fscrypt: Error allocating hmac(sha512): -2 [ 1110.040995][T13544] loop2: detected capacity change from 0 to 64 [ 1114.823721][T13547] bridge0: port 3(erspan0) entered blocking state [ 1114.830214][T13547] bridge0: port 3(erspan0) entered disabled state [ 1114.836884][T13547] erspan0: entered allmulticast mode [ 1114.843100][T13547] erspan0: entered promiscuous mode [ 1114.848984][T13547] bridge0: port 3(erspan0) entered blocking state [ 1114.855475][T13547] bridge0: port 3(erspan0) entered forwarding state [ 1114.878635][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 1114.878655][ T29] audit: type=1804 audit(2000001388.155:190): pid=13562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1874" name="/newroot/299/file1/cgroup.controllers" dev="loop2" ino=21 res=1 errno=0 [ 1122.734714][T13655] block device autoloading is deprecated and will be removed. [ 1122.744568][T13655] syz.5.1887: attempt to access beyond end of device [ 1122.744568][T13655] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1125.527652][ T29] audit: type=1326 audit(2000001398.117:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.0.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1125.699830][ T29] audit: type=1326 audit(2000001398.117:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.0.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1125.801271][ T29] audit: type=1326 audit(2000001398.117:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.0.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1126.409235][T13689] input: syz1 as /devices/virtual/input/input5 [ 1126.528056][ T29] audit: type=1326 audit(2000001398.117:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.0.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1126.795381][ T29] audit: type=1326 audit(2000001398.117:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.0.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1126.966255][T13692] Process accounting resumed [ 1127.180039][ T29] audit: type=1326 audit(2000001398.136:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.0.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1127.202580][ T29] audit: type=1326 audit(2000001398.136:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.0.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1127.225142][ T29] audit: type=1326 audit(2000001398.136:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.0.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1127.248061][ T29] audit: type=1326 audit(2000001398.154:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.0.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1127.271050][ T29] audit: type=1326 audit(2000001398.154:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.0.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1129.257013][T13438] libceph: connect (1)[c::]:6789 error -1 [ 1129.264010][T13438] libceph: mon0 (1)[c::]:6789 connect error [ 1130.408938][T13708] ceph: No mds server is up or the cluster is laggy [ 1131.134528][ T5894] libceph: connect (1)[c::]:6789 error -1 [ 1131.153129][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1131.197462][T13717] libceph: resolve ' [ 1131.197462][T13717] -&fYǝa2i [ 1131.197462][T13717] .?&*&' (ret=-3): failed [ 1133.353579][T13729] loop2: detected capacity change from 0 to 4096 [ 1133.979516][T13733] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1138.615131][T13763] loop5: detected capacity change from 0 to 256 [ 1141.155663][T13763] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1145.737286][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1925'. [ 1146.465769][T13798] loop2: detected capacity change from 0 to 256 [ 1146.487392][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1146.487412][ T29] audit: type=1326 audit(2000001417.657:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13793 comm="syz.6.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 1147.525303][ T29] audit: type=1326 audit(2000001417.657:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13793 comm="syz.6.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 1147.548131][ T29] audit: type=1326 audit(2000001417.676:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13793 comm="syz.6.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 1148.598098][ T29] audit: type=1326 audit(2000001417.676:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13793 comm="syz.6.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 1148.628930][ T29] audit: type=1326 audit(2000001417.676:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13793 comm="syz.6.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 1148.651960][ T29] audit: type=1326 audit(2000001417.685:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13793 comm="syz.6.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 1148.674583][ T29] audit: type=1326 audit(2000001417.685:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13793 comm="syz.6.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 1148.697446][ T29] audit: type=1326 audit(2000001417.685:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13793 comm="syz.6.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 1148.720512][ T29] audit: type=1326 audit(2000001417.685:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13793 comm="syz.6.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 1148.742971][ T29] audit: type=1326 audit(2000001417.685:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13793 comm="syz.6.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d8f85d29 code=0x7ffc0000 [ 1148.877335][T13798] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1151.356540][T13827] overlayfs: failed to resolve './file0': -2 [ 1152.308754][T13833] ceph: No mds server is up or the cluster is laggy [ 1152.955046][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1152.961135][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1153.452927][ T25] libceph: connect (1)[c::]:6789 error -101 [ 1153.459189][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 1155.726350][T13857] vivid-000: disconnect [ 1155.736341][T13857] vivid-000: reconnect [ 1160.902783][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1168.620094][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 1168.620118][ T29] audit: type=1107 audit(2000000258.384:249): pid=13919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='p?v&_q <,P~1wOBiԿ;' [ 1173.262850][ T29] audit: type=1326 audit(2000000261.097:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.0.1948" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff797f85d29 code=0x0 [ 1176.787836][T13148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1177.085052][T13148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1178.135381][T10484] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1179.259379][T13148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1180.270389][T13964] delete_channel: no stack [ 1180.989369][T13148] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1181.049889][T13148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1183.455509][T13148] Bluetooth: hci0: command tx timeout [ 1184.064565][ T29] audit: type=1326 audit(2000000272.631:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.1.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e985d29 code=0x7ffc0000 [ 1184.195549][ T29] audit: type=1326 audit(2000000272.631:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.1.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e985d29 code=0x7ffc0000 [ 1184.218059][ T29] audit: type=1326 audit(2000000272.631:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.1.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f7e8e985d29 code=0x7ffc0000 [ 1184.403686][ T29] audit: type=1326 audit(2000000272.631:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.1.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e985d29 code=0x7ffc0000 [ 1184.426447][ T29] audit: type=1326 audit(2000000272.631:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.1.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e985d29 code=0x7ffc0000 [ 1185.665572][T13960] chnl_net:caif_netlink_parms(): no params data found [ 1185.776386][T13148] Bluetooth: hci0: command tx timeout [ 1186.552066][T14005] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1965'. [ 1187.993561][T13148] Bluetooth: hci0: command tx timeout [ 1188.038216][T13960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.067241][T13960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.023647][T13960] bridge_slave_0: entered allmulticast mode [ 1189.032489][T13960] bridge_slave_0: entered promiscuous mode [ 1189.567456][T13960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.575596][T13960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.584164][T13960] bridge_slave_1: entered allmulticast mode [ 1189.599941][T13960] bridge_slave_1: entered promiscuous mode [ 1190.680891][T13148] Bluetooth: hci0: command tx timeout [ 1191.211478][T13960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.223370][T13960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.429462][T13960] team0: Port device team_slave_0 added [ 1191.476921][T13960] team0: Port device team_slave_1 added [ 1192.202654][T14063] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1192.593631][T13960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1192.610255][T13960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.529366][T13148] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 1193.561656][T13960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.607505][T13960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.624802][T13960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.825209][T13960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.284984][T13960] hsr_slave_0: entered promiscuous mode [ 1197.022852][T13960] hsr_slave_1: entered promiscuous mode [ 1197.034845][T13960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1197.042445][T13960] Cannot create hsr debugfs directory [ 1197.301974][T14096] syz.0.1984: attempt to access beyond end of device [ 1197.301974][T14096] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1202.239491][T13960] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1203.697914][T13960] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1204.784337][T13960] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1206.882891][T13960] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1207.364371][T14157] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2000' sets config #0 [ 1208.270281][T13960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.286934][T13960] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.319457][T13960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1208.330044][T13960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1208.365917][T13609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.373060][T13609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.400529][T13609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.407680][T13609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1209.067956][T14175] netlink: 'syz.1.2001': attribute type 2 has an invalid length. [ 1210.363537][T14190] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2005'. [ 1213.781635][T13960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.278375][ T29] audit: type=1804 audit(2000000303.443:256): pid=14220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2008" name="/newroot/322/file1" dev="fuse" ino=1 res=1 errno=0 [ 1217.874716][ T29] audit: type=1800 audit(2000000303.443:257): pid=14220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2008" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1218.221128][ T29] audit: type=1804 audit(2000000303.443:258): pid=14220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2008" name="/newroot/322/file1" dev="fuse" ino=1 res=1 errno=0 [ 1218.267770][ T29] audit: type=1804 audit(2000000303.443:259): pid=14220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2008" name="/newroot/322/file1" dev="fuse" ino=1 res=1 errno=0 [ 1218.288702][ T29] audit: type=1800 audit(2000000303.443:260): pid=14220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2008" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1220.402602][T13438] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1221.898687][T13438] usb 3-1: Using ep0 maxpacket: 16 [ 1221.905484][T13438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.939198][T13438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.125573][T13438] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1222.135214][T13438] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.156947][T13438] usb 3-1: config 0 descriptor?? [ 1223.059351][T13960] veth0_vlan: entered promiscuous mode [ 1223.153237][T13960] veth1_vlan: entered promiscuous mode [ 1223.228549][T13960] veth0_macvtap: entered promiscuous mode [ 1223.324975][T13960] veth1_macvtap: entered promiscuous mode [ 1223.425306][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1223.507368][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.571747][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1223.595662][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.605942][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1223.616560][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.626579][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1223.637727][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.648093][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1223.658956][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.693587][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1223.958289][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.971178][T13960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1223.983178][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.997420][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.051443][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1224.267583][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.342380][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1224.354913][T13438] usbhid 3-1:0.0: can't add hid device: -71 [ 1224.361147][T13438] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1224.371271][T13438] usb 3-1: USB disconnect, device number 6 [ 1225.426732][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.437408][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.451507][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.471594][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.882354][T14287] 9pnet_fd: Insufficient options for proto=fd [ 1225.999185][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1226.438919][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.731083][T13960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1226.790665][T13960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.882355][T13960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.494129][T13960] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.909212][T13960] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.948585][T13960] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.046246][T13960] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.391169][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.399194][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.407425][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.415381][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.028531][T14325] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1233.353453][T14331] loop2: detected capacity change from 0 to 256 [ 1234.550622][T14331] FAT-fs (loop2): Directory bread(block 64) failed [ 1234.557352][T14331] FAT-fs (loop2): Directory bread(block 65) failed [ 1234.564804][T14331] FAT-fs (loop2): Directory bread(block 66) failed [ 1235.605964][T14331] FAT-fs (loop2): Directory bread(block 67) failed [ 1235.624623][T14331] FAT-fs (loop2): Directory bread(block 68) failed [ 1235.930941][T14331] FAT-fs (loop2): Directory bread(block 69) failed [ 1236.029159][T14331] FAT-fs (loop2): Directory bread(block 70) failed [ 1236.036486][T14331] FAT-fs (loop2): Directory bread(block 71) failed [ 1236.044105][T14331] FAT-fs (loop2): Directory bread(block 72) failed [ 1236.050653][T14331] FAT-fs (loop2): Directory bread(block 73) failed [ 1237.796607][T14363] loop7: detected capacity change from 0 to 512 [ 1237.822713][T14363] EXT4-fs: Ignoring removed mblk_io_submit option [ 1237.946826][T14363] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1238.136961][T14363] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.2046: corrupted in-inode xattr: e_value out of bounds [ 1239.279693][T14363] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.2046: couldn't read orphan inode 15 (err -117) [ 1239.360109][T14363] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1239.939687][ T29] audit: type=1804 audit(2000000009.428:261): pid=14382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2046" name="/newroot/2/bus/bus" dev="loop7" ino=18 res=1 errno=0 [ 1242.613164][ T29] audit: type=1804 audit(2000000001.169:262): pid=14384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2046" name="/newroot/2/bus/bus" dev="loop7" ino=18 res=1 errno=0 [ 1242.636688][ T29] audit: type=1804 audit(2000000001.169:263): pid=14382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2046" name="/newroot/2/bus/bus" dev="loop7" ino=18 res=1 errno=0 [ 1246.736059][T14411] loop2: detected capacity change from 0 to 1764 [ 1246.771126][T13960] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1249.961324][T14440] syz.2.2064: attempt to access beyond end of device [ 1249.961324][T14440] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1250.415019][T14443] loop7: detected capacity change from 0 to 8 [ 1250.432902][T14443] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 1251.116079][T14451] cramfs: Error -3 while decompressing! [ 1251.121984][T14451] cramfs: ffffffff9a4de2f8(27)->ffff888042ab8000(4096) [ 1251.129104][T14451] cramfs: Error -3 while decompressing! [ 1251.134726][T14451] cramfs: ffffffff9a4de2f8(27)->ffff888042ab8000(4096) [ 1251.409995][T14454] loop2: detected capacity change from 0 to 16 [ 1251.441844][ T29] audit: type=1800 audit(2000000009.456:264): pid=14451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2055" name="file0" dev="loop7" ino=244 res=0 errno=0 [ 1252.875626][T14454] erofs (device loop2): mounted with root inode @ nid 36. [ 1252.896441][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2069'. [ 1253.756755][ T938] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1254.280795][T14522] loop0: detected capacity change from 0 to 2048 [ 1254.336550][T14522] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1255.129542][ T938] usb 8-1: Using ep0 maxpacket: 16 [ 1255.138739][ T938] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.153845][ T938] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.167291][ T938] usb 8-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1255.183346][ T938] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.329121][ T938] usb 8-1: config 0 descriptor?? [ 1257.763390][ T29] audit: type=1326 audit(2000000015.649:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14537 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1257.786467][ T29] audit: type=1326 audit(2000000015.649:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14537 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1257.786908][T14543] loop0: detected capacity change from 0 to 256 [ 1259.127967][ T938] usbhid 8-1:0.0: can't add hid device: -71 [ 1259.134164][ T938] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1259.142927][ T29] audit: type=1326 audit(2000000015.649:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14537 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1259.176823][ T938] usb 8-1: USB disconnect, device number 2 [ 1259.186296][ T29] audit: type=1326 audit(2000000015.649:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14537 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1259.427352][ T29] audit: type=1326 audit(2000000015.649:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14537 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1259.450147][ T29] audit: type=1326 audit(2000000015.649:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14537 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1259.473859][ T29] audit: type=1326 audit(2000000015.649:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14537 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1259.497958][ T29] audit: type=1326 audit(2000000015.649:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14537 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1259.520997][ T29] audit: type=1326 audit(2000000015.649:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14537 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff797f85d29 code=0x7ffc0000 [ 1259.543530][ T29] audit: type=1326 audit(2000000015.658:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14537 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff797f85d63 code=0x7ffc0000 [ 1262.234431][T14562] CIFS: Unable to determine destination address [ 1263.893761][T14564] loop0: detected capacity change from 0 to 256 [ 1266.338826][T14564] FAT-fs (loop0): Directory bread(block 64) failed [ 1266.481807][T14564] FAT-fs (loop0): Directory bread(block 65) failed [ 1266.830269][T14564] FAT-fs (loop0): Directory bread(block 66) failed [ 1266.858251][T14564] FAT-fs (loop0): Directory bread(block 67) failed [ 1266.874284][T14564] FAT-fs (loop0): Directory bread(block 68) failed [ 1266.884868][T14564] FAT-fs (loop0): Directory bread(block 69) failed [ 1266.902569][T14564] FAT-fs (loop0): Directory bread(block 70) failed [ 1266.913590][T14564] FAT-fs (loop0): Directory bread(block 71) failed [ 1266.927726][T14564] FAT-fs (loop0): Directory bread(block 72) failed [ 1266.934886][T14564] FAT-fs (loop0): Directory bread(block 73) failed [ 1272.531794][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2093'. [ 1272.540745][T14621] overlayfs: failed to clone upperpath [ 1272.572889][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2093'. [ 1275.554877][T14645] overlayfs: failed to clone lowerpath [ 1279.004138][T14664] overlayfs: failed to clone upperpath [ 1282.424104][T14684] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 1282.632152][T14696] hub 9-0:1.0: USB hub found [ 1282.639387][T14696] hub 9-0:1.0: 1 port detected [ 1282.684030][T14696] ptrace attach of "./syz-executor exec"[13960] was attempted by "./syz-executor exec"[14696] [ 1284.140882][T14700] Bluetooth: MGMT ver 1.23 [ 1286.169676][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2116'. [ 1290.875258][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 1291.669096][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1294.222388][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 1296.163551][T14776] syz.7.2133: attempt to access beyond end of device [ 1296.163551][T14776] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1296.173792][T14777] loop2: detected capacity change from 0 to 512 [ 1296.183519][T14777] EXT4-fs: Ignoring removed bh option [ 1296.444661][T14777] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1297.046576][T14769] loop0: detected capacity change from 0 to 256 [ 1297.414130][T14777] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1297.414274][T14777] EXT4-fs: failed to create workqueue [ 1297.449524][T14777] EXT4-fs (loop2): mount failed [ 1297.460149][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 1299.376703][T14799] overlayfs: failed to clone upperpath [ 1301.202714][T14800] loop0: detected capacity change from 0 to 2048 [ 1301.504348][T14800] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1302.040695][T14809] loop2: detected capacity change from 0 to 4096 [ 1305.033191][T14828] syz.7.2149: attempt to access beyond end of device [ 1305.033191][T14828] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1309.067847][T14836] loop2: detected capacity change from 0 to 256 [ 1311.716003][T14836] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1311.735866][T14863] loop7: detected capacity change from 0 to 16 [ 1311.776592][T14863] erofs (device loop7): mounted with root inode @ nid 36. [ 1313.345603][T14873] IPVS: Error connecting to the multicast addr [ 1313.375076][T14873] erofs (device loop7): read error -117 @ 123 of nid 36 [ 1314.285979][T14878] overlayfs: failed to resolve './file0': -2 [ 1314.860209][T14880] loop0: detected capacity change from 0 to 512 [ 1315.037952][T14880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1315.122492][T14880] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1315.137745][T14886] loop7: detected capacity change from 0 to 512 [ 1315.195789][T14886] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1315.316996][T14886] EXT4-fs (loop7): 1 truncate cleaned up [ 1315.346330][T14886] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1315.787860][T14896] syz.2.2162: attempt to access beyond end of device [ 1315.787860][T14896] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1316.454527][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 1316.738016][T14898] xt_hashlimit: max too large, truncated to 1048576 [ 1316.790238][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.862218][T14900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2163'. [ 1317.869073][T14886] 9pnet_fd: Insufficient options for proto=fd [ 1319.364210][T14915] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1319.846258][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 1319.846282][ T29] audit: type=1800 audit(2000000073.400:302): pid=14919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2167" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1320.983228][T14924] overlayfs: failed to clone upperpath [ 1321.110552][T13960] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1321.418020][T14932] loop2: detected capacity change from 0 to 256 [ 1322.658126][T14935] loop0: detected capacity change from 0 to 32768 [ 1322.689441][T14935] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2168 (14935) [ 1322.764033][T14932] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1322.807143][T14942] loop7: detected capacity change from 0 to 128 [ 1322.840937][T14935] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1322.851327][T14935] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1322.861148][T14935] BTRFS error (device loop0): superblock checksum mismatch [ 1322.873003][T14942] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1322.893495][T14935] BTRFS error (device loop0): open_ctree failed [ 1322.904471][T14942] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1322.921700][T14942] fscrypt (loop7, inode 12): Unsupported encryption flags (0x0b) [ 1322.963305][T14889] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by udevd (14889) [ 1324.913838][T14955] loop0: detected capacity change from 0 to 256 [ 1325.416752][T13960] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1326.086166][T14965] loop2: detected capacity change from 0 to 1764 [ 1326.694672][T14955] FAT-fs (loop0): Directory bread(block 64) failed [ 1326.703991][T14955] FAT-fs (loop0): Directory bread(block 65) failed [ 1326.710830][T14955] FAT-fs (loop0): Directory bread(block 66) failed [ 1326.717632][T14955] FAT-fs (loop0): Directory bread(block 67) failed [ 1326.845765][T14973] overlayfs: failed to decode file handle (len=5, type=0, flags=0, err=-22) [ 1327.718397][T14955] FAT-fs (loop0): Directory bread(block 68) failed [ 1327.725221][T14955] FAT-fs (loop0): Directory bread(block 69) failed [ 1327.731873][T14955] FAT-fs (loop0): Directory bread(block 70) failed [ 1327.738660][T14955] FAT-fs (loop0): Directory bread(block 71) failed [ 1327.750096][T14955] FAT-fs (loop0): Directory bread(block 72) failed [ 1327.756668][T14955] FAT-fs (loop0): Directory bread(block 73) failed [ 1329.975775][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2182'. [ 1332.229962][T14999] loop2: detected capacity change from 0 to 256 [ 1332.243046][T14999] exfat: Deprecated parameter 'namecase' [ 1333.824895][T15006] loop7: detected capacity change from 0 to 256 [ 1334.778080][T14999] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1335.782761][T15006] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1336.067179][T15026] syz.0.2195: attempt to access beyond end of device [ 1336.067179][T15026] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1337.287290][T15043] loop2: detected capacity change from 0 to 64 [ 1339.192570][ T29] audit: type=1800 audit(2000000091.818:303): pid=15041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2196" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 1342.292581][T15063] loop7: detected capacity change from 0 to 4096 [ 1342.300039][T15063] ntfs3: Bad value for 'dmask' [ 1343.046569][T15077] overlayfs: missing 'lowerdir' [ 1345.172730][T15087] syz.0.2210: attempt to access beyond end of device [ 1345.172730][T15087] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1347.429337][T15106] loop7: detected capacity change from 0 to 256 [ 1347.715029][T15106] vfat: Unknown parameter 'un.pi_xlate' [ 1349.621787][T15120] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1349.631390][T15120] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1350.284052][T15106] loop7: detected capacity change from 0 to 4096 [ 1350.410630][T15106] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1350.924225][T15106] ntfs3(loop7): Failed to read $UpCase (-4). [ 1350.959707][T15128] loop2: detected capacity change from 0 to 256 [ 1350.966695][T15128] exfat: Bad value for 'uid' [ 1350.971286][T15128] exfat: Bad value for 'uid' [ 1357.349122][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1359.524727][T15164] loop2: detected capacity change from 0 to 512 [ 1361.013378][T15164] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1363.573334][T15164] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1363.573437][T15164] EXT4-fs: failed to create workqueue [ 1363.637970][T15245] loop7: detected capacity change from 0 to 256 [ 1363.644997][T15245] exfat: Bad value for 'uid' [ 1363.649700][T15245] exfat: Bad value for 'uid' [ 1363.960296][T15164] EXT4-fs (loop2): mount failed [ 1365.693734][ T25] libceph: connect (1)[c::]:6789 error -101 [ 1365.701167][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 1365.741187][T15249] ceph: No mds server is up or the cluster is laggy [ 1366.632367][T15262] loop0: detected capacity change from 0 to 256 [ 1366.730268][T13438] libceph: connect (1)[c::]:6789 error -101 [ 1366.730456][T13438] libceph: mon0 (1)[c::]:6789 connect error [ 1368.226767][T15262] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1371.259458][T15286] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1371.267343][T15286] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1371.275926][T15286] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1371.283861][T15286] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1371.782495][T15286] netlink: 'syz.2.2242': attribute type 1 has an invalid length. [ 1371.792337][T15286] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2242'. [ 1375.484994][T15299] binder: 15294:15299 ioctl c0306201 0 returned -14 [ 1375.492699][T15299] binder: 15294:15299 ioctl c0306201 0 returned -14 [ 1382.642208][T15364] input: syz0 as /devices/virtual/input/input7 [ 1382.780143][T15365] overlayfs: failed to clone upperpath [ 1383.740691][T15370] loop0: detected capacity change from 0 to 32768 [ 1383.809999][T15370] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2259 (15370) [ 1384.300316][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2260'. [ 1384.376651][T15370] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1384.390150][T15370] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1384.398893][T15370] BTRFS info (device loop0): using free-space-tree [ 1384.753477][T15382] xt_socket: unknown flags 0x50 [ 1385.111401][T15384] loop7: detected capacity change from 0 to 1024 [ 1386.110199][ T0] [ 1386.112584][ T0] ============================= [ 1386.117435][ T0] [ BUG: Invalid wait context ] [ 1386.122315][ T0] 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 Not tainted [ 1386.129430][ T0] ----------------------------- [ 1386.134280][ T0] swapper/1/0 is trying to lock: [ 1386.139219][ T0] ffff8880b863e8d8 (&dev->master_mutex){+.+.}-{4:4}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 1386.149380][ T0] other info that might help us debug this: [ 1386.155274][ T0] context-{5:5} [ 1386.158737][ T0] 1 lock held by swapper/1/0: [ 1386.163419][ T0] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: sched_core_balance+0xce/0xf50 [ 1386.173327][ T0] stack backtrace: [ 1386.177052][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 1386.187394][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1386.197465][ T0] Call Trace: [ 1386.200753][ T0] [ 1386.203697][ T0] dump_stack_lvl+0x241/0x360 [ 1386.208411][ T0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1386.213817][ T0] ? __pfx__printk+0x10/0x10 [ 1386.218440][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.224101][ T0] __lock_acquire+0x15a8/0x2100 [ 1386.228987][ T0] lock_acquire+0x1ed/0x550 [ 1386.233515][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1386.239100][ T0] ? __pfx_lock_acquire+0x10/0x10 [ 1386.244142][ T0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1386.250490][ T0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1386.256676][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.262326][ T0] ? lockdep_hardirqs_on+0x99/0x150 [ 1386.267549][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1386.273123][ T0] _raw_spin_lock_nested+0x31/0x40 [ 1386.278272][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1386.283852][ T0] raw_spin_rq_lock_nested+0xb0/0x140 [ 1386.289263][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1386.294840][ T0] sched_core_balance+0xd87/0xf50 [ 1386.299895][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.305553][ T0] ? sched_core_balance+0xce/0xf50 [ 1386.310694][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1386.316279][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.321934][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1386.327530][ T0] __balance_callbacks+0x18a/0x280 [ 1386.332693][ T0] finish_task_switch+0x1d3/0x870 [ 1386.337747][ T0] __schedule+0x1858/0x4c30 [ 1386.342252][ T0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1386.348585][ T0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1386.354744][ T0] ? __entry_text_end+0x1020c5/0x1020c9 [ 1386.360285][ T0] ? lockdep_hardirqs_on+0x99/0x150 [ 1386.365492][ T0] ? __pfx___schedule+0x10/0x10 [ 1386.370347][ T0] ? tick_nohz_idle_exit+0x36e/0x480 [ 1386.375666][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.381296][ T0] ? flush_smp_call_function_queue+0x142/0x2a0 [ 1386.387465][ T0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 1386.393123][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.398772][ T0] schedule_idle+0x56/0x90 [ 1386.403215][ T0] do_idle+0x567/0x5c0 [ 1386.407317][ T0] ? __pfx_do_idle+0x10/0x10 [ 1386.411944][ T0] cpu_startup_entry+0x42/0x60 [ 1386.416720][ T0] start_secondary+0x102/0x110 [ 1386.421510][ T0] common_startup_64+0x13e/0x147 [ 1386.426482][ T0] [ 1386.429506][ T0] ================================================================== [ 1386.437571][ T0] BUG: KASAN: wild-memory-access in __lock_acquire+0xc94/0x2100 [ 1386.445226][ T0] Read of size 8 at addr 1fffffff89ecb8d8 by task swapper/1/0 [ 1386.452686][ T0] [ 1386.455011][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 1386.465328][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1386.475481][ T0] Call Trace: [ 1386.478756][ T0] [ 1386.481683][ T0] dump_stack_lvl+0x241/0x360 [ 1386.486369][ T0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1386.491574][ T0] ? __pfx__printk+0x10/0x10 [ 1386.496165][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.501791][ T0] ? _printk+0xd5/0x120 [ 1386.505958][ T0] print_report+0xe8/0x550 [ 1386.510372][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.515997][ T0] ? __virt_addr_valid+0x58/0x530 [ 1386.521022][ T0] ? __lock_acquire+0xc94/0x2100 [ 1386.525964][ T0] kasan_report+0x143/0x180 [ 1386.530463][ T0] ? __lock_acquire+0xc94/0x2100 [ 1386.535462][ T0] kasan_check_range+0x282/0x290 [ 1386.540404][ T0] __lock_acquire+0xc94/0x2100 [ 1386.545178][ T0] lock_acquire+0x1ed/0x550 [ 1386.549676][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1386.555227][ T0] ? __pfx_lock_acquire+0x10/0x10 [ 1386.560252][ T0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1386.566582][ T0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1386.572738][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.578371][ T0] ? lockdep_hardirqs_on+0x99/0x150 [ 1386.583592][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1386.589235][ T0] _raw_spin_lock_nested+0x31/0x40 [ 1386.594347][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1386.599896][ T0] raw_spin_rq_lock_nested+0xb0/0x140 [ 1386.605275][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1386.610817][ T0] sched_core_balance+0xd87/0xf50 [ 1386.615843][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.621475][ T0] ? sched_core_balance+0xce/0xf50 [ 1386.626585][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1386.632133][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.637760][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1386.643307][ T0] __balance_callbacks+0x18a/0x280 [ 1386.648418][ T0] finish_task_switch+0x1d3/0x870 [ 1386.653448][ T0] __schedule+0x1858/0x4c30 [ 1386.657950][ T0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1386.664277][ T0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1386.670461][ T0] ? __entry_text_end+0x1020c5/0x1020c9 [ 1386.676087][ T0] ? lockdep_hardirqs_on+0x99/0x150 [ 1386.681288][ T0] ? __pfx___schedule+0x10/0x10 [ 1386.686147][ T0] ? tick_nohz_idle_exit+0x36e/0x480 [ 1386.691423][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.697047][ T0] ? flush_smp_call_function_queue+0x142/0x2a0 [ 1386.703203][ T0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 1386.708827][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.714453][ T0] schedule_idle+0x56/0x90 [ 1386.718888][ T0] do_idle+0x567/0x5c0 [ 1386.722975][ T0] ? __pfx_do_idle+0x10/0x10 [ 1386.727578][ T0] cpu_startup_entry+0x42/0x60 [ 1386.732330][ T0] start_secondary+0x102/0x110 [ 1386.737107][ T0] common_startup_64+0x13e/0x147 [ 1386.742070][ T0] [ 1386.745074][ T0] ================================================================== [ 1386.753122][ T0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1386.760302][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 1386.770695][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1386.780741][ T0] Call Trace: [ 1386.784010][ T0] [ 1386.786931][ T0] dump_stack_lvl+0x241/0x360 [ 1386.791621][ T0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1386.796817][ T0] ? __pfx__printk+0x10/0x10 [ 1386.801410][ T0] ? rcu_is_watching+0x15/0xb0 [ 1386.806196][ T0] ? lock_release+0xbf/0xa30 [ 1386.810777][ T0] ? common_startup_64+0x13e/0x147 [ 1386.815890][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.821514][ T0] ? vscnprintf+0x5d/0x90 [ 1386.825842][ T0] panic+0x349/0x880 [ 1386.829736][ T0] ? check_panic_on_warn+0x21/0xb0 [ 1386.834866][ T0] ? __pfx_panic+0x10/0x10 [ 1386.839373][ T0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1386.844578][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.850204][ T0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1386.856099][ T0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1386.862447][ T0] ? print_report+0xe8/0x550 [ 1386.867037][ T0] check_panic_on_warn+0x86/0xb0 [ 1386.872010][ T0] ? __lock_acquire+0xc94/0x2100 [ 1386.876962][ T0] end_report+0x77/0x160 [ 1386.881229][ T0] kasan_report+0x154/0x180 [ 1386.885729][ T0] ? __lock_acquire+0xc94/0x2100 [ 1386.890666][ T0] kasan_check_range+0x282/0x290 [ 1386.895604][ T0] __lock_acquire+0xc94/0x2100 [ 1386.900373][ T0] lock_acquire+0x1ed/0x550 [ 1386.904871][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1386.910424][ T0] ? __pfx_lock_acquire+0x10/0x10 [ 1386.915472][ T0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1386.921798][ T0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1386.927958][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.933590][ T0] ? lockdep_hardirqs_on+0x99/0x150 [ 1386.938810][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1386.944445][ T0] _raw_spin_lock_nested+0x31/0x40 [ 1386.949555][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1386.955105][ T0] raw_spin_rq_lock_nested+0xb0/0x140 [ 1386.960481][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1386.966028][ T0] sched_core_balance+0xd87/0xf50 [ 1386.971051][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.976682][ T0] ? sched_core_balance+0xce/0xf50 [ 1386.981793][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1386.987340][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.992966][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1386.998616][ T0] __balance_callbacks+0x18a/0x280 [ 1387.003740][ T0] finish_task_switch+0x1d3/0x870 [ 1387.008791][ T0] __schedule+0x1858/0x4c30 [ 1387.013292][ T0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1387.019619][ T0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1387.025781][ T0] ? __entry_text_end+0x1020c5/0x1020c9 [ 1387.031361][ T0] ? lockdep_hardirqs_on+0x99/0x150 [ 1387.036573][ T0] ? __pfx___schedule+0x10/0x10 [ 1387.041440][ T0] ? tick_nohz_idle_exit+0x36e/0x480 [ 1387.046716][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1387.052367][ T0] ? flush_smp_call_function_queue+0x142/0x2a0 [ 1387.058552][ T0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 1387.064174][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1387.069802][ T0] schedule_idle+0x56/0x90 [ 1387.074219][ T0] do_idle+0x567/0x5c0 [ 1387.078314][ T0] ? __pfx_do_idle+0x10/0x10 [ 1387.082914][ T0] cpu_startup_entry+0x42/0x60 [ 1387.087670][ T0] start_secondary+0x102/0x110 [ 1387.092462][ T0] common_startup_64+0x13e/0x147 [ 1387.097407][ T0] [ 1387.100627][ T0] Kernel Offset: disabled [ 1387.104944][ T0] Rebooting in 86400 seconds..