last executing test programs: 4m41.624773311s ago: executing program 3 (id=95): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r3], 0x0) 4m40.107273404s ago: executing program 3 (id=114): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xb5, &(0x7f0000001d00)="$eJzs1jFqAkEUBuCXTZOUaUIgReptcgfP4AnEwkIbsVKEvYIX8SoeYXsLi21FHHF3UbS0cEG+r5jhn2HgFVP8m/36d5VHpCIi5T/TbbqazRfjwaRZg5eUxWe9f0TE39c5R+x6zd1bNLmslsOyer9/2v6S4ukzAwAAj8ni/zYfU3twaPt9Hb6jP7o0/tTFoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdOQUAAP//pcQ4Gw==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) 4m39.826354086s ago: executing program 3 (id=116): syz_io_uring_setup(0x3787, &(0x7f0000000400)={0x0, 0x130c, 0x2, 0x3, 0x32b}, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f00000000c0)={0x1a, 0xe, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) rt_sigaction(0xb, &(0x7f0000000140)={0x0, 0x88000004, 0x0, {[0x7f]}}, 0x0, 0x8, &(0x7f0000000100)) 4m39.692955877s ago: executing program 3 (id=117): openat$sysfs(0xffffff9c, &(0x7f0000000240)='/sys/power/image_size', 0x40042, 0x252) socket$inet(0x2, 0x1, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4m39.03906142s ago: executing program 3 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x42140, 0x0) 4m38.79122877s ago: executing program 3 (id=122): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) bind$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) 4m23.745512776s ago: executing program 32 (id=122): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) bind$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) 3m5.161322516s ago: executing program 2 (id=696): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@loose}, {@access_uid}]}}) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 3m4.948751414s ago: executing program 2 (id=698): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x43, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r1 = dup(r0) sendto$inet6(r1, &(0x7f0000000800)="1e", 0x1, 0x4041, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$packet(r1, &(0x7f0000001fc0)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @link_local}, 0x14) 3m4.845111882s ago: executing program 2 (id=700): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./bus\x00', 0x3242cac, &(0x7f0000000380)=ANY=[], 0xff, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) 3m4.664798967s ago: executing program 2 (id=702): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x19) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xa) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 3m3.913598667s ago: executing program 2 (id=710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x140) 3m3.522314249s ago: executing program 2 (id=711): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x400000000000009) socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) 3m3.221706813s ago: executing program 33 (id=711): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x400000000000009) socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) 2m52.772328498s ago: executing program 0 (id=744): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9f"], 0x0, 0x6e, 0x0, 0x1, 0x20}, 0x28) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa0800093f3f0c0000140001"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x4, '\x00', r2, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m52.557413925s ago: executing program 0 (id=758): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./bus\x00', 0x3242cac, &(0x7f0000000380)=ANY=[], 0xff, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) 2m52.412183197s ago: executing program 0 (id=750): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x43, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r1 = dup(r0) sendto$inet6(r1, &(0x7f0000000800)="1e", 0x1, 0x4041, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$packet(r1, &(0x7f0000001fc0)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @link_local}, 0x14) 2m52.24529904s ago: executing program 0 (id=754): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x19) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xa) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 2m51.828610214s ago: executing program 0 (id=755): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) 2m47.413599911s ago: executing program 0 (id=769): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}], 0x3b, 0x4048044) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r2, &(0x7f0000000400)="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", 0x1000, 0x4000, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x11, r1, 0xf6690000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0}, &(0x7f00000001c0)=0x15) 2m47.143812193s ago: executing program 34 (id=769): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}], 0x3b, 0x4048044) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r2, &(0x7f0000000400)="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", 0x1000, 0x4000, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x11, r1, 0xf6690000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0}, &(0x7f00000001c0)=0x15) 46.547063899s ago: executing program 4 (id=1536): r0 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 46.344603545s ago: executing program 4 (id=1540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c40)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r4}, 0x10, 0x0, 0x1, 0x0, 0x0, 0x4000051}, 0x811) ioctl$KVM_RUN(r2, 0xae80, 0x0) 46.074722507s ago: executing program 4 (id=1543): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x400000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x303}, "fffffffffffffff9", "241ac1eb797f3647a51ed8fb51ee710f00214de279c9b7e07a696756a31d83d7", "f8a2e06d", "00000400000100"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 45.458263557s ago: executing program 4 (id=1550): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x0) 45.219294496s ago: executing program 4 (id=1553): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff80013248, 0x2d, 0x0, 0x6, 0x5, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)=""/149, 0x95) read$FUSE(r0, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r2, {0x7, 0x24, 0x0, 0xffffffffc0416010, 0x20}}, 0x50) 45.105945535s ago: executing program 4 (id=1554): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r0, 0x1000000) 44.817533618s ago: executing program 35 (id=1554): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r0, 0x1000000) 30.585705398s ago: executing program 6 (id=1664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x103, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 29.755384885s ago: executing program 6 (id=1669): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0xb0, 0x0, 0xa1, [{{0x5, 0x1, 0x1004, 0x0, 0x9a6e, 0xcd, {0x6, 0xffffffffffff8476, 0xfff, 0x9, 0x1, 0xcb3a, 0x88, 0x401, 0x7, 0x8000, 0xffff, r2, r3, 0x8, 0x5}}, {0x6, 0x2c5, 0x7, 0x1, 'uber_id'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0xc0) 29.293713323s ago: executing program 6 (id=1673): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/141, 0x4e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 29.125043947s ago: executing program 6 (id=1674): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x300, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nobh}, {@dioread_nolock}, {@test_dummy_encryption}, {@nodelalloc}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x3, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount$9p_tcp(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x286e066, 0x0) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 28.525723185s ago: executing program 6 (id=1680): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 28.233712648s ago: executing program 6 (id=1684): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 27.802768973s ago: executing program 36 (id=1684): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 9.304545658s ago: executing program 7 (id=1848): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408, 0x1) 9.188952008s ago: executing program 7 (id=1849): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pause() 8.197764858s ago: executing program 7 (id=1854): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.250054565s ago: executing program 7 (id=1860): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.997363525s ago: executing program 7 (id=1861): sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x19}]}, @TIPC_NLA_PUBL={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x24044044) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.541921282s ago: executing program 7 (id=1862): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) unshare(0x2c020400) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) 6.226974847s ago: executing program 37 (id=1862): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) unshare(0x2c020400) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000002100000000050000000000000095c333d4c0a3ecdd69086b8e4c36439a8808b90ea579cdf8bd475a470064827701f4169ebebecb5bba94f06f020fb64e5594a86f5f00000000000008c7533dc98a94008d7d2a7d2c23bc3f4cc1992aebd29fd21e95b3c7c49de340c24cb6ba1a33740825c424ecd87a3b02ae7840be900964b6948074a8f2ed867fd6601b0ca02215f4c2a5157135575fa1903abe92246853cb7cb868a3b2524a92bfa8aaeaf3ff3f08fb97ec0c126bfea903ef567bdf48aecb23342c8102732b7257f65b1f7d82adec836fd77d2f5c6e6c18ae428531d9e4d906b0a19827bffab9ced1e24e8f063d44fb76dd59e75486"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) 2.431929384s ago: executing program 1 (id=1893): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0, @ANYBLOB="078fc9a39f1ee21e1569c823e5442246a75edd37763818a0ac53fb6557e9724d2fab7db3d6f249d59cb3c8cc61e672e55523c3b2a7f3c2d5a9b78776da99d9a689991a061abd69ebf56bb05760694d43177153b98160bf1c21a04db7dd5616e6f6bb3d07d2f9960b5425f5796ab9", @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES32], 0x10, 0xafb, &(0x7f0000001280)="$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") ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x80086e8a, 0x0) getresuid(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 2.406642876s ago: executing program 8 (id=1894): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x81ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = msgget(0x1, 0x64d) msgrcv(r5, 0x0, 0x0, 0x0, 0x0) 2.044364905s ago: executing program 1 (id=1896): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.798546175s ago: executing program 9 (id=1863): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0xffc8}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x802, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x2, &(0x7f0000000980)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe7}], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.709218473s ago: executing program 1 (id=1898): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmmsg$inet(r3, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.697371443s ago: executing program 9 (id=1899): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e24, 0xfffffff8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e24, 0x80000000, @empty, 0x2}}, 0x5, 0xc56e}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x34, 0x40000000, 0x1b}, 0x9c) 1.61479456s ago: executing program 1 (id=1900): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003dc0)=""/226, 0x2c}, 0x7f}], 0x1, 0x832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 1.539637026s ago: executing program 9 (id=1902): socket$kcm(0xa, 0x922000000003, 0x11) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket(0x23, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.448350413s ago: executing program 1 (id=1903): sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x19}]}, @TIPC_NLA_PUBL={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x24044044) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.382414119s ago: executing program 8 (id=1904): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private2, @in=@rand_addr=0x64010101, 0x4e22, 0x2000, 0x2, 0xd1e4, 0xa, 0xa0, 0x0, 0xa3}, {0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100002000, 0x3}, {0x3, 0xfffffffffffffffc, 0x0, 0xffffffffffff3826}, 0x0, 0x6e6bba, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffd, 0x33}, 0x14, @in=@multicast1, 0xfffffffd, 0x4, 0x0, 0x0, 0x3, 0x7}}, 0xe8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000140)=0xffffffff, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.381911069s ago: executing program 1 (id=1905): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r1}, 0x20) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="64010000100013040000000000000000e000000100000000000000000000000000000000000000000000000000000000000000004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000ffffac1414bb000004d432000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000800000000020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000000000000000000000000000000000000a000101000000000000000071001200726663343330392863636d28616573292900000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000002801000080000000bed40c8022"], 0x164}}, 0x0) 1.145129718s ago: executing program 8 (id=1906): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x100) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) unlink(&(0x7f0000000180)='.\x02\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 948.299654ms ago: executing program 8 (id=1907): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r1) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) close(0x3) 900.001418ms ago: executing program 5 (id=1908): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup3(r2, r1, 0x0) 681.698605ms ago: executing program 5 (id=1909): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000111ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20"], 0x4b) 505.97344ms ago: executing program 9 (id=1910): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 505.18287ms ago: executing program 8 (id=1918): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r3, r4}}}], 0x20, 0x40044}}], 0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r2, &(0x7f0000000600)=ANY=[], 0x78) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x41}], 0x1, 0x382, 0x0) 435.376005ms ago: executing program 5 (id=1911): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) 361.736421ms ago: executing program 8 (id=1912): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TCXONC(r1, 0x540a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) write$UHID_INPUT(r2, &(0x7f0000001900)={0x1a, {"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", 0x892}}, 0x1006) 336.497073ms ago: executing program 9 (id=1913): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x100) 312.318165ms ago: executing program 5 (id=1914): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r2) shutdown(r1, 0x0) close(r0) 101.680842ms ago: executing program 5 (id=1915): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 101.467862ms ago: executing program 9 (id=1916): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") creat(0x0, 0x1ae) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 5 (id=1917): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x10001, 0xfff8, 0x0, 0x3, 0x1, 0xc, 0xb, 0x5, 0xff, 0x4, 0x4, 0x16, 0x44e80295}, {0x3, 0xe, 0x3, 0x1, 0x4, 0x8, 0x9, 0x0, 0x7, 0x4, 0x1f, 0x2, 0xffffffff}, {0x9, 0x200, 0x4, 0xf7, 0x1, 0xe, 0x6, 0xa7, 0x4e, 0xb, 0x3, 0x9, 0x7}], 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): s beyond end of device [ 198.886533][ T8291] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 198.904948][ T8291] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 198.914325][ T8291] EXT4-fs (loop0): I/O error while writing superblock [ 198.957340][ T5788] syz-executor: attempt to access beyond end of device [ 198.957340][ T5788] loop0: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 198.974186][ T5788] syz-executor: attempt to access beyond end of device [ 198.974186][ T5788] loop0: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 199.001051][ T5788] syz-executor: attempt to access beyond end of device [ 199.001051][ T5788] loop0: rw=524288, sector=24, nr_sectors = 4 limit=0 [ 199.015104][ T5788] syz-executor: attempt to access beyond end of device [ 199.015104][ T5788] loop0: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 199.029634][ T5788] syz-executor: attempt to access beyond end of device [ 199.029634][ T5788] loop0: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 199.043558][ T5788] syz-executor: attempt to access beyond end of device [ 199.043558][ T5788] loop0: rw=12288, sector=16, nr_sectors = 4 limit=0 [ 199.057839][ T5788] EXT4-fs error (device loop0): ext4_get_inode_loc:4621: inode #2: block 4: comm syz-executor: unable to read itable block [ 199.070969][ T5788] syz-executor: attempt to access beyond end of device [ 199.070969][ T5788] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 199.086335][ T5788] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 199.094804][ T5788] EXT4-fs (loop0): I/O error while writing superblock [ 199.101929][ T5788] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: IO failure [ 199.111572][ T5788] syz-executor: attempt to access beyond end of device [ 199.111572][ T5788] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 199.126511][ T5788] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 199.135137][ T5788] EXT4-fs (loop0): I/O error while writing superblock [ 199.142137][ T5788] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #2: comm syz-executor: mark_inode_dirty error [ 199.154278][ T5788] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 199.162784][ T5788] EXT4-fs (loop0): I/O error while writing superblock [ 199.236044][ T7435] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4606: inode #2: block 4: comm kworker/u4:16: unable to read itable block [ 199.256497][ T7435] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 199.275385][ T7435] EXT4-fs (loop0): I/O error while writing superblock [ 199.304363][ T7543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.349180][ T7543] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 199.375258][ T7543] EXT4-fs (loop0): I/O error while writing superblock [ 199.389069][ T8287] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 202.104517][ T28] audit: type=1326 audit(1754448452.865:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 202.159966][ T28] audit: type=1326 audit(1754448452.865:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 202.182077][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.191563][ T28] audit: type=1326 audit(1754448452.895:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 202.214333][ T28] audit: type=1326 audit(1754448452.895:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 202.236399][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.296751][ T28] audit: type=1326 audit(1754448452.895:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 202.318754][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.346228][ T8312] overlayfs: failed to clone upperpath [ 202.365500][ T28] audit: type=1326 audit(1754448452.895:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 202.412559][ T28] audit: type=1326 audit(1754448452.895:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 202.468121][ T28] audit: type=1326 audit(1754448452.905:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 202.496932][ T28] audit: type=1326 audit(1754448452.905:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 202.520227][ T28] audit: type=1326 audit(1754448452.905:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 203.530205][ T7427] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.678917][ T7427] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.111887][ T7427] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.285535][ T7427] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.634775][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.648922][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.658131][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.673452][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.681186][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 204.695195][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.051541][ T8338] chnl_net:caif_netlink_parms(): no params data found [ 205.147942][ T8338] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.155135][ T8338] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.162470][ T8338] bridge_slave_0: entered allmulticast mode [ 205.171747][ T8338] bridge_slave_0: entered promiscuous mode [ 205.180551][ T8338] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.188156][ T8338] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.195349][ T8338] bridge_slave_1: entered allmulticast mode [ 205.202318][ T8338] bridge_slave_1: entered promiscuous mode [ 205.251449][ T8338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.263761][ T8338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.301715][ T7427] bond1: (slave erspan0): Releasing active interface [ 205.349272][ T8338] team0: Port device team_slave_0 added [ 205.361965][ T8338] team0: Port device team_slave_1 added [ 205.607209][ T8338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.614212][ T8338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.663121][ T8338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.720244][ T8338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.727447][ T8338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.755350][ T8338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.896170][ T8338] hsr_slave_0: entered promiscuous mode [ 205.903238][ T8338] hsr_slave_1: entered promiscuous mode [ 205.913439][ T8338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.928729][ T8338] Cannot create hsr debugfs directory [ 206.010209][ T7427] hsr_slave_0: left promiscuous mode [ 206.023933][ T7427] hsr_slave_1: left promiscuous mode [ 206.030953][ T7427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.043365][ T7427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.053208][ T7427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.061501][ T7427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.104228][ T7427] veth1_macvtap: left promiscuous mode [ 206.110100][ T7427] veth0_macvtap: left promiscuous mode [ 206.115990][ T7427] veth1_vlan: left promiscuous mode [ 206.122133][ T7427] veth0_vlan: left promiscuous mode [ 206.526459][ T7427] bond1 (unregistering): Released all slaves [ 206.798584][ T5797] Bluetooth: hci2: command tx timeout [ 207.197357][ T7427] team0 (unregistering): Port device team_slave_1 removed [ 207.250854][ T7427] team0 (unregistering): Port device team_slave_0 removed [ 207.308072][ T7427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.363085][ T7427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.952164][ T7427] bond0 (unregistering): Released all slaves [ 208.213496][ T8338] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 208.227052][ T8338] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 208.243675][ T8338] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 208.253878][ T8338] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 208.361175][ T8338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.380628][ T8338] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.402412][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.409614][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.425335][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.432521][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.612379][ T8338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.841277][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 208.841292][ T28] audit: type=1326 audit(1754448459.605:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8374 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 208.851439][ T8338] veth0_vlan: entered promiscuous mode [ 208.885573][ T5797] Bluetooth: hci2: command tx timeout [ 208.905514][ T28] audit: type=1326 audit(1754448459.635:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8374 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 208.928055][ T8338] veth1_vlan: entered promiscuous mode [ 208.953141][ T28] audit: type=1326 audit(1754448459.635:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8374 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 208.977906][ T28] audit: type=1326 audit(1754448459.635:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8374 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 209.003418][ T28] audit: type=1326 audit(1754448459.635:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8374 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 209.051877][ T28] audit: type=1326 audit(1754448459.635:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8374 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 209.094708][ T8338] veth0_macvtap: entered promiscuous mode [ 209.101568][ T28] audit: type=1326 audit(1754448459.635:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8374 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 209.111595][ T8338] veth1_macvtap: entered promiscuous mode [ 209.156732][ T28] audit: type=1326 audit(1754448459.635:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8374 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 209.202331][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.212754][ T28] audit: type=1326 audit(1754448459.645:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8374 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 209.220167][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.252201][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.255738][ T28] audit: type=1326 audit(1754448459.645:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8374 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 209.285170][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.285195][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.285210][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.285226][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.285237][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.288967][ T8338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.361258][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.372453][ T787] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 209.392278][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.402414][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.416015][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.425948][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.436729][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.446560][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.457123][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.469063][ T8338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.485462][ T8338] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.494613][ T8338] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.504594][ T8338] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.513638][ T8338] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.574534][ T787] usb 5-1: Using ep0 maxpacket: 32 [ 209.583837][ T787] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 209.609314][ T787] usb 5-1: config 0 has no interface number 0 [ 209.615579][ T787] usb 5-1: config 0 interface 184 has no altsetting 0 [ 209.657370][ T7419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.665242][ T7419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.682410][ T787] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 209.693035][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.703187][ T787] usb 5-1: Product: syz [ 209.718014][ T787] usb 5-1: Manufacturer: syz [ 209.727599][ T787] usb 5-1: SerialNumber: syz [ 209.741120][ T6580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.752438][ T6580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.755798][ T787] usb 5-1: config 0 descriptor?? [ 209.785023][ T787] smsc75xx v1.0.0 [ 210.385628][ T787] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 210.418913][ T787] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 210.451452][ T8386] loop5: detected capacity change from 0 to 32768 [ 210.499897][ T8386] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.790 (8386) [ 210.550349][ T8386] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 210.579512][ T8386] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 210.596363][ T8386] BTRFS info (device loop5): using free space tree [ 210.735640][ T8386] BTRFS info (device loop5): enabling ssd optimizations [ 210.748741][ T8386] BTRFS info (device loop5): auto enabling async discard [ 210.939871][ T8159] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 210.951757][ T5797] Bluetooth: hci2: command tx timeout [ 211.244135][ T787] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 211.285093][ T787] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 211.306688][ T787] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 211.330161][ T787] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 211.362778][ T787] usb 5-1: USB disconnect, device number 7 [ 212.576246][ T8418] netlink: 'syz.1.788': attribute type 5 has an invalid length. [ 212.604440][ T8418] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.613671][ T8418] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.622776][ T8418] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.631684][ T8418] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.702209][ T8418] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.711433][ T8418] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.720549][ T8418] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.729567][ T8418] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.026964][ T5797] Bluetooth: hci2: command tx timeout [ 213.666042][ T8432] syzkaller0: entered promiscuous mode [ 213.702812][ T8432] syzkaller0: entered allmulticast mode [ 214.024902][ T8436] loop4: detected capacity change from 0 to 32768 [ 214.042466][ T8436] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.792 (8436) [ 214.074169][ T8436] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 214.084574][ T8436] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 214.093863][ T8436] BTRFS info (device loop4): using free space tree [ 214.246312][ T8436] BTRFS info (device loop4): enabling ssd optimizations [ 214.253429][ T8436] BTRFS info (device loop4): auto enabling async discard [ 214.410182][ T6472] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.644056][ T8485] netlink: 'syz.5.811': attribute type 5 has an invalid length. [ 220.671070][ T8485] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.681123][ T8485] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.690220][ T8485] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.698973][ T8485] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.739828][ T8485] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.749180][ T8485] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.758153][ T8485] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.767144][ T8485] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.798607][ T8489] overlayfs: failed to clone lowerpath [ 221.767690][ T8517] overlayfs: failed to clone upperpath [ 222.473340][ T8524] netlink: 'syz.4.819': attribute type 5 has an invalid length. [ 222.528005][ T8524] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.537009][ T8524] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.545737][ T8524] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.554621][ T8524] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.594516][ T8524] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.603563][ T8524] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.613404][ T8524] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.622661][ T8524] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.005799][ T8535] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 224.744993][ T8569] netlink: 'syz.6.836': attribute type 5 has an invalid length. [ 224.795069][ T8569] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.804670][ T8569] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.813659][ T8569] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.822456][ T8569] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.911133][ T8569] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.920702][ T8569] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.930135][ T8569] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.939466][ T8569] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.259710][ T8594] loop5: detected capacity change from 0 to 512 [ 226.341208][ T8594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.379018][ T8594] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.540764][ T8594] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 226.566953][ T8594] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 226.627658][ T8594] EXT4-fs (loop5): This should not happen!! Data will be lost [ 226.627658][ T8594] [ 226.673237][ T8594] EXT4-fs (loop5): Total free blocks count 0 [ 226.687039][ T8594] EXT4-fs (loop5): Free/Dirty block details [ 226.703294][ T8594] EXT4-fs (loop5): free_blocks=65280 [ 226.711530][ T8594] EXT4-fs (loop5): dirty_blocks=33 [ 226.727043][ T8594] EXT4-fs (loop5): Block reservation details [ 226.737304][ T8594] EXT4-fs (loop5): i_reserved_data_blocks=33 [ 226.918253][ T8159] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.932973][ T8659] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 231.429203][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'. [ 231.471012][ T8677] 8021q: adding VLAN 0 to HW filter on device team1 [ 231.872503][ T8693] hpfs: Bad magic ... probably not HPFS [ 232.466831][ T5792] Bluetooth: hci4: command 0x0406 tx timeout [ 232.580050][ T8698] netlink: 'syz.1.883': attribute type 5 has an invalid length. [ 232.600340][ T8698] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.609259][ T8698] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.618014][ T8698] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.626939][ T8698] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.692913][ T8698] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.702002][ T8698] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.711046][ T8698] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.720055][ T8698] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.969636][ T8725] hpfs: Bad magic ... probably not HPFS [ 235.543766][ T8741] loop6: detected capacity change from 0 to 1024 [ 235.565206][ T8741] EXT4-fs: Ignoring removed orlov option [ 235.576822][ T8741] EXT4-fs: Ignoring removed mblk_io_submit option [ 235.605850][ T8741] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 235.700974][ T8741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.064501][ T8338] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.393190][ T8765] hpfs: Bad magic ... probably not HPFS [ 236.861594][ T8768] overlayfs: failed to resolve './file0': -2 [ 237.036163][ T8773] netlink: 140 bytes leftover after parsing attributes in process `syz.4.910'. [ 237.046132][ T8773] sit0: left promiscuous mode [ 237.085683][ T8773] netlink: 140 bytes leftover after parsing attributes in process `syz.4.910'. [ 237.323201][ T8784] loop4: detected capacity change from 0 to 512 [ 237.337429][ T8784] EXT4-fs: Ignoring removed nobh option [ 237.376413][ T8784] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.407704][ T8784] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.913: iget: bad i_size value: 38620345925642 [ 237.453505][ T8790] sit0: entered promiscuous mode [ 237.482735][ T8784] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.913: couldn't read orphan inode 15 (err -117) [ 237.525776][ T8790] netlink: 'syz.5.914': attribute type 1 has an invalid length. [ 237.553579][ T8790] netlink: 1 bytes leftover after parsing attributes in process `syz.5.914'. [ 237.569390][ T8784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.820047][ T8799] netlink: 'syz.5.919': attribute type 5 has an invalid length. [ 237.843241][ T8799] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.852483][ T8799] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.861351][ T8799] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.870211][ T8799] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.894615][ T8799] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.903799][ T8799] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.913201][ T8799] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.922234][ T8799] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.977564][ T8784] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.913: bg 0: block 5: invalid block bitmap [ 237.998972][ T8784] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 238.019857][ T8784] EXT4-fs (loop4): This should not happen!! Data will be lost [ 238.019857][ T8784] [ 238.030340][ T8784] EXT4-fs (loop4): Total free blocks count 0 [ 238.042705][ T8784] EXT4-fs (loop4): Free/Dirty block details [ 238.049073][ T8784] EXT4-fs (loop4): free_blocks=0 [ 238.054187][ T8784] EXT4-fs (loop4): dirty_blocks=1 [ 238.069699][ T8784] EXT4-fs (loop4): Block reservation details [ 238.091507][ T8784] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 238.236417][ T6472] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.465438][ T8810] netlink: 14 bytes leftover after parsing attributes in process `syz.6.924'. [ 240.332600][ T8836] netlink: 'syz.1.933': attribute type 5 has an invalid length. [ 240.347983][ T8836] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.357488][ T8836] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.366211][ T8836] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.375548][ T8836] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.408412][ T8836] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.418109][ T8836] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.427307][ T8836] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.436191][ T8836] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.505300][ T8842] loop6: detected capacity change from 0 to 512 [ 240.513045][ T8842] EXT4-fs: Ignoring removed nobh option [ 240.544645][ T8842] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 240.602932][ T8842] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.934: iget: bad i_size value: 38620345925642 [ 240.635169][ T8842] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.934: couldn't read orphan inode 15 (err -117) [ 240.686141][ T8842] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.934829][ T8842] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm syz.6.934: bg 0: block 5: invalid block bitmap [ 240.974549][ T8842] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 240.988796][ T8842] EXT4-fs (loop6): This should not happen!! Data will be lost [ 240.988796][ T8842] [ 241.022098][ T8842] EXT4-fs (loop6): Total free blocks count 0 [ 241.036912][ T8842] EXT4-fs (loop6): Free/Dirty block details [ 241.042953][ T8842] EXT4-fs (loop6): free_blocks=0 [ 241.053068][ T8842] EXT4-fs (loop6): dirty_blocks=1 [ 241.066697][ T8842] EXT4-fs (loop6): Block reservation details [ 241.072760][ T8842] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 241.152478][ T8338] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.891778][ T8861] loop6: detected capacity change from 0 to 131072 [ 241.914165][ T8861] F2FS-fs (loop6): Segment count (31) mismatch with total segments from devices (0) [ 241.923692][ T8861] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 241.939050][ T8861] F2FS-fs (loop6): invalid crc value [ 242.004030][ T8861] F2FS-fs (loop6): Found nat_bits in checkpoint [ 242.059568][ T8861] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 242.067387][ T8861] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 242.136421][ T8861] F2FS-fs (loop6): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 242.160573][ T8872] loop4: detected capacity change from 0 to 1024 [ 242.177725][ T8861] F2FS-fs (loop6): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 242.189087][ T8872] EXT4-fs: Ignoring removed orlov option [ 242.194769][ T8872] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.234797][ T8872] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 242.270993][ T8872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.480296][ T6472] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.843748][ T8881] loop6: detected capacity change from 0 to 128 [ 242.866576][ T8881] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 242.879406][ T8881] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 242.951190][ T8881] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.240602][ T8891] loop5: detected capacity change from 0 to 512 [ 243.287335][ T8891] EXT4-fs: Ignoring removed nobh option [ 243.294528][ T8891] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 243.313595][ T8891] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.952: iget: bad i_size value: 38620345925642 [ 243.336136][ T8891] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.952: couldn't read orphan inode 15 (err -117) [ 243.375649][ T8891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.421288][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 243.421305][ T28] audit: type=1326 audit(1754448494.175:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.4.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdd78ebe9 code=0x7fc00000 [ 243.603777][ T8891] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.952: bg 0: block 5: invalid block bitmap [ 243.619299][ T8891] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 243.631671][ T8891] EXT4-fs (loop5): This should not happen!! Data will be lost [ 243.631671][ T8891] [ 243.641367][ T8891] EXT4-fs (loop5): Total free blocks count 0 [ 243.647433][ T8891] EXT4-fs (loop5): Free/Dirty block details [ 243.653338][ T8891] EXT4-fs (loop5): free_blocks=0 [ 243.658342][ T8891] EXT4-fs (loop5): dirty_blocks=1 [ 243.663370][ T8891] EXT4-fs (loop5): Block reservation details [ 243.669431][ T8891] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 243.736072][ T8159] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.130957][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.962'. [ 244.154083][ T8913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.162929][ T8913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.172157][ T8913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.179996][ T8913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.344514][ T8919] bond1: (slave veth0_to_bond): Releasing active interface [ 244.365630][ T8919] bond0: (slave bond_slave_0): Releasing backup interface [ 244.471413][ T8919] bond0: (slave bond_slave_1): Releasing backup interface [ 244.546929][ T8919] team0: Failed to send options change via netlink (err -105) [ 244.561765][ T8919] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 244.573138][ T8919] team0: Port device team_slave_0 removed [ 244.615143][ T8919] team0: Failed to send options change via netlink (err -105) [ 244.631188][ T8919] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 244.642819][ T8919] team0: Port device team_slave_1 removed [ 244.657891][ T8919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.675852][ T8919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.700604][ T8919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.717101][ T8919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.759233][ T8919] bond1: (slave veth3): Releasing active interface [ 244.822371][ T8921] netlink: 'syz.1.965': attribute type 10 has an invalid length. [ 244.854451][ T8921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.880858][ T8921] team0: Failed to send port change of device bond0 via netlink (err -105) [ 244.889909][ T8921] team0: Failed to send options change via netlink (err -105) [ 244.897922][ T8921] team0: Port device bond0 added [ 245.195980][ T8935] loop6: detected capacity change from 0 to 1024 [ 245.211249][ T8937] netlink: 'syz.1.971': attribute type 39 has an invalid length. [ 245.266302][ T8935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.549693][ T8946] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 245.633779][ T8338] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.870568][ T8956] netlink: 277 bytes leftover after parsing attributes in process `syz.1.978'. [ 246.346796][ T28] audit: type=1326 audit(1754448497.105:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8969 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8378ebe9 code=0x7ffc0000 [ 246.379440][ T8952] loop5: detected capacity change from 0 to 32768 [ 246.393833][ T28] audit: type=1326 audit(1754448497.105:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8969 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8378ebe9 code=0x7ffc0000 [ 246.432144][ T8972] netlink: 'syz.6.984': attribute type 10 has an invalid length. [ 246.462373][ T28] audit: type=1326 audit(1754448497.105:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8969 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a8378ebe9 code=0x7ffc0000 [ 246.463166][ T8952] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 246.485143][ T28] audit: type=1326 audit(1754448497.105:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8969 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8378ebe9 code=0x7ffc0000 [ 246.520570][ T8977] overlayfs: failed to clone upperpath [ 246.541684][ T8972] netlink: 'syz.6.984': attribute type 4 has an invalid length. [ 246.549992][ T8972] netlink: 152 bytes leftover after parsing attributes in process `syz.6.984'. [ 246.574566][ T8972] : renamed from bond0 (while UP) [ 246.671108][ T8952] XFS (loop5): Ending clean mount [ 246.842427][ T8952] XFS (loop5): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 246.900109][ T5876] XFS (loop5): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 246.925340][ T5876] XFS (loop5): Unmount and run xfs_repair [ 246.934022][ T5876] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 246.942701][ T5876] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 246.950703][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'. [ 246.954043][ T5876] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 246.976020][ T5876] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 246.992405][ T5876] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 247.002173][ T5876] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 247.036116][ T5876] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 247.045317][ T5876] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 247.058625][ T5876] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 247.070223][ T8952] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x14 len 4 error 74 [ 247.143718][ T8952] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 247.175259][ T8952] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 247.178931][ T8992] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 247.218798][ T23] loop5: writeback error on inode 6150, offset 0, sector 12252 [ 247.367303][ T8159] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 247.385410][ T8987] loop6: detected capacity change from 0 to 32768 [ 247.776110][ T8987] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 248.014337][ T28] audit: type=1800 audit(1754448498.775:81): pid=9012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.988" name="file1" dev="loop6" ino=17059 res=0 errno=0 [ 248.138929][ T9018] netlink: 'syz.1.1000': attribute type 1 has an invalid length. [ 248.170967][ T8338] ocfs2: Unmounting device (7,6) on (node local) [ 248.221219][ T9018] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.347966][ T9024] erspan0: entered allmulticast mode [ 248.405636][ T9024] bond2: (slave erspan0): making interface the new active one [ 248.480889][ T9024] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 250.842832][ T9093] loop6: detected capacity change from 0 to 256 [ 250.862211][ T9093] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.889402][ T9093] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 250.921305][ T9095] tipc: Failed to remove unknown binding: 66,1,1/12:2801414484/2801414486 [ 250.935116][ T9093] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 250.950784][ T9095] tipc: Failed to remove unknown binding: 66,1,1/12:2801414484/2801414486 [ 252.061531][ T9117] netlink: 'syz.5.1032': attribute type 12 has an invalid length. [ 253.060369][ T9142] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1038'. [ 253.429630][ T9144] loop6: detected capacity change from 0 to 40427 [ 253.438836][ T9144] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 253.446967][ T9144] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 253.501859][ T9144] F2FS-fs (loop6): Found nat_bits in checkpoint [ 253.537715][ T9144] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 253.585386][ T9144] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 253.592888][ T9144] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 254.063884][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020d82000: rx timeout, send abort [ 254.072985][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888020d82000: 0x20100: (3) A timeout occurred and this is the connection abort to close the session. [ 255.762243][ T9201] loop4: detected capacity change from 0 to 1024 [ 255.791295][ T9201] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 255.879909][ T9201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.995713][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.002056][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.169434][ T9201] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm syz.4.1059: Invalid inode table block 42914479797866818 in block_group 0 [ 256.201654][ T7424] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.244480][ T9201] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm syz.4.1059: Invalid inode table block 42914479797866818 in block_group 0 [ 256.271942][ T9201] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 256.288864][ T9201] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #12: comm syz.4.1059: mark_inode_dirty error [ 256.373223][ T7424] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.471610][ T7419] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm kworker/u4:10: Invalid inode table block 42914479797866818 in block_group 0 [ 256.519631][ T6472] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.703365][ T7424] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.807204][ T9218] macvlan0: entered allmulticast mode [ 256.858291][ T9218] veth1_vlan: entered allmulticast mode [ 256.909807][ T9218] team0: Port device macvlan0 added [ 256.995080][ T7424] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.200771][ T9245] loop4: detected capacity change from 0 to 512 [ 258.233413][ T9249] loop5: detected capacity change from 0 to 128 [ 258.351250][ T9249] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.401489][ T9249] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 258.443899][ T9249] EXT4-fs (loop5): shut down requested (1) [ 258.452046][ T9249] fscrypt (loop5, inode 12): Error -5 getting encryption context [ 258.508958][ T8159] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.753829][ T7424] hsr_slave_0: left promiscuous mode [ 258.767918][ T7424] hsr_slave_1: left promiscuous mode [ 258.775192][ T7424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.785729][ T7424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.802149][ T7424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.809806][ T7424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.881554][ T7424] veth1_macvtap: left promiscuous mode [ 258.897271][ T7424] veth0_macvtap: left promiscuous mode [ 258.903198][ T7424] veth1_vlan: left allmulticast mode [ 258.913094][ T7424] veth1_vlan: left promiscuous mode [ 258.921797][ T7424] veth0_vlan: left promiscuous mode [ 259.526991][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801a2c6400: rx timeout, send abort [ 259.610818][ T7424] team0 (unregistering): Port device macvlan0 removed [ 259.977517][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801a2c6800: rx timeout, send abort [ 260.258608][ T7424] team0 (unregistering): Port device team_slave_1 removed [ 260.338173][ T7424] team0 (unregistering): Port device team_slave_0 removed [ 260.413231][ T7424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.485848][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801a2c6800: abort rx timeout. Force session deactivation [ 260.517127][ T7424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.273435][ T7424] bond0 (unregistering): Released all slaves [ 261.339988][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1082'. [ 261.570101][ T9300] af_packet: tpacket_rcv: packet too big, clamped from 62 to 4294967286. macoff=82 [ 262.064717][ T9315] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 262.725008][ T9332] input: syz0 as /devices/virtual/input/input11 [ 263.172382][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1109'. [ 263.404472][ T9341] veth1_vlan (unregistering): left allmulticast mode [ 263.462019][ T9341] team0: Port device macvlan0 removed [ 263.535492][ T9345] sit0: left promiscuous mode [ 263.619490][ T9345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.602374][ T9415] netlink: 'syz.1.1138': attribute type 10 has an invalid length. [ 267.716486][ T9415] netlink: 'syz.1.1138': attribute type 4 has an invalid length. [ 267.734662][ T9415] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1138'. [ 267.809142][ T28] audit: type=1326 audit(1754448518.575:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.6.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5837d8ebe9 code=0x7fc00000 [ 267.995004][ T9413] loop4: detected capacity change from 0 to 32768 [ 268.022784][ T9413] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 268.080929][ T9413] XFS (loop4): Ending clean mount [ 268.174804][ T28] audit: type=1804 audit(1754448518.935:83): pid=9413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1136" name="/newroot/200/file0/bus" dev="loop4" ino=9289 res=1 errno=0 [ 268.248314][ T6472] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 268.460890][ T28] audit: type=1326 audit(1754448519.225:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.6.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5837d8ebe9 code=0x7fc00000 [ 269.873215][ T9472] overlayfs: failed to clone upperpath [ 270.633054][ T9490] loop4: detected capacity change from 0 to 8192 [ 270.733202][ T9490] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 270.746478][ T9490] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 270.758912][ T9490] REISERFS (device loop4): using ordered data mode [ 270.765501][ T9490] reiserfs: using flush barriers [ 270.809565][ T9490] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 270.827867][ T9490] REISERFS (device loop4): checking transaction log (loop4) [ 270.845823][ T9490] REISERFS (device loop4): Using r5 hash to sort names [ 270.855376][ T9490] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 270.869331][ T9490] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 272.037337][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1167'. [ 272.094670][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1167'. [ 272.199682][ T9508] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1169'. [ 272.264098][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1169'. [ 272.559349][ T786] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 272.777988][ T786] usb 7-1: Using ep0 maxpacket: 16 [ 272.797882][ T786] usb 7-1: config 1 has an invalid interface number: 203 but max is 0 [ 272.809416][ T786] usb 7-1: config 1 has no interface number 0 [ 272.824455][ T786] usb 7-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=63.9c [ 272.837376][ T786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.845550][ T786] usb 7-1: Product: syz [ 272.851060][ T786] usb 7-1: Manufacturer: syz [ 272.855810][ T786] usb 7-1: SerialNumber: syz [ 273.148722][ T786] aqc111: probe of 7-1:1.203 failed with error -22 [ 273.472709][ T27] usb 7-1: USB disconnect, device number 2 [ 274.772800][ T9560] loop5: detected capacity change from 0 to 2048 [ 276.186829][ T5775] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 276.379845][ T5775] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 276.389665][ T5775] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.400993][ T5775] usb 7-1: config 0 descriptor?? [ 276.549369][ T9584] netlink: 'syz.1.1191': attribute type 8 has an invalid length. [ 276.664059][ T9589] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.1192'. [ 276.676766][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1192'. [ 278.252378][ T5775] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 278.264008][ T5775] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 278.276426][ T5775] asix: probe of 7-1:0.0 failed with error -71 [ 278.290199][ T5775] usb 7-1: USB disconnect, device number 3 [ 279.773025][ T9621] loop4: detected capacity change from 0 to 32768 [ 279.817848][ T9621] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 279.863293][ T28] audit: type=1800 audit(1754448530.625:85): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1204" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 279.996873][ T5858] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 280.212044][ T5858] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.240583][ T5858] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 280.260030][ T5858] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 280.280061][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.291468][ T9631] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 280.313658][ T5858] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 280.445676][ T6472] ocfs2: Unmounting device (7,4) on (node local) [ 280.774410][ T9637] loop6: detected capacity change from 0 to 32768 [ 280.792787][ T9637] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1208 (9637) [ 280.826977][ T9637] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 280.849152][ T9637] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 280.864241][ T9637] BTRFS info (device loop6): enabling auto defrag [ 280.877908][ T9637] BTRFS info (device loop6): doing ref verification [ 280.894847][ T9637] BTRFS info (device loop6): max_inline at 0 [ 280.902565][ T9637] BTRFS info (device loop6): force clearing of disk cache [ 280.910362][ T9637] BTRFS info (device loop6): turning on sync discard [ 280.912684][ T786] usb 6-1: USB disconnect, device number 2 [ 280.919720][ T9637] BTRFS info (device loop6): using free space tree [ 280.980184][ T9637] BTRFS info (device loop6): enabling ssd optimizations [ 281.006416][ T9637] BTRFS info (device loop6): rebuilding free space tree [ 281.103919][ T28] audit: type=1800 audit(1754448531.865:86): pid=9637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1208" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 281.143599][ T28] audit: type=1804 audit(1754448531.895:87): pid=9637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1208" name="/newroot/91/bus/file1" dev="loop6" ino=260 res=1 errno=0 [ 281.363934][ T8338] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 282.179191][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 282.548686][ T9679] loop5: detected capacity change from 0 to 32768 [ 282.604085][ T9679] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 282.681841][ T28] audit: type=1800 audit(1754448533.445:88): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1218" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 285.000883][ T8159] ocfs2: Unmounting device (7,5) on (node local) [ 285.061569][ T28] audit: type=1326 audit(1754448535.825:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.6.1225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5837d8ebe9 code=0x0 [ 285.149273][ T9710] tipc: Enabling of bearer rejected, failed to enable media [ 286.183662][ T9735] loop6: detected capacity change from 0 to 8192 [ 286.223514][ T9735] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 286.237052][ T9735] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 286.246315][ T9735] REISERFS (device loop6): using ordered data mode [ 286.253088][ T9735] reiserfs: using flush barriers [ 286.264743][ T9735] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 286.287632][ T9735] REISERFS (device loop6): checking transaction log (loop6) [ 286.332467][ T9735] REISERFS (device loop6): Using r5 hash to sort names [ 286.390954][ T9735] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 286.901069][ T9750] input: syz0 as /devices/virtual/input/input12 [ 287.650233][ T9776] loop4: detected capacity change from 0 to 32768 [ 287.662591][ T9776] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 287.689171][ T9776] XFS (loop4): Ending clean mount [ 287.716786][ T9776] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 287.729745][ T5876] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 287.741583][ T5876] XFS (loop4): Unmount and run xfs_repair [ 287.747619][ T5876] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 287.755090][ T5876] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 287.766373][ T5876] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 287.775359][ T5876] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 287.784329][ T5876] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 287.793277][ T5876] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 287.802179][ T5876] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 287.811063][ T5876] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 287.819953][ T5876] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 287.831387][ T9776] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x14 len 4 error 74 [ 287.851620][ T9776] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 287.891239][ T9776] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 287.909931][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1251'. [ 287.934534][ T5876] loop4: writeback error on inode 6150, offset 0, sector 12252 [ 288.042081][ T6472] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 288.322638][ T9796] overlayfs: failed to clone upperpath [ 289.090502][ T28] audit: type=1326 audit(1754448539.855:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462758ebe9 code=0x7fc00000 [ 289.459350][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1267'. [ 289.470157][ T9830] batman_adv: batadv0: Removing interface: veth0_to_bond [ 289.480542][ T9830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.491504][ T9830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.500500][ T9830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.515966][ T9830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.525868][ T9830] batman_adv: batadv0: Removing interface: veth3 [ 289.679572][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'. [ 289.828256][ T28] audit: type=1326 audit(1754448540.575:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f462758ebe9 code=0x7fc00000 [ 290.050917][ T9850] overlayfs: failed to clone upperpath [ 290.277166][ T9860] loop5: detected capacity change from 0 to 1024 [ 290.298295][ T9860] EXT4-fs: inline encryption not supported [ 290.304130][ T9860] EXT4-fs: Ignoring removed i_version option [ 290.324537][ T9860] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 290.845445][ T9860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.976136][ T28] audit: type=1800 audit(1754448541.735:92): pid=9860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1278" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 291.025360][ T9860] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4036: comm syz.5.1278: Allocating blocks 385-513 which overlap fs metadata [ 291.079561][ T9860] EXT4-fs (loop5): pa ffff888077e4ce80: logic 16, phys. 129, len 24 [ 291.088313][ T9860] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 8 [ 291.127109][ T9860] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 3 with error 1 [ 291.155343][ T9860] EXT4-fs (loop5): This should not happen!! Data will be lost [ 291.155343][ T9860] [ 291.301709][ T8159] Trying to write to read-only block-device loop5 [ 291.334840][ T8159] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.523268][ T9873] loop5: detected capacity change from 0 to 1024 [ 291.545423][ T9873] EXT4-fs: Ignoring removed orlov option [ 291.557818][ T9873] EXT4-fs: Ignoring removed mblk_io_submit option [ 291.606112][ T9873] overlayfs: failed to resolve './file0': -2 [ 291.692456][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1284'. [ 291.701537][ T9877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.710678][ T9877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.723200][ T9877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.736744][ T9877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.894490][ T28] audit: type=1326 audit(1754448542.655:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdd78ebe9 code=0x7fc00000 [ 292.132541][ T9885] loop5: detected capacity change from 0 to 128 [ 292.289235][ T9891] loop5: detected capacity change from 0 to 2048 [ 292.431933][ T9887] loop6: detected capacity change from 0 to 32768 [ 292.464620][ T9887] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 292.500791][ T28] audit: type=1800 audit(1754448543.265:94): pid=9887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1288" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 292.532034][ T28] audit: type=1326 audit(1754448543.285:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fdd78ebe9 code=0x7fc00000 [ 293.427969][ T8338] ocfs2: Unmounting device (7,6) on (node local) [ 293.488220][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1297'. [ 293.830188][ T9929] loop5: detected capacity change from 0 to 512 [ 293.858459][ T9929] EXT4-fs: Ignoring removed mblk_io_submit option [ 293.876789][ T9929] EXT4-fs: inline encryption not supported [ 293.882972][ T9929] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.099980][ T9920] loop4: detected capacity change from 0 to 32768 [ 294.116956][ T9920] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1298 (9920) [ 294.157160][ T9920] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 294.169206][ T9920] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 294.187158][ T9920] BTRFS info (device loop4): enabling auto defrag [ 294.193685][ T9920] BTRFS info (device loop4): doing ref verification [ 294.204297][ T9920] BTRFS info (device loop4): max_inline at 0 [ 294.216732][ T9920] BTRFS info (device loop4): force clearing of disk cache [ 294.223901][ T9920] BTRFS info (device loop4): turning on sync discard [ 294.244172][ T9920] BTRFS info (device loop4): using free space tree [ 294.376808][ T9920] BTRFS info (device loop4): enabling ssd optimizations [ 294.417937][ T9920] BTRFS info (device loop4): rebuilding free space tree [ 294.574021][ T28] audit: type=1800 audit(1754448545.335:96): pid=9920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1298" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 294.631383][ T28] audit: type=1804 audit(1754448545.365:97): pid=9920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1298" name="/newroot/238/bus/file1" dev="loop4" ino=260 res=1 errno=0 [ 295.380509][ T6472] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 295.984392][ T9976] loop4: detected capacity change from 0 to 512 [ 296.037419][ T9976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.050480][ T28] audit: type=1326 audit(1754448546.805:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.5.1314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f462758ebe9 code=0x0 [ 296.072122][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.080929][ T9976] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.132736][ T9976] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1313: bg 0: block 217: padding at end of block bitmap is not set [ 296.167772][ T6472] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.238352][ T5775] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 296.272313][ T9986] tipc: Started in network mode [ 296.277452][ T9986] tipc: Node identity 9ec458821652, cluster identity 4711 [ 296.284751][ T9986] tipc: Enabled bearer , priority 0 [ 296.295871][ T9986] +: renamed from syzkaller0 [ 296.304678][ T9986] tipc: Disabling bearer [ 296.426711][ T5775] usb 7-1: Using ep0 maxpacket: 16 [ 296.434228][ T5775] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.442710][ T5775] usb 7-1: config 0 has no interface number 0 [ 296.454174][ T5775] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 296.464018][ T5775] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.472312][ T5775] usb 7-1: Product: syz [ 296.476836][ T5775] usb 7-1: Manufacturer: syz [ 296.481586][ T5775] usb 7-1: SerialNumber: syz [ 296.489000][ T5775] usb 7-1: config 0 descriptor?? [ 296.497854][ T5775] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 296.714695][ T9988] loop4: detected capacity change from 0 to 32768 [ 298.072704][T10010] loop4: detected capacity change from 0 to 1024 [ 298.080293][T10010] EXT4-fs: inline encryption not supported [ 298.086399][T10010] EXT4-fs: Ignoring removed i_version option [ 298.106789][T10010] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 298.145848][T10010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.179222][ T28] audit: type=1800 audit(1754448548.945:99): pid=10010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1326" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 298.229876][T10010] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4036: comm syz.4.1326: Allocating blocks 385-513 which overlap fs metadata [ 298.263208][T10010] EXT4-fs (loop4): pa ffff888077e4c488: logic 16, phys. 129, len 24 [ 298.271363][T10010] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 8 [ 298.285976][T10010] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 3 with error 1 [ 298.299004][T10010] EXT4-fs (loop4): This should not happen!! Data will be lost [ 298.299004][T10010] [ 298.314215][ T5775] gspca_spca1528: reg_r err -71 [ 298.321064][ T5775] spca1528: probe of 7-1:0.1 failed with error -71 [ 298.347189][ T5775] usb 7-1: USB disconnect, device number 4 [ 298.397404][ T6472] Trying to write to read-only block-device loop4 [ 298.412766][ T6472] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.536778][ T5775] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 299.607964][T10040] loop4: detected capacity change from 0 to 32768 [ 299.746757][ T5775] usb 6-1: Using ep0 maxpacket: 8 [ 299.760830][ T5775] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 299.770026][ T5775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.778122][ T5775] usb 6-1: Product: syz [ 299.782312][ T5775] usb 6-1: Manufacturer: syz [ 299.792855][ T5775] usb 6-1: SerialNumber: syz [ 299.804239][ T5775] usb 6-1: config 0 descriptor?? [ 300.018832][ T5775] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 300.137132][T10049] bond0: entered promiscuous mode [ 300.142631][T10049] bond0: entered allmulticast mode [ 301.382842][T10090] syz.4.1360[10090] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.382978][T10090] syz.4.1360[10090] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.888892][ T5775] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 301.911116][ T5775] dvbdev: DVB: registering new adapter (Terratec H7) [ 301.919354][ T5775] usb 6-1: media controller created [ 302.090418][ T5775] usb read operation failed. (-71) [ 302.098072][ T5775] dvb_usb_az6007: probe of 6-1:0.0 failed with error -5 [ 302.107160][ T5775] usb 6-1: USB disconnect, device number 3 [ 302.301689][T10095] loop4: detected capacity change from 0 to 512 [ 302.309375][T10095] ext4: Unknown parameter 'fowner>00000000000000000000' [ 303.000454][T10098] loop6: detected capacity change from 0 to 40427 [ 303.026889][T10098] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 303.045490][T10098] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 303.098885][T10098] F2FS-fs (loop6): Found nat_bits in checkpoint [ 303.145394][T10098] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 303.187160][T10098] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 303.200215][T10098] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 303.449429][ T28] audit: type=1800 audit(1754448554.215:100): pid=10098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1369" name="bus" dev="loop6" ino=11 res=0 errno=0 [ 303.498706][ T28] audit: type=1326 audit(1754448554.265:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10117 comm="syz.5.1367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f462758ebe9 code=0x0 [ 303.612392][T10119] usb usb8: usbfs: process 10119 (syz.5.1367) did not claim interface 0 before use [ 304.275998][T10124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1370'. [ 304.353544][T10127] tipc: Failed to remove unknown binding: 66,1,1/0:3387985199/3387985201 [ 305.947049][T10150] cgroup: fork rejected by pids controller in /syz6 [ 306.357685][T10095] Set syz1 is full, maxelem 65536 reached [ 307.127965][T10208] loop4: detected capacity change from 0 to 32768 [ 307.151414][T10210] loop6: detected capacity change from 0 to 32768 [ 307.267973][T10217] loop5: detected capacity change from 0 to 1024 [ 307.499775][ T28] audit: type=1326 audit(1754448558.265:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8378ebe9 code=0x7ffc0000 [ 307.566746][ T28] audit: type=1326 audit(1754448558.285:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8378ebe9 code=0x7ffc0000 [ 307.610804][ T28] audit: type=1326 audit(1754448558.285:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3a8378d69f code=0x7ffc0000 [ 307.643354][ T28] audit: type=1326 audit(1754448558.285:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8378ebe9 code=0x7ffc0000 [ 307.688392][ T28] audit: type=1326 audit(1754448558.285:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f3a8378ebe9 code=0x7ffc0000 [ 307.735641][ T28] audit: type=1326 audit(1754448558.285:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8378ebe9 code=0x7ffc0000 [ 307.759835][ T28] audit: type=1326 audit(1754448558.295:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8378ebe9 code=0x7ffc0000 [ 307.806514][ T28] audit: type=1326 audit(1754448558.295:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3a8378ebe9 code=0x7ffc0000 [ 307.900866][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'. [ 308.932397][T10265] loop5: detected capacity change from 0 to 2048 [ 309.045637][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 309.045679][ T28] audit: type=1326 audit(1754448559.805:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.5.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 309.105662][ T28] audit: type=1326 audit(1754448559.805:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.5.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 309.161934][ T28] audit: type=1326 audit(1754448559.805:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.5.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 309.209375][ T28] audit: type=1326 audit(1754448559.805:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.5.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 309.260959][ T28] audit: type=1326 audit(1754448559.805:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.5.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 309.283988][ T28] audit: type=1326 audit(1754448559.895:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.5.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 309.306771][ T28] audit: type=1326 audit(1754448559.895:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.5.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 309.335768][ T28] audit: type=1326 audit(1754448559.895:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.5.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 309.360252][ T28] audit: type=1326 audit(1754448559.895:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.5.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 309.383333][ T28] audit: type=1326 audit(1754448559.895:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.5.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462758ebe9 code=0x7ffc0000 [ 309.606862][ T5858] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 309.676195][T10279] loop4: detected capacity change from 0 to 64 [ 309.957806][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.969522][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.980600][ T5858] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 309.991154][ T5858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.013260][ T5858] usb 7-1: config 0 descriptor?? [ 310.376956][ T27] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 310.444439][ T5858] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 310.481216][ T5858] hid-thrustmaster 0003:044F:B65D.0007: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 310.500347][ T5858] hid-thrustmaster 0003:044F:B65D.0007: Wrong number of endpoints? [ 310.608600][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.622019][ T27] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 310.640754][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.655538][ T27] usb 5-1: config 0 descriptor?? [ 310.672806][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 310.832668][ C0] hid-thrustmaster 0003:044F:B65D.0007: URB to get model id failed with error -71 [ 310.834047][ T787] usb 7-1: USB disconnect, device number 5 [ 311.105374][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 311.119805][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 311.129025][ T27] pwc: recv_control_msg error -32 req 02 val 2c00 [ 311.140808][ T27] pwc: recv_control_msg error -32 req 04 val 1000 [ 311.151400][ T27] pwc: recv_control_msg error -32 req 04 val 1300 [ 311.160403][ T27] pwc: recv_control_msg error -32 req 04 val 1400 [ 311.379110][ T27] pwc: recv_control_msg error -71 req 02 val 2100 [ 311.386146][ T27] pwc: recv_control_msg error -71 req 04 val 1500 [ 311.393139][ T27] pwc: recv_control_msg error -71 req 02 val 2500 [ 311.412611][ T27] pwc: recv_control_msg error -71 req 02 val 2400 [ 311.421467][ T27] pwc: recv_control_msg error -71 req 02 val 2600 [ 311.431877][ T27] pwc: recv_control_msg error -71 req 02 val 2900 [ 311.432708][T10307] loop5: detected capacity change from 0 to 512 [ 311.440012][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 311.452289][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 311.459707][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 311.475862][ T27] pwc: Registered as video103. [ 311.485042][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 311.505947][ T27] usb 5-1: USB disconnect, device number 8 [ 312.142535][T10325] cgroup: fork rejected by pids controller in /syz1 [ 312.381841][T10369] kvm: kvm [10368]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 312.411060][T10369] kvm: kvm [10368]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 312.447263][T10369] kvm: kvm [10368]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 312.470366][T10369] kvm_intel: kvm [10368]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 312.896734][ T5876] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 313.086719][ T5876] usb 7-1: Using ep0 maxpacket: 32 [ 313.095356][ T5876] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 313.103597][ T5876] usb 7-1: config 0 has no interface number 0 [ 313.117800][ T5876] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 313.129844][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.138369][ T5876] usb 7-1: Product: syz [ 313.142711][ T5876] usb 7-1: Manufacturer: syz [ 313.147500][ T5876] usb 7-1: SerialNumber: syz [ 313.154781][ T5876] usb 7-1: config 0 descriptor?? [ 313.161235][ T5876] smsc95xx v2.0.0 [ 313.580371][ T5876] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 313.603895][ T5876] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 313.862049][T10403] loop4: detected capacity change from 0 to 32768 [ 314.386723][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 314.822657][ T5876] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 314.833603][ T5876] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 314.844032][ T5876] usb 7-1: USB disconnect, device number 6 [ 316.117146][T10432] cgroup: fork rejected by pids controller in /syz4 [ 316.329651][ T27] kernel write not supported for file /418/clear_refs (pid: 27 comm: kworker/1:1) [ 316.343071][T10477] tipc: Started in network mode [ 316.348206][T10477] tipc: Node identity ac14140f, cluster identity 4711 [ 316.355987][T10477] tipc: New replicast peer: 255.255.255.255 [ 316.364207][T10477] tipc: Enabled bearer , priority 10 [ 317.447094][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.453457][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.490284][ T5775] tipc: Node number set to 2886997007 [ 317.718570][T10497] loop5: detected capacity change from 0 to 32768 [ 318.041119][T10513] vxcan1: entered allmulticast mode [ 318.526087][T10528] netlink: 'syz.1.1487': attribute type 10 has an invalid length. [ 318.592540][T10531] sctp: [Deprecated]: syz.4.1488 (pid 10531) Use of int in max_burst socket option deprecated. [ 318.592540][T10531] Use struct sctp_assoc_value instead [ 318.612980][T10528] team0: Port device dummy0 added [ 318.632354][T10532] netlink: 'syz.1.1487': attribute type 10 has an invalid length. [ 318.682178][T10532] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 318.724961][T10532] team0: Failed to send options change via netlink (err -105) [ 318.734609][T10532] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 318.748595][T10532] team0: Port device dummy0 removed [ 319.172602][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'. [ 320.814844][T10590] loop5: detected capacity change from 0 to 512 [ 320.990647][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1517'. [ 321.187043][ T5858] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 321.368785][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.382238][ T5858] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 321.393837][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.404514][ T5858] usb 6-1: config 0 descriptor?? [ 321.625394][ T5858] usbhid 6-1:0.0: can't add hid device: -71 [ 321.631591][ T5858] usbhid: probe of 6-1:0.0 failed with error -71 [ 321.644115][ T5858] usb 6-1: USB disconnect, device number 4 [ 322.136743][ T27] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 322.319975][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.331108][ T27] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 322.344327][ T27] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 322.353826][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.364851][ T27] usb 6-1: config 0 descriptor?? [ 322.667034][T10628] loop4: detected capacity change from 0 to 2048 [ 323.037211][ T27] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 323.227176][ T27] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 323.917075][ T27] usb 6-1: USB disconnect, device number 5 [ 324.281424][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 324.281443][ T28] audit: type=1326 audit(1754448575.035:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 324.309866][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.356290][ T28] audit: type=1326 audit(1754448575.045:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 324.400662][ T28] audit: type=1326 audit(1754448575.045:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 324.423724][ T28] audit: type=1326 audit(1754448575.045:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 324.455463][ T28] audit: type=1326 audit(1754448575.045:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 324.517482][ T28] audit: type=1326 audit(1754448575.045:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 324.555574][ T28] audit: type=1326 audit(1754448575.045:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 324.570715][T10657] loop5: detected capacity change from 0 to 512 [ 324.592049][ T28] audit: type=1326 audit(1754448575.045:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 324.620372][ T28] audit: type=1326 audit(1754448575.045:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 324.643318][ T28] audit: type=1326 audit(1754448575.045:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdd78ebe9 code=0x7ffc0000 [ 325.535882][T10689] tipc: Enabled bearer , priority 0 [ 325.546717][T10689] syzkaller0: MTU too low for tipc bearer [ 325.552915][T10689] tipc: Disabling bearer [ 325.749789][ T6580] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.911413][ T6580] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.056011][ T6580] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.220672][ T6580] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.508680][ T6580] tipc: Left network mode [ 326.547460][T10736] kvm: vcpu 0: requested 242 ns lapic timer period limited to 200000 ns [ 326.594901][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 326.609858][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 326.634941][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 326.667599][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 326.678342][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 326.696773][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 326.754703][T10721] loop5: detected capacity change from 0 to 32768 [ 327.513381][T10737] chnl_net:caif_netlink_parms(): no params data found [ 327.903901][T10737] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.912684][T10737] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.921842][T10737] bridge_slave_0: entered allmulticast mode [ 327.931860][T10737] bridge_slave_0: entered promiscuous mode [ 327.954921][T10772] cgroup: fork rejected by pids controller in /syz5 [ 327.996959][T10737] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.004387][T10737] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.012254][T10737] bridge_slave_1: entered allmulticast mode [ 328.019885][T10737] bridge_slave_1: entered promiscuous mode [ 328.086128][T10737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.121551][T10737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.173039][T10737] team0: Port device team_slave_0 added [ 328.185814][ T6580] hsr_slave_0: left promiscuous mode [ 328.185844][T10808] loop5: detected capacity change from 0 to 256 [ 328.200224][ T6580] hsr_slave_1: left promiscuous mode [ 328.222474][ T6580] veth1_macvtap: left promiscuous mode [ 328.228152][ T6580] veth0_macvtap: left promiscuous mode [ 328.676766][ T23] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 328.793307][ T5797] Bluetooth: hci3: command tx timeout [ 328.876707][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 328.885331][ T23] usb 7-1: config 0 has no interfaces? [ 328.890982][ T23] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 328.900783][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.911787][ T23] usb 7-1: config 0 descriptor?? [ 328.985525][ T6580] team0 (unregistering): Port device team_slave_1 removed [ 329.059166][ T6580] team0 (unregistering): Port device team_slave_0 removed [ 329.143491][ T23] usb 7-1: USB disconnect, device number 7 [ 329.156590][ T6580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.231075][ T6580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.649327][T10821] overlayfs: failed to clone upperpath [ 329.755433][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 329.920037][T10825] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 330.156568][ T6580] bond0 (unregistering): Released all slaves [ 330.186107][T10737] team0: Port device team_slave_1 added [ 330.255853][T10737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.267465][T10737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.296406][T10737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.338921][T10737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.345896][T10737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.392843][T10737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.473304][T10737] hsr_slave_0: entered promiscuous mode [ 330.513627][T10737] hsr_slave_1: entered promiscuous mode [ 330.520138][T10737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.536708][T10737] Cannot create hsr debugfs directory [ 330.875919][ T5792] Bluetooth: hci3: command tx timeout [ 331.248684][T10737] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 331.289908][T10737] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 331.318662][T10737] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 331.342847][T10737] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 332.044118][T10737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.206118][T10737] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.247979][ T7424] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.255146][ T7424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.274619][ T7424] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.281921][ T7424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.383368][T10737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.761113][T10737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.948848][ T5792] Bluetooth: hci3: command tx timeout [ 333.093125][T10909] 9pnet_fd: Insufficient options for proto=fd [ 333.122885][T10909] 9pnet_fd: Insufficient options for proto=fd [ 333.235540][T10737] veth0_vlan: entered promiscuous mode [ 333.276101][T10737] veth1_vlan: entered promiscuous mode [ 333.360783][T10737] veth0_macvtap: entered promiscuous mode [ 333.389487][T10737] veth1_macvtap: entered promiscuous mode [ 333.444100][T10737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.484654][T10737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.517772][T10737] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.553002][T10737] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.569659][T10737] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.588734][T10737] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.821047][ T766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.856760][ T766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.934419][ T7424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.957725][ T7424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.102569][T10966] loop6: detected capacity change from 0 to 1024 [ 334.313985][T10966] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.320807][T10975] overlayfs: failed to clone upperpath [ 334.323445][T10966] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.360387][T10966] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.377906][T10966] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.404447][T10966] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.411995][T10966] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.419583][ T5876] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 334.436873][T10966] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.454657][T10966] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.476771][T10966] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.484143][T10966] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.557606][T10966] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.566744][T10966] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.618814][ T5876] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.645653][ T5876] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.664731][ T5876] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 334.686928][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.707055][ T5876] usb 8-1: config 0 descriptor?? [ 334.779109][T10973] loop5: detected capacity change from 0 to 32768 [ 334.870414][T10984] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1612'. [ 334.980356][T10984] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1612'. [ 335.027062][ T5792] Bluetooth: hci3: command tx timeout [ 335.124748][ T5876] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 335.146828][ T5876] hid-thrustmaster 0003:044F:B65D.0009: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 335.160037][ T5876] hid-thrustmaster 0003:044F:B65D.0009: Wrong number of endpoints? [ 335.215053][T10984] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1612'. [ 335.448162][ C0] hid-thrustmaster 0003:044F:B65D.0009: URB to get model id failed with error -71 [ 335.450732][ T23] usb 8-1: USB disconnect, device number 2 [ 335.554787][T10996] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1614'. [ 336.312491][T11019] loop7: detected capacity change from 0 to 512 [ 336.388665][T11019] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.424535][T11019] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.635081][T11019] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5902: Out of memory [ 336.655956][T11019] EXT4-fs error (device loop7): ext4_dirty_inode:6106: inode #4: comm syz.7.1625: mark_inode_dirty error [ 336.671611][T11019] EXT4-fs error (device loop7): ext4_validate_block_bitmap:421: comm syz.7.1625: bg 0: bad block bitmap checksum [ 336.701383][T11019] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5902: Out of memory [ 336.712687][T11019] EXT4-fs error (device loop7): ext4_dirty_inode:6106: inode #4: comm syz.7.1625: mark_inode_dirty error [ 336.725256][T11019] __quota_error: 4 callbacks suppressed [ 336.725271][T11019] Quota error (device loop7): write_blk: dquota write failed [ 336.740974][T11019] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 336.754593][T11019] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 336.764867][T11019] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.1625: Failed to acquire dquot type 1 [ 336.871284][T10737] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.887615][T10737] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5902: Out of memory [ 336.926759][T10737] EXT4-fs error (device loop7): ext4_quota_off:7222: inode #4: comm syz-executor: mark_inode_dirty error [ 337.441972][ T28] audit: type=1326 audit(1754448588.205:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11067 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8378ebe9 code=0x7ffc0000 [ 337.467679][ T5876] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 337.491357][ T28] audit: type=1326 audit(1754448588.235:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11067 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f3a8378ebe9 code=0x7ffc0000 [ 337.536841][ T28] audit: type=1326 audit(1754448588.235:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11067 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8378ebe9 code=0x7ffc0000 [ 337.566940][ T28] audit: type=1326 audit(1754448588.235:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11067 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8378ebe9 code=0x7ffc0000 [ 337.591155][ T28] audit: type=1326 audit(1754448588.235:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11067 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f3a8378ebe9 code=0x7ffc0000 [ 337.615769][ T28] audit: type=1326 audit(1754448588.235:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11067 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8378ebe9 code=0x7ffc0000 [ 337.656718][ T28] audit: type=1326 audit(1754448588.235:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11067 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f3a8378ebe9 code=0x7ffc0000 [ 337.658683][ T5876] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 337.708002][ T5876] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.721516][ T5876] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 337.737816][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.964061][ T5876] usb 6-1: GET_CAPABILITIES returned 0 [ 337.978579][ T5876] usbtmc 6-1:16.0: can't read capabilities [ 338.225440][ T5876] usb 6-1: USB disconnect, device number 6 [ 338.271579][T11095] loop7: detected capacity change from 0 to 512 [ 338.282192][T11095] ext4: Unknown parameter 'fowner>00000000000000000000' [ 338.672991][T11086] loop6: detected capacity change from 0 to 32768 [ 338.693498][T11086] (syz.6.1651,11086,0):ocfs2_initialize_super:2151 ERROR: couldn't mount RDWR because of unsupported optional features (20000). [ 338.725001][T11086] (syz.6.1651,11086,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 339.251659][T11100] loop6: detected capacity change from 0 to 256 [ 339.334295][T11100] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 339.358788][T11100] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 339.650287][T11109] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 341.777812][T11161] overlayfs: failed to clone upperpath [ 341.814937][T11159] loop6: detected capacity change from 0 to 4096 [ 341.853412][T11159] EXT4-fs: Ignoring removed nobh option [ 341.921196][T11159] EXT4-fs (loop6): Test dummy encryption mode enabled [ 341.993744][T11159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.098813][T11159] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 342.391833][ T8338] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.501680][T11175] netlink: 'syz.1.1682': attribute type 1 has an invalid length. [ 342.677967][ T6580] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.861802][T11181] loop5: detected capacity change from 0 to 4096 [ 342.886810][ T6580] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.119211][ T6580] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.235171][ T6580] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.281757][T11095] Set syz1 is full, maxelem 65536 reached [ 343.548251][ T6580] tipc: Disabling bearer [ 343.565031][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.579279][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.589814][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.599337][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.609251][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 343.617204][ T6580] tipc: Left network mode [ 343.621655][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.830861][T11195] tipc: Started in network mode [ 343.843723][T11195] tipc: Node identity , cluster identity 4711 [ 343.856817][T11195] tipc: Failed to obtain node identity [ 343.863583][T11195] tipc: Enabling of bearer rejected, failed to enable media [ 344.287247][T11209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1695'. [ 344.334981][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1694'. [ 344.579955][T11219] loop5: detected capacity change from 0 to 512 [ 344.588467][T11219] ext4: Unknown parameter 'fowner>00000000000000000000' [ 344.642148][T11191] chnl_net:caif_netlink_parms(): no params data found [ 345.020326][T11191] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.041560][T11191] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.058465][T11191] bridge_slave_0: entered allmulticast mode [ 345.074210][T11191] bridge_slave_0: entered promiscuous mode [ 345.082723][T11234] overlayfs: failed to clone upperpath [ 345.162503][T11191] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.183086][T11191] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.204204][T11191] bridge_slave_1: entered allmulticast mode [ 345.220698][T11191] bridge_slave_1: entered promiscuous mode [ 345.293111][ T6580] hsr_slave_0: left promiscuous mode [ 345.299859][ T6580] hsr_slave_1: left promiscuous mode [ 345.328172][ T6580] bridge_slave_1: left allmulticast mode [ 345.335202][ T6580] bridge_slave_1: left promiscuous mode [ 345.342631][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.361219][ T6580] bridge_slave_0: left allmulticast mode [ 345.369373][ T6580] bridge_slave_0: left promiscuous mode [ 345.379287][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.454244][ T6580] veth1_macvtap: left promiscuous mode [ 345.460120][ T6580] veth0_macvtap: left promiscuous mode [ 345.465842][ T6580] veth1_vlan: left promiscuous mode [ 345.482999][ T6580] veth0_vlan: left promiscuous mode [ 345.570569][T11243] overlayfs: failed to clone upperpath [ 345.773107][ T5792] Bluetooth: hci2: command tx timeout [ 346.812646][ T6580] team0 (unregistering): Port device team_slave_1 removed [ 347.018471][ T6580] team0 (unregistering): Port device team_slave_0 removed [ 347.243777][ T6580]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.329637][ T6580]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.779751][T11219] Set syz1 is full, maxelem 65536 reached [ 347.852768][ T5792] Bluetooth: hci2: command tx timeout [ 348.219627][ T6580]  (unregistering): Released all slaves [ 348.308707][T11191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.340557][T11263] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1714'. [ 348.387184][T11191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.479792][T11191] team0: Port device team_slave_0 added [ 348.509683][T11191] team0: Port device team_slave_1 added [ 348.584989][T11191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.601143][T11191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.628994][T11191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.667412][T11191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.686819][T11191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.731442][T11191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.829579][T11191] hsr_slave_0: entered promiscuous mode [ 348.847677][T11191] hsr_slave_1: entered promiscuous mode [ 348.854180][T11191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.864562][T11191] Cannot create hsr debugfs directory [ 348.895592][T11281] loop5: detected capacity change from 0 to 1024 [ 348.903251][T11281] EXT4-fs: Ignoring removed orlov option [ 349.034509][T11191] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 349.043811][T11191] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 349.053178][T11191] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 349.062416][T11191] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 349.139357][T11191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.181141][T11191] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.209993][ T7427] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.217198][ T7427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.234479][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.241686][ T6580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.489682][T11299] netlink: 'syz.7.1725': attribute type 12 has an invalid length. [ 349.509561][T11299] netlink: 'syz.7.1725': attribute type 29 has an invalid length. [ 349.533195][T11299] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1725'. [ 349.774373][T11191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.909662][ T5792] Bluetooth: hci2: command tx timeout [ 350.202470][T11191] veth0_vlan: entered promiscuous mode [ 350.224806][T11191] veth1_vlan: entered promiscuous mode [ 350.274378][T11191] veth0_macvtap: entered promiscuous mode [ 350.288012][T11191] veth1_macvtap: entered promiscuous mode [ 350.321169][T11191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.332926][T11191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.351776][T11191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.380011][T11191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.391219][T11191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.404366][T11191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.423557][T11191] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.433628][T11191] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.444329][T11191] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.459453][T11191] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.619279][ T6580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.646187][ T6580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.720978][ T7424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.738787][ T7424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.900416][T11343] veth0: entered promiscuous mode [ 350.916311][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1687'. [ 351.777049][ T27] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 351.986862][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 351.992159][ T5792] Bluetooth: hci2: command tx timeout [ 351.999406][ T27] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 352.016692][ T27] usb 6-1: config 0 has no interface number 0 [ 352.022892][ T27] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 352.046937][ T27] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 352.078908][ T27] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 352.090510][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.098927][ T27] usb 6-1: Product: syz [ 352.103232][ T27] usb 6-1: Manufacturer: syz [ 352.108314][ T27] usb 6-1: SerialNumber: syz [ 352.115706][ T27] usb 6-1: config 0 descriptor?? [ 352.121875][T11359] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 352.129631][T11359] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 352.346402][T11359] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 352.354891][T11359] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 352.888394][T11374] ip6gre2: entered allmulticast mode [ 353.219061][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1756'. [ 354.517173][ T27] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 354.546998][ T27] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 354.587191][ T27] asix: probe of 6-1:0.251 failed with error -71 [ 354.600813][ T27] usb 6-1: USB disconnect, device number 7 [ 356.036402][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1787'. [ 356.097219][T11438] loop8: detected capacity change from 0 to 32768 [ 356.172110][T11438] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 356.241005][T11438] XFS (loop8): Ending clean mount [ 356.391034][T11191] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 356.448369][T11486] loop5: detected capacity change from 0 to 2048 [ 356.714475][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1797'. [ 357.075853][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 357.075870][ T28] audit: type=1326 audit(1754448607.825:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.7.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92e98ebe9 code=0x7fc00000 [ 357.370835][T11527] loop8: detected capacity change from 0 to 4096 [ 357.393325][T11527] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.500672][ T7427] tipc: Subscription rejected, illegal request [ 357.572578][T11191] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.784785][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1824'. [ 358.832487][T11583] loop8: detected capacity change from 0 to 512 [ 358.897041][ T787] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 358.924493][T11583] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.944296][T11583] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.059091][T11583] EXT4-fs error (device loop8): ext4_dx_csum_verify:502: inode #2: comm syz.8.1825: dir seems corrupt? Run e2fsck -D. [ 359.087451][T11583] EXT4-fs (loop8): Remounting filesystem read-only [ 359.097046][ T787] usb 6-1: Using ep0 maxpacket: 8 [ 359.111278][ T787] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 359.126727][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.145223][ T787] usb 6-1: Product: syz [ 359.159499][T11191] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.168614][ T787] usb 6-1: Manufacturer: syz [ 359.173227][ T787] usb 6-1: SerialNumber: syz [ 359.189503][ T787] usb 6-1: config 0 descriptor?? [ 359.205586][ T787] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 359.488256][T11589] loop7: detected capacity change from 0 to 32768 [ 359.501478][T11589] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1827 (11589) [ 359.524414][T11589] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 359.541837][T11589] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 359.552290][T11589] BTRFS info (device loop7): metadata ratio 2 [ 359.559209][T11589] BTRFS info (device loop7): allowing degraded mounts [ 359.566211][T11589] BTRFS info (device loop7): force zlib compression, level 3 [ 359.576268][T11589] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 359.595120][T11589] BTRFS info (device loop7): use zstd compression, level 3 [ 359.633613][T11589] BTRFS info (device loop7): force clearing of disk cache [ 359.668086][T11589] BTRFS info (device loop7): max_inline at 0 [ 359.675904][T11589] BTRFS info (device loop7): using free space tree [ 359.766456][T11589] BTRFS info (device loop7): enabling ssd optimizations [ 359.787072][T11589] BTRFS info (device loop7): rebuilding free space tree [ 360.373206][T10737] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 360.924505][T11637] loop7: detected capacity change from 0 to 2048 [ 360.935375][T11642] overlayfs: failed to clone upperpath [ 360.960360][T11637] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 361.072117][ T787] gspca_sonixj: reg_r err -71 [ 361.077083][ T787] sonixj: probe of 6-1:0.0 failed with error -71 [ 361.093893][ T787] usb 6-1: USB disconnect, device number 8 [ 361.113881][T10737] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 361.122996][T11650] tipc: Failed to remove unknown binding: 66,1,1/0:3517384362/3517384364 [ 362.211804][T11676] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 362.324529][T11677] loop5: detected capacity change from 0 to 2048 [ 362.534175][T11680] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1853'. [ 362.582516][T11682] loop7: detected capacity change from 0 to 128 [ 362.698821][T11682] bio_check_eod: 9 callbacks suppressed [ 362.698839][T11682] syz.7.1854: attempt to access beyond end of device [ 362.698839][T11682] loop7: rw=2049, sector=145, nr_sectors = 784 limit=128 [ 362.777999][T11682] syz.7.1854: attempt to access beyond end of device [ 362.777999][T11682] loop7: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 362.811729][T11682] syz.7.1854: attempt to access beyond end of device [ 362.811729][T11682] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 362.838805][T11682] syz.7.1854: attempt to access beyond end of device [ 362.838805][T11682] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 362.878629][T11682] syz.7.1854: attempt to access beyond end of device [ 362.878629][T11682] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 362.909286][T11682] syz.7.1854: attempt to access beyond end of device [ 362.909286][T11682] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 362.931660][T11682] syz.7.1854: attempt to access beyond end of device [ 362.931660][T11682] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 362.951586][T11682] syz.7.1854: attempt to access beyond end of device [ 362.951586][T11682] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 362.972896][T11682] syz.7.1854: attempt to access beyond end of device [ 362.972896][T11682] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 363.009365][T11682] syz.7.1854: attempt to access beyond end of device [ 363.009365][T11682] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 363.576110][T11699] loop7: detected capacity change from 0 to 2048 [ 363.641514][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 363.682854][T11699] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.771409][T10737] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 363.893302][T11638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.902543][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 363.914651][ T9] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.925843][ T9] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.942890][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 363.956717][ T9] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 363.969675][ T9] usb 6-1: Product: syz [ 363.974289][ T9] usb 6-1: Manufacturer: syz [ 364.011394][ T9] hub 6-1:4.0: USB hub found [ 364.236817][ T9] hub 6-1:4.0: 2 ports detected [ 364.952372][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.974009][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.984205][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.995826][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.005160][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 365.012759][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.206332][T11658] Set syz1 is full, maxelem 65536 reached [ 365.283789][T11709] chnl_net:caif_netlink_parms(): no params data found [ 365.439909][ T9] hub 6-1:4.0: activate --> -90 [ 365.460016][T11709] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.473342][T11709] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.487289][T11709] bridge_slave_0: entered allmulticast mode [ 365.495303][T11709] bridge_slave_0: entered promiscuous mode [ 365.506351][T11709] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.514203][T11709] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.521889][T11709] bridge_slave_1: entered allmulticast mode [ 365.530448][T11709] bridge_slave_1: entered promiscuous mode [ 365.580338][T11709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.593302][T11709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.653180][T11709] team0: Port device team_slave_0 added [ 365.672212][T11709] team0: Port device team_slave_1 added [ 365.710289][T11709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.717446][T11709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.743367][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.751590][T11709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.766017][T11709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.774923][T11709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.804914][T11709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.842074][ T8] usb 6-1: USB disconnect, device number 9 [ 365.848166][ T9] hub 6-1:4.0: hub_ext_port_status failed (err = -71) [ 365.856600][ T9] usb 6-1-port2: attempt power cycle [ 365.912857][T11709] hsr_slave_0: entered promiscuous mode [ 365.919816][T11709] hsr_slave_1: entered promiscuous mode [ 365.926236][T11709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.935000][T11709] Cannot create hsr debugfs directory [ 365.942508][T11739] bridge: RTM_NEWNEIGH with invalid ether address [ 366.034816][T11741] ref_ctr increment failed for inode: 0xd80 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802f1e3900 [ 366.169822][T11709] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 366.186727][T11709] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 366.211348][T11709] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 366.222909][T11709] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 366.303888][T11709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.361340][T11709] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.379051][ T7419] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.386158][ T7419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.422619][ T7424] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.429771][ T7424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.510581][T11709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.521420][T11709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.772242][ T28] audit: type=1326 audit(1754448617.535:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11766 comm="syz.5.1883" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f462758ebe9 code=0x0 [ 366.881241][T11709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.106914][ T5797] Bluetooth: hci3: command tx timeout [ 367.691281][T11709] veth0_vlan: entered promiscuous mode [ 367.724366][T11709] veth1_vlan: entered promiscuous mode [ 367.904466][T11709] veth0_macvtap: entered promiscuous mode [ 367.973545][T11709] veth1_macvtap: entered promiscuous mode [ 368.089107][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.116740][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.138055][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.149524][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.162307][T11709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.178295][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.189165][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.221512][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.243576][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.255973][T11709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.281971][T11709] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.291407][T11709] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.309766][T11709] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.333740][T11709] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.534660][T11797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.577222][T11797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.680382][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.701029][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.094021][T11827] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 369.188001][ T5797] Bluetooth: hci3: command tx timeout [ 369.996131][T11860] tipc: Failed to remove unknown binding: 66,1,1/0:2762664668/2762664670 [ 370.006687][T11860] tipc: Failed to remove unknown binding: 66,1,1/0:2762664668/2762664670 [ 370.334349][T11871] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 370.684384][T11883] loop9: detected capacity change from 0 to 512 [ 370.711325][T11883] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 370.726252][T11883] [ 370.726261][T11883] ====================================================== [ 370.726268][T11883] WARNING: possible circular locking dependency detected [ 370.726284][T11883] 6.6.101-syzkaller #0 Not tainted [ 370.726293][T11883] ------------------------------------------------------ [ 370.726299][T11883] syz.9.1916/11883 is trying to acquire lock: [ 370.726309][T11883] ffff88805b4a7210 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: ext4_process_orphan+0x187/0x300 [ 370.726372][T11883] [ 370.726372][T11883] but task is already holding lock: [ 370.726378][T11883] ffff8880300860e0 (&type->s_umount_key#32){++++}-{3:3}, at: get_tree_bdev+0x344/0x510 [ 370.726424][T11883] [ 370.726424][T11883] which lock already depends on the new lock. [ 370.726424][T11883] [ 370.726430][T11883] [ 370.726430][T11883] the existing dependency chain (in reverse order) is: [ 370.726436][T11883] [ 370.726436][T11883] -> #4 (&type->s_umount_key#32){++++}-{3:3}: [ 370.726473][T11883] down_read+0x46/0x2e0 [ 370.726496][T11883] super_lock+0x167/0x360 [ 370.726510][T11883] fs_bdev_sync+0xa4/0x170 [ 370.726533][T11883] blkdev_common_ioctl+0x880/0x23d0 [ 370.726553][T11883] blkdev_ioctl+0x4eb/0x6f0 [ 370.726573][T11883] __se_sys_ioctl+0xfd/0x170 [ 370.726592][T11883] do_syscall_64+0x55/0xb0 [ 370.726614][T11883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.726638][T11883] [ 370.726638][T11883] -> #3 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 370.726661][T11883] __mutex_lock+0x129/0xcc0 [ 370.726681][T11883] bd_finish_claiming+0x22f/0x3f0 [ 370.726697][T11883] blkdev_get_by_dev+0x45c/0x600 [ 370.726711][T11883] bdev_open_by_dev+0x77/0x100 [ 370.726726][T11883] setup_bdev_super+0x59/0x660 [ 370.726741][T11883] mount_bdev+0x1dd/0x2d0 [ 370.726755][T11883] legacy_get_tree+0xea/0x180 [ 370.726773][T11883] vfs_get_tree+0x8c/0x280 [ 370.726786][T11883] do_new_mount+0x24b/0xa40 [ 370.726798][T11883] init_mount+0xd2/0x120 [ 370.726814][T11883] do_mount_root+0x97/0x230 [ 370.726837][T11883] mount_root_generic+0x195/0x3c0 [ 370.726862][T11883] prepare_namespace+0xc2/0x100 [ 370.726875][T11883] kernel_init_freeable+0x413/0x570 [ 370.726900][T11883] kernel_init+0x1d/0x1c0 [ 370.726913][T11883] ret_from_fork+0x48/0x80 [ 370.726931][T11883] ret_from_fork_asm+0x11/0x20 [ 370.726950][T11883] [ 370.726950][T11883] -> #2 (bdev_lock){+.+.}-{3:3}: [ 370.726969][T11883] __mutex_lock+0x129/0xcc0 [ 370.726986][T11883] bd_prepare_to_claim+0x1ba/0x480 [ 370.727000][T11883] truncate_bdev_range+0x4e/0x260 [ 370.727012][T11883] blkdev_fallocate+0x3ff/0x670 [ 370.727028][T11883] vfs_fallocate+0x58e/0x700 [ 370.727046][T11883] do_madvise+0x15fe/0x3710 [ 370.727065][T11883] __x64_sys_madvise+0xa6/0xc0 [ 370.727083][T11883] do_syscall_64+0x55/0xb0 [ 370.727099][T11883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.727121][T11883] [ 370.727121][T11883] -> #1 (mapping.invalidate_lock#2){++++}-{3:3}: [ 370.727150][T11883] down_read+0x46/0x2e0 [ 370.727171][T11883] page_cache_ra_unbounded+0xdc/0x770 [ 370.727197][T11883] ext4_readdir+0xb71/0x39d0 [ 370.727219][T11883] iterate_dir+0x1c2/0x580 [ 370.727238][T11883] ovl_dir_read+0xfc/0x560 [ 370.727262][T11883] ovl_check_d_type_supported+0x99/0x100 [ 370.727287][T11883] ovl_get_workdir+0x487/0x1740 [ 370.727302][T11883] ovl_fill_super+0x1345/0x3560 [ 370.727317][T11883] get_tree_nodev+0xb5/0x140 [ 370.727332][T11883] vfs_get_tree+0x8c/0x280 [ 370.727346][T11883] do_new_mount+0x24b/0xa40 [ 370.727361][T11883] __se_sys_mount+0x2da/0x3c0 [ 370.727376][T11883] do_syscall_64+0x55/0xb0 [ 370.727394][T11883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.727419][T11883] [ 370.727419][T11883] -> #0 (&type->i_mutex_dir_key#3){++++}-{3:3}: [ 370.727450][T11883] __lock_acquire+0x2ddb/0x7c80 [ 370.727468][T11883] lock_acquire+0x197/0x410 [ 370.727484][T11883] down_write+0x97/0x1f0 [ 370.727503][T11883] ext4_process_orphan+0x187/0x300 [ 370.727538][T11883] ext4_orphan_cleanup+0xbd4/0x1400 [ 370.727563][T11883] ext4_fill_super+0x5d47/0x6620 [ 370.727581][T11883] get_tree_bdev+0x3e4/0x510 [ 370.727596][T11883] vfs_get_tree+0x8c/0x280 [ 370.727611][T11883] do_new_mount+0x24b/0xa40 [ 370.727625][T11883] __se_sys_mount+0x2da/0x3c0 [ 370.727638][T11883] do_syscall_64+0x55/0xb0 [ 370.727655][T11883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.727680][T11883] [ 370.727680][T11883] other info that might help us debug this: [ 370.727680][T11883] [ 370.727685][T11883] Chain exists of: [ 370.727685][T11883] &type->i_mutex_dir_key#3 --> &bdev->bd_holder_lock --> &type->s_umount_key#32 [ 370.727685][T11883] [ 370.727728][T11883] Possible unsafe locking scenario: [ 370.727728][T11883] [ 370.727732][T11883] CPU0 CPU1 [ 370.727738][T11883] ---- ---- [ 370.727742][T11883] lock(&type->s_umount_key#32); [ 370.727760][T11883] lock(&bdev->bd_holder_lock); [ 370.727773][T11883] lock(&type->s_umount_key#32); [ 370.727790][T11883] lock(&type->i_mutex_dir_key#3); [ 370.727807][T11883] [ 370.727807][T11883] *** DEADLOCK *** [ 370.727807][T11883] [ 370.727811][T11883] 1 lock held by syz.9.1916/11883: [ 370.727822][T11883] #0: ffff8880300860e0 (&type->s_umount_key#32){++++}-{3:3}, at: get_tree_bdev+0x344/0x510 [ 370.727872][T11883] [ 370.727872][T11883] stack backtrace: [ 370.727887][T11883] CPU: 1 PID: 11883 Comm: syz.9.1916 Not tainted 6.6.101-syzkaller #0 [ 370.727905][T11883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 370.727923][T11883] Call Trace: [ 370.727931][T11883] [ 370.727942][T11883] dump_stack_lvl+0x16c/0x230 [ 370.727964][T11883] ? load_image+0x3b0/0x3b0 [ 370.727992][T11883] ? show_regs_print_info+0x20/0x20 [ 370.728017][T11883] ? print_circular_bug+0x12b/0x1a0 [ 370.728040][T11883] check_noncircular+0x2bd/0x3c0 [ 370.728061][T11883] ? look_up_lock_class+0x75/0x140 [ 370.728088][T11883] ? print_deadlock_bug+0x5d0/0x5d0 [ 370.728108][T11883] ? lockdep_lock+0xe0/0x220 [ 370.728130][T11883] ? _find_first_zero_bit+0xd3/0x100 [ 370.728158][T11883] __lock_acquire+0x2ddb/0x7c80 [ 370.728191][T11883] ? verify_lock_unused+0x140/0x140 [ 370.728213][T11883] ? __ext4_iget+0x2e5c/0x3e70 [ 370.728236][T11883] ? __lock_acquire+0x7c80/0x7c80 [ 370.728255][T11883] ? __raw_spin_lock_init+0x45/0x100 [ 370.728282][T11883] lock_acquire+0x197/0x410 [ 370.728300][T11883] ? ext4_process_orphan+0x187/0x300 [ 370.728330][T11883] ? __might_sleep+0xe0/0xe0 [ 370.728350][T11883] ? __asan_memset+0x22/0x40 [ 370.728372][T11883] ? read_lock_is_recursive+0x20/0x20 [ 370.728390][T11883] ? __dquot_initialize+0x215/0xcb0 [ 370.728419][T11883] down_write+0x97/0x1f0 [ 370.728442][T11883] ? ext4_process_orphan+0x187/0x300 [ 370.728469][T11883] ? down_read_killable+0x340/0x340 [ 370.728496][T11883] ext4_process_orphan+0x187/0x300 [ 370.728543][T11883] ext4_orphan_cleanup+0xbd4/0x1400 [ 370.728576][T11883] ? ext4_orphan_del+0xba0/0xba0 [ 370.728604][T11883] ? ext4_register_li_request+0x183/0x940 [ 370.728632][T11883] ? errseq_check_and_advance+0x66/0x120 [ 370.728654][T11883] ext4_fill_super+0x5d47/0x6620 [ 370.728685][T11883] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 370.728709][T11883] ? vscnprintf+0x80/0x80 [ 370.728737][T11883] ? down_read_killable+0x340/0x340 [ 370.728763][T11883] ? setup_bdev_super+0x56b/0x660 [ 370.728781][T11883] get_tree_bdev+0x3e4/0x510 [ 370.728798][T11883] ? vfs_parse_fs_string+0x160/0x160 [ 370.728819][T11883] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 370.728840][T11883] ? setup_bdev_super+0x660/0x660 [ 370.728857][T11883] ? apparmor_capable+0x137/0x1a0 [ 370.728874][T11883] ? bpf_lsm_capable+0x9/0x10 [ 370.728899][T11883] ? security_capable+0x89/0xb0 [ 370.728920][T11883] vfs_get_tree+0x8c/0x280 [ 370.728939][T11883] do_new_mount+0x24b/0xa40 [ 370.728960][T11883] __se_sys_mount+0x2da/0x3c0 [ 370.728980][T11883] ? __x64_sys_mount+0xc0/0xc0 [ 370.728999][T11883] ? lockdep_hardirqs_on+0x98/0x150 [ 370.729022][T11883] ? __x64_sys_mount+0x20/0xc0 [ 370.729040][T11883] do_syscall_64+0x55/0xb0 [ 370.729060][T11883] ? clear_bhb_loop+0x40/0x90 [ 370.729076][T11883] ? clear_bhb_loop+0x40/0x90 [ 370.729094][T11883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.729122][T11883] RIP: 0033:0x7f09c4b9038a [ 370.729143][T11883] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.729161][T11883] RSP: 002b:00007f09c5ac3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 370.729181][T11883] RAX: ffffffffffffffda RBX: 00007f09c5ac3ef0 RCX: 00007f09c4b9038a [ 370.729195][T11883] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 00007f09c5ac3eb0 [ 370.729209][T11883] RBP: 0000200000000040 R08: 00007f09c5ac3ef0 R09: 000000000000000e [ 370.729223][T11883] R10: 000000000000000e R11: 0000000000000246 R12: 0000200000000180 [ 370.729236][T11883] R13: 00007f09c5ac3eb0 R14: 0000000000000451 R15: 00002000000004c0 [ 370.729257][T11883] [ 370.749564][T11883] EXT4-fs (loop9): 1 truncate cleaned up [ 370.750059][T11883] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.018573][T11709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.276749][ T5797] Bluetooth: hci3: command tx timeout [ 373.826805][ T5797] Bluetooth: hci3: command tx timeout [ 378.879946][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.886302][ T1288] ieee802154 phy1 wpan1: encryption failed: -22