last executing test programs: 12.812469428s ago: executing program 1 (id=1799): r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x4000, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000000c0)=ANY=[@ANYBLOB="b42bf7d222ffe6cd1ba5efe08ef0789ab2c5b3494e26de4115dc08e204fba1e7ad7081638f9e128665e182641fd03d883a"]) 11.235407848s ago: executing program 0 (id=1803): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020}, 0x205b) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c0000"], 0x0) 10.03776193s ago: executing program 0 (id=1806): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x120000c, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 7.720907534s ago: executing program 3 (id=1807): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000840000000100000000000000"], 0x2c}], 0x1, 0x40) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$inet6(r1, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x98081, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0x1, 0x2000c841, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x8}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000080)=""/1, 0x1) shutdown(r3, 0x1) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000003, 0x50, r3, 0x8000000) syz_io_uring_setup(0x27fd, &(0x7f0000000180)={0x0, 0x3e4d, 0x400, 0x3, 0x5e, 0x0, r3}, &(0x7f0000000200), &(0x7f0000000240)=0x0) r7 = syz_io_uring_setup(0x7b4f, &(0x7f00000003c0)={0x0, 0x797c, 0x10, 0x3, 0xf}, &(0x7f00000002c0), &(0x7f0000000340)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000480)=@IORING_OP_MSG_RING={0x28, 0x36, 0x0, r7, 0x0, &(0x7f0000000440)="4b0f1c804d74b064afe99770e8f5bf254bacc18b7e1263b96f9302f16fe1a47f7006f963ac", 0x25, 0x0, 0x0, {0x0, r8}}) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r4, 0x1, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) read$FUSE(r3, &(0x7f0000003b80)={0x2020}, 0x2020) syz_open_dev$hiddev(&(0x7f0000000040), 0x5, 0x0) 7.679534605s ago: executing program 1 (id=1809): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x120000c, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f081, 0xc, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) 7.529965778s ago: executing program 0 (id=1810): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r4], 0x50}}, 0x2) 7.40213398s ago: executing program 3 (id=1812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0x4, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x1, &(0x7f0000ffe000/0x2000)=nil, 0x4) userfaultfd(0x80001) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) userfaultfd(0x80000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000001c0)={0x1}) r5 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000280)='cgroup.controllers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\//\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19) 5.978033717s ago: executing program 3 (id=1815): syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYBLOB="4a3a9f8c2aab73255ecca15a5ad5b0b10a818868cc63e509dca434325eec52c449bc0f78c4d4996b7c34f8c4027731d8084daf83fa32ac4f26093d06abe1c066b64b56d81577ccc09ee10fa7258f8c9a08a6fa6f21d52366469e697011812e7133138514e15b9fe1f64a7d3062ee9a77ca0a5d9f6af20321dc3f0f0577b860b69773048ec9a9a6d40e94d2f4aca5a132897494efd6232446f0d416f1a75c1e7e1e233ad655fc58f85c"], 0xff, 0x6de, &(0x7f0000000180)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x4, 0xb, 0x0, 0xfffffffc, 0x7e, "2b3b7596160c6981acf880594400017f00"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) read$usbmon(r2, &(0x7f0000000340)=""/126, 0x7e) 5.659576803s ago: executing program 3 (id=1817): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x7, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r3, &(0x7f0000000180)="ad0baf5379c99791d8c0f8b29b70f21f6536af72", 0x14, 0x40d4, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1) 5.636323163s ago: executing program 2 (id=1818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1000, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, 0x0) 4.466750016s ago: executing program 2 (id=1820): r0 = socket(0x10, 0x1, 0xfffffffe) sendto$inet6(r0, &(0x7f0000000100)="7800000018002507b9409b14ffff0b000204be040207fe056406040c5c001f003f0006010d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a3200040016000803180000000000e000e218d1ddf66ed538f252325000000000", 0x78, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6a) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000100)={0x5, 0x6a6bcd02, 0xc2, 0xff, 0x3}) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[], 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) write$bt_hci(r4, &(0x7f00000005c0)=ANY=[], 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000218110000", @ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000001200)={'sit0\x00', &(0x7f0000001140)={'syztnl2\x00', 0x0, 0x700, 0x10, 0x6, 0x4, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x66, 0x0, 0x1, 0x2f, 0x0, @empty, @loopback}}}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7, {0x6}}, './file0\x00'}) 4.26612333s ago: executing program 1 (id=1821): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x120000c, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 3.970146945s ago: executing program 1 (id=1823): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) chdir(0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7}}, './file1\x00'}) 3.779171899s ago: executing program 1 (id=1824): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r4], 0x50}}, 0x2) 3.643056741s ago: executing program 4 (id=1825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0x4, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x1, &(0x7f0000ffe000/0x2000)=nil, 0x4) userfaultfd(0x80001) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) userfaultfd(0x80000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000001c0)={0x1}) r5 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000280)='cgroup.controllers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\//\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f081, 0xc, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) syz_fuse_handle_req(r0, &(0x7f0000002100)="6be00ff09321e32a7e0f1d45fb750f1ec1e15be572a7d646754b1e1cea02c1a06d0d9b86514e6d2afce29df5f1c8c9d7fe087f7116a341c9cbd7e536063d42367f79ccea05e0fcf72d19ca8c65612a23cc447ab5982f306298cdfc40a20a86edfb26c58e1491cae8751acfc1a22867f2c866f123215209101ec37c2734d97fb4612d3fcefd3a3c824ace75498471f1e35363631e29cc05b89e0f7c26948edbe418596cbc3c686d37d24c4e049f35e99d6b6de3470b342a4fd59bf1012aa8d0238f32d7f7702e0c293dcf71b3d4b2dc6c6527b070c12a5ae65027998d74526c4ad93283708c59afc157dd299b378f85e159970e6d3a248022714873dd40b54f4418012650d564b568730769a5f27fd458d5f535672fddbd105e2423a85bfdfda463d3cd154ea1185276b3c400ccc39953ef1af942faeff3095d9cdd9bc03374408464d4f85ab3c1fd2965b5e0fbd95a396baf089d5792b3ecc98c536c19b4d3cdf8cb499072f3491f0cf76b5f42ea959c5366ab26f2b7e2539e999d41d6bc583ba13a3f59fc4d3b37eb96374ffc22d53e79198778092656323188c7a052e0d9587a6b80cafa69a0ad770d514e5c9edc0b8556732c04549cc9f4d14299e75514d80b6e026a0f8daea3ff396aff507f89bf2ca4c48d0413f6a37c8ef193dbe07ab52e7487f4e115caa83153f729d4659f51e27939429c41a5e5152eb48e109e81baa49ebf076bb13ebdd031a0c077b18c0db18a085d5b3262cb50649b4e8fecf6b306a0430a8f89e2ff7fda3ca48fb8e2b1aad0999072f20c98466cc868970e53d6860b8fc76fa3b40eb40ab92863469346d5a6860c0297dfa94d908f1168ba2ac5197a9f9cbf3abc32fce7d14ee228d395ae53b1bc374939be6b2a135661048a02aaeeedfc755fe1df353b8e8e0aa093574321ab55fc3d16060ed0cd3e8c3f5954b745048d58061e834cfb142d027c03a69df52118f92acc387a734df458e28cd8324ae588bdcf3c12e4c492e4c14e47dc3efc9123bc189dcc677b619fd8cf34ebed6b73c2c740964072f1d87505ccc4ce189293b0c1e6cd68b8ad7a8cb8b049b8aa4f3675ab09787732643353c4f93cec2787e5ca3b96011459c133cb6947d51c408981798b675b9f9bc2186f016b585bdbb6100434e97033261967b1f6fc02bbe32e4125e922b364757008fff71df0ac6e9479caebefc5255727e8f9deb38bac48fcf65b70b7ff53b1b73682903d1300ba4fe2cf7a7c4b1a561f902d4bdfcc37697c68ff5e4f9bb0722f2be019fa57791da330e8ec69683e7b12d64ec27fe017bb18190609be3a406cc4b1c818e778c404c0e35b1f0cf2e8109f672ee2d649fb71e686930c434ad92fe5d290deed7fdf3fdd71d7409f23daab810569a01a8ae9167e558e71f84f88639ecb5ec1ae0eae0474e37ce81d73c7c93a912a56de243e39995c8d1a6194457509fbd62b94bcce0f1e7b3aca47d36c4874fd1aa8d8d1475a2af2f457ea39004dc3c1834bf20701c00416858c810bd72e8c55f4507c2187d062abf119fe91a1871e423c16964de5351c70dd668f08c99329fe189d78d7944a2e9ce47b2aad9657f8e860ab6bc03c365059528dd28350b84c06c56e87f019a0fe5a71595c7ccbf493c41fe52e907708020cdaf26be8e21d3a97c2ef6dd1de85ac6a9f8ba0771d48353b399555c5b6be41241c9de86888d0fcd5198343ad913fa35da296dc3eeecfe2ee4a56b56bf84e23a3bddc4601b504433b339468f029cd2dd9e637217e5816391010093471cd0ac2d352cb88ff5e5930dd589d1b03c5f408023c8207a1bfc2de6794a65985c1345ab256b8e7990fb8c3fe54b9b76dee19f4a7380a0659b730db58bf69efb51044eb4eaf0df5b7a07baf629a537fdef46c33c6dec622c27dc806025bc0144a3a1a64136cd8e7674a4e01aafaec604ef8356b921be7df063a2ec67dc312d964ff1c30f8d77b7c3e06588ac351a8818701c5b7c9e4b9e9721e12d0bc0731c7e2ccd0b1028e5ac990a3e45c44ba1ce8ea73a54927f6fda6cf5e52253a8ee0df194073fe76568f51c6cf45312f1aec20010db2b59d95d39c3b1a40067e6657964368e12173d71fe2f7950e5f0f3a2923ecd474b623010d77f674e52f23552eece20dccfe15c64fa05ffa6bec88d28fea4b2de624c8dd1106c86b220af9f53f15e00785d764224975efb15f290c4a6af055f7a8baeebe9903c0c9f48b53dc423997adcb8acbe7d82de105383644f9d9f3d8cc8f9a79bfa75c7e1a3f470d2448612ee26950b0affc39e98bb75a30583ae55383d376f22dce6c2cdc544ad8d68fa82e5d16b0a65c63ba4c4fae2ce1269ce321be2a0f2550c2b47c8cca190d0e44af824705dc3d5565c4c0a1ab68c50d83534fb32e7ba31c8dec6a17c127985a516ace1f9016278e85056f6288513ed706b873646e0fe3f1803ce71dc72d91da85ad5d385e0b072b6857ecf36746cceced48b0e4663b92cc349baeec28d27ff568ba9bf4d68191166cf65a13af7cf213c2ffca68b9379ea167c7bda82fa7261e2754a00a6f0b4065c57a8f9868f8247d39eca71faae27afbff8864bf934e746300d5e9a31a4b78ca059bb9c40d30bfe745336264daa57002085686f73f48474e2d4bc1e38e62ed4547a6bbd74b1d9fab3f4b2622eb6c8d32b79ef9ab691fefd7b1bfa787de85ccaa14687be5a0529f928dfd974752bde8b063bc717d2a07eb4a1651f465aa78be32457955f83b2cb4608e22a4ef7bccba0378274289a7adc38521cd8d691741e87b03f536b9196c2284baa062038a22320e6d8c3f9e29051450b16bb7909566e75e6ebe423fa88b7f395c0dae22f027efc014db76ffc4244dfeb4d014809569caed95c43f92486c8d9cde522d403efe788fbc3b54ac39e90bd2f2dc3f3d66308d2df22d9602da5ec2133f296252bf0da014020194cf9ee65e7b137c5488401eba99def61e721fa3889d86ecaa5d5a3e4c8642fc0f9ef43186edd427402f63f06bbfa26850f2e4c71bd6387978a8085740fe4b1012dde14413dfc12052acf9508fd6a8a64f59d5756a59c806b64f42cc4466aed5327071f32fe2cb24aa62d21da4c1de44c2aab46f01c53eef1d83002437668fc494953f4951fcc1bc050e402b7cb73d61b3fae4d806fe6b745160df0a6fb6e830d18b04f142b22de9fe78b4307f95c9badbeeca0a2cb134d229e19fbab6a913ea4a0c59b59ac4e9de55b4fe2d7d5585d57c21678931d151038442fc388557da00dc01bae0c7df06ac72be56668cfd942c9edcfe77c1128a6640ad4d4a210d69d94b5e306b3848c09c61c05ec638096ceff5fc156bd34cc3c461bbc4d3eaee358ce246459f98f15821e181dfec54b87c9c10bf1ae64449ed9e90fa660191d38760117f9a0ae6422ad983e8b348bc0579dba87ad505c24ccb683ffd8f734b8e5f0c65e3a749d86a2fb1aad19abb96490167993fa130db74152d8984084220ad17653c01f3fbbd2e1000d3ace6ed697f0d4a9bdfb2dff49148e8def07acd5e3355370d1c19d3afb7bd12fc30e6acb4841f641672dda483d0afc53150369ce1e2523b3706f5b65542032838d45a5dedfc2369e385390d1628e78dced081b931f67dc75e23cf2b0f529fde6c9c84e4b3894c11b9f56ddc65827f68b0fde08875fa8ad3cac7e212c7727d41f6d51434a890ccac19f3e9b0a594556fbf51e84e874de4e2eeba206369871dd844f6248ec180b3741f2ab3d23b76448562207f577b10f4d14949a926b837252cdcf62af32e83001d63ebde5c1d266c8d2b43f5545dbf070eaa47613481d6c920f1801b490d2a847d7e85872fe75f56d90f050fe741d94511058d71271daf9c565ced757402c315685820c80ed1f6a889a8db0326ecb58f1f287d24c5beb5b19b94d8400aa406daa591e292832c78be74613ffc2a12635951d487650c864ef55927036edb5ec02614e5eb75f67b933220ac39f891c37cc0b7fe23ce8b0ad8e5ec9c0efbfd706f5730c142fbd5297ac7f03f4ca6f49b9cba1e9cbee6b08e936c7ee1642e5f1e3eb566c294d10fc4fb45a7239590cbdebb7a16b972a983748e73aa23be7f66a30c22610456445234bb8ba11b412eaae69b808f76d90b7bb14223b644b8860c550f3c92ae47c06a38429d66da2a414c01985d4b7c935717a4dec2cd4e89092d5dc9aefd0ac0b23481459a2adcb654063743b667c3c3241f203f81385aeef164a0be7655d02074b6710b4e2c50c3ee0747892327e8f22aaf51fccf2b715b24c02c6690389afe83e6128a1ef199234c8c9803124089382c6bed5b296945fcfa937313caf39176b741809c7c7fde30468e8875266315d9e733258b9305cd92276211d0c75c97b103c31c52c0c4dd17dc5931c5a7644ddb15ab8de78cc32125f85b78ba00d09079626a813e589dce18010f427079ec6cb74a2752c7247e7b7df37dc701245e9cf37fbfac5b1c427ba477b15c21d48084d38253a4d49af73d9f25e23333ac3a84e4b671fd31abd4b32441fb07dfe30659915a88ddb684933bee5ee9dccd45763f6544fdacfa4d821f36d7907a42ab9db72b231cbc9e1ddf2000441586eab8d59277955f9665c5e358da456d759490bf9f79462ced96372b237ab61d8b48a78612c64f48d5bd89fb6e67b0818033743b7ffb3305bcdbab0f71b46d5ab61d8190c5106813ca4435386e55e43c6cb925cf81039ed5f11df2d96c53a448519ede7e83dee8b82acd143ce0d1b91318a0f0efdabb77c178cdee559c1d2181600b6b3847e05f41234c5bee021d4f0bbed10cd557f686e8b9769780a13df35fd069855fd8e2aec5bb84e8d0b7740fb7fa88b823826b7e8a979148b95177a2e720b45296c280a9abce6bc5d943e394c07eed5148f86a94450569af8c38e184603abc46a59b2ba01e84225da828ccb93ca557e4ffe9e8e8b98c1fa471409f9d7b9d9da4b0f4fb7d58d7474039204faa2ab1067a2eaf9df247a2ba1b099cdfe79a7db1273e0660e37f6e8afc125564c6b8b5e893231a6addf326988bd78578950e4b2f317ffb322fb44a570587c6c6baa59d6d844454e92f89534c7d902760b984fae30ff5eff5b90fe03f49429c5a5becd275c5c670ae8d39b5faf986970492e579a8d98aed5da2894c96bf8779e9aaba84724bf471734b4d9d4db6a0ebfcb1c31f88c59d4b0f38078435f575b0e7cc7cd5f6cc9a39bf16d3514e89b562ded72187c1e550d4852e9bdc585525d02ed1d3adc819a072d82c37935b2fe6ff3c3f0c7b7fbee2c25ad515835d067ea53af1c6d0b4a9b35de653f2e5a8a1d9261c49813ecab580f368a79515a8621f16b750fa9d711d2884764e222c723e7dd94532de5d5d40fe12660fef784d8ecf2ededbef7a61b881cf61e8c035f31d3801b34ea385fb5fd3895e6789ed741aab0e5d091050f7cde8aa1f4feb53683626870adc4190554316bcea49c6ee182fd66a6ccd2e198ba2ae6f3621a6a6186a6cbd5378e6347afbd88cbff663f73ff568ed47861219eee3598520625f64f7a6303be64361d705021104d9871592d28524f5cf391e7d445746a0e9e42924760e62c955301e1ab3744f79217841a1668a6a871bf2efc278b0bf0b4b46a769caadf243f1af31df19006080d11a4f84ee4932034f48fdde875415d949438e8c1bdea8bb9899c230561482960cac0e77ce78584e35d3430af7ed37ec71f33f265d62b397b99f71aeef08e0a92e221d8ef14c82616d06b1ccafa63969a7ab145928d9c7b1b23e16acc00754ac707f6ce3939b4604baf0f3fa69fa48bb7218f3a992e65a4aabd8a6adf4a7c1e32877273393a1567632348d480a84f3b4ae31eb810a22ccb652064be040c9a90e52b59031a22abfd1840b2ecec89d16426ab31dfb83177ae08255d1424a6ddf8bb5d5adb66a7e6cf7f68be0ce5b4a56fa3463da621062ac85af5334018c3a473c5af9c5686eb9abbd24420293df7ae5fd075b2d3b9aec226e1a016c989b029d1daed5933d285227dbedab33a32b0d71d4cb1fb79c3a8e342fb4126785a3259f241150c7c381918f8f88146fb8fcf14d42ace0fd5c0084db3726575b04ef47c2bd1a0ccf977c8232e1688d4d39c88f7ab8d565b578bed84bbfa17982308a9269933ebd2f7260a67e01a3790fca5673643aff626514846dc1634e3c2fbdb0eaedb163072d9c0bb2fc129aa57618ca1d2b37324aa49972117b9ca81092eb89089659c39eaa380fd950aa914181ac98c1990af713eb834fdb2b731f2791292e9b2774aaf3a091152e25d7ea92a6c80f3217fedba12816ec910677d3381b361272074143fb51f391e6cd1953dd6cbfa33ba97e5d019fddd3da76fe350b767c8eb706a5f46a536c3103da6af42c1a5a7cf488be7f0d3a8ae4598d0d1f4f8339a63c124a5ce1b18a225f840368d390acddeac589093a753ed2e45ae4bfa62f222d4c6a6fbaee8163e76a0bf6291619d3b4af530d03c1769a456ec52491996c6739290f4cd325e9a3c1f0db9b079e5809859f6bb2d6cc494a500862179b65aa65ded80971e60dd9338dddbbf736924626aae8d65fa4a32e8affbf49b5b20c546520aac759594fd996e5f573e8a359dc4192c2723e05d7f8d212d78a03e9a7ee41b3ed6d098964f77e1e96e0e6641222fa247757998d9e9d33787079d1b0913f9b6fd0163f7603d4bbb7430738ab618026ba0526b5722f7c5b155e9c20209ebdac884d4afc34ee32420892acfa0a63d93e1aa4fa71581166d783abe45cbfc66f65c75b803d932dc3a40851508499001dde84fd3646ae3743c1edcfe433579cd41ce625262082cea3e4f87ea17f26c2390e9c134972cbe8291c500ad925f896aeb4d652cc01e397ff9eec6c4ab3d0c43c9774abfddb6b8ac12432f61f90ad6f24fc2f24c47d039e90cbdbdf97ea2c0b1ea6562c1ab651e46adab86814e14e9196366e6da5f16c743baa0d31a1b14200451df59b639dbf0ec8976e31b41462268a66d3fb55b0fb344a587890d92d7df87244b517276d6cef787cecdff92e2293d0d2e51228bba0ba3ba9e57483147727a90ab99b07498a1a9c46cd32e0af493e4c092e515ee9541c678c3566092e62a14a566e225741102071811d3306cb229b8c08da4119a565f9a37c06a983ceef668e7e97df595bdfbb43b0350fc823bcb53630508b3e7a42ff2ad5a8bbe83811c35b78578fa4842122ac76be6e7cd68a9d3ec8c6a3b83edc1f545a1f2a74ce5212f02ba85e104c0e1d21e4f77a7a6a0253fee2d486f65abc1d15e483b7fa87633e1c02e6f5aecdb779dd63af36c457905b2d4bf2c19cd4a4d2475245c45f3ef767654be5c17aa9b3e20f8019d356324baf677e4604e736c2a8b289874accbcb2ba300f063fae2c7d447f9a60daa87592275e501cbe880e7b46230659a7d62fc069ba7bbbbb71cd5ece453a692e2a3620cc8ccab581f4619963b1823c401b84092580dfcba08f63c14cef7963bf6af2d550e2fd43dc2ce1a5079e9018fe1a6ade4496b17f31dba644022c1bec7f7a345f2f02fe4eae1fcf5fb377fbf33c4774843cdbf1357741b0a9be5b403345db08d6ce70e4c5a18cd8725364b4096b69863964dc596cc115105043f6d80603873494c177b886299ca479d1c12a3547ff136a203282df0bcda49100de02b368ea5124385a03280d15319c5a5dd5e150b6eb19c969ca5f3c3368bdceef985c1ee957d5a61b3b9eb1c25e40b280fcec638726f78747dc2944e052c184cde480a6db7a2cd7b75f34cabcb2ca0e105b7af8c5d480b1cdb47d3675daf2e621db6e6e8924c157a028e860adde429979536c0ae06d3665e98166181eb47061fb20b4f0547daa938c54db21518a980ca5670a3dede7eb479497156b4998d11e838b6f112d3dfeae167bc3a8ed7c617fac11907094f25b0939bb9956f7aaeafbfa452ed4ec91b2d1450a43946096cd104a90a73d733da92125de061de39cf8e3d582e80f368b22c66cb69b86677a0af3bffc828ad1769a223f0f98e0857b60bc82f739fd6bbbc9a150830e1e850fa3bbd587bd9ca0fc157fb0b292cc91365348d01c435e2641885891306e177a108712290ec2d1ed3c6ac6d1c49aaffed07b6196787667cd8a7af66a1b631f9e9c6fd668509b7a2e3fb848d99e54e298742ca771bf913e50552faefdc0761a0b1aac3a38669fcead818c26a385ea630960c151199226c23d2b1c9ee42f864d4fe05d22eb826a80ad0738daa292938a4dcfcf18a60642b2b27f0e4998b0569e79c5dff424dd324641eea7b929d13735754b4ba6ba1540bba6b4bee8d3ee3c8eb8900e9c7e36854958f5b632b111abd2f722e2bc8aae4f112f488d8c1e68ba32fe88a39773ed81027a14cfb877ece8772dab7d360fab7cfdbe31a69d218ebdb7b0e42fd8b775348171f0f8a59386fa4fce2fcefefc09cc99a477cb856376541ea5048ab8fdda87ace560a565b2fef28327ca537eea30114a0581fee17e58ed375377a23d8ccbbf757a38aaac794a2630c42f9d4ed91cb886cb5277134b02ab691434ce897c5310472a691f99785cfda982c8e99bd2958589258228a7624137acc14a13414d06f6aee835b3637a0e7367a010652a076b2945fbdadeef39d65d503c18dddf7320fe07873331dcfd16e7cc786cac00d0934cbc6b024547e11132e413b7e5c4f926202128dd1aa76a39065a4228f109bc3327dac7028843868c32fc5d902e882494eb3cf81a90212434d404cbcfa72722e3ffae4079c2e6333a94d5f38e2a2948a01c10ef1a3adf58bae5b5629be02a1de64a201223c23eafd61a5be59c40188fa3463fd64e98f0646a9338bb9ee85f3ae5eabe370727121b4d8559fd32be127a6dbae3c1a0a43ef1173973b3b3332434c6c92b3144d9fb308768ac4067eb72d597b85882e0d228c6dece3da0677d9fa6c0b13788b3c2b0c9e67377ba0ada12aa956672c58f48fa6cfdf0357d3cacaabac46dc438632b1e7edd2e120310e7cd7aa2e55884b422b88e8eb9f5c468c04f9f045f4e5db6e12e9d7330f3e625a7e4676f61f93ef729e8cdcc743c44d409ff5720e85d4d447cfed7f187563ba04add8b27b4d5e1ffdd2bd61a167fcb2da8d58e67479ebc076329d27bd24ecaabc4cb05552a409ce732ecb86a6f0a213e35e53f895bc3c4ae020ece95499d4670375f61a32fa215c956734f5aa8127ec859cac7dfb5768864dbb7591f9d91c05e365c4dbbe864d207bf9eff04c4b3047b68cebef76a7915673dc5ccafceea57e38beb9a69473a1b2ae96c812ad737db0f66e87ca2305dcf4d66369e1afd74412a207a7a2d6d97982e1874afbb6a9b420d88c542bcdf6cf3c471c7535a3444ad20793876793ae8fce30fa468a50ef241a15ec0ea3229b1aafcc76eba39f8cd2a93f23ca2b04c8ab87c4f5a8a9a1db2bbcfc17a7aedf9877b669f8c2a05783586581656064dcfd19200a8f60c4a582766a0ca5148b56cafafc0ef1601336b5398a90d1bf68c6ecfd1ede4613fb9474bba76ac945f51129543e22f14fdea4e83c206032f0b5faa83a1de556d48d5f08bc53879f492897df7a59e0ddd00825706a2ac507e5fb31bad911885ffeb2d2368616786593f4c6a28de95edf2d993dab8412fa5b16eda075a934f46967fb1643085370da9d1e5895a5ddd6898429c85bdd41b28f58cc3e106ab683ecba03253b8122a8a5b6064eca49ebf4133c2351468cd01200332fca0a00c980262de8dcde7f7e145aefe3fa56b2dd6de3f2bd1514f5a2d143457a28bac927c248d4d89779835a83398fd54e7d53d7b2d1940fd12d7bc96e16b0fe15fbf16c3600b891b3bf6723303d01a73120734be1f27d43b5d5c374d6e44f42e0df163d2797da5bb292fbc58f8ac2056dbcb85b31c81d56fad2d70625b1304c04a508d6ccbfce072279358cb065a50f4bdf8c81ddd2d5ecf2b2c2b1015051b465e5ff682c9e3f8160123334b82dfe5a751d8b5f441587bbe7bed1325338cae6a8c06101081a55d499efbf77714e43ac99ecc08965e152bc84faba1bd966f4c01879f24b451b8f3ebae04852de5efd441396a6a871f97ea3dc413174886d71748c8beac5e5d403887e818e335cfdffa9d76b5074a5dcf12ad7725cb83cde0174679c0961643606a03082c5ec01590d687ff5bf9f8b2c3a84bfdb9c25622adc66aeb7f0355efddd4ab9954e5455c2428ee4e5383888ab466bd5fe817eb6b794a555c0eea446287cce32d9efd960e58771ddfb8ee2b4133b79d8953c2ae959a5d6ce09448d50da61bf22268fd32dcd501fd47c6b72cf8f50159a7aeec6e220ca81fc64ff97014ea77b6f791ccf6625eba88f60d1fe699cb16636a9acc4067786c537623c699568112c2093663bfba92ddc1ffcfe93f247f90accc6002faa61f43e54c3fab5e04a6ea1c5415e31ab129f8c9f82c3e3191513a4af151b1d6ab45a2f0eeca83f0870bc40da6257b9ea1c6238171a754995137d4123f2a4888e73db901f70a044ee0dd8176defd5dd82d9fc5a1a0d79effaf86fdf0c0dc4886b6a153b88eabc338c353f5fb040fe34db18211b20f8a3e4589b212e913665506488f21c88f5aec85eb694134a557c95d9a6ab9efc089e5c9848e591e3387cc11ca66fb03ca713513b98ebc2f35befcf64792ef44411e0f75ee4da42dcadfffdf9eecb761bd5e89183881103c5019e1ef3f3d80ba27fb0e1897e925d4122fdf3b3b568cc8795adf98643e86409226f2c5ed87cf481ffcd6e21a2bf0bff07a98bed3be5328118c3cb43c05f1b740242b0855f71400dd155c888b627615488025f81fcc6f5628efaf081489683c6d259c33b591edf4c9a4bfc54802c93ffbba4baf2a5030af8882b7d53eae80720e36a15c6c210658cdffa162630ba5d0217fbbf44879a04d41c58befb8a271abf4460a2d768be38d22f832e3cfad91b90f1b576924c8cbda71bbe89c85c239fa02f69c25e5422c977d97a54954fd16b85970db963db2b132b057a0282aef92614a9148e2a1a1edfa5ec46ae8d662dabae8f8141ea30dfddac44573ff52c3f93d82b0245b03c6db05b540e614cc9e3f702467054d688a92dcc9123f71a064cc52730fc5ee94b2746c80688521cc1cdb0f9455d4875f4af4afdc67d2e389361e1328edad7594d4bc9beec8b935aa3e5e98652c934d14fd16da50d685717303186da715778856da54666448d648d32becd2d63a6503ac21e56317903d15465ac4d3765f7a05420811307f71c1dc55ce5a4cd21130487cb0065397785da5094d27fae505996c1d404399797ff61d40f2ed63fca51db673197cd158a6e9b9ee93bb37df8bbaf92f47493c81c65439d359d578244a7f83629f4323a182e68526d674f4b6b64908350253520a4e564fae27df523e9218ff84f55a7ca622fc2e3bcc5edec9cc45c5a1b4c00c64038afdb165ad0ca3d8b66cea248e6a60a1c6d27e0dd2e5c7eec49fb8227a5266aedbc4fff982ffda402190548fb63fdeb67b3fb0894b11ce904b1c194f8f36cdecddc1312d64e9f227cc4b614b3679f978e0f1b6bb7aaeb2461cd28a94b73dd55eef1d5a98d72b9d8750b2dfe3a3cec044e13a87", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x2008020, &(0x7f0000000380)={[{@metacopy_on}], [{@smackfstransmute={'smackfstransmute', 0x3d, '%:'}}]}) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r2, &(0x7f0000000180)="896102aecdfcc44f", 0x8, 0x3, 0x0, 0xf400}]) 1.836687425s ago: executing program 4 (id=1830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1000, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, 0x0) 1.692466168s ago: executing program 3 (id=1831): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r1, 0x4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000080)="520003000100b8", 0x7) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x400c011}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x38, 0x301, 0x70bd25, 0x25dbdbfa, {0x4}}, 0x14}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="02000000000080008000120008000100767469367400"], 0xa0}}, 0x0) 1.5695225s ago: executing program 4 (id=1832): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x120000c, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f081, 0xc, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) 1.499277362s ago: executing program 0 (id=1833): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x120000c, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000061c0)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.429900903s ago: executing program 2 (id=1834): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000002e00000000000000000000000000000000000000000000f3947b2272d7f77d6c66e7d1a44d22ee7b8b7c59e1bdaa7834dc5a7a7b08884c0199d79cb2ed3deffafbd0aa464dbc6605692c352a916f341ec7d60bcb1a7d9f5c853965e64513ac3da142e2c8fcdc9938b78a8c21695da39612a9313a1b3013182fc7dfd4"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x1c) syz_clone3(&(0x7f0000004dc0)={0x100000900, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) fallocate(r1, 0x52, 0x3, 0xcfd5) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000180)='asymmetric\x00', 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x22, 0x3000000}) accept4$inet(r5, &(0x7f0000000240)={0x2, 0x0, @private}, &(0x7f0000000280)=0x10, 0x80000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x40) 929.986393ms ago: executing program 4 (id=1835): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000840000000100000000000000"], 0x2c}], 0x1, 0x40) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$inet6(r1, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x98081, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0x1, 0x2000c841, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x8}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000080)=""/1, 0x1) shutdown(r3, 0x1) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000003, 0x50, r3, 0x8000000) syz_io_uring_setup(0x27fd, &(0x7f0000000180)={0x0, 0x3e4d, 0x400, 0x3, 0x5e, 0x0, r3}, &(0x7f0000000200), &(0x7f0000000240)=0x0) r7 = syz_io_uring_setup(0x7b4f, &(0x7f00000003c0)={0x0, 0x797c, 0x10, 0x3, 0xf}, &(0x7f00000002c0), &(0x7f0000000340)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000480)=@IORING_OP_MSG_RING={0x28, 0x36, 0x0, r7, 0x0, &(0x7f0000000440)="4b0f1c804d74b064afe99770e8f5bf254bacc18b7e1263b96f9302f16fe1a47f7006f963ac", 0x25, 0x0, 0x0, {0x0, r8}}) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r4, 0x1, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) read$FUSE(r3, &(0x7f0000003b80)={0x2020}, 0x2020) syz_open_dev$hiddev(&(0x7f0000000040), 0x5, 0x0) 639.203928ms ago: executing program 0 (id=1836): r0 = socket(0x10, 0x1, 0xfffffffe) sendto$inet6(r0, &(0x7f0000000100)="7800000018002507b9409b14ffff0b000204be040207fe056406040c5c001f003f0006010d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a3200040016000803180000000000e000e218d1ddf66ed538f252325000000000", 0x78, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6a) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000100)={0x5, 0x6a6bcd02, 0xc2, 0xff, 0x3}) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[], 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) write$bt_hci(r4, &(0x7f00000005c0)=ANY=[], 0x8) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000218110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500007d960a3df16eb8e90000000000950000000000000048fb0ade7a0fc4bd10269cb00a547bd51651ab6f59a9e7cb9b5fa68106d915339b175111033b4413360122c5d5efdcf35e5905957b12e79846df5227822e8479fdb4cc2f72c81e5fb2af6dc03bc8260437217e2f2998cc82307fe9b9d5b1ba57c30040026d9c2504bcd1e2383e6e74c0913744909cad64af06629030cff4092fae6fae6129fa0980cf991c1b92353d318df10ffd0bd00c296e6a661a41d01d8d6609503dc3b450d1d02a58fb3459004500ad51fde3dc49a115a4283e25027f62423160e61d60eff1716be70027bd9779d4a98327d762dbbe1746cf1fbc5ba7bcea30307aa147391691c176cd5c69840e687dd66b3e13268b3294a9917acd381bae5f6b2e07619d3e23f586104d17d061a4af575c757f5c868e42bafe969e7ba3dacc04738e195b510f4dbe450257cc9066d368a75d06b99abe6ea2db2a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000001200)={'sit0\x00', &(0x7f0000001140)={'syztnl2\x00', 0x0, 0x700, 0x10, 0x6, 0x4, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x66, 0x0, 0x1, 0x2f, 0x0, @empty, @loopback}}}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7, {0x6}}, './file0\x00'}) 637.651098ms ago: executing program 3 (id=1837): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r3 = dup2(r2, r2) write$tun(r3, &(0x7f0000000040)=ANY=[], 0x46) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 122.304428ms ago: executing program 2 (id=1838): prlimit64(0x0, 0xe, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) close(0xffffffffffffffff) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r7, 0x0) syz_open_dev$loop(0x0, 0x100000001, 0x4182) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000a40)={{0x2, 0x0, 0x0, 0x5, 'syz0\x00', 0x3}, 0x0, [0x7, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x4000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffff52, 0x53ad, 0x1, 0x0, 0x8, 0x51, 0x4000000000000, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc5a, 0x2, 0x0, 0x0, 0x85, 0x4000000000000000, 0x0, 0x2, 0x0, 0x8, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffb, 0x6, 0x6, 0x0, 0x0, 0x5e, 0x9, 0x100000000000000, 0x7, 0xfffffffffffffffe, 0x0, 0x0, 0x200000000000, 0x1, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x4000000000000003, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0xcb, 0xfffffffffffffffc, 0x0, 0x200, 0x9, 0x5, 0xffffffffffffffff, 0xfffffffffffffff8, 0x7, 0x0, 0x0, 0x10001, 0xebc, 0x0, 0x0, 0x750, 0x5, 0x0, 0x66, 0x7, 0x10000000, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008001, 0x5, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0xf32, 0x3, 0x2, 0x0, 0x0, 0x0, 0xa563, 0x0, 0x80000005, 0x4, 0x0, 0x6, 0x8, 0x1, 0xe, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x2c80000000000000, 0x0, 0x20000000, 0x0, 0x1553, 0x40, 0x0, 0x1, 0x0, 0xf65]}) 0s ago: executing program 4 (id=1839): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0x9}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x40000) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) kernel console output (not intermixed with test programs): (NETDEV_CHANGE): vlan1: link becomes ready [ 84.507985][ T4277] device veth0_vlan entered promiscuous mode [ 84.536205][ T4275] device veth0_macvtap entered promiscuous mode [ 84.557629][ T4275] device veth1_macvtap entered promiscuous mode [ 84.599506][ T4277] device veth1_vlan entered promiscuous mode [ 84.631051][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.645512][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.670752][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.688377][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.699383][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.711057][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.725049][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.737228][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.749617][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.768034][ T4277] device veth0_macvtap entered promiscuous mode [ 84.776040][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.785264][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.797076][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.807446][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.816556][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.825675][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.835715][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.844506][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.854567][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.863776][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.872654][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.882066][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.891613][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.906469][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.917603][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.929802][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.940858][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.951715][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.962843][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.974838][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.995892][ T4277] device veth1_macvtap entered promiscuous mode [ 85.016591][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.027001][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.036960][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.055368][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.064644][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.071165][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.079288][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.091922][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.102251][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.116315][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.141962][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.143445][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.197128][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.207767][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.218582][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.219994][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.242720][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.253662][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.264389][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.274464][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.286059][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.296312][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.307842][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.321068][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.331631][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.349562][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.360223][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.371199][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.381431][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.392241][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.403339][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.414582][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.427225][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.444366][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.457730][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.467339][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.477103][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.487384][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.498652][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.507783][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.526029][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.540309][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.549552][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.553538][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 85.560355][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.571965][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 85.580078][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 85.580743][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 85.599688][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.634755][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 85.749217][ T4386] loop3: detected capacity change from 0 to 8 [ 85.804521][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.825588][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.881010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.953338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.963017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 85.972984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 85.982985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 85.992026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 86.000378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 86.008774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 86.017267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 86.025868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 86.034267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 86.181697][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.190947][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.203787][ T4386] SQUASHFS error: lzo decompression failed, data probably corrupt [ 86.212361][ T4386] SQUASHFS error: Failed to read block 0x0: -5 [ 86.220111][ T4386] SQUASHFS error: lzo decompression failed, data probably corrupt [ 86.228083][ T4386] SQUASHFS error: Failed to read block 0x0: -5 [ 86.305902][ T27] audit: type=1800 audit(1759442555.775:2): pid=4386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 86.346606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.382865][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.429788][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.487812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.538731][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.551796][ T4398] 9pnet_fd: Insufficient options for proto=fd [ 86.579408][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.615974][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.798451][ T4403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 86.860581][ T4403] device wlan1 entered promiscuous mode [ 86.902521][ T4403] device macvtap1 entered promiscuous mode [ 86.916545][ T14] cfg80211: failed to load regulatory.db [ 87.020859][ T4403] device wlan1 left promiscuous mode [ 87.252000][ T27] audit: type=1326 audit(1759442556.785:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4401 comm="syz.2.7" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f7118eec9 code=0x0 [ 87.357174][ T4412] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 88.028798][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.253169][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 88.261976][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 88.342498][ T7] usb 3-1: config 4 interface 0 has no altsetting 0 [ 88.537013][ T7] usb 3-1: string descriptor 0 read error: -22 [ 88.555826][ T7] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 88.569559][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.406698][ T7] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 89.433935][ T7] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 89.460644][ T7] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 89.483106][ T7] usb 3-1: media controller created [ 89.566454][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.674749][ T7] zl10353_read_register: readreg error (reg=127, ret==0) [ 90.737273][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.746582][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.070856][ T4438] loop3: detected capacity change from 0 to 8 [ 91.384017][ T4439] SQUASHFS error: lzo decompression failed, data probably corrupt [ 91.392341][ T4439] SQUASHFS error: Failed to read block 0x0: -5 [ 91.402768][ T4439] SQUASHFS error: lzo decompression failed, data probably corrupt [ 91.410756][ T4439] SQUASHFS error: Failed to read block 0x0: -5 [ 91.418029][ T27] audit: type=1800 audit(1759442560.955:4): pid=4439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.14" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 91.856733][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.897524][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.398242][ T4403] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.408025][ T4403] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.417935][ T4403] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.427231][ T4403] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.593130][ T4430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 92.750457][ T4452] binder: 4451:4452 ioctl c0306201 200000000500 returned -14 [ 92.816892][ T4389] usb 3-1: USB disconnect, device number 2 [ 95.748767][ T4479] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 95.900994][ T27] audit: type=1800 audit(1759442565.435:5): pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.18" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 97.930572][ T4499] binder: 4498:4499 ioctl c0306201 200000000500 returned -14 [ 98.129028][ T4502] loop0: detected capacity change from 0 to 8 [ 98.425930][ T4502] SQUASHFS error: lzo decompression failed, data probably corrupt [ 98.435137][ T4502] SQUASHFS error: Failed to read block 0x0: -5 [ 98.447147][ T4502] SQUASHFS error: lzo decompression failed, data probably corrupt [ 98.455258][ T4502] SQUASHFS error: Failed to read block 0x0: -5 [ 98.528795][ T27] audit: type=1800 audit(1759442567.995:6): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.31" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 101.607944][ T4538] loop4: detected capacity change from 0 to 128 [ 101.704199][ T4538] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.725296][ T4538] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.650667][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 106.143046][ T4561] sched: RT throttling activated [ 109.028684][ T4566] binder_alloc: 4565: binder_alloc_buf, no vma [ 109.073272][ T4566] binder: 4565:4566 ioctl c0306201 200000000500 returned -14 [ 111.188403][ T4579] loop4: detected capacity change from 0 to 128 [ 111.308985][ T4579] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 111.400348][ T4579] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.733032][ T4319] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.354800][ T4319] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 113.368131][ T4319] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 113.379676][ T4319] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.403373][ T4319] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 113.544106][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 113.573105][ T4319] usb 4-1: Product: syz [ 113.577586][ T4319] usb 4-1: Manufacturer: syz [ 113.582349][ T4319] usb 4-1: SerialNumber: syz [ 113.603840][ T4319] usb 4-1: config 0 descriptor?? [ 113.610879][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 113.615192][ T4319] hub 4-1:0.0: bad descriptor, ignoring hub [ 113.626520][ T4319] hub: probe of 4-1:0.0 failed with error -5 [ 113.660771][ T4319] usb 4-1: selecting invalid altsetting 0 [ 114.658737][ T4612] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 115.527149][ T4617] netlink: 'syz.1.65': attribute type 4 has an invalid length. [ 115.633636][ T4621] netlink: 'syz.1.65': attribute type 4 has an invalid length. [ 115.718549][ T4622] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 115.749733][ T27] audit: type=1800 audit(1759442585.285:7): pid=4622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.63" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 117.260407][ T4631] binder_alloc: 4630: binder_alloc_buf, no vma [ 117.301092][ T4631] binder: 4630:4631 ioctl c0306201 200000000500 returned -14 [ 119.118542][ T4652] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 121.263311][ T4389] usb 4-1: USB disconnect, device number 2 [ 121.456875][ T4659] loop1: detected capacity change from 0 to 128 [ 122.950529][ T4659] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 123.085368][ T4659] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.267111][ T4669] loop3: detected capacity change from 0 to 8 [ 124.703567][ T4669] SQUASHFS error: lzo decompression failed, data probably corrupt [ 124.711962][ T4669] SQUASHFS error: Failed to read block 0x0: -5 [ 124.719429][ T4669] SQUASHFS error: lzo decompression failed, data probably corrupt [ 124.729788][ T4669] SQUASHFS error: Failed to read block 0x0: -5 [ 124.807144][ T27] audit: type=1800 audit(1759442594.275:8): pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.77" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 124.932283][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 125.715354][ T4684] random: crng reseeded on system resumption [ 129.318557][ T4701] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 129.374681][ T27] audit: type=1800 audit(1759442598.915:9): pid=4701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.81" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 131.640622][ T4717] loop1: detected capacity change from 0 to 128 [ 131.727301][ T4717] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 131.753504][ T4717] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.475605][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 132.543142][ T4389] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 132.748800][ T4389] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 132.778808][ T4389] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 132.827812][ T4389] usb 4-1: config 0 interface 0 has no altsetting 0 [ 132.859455][ T4389] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 132.890026][ T4389] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 132.941956][ T4389] usb 4-1: Product: syz [ 132.946753][ T4389] usb 4-1: Manufacturer: syz [ 132.966898][ T4389] usb 4-1: SerialNumber: syz [ 132.995461][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.005144][ T4389] usb 4-1: config 0 descriptor?? [ 133.010762][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.041122][ T4389] hub 4-1:0.0: bad descriptor, ignoring hub [ 133.062697][ T4389] hub: probe of 4-1:0.0 failed with error -5 [ 133.108962][ T4389] usb 4-1: selecting invalid altsetting 0 [ 134.378862][ T4740] loop4: detected capacity change from 0 to 8 [ 135.500111][ T27] audit: type=1800 audit(1759442605.025:10): pid=4747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.89" name="file2" dev="loop4" ino=3 res=0 errno=0 [ 135.847068][ T4751] 9pnet_fd: Insufficient options for proto=fd [ 135.948357][ C0] Unknown status report in ack skb [ 136.288528][ T4758] 9pnet_fd: Insufficient options for proto=fd [ 136.991526][ T4763] random: crng reseeded on system resumption [ 138.994454][ T4358] usb 4-1: USB disconnect, device number 3 [ 141.180975][ T4780] loop1: detected capacity change from 0 to 128 [ 141.274107][ T4780] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 141.283636][ T4780] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.138842][ T4787] binder: 4785:4787 ioctl c0306201 200000000500 returned -14 [ 142.210773][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 142.421201][ T4793] fuse: Bad value for 'group_id' [ 142.824831][ T4802] netlink: 'syz.2.108': attribute type 10 has an invalid length. [ 142.833001][ T4802] netlink: 40 bytes leftover after parsing attributes in process `syz.2.108'. [ 142.846627][ T4802] device dummy0 entered promiscuous mode [ 142.919824][ T4802] bridge0: port 3(dummy0) entered blocking state [ 142.930995][ T4802] bridge0: port 3(dummy0) entered disabled state [ 144.146770][ T4802] syz.2.108 (4802) used greatest stack depth: 20800 bytes left [ 146.039935][ T4824] loop3: detected capacity change from 0 to 128 [ 146.087410][ T4824] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 146.107142][ T4824] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.755141][ T4276] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 146.765803][ T4276] Bluetooth: hci0: Injecting HCI hardware error event [ 146.788341][ T4284] Bluetooth: hci0: hardware error 0x00 [ 147.072772][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 147.326604][ T4839] fuse: Bad value for 'group_id' [ 147.397110][ T4842] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 147.540612][ T4843] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 147.959336][ T4850] 9pnet_fd: Insufficient options for proto=fd [ 149.423986][ T4284] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 150.090317][ T4862] netlink: 'syz.4.126': attribute type 10 has an invalid length. [ 150.140991][ T4862] netlink: 40 bytes leftover after parsing attributes in process `syz.4.126'. [ 150.161090][ T4862] device dummy0 entered promiscuous mode [ 150.172443][ T4862] bridge0: port 3(dummy0) entered blocking state [ 150.181446][ T4862] bridge0: port 3(dummy0) entered disabled state [ 150.232164][ T4862] bridge0: port 3(dummy0) entered blocking state [ 150.239015][ T4862] bridge0: port 3(dummy0) entered forwarding state [ 151.059504][ T4872] loop2: detected capacity change from 0 to 128 [ 151.197041][ T4872] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 151.244726][ T4872] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.033116][ T4284] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 152.042078][ T4284] Bluetooth: hci4: Injecting HCI hardware error event [ 152.050783][ T4276] Bluetooth: hci4: hardware error 0x00 [ 152.193610][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 152.458221][ T4891] fuse: Bad value for 'group_id' [ 152.755252][ T4901] loop1: detected capacity change from 0 to 128 [ 152.865009][ T4901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 152.935766][ T4906] binder: BINDER_SET_CONTEXT_MGR already set [ 152.942556][ T4906] binder: 4903:4906 ioctl 4018620d 200000004a80 returned -16 [ 152.983498][ T4907] binder: 4903:4907 ioctl c0306201 200000000500 returned -14 [ 153.010238][ T4901] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.013818][ T4908] netlink: 'syz.2.139': attribute type 10 has an invalid length. [ 153.055328][ T4908] netlink: 40 bytes leftover after parsing attributes in process `syz.2.139'. [ 153.889787][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 153.962188][ T4912] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.987066][ T4920] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 154.193121][ T4276] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 155.129144][ T4940] 9pnet_fd: Insufficient options for proto=fd [ 156.120455][ T4955] loop0: detected capacity change from 0 to 8 [ 156.153088][ T4956] loop4: detected capacity change from 0 to 128 [ 156.807854][ T4960] SQUASHFS error: lzo decompression failed, data probably corrupt [ 156.816448][ T4960] SQUASHFS error: Failed to read block 0x0: -5 [ 156.824162][ T4960] SQUASHFS error: lzo decompression failed, data probably corrupt [ 156.832247][ T4960] SQUASHFS error: Failed to read block 0x0: -5 [ 156.839013][ T27] audit: type=1800 audit(1759442626.375:11): pid=4960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.154" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 157.001122][ T4956] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 157.155858][ T4956] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.806071][ T4965] netlink: 'syz.0.156': attribute type 10 has an invalid length. [ 157.913620][ T4965] netlink: 40 bytes leftover after parsing attributes in process `syz.0.156'. [ 157.914190][ T4972] Bluetooth: MGMT ver 1.22 [ 157.922615][ T4965] device dummy0 entered promiscuous mode [ 157.924405][ T4965] bridge0: port 3(dummy0) entered blocking state [ 157.938364][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 157.947103][ T4965] bridge0: port 3(dummy0) entered disabled state [ 157.987269][ T4965] bridge0: port 3(dummy0) entered blocking state [ 157.993785][ T4965] bridge0: port 3(dummy0) entered forwarding state [ 158.307681][ T4978] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 159.727804][ T4999] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 159.927778][ T5004] 9pnet_fd: Insufficient options for proto=fd [ 160.197739][ T5008] loop0: detected capacity change from 0 to 128 [ 160.271761][ T5008] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 160.297907][ T5008] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 161.131285][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 163.139857][ T5039] 9pnet_fd: Insufficient options for proto=fd [ 163.784437][ T4276] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 163.793965][ T4276] Bluetooth: hci3: Injecting HCI hardware error event [ 163.808327][ T4276] Bluetooth: hci3: hardware error 0x00 [ 164.562820][ T5052] loop3: detected capacity change from 0 to 128 [ 164.627012][ T5052] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 164.752870][ T5052] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 165.148590][ T5057] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 165.415689][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 165.873126][ T4276] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 166.673201][ T4276] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 166.681937][ T4276] Bluetooth: hci2: Injecting HCI hardware error event [ 166.690914][ T4284] Bluetooth: hci2: hardware error 0x00 [ 167.043773][ T5077] 9pnet_fd: Insufficient options for proto=fd [ 167.799061][ T5094] binder: 5092:5094 ioctl c0306201 200000000500 returned -14 [ 168.488249][ T5098] netlink: 'syz.2.198': attribute type 10 has an invalid length. [ 168.503944][ T5098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.198'. [ 168.753039][ T4284] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 169.003798][ T5115] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 169.673735][ T5123] 9pnet_fd: Insufficient options for proto=fd [ 172.597717][ T5148] random: crng reseeded on system resumption [ 173.429531][ T5147] binder: 5146:5147 ioctl c0306201 200000000500 returned -14 [ 173.728797][ T5158] netlink: 'syz.2.217': attribute type 10 has an invalid length. [ 173.755371][ T5158] netlink: 40 bytes leftover after parsing attributes in process `syz.2.217'. [ 173.802594][ T5162] fuse: Bad value for 'fd' [ 174.499783][ T5166] 9pnet_fd: Insufficient options for proto=fd [ 175.263612][ T5177] 9pnet_fd: Insufficient options for proto=fd [ 176.050997][ T5180] loop2: detected capacity change from 0 to 128 [ 176.097462][ T5180] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 176.119461][ T5180] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.501030][ T5195] fuse: Bad value for 'group_id' [ 176.948059][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 177.080758][ T5200] fuse: Unknown parameter 'grou00000000000000000000' [ 177.371802][ T5204] netlink: 'syz.2.234': attribute type 10 has an invalid length. [ 177.442618][ T5204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.234'. [ 178.254453][ T5215] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 179.039461][ T5223] 9pnet_fd: Insufficient options for proto=fd [ 180.113497][ T4284] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 180.122282][ T4284] Bluetooth: hci1: Injecting HCI hardware error event [ 180.131924][ T4276] Bluetooth: hci1: hardware error 0x00 [ 180.183948][ T5237] fuse: Bad value for 'group_id' [ 180.731241][ T5246] fuse: Unknown parameter 'grou00000000000000000000' [ 180.795499][ T5249] loop4: detected capacity change from 0 to 128 [ 180.940208][ T5249] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 180.981688][ T5249] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.886013][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 181.983048][ T5260] netlink: 'syz.1.248': attribute type 10 has an invalid length. [ 181.991356][ T5260] netlink: 40 bytes leftover after parsing attributes in process `syz.1.248'. [ 182.001661][ T5260] device dummy0 entered promiscuous mode [ 182.016619][ T5260] bridge0: port 3(dummy0) entered blocking state [ 182.054366][ T5260] bridge0: port 3(dummy0) entered disabled state [ 183.474164][ T4276] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 183.531683][ T5260] bridge0: port 3(dummy0) entered blocking state [ 183.538420][ T5260] bridge0: port 3(dummy0) entered forwarding state [ 186.347660][ T5293] fuse: Unknown parameter 'grou00000000000000000000' [ 186.539651][ T5297] loop0: detected capacity change from 0 to 8 [ 187.277475][ T5304] SQUASHFS error: lzo decompression failed, data probably corrupt [ 187.285543][ T5304] SQUASHFS error: Failed to read block 0x0: -5 [ 187.292436][ T5304] SQUASHFS error: lzo decompression failed, data probably corrupt [ 187.300452][ T5304] SQUASHFS error: Failed to read block 0x0: -5 [ 187.307108][ T27] audit: type=1800 audit(1759442656.845:12): pid=5304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.261" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 188.902865][ T5317] netlink: 'syz.3.264': attribute type 10 has an invalid length. [ 188.914815][ T5317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.264'. [ 188.926236][ T5317] device dummy0 entered promiscuous mode [ 189.021067][ T5317] bridge0: port 3(dummy0) entered blocking state [ 189.048522][ T5317] bridge0: port 3(dummy0) entered disabled state [ 189.068354][ T5317] bridge0: port 3(dummy0) entered blocking state [ 189.074932][ T5317] bridge0: port 3(dummy0) entered forwarding state [ 190.044752][ T5340] loop1: detected capacity change from 0 to 8 [ 190.735064][ T5340] SQUASHFS error: lzo decompression failed, data probably corrupt [ 190.743210][ T5340] SQUASHFS error: Failed to read block 0x0: -5 [ 190.751136][ T5340] SQUASHFS error: lzo decompression failed, data probably corrupt [ 190.760173][ T5340] SQUASHFS error: Failed to read block 0x0: -5 [ 190.835551][ T27] audit: type=1800 audit(1759442660.305:13): pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.274" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 190.865888][ T5346] loop3: detected capacity change from 0 to 128 [ 190.942414][ T5346] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 191.120353][ T5346] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 192.514997][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 193.825252][ T5376] netlink: 'syz.2.284': attribute type 10 has an invalid length. [ 193.851239][ T5376] netlink: 40 bytes leftover after parsing attributes in process `syz.2.284'. [ 193.975094][ T5380] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 194.436237][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.444723][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.859066][ T5397] loop2: detected capacity change from 0 to 128 [ 195.915957][ T5397] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 195.929655][ T5397] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.071168][ T5406] random: crng reseeded on system resumption [ 198.684477][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 200.234115][ T5429] binder: 5428:5429 ioctl c0306201 200000000500 returned -14 [ 201.230266][ T5440] netlink: 'syz.1.300': attribute type 10 has an invalid length. [ 201.241566][ T5440] netlink: 40 bytes leftover after parsing attributes in process `syz.1.300'. [ 201.269447][ T5444] 9pnet_fd: Insufficient options for proto=fd [ 201.949125][ T5454] loop1: detected capacity change from 0 to 128 [ 201.985923][ T5454] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 202.012408][ T5454] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 202.866823][ T5462] random: crng reseeded on system resumption [ 203.214768][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 205.730410][ T5482] binder: 5481:5482 ioctl c0306201 200000000500 returned -14 [ 207.643292][ T5495] netlink: 'syz.4.316': attribute type 10 has an invalid length. [ 207.651902][ T5495] netlink: 40 bytes leftover after parsing attributes in process `syz.4.316'. [ 207.846970][ T5501] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 207.885119][ T5500] 9pnet_fd: Insufficient options for proto=fd [ 208.548550][ T5505] loop0: detected capacity change from 0 to 128 [ 208.636368][ T5505] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 208.667437][ T5505] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 208.768428][ T5517] random: crng reseeded on system resumption [ 211.177417][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 211.755943][ T5534] binder: 5532:5534 ioctl c0306201 200000000500 returned -14 [ 214.092233][ T5554] 9pnet_fd: Insufficient options for proto=fd [ 214.302220][ T5556] random: crng reseeded on system resumption [ 220.923110][ T5602] random: crng reseeded on system resumption [ 221.544157][ T5608] 9pnet_fd: Insufficient options for proto=fd [ 223.544872][ T5622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 223.590246][ T5622] device wlan1 entered promiscuous mode [ 223.607858][ T5622] device macvtap1 entered promiscuous mode [ 223.671848][ T27] audit: type=1326 audit(1759442693.205:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5621 comm="syz.0.350" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9486b8eec9 code=0x0 [ 223.710066][ T5622] device wlan1 left promiscuous mode [ 224.117346][ T5636] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 225.006231][ T5649] 9pnet_fd: Insufficient options for proto=fd [ 225.060179][ T5653] random: crng reseeded on system resumption [ 226.104703][ T5623] bridge0: port 3(dummy0) entered disabled state [ 226.111243][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.119106][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.705939][ T5665] Zero length message leads to an empty skb [ 229.029178][ T5623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.094268][ T5623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.579882][ T5623] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.591285][ T5623] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.600702][ T5623] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.609981][ T5623] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.767200][ T5695] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.787219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.420946][ T5715] 9pnet_fd: Insufficient options for proto=fd [ 235.758445][ T5724] binder: 5723:5724 ioctl c0306201 200000000500 returned -14 [ 235.776613][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 235.850939][ T5722] device wlan1 entered promiscuous mode [ 235.876843][ T5722] device macvtap1 entered promiscuous mode [ 235.923741][ T5722] device wlan1 left promiscuous mode [ 235.973536][ T27] audit: type=1326 audit(1759442705.515:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz.3.377" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f692978eec9 code=0x0 [ 236.813117][ T5738] random: crng reseeded on system resumption [ 237.508218][ T5734] random: crng reseeded on system resumption [ 239.759045][ T5725] bridge0: port 3(dummy0) entered disabled state [ 239.765856][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.773608][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.880876][ T5754] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 240.474860][ T5725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.575460][ T5725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.055856][ T5725] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.083294][ T5725] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.118481][ T5725] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.149730][ T5725] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.630494][ T5764] 9pnet_fd: Insufficient options for proto=fd [ 243.451850][ T5725] syz.3.377 (5725) used greatest stack depth: 20608 bytes left [ 243.585530][ T5773] binder: 5769:5773 ioctl c0306201 200000000500 returned -14 [ 247.425614][ T5810] 9pnet_fd: Insufficient options for proto=fd [ 248.147491][ T5815] loop0: detected capacity change from 0 to 128 [ 248.269220][ T5815] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 248.357133][ T5815] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 248.389196][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.825820][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 252.189487][ T5863] 9pnet_fd: Insufficient options for proto=fd [ 252.649178][ T5874] random: crng reseeded on system resumption [ 252.733007][ T4444] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 253.097829][ T4444] usb 3-1: config 0 has an invalid descriptor of length 23, skipping remainder of the config [ 253.197629][ T4444] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 253.358895][ T4444] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=63.01 [ 253.500799][ T4444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.709991][ T4444] usb 3-1: Product: syz [ 253.966244][ T4444] usb 3-1: Manufacturer: syz [ 254.274961][ T4444] usb 3-1: SerialNumber: syz [ 254.486349][ T4444] usb 3-1: config 0 descriptor?? [ 254.745044][ T4444] usb 3-1: USB disconnect, device number 3 [ 254.893067][ T4346] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 255.006875][ T5892] loop6: detected capacity change from 0 to 524287999 [ 255.210908][ T4346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.023068][ T5901] random: crng reseeded on system resumption [ 256.394519][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.401104][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.807340][ T4346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.818194][ T4346] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.832623][ T4346] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.843077][ T4346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.857266][ T4346] usb 2-1: config 0 descriptor?? [ 256.887056][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 256.897285][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 256.926695][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 256.936216][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 256.962757][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 256.972376][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 256.982696][ T4346] usb 2-1: can't set config #0, error -71 [ 257.001800][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.011090][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.011369][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.011399][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.011615][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.011642][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.011792][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.011819][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.011973][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.011999][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.012041][ T5892] ldm_validate_partition_table(): Disk read failed. [ 257.012203][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.012229][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.012428][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.012455][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.012763][ T5892] Dev loop6: unable to read RDB block 0 [ 257.016687][ T4346] usb 2-1: USB disconnect, device number 2 [ 257.643923][ T5892] loop6: unable to read partition table [ 257.644193][ T5892] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 258.433882][ T5919] 9pnet_fd: Insufficient options for proto=fd [ 259.193716][ T5939] random: crng reseeded on system resumption [ 260.869928][ T5908] tty tty27: ldisc open failed (-12), clearing slot 26 [ 262.453127][ T5957] random: crng reseeded on system resumption [ 263.299136][ T5960] loop3: detected capacity change from 0 to 128 [ 263.439090][ T5960] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 263.605254][ T5960] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 263.637377][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.993792][ T5973] 9pnet_fd: Insufficient options for proto=fd [ 265.006661][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 265.660592][ T5995] random: crng reseeded on system resumption [ 266.375450][ T6002] binder: 5998:6002 ioctl 4018620d 0 returned -22 [ 266.522201][ T6002] binder: 5998:6002 ioctl c0306201 200000000500 returned -14 [ 268.567858][ T6017] netlink: 'syz.3.460': attribute type 11 has an invalid length. [ 268.680247][ T6023] loop4: detected capacity change from 0 to 128 [ 268.870082][ T6023] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 268.885754][ T6023] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 268.918109][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.984008][ T6029] 9pnet_fd: Insufficient options for proto=fd [ 269.982396][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 270.487707][ T6046] random: crng reseeded on system resumption [ 273.787622][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'. [ 274.063509][ T6084] 9pnet_fd: Insufficient options for proto=fd [ 275.103025][ T4444] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 275.343098][ T4444] usb 2-1: Using ep0 maxpacket: 8 [ 275.352517][ T4444] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 275.374784][ T4444] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.410706][ T4444] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 275.443128][ T4444] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.465684][ T4444] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.495247][ T4444] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 275.537518][ T4444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.776706][ T4444] usb 2-1: usb_control_msg returned -32 [ 275.789402][ T4444] usbtmc 2-1:16.0: can't read capabilities [ 276.242990][ T4444] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 276.446687][ T4444] usb 1-1: Using ep0 maxpacket: 8 [ 276.455366][ T4444] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.480362][ T4444] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.570302][ T4444] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.587357][ T4444] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.623737][ T6105] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 276.662809][ T4444] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 276.677393][ T4444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.923522][ T4444] usb 1-1: GET_CAPABILITIES returned 0 [ 276.936470][ T4444] usbtmc 1-1:16.0: can't read capabilities [ 277.900936][ T6115] 9pnet_fd: Insufficient options for proto=fd [ 277.943725][ T6101] process 'syz.0.483' launched './file1' with NULL argv: empty string added [ 278.009982][ T6115] ======================================================= [ 278.009982][ T6115] WARNING: The mand mount option has been deprecated and [ 278.009982][ T6115] and is ignored by this kernel. Remove the mand [ 278.009982][ T6115] option from the mount to silence this warning. [ 278.009982][ T6115] ======================================================= [ 278.077099][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.414163][ T6121] 9pnet_fd: Insufficient options for proto=fd [ 279.271921][ T6122] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 281.105407][ T4346] usb 1-1: USB disconnect, device number 2 [ 282.869366][ T4346] usb 2-1: USB disconnect, device number 3 [ 284.853074][ T6150] random: crng reseeded on system resumption [ 286.706354][ T6170] loop4: detected capacity change from 0 to 128 [ 286.817549][ T6170] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 286.847708][ T6170] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 287.923315][ T6181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.985724][ T6183] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 288.040718][ T6183] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 288.053753][ T4674] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 288.070733][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 288.132613][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 288.170323][ T6181] bridge0: port 3(dummy0) entered disabled state [ 288.205937][ T6181] device bridge_slave_0 left promiscuous mode [ 288.217125][ T4674] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 288.261365][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.273176][ T5028] bond1: (slave macvlan2): link status up again after 0 ms [ 288.313938][ T4674] bond1: (slave macvlan2): link status up again after 0 ms [ 288.323398][ T6193] binder: 6192:6193 ioctl c0306201 0 returned -14 [ 288.333080][ T75] bond1: (slave macvlan2): link status up again after 0 ms [ 288.349308][ T6193] binder: 6192:6193 ioctl c0306201 200000000500 returned -14 [ 288.358286][ T4674] bond1: (slave macvlan2): link status up again after 0 ms [ 288.393166][ T5028] bond1: (slave macvlan2): link status up again after 0 ms [ 288.401765][ T6181] device bridge_slave_1 left promiscuous mode [ 288.411452][ T6181] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.430944][ T6196] overlayfs: failed to resolve './bus': -2 [ 288.444194][ T6181] bond0: (slave bond_slave_0): Releasing backup interface [ 288.445436][ T5028] bond1: (slave macvlan2): link status up again after 0 ms [ 288.556113][ T5028] bond1: (slave macvlan2): link status up again after 0 ms [ 288.583625][ T6181] bond0: (slave bond_slave_1): Releasing backup interface [ 288.603251][ T75] bond1: (slave macvlan2): link status up again after 0 ms [ 288.623164][ T5028] bond1: (slave macvlan2): link status up again after 0 ms [ 288.653237][ T4689] bond1: (slave macvlan2): link status up again after 0 ms [ 288.831496][ T75] bond1: (slave macvlan2): link status up again after 0 ms [ 288.879119][ T6181] team0: Port device team_slave_0 removed [ 288.892095][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.507'. [ 290.477223][ T9] bond1: (slave macvlan2): link status up again after 0 ms [ 290.515241][ T6181] team0: Port device team_slave_1 removed [ 290.567949][ T9] bond1: (slave macvlan2): link status up again after 0 ms [ 290.617608][ T6181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.698143][ T9] bond1: (slave macvlan2): link status up again after 0 ms [ 290.825944][ T6181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.853267][ T5028] bond1: (slave macvlan2): link status up again after 0 ms [ 290.893463][ T5028] bond1: (slave macvlan2): link status up again after 0 ms [ 290.982989][ T4353] bond1: (slave macvlan2): link status up again after 0 ms [ 290.997427][ T6181] bond1: (slave macvlan2): Removing an active aggregator [ 291.034058][ T6207] hpfs: Bad magic ... probably not HPFS [ 291.068426][ T75] bond1: (slave macvlan2): link status up again after 0 ms [ 291.083646][ T6181] bond1: (slave macvlan2): Releasing backup interface [ 292.214538][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 292.303395][ T6217] device macvtap1 entered promiscuous mode [ 292.333703][ T6217] device wlan1 entered promiscuous mode [ 292.533232][ T6217] device wlan1 left promiscuous mode [ 293.251400][ T27] audit: type=1326 audit(1759442762.785:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.3.511" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f692978eec9 code=0x0 [ 293.512585][ T6231] serio: Serial port ptm0 [ 293.752966][ T4346] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 293.973312][ T4346] usb 4-1: Using ep0 maxpacket: 8 [ 293.988422][ T4346] usb 4-1: unable to get BOS descriptor or descriptor too short [ 294.093934][ T4346] usb 4-1: config 4 interface 0 has no altsetting 0 [ 294.105523][ T6243] device vlan2 entered promiscuous mode [ 294.174846][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 294.214054][ T4346] usb 4-1: string descriptor 0 read error: -22 [ 294.267627][ T4346] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 294.364403][ T4346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.635643][ T4346] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 294.711971][ T4346] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 294.756658][ T4346] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 294.765203][ T4346] usb 4-1: media controller created [ 294.891638][ T4346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.010747][ T4346] zl10353_read_register: readreg error (reg=127, ret==0) [ 296.717545][ T4346] usb 4-1: USB disconnect, device number 4 [ 297.313464][ T6276] random: crng reseeded on system resumption [ 298.372993][ T4333] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 298.596544][ T4333] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.615960][ T4333] usb 4-1: config 0 has no interface number 0 [ 298.646652][ T4333] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 298.702950][ T4333] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 298.762184][ T4333] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 298.806330][ T4333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.864599][ T4333] usb 4-1: config 0 descriptor?? [ 298.903451][ T6275] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 298.941674][ T4333] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 300.024677][ T6288] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 300.139741][ T6291] input: syz1 as /devices/virtual/input/input11 [ 300.344875][ T4333] usb 4-1: USB disconnect, device number 5 [ 300.809725][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 300.833047][ T6306] device wlan1 entered promiscuous mode [ 300.846424][ T6306] device macvtap1 entered promiscuous mode [ 301.053953][ T6306] device wlan1 left promiscuous mode [ 301.057347][ T27] audit: type=1326 audit(1759442770.595:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.1.538" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc89298eec9 code=0x0 [ 301.147900][ T6313] random: crng reseeded on system resumption [ 302.218051][ T27] audit: type=1326 audit(1759442771.735:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 302.241212][ T27] audit: type=1326 audit(1759442771.735:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 302.269219][ T27] audit: type=1326 audit(1759442771.735:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 302.314258][ T27] audit: type=1326 audit(1759442771.735:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 302.367139][ T27] audit: type=1326 audit(1759442771.735:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 302.390431][ T27] audit: type=1326 audit(1759442771.735:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 302.614909][ T27] audit: type=1326 audit(1759442771.735:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 302.638697][ T27] audit: type=1326 audit(1759442771.735:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 302.663019][ T27] audit: type=1326 audit(1759442771.735:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 302.685659][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.245842][ T6307] bridge0: port 3(dummy0) entered disabled state [ 304.252458][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.260066][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.507151][ T6338] Cannot find add_set index 1 as target [ 305.853255][ T6307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.032444][ T6307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.088179][ T6344] syz.4.545 (6344): drop_caches: 2 [ 306.516960][ T6307] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.526564][ T6307] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.537308][ T6307] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.546347][ T6307] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.808849][ T6354] loop2: detected capacity change from 0 to 128 [ 307.590396][ T6343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.545'. [ 308.919355][ T6354] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 308.928571][ T6354] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 308.961190][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.214955][ T6370] random: crng reseeded on system resumption [ 310.111272][ T6376] sctp: [Deprecated]: syz.0.552 (pid 6376) Use of int in maxseg socket option. [ 310.111272][ T6376] Use struct sctp_assoc_value instead [ 310.134724][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 310.242611][ T6378] binder: 6377:6378 ioctl c0306201 200000000500 returned -14 [ 311.761488][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 311.841533][ T6400] device macvtap1 entered promiscuous mode [ 311.867653][ T6400] device wlan1 entered promiscuous mode [ 311.933397][ T6400] device wlan1 left promiscuous mode [ 311.980366][ T27] kauditd_printk_skb: 91 callbacks suppressed [ 311.980380][ T27] audit: type=1326 audit(1759442781.515:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.561" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9486b8eec9 code=0x0 [ 312.523135][ T4318] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 312.559576][ T6412] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 312.783036][ T4318] usb 1-1: Using ep0 maxpacket: 8 [ 312.791823][ T4318] usb 1-1: unable to get BOS descriptor or descriptor too short [ 312.833316][ T4318] usb 1-1: config 4 interface 0 has no altsetting 0 [ 312.878075][ T4318] usb 1-1: string descriptor 0 read error: -22 [ 312.915068][ T4318] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 312.928540][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.990896][ T4318] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 313.067564][ T4318] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 313.105113][ T4318] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 313.138155][ T4318] usb 1-1: media controller created [ 313.223403][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.607113][ T6418] loop3: detected capacity change from 0 to 128 [ 313.723724][ T6418] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 313.774148][ T6418] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 314.378315][ T4318] zl10353_read_register: readreg error (reg=127, ret==0) [ 314.437199][ T6429] random: crng reseeded on system resumption [ 314.643177][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 314.926602][ T4318] usb 1-1: USB disconnect, device number 3 [ 315.037963][ T6437] binder: 6435:6437 ioctl c0306201 200000000500 returned -14 [ 316.765171][ T6443] sctp: failed to load transform for md5: -2 [ 317.325258][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.331886][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.426403][ T6467] 9pnet_fd: Insufficient options for proto=fd [ 319.778196][ T6479] random: crng reseeded on system resumption [ 320.973084][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 321.042301][ T6491] device macvtap1 entered promiscuous mode [ 321.078549][ T6491] device wlan1 entered promiscuous mode [ 321.097185][ T27] audit: type=1326 audit(1759442790.635:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.1.582" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc89298eec9 code=0x0 [ 321.121271][ T6491] device wlan1 left promiscuous mode [ 321.247232][ T6498] mkiss: ax0: crc mode is auto. [ 321.278891][ T6498] comedi comedi0: ni_at_a2150: I/O port conflict (0x4,28) [ 321.553157][ T4379] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 321.701816][ T6508] binder: 6507:6508 ioctl c0306201 200000000500 returned -14 [ 321.743126][ T4379] usb 2-1: Using ep0 maxpacket: 8 [ 321.754685][ T4379] usb 2-1: unable to get BOS descriptor or descriptor too short [ 321.818158][ T4379] usb 2-1: config 4 interface 0 has no altsetting 0 [ 321.863840][ T4379] usb 2-1: string descriptor 0 read error: -22 [ 321.888301][ T4379] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 321.949973][ T4379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.048221][ T4379] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 322.087278][ T4379] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 322.099094][ T4379] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 322.106886][ T4379] usb 2-1: media controller created [ 322.183958][ T4379] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 322.188880][ T6517] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 322.457598][ T6518] kAFS: No cell specified [ 322.469652][ T6518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.589'. [ 323.404839][ T4379] zl10353_read_register: readreg error (reg=127, ret==0) [ 325.469349][ T4311] usb 2-1: USB disconnect, device number 4 [ 325.806854][ T6542] serio: Serial port ptm0 [ 328.376200][ T6564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.604'. [ 329.360484][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.606'. [ 329.397045][ T6571] device macvtap1 entered promiscuous mode [ 329.407753][ T6571] device wlan1 entered promiscuous mode [ 329.435377][ T6571] device wlan1 left promiscuous mode [ 329.518373][ T27] audit: type=1326 audit(1759442799.045:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.0.606" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9486b8eec9 code=0x0 [ 329.683071][ T4379] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 329.884021][ T4379] usb 3-1: Using ep0 maxpacket: 8 [ 329.889342][ T4444] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 329.905196][ T4379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 330.005450][ T4379] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 330.029160][ T4379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.073070][ T4379] usb 3-1: config 0 descriptor?? [ 330.125977][ T4444] usb 1-1: Using ep0 maxpacket: 8 [ 330.153939][ T4444] usb 1-1: unable to get BOS descriptor or descriptor too short [ 330.232491][ T4444] usb 1-1: config 4 interface 0 has no altsetting 0 [ 330.259820][ T4444] usb 1-1: string descriptor 0 read error: -22 [ 330.298117][ T4444] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 330.315258][ T4444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.344582][ T4379] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 330.408539][ T4444] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 330.443136][ T4444] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 330.493416][ T4444] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 330.501134][ T4444] usb 1-1: media controller created [ 330.581183][ T4311] usb 3-1: USB disconnect, device number 4 [ 330.603954][ T4444] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.192980][ T4326] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 331.713372][ T4444] zl10353_read_register: readreg error (reg=127, ret==0) [ 332.419875][ T4333] usb 1-1: USB disconnect, device number 4 [ 335.113849][ T6638] tipc: Started in network mode [ 335.119515][ T6638] tipc: Node identity ac1414aa, cluster identity 4711 [ 335.183869][ T6638] tipc: Enabled bearer , priority 10 [ 335.274865][ T6640] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 335.282954][ T6640] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 335.346925][ T6640] vhci_hcd vhci_hcd.0: Device attached [ 335.533072][ T4444] vhci_hcd: vhci_device speed not set [ 336.175251][ T4318] tipc: Node number set to 2886997162 [ 336.351481][ T6643] vhci_hcd: connection closed [ 336.355363][ T11] vhci_hcd: stop threads [ 336.399169][ T11] vhci_hcd: release socket [ 336.412941][ T4444] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 336.441557][ T11] vhci_hcd: disconnect device [ 340.929384][ T6695] tipc: Can't bind to reserved service type 0 [ 341.558759][ T4444] vhci_hcd: vhci_device speed not set [ 342.326659][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 343.211285][ T6705] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 343.240183][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 343.812675][ T6717] random: crng reseeded on system resumption [ 344.355604][ T4284] Bluetooth: hci5: command 0x1003 tx timeout [ 344.363757][ T4276] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 345.370465][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'. [ 346.333291][ T6730] device macvtap1 entered promiscuous mode [ 346.364306][ T6730] device wlan1 entered promiscuous mode [ 346.423963][ T27] audit: type=1326 audit(1759442815.965:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.2.655" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f7118eec9 code=0x0 [ 346.445909][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.454318][ T6730] device wlan1 left promiscuous mode [ 346.882915][ T4318] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 347.082999][ T4318] usb 3-1: Using ep0 maxpacket: 8 [ 347.091480][ T4318] usb 3-1: unable to get BOS descriptor or descriptor too short [ 347.124568][ T4318] usb 3-1: config 4 interface 0 has no altsetting 0 [ 347.141045][ T6756] random: crng reseeded on system resumption [ 347.169812][ T4318] usb 3-1: string descriptor 0 read error: -22 [ 348.062965][ T4318] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 348.072176][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.117771][ T4318] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 348.143480][ T4318] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 348.160053][ T4318] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 348.173055][ T4318] usb 3-1: media controller created [ 348.192055][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 348.631749][ T4318] zl10353_read_register: readreg error (reg=127, ret==0) [ 349.583780][ T4318] usb 3-1: USB disconnect, device number 5 [ 349.763527][ T6769] overlayfs: missing 'lowerdir' [ 349.768597][ T6779] capability: warning: `syz.3.668' uses deprecated v2 capabilities in a way that may be insecure [ 352.152463][ T6812] random: crng reseeded on system resumption [ 354.044696][ T6832] netlink: 'syz.4.682': attribute type 10 has an invalid length. [ 354.164962][ T6832] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.254452][ T6832] bond0: (slave team0): Enslaving as an active interface with an up link [ 354.470136][ T6845] syz.1.687[6845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.470254][ T6845] syz.1.687[6845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 361.118499][ T6913] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 362.248552][ T6934] input: syz1 as /devices/virtual/input/input12 [ 364.729654][ T6957] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.879256][ T6964] binder: 6962:6964 ioctl c0306201 200000000500 returned -14 [ 366.154044][ T7001] binder: 7000:7001 ioctl c0306201 200000000500 returned -14 [ 366.257166][ T7004] Bluetooth: MGMT ver 1.22 [ 366.543100][ T4311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 366.732920][ T4311] usb 3-1: Using ep0 maxpacket: 16 [ 366.740697][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 366.801058][ T7011] netlink: 'syz.0.731': attribute type 4 has an invalid length. [ 366.821038][ T4311] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 366.890437][ T4311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.938713][ T4311] usb 3-1: Product: syz [ 366.945700][ T7013] netlink: 'syz.0.731': attribute type 4 has an invalid length. [ 366.954347][ T4311] usb 3-1: Manufacturer: syz [ 366.959318][ T4311] usb 3-1: SerialNumber: syz [ 367.028085][ T4311] usb 3-1: config 0 descriptor?? [ 367.052381][ T4311] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 367.074675][ T4311] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 367.657455][ T4311] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 368.082792][ T4311] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 368.091702][ T4311] em28xx 3-1:0.0: board has no eeprom [ 368.263221][ T4311] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 368.271396][ T4311] em28xx 3-1:0.0: dvb set to bulk mode. [ 368.287279][ T4358] em28xx 3-1:0.0: Binding DVB extension [ 368.379302][ T4311] usb 3-1: USB disconnect, device number 6 [ 368.509187][ T4311] em28xx 3-1:0.0: Disconnecting em28xx [ 369.612640][ T4358] em28xx 3-1:0.0: Registering input extension [ 369.726836][ T4311] em28xx 3-1:0.0: Closing input extension [ 370.051284][ T4311] em28xx 3-1:0.0: Freeing device [ 370.747189][ T75] Bluetooth: hci5: Frame reassembly failed (-84) [ 370.888273][ T75] Bluetooth: hci5: Frame reassembly failed (-84) [ 372.753022][ T4276] Bluetooth: hci5: command 0x1003 tx timeout [ 372.761686][ T4285] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 374.657970][ T7100] netlink: 'syz.3.754': attribute type 10 has an invalid length. [ 374.699913][ T7100] netlink: 40 bytes leftover after parsing attributes in process `syz.3.754'. [ 374.851938][ T7100] bridge0: port 1(dummy0) entered blocking state [ 374.918076][ T7100] bridge0: port 1(dummy0) entered disabled state [ 375.393067][ T4448] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 375.473085][ T4444] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 375.582971][ T4448] usb 2-1: Using ep0 maxpacket: 8 [ 375.593395][ T4448] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 375.642222][ T4448] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 375.684631][ T4444] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 375.702168][ T4448] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 375.728789][ T4444] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 375.780219][ T4448] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.821174][ T4444] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.871353][ T4448] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 375.898751][ T4444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.968866][ T4448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.989248][ T4444] usb 5-1: config 0 descriptor?? [ 376.030493][ T4444] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 376.253973][ T4448] usb 2-1: GET_CAPABILITIES returned 0 [ 376.259798][ T4448] usbtmc 2-1:16.0: can't read capabilities [ 376.469726][ T7112] 9pnet_fd: Insufficient options for proto=fd [ 376.909534][ T4448] usb 2-1: USB disconnect, device number 5 [ 377.152008][ T7148] netlink: 'syz.3.767': attribute type 10 has an invalid length. [ 377.202143][ T7148] netlink: 40 bytes leftover after parsing attributes in process `syz.3.767'. [ 378.481805][ T4448] usb 5-1: USB disconnect, device number 2 [ 378.675146][ T7168] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.703455][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 378.718075][ T7169] binder_alloc: 7167: binder_alloc_buf, no vma [ 378.728212][ T7171] serio: Serial port ptm0 [ 378.756499][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.764207][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.559038][ T4689] Bluetooth: hci5: Frame reassembly failed (-84) [ 381.633063][ T4285] Bluetooth: hci5: command 0x1003 tx timeout [ 381.641466][ T4276] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 382.141216][ T7195] netlink: 72 bytes leftover after parsing attributes in process `syz.4.777'. [ 384.810067][ T7219] syz.0.787[7219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.810178][ T7219] syz.0.787[7219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.009291][ T7220] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.429113][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 386.021861][ T7231] binder: 7230:7231 ioctl 80189439 200000000180 returned -22 [ 386.601152][ T7243] netlink: 72 bytes leftover after parsing attributes in process `syz.1.792'. [ 387.292919][ T4448] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 387.669081][ T4448] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 387.710449][ T4448] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.912127][ T4448] usb 5-1: Product: syz [ 388.174293][ T4448] usb 5-1: Manufacturer: syz [ 388.329813][ T4448] usb 5-1: SerialNumber: syz [ 388.410852][ T4448] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 388.597949][ T4448] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 388.823760][ T4326] usb 5-1: USB disconnect, device number 3 [ 389.792920][ T4448] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 390.095458][ T4448] ath9k_htc: Failed to initialize the device [ 390.104836][ T4326] usb 5-1: ath9k_htc: USB layer deinitialized [ 391.460829][ T7279] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 391.729726][ T7283] netlink: 72 bytes leftover after parsing attributes in process `syz.0.805'. [ 393.078639][ T7303] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 393.481637][ T4285] Bluetooth: hci5: command 0x1003 tx timeout [ 393.488458][ T4276] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 395.140667][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'. [ 395.226386][ T7320] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.235823][ T7320] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.244719][ T7320] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.253638][ T7320] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.320698][ T7320] device vxlan0 entered promiscuous mode [ 398.042878][ T4326] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 398.245005][ T4326] usb 5-1: config 0 has an invalid descriptor of length 23, skipping remainder of the config [ 399.437189][ T4326] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 399.490939][ T7357] netlink: 'syz.2.831': attribute type 10 has an invalid length. [ 399.512942][ T7357] netlink: 40 bytes leftover after parsing attributes in process `syz.2.831'. [ 399.601959][ T4326] usb 5-1: string descriptor 0 read error: -71 [ 399.609608][ T4326] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=63.01 [ 399.705007][ T4326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.734193][ T4326] usb 5-1: config 0 descriptor?? [ 399.778659][ T4326] usb 5-1: can't set config #0, error -71 [ 399.826375][ T4326] usb 5-1: USB disconnect, device number 4 [ 399.873661][ T7361] binder: 7360:7361 ioctl c0306201 200000000500 returned -14 [ 400.027325][ T7365] device vlan2 entered promiscuous mode [ 401.279012][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 401.314064][ T7377] device macvtap1 entered promiscuous mode [ 401.329372][ T7377] device wlan1 entered promiscuous mode [ 401.433947][ T7377] device wlan1 left promiscuous mode [ 401.522375][ T27] audit: type=1326 audit(1759442871.055:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.839" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9486b8eec9 code=0x0 [ 401.883076][ T4311] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 403.853072][ T4311] usb 1-1: Using ep0 maxpacket: 8 [ 404.046704][ T4311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 404.093621][ T4311] usb 1-1: config 4 interface 0 has no altsetting 0 [ 404.164621][ T4311] usb 1-1: string descriptor 0 read error: -22 [ 404.214644][ T7403] netlink: 'syz.3.845': attribute type 10 has an invalid length. [ 404.232971][ T7403] netlink: 40 bytes leftover after parsing attributes in process `syz.3.845'. [ 404.233455][ T4311] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 404.412963][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.414323][ T7406] binder: 7405:7406 ioctl c0306201 200000000500 returned -14 [ 404.499303][ T4311] usb 1-1: can't set config #4, error -71 [ 404.539098][ T4311] usb 1-1: USB disconnect, device number 5 [ 405.974997][ T7427] fuse: Bad value for 'fd' [ 406.070826][ T7433] sctp: [Deprecated]: syz.2.857 (pid 7433) Use of int in maxseg socket option. [ 406.070826][ T7433] Use struct sctp_assoc_value instead [ 406.124615][ T7434] netlink: 'syz.0.858': attribute type 10 has an invalid length. [ 406.135663][ T7434] netlink: 40 bytes leftover after parsing attributes in process `syz.0.858'. [ 406.265619][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 406.309423][ T7439] device macvtap1 entered promiscuous mode [ 406.337244][ T7439] device wlan1 entered promiscuous mode [ 406.368805][ T7442] binder: 7441:7442 ioctl c0306201 200000000500 returned -14 [ 406.381652][ T7439] device wlan1 left promiscuous mode [ 406.390692][ T27] audit: type=1326 audit(1759442875.925:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.860" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd40218eec9 code=0x0 [ 407.834234][ T4448] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 407.959425][ T7466] 9pnet_fd: Insufficient options for proto=fd [ 408.829934][ T4448] usb 5-1: Using ep0 maxpacket: 8 [ 408.839709][ T4448] usb 5-1: unable to get BOS descriptor or descriptor too short [ 408.849289][ T4448] usb 5-1: config 4 interface 0 has no altsetting 0 [ 408.861306][ T4448] usb 5-1: string descriptor 0 read error: -22 [ 408.882991][ T4448] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 408.892258][ T4448] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.598695][ T4448] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 409.619442][ T4448] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 409.648892][ T4448] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 409.662969][ T4448] usb 5-1: media controller created [ 409.716680][ T7474] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 409.927332][ T4448] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.163949][ T4448] zl10353_read_register: readreg error (reg=127, ret==0) [ 411.714126][ T4276] Bluetooth: hci5: command 0x1003 tx timeout [ 411.722270][ T4285] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 412.123609][ T7483] 9pnet_fd: Insufficient options for proto=fd [ 412.175998][ T7440] bridge0: port 3(dummy0) entered disabled state [ 412.182912][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.190644][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.832604][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.907509][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.562767][ T7440] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.572595][ T7440] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.588238][ T7440] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.599093][ T7440] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.723861][ T7440] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.734043][ T7440] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.743444][ T7440] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.752642][ T7440] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.792704][ T7496] netlink: 'syz.1.878': attribute type 10 has an invalid length. [ 413.862497][ T7496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.878'. [ 413.980418][ T14] usb 5-1: USB disconnect, device number 5 [ 414.215212][ T7507] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 414.255631][ T7507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.882'. [ 415.906266][ T7521] 9pnet_fd: Insufficient options for proto=fd [ 416.622619][ T7520] random: crng reseeded on system resumption [ 418.625057][ T7532] binder: 7530:7532 ioctl c0306201 200000000500 returned -14 [ 420.308999][ T7554] comedi comedi0: ni_at_a2150: I/O port conflict (0x4,28) [ 420.391456][ T7556] 9pnet_fd: Insufficient options for proto=fd [ 421.137096][ T7555] netlink: 'syz.4.895': attribute type 10 has an invalid length. [ 421.160529][ T7555] netlink: 40 bytes leftover after parsing attributes in process `syz.4.895'. [ 421.788924][ T7572] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.933052][ T7579] device vlan2 entered promiscuous mode [ 423.374424][ T7588] device vlan2 entered promiscuous mode [ 423.383935][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'. [ 423.749339][ T7598] 9pnet_fd: Insufficient options for proto=fd [ 427.570975][ T7642] 9pnet_fd: Insufficient options for proto=fd [ 429.232039][ T7664] kAFS: No cell specified [ 430.647269][ T7679] 9pnet_fd: Insufficient options for proto=fd [ 431.875199][ T7704] kAFS: No cell specified [ 432.109698][ T7709] binder: BINDER_SET_CONTEXT_MGR already set [ 432.114953][ T7711] device vlan2 entered promiscuous mode [ 432.167221][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.957'. [ 432.383481][ T7709] binder: 7705:7709 ioctl 4018620d 200000004a80 returned -16 [ 432.841352][ T7733] fuse: Bad value for 'fd' [ 433.952441][ T7754] kAFS: No cell specified [ 436.301275][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 436.881580][ T7791] kAFS: No cell specified [ 440.194797][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.201271][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.018883][ T7820] random: crng reseeded on system resumption [ 442.670627][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.999'. [ 447.572493][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1025'. [ 454.603173][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'. [ 455.019916][ T8001] netlink: 'syz.4.1052': attribute type 4 has an invalid length. [ 455.060622][ T8001] netlink: 'syz.4.1052': attribute type 4 has an invalid length. [ 460.816765][ T4326] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 461.022868][ T4326] usb 1-1: Using ep0 maxpacket: 32 [ 461.028952][ T4326] usb 1-1: no configurations [ 461.052602][ T4326] usb 1-1: can't read configurations, error -22 [ 461.982900][ T4326] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 462.183250][ T4326] usb 1-1: Using ep0 maxpacket: 32 [ 462.189559][ T4326] usb 1-1: no configurations [ 462.213998][ T4326] usb 1-1: can't read configurations, error -22 [ 462.236321][ T4326] usb usb1-port1: attempt power cycle [ 462.672875][ T4326] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 464.330708][ T8060] netlink: 'syz.1.1073': attribute type 10 has an invalid length. [ 464.338885][ T8060] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1073'. [ 464.495895][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'. [ 464.518030][ T8062] device macvtap1 entered promiscuous mode [ 464.524144][ T8062] device wlan1 entered promiscuous mode [ 464.532523][ T8062] device wlan1 left promiscuous mode [ 464.640631][ T27] audit: type=1326 audit(1759442934.175:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.1.1074" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc89298eec9 code=0x0 [ 465.393398][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'. [ 465.702339][ T4326] usb 1-1: device descriptor read/8, error -71 [ 465.940393][ T8088] binder: BINDER_SET_CONTEXT_MGR already set [ 465.963159][ T8088] binder: 8087:8088 ioctl 4018620d 2000000002c0 returned -16 [ 467.044129][ T8099] netlink: 'syz.1.1084': attribute type 10 has an invalid length. [ 467.054385][ T8099] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1084'. [ 468.071839][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'. [ 468.087553][ T8110] device macvtap1 entered promiscuous mode [ 468.101519][ T8110] device wlan1 entered promiscuous mode [ 468.144037][ T8110] device wlan1 left promiscuous mode [ 468.164329][ T27] audit: type=1326 audit(1759442937.705:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8109 comm="syz.2.1090" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f7118eec9 code=0x0 [ 468.652972][ T4311] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 468.862857][ T4311] usb 3-1: Using ep0 maxpacket: 8 [ 468.864780][ T8104] loop4: detected capacity change from 0 to 32768 [ 468.871164][ T4311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 468.885353][ T4311] usb 3-1: config 4 interface 0 has no altsetting 0 [ 468.898419][ T4311] usb 3-1: string descriptor 0 read error: -22 [ 468.922193][ T4311] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 468.931938][ T4311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.967625][ T4311] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 468.980802][ T4311] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 468.992286][ T4311] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 469.001211][ T4311] usb 3-1: media controller created [ 469.021699][ T4311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 469.025981][ T8129] binder: BINDER_SET_CONTEXT_MGR already set [ 469.107075][ T8129] binder: 8128:8129 ioctl 4018620d 2000000002c0 returned -16 [ 469.291094][ T8104] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 469.447093][ T8104] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 470.123560][ T4311] zl10353_read_register: readreg error (reg=127, ret==0) [ 470.657024][ T4277] ocfs2: Unmounting device (7,4) on (node local) [ 470.792364][ T8146] netlink: 'syz.1.1100': attribute type 10 has an invalid length. [ 470.830373][ T8146] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1100'. [ 472.164492][ T4326] usb 3-1: USB disconnect, device number 7 [ 474.542023][ T8179] netlink: 'syz.4.1111': attribute type 10 has an invalid length. [ 474.582151][ T8179] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1111'. [ 475.081907][ T8191] 9pnet_fd: Insufficient options for proto=fd [ 475.820325][ T8192] kAFS: No cell specified [ 475.834034][ T8192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1113'. [ 478.464725][ T8210] random: crng reseeded on system resumption [ 480.252448][ T8222] loop4: detected capacity change from 0 to 1764 [ 480.550072][ T8217] loop0: detected capacity change from 0 to 4096 [ 482.135369][ T8217] NILFS (loop0): invalid segment: Checksum error in segment payload [ 482.225427][ T8217] NILFS (loop0): trying rollback from an earlier position [ 483.161262][ T8217] NILFS (loop0): recovery complete [ 483.220627][ T8217] NILFS (loop0): error -4 creating segctord thread [ 483.477053][ T8238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1129'. [ 485.738119][ T5028] Bluetooth: hci5: Frame reassembly failed (-84) [ 485.774295][ T8277] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 485.788103][ T5028] Bluetooth: hci5: Frame reassembly failed (-84) [ 485.976409][ T8278] 9pnet_fd: Insufficient options for proto=fd [ 487.793562][ T7479] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 487.793600][ T4284] Bluetooth: hci5: command 0x1003 tx timeout [ 487.981815][ T8286] random: crng reseeded on system resumption [ 491.768536][ T8315] 9pnet_fd: Insufficient options for proto=fd [ 491.960944][ T8322] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 491.971158][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 493.775520][ T8342] random: crng reseeded on system resumption [ 494.033196][ T7479] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 494.040694][ T4284] Bluetooth: hci5: command 0x1003 tx timeout [ 496.993690][ T8367] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.269952][ T8392] random: crng reseeded on system resumption [ 501.684656][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.691687][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.525747][ T8418] random: crng reseeded on system resumption [ 510.860781][ T8458] fuse: Bad value for 'fd' [ 510.909013][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 510.924423][ T8460] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 511.414340][ T8467] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.912985][ T4284] Bluetooth: hci5: command 0x1003 tx timeout [ 512.921664][ T7479] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 514.575689][ T8485] netlink: 'syz.2.1202': attribute type 10 has an invalid length. [ 514.585481][ T8485] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1202'. [ 516.627153][ T8493] random: crng reseeded on system resumption [ 517.777977][ T8510] fuse: Bad value for 'fd' [ 518.111762][ T8514] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1209'. [ 520.521969][ T8539] netlink: 'syz.3.1217': attribute type 10 has an invalid length. [ 520.661623][ T8539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1217'. [ 524.424375][ T8577] netlink: 'syz.3.1232': attribute type 10 has an invalid length. [ 524.445035][ T8577] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1232'. [ 527.442004][ T8606] overlayfs: missing 'lowerdir' [ 527.602655][ T8614] netlink: 'syz.0.1245': attribute type 10 has an invalid length. [ 527.612966][ T8614] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1245'. [ 529.238044][ T8630] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 531.313305][ T4284] Bluetooth: hci5: command 0x1003 tx timeout [ 531.323412][ T7479] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 532.881856][ T8667] netlink: 'syz.2.1263': attribute type 10 has an invalid length. [ 532.893057][ T8667] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1263'. [ 535.210047][ T8688] loop2: detected capacity change from 0 to 8 [ 537.587080][ T8723] netlink: 'syz.2.1283': attribute type 10 has an invalid length. [ 537.597016][ T8723] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1283'. [ 537.856084][ T8725] loop4: detected capacity change from 0 to 8 [ 538.971268][ T8740] random: crng reseeded on system resumption [ 542.560774][ T8779] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 542.887808][ T8783] netlink: 'syz.0.1300': attribute type 10 has an invalid length. [ 542.896207][ T8783] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1300'. [ 544.099967][ T8808] fuse: Unknown parameter 'group_id00000000000000000000' [ 546.089956][ T8831] netlink: 'syz.2.1316': attribute type 10 has an invalid length. [ 546.098176][ T8831] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1316'. [ 548.058541][ T8851] fuse: Unknown parameter 'group_id00000000000000000000' [ 549.381269][ T8885] loop2: detected capacity change from 0 to 2048 [ 549.770122][ T8890] netlink: 'syz.2.1334': attribute type 10 has an invalid length. [ 549.779198][ T8890] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1334'. [ 549.940459][ T8893] fuse: Bad value for 'user_id' [ 550.957083][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 552.177142][ T8929] fuse: Bad value for 'user_id' [ 552.269720][ T8935] netlink: 'syz.0.1350': attribute type 10 has an invalid length. [ 552.280507][ T8935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1350'. [ 556.092504][ T8969] fuse: Bad value for 'user_id' [ 557.534876][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1367'. [ 557.618789][ T8991] netlink: 'syz.0.1368': attribute type 10 has an invalid length. [ 557.629898][ T8991] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1368'. [ 559.066764][ T9016] fuse: Bad value for 'fd' [ 559.141153][ T9018] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1377'. [ 562.710815][ T9051] netlink: 'syz.0.1385': attribute type 10 has an invalid length. [ 562.728377][ T9051] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1385'. [ 563.075292][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.082588][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.203767][ T9068] fuse: Bad value for 'fd' [ 565.262953][ T9070] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1389'. [ 566.015155][ T9072] autofs4:pid:9072:autofs_fill_super: called with bogus options [ 568.990265][ T9105] netlink: 'syz.4.1401': attribute type 10 has an invalid length. [ 569.004342][ T9105] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1401'. [ 571.470359][ T9117] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1403'. [ 572.352578][ T9122] fuse: Bad value for 'fd' [ 572.399172][ T9124] autofs4:pid:9124:autofs_fill_super: called with bogus options [ 573.849533][ T9142] input: syz1 as /devices/virtual/input/input14 [ 574.442613][ T9155] fuse: Unknown parameter 'use00000000000000000000' [ 574.561303][ T9159] netlink: 'syz.4.1417': attribute type 10 has an invalid length. [ 574.569329][ T9159] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1417'. [ 575.398751][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'. [ 576.720432][ T9193] fuse: Unknown parameter 'user_i00000000000000000000' [ 576.781354][ T9195] netlink: 'syz.3.1431': attribute type 10 has an invalid length. [ 576.831362][ T9195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1431'. [ 581.150831][ T9232] fuse: Unknown parameter 'user_i00000000000000000000' [ 581.449803][ T9239] input: syz1 as /devices/virtual/input/input15 [ 582.044830][ T9241] netlink: 'syz.3.1445': attribute type 10 has an invalid length. [ 582.094955][ T9241] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1445'. [ 582.459194][ T9253] random: crng reseeded on system resumption [ 582.575605][ T9255] 9p: Unknown Cache mode readahead [ 584.188867][ T9243] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 584.759697][ T9281] fuse: Bad value for 'fd' [ 585.005602][ T9286] netlink: 'syz.3.1459': attribute type 10 has an invalid length. [ 585.134974][ T9286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1459'. [ 587.944882][ T9312] input: syz1 as /devices/virtual/input/input16 [ 588.300031][ T9321] fuse: Unknown parameter 'user_id00000000000000000000' [ 588.521513][ T9328] fuse: Invalid rootmode [ 588.589710][ T9331] autofs4:pid:9331:autofs_fill_super: called with bogus options [ 589.143671][ T9340] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1478'. [ 590.211098][ T9347] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.225833][ T9357] input: syz1 as /devices/virtual/input/input17 [ 591.278646][ T9361] fuse: Unknown parameter 'user_id00000000000000000000' [ 591.682131][ T9366] fuse: Invalid rootmode [ 592.099100][ T9373] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1490'. [ 592.742433][ T9372] autofs4:pid:9372:autofs_fill_super: called with bogus options [ 592.937894][ T9376] kAFS: No cell specified [ 595.852119][ T9402] fuse: Invalid rootmode [ 596.532177][ T9412] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1504'. [ 597.376128][ T9416] autofs4:pid:9416:autofs_fill_super: called with bogus options [ 597.728440][ T9423] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 598.151374][ T9434] fuse: Bad value for 'fd' [ 599.905808][ T9451] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1516'. [ 600.954053][ T9455] autofs4:pid:9455:autofs_fill_super: called with bogus options [ 601.438910][ T9466] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 601.567400][ T9468] loop2: detected capacity change from 0 to 2048 [ 602.934785][ T9468] UDF-fs: bad mount option "" or missing value [ 603.642118][ T7479] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 603.649562][ T4284] Bluetooth: hci5: command 0x1003 tx timeout [ 604.670422][ T9482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1525'. [ 605.935475][ T9493] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1529'. [ 606.834015][ T9499] autofs4:pid:9499:autofs_fill_super: called with bogus options [ 611.066668][ T9531] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1543'. [ 611.733528][ T7489] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 611.842549][ T9533] autofs4:pid:9533:autofs_fill_super: called with bogus options [ 611.896820][ T9537] fuse: Unknown parameter '0x0000000000000003' [ 611.974586][ T7489] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 613.185838][ T7489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.740238][ T7489] usb 1-1: config 0 descriptor?? [ 614.030328][ T7489] ath6kl: Failed to submit usb control message: -71 [ 614.067791][ T7489] ath6kl: unable to send the bmi data to the device: -71 [ 614.373160][ T7489] ath6kl: Unable to send get target info: -71 [ 614.445775][ T7489] ath6kl: Failed to init ath6kl core: -71 [ 614.543646][ T7489] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 614.581345][ T7489] usb 1-1: USB disconnect, device number 10 [ 616.813919][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1556'. [ 616.853499][ T9578] fuse: Unknown parameter '0x0000000000000003' [ 617.338779][ T9555] loop4: detected capacity change from 0 to 32768 [ 617.782144][ T9593] fuse: Unknown parameter 'grou00000000000000000000' [ 617.962462][ T9581] input: syz1 as /devices/virtual/input/input18 [ 620.181055][ T9615] fuse: Unknown parameter '0x0000000000000003' [ 622.507230][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'. [ 622.928928][ T9636] device syzkaller0 entered promiscuous mode [ 622.945103][ T9636] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1576'. [ 622.971380][ T9636] device vlan4 entered promiscuous mode [ 622.977185][ T9636] device gretap0 entered promiscuous mode [ 623.003652][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 624.515809][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.522345][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.712878][ T9645] fuse: Unknown parameter 'grou00000000000000000000' [ 625.758947][ T9654] fuse: Unknown parameter '0x0000000000000003' [ 628.355970][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1588'. [ 629.272652][ T9692] fuse: Unknown parameter 'grou00000000000000000000' [ 629.440342][ T9694] fuse: Unknown parameter '0x0000000000000003' [ 629.512969][ T7493] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 629.763115][ T7493] usb 3-1: Using ep0 maxpacket: 32 [ 629.778260][ T7493] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.552798][ T7493] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.732509][ T7493] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 630.766498][ T7493] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.694860][ T7493] usb 3-1: config 0 descriptor?? [ 632.645363][ T7493] usbhid 3-1:0.0: can't add hid device: -71 [ 632.651857][ T7493] usbhid: probe of 3-1:0.0 failed with error -71 [ 632.662552][ T9714] loop0: detected capacity change from 0 to 4096 [ 632.729616][ T7493] usb 3-1: USB disconnect, device number 8 [ 632.818895][ T9718] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 632.938437][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1602'. [ 635.257333][ T9731] fuse: Unknown parameter 'group_i00000000000000000000' [ 635.304853][ T9733] fuse: Unknown parameter '0x0000000000000003' [ 639.704796][ T9769] fuse: Unknown parameter 'group_i00000000000000000000' [ 639.994545][ T9777] fuse: Unknown parameter 'fd0x0000000000000003' [ 641.004902][ T14] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 641.273111][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 641.284802][ T14] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 641.304283][ T14] usb 1-1: config 0 has no interface number 0 [ 642.061498][ T14] usb 1-1: config 0 interface 12 has no altsetting 0 [ 642.083668][ T14] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 642.119379][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.135523][ T14] usb 1-1: Product: syz [ 642.159356][ T14] usb 1-1: Manufacturer: syz [ 642.164391][ T14] usb 1-1: SerialNumber: syz [ 642.171373][ T14] usb 1-1: config 0 descriptor?? [ 642.242432][ T9798] fuse: Bad value for 'fd' [ 642.744359][ T9810] fuse: Unknown parameter 'group_i00000000000000000000' [ 642.863573][ T9814] fuse: Unknown parameter 'fd0x0000000000000003' [ 643.141600][ T27] audit: type=1326 audit(1759443112.675:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 643.979360][ T27] audit: type=1326 audit(1759443112.715:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 643.980780][ T14] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 644.074834][ T9821] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 644.102158][ T9821] CIFS: Unable to determine destination address [ 644.234566][ T14] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 644.242553][ T14] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 644.250918][ T14] f81534: probe of 1-1:0.12 failed with error -71 [ 644.292493][ T14] usb 1-1: USB disconnect, device number 11 [ 645.166258][ T27] audit: type=1326 audit(1759443112.715:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 645.189096][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.313438][ T9840] fuse: Bad value for 'fd' [ 645.321219][ T27] audit: type=1326 audit(1759443112.715:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 645.449252][ T27] audit: type=1326 audit(1759443112.715:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 645.472126][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.603093][ T27] audit: type=1326 audit(1759443112.715:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 645.652316][ T27] audit: type=1326 audit(1759443112.715:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 645.675348][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.783667][ T9851] fuse: Unknown parameter 'group_id00000000000000000000' [ 645.819342][ T27] audit: type=1326 audit(1759443112.715:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 645.892634][ T27] audit: type=1326 audit(1759443112.715:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 646.208389][ T27] audit: type=1326 audit(1759443112.775:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 651.689081][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 651.689098][ T27] audit: type=1326 audit(1759443121.225:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7118eec9 code=0x7ffc0000 [ 651.799302][ T27] audit: type=1326 audit(1759443121.225:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7118eec9 code=0x7ffc0000 [ 651.837614][ T27] audit: type=1326 audit(1759443121.255:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f6f7118eec9 code=0x7ffc0000 [ 651.862637][ T9869] CIFS: Unable to determine destination address [ 651.992076][ T27] audit: type=1326 audit(1759443121.255:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7118eec9 code=0x7ffc0000 [ 652.175461][ T27] audit: type=1326 audit(1759443121.255:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7118eec9 code=0x7ffc0000 [ 652.193832][ T9910] fuse: Bad value for 'rootmode' [ 653.144262][ T27] audit: type=1326 audit(1759443121.295:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6f7118eec9 code=0x7ffc0000 [ 653.223402][ T27] audit: type=1326 audit(1759443121.295:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7118eec9 code=0x7ffc0000 [ 653.342633][ T9921] fuse: Unknown parameter 'group_id00000000000000000000' [ 654.157239][ T27] audit: type=1326 audit(1759443121.295:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7118eec9 code=0x7ffc0000 [ 654.191562][ T27] audit: type=1326 audit(1759443121.315:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f6f7118eec9 code=0x7ffc0000 [ 654.215946][ T27] audit: type=1326 audit(1759443121.315:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7118eec9 code=0x7ffc0000 [ 655.302547][ T9930] fuse: Unknown parameter '0x0000000000000003' [ 656.961664][ T5344] Bluetooth: hci5: Frame reassembly failed (-84) [ 657.851038][ T9948] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 658.992839][ T7479] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 658.992878][ T4276] Bluetooth: hci5: command 0x1003 tx timeout [ 659.929468][ T9961] fuse: Bad value for 'rootmode' [ 662.531530][ T9983] fuse: Unknown parameter '0x0000000000000003' [ 664.575377][ T4353] Bluetooth: hci5: Frame reassembly failed (-84) [ 665.370686][T10016] fuse: Unknown parameter 'use00000000000000000000' [ 665.408785][T10013] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 665.439504][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 666.592822][ T4276] Bluetooth: hci5: command 0x1003 tx timeout [ 666.592852][ T7479] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 667.743776][ T5028] Bluetooth: hci6: Frame reassembly failed (-84) [ 668.832924][ T4276] Bluetooth: hci6: command 0x1003 tx timeout [ 668.833020][ T7479] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 668.947484][T10041] fuse: Unknown parameter '0x0000000000000003' [ 673.326297][T10089] overlayfs: missing 'lowerdir' [ 673.860943][T10108] fuse: Unknown parameter '0x0000000000000003' [ 676.341741][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1724'. [ 677.299763][T10145] device macvtap1 entered promiscuous mode [ 677.328640][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 677.328655][ T27] audit: type=1326 audit(1759443146.865:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.4.1724" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd40218eec9 code=0x0 [ 677.403491][T10145] device wlan1 entered promiscuous mode [ 677.462573][T10155] fuse: Unknown parameter '0x0000000000000003' [ 677.488826][T10145] device wlan1 left promiscuous mode [ 677.833011][ T7489] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 677.865937][T10159] overlayfs: missing 'lowerdir' [ 678.073003][ T7489] usb 5-1: Using ep0 maxpacket: 8 [ 678.080789][ T7489] usb 5-1: unable to get BOS descriptor or descriptor too short [ 678.179736][ T7489] usb 5-1: config 4 interface 0 has no altsetting 0 [ 678.230309][ T7489] usb 5-1: string descriptor 0 read error: -22 [ 678.262950][ T7489] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 678.300634][ T7489] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.354063][ T7489] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 678.411534][ T7489] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 678.459334][ T7489] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 678.485812][ T7489] usb 5-1: media controller created [ 678.602162][ T7489] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 679.731754][ T7489] zl10353_read_register: readreg error (reg=127, ret==0) [ 680.012978][ T7489] usb 5-1: USB disconnect, device number 6 [ 681.173152][T10209] fuse: Unknown parameter '0x0000000000000003' [ 681.671300][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 682.471502][T10217] loop2: detected capacity change from 0 to 4096 [ 682.492080][T10220] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 682.531250][T10217] ntfs3: loop2: ino=3, Correct links count -> 2. [ 682.977560][T10217] ntfs3: loop2: failed to convert "0080" to cp874 [ 683.712900][ T7479] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 683.986402][T10231] autofs4:pid:10231:autofs_fill_super: called with bogus options [ 685.573350][T10252] fuse: Unknown parameter 'fd0x0000000000000003' [ 685.980597][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.987340][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.049714][T10241] overlayfs: missing 'lowerdir' [ 690.034822][T10286] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 690.058264][ T4674] Bluetooth: hci5: Frame reassembly failed (-84) [ 692.032988][ T4276] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 692.039943][ T7479] Bluetooth: hci5: command 0x1003 tx timeout [ 693.147845][T10300] fuse: Unknown parameter 'fd0x0000000000000003' [ 695.484942][T10325] overlayfs: missing 'lowerdir' [ 696.434882][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 697.846649][T10383] random: crng reseeded on system resumption [ 698.007999][T10383] Restarting kernel threads ... done. [ 698.433118][ T4276] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 698.439910][ T7479] Bluetooth: hci5: command 0x1003 tx timeout [ 699.825896][T10393] kAFS: No cell specified [ 699.831212][T10393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1794'. [ 700.402636][T10409] fuse: Bad value for 'fd' [ 700.493127][ T7489] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 700.631250][T10398] loop0: detected capacity change from 0 to 32768 [ 700.696151][ T7489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.763992][ T7489] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 700.812489][ T7489] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 700.833950][ T7489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.892376][ T7489] usb 3-1: config 0 descriptor?? [ 700.924138][ T107] read_mapping_page failed! [ 701.329313][ T7489] zydacron 0003:13EC:0006.0001: item fetching failed at offset 2/4 [ 701.347209][ T7489] zydacron 0003:13EC:0006.0001: parse failed [ 701.354895][ T7489] zydacron: probe of 0003:13EC:0006.0001 failed with error -22 [ 701.566301][ T7489] usb 3-1: USB disconnect, device number 9 [ 701.766550][T10411] loop1: detected capacity change from 0 to 32768 [ 701.975242][T10411] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1799 (10411) [ 702.165859][T10411] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 702.237328][T10411] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 702.271834][T10411] BTRFS info (device loop1): using free space tree [ 703.013314][T10411] BTRFS info (device loop1): enabling ssd optimizations [ 703.424980][ T11] Bluetooth: hci6: Frame reassembly failed (-84) [ 703.437426][T10452] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 703.446972][ T11] Bluetooth: hci6: Frame reassembly failed (-84) [ 703.552877][ T4284] Bluetooth: hci5: command 0x1003 tx timeout [ 703.553210][ T4276] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 705.482863][ T7479] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 705.482900][ T4276] Bluetooth: hci6: command 0x1003 tx timeout [ 705.655940][ T4265] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 706.492619][ T27] audit: type=1326 audit(1759443176.025:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 706.532190][T10466] CIFS: Unable to determine destination address [ 706.986454][ T27] audit: type=1326 audit(1759443176.025:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 707.013722][ T27] audit: type=1326 audit(1759443176.055:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 707.115226][ T27] audit: type=1326 audit(1759443176.055:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 707.139290][ T27] audit: type=1326 audit(1759443176.055:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 707.167483][ T27] audit: type=1326 audit(1759443176.065:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 707.190964][ T27] audit: type=1326 audit(1759443176.065:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 707.214636][ T27] audit: type=1326 audit(1759443176.065:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 707.535678][ T27] audit: type=1326 audit(1759443176.065:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 707.588871][ T27] audit: type=1326 audit(1759443176.065:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.3.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692978eec9 code=0x7ffc0000 [ 707.985486][T10488] fuse: Bad value for 'fd' [ 710.047866][T10508] CIFS: Unable to determine destination address [ 711.534886][T10519] fuse: Unknown parameter 'fd0x0000000000000003' [ 711.899441][T10527] fuse: Bad value for 'fd' [ 713.007936][T10516] loop1: detected capacity change from 0 to 32768 [ 713.036321][T10516] [ 713.036321][T10516] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 713.036321][T10516] [ 713.133601][T10516] read_mapping_page failed! [ 713.138553][T10516] ERROR: (device loop1): txCommit: [ 713.138553][T10516] [ 713.244580][T10544] read_mapping_page failed! [ 713.249340][T10544] ERROR: (device loop1): txCommit: [ 713.249340][T10544] [ 713.876623][T10545] ================================================================== [ 713.884890][T10545] BUG: KASAN: slab-out-of-bounds in dtInsertEntry+0xd74/0x1270 [ 713.892557][T10545] Read of size 4 at addr ffff8880494208cc by task syz.1.1828/10545 [ 713.900927][T10545] [ 713.903475][T10545] CPU: 1 PID: 10545 Comm: syz.1.1828 Not tainted syzkaller #0 [ 713.911480][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 713.921859][T10545] Call Trace: [ 713.925178][T10545] [ 713.928169][T10545] dump_stack_lvl+0x168/0x22e [ 713.932897][T10545] ? __lock_acquire+0x7c50/0x7c50 [ 713.938061][T10545] ? show_regs_print_info+0x12/0x12 [ 713.943384][T10545] ? load_image+0x3b0/0x3b0 [ 713.947938][T10545] ? __virt_addr_valid+0x465/0x540 [ 713.953124][T10545] ? dtInsertEntry+0xd74/0x1270 [ 713.958549][T10545] print_report+0xa8/0x210 [ 713.963521][T10545] kasan_report+0x10b/0x140 [ 713.968081][T10545] ? dtInsertEntry+0xd74/0x1270 [ 713.973239][T10545] dtInsertEntry+0xd74/0x1270 [ 713.978513][T10545] ? __get_metapage+0x918/0xfa0 [ 713.984224][T10545] dtSplitPage+0x24f2/0x31d0 [ 713.989345][T10545] dtInsert+0xfbd/0x58a0 [ 713.993913][T10545] ? txLock+0x2ad/0x2090 [ 713.998299][T10545] ? do_raw_spin_lock+0x11d/0x280 [ 714.003936][T10545] ? UniStrupr+0x2e0/0x2e0 [ 714.008763][T10545] ? txLock+0x1121/0x2090 [ 714.013216][T10545] ? dtSearch+0x1c67/0x2050 [ 714.017960][T10545] ? txEnd+0x520/0x520 [ 714.022401][T10545] jfs_create+0x69d/0xa50 [ 714.027039][T10545] ? jfs_lookup+0x380/0x380 [ 714.031939][T10545] ? jfs_get_parent+0xa0/0xa0 [ 714.037658][T10545] ? make_kgid+0x640/0x640 [ 714.042542][T10545] ? generic_permission+0x230/0x510 [ 714.047859][T10545] ? inode_permission+0xef/0x480 [ 714.052845][T10545] ? bpf_lsm_inode_create+0x5/0x10 [ 714.058018][T10545] ? security_inode_create+0xb3/0x100 [ 714.063590][T10545] ? jfs_lookup+0x380/0x380 [ 714.068298][T10545] path_openat+0x1187/0x2e70 [ 714.072951][T10545] ? do_filp_open+0x3c0/0x3c0 [ 714.077789][T10545] do_filp_open+0x1c1/0x3c0 [ 714.082351][T10545] ? vfs_tmpfile+0x480/0x480 [ 714.086983][T10545] ? _raw_spin_unlock+0x24/0x40 [ 714.091961][T10545] ? alloc_fd+0x58f/0x630 [ 714.096369][T10545] do_sys_openat2+0x142/0x490 [ 714.101226][T10545] ? up_read+0x20/0x20 [ 714.105569][T10545] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 714.111803][T10545] ? do_sys_open+0xe0/0xe0 [ 714.116380][T10545] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 714.123135][T10545] ? lock_chain_count+0x20/0x20 [ 714.128140][T10545] __x64_sys_openat+0x135/0x160 [ 714.133055][T10545] do_syscall_64+0x4c/0xa0 [ 714.137584][T10545] ? clear_bhb_loop+0x60/0xb0 [ 714.142630][T10545] ? clear_bhb_loop+0x60/0xb0 [ 714.147513][T10545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.154057][T10545] RIP: 0033:0x7fc89298eec9 [ 714.158708][T10545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.179191][T10545] RSP: 002b:00007fc893747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 714.188014][T10545] RAX: ffffffffffffffda RBX: 00007fc892be6180 RCX: 00007fc89298eec9 [ 714.197112][T10545] RDX: 000000000004ac41 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 714.205911][T10545] RBP: 00007fc892a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 714.214274][T10545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.222496][T10545] R13: 00007fc892be6218 R14: 00007fc892be6180 R15: 00007ffd29e6a168 [ 714.231737][T10545] [ 714.234799][T10545] [ 714.237238][T10545] Allocated by task 10516: [ 714.242260][T10545] kasan_set_track+0x4b/0x70 [ 714.251154][T10545] __kasan_slab_alloc+0x6b/0x80 [ 714.256753][T10545] slab_post_alloc_hook+0x4b/0x480 [ 714.262599][T10545] kmem_cache_alloc_lru+0x11a/0x2e0 [ 714.268211][T10545] jfs_alloc_inode+0x24/0x60 [ 714.274694][T10545] iget_locked+0x1a9/0x830 [ 714.279313][T10545] jfs_iget+0x20/0x3c0 [ 714.283805][T10545] jfs_lookup+0x1c2/0x380 [ 714.288645][T10545] __lookup_slow+0x27d/0x3a0 [ 714.293902][T10545] lookup_slow+0x53/0x70 [ 714.298384][T10545] walk_component+0x2be/0x3f0 [ 714.303685][T10545] path_lookupat+0x169/0x440 [ 714.308490][T10545] filename_lookup+0x1f0/0x500 [ 714.313484][T10545] user_path_at_empty+0x3e/0x60 [ 714.318505][T10545] __se_sys_chdir+0x91/0x280 [ 714.323409][T10545] do_syscall_64+0x4c/0xa0 [ 714.327854][T10545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.333886][T10545] [ 714.336243][T10545] The buggy address belongs to the object at ffff888049420000 [ 714.336243][T10545] which belongs to the cache jfs_ip of size 2240 [ 714.350142][T10545] The buggy address is located 12 bytes to the right of [ 714.350142][T10545] 2240-byte region [ffff888049420000, ffff8880494208c0) [ 714.364136][T10545] [ 714.366481][T10545] The buggy address belongs to the physical page: [ 714.373221][T10545] page:ffffea0001250800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49420 [ 714.383580][T10545] head:ffffea0001250800 order:3 compound_mapcount:0 compound_pincount:0 [ 714.392116][T10545] memcg:ffff88801f7a9801 [ 714.396573][T10545] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 714.404965][T10545] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff8881472d3640 [ 714.414005][T10545] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff88801f7a9801 [ 714.422967][T10545] page dumped because: kasan: bad access detected [ 714.429576][T10545] page_owner tracks the page as allocated [ 714.435549][T10545] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 10516, tgid 10515 (syz.1.1828), ts 713096564069, free_ts 685562036787 [ 714.461935][T10545] post_alloc_hook+0x173/0x1a0 [ 714.467246][T10545] get_page_from_freelist+0x1a26/0x1ac0 [ 714.472911][T10545] __alloc_pages+0x1df/0x4e0 [ 714.477917][T10545] alloc_slab_page+0x5d/0x160 [ 714.482834][T10545] new_slab+0x87/0x2c0 [ 714.486941][T10545] ___slab_alloc+0xbc6/0x1230 [ 714.491829][T10545] kmem_cache_alloc_lru+0x1ae/0x2e0 [ 714.497047][T10545] jfs_alloc_inode+0x24/0x60 [ 714.501751][T10545] iget_locked+0x1a9/0x830 [ 714.506172][T10545] jfs_iget+0x20/0x3c0 [ 714.510280][T10545] jfs_lookup+0x1c2/0x380 [ 714.515062][T10545] __lookup_slow+0x27d/0x3a0 [ 714.520350][T10545] lookup_slow+0x53/0x70 [ 714.524840][T10545] walk_component+0x2be/0x3f0 [ 714.530294][T10545] path_lookupat+0x169/0x440 [ 714.535257][T10545] filename_lookup+0x1f0/0x500 [ 714.540315][T10545] page last free stack trace: [ 714.545263][T10545] free_unref_page_prepare+0x8b4/0x9a0 [ 714.550862][T10545] free_unref_page+0x2e/0x3f0 [ 714.555849][T10545] qlist_free_all+0x76/0xe0 [ 714.560370][T10545] kasan_quarantine_reduce+0x144/0x160 [ 714.566057][T10545] __kasan_slab_alloc+0x1e/0x80 [ 714.571012][T10545] slab_post_alloc_hook+0x4b/0x480 [ 714.576513][T10545] kmem_cache_alloc+0x123/0x2f0 [ 714.581487][T10545] getname_flags+0xb7/0x500 [ 714.586104][T10545] __x64_sys_newfstatat+0x134/0x1e0 [ 714.591573][T10545] do_syscall_64+0x4c/0xa0 [ 714.596096][T10545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.602193][T10545] [ 714.604674][T10545] Memory state around the buggy address: [ 714.610709][T10545] ffff888049420780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 714.619022][T10545] ffff888049420800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 714.627239][T10545] >ffff888049420880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 714.635702][T10545] ^ [ 714.642503][T10545] ffff888049420900: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 714.651475][T10545] ffff888049420980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 714.660169][T10545] ================================================================== [ 714.979631][T10545] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 714.987057][T10545] CPU: 0 PID: 10545 Comm: syz.1.1828 Not tainted syzkaller #0 [ 714.994634][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 715.004705][T10545] Call Trace: [ 715.008098][T10545] [ 715.011133][T10545] dump_stack_lvl+0x168/0x22e [ 715.015887][T10545] ? memcpy+0x3c/0x60 [ 715.020210][T10545] ? show_regs_print_info+0x12/0x12 [ 715.025998][T10545] ? load_image+0x3b0/0x3b0 [ 715.031072][T10545] panic+0x2c9/0x710 [ 715.035446][T10545] ? bpf_jit_dump+0xd0/0xd0 [ 715.040259][T10545] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 715.046181][T10545] ? _raw_spin_unlock+0x40/0x40 [ 715.051241][T10545] ? print_memory_metadata+0x314/0x400 [ 715.056730][T10545] check_panic_on_warn+0x80/0xa0 [ 715.061781][T10545] ? dtInsertEntry+0xd74/0x1270 [ 715.066748][T10545] end_report+0x66/0x110 [ 715.071029][T10545] kasan_report+0x118/0x140 [ 715.075831][T10545] ? dtInsertEntry+0xd74/0x1270 [ 715.080716][T10545] dtInsertEntry+0xd74/0x1270 [ 715.085612][T10545] ? __get_metapage+0x918/0xfa0 [ 715.090496][T10545] dtSplitPage+0x24f2/0x31d0 [ 715.095136][T10545] dtInsert+0xfbd/0x58a0 [ 715.099405][T10545] ? txLock+0x2ad/0x2090 [ 715.104177][T10545] ? do_raw_spin_lock+0x11d/0x280 [ 715.109265][T10545] ? UniStrupr+0x2e0/0x2e0 [ 715.114406][T10545] ? txLock+0x1121/0x2090 [ 715.118851][T10545] ? dtSearch+0x1c67/0x2050 [ 715.123743][T10545] ? txEnd+0x520/0x520 [ 715.127846][T10545] jfs_create+0x69d/0xa50 [ 715.132757][T10545] ? jfs_lookup+0x380/0x380 [ 715.137495][T10545] ? jfs_get_parent+0xa0/0xa0 [ 715.142292][T10545] ? make_kgid+0x640/0x640 [ 715.146909][T10545] ? generic_permission+0x230/0x510 [ 715.152778][T10545] ? inode_permission+0xef/0x480 [ 715.158301][T10545] ? bpf_lsm_inode_create+0x5/0x10 [ 715.164661][T10545] ? security_inode_create+0xb3/0x100 [ 715.170068][T10545] ? jfs_lookup+0x380/0x380 [ 715.176065][T10545] path_openat+0x1187/0x2e70 [ 715.180958][T10545] ? do_filp_open+0x3c0/0x3c0 [ 715.185755][T10545] do_filp_open+0x1c1/0x3c0 [ 715.190573][T10545] ? vfs_tmpfile+0x480/0x480 [ 715.195324][T10545] ? _raw_spin_unlock+0x24/0x40 [ 715.200302][T10545] ? alloc_fd+0x58f/0x630 [ 715.205122][T10545] do_sys_openat2+0x142/0x490 [ 715.209859][T10545] ? up_read+0x20/0x20 [ 715.213988][T10545] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 715.220088][T10545] ? do_sys_open+0xe0/0xe0 [ 715.224524][T10545] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 715.230704][T10545] ? lock_chain_count+0x20/0x20 [ 715.235572][T10545] __x64_sys_openat+0x135/0x160 [ 715.240531][T10545] do_syscall_64+0x4c/0xa0 [ 715.245043][T10545] ? clear_bhb_loop+0x60/0xb0 [ 715.249823][T10545] ? clear_bhb_loop+0x60/0xb0 [ 715.254518][T10545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.260519][T10545] RIP: 0033:0x7fc89298eec9 [ 715.264945][T10545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.284996][T10545] RSP: 002b:00007fc893747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 715.293421][T10545] RAX: ffffffffffffffda RBX: 00007fc892be6180 RCX: 00007fc89298eec9 [ 715.301502][T10545] RDX: 000000000004ac41 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 715.309909][T10545] RBP: 00007fc892a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 715.318055][T10545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.326424][T10545] R13: 00007fc892be6218 R14: 00007fc892be6180 R15: 00007ffd29e6a168 [ 715.334854][T10545] [ 715.338357][T10545] Kernel Offset: disabled [ 715.342745][T10545] Rebooting in 86400 seconds..