last executing test programs: 6m20.227835206s ago: executing program 0 (id=124): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket(0x10, 0x803, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, 0x0) 6m19.92145853s ago: executing program 0 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000080)="65be87527b788cdd256e008b66bfaa2d", 0x20) 6m18.925114744s ago: executing program 0 (id=127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@private, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000240)=0xa, 0x4) 6m17.749013501s ago: executing program 0 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x12f451, 0x0) umount2(0x0, 0x1) 6m17.451923595s ago: executing program 0 (id=140): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x2, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) 6m16.617949316s ago: executing program 0 (id=142): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 6m16.204835392s ago: executing program 32 (id=142): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 6m7.02403269s ago: executing program 4 (id=186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "00000000faffffff", "cb83a84cbae76006000000192b90d142", '\f_\x00', "e449990e9977d061"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r0, 0x1) 6m5.777476517s ago: executing program 4 (id=190): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@discard}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@dioread_lock}, {@norecovery}, {@nombcache}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}, {@resuid}, {@init_itable_val}, {@jqfmt_vfsv1}]}, 0x1, 0x558, &(0x7f0000000c00)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") getpid() mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x10000, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 6m4.731217672s ago: executing program 4 (id=196): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000800)={0x0, {{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000800)={0xc, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f0000010540)=[{&(0x7f0000010680)=""/222, 0xde}, {&(0x7f00000105c0)=""/192, 0xc0}], 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) 6m4.227869309s ago: executing program 4 (id=198): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x80, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, 0x0) close(0x3) r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x5, 0xf, 0x7, 0x80, 0x2, 0x3, 0x107f, 0x20000006, 0x4d, 0x6, 0x5f, 0x6, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x245, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000412f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x4, 0xfffffffe, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x8, 0x1, 0xea4, 0x1ff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0xfffffffe, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x6, 0x9, 0x7, 0x47, 0x8000, 0x0, 0x6d5a, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x418, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d1, 0xa, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x0, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x35, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x400001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0xffffff76, 0x80a2ed, 0x4, 0x2], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x8005, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x3, 0xa620, 0x7ba9, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x1, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x7f, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x805, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mknod(&(0x7f00000002c0)='./file0\x00', 0x8000, 0xdf5) 6m2.311986535s ago: executing program 4 (id=206): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000100)=[0xee00]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setregid(0x0, r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, 0x0) 6m1.310058549s ago: executing program 4 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) 6m0.834874216s ago: executing program 33 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) 2m27.394348957s ago: executing program 2 (id=959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x407f}]}, 0x28}}, 0x0) 2m26.394042772s ago: executing program 2 (id=962): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x1f91, 0x0, 0x0, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r6, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file1\x00', 0x8000, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59) close(r6) 2m24.734005115s ago: executing program 2 (id=970): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2m22.099011471s ago: executing program 2 (id=983): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200410, &(0x7f0000000a40)={[{@init_itable_val={'init_itable', 0x3d, 0xc0}}, {}, {@acl}, {@min_batch_time={'min_batch_time', 0x3d, 0xb044}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nomblk_io_submit}, {@nodelalloc}, {@auto_da_alloc}, {@norecovery}]}, 0x1, 0x591, &(0x7f0000000f80)="$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") chdir(&(0x7f0000000380)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x841c00, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0xfe, 0x19c, &(0x7f0000000440)="$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") r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x22, &(0x7f0000000400)=""/120, &(0x7f0000000480)=0x78) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x1, 0xffffffef, 0x9}) 2m20.267267167s ago: executing program 2 (id=986): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m18.153081746s ago: executing program 2 (id=993): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace$setregs(0xf, r0, 0x401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2) 2m17.018660732s ago: executing program 34 (id=993): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace$setregs(0xf, r0, 0x401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2) 1m31.794045731s ago: executing program 7 (id=1143): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000008900)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000020000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) fanotify_mark(0xffffffffffffffff, 0x201, 0x48001003, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$FUSE(r1, &(0x7f00000051c0)={0x2020}, 0x2020) 1m26.852715441s ago: executing program 7 (id=1157): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file2\x00', 0x90, &(0x7f0000003280)=ANY=[], 0x4, 0xd9c, &(0x7f0000001dc0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x64000}], 0x1, 0x7c00, 0x0, 0x3) 1m22.749396617s ago: executing program 7 (id=1165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x536, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, 0x0, 0x0, 0x100008) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m21.433852046s ago: executing program 7 (id=1170): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xfd, 0x24b, &(0x7f00000010c0)="$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") chdir(&(0x7f0000004340)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f0000004000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x58, &(0x7f0000000180)={[{@orlov}, {@acl}, {@nomblk_io_submit}, {@barrier}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x100}}, {@usrquota}, {@sysvgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0xffff}}]}, 0x0, 0x7ac, &(0x7f0000001640)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfd14) mknod(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x505002, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4d0101, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000002fc0)=""/4108, 0x100c) ioctl$PPPIOCGDEBUG(r1, 0x80047441, 0x0) 1m20.303724372s ago: executing program 7 (id=1175): r0 = fanotify_init(0x4, 0x101000) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x641, 0x1019, r1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setresuid(0x0, 0xee01, 0xee00) r2 = msgget$private(0x0, 0x790) msgsnd(r2, 0x0, 0x401, 0x0) msgctl$IPC_SET(r2, 0x1, 0x0) msgget$private(0x0, 0x509) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) msgctl$IPC_RMID(r2, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040a"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0403"], 0x14) 1m17.110091146s ago: executing program 7 (id=1181): socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000200)='L', 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x181001, 0x0) r1 = userfaultfd(0x801) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000002100)) 1m16.84473711s ago: executing program 35 (id=1181): socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000200)='L', 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x181001, 0x0) r1 = userfaultfd(0x801) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000002100)) 11.362344841s ago: executing program 3 (id=1423): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000400)={0x2, 0x1, 0x10, 0x0, 0x2}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 11.075269645s ago: executing program 5 (id=1425): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$xfs(&(0x7f0000009800), &(0x7f00000004c0)='./bus\x00', 0x1810c80, &(0x7f00000000c0)={[{@pqnoenforce}, {@noquota}, {@nouuid}, {@usrquota}, {@swalloc}, {@bsdgroups}, {@nodiscard}]}, 0x1, 0x98d8, &(0x7f0000013100)="$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") r1 = open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1001f0) fallocate(r1, 0x3, 0x1001, 0x10000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x6, 0x11, r2, 0x0) symlink(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 10.674641901s ago: executing program 8 (id=1433): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, &(0x7f0000001800)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bind$alg(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4000000000000a12, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) brk(0x400000ffc000) brk(0x400000ffc020) 10.447048734s ago: executing program 8 (id=1435): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 9.025184774s ago: executing program 3 (id=1437): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x6, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0) syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x4, 0x661, &(0x7f0000000dc0)="$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") ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0xfffffdfd, 0x8, 0x12, 0x300, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r0, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x10, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000540), &(0x7f0000000000)=""/7, 0x2}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 8.681400769s ago: executing program 5 (id=1438): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000003c0)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) recvmmsg$unix(r2, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) 8.526922201s ago: executing program 6 (id=1439): unshare(0x2040400) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000080)={0x3, 0x3, 0x8000}) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 7.449581466s ago: executing program 6 (id=1441): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 7.303950398s ago: executing program 5 (id=1442): sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x40004840) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x5}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 7.303351978s ago: executing program 8 (id=1443): io_setup(0x6, 0x0) syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002252e000180080001000000000008000200ac1e00010c000280050001000000000008000740000000014400108008000240000000070800034000000009080001"], 0xa8}}, 0x0) 7.253273838s ago: executing program 1 (id=1444): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r0 = gettid() ioperm(0x7, 0x2, 0x3) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x80000) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 7.238498429s ago: executing program 3 (id=1445): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 7.189963119s ago: executing program 6 (id=1447): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$inet_udplite(0x2, 0x2, 0x88) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x0, 0x9, 0xfffffffffffffffd, 0x81, 0x7fffffff, 0x100000000}, 0x0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 6.553601679s ago: executing program 8 (id=1448): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 6.393463951s ago: executing program 1 (id=1449): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 5.811677379s ago: executing program 3 (id=1450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x632, &(0x7f0000000000)="$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") r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) 5.810695409s ago: executing program 6 (id=1451): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0xc0d4, &(0x7f0000002700)=ANY=[], 0x1, 0x270, &(0x7f00000008c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) ftruncate(r0, 0x6) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{0x0, 0x2}, 'syz0\x00'}) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xee) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) 3.500296621s ago: executing program 1 (id=1452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x2, 0x6ee, &(0x7f0000032440)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 3.281400814s ago: executing program 5 (id=1453): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x458000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) 2.759500021s ago: executing program 6 (id=1454): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.444088805s ago: executing program 1 (id=1455): syz_io_uring_setup(0x4a5c, &(0x7f0000000000)={0x0, 0x3911, 0x8000, 0x1, 0x28a}, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@remote, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x7fffffe}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x20}}, 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.429802556s ago: executing program 8 (id=1456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20008801, &(0x7f0000000100)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2.193475359s ago: executing program 1 (id=1457): r0 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0xd9623000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 2.186499789s ago: executing program 5 (id=1467): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000002c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1.968390982s ago: executing program 3 (id=1458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, 0x3, 0x3, 0x301, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 1.890625763s ago: executing program 5 (id=1459): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) bind$ax25(r4, &(0x7f0000000380)={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) connect$rose(r3, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) 1.118310334s ago: executing program 8 (id=1460): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)={0x1, 0x0, [{0x0, 0xf3, &(0x7f0000000500)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) 1.103821324s ago: executing program 1 (id=1461): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xa04ce000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 1.027817425s ago: executing program 6 (id=1462): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 0s ago: executing program 3 (id=1463): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x0, 0x8, 0x12, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x0) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) kernel console output (not intermixed with test programs): req 02 val 2400 [ 160.013099][ T22] pwc: recv_control_msg error -71 req 02 val 2600 [ 160.038416][ T22] pwc: recv_control_msg error -71 req 02 val 2900 [ 160.065637][ T22] pwc: recv_control_msg error -71 req 02 val 2800 [ 160.078231][ T22] pwc: recv_control_msg error -71 req 04 val 1100 [ 160.103352][ T22] pwc: recv_control_msg error -71 req 04 val 1200 [ 160.125968][ T22] pwc: Registered as video103. [ 160.134156][ T22] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 160.162508][ T22] usb 3-1: USB disconnect, device number 3 [ 160.189554][ T5410] loop1: detected capacity change from 0 to 512 [ 160.220096][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.229352][ T5410] ext2: Unknown parameter 'appraise_type' [ 160.265585][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.320491][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.330639][ T4336] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.363325][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.395029][ T5173] device veth0_vlan entered promiscuous mode [ 160.493286][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.514119][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.543328][ T5173] device veth1_vlan entered promiscuous mode [ 160.700370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.732391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 160.756426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.768414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.782562][ T5173] device veth0_macvtap entered promiscuous mode [ 161.030674][ T5173] device veth1_macvtap entered promiscuous mode [ 161.060797][ T5427] loop2: detected capacity change from 0 to 164 [ 162.003301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.015608][ T5427] isofs_fill_super: root inode is not a directory. Corrupted media? [ 162.042747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 162.082054][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.095109][ T5430] loop1: detected capacity change from 0 to 128 [ 162.159435][ T5431] ptrace attach of "./syz-executor exec"[4256] was attempted by " [ 162.604657][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.616804][ T5430] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.736666][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.763876][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.798645][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.842820][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.901496][ T5173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.986790][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.994730][ T5430] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.015739][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.053792][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.072746][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.145792][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.174668][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.194469][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.216402][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.276355][ T5173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.329568][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.347693][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.413561][ T5173] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.450540][ T5173] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.479978][ T5173] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.522492][ T5173] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.622174][ T5442] loop2: detected capacity change from 0 to 16 [ 163.632088][ T5442] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 165.708859][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.772681][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.781307][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.842742][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.860849][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.889409][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 166.646247][ T5455] loop1: detected capacity change from 0 to 131072 [ 166.687121][ T5455] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(1024) [ 166.695812][ T5455] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 166.799899][ T5455] F2FS-fs (loop1): Found nat_bits in checkpoint [ 166.878680][ T5455] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 166.886181][ T5455] F2FS-fs (loop1): Mounted with checkpoint version = 1b41e955 [ 167.076199][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 167.334483][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 167.352174][ T27] usb 4-1: config 0 has no interfaces? [ 167.368041][ T27] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 167.395844][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.414294][ T27] usb 4-1: Product: syz [ 167.418591][ T27] usb 4-1: Manufacturer: syz [ 167.423438][ T27] usb 4-1: SerialNumber: syz [ 167.437701][ T27] usb 4-1: config 0 descriptor?? [ 167.534258][ T5484] loop2: detected capacity change from 0 to 8192 [ 167.681527][ T5490] __nla_validate_parse: 45 callbacks suppressed [ 167.681543][ T5490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.283'. [ 167.813210][ T5494] netlink: 36 bytes leftover after parsing attributes in process `syz.5.282'. [ 168.243994][ T4303] usb 4-1: USB disconnect, device number 2 [ 168.536862][ T5501] binder: 5499:5501 ioctl c0306201 0 returned -14 [ 169.944276][ T5515] xt_CT: No such helper "snmp_trap" [ 173.804047][ T5535] loop5: detected capacity change from 0 to 32768 [ 173.977020][ T5535] XFS (loop5): Mounting V5 Filesystem [ 174.788423][ T5535] XFS (loop5): log mount failed [ 174.948905][ T5575] loop2: detected capacity change from 0 to 512 [ 175.164328][ T5575] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 175.173601][ T5575] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.348881][ T5575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'. [ 176.418366][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 176.584845][ T5593] xt_hashlimit: size too large, truncated to 1048576 [ 177.433264][ T5599] loop2: detected capacity change from 0 to 2048 [ 177.545954][ T5599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.460568][ T5609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 178.559445][ T5614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 179.625585][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.711737][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.782620][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.834170][ T5630] device bridge_slave_0 left promiscuous mode [ 179.842228][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.885813][ T5630] device bridge_slave_1 left promiscuous mode [ 179.893747][ T5638] loop3: detected capacity change from 0 to 512 [ 179.922560][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.976280][ T5638] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 179.987823][ T5630] bond0: (slave bond_slave_0): Releasing backup interface [ 180.041158][ T5638] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.052689][ T5630] bond0: (slave bond_slave_1): Releasing backup interface [ 180.451328][ T5638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.321'. [ 180.707992][ T5630] team0: Port device team_slave_0 removed [ 180.818509][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 180.827400][ T5630] team0: Port device team_slave_1 removed [ 180.833881][ T5630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.849760][ T5630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.859153][ T5630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.867177][ T5630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.913463][ T5631] team0: Mode changed to "loadbalance" [ 180.981092][ T5634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.317'. [ 181.133741][ T5653] loop3: detected capacity change from 0 to 4096 [ 181.166278][ T5653] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 181.970427][ T5660] xt_hashlimit: size too large, truncated to 1048576 [ 182.578693][ T5661] 7B’ç÷ï: renamed from syzkaller0 [ 182.865613][ T5671] Zero length message leads to an empty skb [ 182.903711][ T5671] netlink: 'syz.1.329': attribute type 10 has an invalid length. [ 184.218279][ T5671] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 184.280086][ T5690] syz.2.332 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 185.498274][ T27] libceph: connect (1)[c::]:6789 error -101 [ 185.515491][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 185.660974][ T5708] ceph: No mds server is up or the cluster is laggy [ 185.822288][ T4304] libceph: connect (1)[c::]:6789 error -101 [ 185.862202][ T4304] libceph: mon0 (1)[c::]:6789 connect error [ 186.676968][ T5726] loop2: detected capacity change from 0 to 128 [ 186.684351][ T5726] FAT-fs (loop2): Unrecognized mount option "¼ [ 186.684351][ T5726] " or missing value [ 186.829160][ T26] audit: type=1804 audit(1747085507.366:33): pid=5725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.343" name="/newroot/74/file1" dev="fuse" ino=1 res=1 errno=0 [ 187.017388][ T26] audit: type=1800 audit(1747085507.416:34): pid=5725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.343" name="/" dev="fuse" ino=1 res=0 errno=0 [ 187.713196][ T5734] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 187.728550][ T5734] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 188.279056][ T5740] infiniband syz2: set down [ 188.284072][ T5740] infiniband syz2: added ipvlan1 [ 188.484962][ T5740] RDS/IB: syz2: added [ 188.492592][ T5740] smc: adding ib device syz2 with port count 1 [ 188.499731][ T5740] smc: ib device syz2 port 1 has pnetid [ 191.122023][ T26] audit: type=1804 audit(1747085511.666:35): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.357" name="/newroot/23/file1" dev="fuse" ino=1 res=1 errno=0 [ 191.161950][ T26] audit: type=1800 audit(1747085511.666:36): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.357" name="/" dev="fuse" ino=1 res=0 errno=0 [ 191.353207][ T5778] loop5: detected capacity change from 0 to 256 [ 191.387302][ T5778] FAT-fs (loop5): Directory bread(block 64) failed [ 191.393917][ T5778] FAT-fs (loop5): Directory bread(block 65) failed [ 191.400686][ T5778] FAT-fs (loop5): Directory bread(block 66) failed [ 191.407281][ T5778] FAT-fs (loop5): Directory bread(block 67) failed [ 191.413879][ T5778] FAT-fs (loop5): Directory bread(block 68) failed [ 191.420482][ T5778] FAT-fs (loop5): Directory bread(block 69) failed [ 191.427267][ T5778] FAT-fs (loop5): Directory bread(block 70) failed [ 191.433966][ T5778] FAT-fs (loop5): Directory bread(block 71) failed [ 191.441124][ T5778] FAT-fs (loop5): Directory bread(block 72) failed [ 191.447754][ T5778] FAT-fs (loop5): Directory bread(block 73) failed [ 191.972960][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 192.182224][ T22] usb 3-1: config 0 has no interfaces? [ 192.188776][ T22] usb 3-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 192.333249][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.407377][ T22] usb 3-1: config 0 descriptor?? [ 192.753406][ T5805] netlink: 'syz.6.368': attribute type 10 has an invalid length. [ 192.907864][ T5805] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 192.977098][ T5807] xt_nat: multiple ranges no longer supported [ 193.018192][ T4299] usb 3-1: USB disconnect, device number 4 [ 194.150207][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.156781][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.763277][ T5830] netlink: 56 bytes leftover after parsing attributes in process `syz.2.375'. [ 196.233523][ T4264] Bluetooth: hci1: command 0x0406 tx timeout [ 196.257398][ T4264] Bluetooth: hci2: command 0x0406 tx timeout [ 196.258378][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 196.441529][ T5843] netlink: 'syz.2.382': attribute type 10 has an invalid length. [ 196.537518][ T5843] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 197.585386][ T5858] loop5: detected capacity change from 0 to 256 [ 197.592377][ T5858] exfat: Deprecated parameter 'utf8' [ 197.613360][ T5858] exfat: Deprecated parameter 'namecase' [ 197.622082][ T5860] netlink: 24 bytes leftover after parsing attributes in process `syz.6.391'. [ 197.638207][ T5858] exfat: Deprecated parameter 'utf8' [ 197.663763][ T5858] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 197.693477][ T5864] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 197.718373][ T5858] bio_check_eod: 1 callbacks suppressed [ 197.718385][ T5858] syz.5.388: attempt to access beyond end of device [ 197.718385][ T5858] loop5: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 197.805432][ T5858] syz.5.388: attempt to access beyond end of device [ 197.805432][ T5858] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 197.853171][ T26] audit: type=1800 audit(1747085518.396:37): pid=5858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.388" name="file1" dev="loop5" ino=1048616 res=0 errno=0 [ 198.025661][ T5875] loop1: detected capacity change from 0 to 256 [ 198.246916][ T4283] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 198.924690][ T4283] usb 4-1: Using ep0 maxpacket: 16 [ 198.942441][ T4283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 199.031701][ T4283] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 199.450305][ T4283] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 199.473058][ T4283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.510882][ T4283] usb 4-1: config 0 descriptor?? [ 199.863872][ T5899] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 199.979605][ T4283] usbhid 4-1:0.0: can't add hid device: -71 [ 199.990523][ T4283] usbhid: probe of 4-1:0.0 failed with error -71 [ 200.013575][ T4283] usb 4-1: USB disconnect, device number 3 [ 200.411192][ T5912] syz.6.407 uses obsolete (PF_INET,SOCK_PACKET) [ 202.072161][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.410'. [ 202.091472][ T5928] loop2: detected capacity change from 0 to 16 [ 202.108745][ T5928] erofs: (device loop2): mounted with root inode @ nid 36. [ 202.286149][ T5925] device bond3 entered promiscuous mode [ 202.297102][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.410'. [ 203.206765][ T5932] device bond3 left promiscuous mode [ 203.212270][ T5932] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.887869][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 209.095671][ T7] usb 3-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.131052][ T7] usb 3-1: config 9 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.167747][ T7] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 209.184442][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.459060][ T5984] loop2: detected capacity change from 0 to 512 [ 209.567264][ T5984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 209.584939][ T5984] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.819617][ T7] usbhid 3-1:9.0: can't add hid device: -71 [ 209.834507][ T7] usbhid: probe of 3-1:9.0 failed with error -71 [ 209.844891][ T7] usb 3-1: USB disconnect, device number 5 [ 210.961621][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 211.892363][ T6019] loop1: detected capacity change from 0 to 2048 [ 212.270682][ T6019] loop1: p2 < > p3 p4 [ 212.281927][ T6019] loop1: p3 start 65535 is beyond EOD, truncated [ 212.292231][ T6019] loop1: p4 size 8192 extends beyond EOD, truncated [ 212.728214][ T6035] loop1: detected capacity change from 0 to 512 [ 213.178478][ T6035] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 213.191712][ T6035] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.274990][ T26] audit: type=1804 audit(1747085533.816:38): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.440" name="/newroot/100/file1/file2" dev="loop1" ino=16 res=1 errno=0 [ 213.361300][ T6035] EXT4-fs (loop1): unmounting filesystem. [ 213.580287][ T6047] loop1: detected capacity change from 0 to 512 [ 215.747796][ T7] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 215.849035][ T6075] loop5: detected capacity change from 0 to 1024 [ 215.869857][ T6075] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 215.936931][ T7] usb 3-1: config 1 interface 0 has no altsetting 0 [ 215.977974][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 215.978195][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 216.011036][ T14] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 216.016064][ T6075] loop5: detected capacity change from 0 to 1024 [ 216.027369][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.027409][ T7] usb 3-1: Product: syz [ 216.027425][ T7] usb 3-1: Manufacturer: syz [ 216.027440][ T7] usb 3-1: SerialNumber: syz [ 216.093640][ T6075] EXT4-fs: Ignoring removed i_version option [ 216.113662][ T6075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.140789][ T6075] EXT4-fs: Ignoring removed oldalloc option [ 216.155546][ T6075] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 216.301956][ T6075] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 216.340219][ T6075] hid-generic 0000:0000:0000.0001: pid 6075 passed too short report [ 216.493385][ T7] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 216.594988][ T4875] EXT4-fs (loop5): unmounting filesystem. [ 217.085739][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 217.289655][ T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 217.304744][ T27] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 217.332956][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 217.348851][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 217.361248][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 217.388648][ T27] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 217.416629][ T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 217.437460][ T27] usb 2-1: Product: syz [ 217.447135][ T27] usb 2-1: Manufacturer: syz [ 217.470869][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 217.481543][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 217.500994][ T27] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 217.516896][ T27] cdc_wdm 2-1:1.0: Unknown control protocol [ 218.545999][ T7] usb 3-1: USB disconnect, device number 6 [ 218.559273][ T7] usblp0: removed [ 218.727521][ T6113] loop3: detected capacity change from 0 to 8192 [ 218.751787][ T6113] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 218.770819][ T6113] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 218.782012][ T6113] REISERFS (device loop3): using ordered data mode [ 218.789094][ T6113] reiserfs: using flush barriers [ 218.801915][ T6113] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 218.855231][ T6119] bridge_slave_0: default FDB implementation only supports local addresses [ 218.873065][ T6113] REISERFS (device loop3): checking transaction log (loop3) [ 218.882461][ T26] audit: type=1326 audit(1747085539.426:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.5.468" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3b278e969 code=0x0 [ 219.705914][ T14] usb 2-1: USB disconnect, device number 3 [ 219.874905][ T6113] REISERFS (device loop3): Using tea hash to sort names [ 219.933808][ T6113] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 220.173523][ T6134] loop1: detected capacity change from 0 to 4096 [ 220.207845][ T6134] NILFS (loop1): invalid segment: Checksum error in segment payload [ 220.227447][ T6134] NILFS (loop1): trying rollback from an earlier position [ 220.283902][ T6134] NILFS (loop1): recovery complete [ 220.327005][ T6138] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.429232][ T26] audit: type=1800 audit(1747085540.976:40): pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.471" name="bus" dev="loop1" ino=12 res=0 errno=0 [ 220.553798][ T6141] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 220.606155][ T6141] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 223.040752][ T6164] loop3: detected capacity change from 0 to 512 [ 224.713201][ T6164] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 224.764580][ T6164] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.581940][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 226.835761][ T6192] device gtp0 entered promiscuous mode [ 227.126863][ T6194] loop2: detected capacity change from 0 to 40427 [ 227.136025][ T6194] F2FS-fs (loop2): build fault injection attr: rate: 693, type: 0x3ffff [ 227.147049][ T6194] F2FS-fs (loop2): invalid crc value [ 227.198366][ T6194] F2FS-fs (loop2): Found nat_bits in checkpoint [ 227.333399][ T6194] F2FS-fs (loop2): Start checkpoint disabled! [ 227.393716][ T6194] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 227.530642][ T6206] F2FS-fs (loop2) : inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x9ca/0x1980 [ 227.543816][ T6206] syz.2.490: attempt to access beyond end of device [ 227.543816][ T6206] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 228.430175][ T75] kworker/u4:4: attempt to access beyond end of device [ 228.430175][ T75] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 228.892118][ T6218] loop5: detected capacity change from 0 to 2048 [ 228.933792][ T6218] UDF-fs: bad mount option "lastblock=0000000000Îü~4\|"06" or missing value [ 231.024535][ T3639] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 231.085172][ T6258] loop2: detected capacity change from 0 to 4096 [ 231.103317][ T6258] NILFS (loop2): invalid segment: Checksum error in segment payload [ 231.112086][ T6258] NILFS (loop2): trying rollback from an earlier position [ 231.133704][ T6258] NILFS (loop2): recovery complete [ 231.141577][ T6259] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.175771][ T26] audit: type=1800 audit(1747085551.726:41): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.507" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 231.210400][ T6258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 231.216288][ T3639] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.220807][ T6258] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 231.232907][ T3639] usb 6-1: config 0 has no interfaces? [ 231.249505][ T3639] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 231.259008][ T3639] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.269767][ T3639] usb 6-1: config 0 descriptor?? [ 231.565746][ T6262] netlink: 40 bytes leftover after parsing attributes in process `syz.5.504'. [ 231.591070][ T4299] usb 6-1: USB disconnect, device number 2 [ 234.166010][ T6279] netlink: 'syz.3.512': attribute type 16 has an invalid length. [ 234.184037][ T6279] netlink: 'syz.3.512': attribute type 17 has an invalid length. [ 234.249808][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.274640][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.291099][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.373349][ T6279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.871581][ T6308] loop3: detected capacity change from 0 to 2048 [ 234.928518][ T6308] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 235.819794][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 237.379058][ T6350] loop1: detected capacity change from 0 to 32768 [ 237.480040][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.529'. [ 237.708609][ T6350] XFS (loop1): Mounting V5 Filesystem [ 237.772103][ T6348] loop3: detected capacity change from 0 to 4096 [ 237.929409][ T6348] NILFS (loop3): invalid segment: Checksum error in segment payload [ 237.944599][ T6348] NILFS (loop3): trying rollback from an earlier position [ 237.951775][ T6350] XFS (loop1): Ending clean mount [ 238.219792][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.229505][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.237021][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.664550][ T6348] NILFS (loop3): recovery complete [ 238.674550][ T6368] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.675690][ T4266] XFS (loop1): Unmounting Filesystem [ 238.889937][ T26] audit: type=1800 audit(1747085559.436:42): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.525" name="bus" dev="loop3" ino=12 res=0 errno=0 [ 238.940338][ T6348] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.733066][ T6348] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 240.395085][ T6374] loop2: detected capacity change from 0 to 32768 [ 240.451340][ T6374] XFS (loop2): Mounting V5 Filesystem [ 240.623829][ T6374] XFS (loop2): Ending clean mount [ 240.664478][ T6374] XFS (loop2): Quotacheck needed: Please wait. [ 240.815798][ T6374] XFS (loop2): Quotacheck: Done. [ 241.357967][ T4256] XFS (loop2): Unmounting Filesystem [ 241.432846][ T6414] loop3: detected capacity change from 0 to 1024 [ 241.440344][ T6414] EXT4-fs: Ignoring removed nobh option [ 241.446685][ T6414] EXT4-fs: Ignoring removed bh option [ 241.537401][ T6414] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 241.570872][ T26] audit: type=1800 audit(1747085562.116:43): pid=6414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.543" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 241.609954][ T6414] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.543: Allocating blocks 385-513 which overlap fs metadata [ 241.677703][ T6414] EXT4-fs (loop3): pa ffff8880728438c0: logic 16, phys. 129, len 24 [ 241.686237][ T6414] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 241.908021][ T4261] Trying to write to read-only block-device loop3 [ 241.939159][ T4261] Trying to write to read-only block-device loop3 [ 241.980061][ T4261] Trying to write to read-only block-device loop3 [ 242.005311][ T4261] Trying to write to read-only block-device loop3 [ 242.025457][ T4261] Trying to write to read-only block-device loop3 [ 242.043513][ T6425] loop1: detected capacity change from 0 to 64 [ 242.050089][ T4261] Trying to write to read-only block-device loop3 [ 242.083739][ T4261] Trying to write to read-only block-device loop3 [ 242.103422][ T4261] Trying to write to read-only block-device loop3 [ 242.120873][ T4261] Trying to write to read-only block-device loop3 [ 242.174815][ T4261] Trying to write to read-only block-device loop3 [ 242.191284][ T6425] hfs: request for non-existent node 237 in B*Tree [ 242.200679][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 242.215672][ T6425] hfs: request for non-existent node 237 in B*Tree [ 242.251374][ T6425] hfs: request for non-existent node 237 in B*Tree [ 242.288170][ T6425] hfs: request for non-existent node 237 in B*Tree [ 242.359568][ T6425] hfs: request for non-existent node 237 in B*Tree [ 244.151995][ T6425] hfs: request for non-existent node 237 in B*Tree [ 244.952524][ T6444] loop2: detected capacity change from 0 to 2048 [ 244.962899][ T6447] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 245.008272][ T6444] loop2: p1 < > p3 [ 245.013832][ T6444] loop2: p3 size 134217728 extends beyond EOD, truncated [ 245.028473][ T6442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.042362][ T6442] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 246.211804][ T6462] netlink: 24 bytes leftover after parsing attributes in process `syz.5.556'. [ 246.744715][ T4303] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 246.966135][ T4303] usb 4-1: Using ep0 maxpacket: 8 [ 247.096121][ T4303] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 247.121349][ T6469] team0: Port device team_slave_1 removed [ 247.128083][ T4303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.175623][ T4303] usb 4-1: Product: syz [ 247.179816][ T4303] usb 4-1: Manufacturer: syz [ 247.194608][ T4303] usb 4-1: SerialNumber: syz [ 247.212597][ T4303] usb 4-1: config 0 descriptor?? [ 247.233505][ T4303] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 247.286835][ T6476] loop1: detected capacity change from 0 to 128 [ 247.337254][ T6476] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 247.365567][ T6476] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.589991][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 248.707728][ T6500] loop2: detected capacity change from 0 to 1024 [ 249.172935][ T11] hfsplus: b-tree write err: -5, ino 4 [ 249.193824][ T26] audit: type=1326 audit(1747085569.736:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 249.236833][ T26] audit: type=1326 audit(1747085569.746:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 249.246995][ T6505] loop1: detected capacity change from 0 to 128 [ 249.266997][ T26] audit: type=1326 audit(1747085569.746:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 249.293821][ T26] audit: type=1326 audit(1747085569.746:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 249.318138][ T26] audit: type=1326 audit(1747085569.746:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 249.342101][ T26] audit: type=1326 audit(1747085569.746:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 249.366924][ T26] audit: type=1326 audit(1747085569.746:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 249.390868][ T6507] syz.1.569: attempt to access beyond end of device [ 249.390868][ T6507] loop1: rw=2049, sector=145, nr_sectors = 552 limit=128 [ 249.402844][ T26] audit: type=1326 audit(1747085569.746:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 249.615202][ T26] audit: type=1326 audit(1747085569.746:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 250.398420][ T6505] syz.1.569: attempt to access beyond end of device [ 250.398420][ T6505] loop1: rw=524288, sector=145, nr_sectors = 552 limit=128 [ 250.427368][ T26] audit: type=1326 audit(1747085569.746:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 250.491093][ T6514] loop5: detected capacity change from 0 to 4096 [ 250.553012][ T6514] NILFS (loop5): invalid segment: Checksum error in segment payload [ 250.609315][ T6514] NILFS (loop5): trying rollback from an earlier position [ 250.637696][ T6514] NILFS (loop5): recovery complete [ 250.767976][ T4303] gspca_sonixj: reg_w1 err -71 [ 250.773599][ T6522] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 251.842349][ T4303] sonixj: probe of 4-1:0.0 failed with error -71 [ 251.851675][ T4303] usb 4-1: USB disconnect, device number 4 [ 252.075525][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 252.086166][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.093744][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.121098][ T6514] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 252.564510][ T4270] Bluetooth: hci0: command 0x0406 tx timeout [ 252.964668][ T4283] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 254.094744][ T4283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 254.126453][ T4283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.924925][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.931262][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.979816][ T4283] usb 2-1: string descriptor 0 read error: -71 [ 256.024432][ T4283] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 256.075391][ T4283] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 256.120600][ T4283] usb 2-1: config 0 descriptor?? [ 256.133061][ T6561] netlink: 'syz.2.587': attribute type 1 has an invalid length. [ 256.149541][ T4283] usb 2-1: can't set config #0, error -71 [ 256.187459][ T6561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.210511][ T4283] usb 2-1: USB disconnect, device number 4 [ 256.388120][ T6569] bond1: (slave veth3): Enslaving as an active interface with a down link [ 257.012821][ T6561] device veth1 entered promiscuous mode [ 257.061066][ T6561] device veth1 left promiscuous mode [ 257.069385][ T6561] bond1: (slave vlan3): making interface the new active one [ 257.078110][ T6561] device veth1 entered promiscuous mode [ 257.086085][ T6561] device vlan3 entered promiscuous mode [ 257.094862][ T6561] bond1: (slave vlan3): Enslaving as an active interface with an up link [ 257.112427][ T6298] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 259.779989][ T6612] loop2: detected capacity change from 0 to 1024 [ 259.823999][ T6612] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 259.913744][ T6624] overlayfs: failed to clone upperpath [ 261.564827][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 261.704323][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'. [ 263.404484][ T4283] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 263.614594][ T4283] usb 3-1: Using ep0 maxpacket: 32 [ 263.638587][ T4283] usb 3-1: config 0 has no interfaces? [ 263.662198][ T4283] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 263.681758][ T4283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.702423][ T4283] usb 3-1: Product: syz [ 263.717643][ T4283] usb 3-1: Manufacturer: syz [ 263.732482][ T4283] usb 3-1: SerialNumber: syz [ 263.758312][ T4283] usb 3-1: config 0 descriptor?? [ 263.994224][ T6651] capability: warning: `syz.6.612' uses deprecated v2 capabilities in a way that may be insecure [ 264.569241][ T4387] usb 3-1: USB disconnect, device number 7 [ 264.593663][ T6668] sg_write: data in/out 1633771837/64 bytes for SCSI command 0x61-- guessing data in; [ 264.593663][ T6668] program syz.5.617 not setting count and/or reply_len properly [ 264.614011][ T6668] sg_write: data in/out 1818846731/36 bytes for SCSI command 0x61-- guessing data in; [ 264.614011][ T6668] program syz.5.617 not setting count and/or reply_len properly [ 264.647364][ T6668] sg_write: data in/out 1633771837/120 bytes for SCSI command 0x61-- guessing data in; [ 264.647364][ T6668] program syz.5.617 not setting count and/or reply_len properly [ 264.667672][ T6668] sg_write: data in/out 1633771837/36 bytes for SCSI command 0x61-- guessing data in; [ 264.667672][ T6668] program syz.5.617 not setting count and/or reply_len properly [ 264.805743][ T6677] netlink: 'syz.5.620': attribute type 4 has an invalid length. [ 264.951404][ T6680] netlink: 'syz.5.620': attribute type 4 has an invalid length. [ 266.026508][ T6698] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 266.059980][ T6698] overlayfs: failed to set xattr on upper [ 266.086750][ T6698] overlayfs: ...falling back to index=off,metacopy=off. [ 266.098189][ T6698] overlayfs: failed to resolve './file0': -2 [ 266.170688][ T6704] loop2: detected capacity change from 0 to 256 [ 266.558738][ T6704] exFAT-fs (loop2): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 266.562831][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.6.633'. [ 266.596908][ T6704] exFAT-fs (loop2): Filesystem has been set read-only [ 267.904469][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 268.081306][ T6742] loop3: detected capacity change from 0 to 2048 [ 268.171495][ T6742] loop3: p1 < > p3 [ 268.190857][ T6742] loop3: p3 size 134217728 extends beyond EOD, truncated [ 268.323196][ T6742] loop3: detected capacity change from 0 to 1024 [ 269.499756][ T6770] netlink: 'syz.3.648': attribute type 1 has an invalid length. [ 269.558780][ T6770] device bond4 entered promiscuous mode [ 269.581815][ T6773] bond4: (slave ip6gretap1): making interface the new active one [ 269.650742][ T6773] device ip6gretap1 entered promiscuous mode [ 269.667087][ T6776] IPVS: length: 32 != 8 [ 269.686228][ T6773] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 269.695525][ T6770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.648'. [ 269.736320][ T6770] device bond4 left promiscuous mode [ 269.743421][ T6770] device ip6gretap1 left promiscuous mode [ 269.752807][ T6770] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.975950][ T6786] loop3: detected capacity change from 0 to 1024 [ 269.989530][ T6789] netlink: 24 bytes leftover after parsing attributes in process `syz.6.655'. [ 270.003075][ T6786] ext2: Unknown parameter 'defcontext' [ 270.030822][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.6.655'. [ 271.151935][ T6810] netlink: 108 bytes leftover after parsing attributes in process `syz.5.662'. [ 271.526678][ T6818] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 271.888276][ T6827] netlink: set zone limit has 8 unknown bytes [ 273.633685][ T6839] random: crng reseeded on system resumption [ 274.016808][ T6839] Restarting kernel threads ... done. [ 274.545874][ T6305] device vlan3 left promiscuous mode [ 275.931706][ T6869] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 276.037756][ T6869] bond4: (slave ip6gretap1): Releasing active interface [ 276.290681][ T6876] loop3: detected capacity change from 0 to 128 [ 278.494566][ T4303] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 278.694764][ T4303] usb 4-1: Using ep0 maxpacket: 32 [ 278.702223][ T4303] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 278.721041][ T4303] usb 4-1: config 0 has no interface number 0 [ 278.741284][ T4303] usb 4-1: config 0 interface 184 has no altsetting 0 [ 278.763140][ T4303] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 278.782549][ T4303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.792049][ T4303] usb 4-1: Product: syz [ 278.806478][ T4303] usb 4-1: Manufacturer: syz [ 278.811307][ T4303] usb 4-1: SerialNumber: syz [ 278.996515][ T4303] usb 4-1: config 0 descriptor?? [ 279.015614][ T4303] smsc75xx v1.0.0 [ 279.019311][ T4303] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 279.030438][ T4303] smsc75xx: probe of 4-1:0.184 failed with error -22 [ 281.664432][ T7] usb 4-1: USB disconnect, device number 5 [ 281.905399][ T6940] loop1: detected capacity change from 0 to 1024 [ 282.009673][ T6940] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 283.556804][ T6959] netlink: 104 bytes leftover after parsing attributes in process `syz.3.707'. [ 283.694941][ T6962] device team0 entered promiscuous mode [ 283.751247][ T6962] device team_slave_0 entered promiscuous mode [ 283.814716][ T6962] device team_slave_1 entered promiscuous mode [ 283.868037][ T6960] device team0 left promiscuous mode [ 283.912672][ T6960] device team_slave_0 left promiscuous mode [ 283.948435][ T6960] device team_slave_1 left promiscuous mode [ 284.471508][ T6972] loop1: detected capacity change from 0 to 1024 [ 284.516274][ T6972] EXT4-fs: Ignoring removed orlov option [ 284.534486][ T6972] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.635389][ T6972] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 285.534975][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 287.537328][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.718'. [ 288.429117][ T7012] loop3: detected capacity change from 0 to 1024 [ 288.439397][ T7012] journal_path: Lookup failure for './file1' [ 288.445544][ T7012] EXT4-fs: error: could not find journal device path [ 288.836120][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.722'. [ 288.849907][ T7013] device syz_tun entered promiscuous mode [ 289.074990][ T7013] device macvtap1 entered promiscuous mode [ 289.405330][ T7019] device syz_tun left promiscuous mode [ 291.717732][ T4299] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 292.448848][ T7055] loop3: detected capacity change from 0 to 1024 [ 292.485485][ T7055] EXT4-fs: Ignoring removed orlov option [ 292.491248][ T7055] /dev/loop3: Can't open blockdev [ 292.522601][ T7056] loop1: detected capacity change from 0 to 2048 [ 292.555720][ T7058] loop2: detected capacity change from 0 to 512 [ 292.675961][ T7058] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #3: comm syz.2.736: corrupted inode contents [ 292.701834][ T4299] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 292.718691][ T4299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.722547][ T7056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 292.734999][ T7058] EXT4-fs error (device loop2): ext4_dirty_inode:6118: inode #3: comm syz.2.736: mark_inode_dirty error [ 292.751060][ T7056] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 292.753674][ T4299] usb 6-1: config 0 descriptor?? [ 292.771722][ T7056] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 292.781135][ T7058] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #3: comm syz.2.736: corrupted inode contents [ 292.786824][ T4299] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 292.992654][ T7056] EXT4-fs (loop1): This should not happen!! Data will be lost [ 292.992654][ T7056] [ 293.075724][ T7058] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.736: mark_inode_dirty error [ 293.241304][ T7058] __quota_error: 12 callbacks suppressed [ 293.241444][ T7058] Quota error (device loop2): write_blk: dquota write failed [ 293.420220][ T7058] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 293.432455][ T7056] EXT4-fs (loop1): Total free blocks count 0 [ 293.459805][ T7056] EXT4-fs (loop1): Free/Dirty block details [ 293.466187][ T7058] EXT4-fs error (device loop2): ext4_acquire_dquot:6802: comm syz.2.736: Failed to acquire dquot type 0 [ 293.474595][ T7056] EXT4-fs (loop1): free_blocks=2415919104 [ 293.504580][ T7056] EXT4-fs (loop1): dirty_blocks=48 [ 293.507345][ T7058] EXT4-fs (loop2): 1 orphan inode deleted [ 293.509801][ T7056] EXT4-fs (loop1): Block reservation details [ 293.537308][ T6305] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 293.551489][ T7058] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 293.564548][ T7056] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 293.574764][ T6305] EXT4-fs error (device loop2): ext4_release_dquot:6838: comm kworker/u4:25: Failed to release dquot type 1 [ 293.577465][ T7058] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.713979][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 293.907709][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 293.920531][ T7076] loop1: detected capacity change from 0 to 512 [ 294.269841][ T7076] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 294.674991][ T7076] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 294.772792][ T7076] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.740: Failed to acquire dquot type 0 [ 294.980492][ T7076] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 295.002738][ T7076] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 295.013150][ T7076] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.740: Failed to acquire dquot type 0 [ 295.308493][ T7] usb 6-1: USB disconnect, device number 3 [ 295.345957][ T7076] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 295.363320][ T7076] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 295.384624][ T7076] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.740: Failed to acquire dquot type 0 [ 295.428281][ T7076] EXT4-fs (loop1): 1 orphan inode deleted [ 295.434050][ T7076] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 295.453849][ T7076] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.551411][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 296.348536][ T7103] netlink: 'syz.1.747': attribute type 25 has an invalid length. [ 296.368342][ T7103] netlink: 'syz.1.747': attribute type 7 has an invalid length. [ 297.292992][ T7121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.752'. [ 298.587814][ T7131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.757'. [ 301.408391][ T7154] loop5: detected capacity change from 0 to 256 [ 301.433801][ T7154] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 301.451904][ T7154] kvm: pic: single mode not supported [ 301.452013][ T7154] kvm: pic: level sensitive irq not supported [ 301.462933][ T7154] kvm: pic: single mode not supported [ 301.491398][ T7157] kernel profiling enabled (shift: 17) [ 301.607634][ T7159] kvm [7158]: vcpu0, guest rIP: 0x223 disabled perfctr wrmsr: 0xc1 data 0x8000 [ 302.587030][ T7165] netlink: 'syz.5.766': attribute type 5 has an invalid length. [ 302.864822][ T7174] loop2: detected capacity change from 0 to 512 [ 302.871900][ T7174] EXT4-fs: quotafile must be on filesystem root [ 303.235126][ T7176] ªªªªªª: renamed from vlan0 [ 305.953996][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.996144][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.267204][ T26] audit: type=1326 audit(1747085628.816:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000 [ 308.333504][ T26] audit: type=1326 audit(1747085628.816:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000 [ 308.493292][ T26] audit: type=1326 audit(1747085628.816:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000 [ 308.525841][ T26] audit: type=1326 audit(1747085628.816:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000 [ 308.565711][ T26] audit: type=1326 audit(1747085628.826:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000 [ 309.486906][ T26] audit: type=1326 audit(1747085628.826:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b86590887 code=0x7ffc0000 [ 310.377786][ T26] audit: type=1326 audit(1747085628.826:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9b865907fc code=0x7ffc0000 [ 310.494398][ T26] audit: type=1326 audit(1747085628.826:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9b86590734 code=0x7ffc0000 [ 310.541171][ T26] audit: type=1326 audit(1747085628.826:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9b86590734 code=0x7ffc0000 [ 310.587178][ T26] audit: type=1326 audit(1747085628.826:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b8658d5ca code=0x7ffc0000 [ 310.944631][ T7258] tipc: Started in network mode [ 310.949802][ T7258] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 311.002964][ T7258] tipc: Enabled bearer , priority 10 [ 312.042139][ T4387] tipc: Node number set to 15444650 [ 312.482965][ T7282] netlink: 'syz.5.803': attribute type 1 has an invalid length. [ 312.588998][ T7282] device bond2 entered promiscuous mode [ 312.632352][ T7282] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.667545][ T7282] bond1: (slave bond2): making interface the new active one [ 312.695264][ T7282] bond1: (slave bond2): Enslaving as an active interface with an up link [ 312.757314][ T7286] device macsec1 entered promiscuous mode [ 312.773782][ T7286] device bond1 entered promiscuous mode [ 314.698924][ T7308] loop3: detected capacity change from 0 to 1024 [ 314.730378][ T7308] ext4: Unknown parameter 'euid<00000000000000000000' [ 316.699585][ T4387] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 317.190764][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.197873][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.976227][ T4387] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.995234][ T4387] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 318.004719][ T4387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.025240][ T4387] usb 6-1: config 0 descriptor?? [ 318.033089][ T4387] pwc: Askey VC010 type 2 USB webcam detected. [ 319.055154][ T4269] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 319.063979][ T4269] Bluetooth: hci0: Injecting HCI hardware error event [ 319.071089][ T4387] pwc: recv_control_msg error -32 req 02 val 2b00 [ 319.080860][ T4269] Bluetooth: hci0: hardware error 0x00 [ 319.105915][ T4387] pwc: recv_control_msg error -32 req 02 val 2700 [ 319.123201][ T4387] pwc: recv_control_msg error -32 req 02 val 2c00 [ 319.138761][ T4387] pwc: recv_control_msg error -32 req 04 val 1000 [ 319.149241][ T4387] pwc: recv_control_msg error -32 req 04 val 1300 [ 319.162155][ T4387] pwc: recv_control_msg error -32 req 04 val 1400 [ 319.179630][ T4387] pwc: recv_control_msg error -32 req 02 val 2000 [ 319.187029][ T4387] pwc: recv_control_msg error -32 req 02 val 2100 [ 319.204038][ T4387] pwc: recv_control_msg error -32 req 04 val 1500 [ 319.227421][ T4387] pwc: recv_control_msg error -32 req 02 val 2500 [ 319.340885][ T7353] loop2: detected capacity change from 0 to 8192 [ 319.381409][ T7353] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 319.414458][ T7353] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 319.461969][ T7353] REISERFS (device loop2): using ordered data mode [ 319.464275][ T4387] pwc: recv_control_msg error -71 req 02 val 2600 [ 319.468729][ T7353] reiserfs: using flush barriers [ 319.484488][ T7353] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 319.514755][ T4387] pwc: recv_control_msg error -71 req 02 val 2900 [ 319.543314][ T4387] pwc: recv_control_msg error -71 req 02 val 2800 [ 319.551562][ T7353] REISERFS (device loop2): checking transaction log (loop2) [ 319.552119][ T7358] netlink: 'syz.6.827': attribute type 1 has an invalid length. [ 319.712878][ T7353] REISERFS (device loop2): Using tea hash to sort names [ 319.742942][ T7353] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 319.752715][ T4387] pwc: recv_control_msg error -71 req 04 val 1100 [ 319.759712][ T4387] pwc: recv_control_msg error -71 req 04 val 1200 [ 319.768295][ T4387] pwc: Registered as video103. [ 319.774759][ T4387] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input6 [ 319.779964][ T7362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.797228][ T4387] usb 6-1: USB disconnect, device number 4 [ 320.484933][ T7367] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 320.507100][ T7363] device veth5 entered promiscuous mode [ 320.533956][ T7363] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 320.633916][ T7353] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 4) [ 320.660558][ T7353] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 4) [ 320.732688][ T7353] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 4) [ 320.786074][ T7373] Cannot find add_set index 0 as target [ 321.695181][ T7353] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 4) [ 321.709716][ T4269] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 321.766830][ T7353] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 4) [ 322.503234][ T7390] netlink: 'syz.1.837': attribute type 9 has an invalid length. [ 322.510162][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 322.510178][ T26] audit: type=1326 audit(1747085643.056:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000 [ 322.541220][ T7390] netlink: 'syz.1.837': attribute type 6 has an invalid length. [ 322.553373][ T7390] netlink: 'syz.1.837': attribute type 7 has an invalid length. [ 322.565707][ T7390] netlink: 'syz.1.837': attribute type 8 has an invalid length. [ 322.609437][ T26] audit: type=1326 audit(1747085643.096:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000 [ 322.647640][ T26] audit: type=1326 audit(1747085643.096:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000 [ 322.741948][ T26] audit: type=1326 audit(1747085643.096:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000 [ 322.840269][ T26] audit: type=1326 audit(1747085643.096:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000 [ 322.920010][ T26] audit: type=1326 audit(1747085643.096:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000 [ 323.291924][ T26] audit: type=1326 audit(1747085643.096:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000 [ 323.379766][ T26] audit: type=1326 audit(1747085643.096:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000 [ 323.478171][ T26] audit: type=1326 audit(1747085643.096:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000 [ 323.573274][ T7410] Cannot find add_set index 0 as target [ 323.994368][ T26] audit: type=1326 audit(1747085643.096:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe738e969 code=0x7ffc0000 [ 324.459724][ T7416] tipc: Enabling of bearer rejected, failed to enable media [ 324.714478][ T7421] tipc: Enabling of bearer rejected, failed to enable media [ 324.776636][ T7423] netlink: 'syz.5.844': attribute type 10 has an invalid length. [ 324.785139][ T7423] netlink: 2 bytes leftover after parsing attributes in process `syz.5.844'. [ 324.793948][ T7423] device team0 entered promiscuous mode [ 324.799560][ T7423] device team_slave_0 entered promiscuous mode [ 324.805910][ T7423] device team_slave_1 entered promiscuous mode [ 324.812382][ T7423] bridge0: port 3(team0) entered blocking state [ 324.818747][ T7423] bridge0: port 3(team0) entered disabled state [ 324.827179][ T7423] bridge0: port 3(team0) entered blocking state [ 324.835659][ T7423] bridge0: port 3(team0) entered forwarding state [ 326.705847][ T7436] loop5: detected capacity change from 0 to 1024 [ 326.714810][ T7436] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 326.725723][ T7436] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 326.735752][ T7436] EXT4-fs error (device loop5): ext4_get_journal_inode:5723: comm syz.5.851: inode #1: comm syz.5.851: iget: illegal inode # [ 326.749340][ T7436] EXT4-fs (loop5): no journal found [ 326.754662][ T7436] EXT4-fs (loop5): can't get journal size [ 326.768254][ T7438] netlink: 'syz.6.850': attribute type 9 has an invalid length. [ 326.964457][ T7438] netlink: 'syz.6.850': attribute type 6 has an invalid length. [ 326.974289][ T7438] netlink: 'syz.6.850': attribute type 7 has an invalid length. [ 326.984437][ T7436] EXT4-fs (loop5): failed to initialize system zone (-22) [ 326.999614][ T7436] EXT4-fs (loop5): mount failed [ 327.018133][ T7438] netlink: 'syz.6.850': attribute type 8 has an invalid length. [ 327.839097][ T7447] loop2: detected capacity change from 0 to 2048 [ 327.966496][ T7447] loop2: p1 < > p3 [ 327.986303][ T7447] loop2: p3 size 134217728 extends beyond EOD, truncated [ 328.531828][ T26] kauditd_printk_skb: 88 callbacks suppressed [ 328.531843][ T26] audit: type=1326 audit(1747085649.076:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 328.604694][ T26] audit: type=1326 audit(1747085649.116:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 328.802492][ T26] audit: type=1326 audit(1747085649.116:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 329.176362][ T26] audit: type=1326 audit(1747085649.116:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 329.461772][ T26] audit: type=1326 audit(1747085649.116:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 329.486311][ T26] audit: type=1326 audit(1747085649.116:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 329.532582][ T26] audit: type=1326 audit(1747085649.116:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 329.591303][ T26] audit: type=1326 audit(1747085649.116:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 329.614598][ T26] audit: type=1326 audit(1747085649.116:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 329.638363][ T26] audit: type=1326 audit(1747085649.116:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.5.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b278e969 code=0x7ffc0000 [ 329.860690][ T7476] loop3: detected capacity change from 0 to 256 [ 331.583137][ T7478] netlink: 156 bytes leftover after parsing attributes in process `syz.1.858'. [ 335.684069][ T7526] loop3: detected capacity change from 0 to 164 [ 336.824788][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.883'. [ 337.090137][ T7551] loop5: detected capacity change from 0 to 128 [ 337.112741][ T7551] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 337.163132][ T7551] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.086712][ T7576] loop3: detected capacity change from 0 to 256 [ 339.093956][ T7576] exfat: Deprecated parameter 'namecase' [ 339.100035][ T7576] exfat: Unknown parameter 'eprors' [ 340.120927][ T7588] capability: warning: `syz.5.907' uses 32-bit capabilities (legacy support in use) [ 341.287470][ T7586] xt_HMARK: proto mask must be zero with L3 mode [ 341.729690][ T7603] loop2: detected capacity change from 0 to 128 [ 343.155470][ T7603] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 343.187957][ T7600] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 343.523923][ T7613] loop5: detected capacity change from 0 to 512 [ 343.531311][ T7613] EXT4-fs: Ignoring removed mblk_io_submit option [ 343.540701][ T7613] EXT4-fs (loop5): unable to read superblock [ 344.199665][ T7618] loop5: detected capacity change from 0 to 256 [ 344.340288][ T7619] loop2: detected capacity change from 0 to 512 [ 344.382048][ T7619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 344.394289][ T7624] syz.1.909[7624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.407254][ T7624] syz.1.909[7624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.543461][ T7619] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 344.683094][ T7619] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.982488][ T7619] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 345.655333][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 345.722300][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.6.914'. [ 347.537690][ T7656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.920'. [ 349.139933][ T7672] loop5: detected capacity change from 0 to 8 [ 349.167871][ T7674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.926'. [ 349.219271][ T7672] SQUASHFS error: xz decompression failed, data probably corrupt [ 349.299502][ T7672] SQUASHFS error: Failed to read block 0x108: -5 [ 349.316382][ T7672] SQUASHFS error: Unable to read metadata cache entry [106] [ 349.323848][ T7672] SQUASHFS error: Unable to read inode 0x0 [ 349.479685][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 349.479701][ T26] audit: type=1107 audit(1747085670.026:193): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 350.478385][ T7696] netlink: 'syz.2.934': attribute type 10 has an invalid length. [ 350.516996][ T7696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.605786][ T7696] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 350.616707][ T7696] team0: Failed to send options change via netlink (err -105) [ 350.626220][ T7696] team0: Port device batadv0 added [ 351.299425][ T7705] loop3: detected capacity change from 0 to 512 [ 351.312938][ T7705] EXT4-fs: Ignoring removed mblk_io_submit option [ 351.342016][ T7705] /dev/loop3: Can't open blockdev [ 352.823054][ T7740] loop5: detected capacity change from 0 to 2048 [ 352.850151][ T7740] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 354.028333][ T7756] binder: 7755:7756 ioctl c0306201 200000001a80 returned -11 [ 357.416449][ T7806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.552931][ T7814] binder: 7813:7814 ioctl 4018620d 0 returned -22 [ 357.570570][ T7814] binder: 7813:7814 ioctl c0306201 0 returned -14 [ 357.963397][ T7828] tipc: Started in network mode [ 357.969233][ T7828] tipc: Node identity 4681c5774ecb, cluster identity 4711 [ 357.977636][ T7828] tipc: Enabled bearer , priority 0 [ 357.990342][ T7828] device syzkaller0 entered promiscuous mode [ 358.017874][ T7828] tipc: Resetting bearer [ 358.035163][ T7827] tipc: Resetting bearer [ 358.061948][ T7827] tipc: Disabling bearer [ 360.444734][ T7850] loop3: detected capacity change from 0 to 2048 [ 360.459506][ T7850] /dev/loop3: Can't open blockdev [ 360.481930][ T7854] loop2: detected capacity change from 0 to 1024 [ 360.505325][ T7854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 360.670133][ T7856] netlink: 'syz.6.982': attribute type 2 has an invalid length. [ 360.677881][ T7856] netlink: 'syz.6.982': attribute type 8 has an invalid length. [ 360.685584][ T7856] netlink: 132 bytes leftover after parsing attributes in process `syz.6.982'. [ 361.752182][ T7854] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 361.793278][ T7854] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 361.877862][ T7854] EXT4-fs error (device loop2): ext4_group_add:1746: comm syz.2.983: inode #7: comm syz.2.983: iget: illegal inode # [ 361.917180][ T7854] EXT4-fs warning (device loop2): ext4_group_add:1748: Error opening resize inode [ 361.942959][ T26] audit: type=1326 audit(1747085682.486:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000 [ 362.011593][ T26] audit: type=1326 audit(1747085682.516:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000 [ 362.053434][ T4256] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 16: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=2, rec_len=12, size=1024 fake=1 [ 362.080087][ T26] audit: type=1326 audit(1747085682.516:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000 [ 362.104611][ T26] audit: type=1326 audit(1747085682.516:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000 [ 362.189172][ T26] audit: type=1326 audit(1747085682.516:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000 [ 362.358920][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 362.597704][ T26] audit: type=1326 audit(1747085682.526:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000 [ 362.864550][ T26] audit: type=1326 audit(1747085682.526:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000 [ 363.070684][ T26] audit: type=1326 audit(1747085682.526:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000 [ 363.093674][ T26] audit: type=1326 audit(1747085682.526:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000 [ 363.118218][ T26] audit: type=1326 audit(1747085682.526:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae278e969 code=0x7ffc0000 [ 363.196968][ T7871] device batadv_slave_1 entered promiscuous mode [ 363.720624][ T7871] device veth1_virt_wifi entered promiscuous mode [ 363.735178][ T7870] device veth1_virt_wifi left promiscuous mode [ 363.753527][ T7870] device batadv_slave_1 left promiscuous mode [ 364.273736][ T6301] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.043571][ T6301] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.276157][ T6301] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.410616][ T6301] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.040399][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.053531][ T4270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.062010][ T4270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.071534][ T4270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.080730][ T4270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 366.088184][ T4270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.693646][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 367.693661][ T26] audit: type=1326 audit(1747085688.236:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000 [ 367.776355][ T26] audit: type=1326 audit(1747085688.326:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000 [ 367.798629][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.805166][ T26] audit: type=1326 audit(1747085688.326:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000 [ 367.831820][ T26] audit: type=1326 audit(1747085688.326:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000 [ 367.864183][ T26] audit: type=1326 audit(1747085688.326:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000 [ 367.912069][ T26] audit: type=1326 audit(1747085688.326:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000 [ 367.942361][ T26] audit: type=1326 audit(1747085688.326:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000 [ 367.964756][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.978780][ T26] audit: type=1326 audit(1747085688.346:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000 [ 368.001653][ T26] audit: type=1326 audit(1747085688.346:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000 [ 368.024104][ T26] audit: type=1326 audit(1747085688.346:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9b8658e969 code=0x7ffc0000 [ 368.155516][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 369.667003][ T6301] bond0: (slave wlan1): Releasing backup interface [ 370.047766][ T7947] rdma_rxe: rxe_register_device failed with error -23 [ 370.055734][ T7947] rdma_rxe: failed to add ipvlan1 [ 370.345120][ T4270] Bluetooth: hci1: command 0x041b tx timeout [ 370.786873][ T7898] chnl_net:caif_netlink_parms(): no params data found [ 371.071058][ T6301] device hsr_slave_0 left promiscuous mode [ 371.088599][ T6301] device hsr_slave_1 left promiscuous mode [ 371.133560][ T6301] device veth1 left promiscuous mode [ 371.161287][ T6301] device veth1_macvtap left promiscuous mode [ 371.239791][ T6301] device veth0_macvtap left promiscuous mode [ 371.267853][ T6301] device veth1_vlan left promiscuous mode [ 371.294118][ T6301] device veth0_vlan left promiscuous mode [ 372.088725][ T7972] overlayfs: failed to clone upperpath [ 372.424701][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 373.228079][ T6301] bond1 (unregistering): (slave vlan3): Releasing active interface [ 373.678027][ T6301] bond1 (unregistering): (slave veth3): Releasing active interface [ 374.464449][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 375.542378][ T8004] rdma_rxe: rxe_register_device failed with error -23 [ 375.549766][ T8004] rdma_rxe: failed to add ipvlan1 [ 376.853904][ T6301] bond1 (unregistering): Released all slaves [ 378.610478][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.630304][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.687614][ T8046] overlayfs: failed to clone upperpath [ 380.779269][ T8048] loop3: detected capacity change from 0 to 1024 [ 380.799166][ T8048] /dev/loop3: Can't open blockdev [ 380.920330][ T8053] rdma_rxe: rxe_register_device failed with error -23 [ 380.927818][ T8053] rdma_rxe: failed to add ipvlan1 [ 380.966338][ T8048] loop3: detected capacity change from 0 to 512 [ 381.082146][ T8048] /dev/loop3: Can't open blockdev [ 382.971847][ T6301] team0 (unregistering): Port device batadv0 removed [ 383.302333][ T6301] bond0 (unregistering): Released all slaves [ 383.390351][ T7898] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.397777][ T7898] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.406262][ T7898] device bridge_slave_0 entered promiscuous mode [ 383.415180][ T7898] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.422518][ T7898] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.472326][ T7898] device bridge_slave_1 entered promiscuous mode [ 383.551328][ T8070] tipc: Started in network mode [ 383.556364][ T8070] tipc: Node identity ac1414aa, cluster identity 4711 [ 384.017511][ T8070] tipc: Enabled bearer , priority 10 [ 384.046511][ T7898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.059141][ T7898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.074090][ T8075] tipc: Enabled bearer , priority 0 [ 384.212024][ T7898] team0: Port device team_slave_0 added [ 384.244982][ T7898] team0: Port device team_slave_1 added [ 384.308866][ T7898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.395234][ T7898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.463070][ T7898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.596822][ T7898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.603846][ T7898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.629763][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.709123][ T7898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.770083][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 384.784116][ T8082] bridge0: port 3(team0) entered disabled state [ 384.807842][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 384.820033][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 384.975728][ T8082] device bridge_slave_0 left promiscuous mode [ 384.982002][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.991267][ T8082] device bridge_slave_1 left promiscuous mode [ 384.998574][ T8082] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.011027][ T8082] bond0: (slave bond_slave_0): Releasing backup interface [ 386.157674][ T4283] tipc: Node number set to 2886997162 [ 386.165259][ T8082] bond0: (slave bond_slave_1): Releasing backup interface [ 386.190142][ T8082] device team_slave_0 left promiscuous mode [ 386.219155][ T8082] team0: Port device team_slave_0 removed [ 386.232890][ T8082] device team_slave_1 left promiscuous mode [ 386.273205][ T8082] team0: Port device team_slave_1 removed [ 386.314360][ T8082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.372730][ T8082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.438931][ T8082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.488461][ T8082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.716981][ T8082] bond1: (slave bond2): Releasing backup interface [ 386.998010][ T8093] netlink: 'syz.5.1049': attribute type 10 has an invalid length. [ 387.019240][ T8093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.237444][ T7898] device hsr_slave_0 entered promiscuous mode [ 387.257594][ T7898] device hsr_slave_1 entered promiscuous mode [ 387.266894][ T7898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.285974][ T7898] Cannot create hsr debugfs directory [ 387.476048][ T8117] loop5: detected capacity change from 0 to 256 [ 388.274996][ T8110] bridge_slave_0: default FDB implementation only supports local addresses [ 388.341480][ T7898] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 388.373521][ T7898] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 388.388704][ T7898] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 388.400437][ T7898] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 388.492830][ T7898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.506664][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 388.516842][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 388.532336][ T7898] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.542099][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 388.551047][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 388.560580][ T6318] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.567731][ T6318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.586443][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 388.604003][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 388.613757][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 388.629484][ T6318] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.636659][ T6318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.658970][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 388.668755][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 388.693242][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 388.709595][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 388.735281][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 388.743960][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 388.768776][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 388.777449][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 388.786392][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.797405][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 388.806329][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.817715][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 389.221971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 389.230166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 389.248968][ T7898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.552630][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 389.561368][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 389.582492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 389.591483][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 389.600785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 389.608669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 389.620582][ T7898] device veth0_vlan entered promiscuous mode [ 389.632922][ T7898] device veth1_vlan entered promiscuous mode [ 389.655109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 389.665231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 389.673233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 389.682117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 389.695911][ T7898] device veth0_macvtap entered promiscuous mode [ 389.706035][ T7898] device veth1_macvtap entered promiscuous mode [ 389.722551][ T7898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.733124][ T7898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.743357][ T7898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.754089][ T7898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.765792][ T7898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.773928][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 389.782605][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 389.790712][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 389.799520][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 389.811072][ T7898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.822221][ T7898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.832790][ T7898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.843591][ T7898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.855101][ T7898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.862828][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 389.871727][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 389.888768][ T7898] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.898007][ T7898] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.906956][ T7898] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.916233][ T7898] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.988570][ T6322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.997075][ T6322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.013594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 390.029330][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.041491][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.055273][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 390.255645][ T8143] mmap: syz.5.1072 (8143) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 390.530606][ T8144] netlink: 'syz.6.1074': attribute type 11 has an invalid length. [ 390.538639][ T8144] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1074'. [ 390.549551][ T8138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.379886][ T8157] rdma_rxe: rxe_register_device failed with error -23 [ 391.387533][ T8157] rdma_rxe: failed to add ipvlan1 [ 393.083929][ T8171] loop7: detected capacity change from 0 to 4096 [ 395.342440][ T8195] binder: 8184:8195 ioctl c018620b 0 returned -14 [ 396.327130][ T8210] loop5: detected capacity change from 0 to 256 [ 396.359998][ T8210] exfat: Bad value for 'uid' [ 396.388458][ T8217] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.641602][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1084'. [ 396.679889][ T8218] wlan1: mtu greater than device maximum [ 396.810458][ T8220] loop7: detected capacity change from 0 to 4096 [ 396.867633][ T8220] NILFS (loop7): invalid segment: Checksum error in segment payload [ 396.883782][ T8220] NILFS (loop7): trying rollback from an earlier position [ 396.911190][ T8220] NILFS (loop7): recovery complete [ 397.040586][ T8231] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 397.164957][ T26] kauditd_printk_skb: 71 callbacks suppressed [ 397.164983][ T26] audit: type=1800 audit(1747085717.716:300): pid=8220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1087" name="bus" dev="loop7" ino=12 res=0 errno=0 [ 397.667553][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 397.678412][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.686552][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.702839][ T8220] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 397.987361][ T8245] rdma_rxe: already configured on ipvlan1 [ 402.298312][ T8296] rdma_rxe: rxe_register_device failed with error -23 [ 402.305295][ T8296] rdma_rxe: failed to add ipvlan1 [ 403.872538][ T8307] loop5: detected capacity change from 0 to 4096 [ 403.927475][ T8307] NILFS (loop5): invalid segment: Checksum error in segment payload [ 403.950791][ T8307] NILFS (loop5): trying rollback from an earlier position [ 403.999179][ T8307] NILFS (loop5): recovery complete [ 404.026804][ T8312] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 404.085386][ T26] audit: type=1800 audit(1747085724.636:301): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1116" name="bus" dev="loop5" ino=12 res=0 errno=0 [ 404.210283][ T8314] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 404.221479][ T8314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 404.229836][ T8314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 404.408484][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 404.442557][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 406.121267][ T8336] loop7: detected capacity change from 0 to 256 [ 406.939418][ T8336] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 407.871809][ T8357] IPv6: sit1: Disabled Multicast RS [ 407.880971][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1130'. [ 409.235858][ T8376] netlink: 'syz.3.1136': attribute type 3 has an invalid length. [ 409.274523][ T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 409.487992][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 409.498080][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 409.520442][ T7] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 409.532219][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.548132][ T7] usb 6-1: config 0 descriptor?? [ 409.576631][ T7] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input7 [ 409.736253][ T8391] tipc: Resetting bearer [ 409.778183][ T8368] input: syz0 as /devices/virtual/input/input8 [ 410.595671][ T8400] loop7: detected capacity change from 0 to 256 [ 410.603512][ T8400] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 410.689498][ T8400] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 411.378164][ T8400] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 413.658431][ T3608] bcm5974 6-1:0.0: could not read from device [ 413.672325][ T7] usb 6-1: USB disconnect, device number 5 [ 415.645001][ T8441] loop7: detected capacity change from 0 to 4096 [ 416.832110][ T8441] NILFS (loop7): invalid segment: Checksum error in segment payload [ 417.062214][ T8441] NILFS (loop7): trying rollback from an earlier position [ 417.147549][ T8453] xt_cgroup: invalid path, errno=-2 [ 417.696966][ T8441] NILFS (loop7): recovery complete [ 417.869945][ T8463] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 419.633460][ T8472] loop5: detected capacity change from 0 to 2048 [ 419.761923][ T8472] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 419.812742][ T8472] UDF-fs: Scanning with blocksize 512 failed [ 419.962885][ T8472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 420.811238][ T8483] tipc: Enabling of bearer rejected, failed to enable media [ 420.930061][ T8488] loop7: detected capacity change from 0 to 128 [ 421.837625][ T8488] FAT-fs (loop7): error, clusters badly computed (2 != 1) [ 421.854453][ T8488] FAT-fs (loop7): Filesystem has been set read-only [ 422.010508][ T7898] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00005934) [ 422.021965][ T7898] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00005934) [ 423.370004][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'. [ 424.954397][ T26] audit: type=1326 audit(1747085745.496:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.6.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52d98e969 code=0x7fc00000 [ 424.976725][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.143145][ T6305] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.332944][ T6305] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.460698][ T6305] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.571670][ T6305] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.984090][ T8528] loop3: detected capacity change from 0 to 8192 [ 425.993307][ T8539] netlink: 'syz.1.1196': attribute type 1 has an invalid length. [ 426.067155][ T8539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.120317][ T8528] loop3: detected capacity change from 0 to 512 [ 426.127463][ T8528] /dev/loop3: Can't open blockdev [ 426.134872][ T4269] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 426.145238][ T4269] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 426.154246][ T4264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 426.168966][ T8541] device veth3 entered promiscuous mode [ 426.184543][ T4264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 426.193572][ T4264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 426.201282][ T4264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 426.234603][ T8541] bond1: (slave veth3): Enslaving as an active interface with a down link [ 426.292149][ T8539] bond1: (slave erspan0): making interface the new active one [ 426.302452][ T8539] device erspan0 entered promiscuous mode [ 426.308613][ T8539] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 426.326183][ T6323] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 426.616783][ T8550] xt_nat: multiple ranges no longer supported [ 427.374156][ T8544] chnl_net:caif_netlink_parms(): no params data found [ 427.439447][ T8544] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.447698][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.456074][ T8544] device bridge_slave_0 entered promiscuous mode [ 427.482241][ T8544] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.489775][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.498251][ T8544] device bridge_slave_1 entered promiscuous mode [ 427.540760][ T8544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.553155][ T8544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.582948][ T8544] team0: Port device team_slave_0 added [ 427.612264][ T8544] team0: Port device team_slave_1 added [ 427.652537][ T8544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.659714][ T8544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.686258][ T8544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.699882][ T8544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.707161][ T8544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.733048][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.739720][ T8544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.827460][ T8544] device hsr_slave_0 entered promiscuous mode [ 427.836020][ T8544] device hsr_slave_1 entered promiscuous mode [ 427.843312][ T8544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.851175][ T8544] Cannot create hsr debugfs directory [ 428.101547][ T6305] device hsr_slave_0 left promiscuous mode [ 428.108298][ T6305] device hsr_slave_1 left promiscuous mode [ 428.114870][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.122291][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.130224][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.137967][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.146049][ T6305] device bridge_slave_1 left promiscuous mode [ 428.152227][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.162779][ T6305] device bridge_slave_0 left promiscuous mode [ 428.169248][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.201993][ T6305] device veth1_macvtap left promiscuous mode [ 428.208190][ T6305] device veth0_macvtap left promiscuous mode [ 428.214313][ T6305] device veth1_vlan left promiscuous mode [ 428.220417][ T6305] device veth0_vlan left promiscuous mode [ 428.236133][ T4264] Bluetooth: hci1: command 0x0409 tx timeout [ 428.756773][ T6305] team0 (unregistering): Port device team_slave_1 removed [ 428.810527][ T6305] team0 (unregistering): Port device team_slave_0 removed [ 428.860180][ T6305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.912696][ T6305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.429856][ T6305] bond0 (unregistering): Released all slaves [ 429.549160][ T8544] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 429.559212][ T8544] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 429.571015][ T8544] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 429.587088][ T8544] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 429.673671][ T8544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.698672][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 429.710789][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 429.729326][ T8544] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.741042][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 429.749895][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 429.759101][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.766254][ T6329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.774348][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 429.807207][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 429.829054][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 429.837853][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.845062][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.856741][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 429.868837][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 429.893411][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 429.909973][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 429.919173][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 429.940590][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 429.949493][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 429.958213][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 429.966794][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 429.980440][ T6325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 429.989243][ T6325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 430.005000][ T8544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 430.204135][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 430.212517][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 430.233228][ T8544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.305362][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 430.500736][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 430.509710][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 430.533260][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 430.542460][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 430.552608][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 430.561476][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 430.573711][ T8544] device veth0_vlan entered promiscuous mode [ 430.586577][ T8544] device veth1_vlan entered promiscuous mode [ 430.611433][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 430.620051][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 430.632523][ T8544] device veth0_macvtap entered promiscuous mode [ 430.642594][ T8544] device veth1_macvtap entered promiscuous mode [ 430.658459][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.669626][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.679656][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.690450][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.702779][ T8544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.713214][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 430.722273][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 430.731006][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 430.739857][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 430.749741][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.761104][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.771139][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.781882][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.793394][ T8544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.802620][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 430.813798][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 430.825543][ T8544] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.834739][ T8544] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.843632][ T8544] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.854453][ T8544] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.927876][ T6325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.942621][ T6325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.960004][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.975779][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 430.975879][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.997292][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 431.102668][ T8570] overlayfs: failed to clone upperpath [ 432.280165][ T8579] xt_nat: multiple ranges no longer supported [ 432.609907][ T4264] Bluetooth: hci1: command 0x040f tx timeout [ 434.634406][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 434.947814][ T8610] usb usb1: usbfs: process 8610 (syz.5.1197) did not claim interface 0 before use [ 435.851371][ T8623] overlayfs: failed to clone upperpath [ 436.194717][ T8629] xt_nat: multiple ranges no longer supported [ 436.948235][ T8647] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 438.808133][ T8674] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1225'. [ 439.607211][ T8690] trusted_key: encrypted_key: insufficient parameters specified [ 440.130538][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.151506][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.965881][ T8700] xt_hashlimit: size too large, truncated to 1048576 [ 442.252601][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1234'. [ 443.775823][ T4311] device erspan0 left promiscuous mode [ 443.984379][ T22] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 444.104340][ T4302] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 444.177227][ T22] usb 9-1: Using ep0 maxpacket: 32 [ 444.190429][ T22] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 444.198786][ T22] usb 9-1: config 0 has no interface number 0 [ 444.210216][ T22] usb 9-1: config 0 interface 89 has no altsetting 0 [ 444.219429][ T22] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 444.230244][ T22] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.238612][ T22] usb 9-1: Product: syz [ 444.254386][ T22] usb 9-1: Manufacturer: syz [ 444.259383][ T22] usb 9-1: SerialNumber: syz [ 444.274585][ T22] usb 9-1: config 0 descriptor?? [ 444.305912][ T4302] usb 4-1: config 0 has no interfaces? [ 444.311449][ T4302] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 444.329755][ T4302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.350551][ T4302] usb 4-1: config 0 descriptor?? [ 444.486617][ T8741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.502304][ T8741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.517087][ T27] usb 9-1: USB disconnect, device number 2 [ 444.572237][ T8743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.586246][ T8743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.598496][ T22] usb 4-1: USB disconnect, device number 6 [ 445.194541][ T22] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 445.207586][ T8766] 9pnet: Unknown protocol version 9p20\++} [ 445.966869][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 445.985840][ T22] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 446.002021][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.027868][ T22] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 446.059577][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.100731][ T22] usb 4-1: Product: syz [ 446.106669][ T22] usb 4-1: Manufacturer: syz [ 447.282597][ T22] usb 4-1: SerialNumber: syz [ 447.314455][ T22] usb 4-1: can't set config #1, error -71 [ 448.418923][ T22] usb 4-1: USB disconnect, device number 7 [ 449.874476][ T22] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 450.727325][ T26] audit: type=1326 audit(1747085771.276:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000 [ 450.824342][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 450.834210][ T22] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 450.843563][ T26] audit: type=1326 audit(1747085771.326:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000 [ 450.866395][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.877625][ T22] usb 4-1: Product: syz [ 450.881820][ T22] usb 4-1: Manufacturer: syz [ 450.887882][ T26] audit: type=1326 audit(1747085771.326:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000 [ 450.910952][ T22] usb 4-1: SerialNumber: syz [ 450.921943][ T22] usb 4-1: config 0 descriptor?? [ 450.935369][ T26] audit: type=1326 audit(1747085771.326:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000 [ 450.957627][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.969940][ T26] audit: type=1326 audit(1747085771.326:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000 [ 450.992198][ C0] vkms_vblank_simulate: vblank timer overrun [ 451.013816][ T26] audit: type=1326 audit(1747085771.326:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000 [ 451.043604][ T26] audit: type=1326 audit(1747085771.326:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000 [ 451.072540][ T26] audit: type=1326 audit(1747085771.326:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000 [ 451.094796][ C0] vkms_vblank_simulate: vblank timer overrun [ 451.101951][ T26] audit: type=1326 audit(1747085771.326:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000 [ 451.124238][ C0] vkms_vblank_simulate: vblank timer overrun [ 451.132320][ T26] audit: type=1326 audit(1747085771.326:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8998e969 code=0x7ffc0000 [ 451.136459][ T22] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 452.576980][ T22] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 452.587091][ T22] usb 4-1: USB disconnect, device number 8 [ 457.124071][ T8869] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 457.698695][ T8874] loop3: detected capacity change from 0 to 2048 [ 458.686381][ T8874] loop3: p2 < > p3 p4 [ 458.694492][ T8874] loop3: p3 start 65535 is beyond EOD, truncated [ 458.701398][ T8874] loop3: p4 size 8192 extends beyond EOD, truncated [ 458.994144][ T8889] loop5: detected capacity change from 0 to 256 [ 459.260955][ T8895] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967272. macoff=96 [ 460.677202][ T8907] overlayfs: failed to clone upperpath [ 461.213024][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 461.948865][ T8915] loop3: detected capacity change from 0 to 512 [ 462.996578][ T8949] overlayfs: failed to clone upperpath [ 463.304490][ T27] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 463.528664][ T27] usb 6-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.553401][ T27] usb 6-1: config 9 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.577464][ T27] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 463.598939][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.837969][ T8951] loop5: detected capacity change from 0 to 512 [ 463.923154][ T8951] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 463.934969][ T8951] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 464.063704][ T8970] loop8: detected capacity change from 0 to 512 [ 464.140117][ T8970] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 464.169682][ T8970] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.274848][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 464.274865][ T26] audit: type=1804 audit(1747085784.816:317): pid=8970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1320" name="/newroot/27/file1/file2" dev="loop8" ino=16 res=1 errno=0 [ 464.314772][ T27] usbhid 6-1:9.0: can't add hid device: -71 [ 464.320915][ T27] usbhid: probe of 6-1:9.0 failed with error -71 [ 464.360826][ T27] usb 6-1: USB disconnect, device number 6 [ 464.501110][ T8970] EXT4-fs (loop8): unmounting filesystem. [ 464.759676][ T8980] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 465.768935][ T4875] EXT4-fs (loop5): unmounting filesystem. [ 466.522876][ T9012] loop3: detected capacity change from 0 to 1024 [ 466.551452][ T9012] /dev/loop3: Can't open blockdev [ 466.645167][ T27] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 466.669880][ T27] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 466.690993][ T9012] loop3: detected capacity change from 0 to 1024 [ 466.722997][ T9012] EXT4-fs: Ignoring removed i_version option [ 466.734195][ T9012] EXT4-fs: Ignoring removed nomblk_io_submit option [ 466.754305][ T9012] EXT4-fs: Ignoring removed oldalloc option [ 466.783966][ T9012] /dev/loop3: Can't open blockdev [ 466.855491][ T9012] hid-generic 0000:0000:0000.0002: pid 9012 passed too short report [ 467.943248][ T26] audit: type=1326 audit(1747085788.486:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.1.1344" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ae278e969 code=0x0 [ 468.146549][ T9044] loop8: detected capacity change from 0 to 2048 [ 468.208323][ T9044] loop8: p2 < > p3 p4 [ 468.227341][ T9044] loop8: p3 start 65535 is beyond EOD, truncated [ 468.239653][ T9044] loop8: p4 size 8192 extends beyond EOD, truncated [ 468.260537][ T9051] loop3: detected capacity change from 0 to 256 [ 468.278137][ T9044] EXT4-fs (loop8p2): unable to read superblock [ 470.199886][ T9061] loop8: detected capacity change from 0 to 512 [ 472.269381][ T9093] device gtp0 entered promiscuous mode [ 472.675278][ T27] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 472.904457][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 472.962464][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 472.974472][ T27] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 472.988888][ T27] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 473.021922][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.068528][ T27] usb 6-1: config 0 descriptor?? [ 473.511175][ T27] usbhid 6-1:0.0: can't add hid device: -71 [ 473.534595][ T27] usbhid: probe of 6-1:0.0 failed with error -71 [ 473.563019][ T27] usb 6-1: USB disconnect, device number 7 [ 476.919578][ T9139] loop5: detected capacity change from 0 to 512 [ 477.340543][ T9151] loop5: detected capacity change from 0 to 2048 [ 477.421060][ T9151] loop5: p2 < > p3 p4 [ 477.426815][ T9151] loop5: p3 start 65535 is beyond EOD, truncated [ 477.448598][ T9151] loop5: p4 size 8192 extends beyond EOD, truncated [ 477.513263][ T9151] EXT4-fs (loop5p2): unable to read superblock [ 480.296439][ T9188] binder: 9185:9188 ioctl c0306201 0 returned -14 [ 481.884355][ T4303] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 482.084724][ T4303] usb 9-1: Using ep0 maxpacket: 16 [ 482.093067][ T4303] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 482.104848][ T4303] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 482.118592][ T4303] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 482.145378][ T4303] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.165409][ T4303] usb 9-1: config 0 descriptor?? [ 482.586556][ T4303] usbhid 9-1:0.0: can't add hid device: -71 [ 482.592658][ T4303] usbhid: probe of 9-1:0.0 failed with error -71 [ 482.646965][ T9218] loop5: detected capacity change from 0 to 512 [ 482.674407][ T14] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 482.681998][ T4303] usb 9-1: USB disconnect, device number 3 [ 482.691453][ T9218] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 482.739648][ T9218] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 482.809780][ T9218] EXT4-fs (loop5): 1 truncate cleaned up [ 482.815924][ T9218] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 482.884399][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 482.891802][ T14] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 482.903064][ T4875] EXT4-fs (loop5): unmounting filesystem. [ 482.912574][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.951860][ T14] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 482.971611][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.049594][ T14] usb 4-1: Product: syz [ 483.059698][ T14] usb 4-1: Manufacturer: syz [ 483.074300][ T14] usb 4-1: SerialNumber: syz [ 483.860612][ T14] usb 4-1: 0:2 : does not exist [ 483.914558][ T14] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 483.932218][ T14] usb 4-1: USB disconnect, device number 9 [ 485.484531][ T9249] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1419'. [ 489.319348][ T9283] loop3: detected capacity change from 0 to 32768 [ 489.410713][ T9283] XFS (loop3): Mounting V5 Filesystem [ 489.498713][ T9283] XFS (loop3): Ending clean mount [ 489.664989][ T9304] netlink: 'syz.5.1420': attribute type 16 has an invalid length. [ 489.703585][ T9304] netlink: 'syz.5.1420': attribute type 17 has an invalid length. [ 490.588703][ T9304] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 490.639829][ T9304] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 490.680989][ T9304] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 490.753113][ T9304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.782990][ T9304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 490.806730][ T9307] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 490.815744][ T9307] tipc: Resetting bearer [ 490.974684][ T4261] XFS (loop3): Unmounting Filesystem [ 493.003271][ T9315] loop5: detected capacity change from 0 to 32768 [ 493.186545][ T9315] XFS (loop5): Mounting V5 Filesystem [ 493.309381][ T9315] XFS (loop5): Ending clean mount [ 493.330679][ T9315] XFS (loop5): Quotacheck needed: Please wait. [ 493.393408][ T9315] XFS (loop5): Quotacheck: Done. [ 493.628239][ T4875] XFS (loop5): Unmounting Filesystem [ 493.746879][ T3639] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 493.954428][ T3639] usb 4-1: Using ep0 maxpacket: 16 [ 493.963668][ T3639] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.003610][ T3639] usb 4-1: config 0 has no interfaces? [ 494.034176][ T3639] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 494.074553][ T3639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.110256][ T3639] usb 4-1: config 0 descriptor?? [ 494.371490][ T9350] loop3: detected capacity change from 0 to 1024 [ 494.431490][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 494.463367][ T27] usb 4-1: USB disconnect, device number 10 [ 494.751404][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1440'. [ 495.104290][ T9367] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1443'. [ 495.331111][ T9371] loop3: detected capacity change from 0 to 128 [ 495.356886][ T9371] /dev/loop3: Can't open blockdev [ 499.035134][ T9387] loop3: detected capacity change from 0 to 2048 [ 499.591000][ T9387] loop3: p1 < > p3 [ 499.755571][ T9387] loop3: p3 size 134217728 extends beyond EOD, truncated [ 500.155845][ T9409] loop5: detected capacity change from 0 to 1024 [ 500.409560][ T6297] hfsplus: b-tree write err: -5, ino 3 [ 501.348358][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.355332][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.340798][ T9428] ================================================================== [ 502.349114][ T9428] BUG: KASAN: use-after-free in rose_transmit_link+0x5b6/0x730 [ 502.356756][ T9428] Read of size 1 at addr ffff8880570b1432 by task syz.5.1459/9428 [ 502.364780][ T9428] [ 502.367142][ T9428] CPU: 0 PID: 9428 Comm: syz.5.1459 Not tainted 6.1.138-syzkaller #0 [ 502.375425][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 502.386224][ T9428] Call Trace: [ 502.389625][ T9428] [ 502.392583][ T9428] dump_stack_lvl+0x168/0x22e [ 502.397408][ T9428] ? read_lock_is_recursive+0x10/0x10 [ 502.403000][ T9428] ? show_regs_print_info+0x12/0x12 [ 502.408212][ T9428] ? load_image+0x3b0/0x3b0 [ 502.412772][ T9428] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 502.418272][ T9428] ? __virt_addr_valid+0x188/0x540 [ 502.423408][ T9428] ? __virt_addr_valid+0x465/0x540 [ 502.428538][ T9428] ? rose_transmit_link+0x5b6/0x730 [ 502.434012][ T9428] print_report+0xa8/0x220 [ 502.438531][ T9428] kasan_report+0x10b/0x140 [ 502.443050][ T9428] ? rose_transmit_link+0x5b6/0x730 [ 502.448266][ T9428] rose_transmit_link+0x5b6/0x730 [ 502.453298][ T9428] ? skb_put+0x117/0x210 [ 502.457556][ T9428] rose_write_internal+0x1096/0x1eb0 [ 502.463115][ T9428] ? debug_object_assert_init+0x1ed/0x2f0 [ 502.469222][ T9428] ? rose_validate_nr+0x120/0x120 [ 502.474810][ T9428] ? skb_queue_purge+0x64/0x1b0 [ 502.479978][ T9428] rose_release+0x22a/0x4f0 [ 502.484801][ T9428] sock_close+0xd5/0x240 [ 502.489166][ T9428] ? sock_mmap+0x90/0x90 [ 502.493530][ T9428] __fput+0x22c/0x920 [ 502.497709][ T9428] task_work_run+0x1ca/0x250 [ 502.502585][ T9428] ? task_work_cancel+0x230/0x230 [ 502.507773][ T9428] get_signal+0x11a6/0x1350 [ 502.512519][ T9428] arch_do_signal_or_restart+0xb0/0x1230 [ 502.518543][ T9428] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 502.524024][ T9428] ? wake_bit_function+0x200/0x200 [ 502.529170][ T9428] ? __might_fault+0xa6/0x120 [ 502.534158][ T9428] ? get_sigframe_size+0x10/0x10 [ 502.539142][ T9428] ? __sys_connect+0x239/0x410 [ 502.543928][ T9428] ? exit_to_user_mode_loop+0x3b/0x110 [ 502.549511][ T9428] exit_to_user_mode_loop+0x70/0x110 [ 502.554811][ T9428] exit_to_user_mode_prepare+0xb1/0x140 [ 502.560463][ T9428] syscall_exit_to_user_mode+0x16/0x40 [ 502.565942][ T9428] do_syscall_64+0x58/0xa0 [ 502.570642][ T9428] ? clear_bhb_loop+0x45/0xa0 [ 502.575326][ T9428] ? clear_bhb_loop+0x45/0xa0 [ 502.580007][ T9428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.585912][ T9428] RIP: 0033:0x7fd3b278e969 [ 502.590435][ T9428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.610654][ T9428] RSP: 002b:00007fd3b35a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 502.619196][ T9428] RAX: fffffffffffffe00 RBX: 00007fd3b29b6240 RCX: 00007fd3b278e969 [ 502.627364][ T9428] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000007 [ 502.635347][ T9428] RBP: 00007fd3b2810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 502.643483][ T9428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.651644][ T9428] R13: 0000000000000000 R14: 00007fd3b29b6240 R15: 00007ffd30a1e5e8 [ 502.659835][ T9428] [ 502.662966][ T9428] [ 502.665373][ T9428] Allocated by task 6447: [ 502.669703][ T9428] kasan_set_track+0x4b/0x70 [ 502.674312][ T9428] __kasan_kmalloc+0x8e/0xa0 [ 502.679718][ T9428] rose_add_node+0x227/0xdb0 [ 502.684408][ T9428] rose_rt_ioctl+0xa4c/0xe90 [ 502.689016][ T9428] rose_ioctl+0x27a/0x790 [ 502.693342][ T9428] sock_do_ioctl+0xd3/0x2f0 [ 502.697853][ T9428] sock_ioctl+0x4ed/0x6e0 [ 502.702238][ T9428] __se_sys_ioctl+0xfa/0x170 [ 502.706834][ T9428] do_syscall_64+0x4c/0xa0 [ 502.711260][ T9428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.717511][ T9428] [ 502.719854][ T9428] Freed by task 9417: [ 502.723930][ T9428] kasan_set_track+0x4b/0x70 [ 502.728550][ T9428] kasan_save_free_info+0x2d/0x50 [ 502.734149][ T9428] ____kasan_slab_free+0x126/0x1e0 [ 502.739274][ T9428] slab_free_freelist_hook+0x131/0x1a0 [ 502.744748][ T9428] __kmem_cache_free+0xb6/0x1f0 [ 502.749700][ T9428] rose_rt_device_down+0x3e5/0x430 [ 502.754990][ T9428] rose_device_event+0x600/0x690 [ 502.760113][ T9428] raw_notifier_call_chain+0xcb/0x160 [ 502.765761][ T9428] __dev_notify_flags+0x178/0x2d0 [ 502.770793][ T9428] dev_change_flags+0xe3/0x1a0 [ 502.775591][ T9428] dev_ifsioc+0x159/0xe90 [ 502.779944][ T9428] dev_ioctl+0x578/0xea0 [ 502.784181][ T9428] sock_do_ioctl+0x222/0x2f0 [ 502.788885][ T9428] sock_ioctl+0x4ed/0x6e0 [ 502.793665][ T9428] __se_sys_ioctl+0xfa/0x170 [ 502.798274][ T9428] do_syscall_64+0x4c/0xa0 [ 502.802703][ T9428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.808974][ T9428] [ 502.811296][ T9428] The buggy address belongs to the object at ffff8880570b1400 [ 502.811296][ T9428] which belongs to the cache kmalloc-512 of size 512 [ 502.825547][ T9428] The buggy address is located 50 bytes inside of [ 502.825547][ T9428] 512-byte region [ffff8880570b1400, ffff8880570b1600) [ 502.838934][ T9428] [ 502.841345][ T9428] The buggy address belongs to the physical page: [ 502.847760][ T9428] page:ffffea00015c2c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880570b3c00 pfn:0x570b0 [ 502.859357][ T9428] head:ffffea00015c2c00 order:2 compound_mapcount:0 compound_pincount:0 [ 502.867786][ T9428] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 502.875781][ T9428] raw: 00fff00000010200 ffffea00015c3008 ffffea0001e28708 ffff888017441c80 [ 502.884545][ T9428] raw: ffff8880570b3c00 0000000000100004 00000001ffffffff 0000000000000000 [ 502.893133][ T9428] page dumped because: kasan: bad access detected [ 502.899724][ T9428] page_owner tracks the page as allocated [ 502.905519][ T9428] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4263, tgid 4263 (syz-executor), ts 75699684648, free_ts 20248804770 [ 502.924889][ T9428] post_alloc_hook+0x173/0x1a0 [ 502.929684][ T9428] get_page_from_freelist+0x1a26/0x1ac0 [ 502.935420][ T9428] __alloc_pages+0x1df/0x4e0 [ 502.940712][ T9428] alloc_slab_page+0x5d/0x160 [ 502.945640][ T9428] new_slab+0x87/0x2c0 [ 502.949903][ T9428] ___slab_alloc+0xbc6/0x1220 [ 502.954588][ T9428] __kmem_cache_alloc_node+0x1a0/0x260 [ 502.960080][ T9428] __kmalloc+0xa0/0x240 [ 502.964430][ T9428] fib6_info_alloc+0x2e/0xe0 [ 502.969037][ T9428] ip6_route_info_create+0x44f/0x1210 [ 502.974498][ T9428] ip6_route_add+0x24/0x130 [ 502.979078][ T9428] addrconf_permanent_addr+0x652/0x980 [ 502.984567][ T9428] addrconf_notify+0x986/0xf40 [ 502.989334][ T9428] raw_notifier_call_chain+0xcb/0x160 [ 502.994802][ T9428] __dev_notify_flags+0x178/0x2d0 [ 502.999869][ T9428] dev_change_flags+0xe3/0x1a0 [ 503.004653][ T9428] page last free stack trace: [ 503.009607][ T9428] free_unref_page_prepare+0x8b4/0x9a0 [ 503.015093][ T9428] free_unref_page+0x2e/0x3f0 [ 503.019780][ T9428] free_contig_range+0x9d/0x150 [ 503.024742][ T9428] destroy_args+0xef/0x8bf [ 503.029179][ T9428] debug_vm_pgtable+0x32a/0x37e [ 503.034036][ T9428] do_one_initcall+0x214/0x7a0 [ 503.038807][ T9428] do_initcall_level+0x137/0x1e4 [ 503.043856][ T9428] do_initcalls+0x4b/0x8a [ 503.048281][ T9428] kernel_init_freeable+0x3fa/0x5ac [ 503.053488][ T9428] kernel_init+0x19/0x1b0 [ 503.057816][ T9428] ret_from_fork+0x1f/0x30 [ 503.062260][ T9428] [ 503.064687][ T9428] Memory state around the buggy address: [ 503.070435][ T9428] ffff8880570b1300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 503.078544][ T9428] ffff8880570b1380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 503.086637][ T9428] >ffff8880570b1400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 503.094730][ T9428] ^ [ 503.100529][ T9428] ffff8880570b1480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 503.108672][ T9428] ffff8880570b1500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 503.116816][ T9428] ================================================================== [ 503.124913][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.158341][ T9428] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 503.165963][ T9428] CPU: 0 PID: 9428 Comm: syz.5.1459 Not tainted 6.1.138-syzkaller #0 [ 503.174057][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 503.184155][ T9428] Call Trace: [ 503.187495][ T9428] [ 503.190450][ T9428] dump_stack_lvl+0x168/0x22e [ 503.195170][ T9428] ? memcpy+0x3c/0x60 [ 503.199201][ T9428] ? show_regs_print_info+0x12/0x12 [ 503.204508][ T9428] ? load_image+0x3b0/0x3b0 [ 503.210025][ T9428] panic+0x2c9/0x710 [ 503.214064][ T9428] ? bpf_jit_dump+0xd0/0xd0 [ 503.219404][ T9428] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 503.225719][ T9428] ? _raw_spin_unlock+0x40/0x40 [ 503.230620][ T9428] check_panic_on_warn+0x80/0xa0 [ 503.235949][ T9428] ? rose_transmit_link+0x5b6/0x730 [ 503.241810][ T9428] end_report+0x66/0x110 [ 503.246197][ T9428] kasan_report+0x118/0x140 [ 503.250743][ T9428] ? rose_transmit_link+0x5b6/0x730 [ 503.255985][ T9428] rose_transmit_link+0x5b6/0x730 [ 503.261052][ T9428] ? skb_put+0x117/0x210 [ 503.265367][ T9428] rose_write_internal+0x1096/0x1eb0 [ 503.270687][ T9428] ? debug_object_assert_init+0x1ed/0x2f0 [ 503.276626][ T9428] ? rose_validate_nr+0x120/0x120 [ 503.281774][ T9428] ? skb_queue_purge+0x64/0x1b0 [ 503.286670][ T9428] rose_release+0x22a/0x4f0 [ 503.291290][ T9428] sock_close+0xd5/0x240 [ 503.295661][ T9428] ? sock_mmap+0x90/0x90 [ 503.300030][ T9428] __fput+0x22c/0x920 [ 503.304045][ T9428] task_work_run+0x1ca/0x250 [ 503.308667][ T9428] ? task_work_cancel+0x230/0x230 [ 503.313728][ T9428] get_signal+0x11a6/0x1350 [ 503.317830][ T9435] loop3: detected capacity change from 0 to 128 [ 503.318648][ T9435] /dev/loop3: Can't open blockdev [ 503.330252][ T9428] arch_do_signal_or_restart+0xb0/0x1230 [ 503.335935][ T9428] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 503.341694][ T9428] ? wake_bit_function+0x200/0x200 [ 503.346846][ T9428] ? __might_fault+0xa6/0x120 [ 503.351560][ T9428] ? get_sigframe_size+0x10/0x10 [ 503.356531][ T9428] ? __sys_connect+0x239/0x410 [ 503.361618][ T9428] ? exit_to_user_mode_loop+0x3b/0x110 [ 503.367299][ T9428] exit_to_user_mode_loop+0x70/0x110 [ 503.372715][ T9428] exit_to_user_mode_prepare+0xb1/0x140 [ 503.378327][ T9428] syscall_exit_to_user_mode+0x16/0x40 [ 503.383911][ T9428] do_syscall_64+0x58/0xa0 [ 503.388370][ T9428] ? clear_bhb_loop+0x45/0xa0 [ 503.393124][ T9428] ? clear_bhb_loop+0x45/0xa0 [ 503.397834][ T9428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.403768][ T9428] RIP: 0033:0x7fd3b278e969 [ 503.408235][ T9428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.427879][ T9428] RSP: 002b:00007fd3b35a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 503.436415][ T9428] RAX: fffffffffffffe00 RBX: 00007fd3b29b6240 RCX: 00007fd3b278e969 [ 503.444504][ T9428] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000007 [ 503.452590][ T9428] RBP: 00007fd3b2810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 503.460585][ T9428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.468587][ T9428] R13: 0000000000000000 R14: 00007fd3b29b6240 R15: 00007ffd30a1e5e8 [ 503.476603][ T9428] [ 503.480069][ T9428] Kernel Offset: disabled [ 503.484402][ T9428] Rebooting in 86400 seconds..