last executing test programs: 10m17.814691657s ago: executing program 0 (id=128): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000a40)='dW'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10m17.649846529s ago: executing program 0 (id=130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 10m16.236958063s ago: executing program 0 (id=134): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045730, &(0x7f0000002780)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf028, 0x118000}) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5c7ac135fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="86", 0x1}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="7800000000000000130000000800000010d8ad7d774bb174d3178a998e571d1cb7d983f5de19ddf2ee6f0615ceeee95e2d00efd6e089d27c98c0aa3bd2848b87985e93671a60af586b066ab44d10a710327f30d302f50decaacf03b4f16479fb8b8aefb2c0d9a8b63b0dd71a71be603592b0abe89b0d0000a8"], 0x120}, 0x4000041) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 10m15.402451327s ago: executing program 0 (id=135): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140)={[{@mblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0xfc, 0x474, &(0x7f00000003c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) mount(0x0, 0x0, 0x0, 0x1001000, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x41) preadv2(r1, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b) 10m12.536688046s ago: executing program 0 (id=145): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 10m10.297341964s ago: executing program 0 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10m9.784810372s ago: executing program 32 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7m40.163090673s ago: executing program 2 (id=577): socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0xffffff83}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m38.484638851s ago: executing program 2 (id=582): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, 0x0, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000080)) setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) 7m33.058263263s ago: executing program 2 (id=596): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@gid}, {@gid}, {@nostrict}, {@uid}, {@uid_ignore}, {@gid_ignore}, {@anchor={'anchor', 0x3d, 0x1}}, {@noadinicb}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) 7m29.250155358s ago: executing program 2 (id=610): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@resgid}, {@bh}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xfe, 0x445, &(0x7f0000000900)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) getgroups(0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32313b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 7m27.134084534s ago: executing program 2 (id=613): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) 7m26.313366807s ago: executing program 2 (id=617): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000020000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) 7m10.550013644s ago: executing program 33 (id=617): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000020000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) 4m27.365430646s ago: executing program 1 (id=1082): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m27.272096358s ago: executing program 1 (id=1084): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x140, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2b442, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r0}, 0x50) r1 = syz_io_uring_setup(0x42e9, &(0x7f0000000200)={0x0, 0xfe3a, 0x0, 0x3, 0x20000}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, 0x0, 0x0}, 0x20) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 4m27.027428892s ago: executing program 1 (id=1085): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000400), &(0x7f0000000380)=@tcp6}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000d00), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000000c0)={r6, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) 4m25.863286003s ago: executing program 1 (id=1089): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x22020600) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0x36, 0x0, &(0x7f00000004c0)="348b0d151f8218e2c73697e4080049c416b90900000093321cfc5e8b99025e8b9900683341b35e6d1276299a0e3e29968c2974f50acc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m24.750040772s ago: executing program 1 (id=1091): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg$unix(r5, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44081}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0xc, 0x117, 0x2}}], 0xc, 0x850}}], 0x2, 0x20000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000000c0)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 'veth0_to_bridge\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth0_virt_wifi\x00'}}) syz_emit_ethernet(0x76, &(0x7f00000004c0)={@broadcast, @random='\x00\x00B\f\x00', @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @mcast2, [@hopopts={0x11}], "fafb17c133d11e59"}}}}}}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x14200, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x34, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc080}, 0x40000) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) 4m23.506245484s ago: executing program 1 (id=1098): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) 4m7.28794202s ago: executing program 34 (id=1098): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) 13.194739028s ago: executing program 3 (id=1626): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000540)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x7, 0xffff, 0x80, 0x6}, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0x34, 0x11, 0xff, @rand_addr=' \x01\x00', @empty, {[@fragment={0x45, 0x0, 0x9, 0x1, 0x0, 0x8, 0x65}], {0x4e24, 0x4e21, 0x2c, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e0613"}}}}}, 0x6a) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000480)={'wlan1\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) 12.064917528s ago: executing program 4 (id=1631): openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) eventfd2(0xb0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) 9.749934389s ago: executing program 7 (id=1632): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r1, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, 0xc00, 0x0, 0x0, 0x0, &(0x7f0000002400)=""/4098, 0xffffffffffffffbb, 0x0, 0x0, 0x5b}, &(0x7f0000000000)=0x43) io_destroy(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e374c0c0980fc6310000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x1ff, 0x3, {}, {0xee00}, 0x1}) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000902, r7, &(0x7f0000000240)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r9, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r4, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r9}, 0x14) 9.68224998s ago: executing program 5 (id=1634): syz_open_dev$sndmidi(0x0, 0x2, 0x141121) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000740)={0x1f, @none}, 0x8) fcntl$dupfd(r0, 0x0, r1) accept4(r4, 0x0, 0x0, 0x80800) 9.64493372s ago: executing program 3 (id=1635): mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000002400)=ANY=[]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x85c, 0x1f5100) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000140)={0x0, 0x2}) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000080)={@broadcast, @local, @void, {@llc={0x4, {@llc={0x42, 0x0, 'C', "ea"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 8.405969672s ago: executing program 4 (id=1636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x4dd4a000) fanotify_init(0x0, 0x8000) r4 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r4, &(0x7f0000000340)=@profile={'stack ', 'sched_switch\x00'}, 0x13) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) syz_clone3(&(0x7f0000000580)={0x3780, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8.118433787s ago: executing program 3 (id=1637): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x2040) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0xb, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r4, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 8.117936697s ago: executing program 6 (id=1638): syz_open_dev$sndmidi(0x0, 0x2, 0x141121) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000740)={0x1f, @none}, 0x8) fcntl$dupfd(r0, 0x0, r1) accept4(r4, 0x0, 0x0, 0x80800) 8.077078408s ago: executing program 5 (id=1639): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6(0xa, 0x3, 0x8000000003c) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x3}}, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 7.932992961s ago: executing program 7 (id=1640): syz_open_dev$sndmidi(0x0, 0x2, 0x141121) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000740)={0x1f, @none}, 0x8) fcntl$dupfd(r0, 0x0, r1) accept4(r4, 0x0, 0x0, 0x80800) 6.959697088s ago: executing program 4 (id=1641): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$cec(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00'}, 0x10) fchdir(r4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f00000003c0)={0xf0, 0x0, 0x2}) 6.85585535s ago: executing program 6 (id=1642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_settime(0x0, 0x1, &(0x7f0000000980)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000001100)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_debug_messages', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x6) 6.518652125s ago: executing program 5 (id=1643): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000400)="f81da85b6eb73d7efae6dc5fedb3bdc4321d31f81d5fb67acf37aca1dae3ac9912892ee476427a4bbd411e4c0036bababb0e6be02c4eb7e0a3f8ab12fea481114fe0205162e00d1e3912292836c4ccdf73852960582592c8c027869bcd79550fa18ecd713844cebe898000"/120, 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0xc4) r6 = epoll_create1(0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="020200020d00000000000000000000000200080008000000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff00000000000000000300050000000000020000000000000000000000000000000100140000000000f7799d882160f53ff47b5679c292cab89c0d521949c1924b2e3487edbdd9876408cbc4ad3ba9"], 0x68}, 0x1, 0x7}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000340)={0xa000001c}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 6.434317667s ago: executing program 7 (id=1644): syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0xfd, 0x146, &(0x7f00000002c0)="$eJzsj79LOnEcxl/39de30jQwsKAIGhLDPE9sa9BIErKDwqUp0IsCTVEIx2pu6A9wKIImcYjGhrLJUgj7O9yCxuLjXYXQ0v55LXfv1/PwcLe20g3iAxsmq6ViuWJUq0Z+bkvPpLZvbu/GhXcB/weNYrkiynmzf5+AffG0Q//E1I+ef0DBWMqVCuLuJyAIJMdg78CBitkdFc4vXMGIWi44D61J02m/uJjlpu2Q9JpO7H1cwoLYm/jZewNqdYf1Z+HQ9YwtYR3U6ovNxtNmp50Oh2aNMy01deUO2MgaTkAR+WukHX6JNBu9biezoWf0bkzTlmNqVFXjPf25k44fn2Nfdx/BjjK85xQbWThVoK5AY5D3HxQP0Lp414tel38EOPSBMpwo1veZSW434PgyfL9IJBKJRCKRSCQSiUTyVz4DAAD//0wAXes=") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) execve(&(0x7f00000003c0)='./file2\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000580)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) sendmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x24005805) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000153201, 0x0) 5.735222629s ago: executing program 3 (id=1645): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@nojournal_checksum}, {@nombcache}, {@acl}, {@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x400}}, {@nodelalloc}, {@grpid}, {@usrquota}, {@noauto_da_alloc}, {@usrjquota}, {@errors_continue}]}, 0xff, 0x55c, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) fsmount(r4, 0x0, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r5 = dup(r0) write$UHID_INPUT(r5, &(0x7f0000000300)={0xd, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f35006c090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc10700000032d0ad7bc946813591bd8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x221ce9d, &(0x7f000000aa80)={[{@barrier}, {@nodiscard}, {@inode32}, {@noikeep}, {@nogrpid}, {@noattr2}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0x0, 0x9774, &(0x7f000000c3c0)="$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") 5.734281319s ago: executing program 6 (id=1655): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 5.506536333s ago: executing program 4 (id=1646): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1d6) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') socket$alg(0x26, 0x5, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f0000000040)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@nouser_xattr}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@noacl}, {@nodiscard}, {@noauto_da_alloc}, {@resgid, 0x32}]}, 0x9b, 0x4dc, &(0x7f0000000f40)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}, 0x1, 0x0, 0x0, 0x20048094}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@noquota}, {@debug}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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") sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) setsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc74, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x4, 0x7, 0x3, 0x38415262, [0x9, 0x7], [0x85, 0x3d36], 0x1}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) 4.497262401s ago: executing program 5 (id=1647): mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000002400)=ANY=[]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x85c, 0x1f5100) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000140)={0x0, 0x2}) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000080)={@broadcast, @local, @void, {@llc={0x4, {@llc={0x42, 0x0, 'C', "ea"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 4.493580701s ago: executing program 6 (id=1648): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0, 0x0, 0x8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdir(0x0, 0x94) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x10, 0x3, 0x0) 4.443365842s ago: executing program 7 (id=1649): syz_open_dev$sndmidi(0x0, 0x2, 0x141121) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 3.40588737s ago: executing program 5 (id=1650): syz_open_dev$sndmidi(0x0, 0x2, 0x141121) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000740)={0x1f, @none}, 0x8) fcntl$dupfd(r0, 0x0, r1) accept4(r4, 0x0, 0x0, 0x80800) 3.161797745s ago: executing program 4 (id=1651): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x1000) fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r2, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) 1.362952147s ago: executing program 6 (id=1652): syz_open_dev$sndmidi(0x0, 0x2, 0x141121) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000740)={0x1f, @none}, 0x8) fcntl$dupfd(r0, 0x0, r1) accept4(r4, 0x0, 0x0, 0x80800) 1.223771869s ago: executing program 7 (id=1653): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6(0xa, 0x3, 0x8000000003c) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x3}}, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 1.183170359s ago: executing program 3 (id=1654): syz_open_dev$sndmidi(0x0, 0x2, 0x141121) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000740)={0x1f, @none}, 0x8) fcntl$dupfd(r0, 0x0, r1) accept4(r4, 0x0, 0x0, 0x80800) 1.1709776s ago: executing program 4 (id=1656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xfffffffffffffe36, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x111, 0x4b4, 0x148, 0xd4feffff, 0x210, 0x20a, 0x278, 0x210, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0x0, 0xffffff80], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x120, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e22, 0x4e20, 0x4e20, 0x4e24, 0x4e23, 0x4e20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e22, 0x4e23, 0x4e20, 0x4e21, 0x4e22], [0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x3e}}, @common=@unspec=@cpu={{0x28}, {0xe73}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x7, 0x800}}}, {{@ipv6={@remote, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xffff}}]}}]}, 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r7, 0x0, 0x0) r8 = accept4$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000380)=0x1c, 0x80000) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000440)={r8}) connect$netrom(r7, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', r5, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) 191.289477ms ago: executing program 6 (id=1657): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$cec(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00'}, 0x10) fchdir(r4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f00000003c0)={0xf0, 0x0, 0x2}) 63.835119ms ago: executing program 3 (id=1658): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r0, 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0x36, 0x0, &(0x7f00000004c0)="348b0d151f8218e2c73697e4080049c416b90900000093321cfc5e8b99025e8b9900683341b35e6d1276299a0e3e29968c2974f50acc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 62.775739ms ago: executing program 5 (id=1659): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x2) r3 = fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r4 = syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000040)={0x5, @raw_data="bd0aef2d3e67c1d06b522f13ad26a98c6d8a7cdfabd3751acc81b3fc48407aa357e34e0656951bfd76f2518c27e968213613fbd85c81cb55f9979b932d8bcb54715ff51f5c14d95718531d1b2d1928e84fb05e5607ca70da12af99dc3729a3fb03e429acdca48a544a183ae67c9088027232aa2089967ba8ca082e765eb1b4b7ad75e9171588441b94ccd987a53e809881f4869d3bee371f0badc7061d0e018c7a1c5cf400000000ce410a9ddf81e8d271406035007b7af0a4cf9ff8f85a7be994ffe4a29c74f763"}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x8, 0x1000000000003, 0x5, 0x8, 0x251, 0x1, {0x5, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) clock_gettime(0x3, &(0x7f0000000340)) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) 0s ago: executing program 7 (id=1660): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) kernel console output (not intermixed with test programs): 9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 113.189961][ T4945] ) failed (rc=-5) [ 113.382606][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 113.431508][ T4937] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.438859][ T4937] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.527969][ T4937] device bridge_slave_0 entered promiscuous mode [ 113.545356][ T25] audit: type=1326 audit(1753411031.496:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e289da9a9 code=0x7ffc0000 [ 113.561866][ T4972] loop2: detected capacity change from 0 to 1024 [ 113.594715][ T4937] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.608988][ T4937] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.620000][ T25] audit: type=1326 audit(1753411031.496:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3e289da9a9 code=0x7ffc0000 [ 113.638764][ T4937] device bridge_slave_1 entered promiscuous mode [ 113.837415][ T25] audit: type=1326 audit(1753411031.496:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3e289da9e3 code=0x7ffc0000 [ 113.913172][ T25] audit: type=1326 audit(1753411031.496:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3e289d945f code=0x7ffc0000 [ 114.017903][ T25] audit: type=1326 audit(1753411031.496:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3e289daa37 code=0x7ffc0000 [ 114.084033][ T4937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.096672][ T25] audit: type=1326 audit(1753411031.496:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3e289d9310 code=0x7ffc0000 [ 114.132683][ T25] audit: type=1326 audit(1753411031.496:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e289da5ab code=0x7ffc0000 [ 114.147616][ T4937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.250129][ T25] audit: type=1326 audit(1753411031.566:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3e289d960a code=0x7ffc0000 [ 114.288450][ T25] audit: type=1326 audit(1753411031.566:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3e289d960a code=0x7ffc0000 [ 114.314705][ T25] audit: type=1326 audit(1753411031.596:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3e289d9217 code=0x7ffc0000 [ 114.404362][ T4937] team0: Port device team_slave_0 added [ 114.429457][ T4937] team0: Port device team_slave_1 added [ 114.456339][ T4937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.568710][ T4937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.597299][ T4937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.313355][ T13] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 115.321819][ T13] Bluetooth: hci1: Injecting HCI hardware error event [ 115.329026][ T4192] Bluetooth: hci1: hardware error 0x00 [ 115.647729][ T4552] Bluetooth: hci3: command 0x041b tx timeout [ 115.679452][ T4937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.700877][ T4937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.727511][ T4937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.872438][ T5003] Bluetooth: hci3: command 0x040f tx timeout [ 117.939289][ T4990] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.947385][ T4990] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.188403][ T5009] syz.3.175 (5009): drop_caches: 2 [ 118.676387][ T4990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.024419][ T4990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.360724][ T4990] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.369097][ T4990] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.377759][ T4990] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.387331][ T4990] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.446588][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.458930][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.467805][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.478279][ T5012] device bridge_slave_0 left promiscuous mode [ 119.487915][ T5012] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.507589][ T5012] device bridge_slave_1 left promiscuous mode [ 119.513830][ T5012] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.526123][ T5012] bond0: (slave bond_slave_0): Releasing backup interface [ 119.552230][ T5012] bond0: (slave bond_slave_1): Releasing backup interface [ 119.612911][ T5012] team0: Port device team_slave_0 removed [ 119.637186][ T5012] team0: Port device team_slave_1 removed [ 119.643607][ T5012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.651108][ T5012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.660827][ T5012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.668531][ T5012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.699189][ T5013] team0: Mode changed to "loadbalance" [ 119.958140][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 120.239312][ T4937] device hsr_slave_0 entered promiscuous mode [ 120.410923][ T4937] device hsr_slave_1 entered promiscuous mode [ 120.463318][ T4937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.476381][ T4937] Cannot create hsr debugfs directory [ 121.740772][ T4937] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.023781][ T4937] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.178815][ T4937] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.282895][ T5064] loop1: detected capacity change from 0 to 256 [ 123.338807][ T4937] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.392856][ T5065] netlink: 'syz.3.188': attribute type 10 has an invalid length. [ 123.402251][ T5064] exfat: Deprecated parameter 'namecase' [ 123.407951][ T5064] exfat: Deprecated parameter 'utf8' [ 123.470021][ T5064] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 123.492072][ T5065] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.564275][ T5065] device bridge_slave_1 left promiscuous mode [ 123.608882][ T5065] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.296667][ T5065] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 124.372386][ T5071] netlink: 14 bytes leftover after parsing attributes in process `syz.3.188'. [ 124.430816][ T5086] loop1: detected capacity change from 0 to 8 [ 124.453333][ T5071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.485834][ T5071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.517806][ T5071] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 124.533851][ T5071] bond0 (unregistering): Released all slaves [ 124.636466][ T4937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.649524][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.663097][ T25] kauditd_printk_skb: 51 callbacks suppressed [ 124.663110][ T25] audit: type=1326 audit(1753411042.616:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 124.702009][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.709510][ T25] audit: type=1326 audit(1753411042.616:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 124.734547][ T4937] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.738119][ T25] audit: type=1326 audit(1753411042.616:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 124.772602][ T25] audit: type=1326 audit(1753411042.616:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 124.804119][ T25] audit: type=1326 audit(1753411042.616:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 124.850917][ T25] audit: type=1326 audit(1753411042.616:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 124.906038][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.914756][ T25] audit: type=1326 audit(1753411042.616:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 124.933275][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.945195][ T25] audit: type=1326 audit(1753411042.616:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 124.976361][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.984925][ T4804] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.985146][ T25] audit: type=1326 audit(1753411042.616:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fca3304a9e3 code=0x7ffc0000 [ 124.992006][ T4804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.994899][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.023146][ T25] audit: type=1326 audit(1753411042.616:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fca3304945f code=0x7ffc0000 [ 125.733965][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.761630][ T4804] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.768679][ T4804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.780000][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.797252][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.808243][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.822440][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.897091][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.921746][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 125.938023][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.964436][ T4937] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.051968][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.060140][ T21] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 126.076038][ T4937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.115627][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.249451][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.352725][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.435073][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.505717][ T21] usb 2-1: config 0 descriptor?? [ 126.521644][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.530699][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.539199][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.556882][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.009306][ T5116] ODEBUG: Out of memory. ODEBUG disabled [ 127.733686][ T4937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.611843][ T13] libceph: connect (1)[c::]:6789 error -101 [ 128.626782][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 128.636502][ T5120] ceph: No mds server is up or the cluster is laggy [ 128.650926][ T13] libceph: connect (1)[c::]:6789 error -101 [ 128.658567][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 128.777094][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.808403][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.590565][ T21] usbhid 2-1:0.0: can't add hid device: -71 [ 129.597894][ T21] usbhid: probe of 2-1:0.0 failed with error -71 [ 129.642083][ T21] usb 2-1: USB disconnect, device number 4 [ 130.932392][ T5164] xt_TPROXY: Can be used only with -p tcp or -p udp [ 132.316745][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.338576][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.516423][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.525103][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.534523][ T4937] device veth0_vlan entered promiscuous mode [ 132.542580][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.551304][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.563556][ T4937] device veth1_vlan entered promiscuous mode [ 132.582803][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.589098][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.024903][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.068488][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.277914][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.401023][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.413014][ T4937] device veth0_macvtap entered promiscuous mode [ 133.443335][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.483021][ T4937] device veth1_macvtap entered promiscuous mode [ 134.096035][ T4937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.170367][ T4937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.187333][ T4937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.201797][ T5205] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 134.205620][ T4937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.246578][ T4937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.258683][ T4937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.317093][ T4937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.339655][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.357323][ T5205] CIFS mount error: No usable UNC path provided in device string! [ 134.357323][ T5205] [ 134.361176][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.369315][ T5205] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 135.253016][ T4937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.274073][ T4937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.291967][ T4937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.310386][ T4937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.350402][ T4937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.404350][ T4937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.458245][ T4937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.501587][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.511617][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.522308][ T4937] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.560368][ T4937] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.585061][ T4937] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.596997][ T5218] input: syz0 as /devices/virtual/input/input6 [ 135.620379][ T4937] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.988364][ T4813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.997782][ T4800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.078192][ T4800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.750473][ T4813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.246346][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.874261][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.636871][ T5262] vivid-001: ================= START STATUS ================= [ 139.646151][ T5262] vivid-001: Radio HW Seek Mode: Bounded [ 139.652245][ T5262] vivid-001: Radio Programmable HW Seek: false [ 139.658536][ T5262] vivid-001: RDS Rx I/O Mode: Block I/O [ 139.664314][ T5262] vivid-001: Generate RBDS Instead of RDS: false [ 139.670821][ T5262] vivid-001: RDS Reception: true [ 139.675946][ T5262] vivid-001: RDS Program Type: 0 inactive [ 139.681820][ T5262] vivid-001: RDS PS Name: inactive [ 139.691515][ T5262] vivid-001: RDS Radio Text: inactive [ 139.697166][ T5262] vivid-001: RDS Traffic Announcement: false inactive [ 139.704269][ T5262] vivid-001: RDS Traffic Program: false inactive [ 139.711336][ T5262] vivid-001: RDS Music: false inactive [ 139.717060][ T5262] vivid-001: ================== END STATUS ================== [ 142.108722][ T5285] genirq: Flags mismatch irq 4. 00000000 (pcmmio) vs. 00000000 (ttyS0) [ 143.796597][ T5303] IPVS: Error connecting to the multicast addr [ 145.221154][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 145.232149][ T5309] input: syz0 as /devices/virtual/input/input7 [ 146.470582][ T5318] xt_CT: No such helper "netbios-ns" [ 149.924125][ T5345] overlayfs: failed to clone upperpath [ 150.391574][ T5364] IPVS: Error connecting to the multicast addr [ 151.586850][ T5378] input: syz0 as /devices/virtual/input/input8 [ 155.069913][ T5417] loop5: detected capacity change from 0 to 512 [ 155.904842][ T5417] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 155.942335][ T5417] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.278953][ T5438] io-wq is not configured for unbound workers [ 158.676172][ T5475] CIFS mount error: No usable UNC path provided in device string! [ 158.676172][ T5475] [ 158.692366][ T5475] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 160.608651][ T5496] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.871810][ T5500] delete_channel: no stack [ 163.682461][ T5513] loop3: detected capacity change from 0 to 40427 [ 163.922751][ T5513] F2FS-fs (loop3): invalid crc value [ 165.249835][ T5513] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 165.623445][ T5551] netlink: 'syz.3.307': attribute type 14 has an invalid length. [ 166.279298][ T5547] loop1: detected capacity change from 0 to 4096 [ 166.341539][ T5547] ntfs3: Unknown parameter 'windows_names' [ 166.353235][ T5563] mmap: syz.3.312 (5563) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 166.542625][ T5566] x_tables: duplicate underflow at hook 1 [ 172.586868][ T5613] tipc: Enabling of bearer rejected, failed to enable media [ 175.480921][ T5645] netlink: 40 bytes leftover after parsing attributes in process `syz.3.335'. [ 175.551992][ T5645] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 175.567301][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.589302][ T5629] loop2: detected capacity change from 0 to 512 [ 179.695733][ T5692] tipc: Enabling of bearer rejected, failed to enable media [ 179.767183][ T5700] IPVS: Scheduler module ip_vs_sip not found [ 179.848613][ T5698] tipc: Enabled bearer , priority 0 [ 179.869028][ T5698] device syzkaller0 entered promiscuous mode [ 179.946583][ T5698] tipc: Resetting bearer [ 181.774227][ T5697] tipc: Resetting bearer [ 181.994378][ T5697] tipc: Disabling bearer [ 182.031487][ T5724] netlink: 'syz.3.356': attribute type 1 has an invalid length. [ 182.844203][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.903997][ T5739] delete_channel: no stack [ 183.008288][ T5730] device vlan2 entered promiscuous mode [ 183.013987][ T5730] device bond0 entered promiscuous mode [ 183.468964][ T5737] bond0: (slave gretap1): making interface the new active one [ 183.520512][ T5737] device gretap1 entered promiscuous mode [ 183.875174][ T5737] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 183.898670][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 184.018865][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 184.050039][ T5737] syz.3.356 (5737) used greatest stack depth: 20160 bytes left [ 184.270130][ T5756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.132108][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.263775][ T5785] tipc: Started in network mode [ 186.270587][ T5785] tipc: Node identity c63d31deb5a6, cluster identity 4711 [ 186.277805][ T5785] tipc: Enabled bearer , priority 0 [ 186.981914][ T5790] device syzkaller0 entered promiscuous mode [ 187.117323][ T5785] tipc: Resetting bearer [ 187.145495][ T5784] tipc: Resetting bearer [ 187.266664][ T5794] vivid-003: disconnect [ 187.340201][ T4226] tipc: Node number set to 1939550686 [ 187.401043][ T5784] tipc: Disabling bearer [ 187.978340][ T5787] vivid-003: reconnect [ 191.466980][ T25] kauditd_printk_skb: 27 callbacks suppressed [ 191.467025][ T25] audit: type=1326 audit(1753411109.416:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.4.384" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca3304a9a9 code=0x0 [ 192.554237][ T5847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.386'. [ 192.612314][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 193.285595][ T5852] netlink: 'syz.2.386': attribute type 10 has an invalid length. [ 193.432271][ T5852] bridge0: port 3(team0) entered blocking state [ 193.732613][ T5852] bridge0: port 3(team0) entered disabled state [ 193.740267][ T5852] device team0 entered promiscuous mode [ 193.782271][ T5852] device team_slave_0 entered promiscuous mode [ 193.788567][ T5852] device team_slave_1 entered promiscuous mode [ 193.867538][ T5864] tipc: Enabling of bearer rejected, failed to enable media [ 193.910576][ T5864] device syzkaller0 entered promiscuous mode [ 194.035420][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.041784][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.034058][ T5877] kvm [5876]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x100000000 [ 195.054926][ T5885] loop3: detected capacity change from 0 to 1024 [ 195.074813][ T5877] kvm [5876]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 197.283019][ T5904] netlink: 'syz.1.401': attribute type 10 has an invalid length. [ 198.203607][ T5904] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 198.439189][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 198.489740][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.320259][ T5920] netlink: 'syz.2.407': attribute type 1 has an invalid length. [ 199.491461][ T5923] binder: BINDER_SET_CONTEXT_MGR already set [ 199.515993][ T5920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.553906][ T5923] binder: 5922:5923 ioctl 4018620d 200000000040 returned -16 [ 199.589459][ T5923] binder: 5922:5923 ioctl c0306201 200000000240 returned -11 [ 199.610967][ T5925] device vlan2 entered promiscuous mode [ 199.675934][ T5925] device bond1 entered promiscuous mode [ 200.836345][ T5930] bond1: (slave gretap1): making interface the new active one [ 200.872539][ T5930] device gretap1 entered promiscuous mode [ 200.888560][ T5930] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 200.964199][ T5955] device bridge_slave_0 entered promiscuous mode [ 201.000744][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.034495][ T5930] syz.2.407 (5930) used greatest stack depth: 20104 bytes left [ 201.084380][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 201.223307][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 203.959541][ T5989] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.968694][ T5989] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.977425][ T5989] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.986114][ T5989] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.352931][ T5989] team0: Port device vxlan0 added [ 212.886475][ T6092] xt_limit: Overflow, try lower: 65536/2147483648 [ 213.084224][ T6084] orangefs_mount: mount request failed with -4 [ 213.100488][ T6075] device syzkaller0 entered promiscuous mode [ 214.472828][ T6107] loop1: detected capacity change from 0 to 4096 [ 214.790751][ T6107] ntfs3: Unknown parameter '01777777777777777777777' [ 214.844458][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.298742][ T6127] loop3: detected capacity change from 0 to 32768 [ 217.832677][ T6143] overlayfs: failed to clone upperpath [ 218.574894][ T6156] xt_limit: Overflow, try lower: 65536/2147483648 [ 219.188224][ T6160] netlink: 'syz.4.467': attribute type 62 has an invalid length. [ 221.939275][ T6184] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 225.275856][ T6209] loop2: detected capacity change from 0 to 40427 [ 225.339717][ T6209] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 225.347867][ T6209] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 225.358870][ T6212] tipc: Enabling of bearer rejected, failed to enable media [ 225.361019][ T6209] F2FS-fs (loop2): invalid crc value [ 225.761284][ T6209] F2FS-fs (loop2): Found nat_bits in checkpoint [ 225.935104][ T6209] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 225.942287][ T6209] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 228.661493][ T6242] netlink: 40 bytes leftover after parsing attributes in process `syz.3.486'. [ 230.001154][ T6260] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 230.059203][ T6260] Cannot find set identified by id 0 to match [ 230.974378][ T6280] CIFS: Unable to determine destination address [ 231.503338][ T6281] loop2: detected capacity change from 0 to 32768 [ 235.706468][ T6317] loop5: detected capacity change from 0 to 1024 [ 236.732611][ T6338] xt_socket: unknown flags 0x4 [ 238.326416][ T6352] netlink: 'syz.1.515': attribute type 16 has an invalid length. [ 238.334300][ T6352] netlink: 'syz.1.515': attribute type 3 has an invalid length. [ 238.342091][ T6352] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.515'. [ 241.395436][ T6380] o2cb: This node has not been configured. [ 241.401749][ T6380] o2cb: Cluster check failed. Fix errors before retrying. [ 241.410571][ T6380] (syz.3.524,6380,1):user_dlm_register:675 ERROR: status = -22 [ 241.418132][ T6380] (syz.3.524,6380,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 241.522870][ T6378] loop5: detected capacity change from 0 to 256 [ 242.383046][ T6378] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 242.804112][ T6389] loop3: detected capacity change from 0 to 512 [ 242.884665][ T6389] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 243.640914][ T6389] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 243.663633][ T6389] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 243.689681][ T6389] EXT4-fs (loop3): DAX unsupported by block device. [ 245.070076][ T6410] syz.4.532 uses obsolete (PF_INET,SOCK_PACKET) [ 246.390063][ T6426] loop1: detected capacity change from 0 to 1024 [ 246.403664][ T6428] loop3: detected capacity change from 0 to 1024 [ 246.570589][ T6428] EXT4-fs (loop3): Mount option "norecovery" incompatible with ext2 [ 247.680854][ T6444] loop5: detected capacity change from 0 to 40427 [ 247.788490][ T6444] F2FS-fs (loop5): invalid crc value [ 248.024739][ T6444] F2FS-fs (loop5): Found nat_bits in checkpoint [ 248.264222][ T6444] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 248.749084][ T6468] attempt to access beyond end of device [ 248.749084][ T6468] loop5: rw=10241, want=45104, limit=40427 [ 249.612182][ T4937] attempt to access beyond end of device [ 249.612182][ T4937] loop5: rw=2049, want=45112, limit=40427 [ 249.835209][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.546'. [ 250.921531][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 253.415845][ T6522] netlink: 'syz.2.559': attribute type 9 has an invalid length. [ 253.471322][ T6517] loop2: detected capacity change from 0 to 1024 [ 253.503243][ T6517] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.540452][ T6528] loop3: detected capacity change from 0 to 256 [ 254.621167][ T6528] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.214260][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.220637][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.358452][ T6551] loop5: detected capacity change from 0 to 256 [ 256.460959][ T6551] exfat: Deprecated parameter 'namecase' [ 256.505911][ T6551] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 256.528171][ T6560] input: syz1 as /devices/virtual/input/input9 [ 257.548875][ T6572] loop5: detected capacity change from 0 to 64 [ 257.576694][ T6572] hfs: unable to parse mount options [ 260.750384][ T25] audit: type=1326 audit(1753411178.636:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1469c9a9 code=0x7ffc0000 [ 261.163749][ T25] audit: type=1326 audit(1753411178.636:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1469c9a9 code=0x7ffc0000 [ 261.185908][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.391346][ T6610] loop3: detected capacity change from 0 to 8 [ 262.110931][ T25] audit: type=1800 audit(1753411180.016:172): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.585" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 266.279547][ T6658] dns_resolver: Unsupported server list version (0) [ 267.404227][ T6655] loop2: detected capacity change from 0 to 2048 [ 267.457888][ T6655] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.828110][ T25] audit: type=1800 audit(1753411186.776:173): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.596" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 271.556326][ T6705] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.612'. [ 272.641440][ T6728] delete_channel: no stack [ 279.286923][ T6779] loop5: detected capacity change from 0 to 512 [ 280.271536][ T6762] syz.3.623 (6762): drop_caches: 2 [ 280.277201][ T6762] syz.3.623 (6762): drop_caches: 2 [ 280.308116][ T6779] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 280.321954][ T6779] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 280.915737][ T6779] EXT4-fs (loop5): 1 truncate cleaned up [ 280.924899][ T6779] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 281.545595][ T6793] dns_resolver: Unsupported server list version (0) [ 284.076743][ T6809] loop1: detected capacity change from 0 to 128 [ 284.221433][ T6809] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 285.718433][ T6809] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 288.404201][ T4804] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 288.413329][ T6837] dns_resolver: Unsupported server list version (0) [ 289.601923][ T6848] loop1: detected capacity change from 0 to 64 [ 290.455867][ T6857] loop3: detected capacity change from 0 to 256 [ 291.459957][ T6862] lo speed is unknown, defaulting to 1000 [ 292.669665][ T4194] Bluetooth: hci1: command 0x0409 tx timeout [ 293.797739][ T6862] chnl_net:caif_netlink_parms(): no params data found [ 295.514045][ T4552] Bluetooth: hci1: command 0x041b tx timeout [ 295.524708][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.540413][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.615737][ T6913] netlink: 176 bytes leftover after parsing attributes in process `syz.4.663'. [ 296.257178][ T6862] device bridge_slave_0 entered promiscuous mode [ 296.338443][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.397959][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.406281][ T6862] device bridge_slave_1 entered promiscuous mode [ 296.464547][ T6862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.485352][ T6862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.525333][ T6862] team0: Port device team_slave_0 added [ 296.539102][ T6862] team0: Port device team_slave_1 added [ 296.580065][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.644606][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.321665][ T6915] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 297.327307][ T6862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.520775][ T6915] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 297.534455][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.651205][ T4552] Bluetooth: hci1: command 0x040f tx timeout [ 298.711900][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.409758][ T6862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.101604][ T4552] Bluetooth: hci1: command 0x0419 tx timeout [ 301.401573][ T6956] loop1: detected capacity change from 0 to 1024 [ 301.420847][ T6862] device hsr_slave_0 entered promiscuous mode [ 301.552256][ T6862] device hsr_slave_1 entered promiscuous mode [ 301.709198][ T6862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.930433][ T6862] Cannot create hsr debugfs directory [ 305.268864][ T6988] loop1: detected capacity change from 0 to 2048 [ 305.301572][ T6988] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 305.400138][ T6862] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 305.428435][ T6988] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.463790][ T6862] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 305.489128][ T6862] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 305.500894][ T6862] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 305.925181][ T7001] TCP: TCP_TX_DELAY enabled [ 306.616328][ T7003] loop3: detected capacity change from 0 to 256 [ 306.676216][ T7003] exfat: Unknown parameter 'zero_size_dir' [ 306.927623][ T6862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.018073][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.037471][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.051960][ T6862] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.657744][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.735573][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.810686][ T7045] dns_resolver: Unsupported server list version (0) [ 308.888376][ T4809] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.895527][ T4809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.954665][ T7041] gfs2: gfs2 mount does not exist [ 309.339637][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 309.399649][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 309.429451][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.438184][ T4809] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.445290][ T4809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.453745][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 309.466234][ T7044] tipc: Enabling of bearer rejected, failed to enable media [ 309.491290][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 309.516765][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.526046][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.536056][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 309.547944][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.559800][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 309.581300][ T6862] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 309.601467][ T6862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.624089][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 309.635622][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.649638][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 309.666380][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 309.676098][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.800349][ T7087] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 311.163614][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.193033][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.428383][ T6862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.497414][ T7093] loop1: detected capacity change from 0 to 1024 [ 311.815198][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 311.851132][ T7097] loop5: detected capacity change from 0 to 1024 [ 312.259438][ T7097] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,init_itable,,errors=continue. Quota mode: none. [ 312.287555][ T4783] hfsplus: b-tree write err: -5, ino 4 [ 312.392371][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.401434][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.431518][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 312.450095][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 312.522189][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 312.536025][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 312.544585][ T6862] device veth0_vlan entered promiscuous mode [ 312.708489][ T7116] EXT4-fs (loop5): resizing filesystem from 512 to 0 blocks [ 312.716203][ T7116] EXT4-fs warning (device loop5): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 312.895629][ T7118] dns_resolver: Unsupported server list version (0) [ 313.344022][ T6862] device veth1_vlan entered promiscuous mode [ 313.458180][ T6862] device veth0_macvtap entered promiscuous mode [ 313.748480][ T7127] capability: warning: `syz.4.715' uses deprecated v2 capabilities in a way that may be insecure [ 314.128797][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.279085][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 314.313642][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 314.369693][ T6862] device veth1_macvtap entered promiscuous mode [ 314.407593][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 314.443679][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.546330][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.556497][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.567031][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.576871][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.587746][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.598119][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.623257][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.700567][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.768524][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.887085][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 316.013487][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.129330][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.258448][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.362485][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.372553][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.390511][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.404957][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.415426][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.426983][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.438034][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 316.438680][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 316.440833][ T6862] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.565722][ T6862] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.574601][ T6862] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.592849][ T6862] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.552498][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.558815][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.711891][ T7160] dns_resolver: Unsupported server list version (0) [ 319.592414][ T4813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.748327][ T4813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.173817][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 320.268876][ T4813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.318349][ T4813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.360029][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 323.131425][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 329.052066][ T7266] loop3: detected capacity change from 0 to 32768 [ 329.470763][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 330.345473][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.757'. [ 330.734494][ T7281] loop1: detected capacity change from 0 to 40427 [ 330.917828][ T7281] F2FS-fs (loop1): invalid crc value [ 330.970196][ T7281] F2FS-fs (loop1): Found nat_bits in checkpoint [ 331.021951][ T7281] F2FS-fs (loop1): Start checkpoint disabled! [ 331.110254][ T7291] loop5: detected capacity change from 0 to 16 [ 331.223373][ T7291] erofs: (device loop5): mounted with root inode @ nid 36. [ 331.808139][ T7281] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 332.180651][ T25] audit: type=1326 audit(1753411249.856:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1469c9a9 code=0x7ffc0000 [ 332.276863][ T25] audit: type=1326 audit(1753411249.856:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1469c9a9 code=0x7ffc0000 [ 334.936892][ T4800] attempt to access beyond end of device [ 334.936892][ T4800] loop1: rw=2049, want=40976, limit=40427 [ 336.301984][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 340.653010][ T7367] gfs2: gfs2 mount does not exist [ 341.257935][ T7384] xt_connbytes: Forcing CT accounting to be enabled [ 341.265007][ T7384] set match dimension is over the limit! [ 343.324061][ T7415] loop5: detected capacity change from 0 to 128 [ 345.527208][ T7405] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 345.572757][ T7415] befs: (loop5): No write support. Marking filesystem read-only [ 345.590520][ T7415] befs: (loop5): invalid magic header [ 345.648048][ T7405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.660589][ T7405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.685420][ T7405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 345.709779][ T7405] bond0: (slave wlan1): Releasing backup interface [ 345.793121][ T7423] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 347.416172][ T7441] gfs2: gfs2 mount does not exist [ 347.659912][ T7451] overlayfs: missing 'lowerdir' [ 352.869975][ T7486] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 352.915540][ T7489] Cannot find set identified by id 0 to match [ 352.937192][ T7490] netlink: 'syz.4.811': attribute type 10 has an invalid length. [ 353.060723][ T7490] netlink: 40 bytes leftover after parsing attributes in process `syz.4.811'. [ 354.005354][ T7490] batman_adv: batadv0: Adding interface: virt_wifi0 [ 354.012045][ T7490] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 354.067539][ T7490] batman_adv: batadv0: Interface activated: virt_wifi0 [ 354.086950][ T7502] device bridge0 entered promiscuous mode [ 354.784171][ T7511] loop3: detected capacity change from 0 to 128 [ 355.245429][ T7514] xt_TCPMSS: Only works on TCP SYN packets [ 355.268371][ T7514] loop5: detected capacity change from 0 to 128 [ 355.291318][ T7511] befs: (loop3): No write support. Marking filesystem read-only [ 355.652586][ T7511] befs: (loop3): invalid magic header [ 356.931803][ T7528] overlayfs: failed to clone upperpath [ 357.456739][ T7514] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 357.540351][ T7514] EXT4-fs: failed to create workqueue [ 357.587566][ T7540] loop6: detected capacity change from 0 to 1024 [ 357.598153][ T7514] EXT4-fs (loop5): mount failed [ 357.807471][ T7534] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 362.600226][ C1] hrtimer: interrupt took 35790 ns [ 363.380805][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 363.391115][ T7593] device bridge_slave_0 left promiscuous mode [ 363.397433][ T7593] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.432224][ T7593] team0: Port device team_slave_0 removed [ 363.565982][ T7593] team0: Port device team_slave_1 removed [ 363.963480][ T7602] overlayfs: missing 'lowerdir' [ 364.300482][ T7593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.308004][ T7593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.342710][ T7593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.504241][ T7593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.145034][ T7593] bond0: (slave gretap1): Releasing active interface [ 366.166306][ T7635] dns_resolver: Unsupported server list version (0) [ 366.375846][ T7593] device gretap1 left promiscuous mode [ 367.188378][ T7593] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.197421][ T7593] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.206465][ T7593] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.215441][ T7593] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.573493][ T7593] team0: Port device vxlan0 removed [ 368.612088][ T7593] syz.3.839 (7593) used greatest stack depth: 19936 bytes left [ 369.510576][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.853'. [ 369.667730][ T7664] hugetlbfs: syz.6.854 (7664): Using mlock ulimits for SHM_HUGETLB is deprecated [ 369.898131][ T7666] loop3: detected capacity change from 0 to 256 [ 370.018921][ T7666] FAT-fs (loop3): Directory bread(block 64) failed [ 370.025872][ T7666] FAT-fs (loop3): Directory bread(block 65) failed [ 370.032861][ T7666] FAT-fs (loop3): Directory bread(block 66) failed [ 370.039678][ T7666] FAT-fs (loop3): Directory bread(block 67) failed [ 370.046427][ T7666] FAT-fs (loop3): Directory bread(block 68) failed [ 370.053061][ T7666] FAT-fs (loop3): Directory bread(block 69) failed [ 370.059907][ T7666] FAT-fs (loop3): Directory bread(block 70) failed [ 370.066469][ T7666] FAT-fs (loop3): Directory bread(block 71) failed [ 370.073065][ T7666] FAT-fs (loop3): Directory bread(block 72) failed [ 370.079613][ T7666] FAT-fs (loop3): Directory bread(block 73) failed [ 370.277364][ T7656] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 371.414638][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.861'. [ 371.934623][ T7686] dns_resolver: Unsupported server list version (0) [ 377.406051][ T7725] dns_resolver: Unsupported server list version (0) [ 378.340175][ T7737] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 378.347763][ T7737] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 378.362523][ T7737] Error parsing options; rc = [-22] [ 378.371398][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.925891][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.966991][ T7743] loop6: detected capacity change from 0 to 256 [ 379.259000][ T7742] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 379.920642][ T25] audit: type=1326 audit(1753411297.236:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 380.383624][ T7743] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 380.840463][ T7743] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 380.881763][ T7743] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 380.967375][ T25] audit: type=1326 audit(1753411297.236:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 381.101147][ T7760] delete_channel: no stack [ 381.333375][ T7766] loop1: detected capacity change from 0 to 512 [ 381.630797][ T7766] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 382.175831][ T25] audit: type=1326 audit(1753411297.236:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 382.320258][ T25] audit: type=1326 audit(1753411297.236:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 382.406540][ T7766] EXT4-fs (loop1): 1 truncate cleaned up [ 382.412248][ T7766] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 382.490397][ T25] audit: type=1326 audit(1753411297.236:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 382.526882][ T25] audit: type=1326 audit(1753411297.236:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 384.850634][ T25] audit: type=1326 audit(1753411297.236:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 384.873162][ T25] audit: type=1326 audit(1753411297.236:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 384.895605][ T25] audit: type=1326 audit(1753411297.236:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 384.918949][ T25] audit: type=1326 audit(1753411297.246:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 384.941486][ T25] audit: type=1326 audit(1753411297.246:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 384.964090][ T25] audit: type=1326 audit(1753411297.246:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 384.986498][ T25] audit: type=1326 audit(1753411297.256:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 385.014692][ T25] audit: type=1326 audit(1753411297.256:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 385.080345][ T25] audit: type=1326 audit(1753411297.256:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 385.104013][ T7785] loop3: detected capacity change from 0 to 512 [ 385.117491][ T7786] loop5: detected capacity change from 0 to 128 [ 385.239562][ T25] audit: type=1326 audit(1753411297.266:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 385.270707][ T25] audit: type=1326 audit(1753411297.266:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 385.294433][ T25] audit: type=1326 audit(1753411297.266:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 385.973106][ T25] audit: type=1326 audit(1753411297.276:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 386.004361][ T25] audit: type=1326 audit(1753411297.276:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.5.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 386.186941][ T7785] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 386.260475][ T7785] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 388.271414][ T7785] EXT4-fs: failed to create workqueue [ 388.280335][ T7785] EXT4-fs (loop3): mount failed [ 390.895172][ T7837] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.910'. [ 392.468183][ T7845] loop3: detected capacity change from 0 to 1024 [ 392.608464][ T7852] loop5: detected capacity change from 0 to 64 [ 392.830896][ T7854] loop6: detected capacity change from 0 to 256 [ 393.862095][ T7854] exfat: Bad value for 'gid' [ 393.922818][ T7861] tipc: Started in network mode [ 394.087271][ T7861] tipc: Node identity 4, cluster identity 4711 [ 394.093511][ T7861] tipc: Node number set to 4 [ 395.727828][ T7885] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 395.739068][ T7885] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 396.660481][ T7892] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.925'. [ 401.800379][ T7915] loop6: detected capacity change from 0 to 8 [ 402.430328][ T25] audit: type=1800 audit(1753411320.366:196): pid=7922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.932" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 403.633545][ T7939] tipc: Started in network mode [ 403.638433][ T7939] tipc: Node identity 4, cluster identity 4711 [ 403.656786][ T7939] tipc: Node number set to 4 [ 410.683422][ T8021] gfs2: gfs2 mount does not exist [ 410.705689][ T8019] loop3: detected capacity change from 0 to 64 [ 410.859340][ T8023] tipc: Started in network mode [ 410.866737][ T8023] tipc: Node identity 4, cluster identity 4711 [ 410.880169][ T8023] tipc: Node number set to 4 [ 416.260914][ T4236] Bluetooth: hci1: command 0x0406 tx timeout [ 419.426285][ T8120] loop6: detected capacity change from 0 to 256 [ 419.713510][ T8129] dns_resolver: Unsupported server list version (0) [ 419.731469][ T8120] exfat: Deprecated parameter 'utf8' [ 419.736857][ T8120] exfat: Unknown parameter 'keep}last_dots' [ 421.894726][ T8148] dns_resolver: Unsupported server list version (0) [ 426.895791][ T8189] dns_resolver: Unsupported server list version (0) [ 427.999382][ T8196] loop1: detected capacity change from 0 to 32768 [ 428.071518][ T8196] read_mapping_page failed! [ 428.076401][ T8196] diRead: read_metapage failed [ 429.481532][ T8206] loop5: detected capacity change from 0 to 8 [ 430.330948][ T8206] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 430.380801][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop5 [ 432.125621][ T8223] cramfs: Error -5 while decompressing! [ 432.131681][ T8223] cramfs: ffffffff961e6028(26)->ffff8880555cd000(4096) [ 432.139324][ T8223] cramfs: Error -3 while decompressing! [ 432.145129][ T8223] cramfs: ffffffff961e6042(26)->ffff888054de1000(4096) [ 432.152127][ T8223] cramfs: Error -3 while decompressing! [ 432.157715][ T8223] cramfs: ffffffff961e605c(16)->ffff88805225c000(4096) [ 432.176694][ T8223] cramfs: Error -5 while decompressing! [ 432.183747][ T8223] cramfs: ffffffff961e6028(26)->ffff8880555cd000(4096) [ 433.466170][ T8210] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 433.755230][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop5 [ 434.626306][ T8246] tipc: Enabled bearer , priority 0 [ 434.634140][ T8246] device syzkaller0 entered promiscuous mode [ 434.666788][ T8246] tipc: Resetting bearer [ 434.700804][ T8241] tipc: Resetting bearer [ 434.727268][ T8241] tipc: Disabling bearer [ 435.512021][ T8259] dns_resolver: Unsupported server list version (0) [ 439.930739][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.937077][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.681838][ T8337] loop5: detected capacity change from 0 to 128 [ 442.924939][ T8337] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 446.928496][ T8380] loop1: detected capacity change from 0 to 512 [ 446.999024][ T8380] EXT4-fs (loop1): Ignoring removed bh option [ 447.006513][ T8380] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 447.261597][ T8380] EXT4-fs (loop1): 1 truncate cleaned up [ 447.283165][ T8380] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 449.819085][ T8414] overlayfs: missing 'lowerdir' [ 451.645554][ T8438] loop3: detected capacity change from 0 to 512 [ 451.789594][ T8438] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 451.804327][ T8438] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 451.813565][ T8438] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 451.846121][ T8438] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 451.955542][ T8438] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102] [ 451.977422][ T8438] System zones: 0-2, 18-18, 34-34 [ 452.349934][ T8438] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1080: iget: bad i_size value: 360287970189639680 [ 452.893038][ T8438] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1080: couldn't read orphan inode 15 (err -117) [ 453.047282][ T8438] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 455.114073][ T8476] syz.1.1091 sent an empty control message without MSG_MORE. [ 455.567091][ T8486] fuse: root generation should be zero [ 464.021300][ T4234] Bluetooth: hci1: command 0x0405 tx timeout [ 468.360017][ T8566] fuse: Bad value for 'fd' [ 470.021724][ T8583] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 471.102112][ T8591] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1122'. [ 472.823527][ T8602] loop5: detected capacity change from 0 to 512 [ 472.950244][ T8607] fuse: Unknown parameter '00000000000000000000' [ 473.930148][ T8602] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 473.974625][ T8602] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.076958][ T8616] lo speed is unknown, defaulting to 1000 [ 476.101677][ T5018] Bluetooth: hci5: command 0x0409 tx timeout [ 476.179904][ T8616] chnl_net:caif_netlink_parms(): no params data found [ 477.057496][ T8616] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.130117][ T8616] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.308682][ T8616] device bridge_slave_0 entered promiscuous mode [ 477.557950][ T8616] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.156439][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.174345][ T8616] device bridge_slave_1 entered promiscuous mode [ 478.211292][ T4236] Bluetooth: hci5: command 0x041b tx timeout [ 478.419016][ T8616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.432932][ T8616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.578777][ T8674] loop3: detected capacity change from 0 to 32768 [ 479.774156][ T8674] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 480.028960][ T8681] loop6: detected capacity change from 0 to 128 [ 480.270647][ T5018] Bluetooth: hci5: command 0x040f tx timeout [ 480.376783][ T8616] team0: Port device team_slave_0 added [ 480.426851][ T8674] capability: warning: `syz.3.1144' uses 32-bit capabilities (legacy support in use) [ 480.543497][ T8681] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 480.568438][ T25] audit: type=1800 audit(1753411398.516:197): pid=8674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1144" name="bus" dev="loop3" ino=17059 res=0 errno=0 [ 481.181012][ T8616] team0: Port device team_slave_1 added [ 481.687175][ T8695] loop5: detected capacity change from 0 to 64 [ 481.801360][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.808331][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.871266][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 481.903756][ T8616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.928673][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.977370][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.078401][ T8616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.137489][ T8616] device hsr_slave_0 entered promiscuous mode [ 482.159286][ T8616] device hsr_slave_1 entered promiscuous mode [ 482.278215][ T8616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.334165][ T8616] Cannot create hsr debugfs directory [ 482.340489][ T8320] Bluetooth: hci5: command 0x0419 tx timeout [ 483.023601][ T8712] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 483.448362][ T8616] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 484.409292][ T8616] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 484.541235][ T8616] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 484.558408][ T8616] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 487.279364][ T8758] dns_resolver: Unsupported server list version (0) [ 487.527050][ T8616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.901210][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 487.930907][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 488.030711][ T8616] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.140451][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 488.159540][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 488.210028][ T4794] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.217153][ T4794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.813444][ T8754] loop3: detected capacity change from 0 to 32768 [ 488.903107][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 488.904199][ T8754] XFS: ikeep mount option is deprecated. [ 488.927343][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 488.937224][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 488.946102][ T4794] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.953204][ T4794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.962215][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 488.971131][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 488.994642][ T8754] XFS (loop3): Mounting V5 Filesystem [ 489.006696][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 489.020023][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 489.039860][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 489.206273][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 489.333110][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 489.452799][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 489.561133][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 489.621692][ T8754] XFS (loop3): Ending clean mount [ 489.654346][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 489.748174][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 489.784114][ T8754] XFS (loop3): Quotacheck needed: Please wait. [ 489.869888][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 489.948455][ T8754] XFS (loop3): Quotacheck: Done. [ 489.986469][ T4185] XFS (loop3): Unmounting Filesystem [ 490.502487][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 490.525703][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 490.646902][ T8616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.189959][ T25] audit: type=1326 audit(1753411409.136:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 491.389331][ T25] audit: type=1326 audit(1753411409.166:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 491.629877][ T8797] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1173'. [ 491.695808][ T25] audit: type=1326 audit(1753411409.236:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 492.276477][ T25] audit: type=1326 audit(1753411409.236:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 492.360321][ T25] audit: type=1326 audit(1753411409.236:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 492.384052][ T25] audit: type=1326 audit(1753411409.236:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 492.406521][ T25] audit: type=1326 audit(1753411409.236:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 492.429191][ T25] audit: type=1326 audit(1753411409.236:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 492.451698][ T25] audit: type=1326 audit(1753411409.236:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 493.229209][ T25] audit: type=1326 audit(1753411409.236:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.5.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 493.307853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 493.506224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 493.535100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 493.805653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 494.395709][ T8616] device veth0_vlan entered promiscuous mode [ 494.452486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 494.672681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 494.865106][ T8616] device veth1_vlan entered promiscuous mode [ 494.978695][ T8616] device veth0_macvtap entered promiscuous mode [ 495.010776][ T8616] device veth1_macvtap entered promiscuous mode [ 495.067999][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.079627][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.169325][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.475117][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.622977][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.774181][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.809001][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.819590][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.831970][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.841318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 495.849967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 495.898491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 495.904639][ T8831] loop3: detected capacity change from 0 to 8 [ 495.916384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 495.925470][ T8831] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 495.932870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 495.938791][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop3 [ 495.950952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 496.064760][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.079582][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.104605][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.605512][ T8836] loop3: detected capacity change from 0 to 256 [ 496.766100][ T13] net_ratelimit: 67 callbacks suppressed [ 496.766118][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.782466][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.792663][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.798807][ T8836] FAT-fs (loop3): Unrecognized mount option "sho&±V‹ãt‹SÁâØrtname=win95" or missing value [ 496.818433][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.828822][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.839455][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.851618][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.892564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 496.910492][ T5018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.950647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 497.014439][ T8843] comedi comedi0: 8255: I/O port conflict (0xffffffff80008000,4) [ 497.036920][ T8843] comedi comedi0: 8255: I/O port conflict (0xc,4) [ 497.048050][ T8843] comedi comedi0: 8255: I/O port conflict (0xffffffff80000000,4) [ 497.103007][ T8845] loop6: detected capacity change from 0 to 512 [ 497.111203][ T8616] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.146544][ T8616] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.155830][ T8616] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.164829][ T8616] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.158012][ T5018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.527991][ T8845] EXT4-fs (loop6): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 498.552253][ T8845] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.960174][ T5003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.130593][ T4783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.140805][ T4783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.323292][ T5018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.341077][ T4800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.349874][ T4800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.381445][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 500.064147][ T5024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.104963][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 501.416713][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.432944][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.531790][ T5018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.031812][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.740485][ T4552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.989213][ T8916] sp0: Synchronizing with TNC [ 506.380809][ T8320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.540528][ T8911] netlink: 'syz.5.1203': attribute type 1 has an invalid length. [ 506.655971][ T8920] loop5: detected capacity change from 0 to 512 [ 506.702190][ T8911] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1203'. [ 507.400487][ T5024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.510255][ T8320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.260420][ T5003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.151711][ T8944] loop3: detected capacity change from 0 to 32768 [ 509.756903][ T8959] loop7: detected capacity change from 0 to 8 [ 509.829015][ T8944] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1213 (8944) [ 509.845631][ T8320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.890898][ T8959] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 510.783604][ T8964] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 510.979173][ T8320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.056171][ T8970] cramfs: Error -5 while decompressing! [ 511.061950][ T8970] cramfs: ffffffff961e6028(26)->ffff888055718000(4096) [ 511.069006][ T8970] cramfs: Error -3 while decompressing! [ 511.074687][ T8970] cramfs: ffffffff961e6042(26)->ffff88804f911000(4096) [ 511.082002][ T8970] cramfs: Error -3 while decompressing! [ 511.087626][ T8970] cramfs: ffffffff961e605c(16)->ffff888059175000(4096) [ 511.095246][ T8970] cramfs: Error -5 while decompressing! [ 511.100953][ T8970] cramfs: ffffffff961e6028(26)->ffff888055718000(4096) [ 511.688374][ T8944] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 511.698384][ T8944] BTRFS info (device loop3): force zlib compression, level 3 [ 511.705932][ T8944] BTRFS info (device loop3): force clearing of disk cache [ 511.713156][ T8944] BTRFS info (device loop3): setting nodatasum [ 511.719425][ T8944] BTRFS info (device loop3): allowing degraded mounts [ 511.726297][ T8944] BTRFS info (device loop3): enabling disk space caching [ 511.733431][ T8944] BTRFS info (device loop3): disk space caching is enabled [ 511.740742][ T8944] BTRFS info (device loop3): has skinny extents [ 511.765148][ T5024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.034844][ T5018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.123441][ T5845] udevd[5845]: incorrect cramfs checksum on /dev/loop7 [ 512.199475][ T5845] udevd[5845]: incorrect cramfs checksum on /dev/loop7 [ 512.218353][ T8992] loop6: detected capacity change from 0 to 8 [ 512.269080][ T8992] SQUASHFS error: zlib decompression failed, data probably corrupt [ 512.286755][ T8992] SQUASHFS error: Failed to read block 0x9b: -5 [ 512.297883][ T8992] SQUASHFS error: Unable to read metadata cache entry [99] [ 512.313173][ T8992] SQUASHFS error: Unable to read inode 0x127 [ 512.525020][ T25] kauditd_printk_skb: 16 callbacks suppressed [ 512.525046][ T25] audit: type=1326 audit(1753411430.476:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.4.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 512.659081][ T25] audit: type=1326 audit(1753411430.536:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.4.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 512.716126][ T8995] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1223'. [ 512.779411][ T25] audit: type=1326 audit(1753411430.536:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.4.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 512.902295][ T25] audit: type=1326 audit(1753411430.536:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.4.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 512.924689][ T25] audit: type=1326 audit(1753411430.546:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.4.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 512.955188][ T8944] BTRFS error (device loop3): open_ctree failed: -12 [ 512.973210][ T6561] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by udevd (6561) [ 512.978859][ T25] audit: type=1326 audit(1753411430.546:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.4.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 513.019024][ T25] audit: type=1326 audit(1753411430.546:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.4.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 513.050437][ T25] audit: type=1326 audit(1753411430.546:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.4.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 513.079175][ T8992] netlink: 'syz.6.1222': attribute type 4 has an invalid length. [ 513.084846][ T25] audit: type=1326 audit(1753411430.546:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.4.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 513.129306][ T25] audit: type=1326 audit(1753411430.546:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.4.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 513.139778][ T9000] loop6: detected capacity change from 0 to 256 [ 516.413355][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1231'. [ 517.308006][ T9048] xt_l2tp: wrong L2TP version: 0 [ 518.585156][ T9057] loop7: detected capacity change from 0 to 512 [ 518.804663][ T1308] block nbd5: Attempted send on invalid socket [ 518.811724][ T1308] print_req_error: 4 callbacks suppressed [ 518.811760][ T1308] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 520.234975][ T9057] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 520.401160][ T9057] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.661583][ T9086] delete_channel: no stack [ 522.666815][ T9086] delete_channel: no stack [ 535.145109][ T9183] loop3: detected capacity change from 0 to 8 [ 535.168737][ T9176] loop5: detected capacity change from 0 to 2048 [ 535.190568][ T9183] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 535.219314][ T9181] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:bb to non-existent VLAN 2048 [ 535.267778][ T9176] FAT-fs (loop5): Unrecognized mount option "msdos" or missing value [ 535.428213][ T9192] cramfs: Error -5 while decompressing! [ 535.433925][ T9192] cramfs: ffffffff961ea028(26)->ffff888051e41000(4096) [ 535.441290][ T9192] cramfs: Error -3 while decompressing! [ 535.444119][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1277'. [ 536.019323][ T9192] cramfs: ffffffff961ea042(26)->ffff888051e42000(4096) [ 536.029023][ T9192] cramfs: Error -3 while decompressing! [ 536.036205][ T9192] cramfs: ffffffff961ea05c(16)->ffff888051e43000(4096) [ 536.049401][ T9192] cramfs: Error -5 while decompressing! [ 536.056684][ T9192] cramfs: ffffffff961ea028(26)->ffff888051e41000(4096) [ 537.534290][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop3 [ 537.575839][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop3 [ 537.593928][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop3 [ 537.611877][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop3 [ 538.685760][ T9220] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1283'. [ 539.898001][ T9224] loop6: detected capacity change from 0 to 1764 [ 544.271480][ T9248] loop3: detected capacity change from 0 to 4096 [ 546.351614][ T9248] ntfs: volume version 3.1. [ 548.945675][ T9290] dns_resolver: Unsupported server list version (0) [ 552.729123][ T9313] loop5: detected capacity change from 0 to 64 [ 552.841255][ T9319] dns_resolver: Unsupported server list version (0) [ 552.975146][ T9321] Cannot find add_set index 0 as target [ 553.312974][ T9320] overlayfs: failed to clone lowerpath [ 553.329297][ T9320] overlayfs: failed to clone upperpath [ 553.690242][ T9313] minix_free_block (loop5:1): bit already cleared [ 553.697033][ T9313] minix_free_block (loop5:4): bit already cleared [ 553.703445][ T9313] minix_free_block (loop5:3): bit already cleared [ 553.709871][ T9313] minix_free_block (loop5:2): bit already cleared [ 553.716286][ T9313] minix_free_block (loop5:1): bit already cleared [ 556.889409][ T9361] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1324'. [ 557.343522][ T9363] loop5: detected capacity change from 0 to 64 [ 558.311303][ T9368] loop3: detected capacity change from 0 to 64 [ 558.369851][ T9370] loop7: detected capacity change from 0 to 2048 [ 559.838315][ T9370] NILFS (loop7): invalid segment: Inconsistency found [ 559.875599][ T9370] NILFS (loop7): trying rollback from an earlier position [ 560.645554][ T9370] NILFS (loop7): recovery complete [ 560.695905][ T9381] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 566.195146][ T25] kauditd_printk_skb: 15 callbacks suppressed [ 566.195210][ T25] audit: type=1326 audit(1753411480.706:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 566.230511][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.246675][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.433561][ T25] audit: type=1326 audit(1753411480.706:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 567.511574][ T25] audit: type=1326 audit(1753411480.706:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 568.391012][ T25] audit: type=1326 audit(1753411480.706:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 569.510049][ T25] audit: type=1326 audit(1753411480.706:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 569.952172][ T25] audit: type=1326 audit(1753411480.706:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 570.037824][ T25] audit: type=1326 audit(1753411480.706:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 571.523339][ T25] audit: type=1326 audit(1753411480.715:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 571.751785][ T25] audit: type=1326 audit(1753411480.715:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 571.792160][ T25] audit: type=1326 audit(1753411480.715:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 571.817966][ T9464] loop7: detected capacity change from 0 to 8 [ 572.017848][ T25] audit: type=1326 audit(1753411480.715:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 572.032357][ T9464] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 572.050325][ T25] audit: type=1326 audit(1753411480.715:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 573.049356][ T25] audit: type=1326 audit(1753411480.715:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 573.138129][ T25] audit: type=1326 audit(1753411480.715:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3304a9a9 code=0x7ffc0000 [ 573.163467][ T9477] loop5: detected capacity change from 0 to 256 [ 573.197839][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop7 [ 573.281079][ T9481] loop6: detected capacity change from 0 to 8 [ 573.497455][ T9483] cramfs: Error -5 while decompressing! [ 573.503099][ T9483] cramfs: ffffffff961e6028(26)->ffff888054e2d000(4096) [ 573.510532][ T9483] cramfs: Error -3 while decompressing! [ 573.516181][ T9483] cramfs: ffffffff961e6042(26)->ffff888053248000(4096) [ 573.523236][ T9483] cramfs: Error -3 while decompressing! [ 573.528948][ T9483] cramfs: ffffffff961e605c(16)->ffff888058c54000(4096) [ 573.536339][ T9483] cramfs: Error -5 while decompressing! [ 573.541893][ T9483] cramfs: ffffffff961e6028(26)->ffff888054e2d000(4096) [ 573.556019][ T9481] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 573.811880][ T9033] udevd[9033]: incorrect cramfs checksum on /dev/loop6 [ 573.831541][ T9033] udevd[9033]: incorrect cramfs checksum on /dev/loop6 [ 573.896121][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop7 [ 573.962767][ T9485] cramfs: Error -5 while decompressing! [ 573.968486][ T9485] cramfs: ffffffff961ea028(26)->ffff888053060000(4096) [ 573.975632][ T9485] cramfs: Error -3 while decompressing! [ 573.981183][ T9485] cramfs: ffffffff961ea042(26)->ffff888051d68000(4096) [ 573.988194][ T9485] cramfs: Error -3 while decompressing! [ 573.993816][ T9485] cramfs: ffffffff961ea05c(16)->ffff888051d20000(4096) [ 574.001214][ T9485] cramfs: Error -5 while decompressing! [ 574.006911][ T9485] cramfs: ffffffff961ea028(26)->ffff888053060000(4096) [ 575.493819][ T5831] udevd[5831]: incorrect cramfs checksum on /dev/loop6 [ 575.595530][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop6 [ 580.300752][ T9519] loop6: detected capacity change from 0 to 8 [ 580.412797][ T9519] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 580.497268][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop6 [ 580.808562][ T9520] delete_channel: no stack [ 580.813759][ T9520] delete_channel: no stack [ 580.876615][ T9522] cramfs: Error -5 while decompressing! [ 580.882516][ T9522] cramfs: ffffffff961e6028(26)->ffff88805509e000(4096) [ 580.889570][ T9522] cramfs: Error -3 while decompressing! [ 580.895650][ T9522] cramfs: ffffffff961e6042(26)->ffff888053f65000(4096) [ 580.902799][ T9522] cramfs: Error -3 while decompressing! [ 580.908394][ T9522] cramfs: ffffffff961e605c(16)->ffff888053e7c000(4096) [ 580.915678][ T9522] cramfs: Error -5 while decompressing! [ 580.921263][ T9522] cramfs: ffffffff961e6028(26)->ffff88805509e000(4096) [ 582.449978][ T9527] loop7: detected capacity change from 0 to 1024 [ 582.612376][ T9527] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 582.682193][ T9527] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,nodiscard,norecovery,noquota,init_itable=0x0000000000000001,grpid,jqfmt=vfsold,barrier=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 585.240142][ T9557] tipc: Enabled bearer , priority 0 [ 585.248230][ T9557] device syzkaller0 entered promiscuous mode [ 585.256282][ T9555] loop7: detected capacity change from 0 to 512 [ 585.283153][ T9555] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 585.315959][ T9555] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 585.447252][ T9557] tipc: Resetting bearer [ 585.455134][ T9555] System zones: 1-12 [ 585.477670][ T9555] EXT4-fs (loop7): 1 truncate cleaned up [ 585.483349][ T9555] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 585.585380][ T9556] tipc: Resetting bearer [ 586.991933][ T9556] tipc: Disabling bearer [ 588.857040][ T9588] loop7: detected capacity change from 0 to 8 [ 590.133723][ T9588] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 590.397351][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop7 [ 591.048048][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop7 [ 591.119456][ T9606] cramfs: Error -5 while decompressing! [ 591.125187][ T9606] cramfs: ffffffff961ea028(26)->ffff88804f972000(4096) [ 591.132333][ T9606] cramfs: Error -3 while decompressing! [ 591.138037][ T9606] cramfs: ffffffff961ea042(26)->ffff88805949d000(4096) [ 591.145178][ T9606] cramfs: Error -3 while decompressing! [ 591.150802][ T9606] cramfs: ffffffff961ea05c(16)->ffff88804f084000(4096) [ 591.158199][ T9606] cramfs: Error -5 while decompressing! [ 591.163848][ T9606] cramfs: ffffffff961ea028(26)->ffff88804f972000(4096) [ 594.749247][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop7 [ 595.543216][ T9634] loop5: detected capacity change from 0 to 8 [ 595.833707][ T9634] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 596.454650][ T9638] cramfs: Error -5 while decompressing! [ 596.460341][ T9638] cramfs: ffffffff961e6028(26)->ffff88805150b000(4096) [ 596.467524][ T9638] cramfs: Error -3 while decompressing! [ 596.473654][ T9638] cramfs: ffffffff961e6042(26)->ffff88804dc82000(4096) [ 596.480785][ T9638] cramfs: Error -3 while decompressing! [ 596.486380][ T9638] cramfs: ffffffff961e605c(16)->ffff8880597c3000(4096) [ 596.493883][ T9638] cramfs: Error -5 while decompressing! [ 596.499584][ T9638] cramfs: ffffffff961e6028(26)->ffff88805150b000(4096) [ 597.911814][ T5845] udevd[5845]: incorrect cramfs checksum on /dev/loop5 [ 597.980075][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop5 [ 598.137168][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop5 [ 599.842554][ T9655] binder: 9654:9655 ioctl 4018620d 0 returned -22 [ 599.861702][ T9655] UBIFS error (pid: 9655): cannot open "ubifs", error -22 [ 601.994472][ T9664] loop3: detected capacity change from 0 to 2048 [ 602.828106][ T9670] loop5: detected capacity change from 0 to 1024 [ 603.024576][ T1308] block nbd7: Attempted send on invalid socket [ 603.030897][ T1308] blk_update_request: I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 603.251772][ T4809] hfsplus: b-tree write err: -5, ino 4 [ 605.108744][ T9684] loop3: detected capacity change from 0 to 256 [ 606.333804][ T9695] loop5: detected capacity change from 0 to 2048 [ 606.949902][ T9698] loop6: detected capacity change from 0 to 256 [ 607.010559][ T9698] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 607.027094][ T9698] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 607.569097][ T9698] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 607.975187][ T9700] loop7: detected capacity change from 0 to 4096 [ 608.045694][ T9695] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 608.106743][ T9705] batman_adv: batadv0: Adding interface: macsec1 [ 608.113270][ T9705] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.161978][ T9705] batman_adv: batadv0: Interface activated: macsec1 [ 611.534930][ T9727] loop5: detected capacity change from 0 to 64 [ 614.379972][ T9752] loop7: detected capacity change from 0 to 8 [ 614.538021][ T9752] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 614.629232][ T9757] atomic_op ffff888079260198 conn xmit_atomic 0000000000000000 [ 615.003183][ T5845] udevd[5845]: incorrect cramfs checksum on /dev/loop7 [ 615.776715][ T9765] cramfs: Error -5 while decompressing! [ 615.782420][ T9765] cramfs: ffffffff961ea028(26)->ffff888054cb2000(4096) [ 615.789599][ T9765] cramfs: Error -3 while decompressing! [ 615.795274][ T9765] cramfs: ffffffff961ea042(26)->ffff88805de2f000(4096) [ 615.802392][ T9765] cramfs: Error -3 while decompressing! [ 615.808059][ T9765] cramfs: ffffffff961ea05c(16)->ffff888055f37000(4096) [ 615.815499][ T9765] cramfs: Error -5 while decompressing! [ 615.821195][ T9765] cramfs: ffffffff961ea028(26)->ffff888054cb2000(4096) [ 615.837771][ T9761] loop6: detected capacity change from 0 to 8 [ 616.002948][ T9761] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 616.384967][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop7 [ 616.402273][ T9762] loop5: detected capacity change from 0 to 4096 [ 616.550332][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop6 [ 616.679199][ T9774] cramfs: Error -5 while decompressing! [ 616.685074][ T9774] cramfs: ffffffff961e6028(26)->ffff888051a3b000(4096) [ 616.692566][ T9774] cramfs: Error -3 while decompressing! [ 616.698217][ T9774] cramfs: ffffffff961e6042(26)->ffff88804f9c6000(4096) [ 616.705208][ T9774] cramfs: Error -3 while decompressing! [ 616.710834][ T9774] cramfs: ffffffff961e605c(16)->ffff88804f9c7000(4096) [ 616.756152][ T9774] cramfs: Error -5 while decompressing! [ 616.777589][ T9774] cramfs: ffffffff961e6028(26)->ffff888051a3b000(4096) [ 617.548660][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop6 [ 617.614862][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop6 [ 617.666084][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop6 [ 617.689714][ T9780] loop7: detected capacity change from 0 to 256 [ 618.705611][ T9785] loop3: detected capacity change from 0 to 64 [ 618.994025][ T25] audit: type=1326 audit(1753411529.833:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9760 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 619.278654][ T9762] overlayfs: './file1' not a directory [ 619.395939][ T25] audit: type=1326 audit(1753411530.104:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9760 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 620.109613][ T25] audit: type=1326 audit(1753411530.104:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9760 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 620.584349][ T25] audit: type=1326 audit(1753411530.104:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9760 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 620.593283][ T4937] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 620.613455][ T25] audit: type=1326 audit(1753411530.104:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9760 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 620.692153][ T4937] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 620.782865][ T25] audit: type=1326 audit(1753411530.104:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9760 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 620.813959][ T25] audit: type=1326 audit(1753411530.104:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9760 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 620.850437][ T9805] loop3: detected capacity change from 0 to 2048 [ 621.179781][ T9807] loop6: detected capacity change from 0 to 1024 [ 621.309035][ T25] audit: type=1326 audit(1753411530.104:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9760 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 621.492365][ T25] audit: type=1326 audit(1753411530.123:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9760 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 621.531056][ T25] audit: type=1326 audit(1753411530.123:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9760 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d16c9a9 code=0x7ffc0000 [ 622.600751][ T9805] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 623.844119][ T9835] loop6: detected capacity change from 0 to 8 [ 623.921484][ T9835] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 623.935804][ T5845] udevd[5845]: incorrect cramfs checksum on /dev/loop6 [ 624.036003][ T9838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: macsec1 [ 624.046037][ T9838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.060938][ T9838] device bridge0 entered promiscuous mode [ 624.073433][ T9838] batman_adv: batadv0: Adding interface: macsec1 [ 624.097255][ T9838] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.122582][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.129199][ T9838] batman_adv: batadv0: Interface activated: macsec1 [ 625.793548][ T9840] cramfs: Error -5 while decompressing! [ 625.799253][ T9840] cramfs: ffffffff961ea028(26)->ffff888072a1d000(4096) [ 625.807656][ T9840] cramfs: Error -3 while decompressing! [ 625.813697][ T9840] cramfs: ffffffff961ea042(26)->ffff888072a1e000(4096) [ 625.820770][ T9840] cramfs: Error -3 while decompressing! [ 625.826433][ T9840] cramfs: ffffffff961ea05c(16)->ffff888072a1f000(4096) [ 625.833752][ T9840] cramfs: Error -5 while decompressing! [ 625.839537][ T9840] cramfs: ffffffff961ea028(26)->ffff888072a1d000(4096) [ 626.400724][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop6 [ 626.832313][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop6 [ 627.434972][ T9848] loop5: detected capacity change from 0 to 512 [ 627.607649][ T9849] loop7: detected capacity change from 0 to 512 [ 627.839686][ T9849] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 627.875927][ T9848] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 628.004170][ T9849] EXT4-fs (loop7): 1 truncate cleaned up [ 628.010083][ T9849] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,sysvgroups,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 628.197621][ T9848] UDF-fs: error (device loop5): udf_read_inode: (ino 19) failed ident=264 [ 628.553368][ T9858] xt_NFQUEUE: number of total queues is 0 [ 629.172403][ T9860] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 631.772578][ T9878] loop5: detected capacity change from 0 to 1024 [ 631.786341][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.792676][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.313081][ T9878] EXT4-fs (loop5): Ignoring removed nobh option [ 632.319377][ T9878] EXT4-fs (loop5): Ignoring removed bh option [ 632.863740][ T9890] delete_channel: no stack [ 632.991847][ T9890] delete_channel: no stack [ 633.047464][ T9878] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue. Quota mode: writeback. [ 633.518036][ T9907] loop3: detected capacity change from 0 to 8 [ 633.851576][ T9907] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 633.858996][ T5845] udevd[5845]: incorrect cramfs checksum on /dev/loop3 [ 636.454310][ T9920] cramfs: Error -5 while decompressing! [ 636.492897][ T9920] cramfs: ffffffff961e6028(26)->ffff88804ecb1000(4096) [ 636.499808][ T9920] cramfs: Error -3 while decompressing! [ 636.533582][ T5845] udevd[5845]: incorrect cramfs checksum on /dev/loop3 [ 636.662762][ T9920] cramfs: ffffffff961e6042(26)->ffff88804ecb2000(4096) [ 636.669792][ T9920] cramfs: Error -3 while decompressing! [ 636.675451][ T9920] cramfs: ffffffff961e605c(16)->ffff88804ecb3000(4096) [ 636.682993][ T9920] cramfs: Error -5 while decompressing! [ 636.688629][ T9920] cramfs: ffffffff961e6028(26)->ffff88804ecb1000(4096) [ 639.402927][ T9951] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1481'. [ 639.873707][ T9958] loop3: detected capacity change from 0 to 8 [ 639.880481][ T9958] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 639.963628][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop3 [ 640.039922][ T9963] cramfs: Error -5 while decompressing! [ 640.045595][ T9963] cramfs: ffffffff961ea028(26)->ffff88805534c000(4096) [ 640.052704][ T9963] cramfs: Error -3 while decompressing! [ 640.058436][ T9963] cramfs: ffffffff961ea042(26)->ffff88805b904000(4096) [ 640.065455][ T9963] cramfs: Error -3 while decompressing! [ 640.071089][ T9963] cramfs: ffffffff961ea05c(16)->ffff888051be2000(4096) [ 640.078491][ T9963] cramfs: Error -5 while decompressing! [ 640.084108][ T9963] cramfs: ffffffff961ea028(26)->ffff88805534c000(4096) [ 642.482989][ T9960] loop5: detected capacity change from 0 to 512 [ 642.541033][ T9960] EXT4-fs (loop5): Unrecognized mount option "fsuuid=d 6fef [ 642.541033][ T9960] c-155b-9U9a-2c i-5033f538" or missing value [ 645.217757][ T9987] loop7: detected capacity change from 0 to 64 [ 645.685371][ T9993] minix_free_block (loop7:1): bit already cleared [ 645.691901][ T9993] minix_free_block (loop7:4): bit already cleared [ 645.698400][ T9993] minix_free_block (loop7:3): bit already cleared [ 645.704852][ T9993] minix_free_block (loop7:2): bit already cleared [ 645.711376][ T9993] minix_free_block (loop7:1): bit already cleared [ 647.731156][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1493'. [ 650.204516][T10025] xt_NFQUEUE: number of total queues is 0 [ 651.225600][T10025] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 652.448752][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1508'. [ 652.706707][T10037] loop7: detected capacity change from 0 to 131072 [ 652.760673][T10043] loop5: detected capacity change from 0 to 2048 [ 652.787487][T10040] loop3: detected capacity change from 0 to 2048 [ 652.895039][T10037] F2FS-fs (loop7): inline xattr size is out of range: 6 ~ 903 [ 652.912038][T10040] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 652.920964][T10043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 656.862830][T10068] loop3: detected capacity change from 0 to 8 [ 656.906453][T10066] loop5: detected capacity change from 0 to 40427 [ 656.944550][T10068] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 656.956943][T10066] F2FS-fs (loop5): invalid crc value [ 656.957481][ T5831] udevd[5831]: incorrect cramfs checksum on /dev/loop3 [ 657.001051][T10066] F2FS-fs (loop5): Found nat_bits in checkpoint [ 657.042809][T10066] F2FS-fs (loop5): Start checkpoint disabled! [ 657.111112][T10072] cramfs: Error -5 while decompressing! [ 657.116857][T10072] cramfs: ffffffff961e6028(26)->ffff888052691000(4096) [ 657.124798][T10072] cramfs: Error -3 while decompressing! [ 657.130526][T10072] cramfs: ffffffff961e6042(26)->ffff8880558de000(4096) [ 657.138349][T10072] cramfs: Error -3 while decompressing! [ 657.143963][T10072] cramfs: ffffffff961e605c(16)->ffff8880558df000(4096) [ 657.151248][T10072] cramfs: Error -5 while decompressing! [ 657.156843][T10072] cramfs: ffffffff961e6028(26)->ffff888052691000(4096) [ 657.209038][T10066] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 657.346968][T10074] loop6: detected capacity change from 0 to 8 [ 657.537346][T10074] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 657.660805][ T9033] udevd[9033]: incorrect cramfs checksum on /dev/loop6 [ 657.709803][ T5831] udevd[5831]: incorrect cramfs checksum on /dev/loop3 [ 658.193842][T10075] cramfs: Error -5 while decompressing! [ 658.199474][T10075] cramfs: ffffffff961ea028(26)->ffff888071177000(4096) [ 658.206629][T10075] cramfs: Error -3 while decompressing! [ 658.212214][T10075] cramfs: ffffffff961ea042(26)->ffff8880534ba000(4096) [ 658.219819][T10075] cramfs: Error -3 while decompressing! [ 658.225444][T10075] cramfs: ffffffff961ea05c(16)->ffff888051d23000(4096) [ 658.232793][T10075] cramfs: Error -5 while decompressing! [ 658.238530][T10075] cramfs: ffffffff961ea028(26)->ffff888071177000(4096) [ 660.040304][T10089] netlink: zone id is out of range [ 660.045533][T10089] netlink: zone id is out of range [ 660.050679][T10089] netlink: zone id is out of range [ 660.055905][T10089] netlink: zone id is out of range [ 660.061053][T10089] netlink: set zone limit has 8 unknown bytes [ 661.578774][ T4268] attempt to access beyond end of device [ 661.578774][ T4268] loop5: rw=2049, want=40968, limit=40427 [ 661.829559][T10108] loop7: detected capacity change from 0 to 32768 [ 661.928303][T10108] XFS: ikeep mount option is deprecated. [ 663.614667][T10108] XFS (loop7): Mounting V5 Filesystem [ 663.879511][T10116] loop5: detected capacity change from 0 to 128 [ 664.190918][T10116] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 664.249930][T10108] XFS (loop7): Ending clean mount [ 664.269439][T10108] XFS (loop7): Quotacheck needed: Please wait. [ 664.378261][T10131] loop6: detected capacity change from 0 to 512 [ 664.492377][T10116] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 664.687500][T10108] XFS (loop7): Quotacheck: Done. [ 664.708122][T10131] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1530: casefold flag without casefold feature [ 665.513285][T10131] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1530: couldn't read orphan inode 15 (err -117) [ 666.343080][T10131] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 666.573372][ T8616] XFS (loop7): Unmounting Filesystem [ 667.274404][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 667.283506][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 667.290963][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 667.300333][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 667.860006][T10146] loop5: detected capacity change from 0 to 2048 [ 669.293376][T10146] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 669.398326][T10163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1539'. [ 669.407584][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1539'. [ 669.417049][T10163] device bridge0 entered promiscuous mode [ 669.641272][T10168] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1535'. [ 670.491261][T10178] loop3: detected capacity change from 0 to 256 [ 670.788954][T10178] exfat: Deprecated parameter 'utf8' [ 670.794338][T10178] exfat: Deprecated parameter 'namecase' [ 670.800056][T10178] exfat: Deprecated parameter 'utf8' [ 670.817340][T10178] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 671.864725][T10186] loop6: detected capacity change from 0 to 2048 [ 672.157297][T10186] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 672.880848][T10195] device bpq0 entered promiscuous mode [ 672.896829][T10195] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 673.029908][T10195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.052004][T10195] bond0: (slave rose0): Enslaving as an active interface with an up link [ 673.060826][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 673.614522][T10198] netlink: 'syz.4.1548': attribute type 10 has an invalid length. [ 673.757609][T10198] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.1548'. [ 677.463972][T10256] device bpq0 left promiscuous mode [ 677.474026][T10256] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 677.562860][T10257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1560'. [ 678.676403][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1563'. [ 678.865959][T10264] batman_adv: batadv0: Interface deactivated: macsec1 [ 680.004993][T10264] batman_adv: batadv0: Removing interface: macsec1 [ 680.884927][T10290] loop6: detected capacity change from 0 to 4096 [ 682.514209][T10314] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 687.917994][T10362] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.929928][T10362] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.311449][T10365] loop3: detected capacity change from 0 to 512 [ 688.388551][T10365] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 690.591155][T10365] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 690.612223][T10365] EXT4-fs (loop3): 1 truncate cleaned up [ 690.620268][T10365] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 692.852828][ T25] kauditd_printk_skb: 19 callbacks suppressed [ 692.852843][ T25] audit: type=1326 audit(1753411856.182:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.5.1592" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f180d16c9a9 code=0x0 [ 695.836944][T10431] loop3: detected capacity change from 0 to 512 [ 696.567323][T10431] EXT4-fs (loop3): Unrecognized mount option "fsuuid=d 6fef [ 696.567323][T10431] c-155b-9U9a-2c i-5033f538" or missing value [ 696.581962][T10439] loop5: detected capacity change from 0 to 1024 [ 696.674624][T10444] delete_channel: no stack [ 696.679847][T10444] delete_channel: no stack [ 697.452726][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 697.459062][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 698.212058][T10459] hfsplus: xattr searching failed [ 698.219096][T10461] hfsplus: xattr searching failed [ 699.107499][T10468] loop3: detected capacity change from 0 to 32768 [ 699.109607][T10476] loop7: detected capacity change from 0 to 512 [ 699.169565][ T4308] hfsplus: bad catalog file entry [ 699.187080][ T4308] hfsplus: b-tree write err: -5, ino 3 [ 700.671543][T10493] loop5: detected capacity change from 0 to 8 [ 700.673119][T10476] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 700.700840][T10476] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 700.776755][T10476] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 700.876363][T10493] SQUASHFS error: zlib decompression failed, data probably corrupt [ 700.909531][T10476] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 700.940070][T10493] SQUASHFS error: Failed to read block 0x9b: -5 [ 700.950198][T10493] SQUASHFS error: Unable to read metadata cache entry [99] [ 700.962679][T10476] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102] [ 700.974275][T10476] System zones: 0-2, 18-18, 34-34 [ 701.007281][T10493] SQUASHFS error: Unable to read inode 0x127 [ 701.044046][T10476] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.1612: iget: bad i_size value: 360287970189639680 [ 701.131488][T10476] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.1612: couldn't read orphan inode 15 (err -117) [ 701.351274][T10476] EXT4-fs (loop7): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 701.883816][T10493] netlink: 'syz.5.1615': attribute type 4 has an invalid length. [ 702.481761][T10523] netlink: 'syz.5.1619': attribute type 2 has an invalid length. [ 702.489671][T10523] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1619'. [ 705.063708][T10540] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 705.796886][T10544] loop6: detected capacity change from 0 to 1024 [ 705.810009][T10545] loop5: detected capacity change from 0 to 8 [ 706.046824][T10545] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 706.147729][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop5 [ 706.241567][T10562] cramfs: Error -5 while decompressing! [ 706.247247][T10562] cramfs: ffffffff961e6028(26)->ffff88805dcb7000(4096) [ 706.254803][T10562] cramfs: Error -3 while decompressing! [ 706.260578][T10562] cramfs: ffffffff961e6042(26)->ffff88805d39d000(4096) [ 706.267640][T10562] cramfs: Error -3 while decompressing! [ 706.273723][T10562] cramfs: ffffffff961e605c(16)->ffff88804f2e6000(4096) [ 706.281615][T10562] cramfs: Error -5 while decompressing! [ 706.287259][T10562] cramfs: ffffffff961e6028(26)->ffff88805dcb7000(4096) [ 706.721544][T10544] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,acl,init_itable,max_dir_size_kb=0x0000000000000400,nodelalloc,grpid,usrquota,noauto_da_alloc,usrjquota=,errors=continue,,errors=continue. Quota mode: writeback. [ 709.229838][T10578] netlink: 'syz.7.1632': attribute type 10 has an invalid length. [ 709.246490][T10578] netlink: 210880 bytes leftover after parsing attributes in process `syz.7.1632'. [ 709.260317][ T6561] udevd[6561]: incorrect cramfs checksum on /dev/loop5 [ 709.580542][T10589] overlayfs: missing 'lowerdir' [ 711.820762][T10597] loop3: detected capacity change from 0 to 2048 [ 712.176568][ T6561] loop3: p1 < > p4 [ 712.210369][ T6561] loop3: p4 size 8388608 extends beyond EOD, truncated [ 712.393779][T10597] loop3: p1 < > p4 [ 712.418755][T10597] loop3: p4 size 8388608 extends beyond EOD, truncated [ 713.085003][T10635] loop7: detected capacity change from 0 to 8 [ 713.209525][T10635] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 713.473432][T10641] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 714.056476][T10642] cramfs: Error -5 while decompressing! [ 714.062158][T10642] cramfs: ffffffff961ea028(26)->ffff88805b8dd000(4096) [ 714.069306][T10642] cramfs: Error -3 while decompressing! [ 714.074959][T10642] cramfs: ffffffff961ea042(26)->ffff888055c6e000(4096) [ 714.081959][T10642] cramfs: Error -3 while decompressing! [ 714.087582][T10642] cramfs: ffffffff961ea05c(16)->ffff888055c6f000(4096) [ 714.095074][T10642] cramfs: Error -5 while decompressing! [ 714.100704][T10642] cramfs: ffffffff961ea028(26)->ffff88805b8dd000(4096) [ 714.399405][ T5831] udevd[5831]: incorrect cramfs checksum on /dev/loop7 [ 714.431438][ T6561] udevd[6561]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 714.444758][ T9033] udevd[9033]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 714.464509][T10648] loop3: detected capacity change from 0 to 1024 [ 714.474223][T10649] overlayfs: failed to clone upperpath [ 714.497041][ T5845] udevd[5845]: incorrect cramfs checksum on /dev/loop7 [ 715.107149][T10648] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,acl,init_itable,max_dir_size_kb=0x0000000000000400,nodelalloc,grpid,usrquota,noauto_da_alloc,usrjquota=,errors=continue,,errors=continue. Quota mode: writeback. [ 715.131157][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.508869][ T6561] udevd[6561]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 717.654056][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 717.782592][T10680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1656'. [ 718.674211][T10680] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 719.561830][ C1] ================================================================== [ 719.570590][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 719.578067][ C1] Read of size 2 at addr ffff8880601f542a by task ksoftirqd/1/20 [ 719.585786][ C1] [ 719.588113][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted 5.15.189-syzkaller #0 [ 719.596180][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 719.606249][ C1] Call Trace: [ 719.609532][ C1] [ 719.612474][ C1] dump_stack_lvl+0x168/0x230 [ 719.617170][ C1] ? show_regs_print_info+0x20/0x20 [ 719.622378][ C1] ? _printk+0xcc/0x110 [ 719.626538][ C1] ? rose_timer_expiry+0x470/0x490 [ 719.631670][ C1] ? load_image+0x3b0/0x3b0 [ 719.636187][ C1] print_address_description+0x60/0x2d0 [ 719.641747][ C1] ? rose_timer_expiry+0x470/0x490 [ 719.646863][ C1] kasan_report+0xdf/0x130 [ 719.651288][ C1] ? rose_timer_expiry+0x470/0x490 [ 719.656407][ C1] rose_timer_expiry+0x470/0x490 [ 719.661357][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 719.666394][ C1] call_timer_fn+0x16c/0x530 [ 719.670989][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 719.676015][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 719.682001][ C1] ? __run_timers+0x7c0/0x7c0 [ 719.686692][ C1] ? rcu_is_watching+0x11/0xa0 [ 719.691465][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 719.696673][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 719.701874][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 719.706905][ C1] __run_timers+0x525/0x7c0 [ 719.711425][ C1] ? detach_timer+0x2b0/0x2b0 [ 719.716120][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 719.722115][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 719.726978][ C1] run_timer_softirq+0x63/0xf0 [ 719.731739][ C1] handle_softirqs+0x328/0x820 [ 719.736485][ C1] ? run_ksoftirqd+0x98/0xf0 [ 719.741060][ C1] ? do_softirq+0x200/0x200 [ 719.745537][ C1] ? run_ksoftirqd+0x75/0xf0 [ 719.750098][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 719.755273][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 719.760533][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 719.765708][ C1] run_ksoftirqd+0x98/0xf0 [ 719.770099][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 719.775275][ C1] smpboot_thread_fn+0x4f6/0x970 [ 719.780193][ C1] kthread+0x436/0x520 [ 719.784238][ C1] ? cpu_report_death+0x180/0x180 [ 719.789236][ C1] ? kthread_blkcg+0xd0/0xd0 [ 719.793799][ C1] ret_from_fork+0x1f/0x30 [ 719.798206][ C1] [ 719.801200][ C1] [ 719.803497][ C1] Allocated by task 14: [ 719.807619][ C1] __kasan_kmalloc+0xb5/0xf0 [ 719.812182][ C1] __alloc_skb+0x22c/0x750 [ 719.816569][ C1] skb_copy+0x139/0x790 [ 719.820699][ C1] mac80211_hwsim_tx_frame_no_nl+0xcc7/0x15d0 [ 719.826741][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 719.832175][ C1] mac80211_hwsim_beacon_tx+0x4f3/0x920 [ 719.837693][ C1] __iterate_interfaces+0x243/0x500 [ 719.842867][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 719.849864][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 719.855035][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 719.860206][ C1] hrtimer_run_softirq+0x176/0x240 [ 719.865293][ C1] handle_softirqs+0x328/0x820 [ 719.870036][ C1] run_ksoftirqd+0x98/0xf0 [ 719.874423][ C1] smpboot_thread_fn+0x4f6/0x970 [ 719.879339][ C1] kthread+0x436/0x520 [ 719.883379][ C1] ret_from_fork+0x1f/0x30 [ 719.887768][ C1] [ 719.890067][ C1] Freed by task 4802: [ 719.894022][ C1] kasan_set_track+0x4b/0x70 [ 719.898584][ C1] kasan_set_free_info+0x1f/0x40 [ 719.903521][ C1] ____kasan_slab_free+0xd5/0x110 [ 719.908515][ C1] slab_free_freelist_hook+0xea/0x170 [ 719.913856][ C1] kfree+0xef/0x2a0 [ 719.917635][ C1] skb_release_data+0x6fe/0x850 [ 719.922455][ C1] kfree_skb_reason+0xaf/0x110 [ 719.927192][ C1] ieee80211_iface_work+0x798/0xc60 [ 719.932360][ C1] process_one_work+0x863/0x1000 [ 719.937270][ C1] worker_thread+0xaa8/0x12a0 [ 719.941920][ C1] kthread+0x436/0x520 [ 719.945962][ C1] ret_from_fork+0x1f/0x30 [ 719.950351][ C1] [ 719.952648][ C1] Last potentially related work creation: [ 719.958334][ C1] kasan_save_stack+0x35/0x60 [ 719.962986][ C1] kasan_record_aux_stack+0xb8/0x100 [ 719.968242][ C1] insert_work+0x54/0x3d0 [ 719.972544][ C1] __queue_work+0x9c5/0xd50 [ 719.977017][ C1] call_timer_fn+0x16c/0x530 [ 719.981590][ C1] __run_timers+0x550/0x7c0 [ 719.986063][ C1] run_timer_softirq+0x63/0xf0 [ 719.990799][ C1] handle_softirqs+0x328/0x820 [ 719.995536][ C1] run_ksoftirqd+0x98/0xf0 [ 719.999923][ C1] smpboot_thread_fn+0x4f6/0x970 [ 720.004832][ C1] kthread+0x436/0x520 [ 720.008876][ C1] ret_from_fork+0x1f/0x30 [ 720.013265][ C1] [ 720.015562][ C1] The buggy address belongs to the object at ffff8880601f5400 [ 720.015562][ C1] which belongs to the cache kmalloc-512 of size 512 [ 720.029584][ C1] The buggy address is located 42 bytes inside of [ 720.029584][ C1] 512-byte region [ffff8880601f5400, ffff8880601f5600) [ 720.042745][ C1] The buggy address belongs to the page: [ 720.048345][ C1] page:ffffea0001807d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x601f4 [ 720.058464][ C1] head:ffffea0001807d00 order:2 compound_mapcount:0 compound_pincount:0 [ 720.066759][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 720.074720][ C1] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016841c80 [ 720.083275][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 720.091827][ C1] page dumped because: kasan: bad access detected [ 720.098216][ C1] page_owner tracks the page as allocated [ 720.103901][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4189, ts 53429547513, free_ts 53426571588 [ 720.123923][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 720.129458][ C1] __alloc_pages+0x1e1/0x470 [ 720.134023][ C1] new_slab+0xc0/0x4b0 [ 720.138062][ C1] ___slab_alloc+0x81e/0xdf0 [ 720.142622][ C1] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 720.148398][ C1] pskb_expand_head+0x127/0x10f0 [ 720.153328][ C1] netlink_trim+0x180/0x220 [ 720.157805][ C1] netlink_broadcast_filtered+0x7c/0x1170 [ 720.163496][ C1] netlink_broadcast+0x33/0x40 [ 720.168231][ C1] devlink_port_type_eth_set+0x284/0x3c0 [ 720.173834][ C1] __nsim_dev_port_add+0x741/0x980 [ 720.178921][ C1] nsim_dev_port_add_all+0x37/0x100 [ 720.184096][ C1] nsim_dev_probe+0x754/0x9c0 [ 720.188754][ C1] really_probe+0x284/0xc80 [ 720.193230][ C1] __driver_probe_device+0x18c/0x330 [ 720.198501][ C1] driver_probe_device+0x4f/0x420 [ 720.203626][ C1] page last free stack trace: [ 720.208311][ C1] free_unref_page_prepare+0x637/0x6c0 [ 720.213758][ C1] free_unref_page+0x94/0x280 [ 720.218418][ C1] stack_depot_save+0x418/0x440 [ 720.223250][ C1] __kasan_slab_alloc+0xb3/0xd0 [ 720.228108][ C1] slab_post_alloc_hook+0x4c/0x380 [ 720.233516][ C1] kmem_cache_alloc+0x100/0x290 [ 720.238378][ C1] __debug_object_init+0x745/0xa40 [ 720.243475][ C1] init_timer_key+0x3d/0x2a0 [ 720.248045][ C1] batadv_hard_if_event+0x12a4/0x17e0 [ 720.253399][ C1] raw_notifier_call_chain+0xcb/0x160 [ 720.258770][ C1] register_netdevice+0x1275/0x16b0 [ 720.264120][ C1] nsim_create+0x32d/0x3e0 [ 720.268513][ C1] __nsim_dev_port_add+0x5c7/0x980 [ 720.273606][ C1] nsim_dev_port_add_all+0x37/0x100 [ 720.278782][ C1] nsim_dev_probe+0x754/0x9c0 [ 720.283452][ C1] really_probe+0x284/0xc80 [ 720.287947][ C1] [ 720.290250][ C1] Memory state around the buggy address: [ 720.295850][ C1] ffff8880601f5300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 720.303899][ C1] ffff8880601f5380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 720.311940][ C1] >ffff8880601f5400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 720.319975][ C1] ^ [ 720.325320][ C1] ffff8880601f5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 720.333358][ C1] ffff8880601f5500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 720.341392][ C1] ================================================================== [ 720.349439][ C1] Disabling lock debugging due to kernel taint [ 720.355662][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 720.362853][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G B 5.15.189-syzkaller #0 [ 720.372283][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 720.382318][ C1] Call Trace: [ 720.385578][ C1] [ 720.388485][ C1] dump_stack_lvl+0x168/0x230 [ 720.393153][ C1] ? show_regs_print_info+0x20/0x20 [ 720.398327][ C1] ? load_image+0x3b0/0x3b0 [ 720.402816][ C1] panic+0x2c9/0x7f0 [ 720.406686][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 720.411182][ C1] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 720.417049][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 720.422919][ C1] ? _raw_spin_unlock+0x40/0x40 [ 720.427745][ C1] ? print_memory_metadata+0x314/0x400 [ 720.433187][ C1] ? rose_timer_expiry+0x470/0x490 [ 720.438284][ C1] check_panic_on_warn+0x80/0xa0 [ 720.443208][ C1] ? rose_timer_expiry+0x470/0x490 [ 720.448298][ C1] end_report+0x6d/0xf0 [ 720.452433][ C1] kasan_report+0x102/0x130 [ 720.456910][ C1] ? rose_timer_expiry+0x470/0x490 [ 720.461996][ C1] rose_timer_expiry+0x470/0x490 [ 720.466908][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 720.471904][ C1] call_timer_fn+0x16c/0x530 [ 720.476472][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 720.481472][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 720.487438][ C1] ? __run_timers+0x7c0/0x7c0 [ 720.492089][ C1] ? rcu_is_watching+0x11/0xa0 [ 720.496935][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 720.502122][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 720.507298][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 720.512303][ C1] __run_timers+0x525/0x7c0 [ 720.516783][ C1] ? detach_timer+0x2b0/0x2b0 [ 720.521434][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 720.527390][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 720.532239][ C1] run_timer_softirq+0x63/0xf0 [ 720.536978][ C1] handle_softirqs+0x328/0x820 [ 720.541717][ C1] ? run_ksoftirqd+0x98/0xf0 [ 720.546280][ C1] ? do_softirq+0x200/0x200 [ 720.550757][ C1] ? run_ksoftirqd+0x75/0xf0 [ 720.555330][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 720.560501][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 720.565761][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 720.570934][ C1] run_ksoftirqd+0x98/0xf0 [ 720.575333][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 720.580506][ C1] smpboot_thread_fn+0x4f6/0x970 [ 720.585421][ C1] kthread+0x436/0x520 [ 720.589462][ C1] ? cpu_report_death+0x180/0x180 [ 720.594460][ C1] ? kthread_blkcg+0xd0/0xd0 [ 720.599023][ C1] ret_from_fork+0x1f/0x30 [ 720.603417][ C1] [ 720.606623][ C1] Kernel Offset: disabled [ 720.612394][ C1] Rebooting in 86400 seconds..