last executing test programs: 1m2.787527872s ago: executing program 1 (id=897): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x44, &(0x7f0000000280)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x18) unshare(0x400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 1m2.297969761s ago: executing program 0 (id=899): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) lseek(0xffffffffffffffff, 0x1000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb}, 0x11000) read(r1, &(0x7f0000000440)=""/52, 0x34) 1m2.005955887s ago: executing program 0 (id=900): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$iommufd(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x8010, r6, 0x77f6b000) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x8725, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x10000000, 0x0, 0xfffffffe, 0x0, 0x4, 0x2, 0x28ad, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x3, 0x0, 0x20, 0x3, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x20004, 0x0, 0x0, 0x101, 0x2, 0xfffffffe], [0x10, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0xfffffffd, 0x800, 0x0, 0xfffffffc, 0x2, 0x1, 0x0, 0x3, 0x0, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x7fffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x0, 0x8c, 0x0, 0x0, 0x8004, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xb78, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0x2, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4, 0xfffffffe, 0x2af, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x2ff, 0x4000005, 0x0, 0x4, 0x2, 0x0, 0x40000000, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20e, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x7fff, 0x0, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x40000003, 0x2, 0xfffffffe, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x3, 0x3, 0xfffffffd, 0x53591b27, 0x5, 0x0, 0x0, 0x0, 0x8, 0x7, 0x8000, 0x0, 0x7fff, 0x80000002, 0x1000000, 0x0, 0x3]}, 0x45c) 58.817846489s ago: executing program 0 (id=903): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xad96, 0x24, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0x5d) 58.801860039s ago: executing program 1 (id=904): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500005c0000000000019078ac1e0001ac1414aa05009078e00000e0400000000000000000110000ac14"], 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000563000/0x2000)=nil) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0x220104, 0xe2a3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r3}, 0x38) 56.198756809s ago: executing program 0 (id=907): mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000001001000001"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000003e000700040042800800018004001d8004000280"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', r4, 0x0, 0x5}, 0xfffffe2e) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r5 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300), &(0x7f0000000480)={0x0, 0xfb, 0x77, 0x0, 0x6, "9bd0674e9fb73f37b34b4f7a10dc37c7", "52a2c05f6e64bb4f9caeb3644d63c7af6dc24e80b1dd1e733e47bd25e2da99523e05989146f0ce341605b6c13149f5b2df2801ba242c8a6fbd57f4b028b10ede6f20d058fe1b5576c3c8a595ec8bf7804f072f56a28bb13a757f0c4ce23076105ef5"}, 0x77, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) 55.264550678s ago: executing program 2 (id=909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d00)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xfc}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x8008}, 0x10) 52.933618223s ago: executing program 2 (id=911): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="b729", 0x2}], 0x1}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) 52.624304349s ago: executing program 1 (id=912): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x23, &(0x7f0000000280)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x2, 0x3, 0xb, 0x8, 0x6, 0x10}, @jmp={0x5, 0x1, 0x7, 0x5, 0x1, 0xfffffffffffffffc, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x0, 0x49, &(0x7f00000003c0)=""/73, 0x41100, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0xfffffff4, 0x3}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x5, 0x5}], 0x10, 0xfffffff7}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000012c0)={@fallback=r0, 0x5, 0x0, 0x4, &(0x7f0000000640)=[0x0], 0x1, 0x0, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0], 0x0}, 0x40) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001340)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001300)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="ed9100003c200800dd18bf", @ANYRES32, @ANYBLOB, @ANYRES64=r2], 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb9619000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r7) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x2c}}, 0x64000) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f2b9ae702650f01c866dfdb440f20c066350f000000440f22c026f20f5ebe19003e0f23a50f795b0e0f013e09000f01c53626663e660ff7cf", 0x3a}], 0x1, 0x19, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0, 0x10}], 0x1, 0xd, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0xc, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0xfa, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x1000, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 50.926768062s ago: executing program 1 (id=914): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = getegid() fchown(r0, 0x0, r4) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r7, 0x540a, 0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 50.669511437s ago: executing program 2 (id=915): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5800200000000008003a80040007001400030074756e6c30"], 0x3c}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) pread64(r6, &(0x7f00000001c0)=""/142, 0x8e, 0x6) 47.493121998s ago: executing program 1 (id=917): open(0x0, 0x64942, 0xd4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 41.688357391s ago: executing program 0 (id=919): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f00000007c0)=ANY=[], 0xfd, 0x6e6, &(0x7f0000001640)="$eJzs3UtoHOcdAPD/rFarXRUcOfEjLYEsMaSlorZkobTqpW4pRYdQQnroebHlWHgtB0kpsimN0se9h5x6Sg+6hR5Keje054aUkquOgUIuOemmMrMz+9Cudle2LG3T30/MzjfzPeab/7x2dhATwP+t1fkoP4kkVuff3Emn9/eWmlN7SzN5djMiKhFRiii3RpFsRJZ7Kx/im+nMvHzSbvhfvcv5cH3l7c+/2v+iNVXOh6x80lNvtEr/rN18iHpETOXjftPHtPjJ0cX3tHf72PbG1VnDNGDXisDFn56pVXhmh31223kf/zv7HFb9JMctMKGS1nWzz1zEbERUI1pX/fzsUDrb3p2+3fPuAAAAAJxU7eRVXjiIg9iJC8+jOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB1lb//P8mHUpGuR1K8/7+Sz4s8PYFGvwjxs5nW+Mnz7wwAAAAAAAAAPHevHsRB7MSFYvowyZ75v9b1jP8b8V5sxVpsxvXYiUZsx3ZsxmJEzHU1VNlpbG9vLmY1Iy4NqXkzPh1Q8+bxfbx1yusMAAAAAAAAABOuOiL//nT/vN/Gauf5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATIIkYqo1yoZLRXouSuWIqBbldiM+jYjK+fb2RJJBM5+cfT8AAADgmVR7J5PqGHVeeD8OYicuFNOHSXbPfyW7X67Ge7ER27Ee29GMtbiT30Ond/2l/b2l5v7e0oN06G/3x1+eqOtZi9H67WHwkl/OStTibqxnc67H7UjiMFPKW3l5f28pHT8Y3K8P0j4lP8oN6c1UV/pO+nH1kyz9x95fEconWsWnVDo2Zy7LnW5HZCHvW1rjYhGBwZHo2TqDdpPy0CUtRqn9y8+l4UsaHPMPhq/z7JFSA3+5ORdHI3EzSu0tdGV4JCK+/bePf3mvuXH/3t2t+clZpYHeH1niaCSWuiJx9WsUidEWskhcbk+vxs/iFzEfX868FZuxHr+KRmzHWr3Ib+T7c/o5NzxSn812T701qifpMVlvn78G9akePX2Kevw0SzXitWybXoj1SOJhRKzFG9nfzVhsnw06W/jyGEd9aYwzbZdr38lG7TBF7fiyfxmvydOSxvViV1y7z7lzWV73nE6UXhwYpeJaN/71qEv5W3kibeF3Q68PZ+1oJBa7IvHScftLK6R/zq4mW82N+5v3Gu+OubzX83F6HP1hoq4S6dq8GNV85S5mn0l2TC1keS+1r7C98arkT1xaSn15l9v1Wkfqz+Nh3Ok5Ur8fy7EcK1npK1np6b4rVpp3td1S7zk8zUu/aZXbD3a6v289jGbr+xAAk232u7OV2n9q/6x9VPt97V7tzepPZn4w80olpv8x/cPywtTrpVeSv8ZH8ZvO/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD0th49vt9oNtc2BydKg7OS4bUazcPiRWJDyvQkkvxVOWMUTrYePT4c2eDwxEzevaesfpqJ4jV8owvXh7ZTfqZuJLtHt1d19LYo3vI0xiKSvoCnlZ86dMWSO3OmJ2BTHk3UT6/BYoftyjr53lsbtL2mImJQ4REnjqnTOPsA5+nG9oN3b2w9evy99QeNd9beWduYXl5eWVhZfmPpxt315tpC67Orwpm8/BY4C91fJ9oqEfHq6LpDXtQKAAAAAAAAAAAAPEdn8b8Q572OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP+21fkoP4kkFheuL6TT+3tLzXQo0p2S5YgoRUTy64jk7xG3ojXEXFdzyXHL+XB95e3Pv9r/otNWuShfitg9tt54dvMh6hExlY9Pq73bo9urdJIzA7KTdmTSgF0rAgfn7b8BAAD//0+S7AE=") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x6) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8108c4, &(0x7f0000000300)={[{@resv_level={'resv_level', 0x3d, 0x400}}, {@heartbeat_none}, {@resv_level={'resv_level', 0x3d, 0x1}}, {@coherency_full}, {@err_ro}, {@localalloc={'localalloc', 0x3d, 0x1}}, {@intr}, {@localalloc}]}, 0x1, 0x442f, &(0x7f000000e480)="$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") openat(0xffffffffffffff9c, 0x0, 0x86442, 0x95) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 41.069396363s ago: executing program 2 (id=920): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}, {0x0}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1) 41.067629673s ago: executing program 1 (id=921): syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c9200a0006000200"], 0xf) syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000900)) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 39.959623435s ago: executing program 2 (id=923): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000c801, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000019c0)="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", 0x547}], 0x1}}], 0x1, 0x400c0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r0, &(0x7f00000007c0)="4868b0", 0x3, 0x10048095, 0x0, 0x0) 32.9909598s ago: executing program 0 (id=925): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = getegid() fchown(r0, 0x0, r4) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r7, 0x540a, 0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 32.9836885s ago: executing program 2 (id=926): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r5, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000340)={{0x0, 0x2710}, {0x77359400}}) 25.332692059s ago: executing program 32 (id=921): syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c9200a0006000200"], 0xf) syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000900)) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 14.829805943s ago: executing program 33 (id=925): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = getegid() fchown(r0, 0x0, r4) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r7, 0x540a, 0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 14.669707246s ago: executing program 34 (id=926): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r5, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000340)={{0x0, 0x2710}, {0x77359400}}) 4.990859353s ago: executing program 3 (id=935): socket$kcm(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x81) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000001f0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x20044054, &(0x7f0000000180)={0x11, 0xf7, r2, 0x1, 0xa, 0x6, @multicast}, 0x14) 4.716261629s ago: executing program 3 (id=936): ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xfffffffd}) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7060000000000008500000017000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x86}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x16) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='fuseblk\x00', 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xb, &(0x7f0000000840)=ANY=[@ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r4, 0x5437, 0x200000000000000) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x400, 0x1, 0xbfdffffc}, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffff7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004840)={0x14, r6, 0x731, 0x0, 0x0, {0x2f}}, 0x14}, 0x1, 0x2}, 0x0) io_setup(0x58, &(0x7f00000001c0)) 3.652480239s ago: executing program 3 (id=937): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd300062e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19d211220900ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b8385702000000000000000f2d00000000000100"}, 0x80, 0x0}, 0x0) keyctl$session_to_parent(0x12) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x6, &(0x7f0000002000)=ANY=[@ANYBLOB="851002227b05a720bffc306517b3cae500000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x94) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) syz_clone(0x6004500, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x1400037e) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000002040)={0xaa, 0x22c}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1e, 0x4, 0x1}) setgroups(0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000500)={0xa, @sdr={0x35303553, 0x1000}}) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) keyctl$session_to_parent(0x12) 2.474303722s ago: executing program 3 (id=938): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r5 = fanotify_init(0x200, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r7 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r6, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x8080000, 0x0, r7}) 187.746997ms ago: executing program 3 (id=939): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='contention_end\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="52000300010007", 0x7) 0s ago: executing program 3 (id=940): semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000280)) kernel console output (not intermixed with test programs): speed_str(high-speed) [ 97.957016][ T6088] vhci_hcd: connection closed [ 98.133624][ T6087] vhci_hcd vhci_hcd.0: Device attached [ 98.147578][ T58] vhci_hcd: stop threads [ 98.151887][ T58] vhci_hcd: release socket [ 98.160095][ T58] vhci_hcd: disconnect device [ 98.176108][ T786] vhci_hcd: vhci_device speed not set [ 99.086726][ T6100] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 99.093382][ T6100] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.101267][ T6100] vhci_hcd vhci_hcd.0: Device attached [ 99.222910][ T6101] vhci_hcd: connection reset by peer [ 99.950695][ T2956] vhci_hcd: stop threads [ 99.961507][ T2956] vhci_hcd: release socket [ 99.974647][ T2956] vhci_hcd: disconnect device [ 100.542548][ T6112] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 100.549094][ T6112] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.628667][ T6112] vhci_hcd vhci_hcd.0: Device attached [ 101.226444][ T6113] vhci_hcd: connection closed [ 101.226995][ T48] vhci_hcd: stop threads [ 101.262213][ T48] vhci_hcd: release socket [ 101.268708][ T48] vhci_hcd: disconnect device [ 102.317020][ T6128] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 102.323573][ T6128] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.335659][ T6128] vhci_hcd vhci_hcd.0: Device attached [ 102.569262][ T6129] vhci_hcd: connection closed [ 102.615987][ T5911] usb 39-1: new high-speed USB device number 5 using vhci_hcd [ 102.765664][ T11] vhci_hcd: stop threads [ 102.950500][ T11] vhci_hcd: release socket [ 102.983233][ T11] vhci_hcd: disconnect device [ 103.026126][ T5770] vhci_hcd: vhci_device speed not set [ 104.399060][ T6146] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 104.405732][ T6146] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 104.413629][ T6146] vhci_hcd vhci_hcd.0: Device attached [ 104.507102][ T6147] vhci_hcd: connection reset by peer [ 104.569914][ T11] vhci_hcd: stop threads [ 104.845423][ T11] vhci_hcd: release socket [ 104.893089][ T11] vhci_hcd: disconnect device [ 105.629427][ T6153] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.62'. [ 107.856692][ T5911] vhci_hcd: vhci_device speed not set [ 115.298586][ T6218] syz.3.79[6218]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 115.341191][ T6218] loop3: detected capacity change from 0 to 1024 [ 115.370413][ T6218] ======================================================= [ 115.370413][ T6218] WARNING: The mand mount option has been deprecated and [ 115.370413][ T6218] and is ignored by this kernel. Remove the mand [ 115.370413][ T6218] option from the mount to silence this warning. [ 115.370413][ T6218] ======================================================= [ 115.445829][ T6218] EXT4-fs: Ignoring removed nobh option [ 115.451430][ T6218] EXT4-fs: Ignoring removed bh option [ 115.527226][ T6218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.911455][ T6218] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4031: comm syz.3.79: Allocating blocks 497-513 which overlap fs metadata [ 115.963080][ T6218] EXT4-fs (loop3): pa ffff888077e66cb0: logic 256, phys. 385, len 8 [ 115.971606][ T6218] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 116.287655][ T6231] loop1: detected capacity change from 0 to 128 [ 116.378838][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.590981][ T6235] loop3: detected capacity change from 0 to 512 [ 116.615917][ T6235] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 116.635538][ T6228] loop0: detected capacity change from 0 to 32768 [ 116.656820][ T6235] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 116.673230][ T6228] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.82 (6228) [ 116.712498][ T6235] EXT4-fs (loop3): 1 orphan inode deleted [ 116.749475][ T6235] EXT4-fs (loop3): 1 truncate cleaned up [ 116.786004][ T6228] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.802654][ T6226] loop2: detected capacity change from 0 to 40427 [ 116.810355][ T6235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.845665][ T6228] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 116.854465][ T6228] BTRFS info (device loop0): turning off barriers [ 116.869309][ T6228] BTRFS info (device loop0): setting nodatasum [ 116.883666][ T6228] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 116.892422][ T6226] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 116.918300][ T6228] BTRFS info (device loop0): use zstd compression, level 3 [ 116.935785][ T6228] BTRFS info (device loop0): using free space tree [ 116.938101][ T6226] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 117.040249][ T6226] F2FS-fs (loop2): invalid crc value [ 117.079736][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.100301][ T6238] loop1: detected capacity change from 0 to 32768 [ 117.120117][ T6238] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.86 (6238) [ 117.171499][ T6226] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.394886][ T28] audit: type=1800 audit(1757205580.699:2): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.82" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 117.469154][ T5771] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (5771) [ 117.489884][ T6226] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 117.519588][ T6226] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 117.785141][ T28] audit: type=1800 audit(1757205581.089:3): pid=6266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.82" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 118.208834][ T6274] loop3: detected capacity change from 0 to 8192 [ 118.291480][ T5785] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.757728][ T6278] loop3: detected capacity change from 0 to 4096 [ 118.878385][ T6281] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.946991][ T28] audit: type=1800 audit(1757205582.249:4): pid=6278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.95" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 119.045305][ T6270] loop1: detected capacity change from 0 to 40427 [ 119.090673][ T6270] F2FS-fs (loop1): LFS is not compatible with checkpoint=disable [ 119.134628][ T6284] loop2: detected capacity change from 0 to 512 [ 119.171341][ T6284] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 119.224813][ T6284] EXT4-fs (loop2): invalid journal inode [ 119.260285][ T6284] EXT4-fs (loop2): can't get journal size [ 119.306162][ T6284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 119.361944][ T6284] System zones: 1-12, 13-13 [ 119.421578][ T6284] EXT4-fs (loop2): 1 truncate cleaned up [ 119.446513][ T6284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.620068][ T6289] loop1: detected capacity change from 0 to 512 [ 119.656172][ T6289] EXT4-fs: Ignoring removed i_version option [ 119.688042][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.707709][ T6289] EXT4-fs (loop1): orphan cleanup on readonly fs [ 119.714438][ T6289] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.96: bg 0: block 131: padding at end of block bitmap is not set [ 119.748473][ T6289] EXT4-fs (loop1): Remounting filesystem read-only [ 119.805862][ T6289] EXT4-fs (loop1): 1 truncate cleaned up [ 119.857304][ T6289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.874657][ T6280] loop0: detected capacity change from 0 to 32768 [ 119.930886][ T6280] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.94 (6280) [ 119.996886][ T6278] syz.3.95 (6278) used greatest stack depth: 19792 bytes left [ 120.021270][ T6280] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 120.047370][ T6280] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 120.064419][ T6280] BTRFS info (device loop0): enabling auto defrag [ 120.086500][ T6280] BTRFS info (device loop0): doing ref verification [ 120.093157][ T6280] BTRFS info (device loop0): use no compression [ 120.140693][ T6280] BTRFS info (device loop0): force clearing of disk cache [ 120.175515][ T6280] BTRFS info (device loop0): use zlib compression, level 3 [ 120.213906][ T6280] BTRFS info (device loop0): max_inline at 4096 [ 120.220659][ T6280] BTRFS info (device loop0): disabling free space tree [ 120.274985][ T6296] loop3: detected capacity change from 0 to 1024 [ 120.337494][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.453038][ T6280] BTRFS info (device loop0): enabling ssd optimizations [ 120.457834][ T6293] loop2: detected capacity change from 0 to 32768 [ 120.480514][ T6293] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.97 (6293) [ 120.499402][ T6280] BTRFS info (device loop0): auto enabling async discard [ 120.530668][ T6280] BTRFS info (device loop0): rebuilding free space tree [ 120.595915][ T6280] BTRFS info (device loop0): disabling free space tree [ 120.607875][ T6280] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 120.621695][ T28] audit: type=1800 audit(1757205583.929:5): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.98" name="file2" dev="loop3" ino=22 res=0 errno=0 [ 120.625459][ T6280] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 120.724855][ T6313] loop1: detected capacity change from 0 to 4096 [ 120.727087][ T5879] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (5879) [ 120.763550][ T6313] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 120.848806][ T6315] loop2: detected capacity change from 0 to 2048 [ 120.888818][ T6313] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 120.931029][ T6315] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.992557][ T6313] ntfs3: loop1: ino=5, "/" directory corrupted [ 121.030286][ T5785] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 121.043304][ T6315] binfmt_misc: register: failed to install interpreter file ./file5 [ 121.058280][ T28] audit: type=1800 audit(1757205584.369:6): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.99" name="bus" dev="loop1" ino=24 res=0 errno=0 [ 121.159863][ T5783] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 123.085268][ T11] hfsplus: b-tree write err: -5, ino 4 [ 124.204726][ T6318] loop2: detected capacity change from 0 to 65536 [ 124.335262][ T6318] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop2": -EINTR [ 126.931553][ T6363] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 127.317293][ T786] IPVS: starting estimator thread 0... [ 127.445622][ T6366] IPVS: using max 36 ests per chain, 86400 per kthread [ 127.471323][ T6370] loop1: detected capacity change from 0 to 64 [ 128.583171][ T5783] hfs: request for non-existent node 131072 in B*Tree [ 128.669219][ T6379] netlink: 148 bytes leftover after parsing attributes in process `syz.3.115'. [ 131.334442][ T6398] netlink: 'syz.1.119': attribute type 10 has an invalid length. [ 131.608660][ T6398] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.619336][ T6398] bond0: (slave team0): Enslaving as an active interface with an up link [ 131.821602][ T6379] syz.3.115 (6379): drop_caches: 2 [ 131.894478][ T6407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.122'. [ 133.606044][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.612362][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.550168][ T6434] netlink: 148 bytes leftover after parsing attributes in process `syz.1.128'. [ 136.122435][ T6442] sg_write: process 112 (syz.3.132) changed security contexts after opening file descriptor, this is not allowed. [ 137.102438][ T6434] syz.1.128 (6434): drop_caches: 2 [ 141.581469][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 141.593320][ T6464] geneve2: entered promiscuous mode [ 141.598598][ T6464] geneve2: entered allmulticast mode [ 144.763228][ T6496] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 145.332052][ T28] audit: type=1326 audit(1757205608.639:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c58ebe9 code=0x7ffc0000 [ 145.384985][ T28] audit: type=1326 audit(1757205608.639:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c58ebe9 code=0x7ffc0000 [ 145.438956][ T28] audit: type=1326 audit(1757205608.639:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f1e7c58ebe9 code=0x7ffc0000 [ 145.492089][ T28] audit: type=1326 audit(1757205608.639:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c58ebe9 code=0x7ffc0000 [ 145.507789][ T6516] loop2: detected capacity change from 0 to 1024 [ 145.585638][ T28] audit: type=1326 audit(1757205608.639:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c58ebe9 code=0x7ffc0000 [ 145.618880][ T6516] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 145.646669][ T6516] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 145.656421][ T6516] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.155: Failed to acquire dquot type 0 [ 145.693877][ T6516] EXT4-fs error (device loop2): mb_free_blocks:1938: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 145.721929][ T6516] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #13: comm syz.2.155: corrupted inode contents [ 145.737836][ T6516] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #13: comm syz.2.155: mark_inode_dirty error [ 145.779354][ T6516] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #13: comm syz.2.155: corrupted inode contents [ 145.908753][ T6516] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #13: comm syz.2.155: mark_inode_dirty error [ 145.999160][ T6516] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #13: comm syz.2.155: corrupted inode contents [ 146.091304][ T6516] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 146.298767][ T6516] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #13: comm syz.2.155: corrupted inode contents [ 146.311133][ T6516] EXT4-fs error (device loop2): ext4_truncate:4288: inode #13: comm syz.2.155: mark_inode_dirty error [ 146.342007][ T6516] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 146.374322][ T6516] EXT4-fs (loop2): 1 truncate cleaned up [ 146.383868][ T6516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.493649][ T6534] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 146.542519][ T6534] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 146.554044][ T6534] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 146.636189][ T6534] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 147.367472][ T6532] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 147.459023][ T28] audit: type=1326 audit(1757205610.769:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 147.459148][ T6516] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 147.490875][ T28] audit: type=1326 audit(1757205610.799:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 147.513146][ T28] audit: type=1326 audit(1757205610.799:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 147.567798][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.679115][ T6540] loop0: detected capacity change from 0 to 512 [ 147.706287][ T6540] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.738106][ T6540] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 147.781183][ T6540] EXT4-fs (loop0): 1 truncate cleaned up [ 147.825205][ T6540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.032082][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.167825][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 148.307962][ T6568] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 148.337496][ T6568] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 148.349306][ T6568] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 148.380139][ T6568] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 149.023039][ T6564] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 149.441773][ T6585] tipc: Started in network mode [ 149.451414][ T6585] tipc: Node identity e26c1e30ce16, cluster identity 4711 [ 149.462372][ T6585] tipc: Enabled bearer , priority 0 [ 149.471983][ T6585] syzkaller0: entered promiscuous mode [ 149.481062][ T6585] syzkaller0: entered allmulticast mode [ 149.510367][ T6585] tipc: Resetting bearer [ 149.530165][ T6584] tipc: Resetting bearer [ 149.565173][ T6584] tipc: Disabling bearer [ 149.950745][ T6595] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 149.978573][ T6595] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 149.990369][ T6595] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 150.017715][ T6595] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 150.732966][ T6593] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 150.940328][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 150.940342][ T28] audit: type=1326 audit(1757205614.249:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 151.006608][ T28] audit: type=1326 audit(1757205614.249:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 151.055458][ T6612] loop0: detected capacity change from 0 to 512 [ 151.064712][ T28] audit: type=1326 audit(1757205614.259:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5fa798d84a code=0x7ffc0000 [ 151.064760][ T28] audit: type=1326 audit(1757205614.309:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5fa79c14a5 code=0x7ffc0000 [ 151.073415][ T6612] EXT4-fs warning (device loop0): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 151.192256][ T6615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.190'. [ 151.215511][ T28] audit: type=1326 audit(1757205614.509:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 151.246949][ T28] audit: type=1326 audit(1757205614.509:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 151.650520][ T6624] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 151.675985][ T6624] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 151.687816][ T6624] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 151.725304][ T6624] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 151.801865][ T6626] netlink: 32 bytes leftover after parsing attributes in process `syz.0.193'. [ 152.299366][ T6622] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 152.462352][ T6632] loop1: detected capacity change from 0 to 1024 [ 152.498136][ T6632] EXT4-fs: Ignoring removed bh option [ 152.523908][ T6632] EXT4-fs: inline encryption not supported [ 152.539945][ T6632] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 152.566455][ T6632] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 152.650474][ T6632] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 2: comm syz.1.196: lblock 2 mapped to illegal pblock 2 (length 1) [ 152.671659][ T6632] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 152.680331][ T6632] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 48: comm syz.1.196: lblock 0 mapped to illegal pblock 48 (length 1) [ 152.699251][ T6632] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 152.711147][ T6632] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.196: Failed to acquire dquot type 0 [ 152.725204][ T6632] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 152.739454][ T6632] EXT4-fs error (device loop1): ext4_evict_inode:252: inode #11: comm syz.1.196: mark_inode_dirty error [ 152.769896][ T6632] EXT4-fs warning (device loop1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 152.791245][ T6632] EXT4-fs (loop1): 1 orphan inode deleted [ 152.798293][ T6632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.817449][ T2956] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 152.894416][ T2956] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 152.923588][ T2956] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:6: Failed to release dquot type 0 [ 152.954816][ T6641] loop3: detected capacity change from 0 to 8192 [ 152.977541][ T6632] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 153.055041][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.221959][ T6651] syz.2.204[6651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.223413][ T6651] syz.2.204[6651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.246611][ T28] audit: type=1326 audit(1757205616.549:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 153.393884][ T6655] netlink: 'syz.1.205': attribute type 298 has an invalid length. [ 153.565525][ T6657] vlan2: entered allmulticast mode [ 153.570689][ T6657] dummy0: entered allmulticast mode [ 153.721896][ T6660] loop2: detected capacity change from 0 to 2048 [ 153.800646][ T6660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 153.866820][ T6657] Zero length message leads to an empty skb [ 154.129424][ T6679] process 'syz.3.215' launched './file0' with NULL argv: empty string added [ 154.441008][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 154.605513][ T6689] mmap: syz.3.219 (6689) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 154.754561][ T6695] tipc: Enabled bearer , priority 0 [ 154.837952][ T6694] tipc: Disabling bearer [ 155.118419][ T6700] loop3: detected capacity change from 0 to 512 [ 155.138028][ T6700] EXT4-fs: Ignoring removed nobh option [ 155.172380][ T6700] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 155.219239][ T6700] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 155.229596][ T6700] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.224: Corrupt directory, running e2fsck is recommended [ 155.253853][ T6700] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 155.272834][ T6700] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.224: corrupted in-inode xattr: invalid ea_ino [ 155.325498][ T6700] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.224: couldn't read orphan inode 15 (err -117) [ 155.357521][ T6700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.455618][ T6700] EXT4-fs (loop3): shut down requested (1) [ 155.531664][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.713161][ T6720] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.295208][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.304140][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.368554][ T28] kauditd_printk_skb: 233 callbacks suppressed [ 156.368570][ T28] audit: type=1107 audit(1757205619.679:270): pid=6739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 156.398912][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 156.471138][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 156.518882][ T28] audit: type=1326 audit(1757205619.829:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.3.243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff44ed8ebe9 code=0x0 [ 156.557280][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 156.642557][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 156.780523][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 156.827291][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 156.935221][ T6759] syz.3.243 uses obsolete (PF_INET,SOCK_PACKET) [ 157.166309][ T6720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.192734][ T6720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.651971][ T6768] loop2: detected capacity change from 0 to 2048 [ 157.713782][ T6768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.747832][ T6768] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.843369][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.900534][ T6720] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.916798][ T6720] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.931210][ T6720] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.942482][ T6720] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.096546][ T6757] netlink: 'syz.1.245': attribute type 10 has an invalid length. [ 158.116808][ T6757] netlink: 40 bytes leftover after parsing attributes in process `syz.1.245'. [ 158.142951][ T6757] dummy0: entered promiscuous mode [ 158.161837][ T6757] bridge0: port 3(dummy0) entered blocking state [ 158.184362][ T6757] bridge0: port 3(dummy0) entered disabled state [ 158.187194][ T6781] loop0: detected capacity change from 0 to 512 [ 158.198939][ T6757] dummy0: entered allmulticast mode [ 158.224829][ T6757] bridge0: port 3(dummy0) entered blocking state [ 158.231382][ T6757] bridge0: port 3(dummy0) entered forwarding state [ 158.250305][ T6753] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 158.272038][ T6781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.287311][ T6781] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.449467][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.486044][ T6789] tipc: Started in network mode [ 158.491100][ T6789] tipc: Node identity 12856c0f39ef, cluster identity 4711 [ 158.512375][ T6789] tipc: Enabled bearer , priority 0 [ 158.541108][ T6789] syzkaller0: entered promiscuous mode [ 158.570471][ T6789] syzkaller0: entered allmulticast mode [ 158.650391][ T6789] tipc: Resetting bearer [ 158.671810][ T6788] tipc: Resetting bearer [ 158.728222][ T6788] tipc: Disabling bearer [ 159.122890][ T6811] netlink: 32 bytes leftover after parsing attributes in process `syz.1.265'. [ 159.191561][ T6809] syz.3.264 (6809) used greatest stack depth: 17960 bytes left [ 159.336421][ T28] audit: type=1326 audit(1757205622.639:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.2.269" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e7c58ebe9 code=0x0 [ 159.386639][ T6825] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 159.849254][ T28] audit: type=1326 audit(1757205623.159:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 159.894433][ T28] audit: type=1326 audit(1757205623.189:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 159.921310][ T28] audit: type=1326 audit(1757205623.189:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 159.944493][ T28] audit: type=1326 audit(1757205623.189:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 160.000135][ T28] audit: type=1326 audit(1757205623.189:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 160.039283][ T28] audit: type=1326 audit(1757205623.189:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 160.083804][ T28] audit: type=1326 audit(1757205623.189:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 160.591857][ T6879] tipc: Enabled bearer , priority 0 [ 160.638326][ T6879] syzkaller0: entered promiscuous mode [ 160.643852][ T6879] syzkaller0: entered allmulticast mode [ 160.782740][ T6879] tipc: Resetting bearer [ 160.860491][ T6877] tipc: Resetting bearer [ 160.934614][ T6877] tipc: Disabling bearer [ 161.336386][ T6893] loop3: detected capacity change from 0 to 1764 [ 162.013921][ T6897] loop2: detected capacity change from 0 to 1024 [ 162.091428][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 162.091442][ T28] audit: type=1326 audit(1757205625.389:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 162.121852][ T6897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.152472][ T28] audit: type=1326 audit(1757205625.389:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 162.175321][ T28] audit: type=1326 audit(1757205625.389:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 162.197975][ T28] audit: type=1326 audit(1757205625.389:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 162.236214][ T28] audit: type=1326 audit(1757205625.389:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 162.285633][ T28] audit: type=1326 audit(1757205625.389:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 162.351223][ T28] audit: type=1326 audit(1757205625.389:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 162.392646][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 162.409880][ T28] audit: type=1800 audit(1757205625.569:294): pid=6897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.281" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 162.415204][ T6910] netlink: 32 bytes leftover after parsing attributes in process `syz.0.286'. [ 162.911161][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.104409][ T6942] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 163.132107][ T6942] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 163.143727][ T6942] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 163.171891][ T6942] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 163.838521][ T6936] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 164.090748][ T6955] netlink: 40 bytes leftover after parsing attributes in process `syz.1.305'. [ 164.247294][ T6957] loop1: detected capacity change from 0 to 8192 [ 165.104916][ T28] audit: type=1326 audit(1757205628.409:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6977 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ed8ebe9 code=0x7ffc0000 [ 165.160766][ T28] audit: type=1326 audit(1757205628.409:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6977 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7ff44ed8ebe9 code=0x7ffc0000 [ 165.205754][ T6988] netlink: 68 bytes leftover after parsing attributes in process `syz.3.314'. [ 165.579122][ T6998] loop0: detected capacity change from 0 to 2048 [ 165.618023][ T6998] EXT4-fs (loop0): invalid inodes per group: 4294967295 [ 165.618023][ T6998] [ 165.967975][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 165.986783][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 166.012863][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 166.049590][ T8] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 166.275012][ T7016] fido_id[7016]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 166.959678][ T7036] netlink: 96 bytes leftover after parsing attributes in process `syz.1.337'. [ 167.147070][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 167.147118][ T28] audit: type=1326 audit(1757205630.459:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 167.237343][ T28] audit: type=1326 audit(1757205630.499:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 167.271641][ T7045] 9pnet_fd: Insufficient options for proto=fd [ 167.310443][ T28] audit: type=1326 audit(1757205630.499:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 167.365561][ T28] audit: type=1326 audit(1757205630.499:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 167.411305][ T28] audit: type=1326 audit(1757205630.659:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 167.465137][ T28] audit: type=1326 audit(1757205630.659:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 167.505832][ T28] audit: type=1326 audit(1757205630.659:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 167.533819][ T28] audit: type=1326 audit(1757205630.659:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 167.556875][ T28] audit: type=1326 audit(1757205630.659:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 167.620325][ T28] audit: type=1326 audit(1757205630.659:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 167.703122][ T7056] tipc: Enabled bearer , priority 0 [ 167.716296][ T7059] loop2: detected capacity change from 0 to 512 [ 167.723937][ T7056] syzkaller0: entered promiscuous mode [ 167.748633][ T7056] syzkaller0: entered allmulticast mode [ 167.781855][ T7059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.813298][ T7066] loop3: detected capacity change from 0 to 512 [ 167.824446][ T7066] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 167.837554][ T7059] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.854092][ T7066] EXT4-fs (loop3): 1 truncate cleaned up [ 167.861580][ T7066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.899911][ T7059] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.346: corrupted inode contents [ 167.930911][ T7056] tipc: Resetting bearer [ 167.953549][ T7059] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #2: comm syz.2.346: mark_inode_dirty error [ 167.976628][ T7055] tipc: Resetting bearer [ 168.002528][ T7059] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.346: corrupted inode contents [ 168.011254][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.051639][ T7055] tipc: Disabling bearer [ 168.086313][ T7072] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.346: corrupted inode contents [ 168.104239][ T7076] capability: warning: `syz.3.349' uses deprecated v2 capabilities in a way that may be insecure [ 168.147743][ T7072] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #2: comm syz.2.346: mark_inode_dirty error [ 168.179026][ T7072] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.346: corrupted inode contents [ 168.221373][ T7072] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.346: mark_inode_dirty error [ 168.266818][ T7072] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.346: corrupted inode contents [ 168.294832][ T7072] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #2: comm syz.2.346: mark_inode_dirty error [ 168.462071][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.556307][ T7085] pim6reg1: entered promiscuous mode [ 168.575318][ T7085] pim6reg1: entered allmulticast mode [ 168.650577][ T7089] tipc: Enabled bearer , priority 0 [ 168.682278][ T7089] tipc: Disabling bearer [ 168.816634][ T7093] loop0: detected capacity change from 0 to 512 [ 168.837381][ T7093] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 168.867247][ T7093] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 168.875297][ T7093] System zones: 1-12 [ 168.889855][ T7093] EXT4-fs (loop0): orphan cleanup on readonly fs [ 168.906630][ T7093] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.355: invalid indirect mapped block 12 (level 1) [ 168.991703][ T7093] EXT4-fs (loop0): Remounting filesystem read-only [ 169.025943][ T7093] EXT4-fs (loop0): 1 truncate cleaned up [ 169.035295][ T7096] loop1: detected capacity change from 0 to 512 [ 169.047682][ T7093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 169.114937][ T7093] openvswitch: netlink: Message has 8999 unknown bytes. [ 169.149210][ T7096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.175933][ T7096] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.268306][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 169.439442][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.557312][ T7109] loop0: detected capacity change from 0 to 512 [ 169.627313][ T7109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.655586][ T7109] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.724435][ T7109] syz.0.363[7109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.724567][ T7109] syz.0.363[7109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.063133][ T7124] loop2: detected capacity change from 0 to 2048 [ 170.115891][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.178906][ T7124] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.345678][ T7133] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.368: bg 0: block 120: padding at end of block bitmap is not set [ 170.695918][ T7139] syzkaller0: entered promiscuous mode [ 170.702675][ T7139] syzkaller0: entered allmulticast mode [ 170.851194][ T5781] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 171.907707][ T7156] loop3: detected capacity change from 0 to 128 [ 172.055281][ T7156] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 172.064692][ T7156] FAT-fs (loop3): Filesystem has been set read-only [ 172.780392][ T7167] netlink: 40 bytes leftover after parsing attributes in process `syz.2.384'. [ 173.249201][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 173.249213][ T28] audit: type=1326 audit(1757205636.559:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ed8ebe9 code=0x7ffc0000 [ 173.301383][ T28] audit: type=1326 audit(1757205636.589:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7ff44ed8ebe9 code=0x7ffc0000 [ 173.365916][ T28] audit: type=1326 audit(1757205636.589:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ed8ebe9 code=0x7ffc0000 [ 173.439482][ T28] audit: type=1326 audit(1757205636.589:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff44ed8ebe9 code=0x7ffc0000 [ 173.473974][ T28] audit: type=1326 audit(1757205636.589:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ed8ebe9 code=0x7ffc0000 [ 173.502559][ T28] audit: type=1326 audit(1757205636.589:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ed8ebe9 code=0x7ffc0000 [ 173.756404][ T7181] loop0: detected capacity change from 0 to 2048 [ 173.822682][ T7181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.839156][ T7184] openvswitch: netlink: Flow actions attr not present in new flow. [ 173.956560][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.019694][ T7190] loop2: detected capacity change from 0 to 256 [ 174.034797][ T7190] FAT-fs (loop2): Unrecognized mount option "shortnaۓAin95" or missing value [ 174.874791][ T7192] netlink: 96 bytes leftover after parsing attributes in process `syz.3.394'. [ 174.910584][ T7196] tipc: Cannot configure node identity twice [ 175.140393][ T7204] pim6reg1: entered promiscuous mode [ 175.162648][ T7204] pim6reg1: entered allmulticast mode [ 175.519042][ T7217] netlink: 32 bytes leftover after parsing attributes in process `syz.0.402'. [ 175.885067][ T28] audit: type=1326 audit(1757205639.189:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ed8ebe9 code=0x7ffc0000 [ 175.917400][ T28] audit: type=1326 audit(1757205639.219:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ed8ebe9 code=0x7ffc0000 [ 175.940518][ T28] audit: type=1326 audit(1757205639.219:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff44ed8ebe9 code=0x7ffc0000 [ 175.963699][ T28] audit: type=1326 audit(1757205639.219:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ed8ebe9 code=0x7ffc0000 [ 176.623423][ T7239] loop0: detected capacity change from 0 to 8192 [ 176.969801][ T7246] IPv6: Can't replace route, no match found [ 177.305872][ T7258] veth1_to_bond: entered allmulticast mode [ 177.356814][ T7258] veth1_to_bond: left allmulticast mode [ 177.810111][ T7276] loop2: detected capacity change from 0 to 512 [ 177.852033][ T7276] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 177.865894][ T7276] EXT4-fs (loop2): orphan cleanup on readonly fs [ 177.952661][ T7276] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.433: corrupted inode contents [ 177.956776][ T7282] loop1: detected capacity change from 0 to 512 [ 177.972187][ T7282] EXT4-fs: Ignoring removed nobh option [ 177.997093][ T7276] EXT4-fs (loop2): Remounting filesystem read-only [ 178.001660][ T7282] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.437: iget: bad i_size value: 38620345925642 [ 178.004268][ T7276] EXT4-fs (loop2): 1 truncate cleaned up [ 178.033264][ T6867] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 178.055230][ T6867] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 178.066538][ T6867] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 178.079825][ T7276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.119252][ T7282] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.437: couldn't read orphan inode 15 (err -117) [ 178.137764][ T7282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.154736][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.363703][ T7282] EXT4-fs (loop1): shut down requested (0) [ 178.436523][ T58] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm kworker/u4:4: bg 0: block 5: invalid block bitmap [ 178.463996][ T58] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 564 with error 28 [ 178.501496][ T58] EXT4-fs (loop1): This should not happen!! Data will be lost [ 178.501496][ T58] [ 178.513744][ T58] EXT4-fs (loop1): Total free blocks count 0 [ 178.521309][ T58] EXT4-fs (loop1): Free/Dirty block details [ 178.533140][ T58] EXT4-fs (loop1): free_blocks=0 [ 178.553417][ T58] EXT4-fs (loop1): dirty_blocks=568 [ 178.567461][ T58] EXT4-fs (loop1): Block reservation details [ 178.576207][ T58] EXT4-fs (loop1): i_reserved_data_blocks=568 [ 178.601216][ T7303] loop0: detected capacity change from 0 to 128 [ 178.629436][ T7305] loop2: detected capacity change from 0 to 512 [ 178.653621][ T7305] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 178.689227][ T7305] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 178.750750][ T7303] syz.0.444: attempt to access beyond end of device [ 178.750750][ T7303] loop0: rw=2049, sector=138, nr_sectors = 14 limit=128 [ 178.769469][ T7305] EXT4-fs (loop2): 1 truncate cleaned up [ 178.784928][ T7305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.911180][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.949235][ T7313] netlink: 48 bytes leftover after parsing attributes in process `syz.1.448'. [ 179.144416][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 179.144429][ T28] audit: type=1326 audit(1757205642.449:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7316 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 179.175321][ T28] audit: type=1326 audit(1757205642.449:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7316 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 179.219256][ T28] audit: type=1326 audit(1757205642.449:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7316 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 179.242025][ T28] audit: type=1326 audit(1757205642.459:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7316 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 179.289708][ T28] audit: type=1326 audit(1757205642.489:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7316 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 179.559342][ T28] audit: type=1326 audit(1757205642.869:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 179.625332][ T28] audit: type=1326 audit(1757205642.869:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 179.688228][ T7331] loop0: detected capacity change from 0 to 8192 [ 179.698500][ T28] audit: type=1326 audit(1757205642.899:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 179.781388][ T28] audit: type=1326 audit(1757205642.899:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 179.869127][ T28] audit: type=1326 audit(1757205642.899:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fa798ebe9 code=0x7ffc0000 [ 180.147282][ T7349] loop3: detected capacity change from 0 to 128 [ 181.253969][ T7354] loop0: detected capacity change from 0 to 512 [ 181.261319][ T7354] journal_path: Lookup failure for './file0/../file0' [ 181.268248][ T7354] EXT4-fs: error: could not find journal device path [ 181.590736][ T7362] syz.3.468[7362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.590865][ T7362] syz.3.468[7362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.153295][ T7377] vlan2: entered allmulticast mode [ 182.538397][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.481'. [ 182.692906][ T7392] smc: net device bond0 applied user defined pnetid SYZ0 [ 182.710314][ T7392] smc: net device bond0 erased user defined pnetid SYZ0 [ 183.049663][ T7406] netlink: 296 bytes leftover after parsing attributes in process `syz.1.488'. [ 183.189847][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 183.283433][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 183.624718][ T7418] netlink: 'syz.0.494': attribute type 10 has an invalid length. [ 183.665571][ T7418] team0: Port device dummy0 added [ 183.686043][ T7419] netlink: 'syz.0.494': attribute type 10 has an invalid length. [ 183.794731][ T7419] team0: Port device dummy0 removed [ 183.818288][ T7419] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 184.000403][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 184.132487][ T7432] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 185.120797][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 185.120811][ T28] audit: type=1326 audit(1757205648.429:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 185.185513][ T28] audit: type=1326 audit(1757205648.429:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 185.243743][ T28] audit: type=1326 audit(1757205648.429:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78578ebe9 code=0x7ffc0000 [ 185.645538][ T5883] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 185.730003][ T7470] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 185.815510][ T5883] usb 3-1: device descriptor read/64, error -71 [ 186.024394][ T5884] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 186.075598][ T5884] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 186.094290][ T5884] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 186.116102][ T5883] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 186.124143][ T5884] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 186.277948][ T7482] fido_id[7482]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 186.296301][ T5883] usb 3-1: device descriptor read/64, error -71 [ 186.325689][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 186.335061][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 186.342696][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 186.458799][ T5883] usb usb3-port1: attempt power cycle [ 186.705457][ T5770] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 186.905745][ T5770] usb 1-1: Using ep0 maxpacket: 16 [ 186.915439][ T5883] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 186.923949][ T5770] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 186.938510][ T5770] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.950862][ T5770] usb 1-1: config 0 has no interface number 0 [ 186.959401][ T5770] usb 1-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 186.965293][ T5883] usb 3-1: device descriptor read/8, error -71 [ 186.972652][ T5770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.005736][ T5770] usb 1-1: config 0 descriptor?? [ 187.016583][ T7390] Set syz1 is full, maxelem 65536 reached [ 187.042683][ T5770] usb 1-1: Found UVC 0.00 device (0bd3:05f4) [ 187.050855][ T5770] usb 1-1: No valid video chain found. [ 187.244252][ T5770] usb 1-1: USB disconnect, device number 2 [ 187.255474][ T5883] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 187.296517][ T5883] usb 3-1: device descriptor read/8, error -71 [ 187.421685][ T5883] usb usb3-port1: unable to enumerate USB device [ 187.441526][ T7499] loop1: detected capacity change from 0 to 1024 [ 187.449840][ T7499] ext4: Unknown parameter 'uid>00000000000000000000' [ 188.442840][ T7514] loop2: detected capacity change from 0 to 512 [ 188.471573][ T7514] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.495541][ T7514] EXT4-fs: inline encryption not supported [ 188.511717][ T7514] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.522594][ T7514] EXT4-fs (loop2): Test dummy encryption mode enabled [ 188.539288][ T7514] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.576365][ T7514] EXT4-fs (loop2): 1 truncate cleaned up [ 188.585982][ T7514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.823393][ T7506] xfrm1: entered allmulticast mode [ 189.027059][ T7514] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 189.339561][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.841164][ T7543] loop1: detected capacity change from 0 to 2048 [ 190.001500][ T7543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.403668][ T7543] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.538: bg 0: block 234: padding at end of block bitmap is not set [ 190.420175][ T7543] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 190.432771][ T7543] EXT4-fs (loop1): This should not happen!! Data will be lost [ 190.432771][ T7543] [ 190.985925][ T7554] loop3: detected capacity change from 0 to 512 [ 191.003559][ T7554] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.045240][ T7554] EXT4-fs: inline encryption not supported [ 191.073827][ T7554] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.104245][ T7554] EXT4-fs (loop3): Test dummy encryption mode enabled [ 191.133351][ T7554] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 191.195055][ T7554] EXT4-fs (loop3): 1 truncate cleaned up [ 191.225000][ T7554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.295379][ C0] sched: RT throttling activated [ 191.722554][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.471917][ T7554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.667072][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.872476][ T7583] xt_nfacct: accounting object `syz1' does not exist [ 193.075876][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 193.270513][ T8] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 193.285041][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.303268][ T7596] tipc: New replicast peer: 255.255.255.255 [ 193.303717][ T8] usb 4-1: Product: syz [ 193.326696][ T7596] tipc: Enabled bearer , priority 10 [ 193.329436][ T8] usb 4-1: Manufacturer: syz [ 193.348495][ T8] usb 4-1: SerialNumber: syz [ 193.900515][ T7618] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 193.943012][ T7618] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 193.956222][ T7618] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 194.067487][ T8] (unnamed net_device) (uninitialized): Assigned a random MAC address: ce:f9:73:21:97:21 [ 194.326407][ T5889] tipc: Node number set to 728394767 [ 194.496523][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.503061][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.786182][ T8] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 194.897254][ T8] usb 4-1: USB disconnect, device number 2 [ 195.322854][ T7647] veth1_macvtap: left promiscuous mode [ 195.328607][ T7647] macsec0: entered promiscuous mode [ 195.454487][ T7649] loop2: detected capacity change from 0 to 2048 [ 195.476182][ T786] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 195.515105][ T7649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.597318][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.683089][ T7656] loop3: detected capacity change from 0 to 128 [ 195.697190][ T786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.701485][ T7656] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.714144][ T786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.738806][ T7656] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 195.899313][ T7658] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 195.932597][ T7658] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 195.944485][ T7658] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 196.884921][ T786] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.894272][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.902493][ T786] usb 1-1: Product: syz [ 196.906704][ T786] usb 1-1: Manufacturer: syz [ 196.911298][ T786] usb 1-1: SerialNumber: syz [ 197.339579][ T786] usb 1-1: 0:2 : does not exist [ 198.478204][ T5889] usb 1-1: USB disconnect, device number 3 [ 198.690795][ T7689] loop1: detected capacity change from 0 to 512 [ 198.787612][ T7689] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 198.881038][ T7689] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 198.889377][ T7689] System zones: 1-12 [ 198.894822][ T7689] EXT4-fs (loop1): orphan cleanup on readonly fs [ 198.917609][ T7689] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.584: bg 0: block 361: padding at end of block bitmap is not set [ 198.942774][ T7689] EXT4-fs (loop1): Remounting filesystem read-only [ 198.951526][ T7689] EXT4-fs (loop1): 1 truncate cleaned up [ 198.963116][ T7689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 199.011678][ T7689] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.584: error -117 reading directory block [ 199.032607][ T7689] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.584: error -117 reading directory block [ 199.051436][ T7689] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.584: error -117 reading directory block [ 199.068081][ T7689] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.584: error -117 reading directory block [ 200.658568][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 200.814642][ T7693] overlayfs: overlapping lowerdir path [ 200.840466][ T7696] loop3: detected capacity change from 0 to 512 [ 200.940112][ T7696] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 200.980869][ T7696] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 201.021110][ T7696] System zones: 1-12 [ 201.049182][ T7696] EXT4-fs (loop3): orphan cleanup on readonly fs [ 201.074011][ T7696] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.586: bg 0: block 361: padding at end of block bitmap is not set [ 201.090936][ T7696] EXT4-fs (loop3): Remounting filesystem read-only [ 201.099885][ T7696] EXT4-fs (loop3): 1 truncate cleaned up [ 201.200537][ T7696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 201.871520][ T7696] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.586: error -117 reading directory block [ 201.927274][ T7708] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.586: error -117 reading directory block [ 202.086980][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 202.117915][ T28] audit: type=1326 audit(1757205921.415:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c58ebe9 code=0x7ffc0000 [ 202.228826][ T28] audit: type=1326 audit(1757205921.415:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c58ebe9 code=0x7ffc0000 [ 202.343193][ T28] audit: type=1326 audit(1757205921.415:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e7c58ebe9 code=0x7ffc0000 [ 202.405661][ T28] audit: type=1326 audit(1757205921.415:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c58ebe9 code=0x7ffc0000 [ 202.457459][ T28] audit: type=1326 audit(1757205921.415:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c58ebe9 code=0x7ffc0000 [ 202.504651][ T28] audit: type=1326 audit(1757205921.415:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e7c58ebe9 code=0x7ffc0000 [ 202.531531][ T28] audit: type=1326 audit(1757205921.415:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c58ebe9 code=0x7ffc0000 [ 202.553998][ T786] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 202.576253][ T28] audit: type=1326 audit(1757205921.425:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e7c58ebe9 code=0x7ffc0000 [ 202.603832][ T28] audit: type=1326 audit(1757205921.425:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c58ebe9 code=0x7ffc0000 [ 202.631604][ T28] audit: type=1326 audit(1757205921.425:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.2.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c58ebe9 code=0x7ffc0000 [ 202.772956][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.797873][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.815546][ T786] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 202.830080][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.856446][ T786] usb 1-1: config 0 descriptor?? [ 203.167041][ T7735] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 203.205727][ T50] Bluetooth: hci3: command tx timeout [ 203.895614][ T7736] kvm: emulating exchange as write [ 204.031362][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.601'. [ 204.262865][ T786] usbhid 1-1:0.0: can't add hid device: -71 [ 204.269121][ T786] usbhid: probe of 1-1:0.0 failed with error -71 [ 204.278867][ T786] usb 1-1: USB disconnect, device number 4 [ 204.416529][ T7749] loop3: detected capacity change from 0 to 512 [ 204.628731][ T7749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.642104][ T7749] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.325029][ T7753] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 328: padding at end of block bitmap is not set [ 207.040526][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.224309][ T7774] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 208.723990][ T7787] pim6reg1: entered promiscuous mode [ 208.729667][ T7787] pim6reg1: entered allmulticast mode [ 209.441261][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.617'. [ 209.651221][ T7799] loop0: detected capacity change from 0 to 256 [ 209.669832][ T7799] exfat: Unknown parameter 'fsmagic' [ 209.736577][ T7798] loop3: detected capacity change from 0 to 256 [ 209.973343][ T7798] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.035563][ T7798] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 210.051358][ T7801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.619'. [ 210.450180][ T7798] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 210.607104][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 210.607118][ T28] audit: type=1800 audit(1757205929.915:561): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.620" name="file1" dev="loop3" ino=1048602 res=0 errno=0 [ 210.670673][ T7805] loop2: detected capacity change from 0 to 256 [ 210.780834][ T7805] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.810256][ T7798] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 210.860971][ T7798] exFAT-fs (loop3): Filesystem has been set read-only [ 211.186591][ T7798] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 211.363258][ T7809] fuse: Bad value for 'fd' [ 211.936229][ T7808] tty tty3: ldisc open failed (-12), clearing slot 2 [ 212.430886][ T7816] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 213.304890][ T7804] loop1: detected capacity change from 0 to 40427 [ 213.347662][ T7804] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 213.368220][ T7804] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 213.412293][ T7804] F2FS-fs (loop1): invalid crc value [ 213.452476][ T7804] F2FS-fs (loop1): Found nat_bits in checkpoint [ 213.569388][ T7829] loop3: detected capacity change from 0 to 4096 [ 213.586471][ T7829] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 213.626554][ T7829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.820787][ T7839] loop2: detected capacity change from 0 to 4096 [ 213.845850][ T786] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 213.866066][ T7839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.055550][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 214.077112][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.145410][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.200245][ T786] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 214.754714][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.876426][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.889820][ T786] usb 1-1: config 0 descriptor?? [ 214.890088][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.042985][ T7853] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 215.373970][ T786] uclogic 0003:5543:0004.0003: item fetching failed at offset 3/5 [ 216.916145][ T786] uclogic 0003:5543:0004.0003: parse failed [ 216.922203][ T786] uclogic: probe of 0003:5543:0004.0003 failed with error -22 [ 216.988390][ T7859] loop2: detected capacity change from 0 to 512 [ 217.006786][ T5883] usb 1-1: USB disconnect, device number 5 [ 217.071782][ T7861] wg2: entered promiscuous mode [ 217.076863][ T7861] wg2: entered allmulticast mode [ 217.277881][ T7866] loop2: detected capacity change from 0 to 1024 [ 217.285267][ T7866] EXT4-fs: Ignoring removed bh option [ 217.352626][ T7866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 217.393541][ T7873] loop0: detected capacity change from 0 to 128 [ 217.828154][ T5785] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 217.855478][ T5785] FAT-fs (loop0): Filesystem has been set read-only [ 219.036024][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.046974][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.060193][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.095583][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.103417][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.110887][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.447821][ T7887] loop1: detected capacity change from 0 to 32768 [ 219.496171][ T7887] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.647 (7887) [ 219.563235][ T7887] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 219.589663][ T7888] chnl_net:caif_netlink_parms(): no params data found [ 219.603751][ T7887] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 219.623111][ T7887] BTRFS info (device loop1): turning off barriers [ 219.645629][ T7887] BTRFS info (device loop1): setting nodatasum [ 219.651900][ T7887] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 219.695761][ T7887] BTRFS info (device loop1): use zstd compression, level 3 [ 219.703024][ T7887] BTRFS info (device loop1): using free space tree [ 219.861433][ T7912] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 220.478967][ T7888] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.568914][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.613409][ T7888] bridge_slave_0: entered allmulticast mode [ 220.620778][ T7888] bridge_slave_0: entered promiscuous mode [ 220.629276][ T7888] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.636659][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.643863][ T7888] bridge_slave_1: entered allmulticast mode [ 220.651307][ T7888] bridge_slave_1: entered promiscuous mode [ 220.731315][ T7916] binder_alloc: 7915: binder_alloc_buf, no vma [ 220.732064][ T28] audit: type=1800 audit(1757205940.035:562): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.647" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 220.791943][ T7888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.848778][ T7888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.969067][ T7888] team0: Port device team_slave_0 added [ 220.991978][ T7888] team0: Port device team_slave_1 added [ 221.038928][ T28] audit: type=1800 audit(1757205940.345:563): pid=7917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.647" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 221.061099][ T5883] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 221.070295][ T7888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.087035][ T7888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.143642][ T7888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.158564][ T7888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.167141][ T7888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.193695][ T7888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.205718][ T5787] Bluetooth: hci3: command tx timeout [ 221.255896][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 221.263147][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 221.277838][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.295578][ T7888] hsr_slave_0: entered promiscuous mode [ 221.301429][ T5883] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 221.311974][ T7888] hsr_slave_1: entered promiscuous mode [ 221.319364][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.328292][ T7888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.339626][ T5883] usb 4-1: config 0 descriptor?? [ 221.347762][ T7888] Cannot create hsr debugfs directory [ 221.438659][ T5783] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 221.772592][ T5883] playstation 0003:054C:0DF2.0004: item fetching failed at offset 3/5 [ 221.803169][ T5883] playstation 0003:054C:0DF2.0004: Parse failed [ 221.825507][ T5883] playstation: probe of 0003:054C:0DF2.0004 failed with error -22 [ 221.961451][ T5883] usb 4-1: USB disconnect, device number 3 [ 223.220548][ T7888] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.285607][ T5787] Bluetooth: hci3: command tx timeout [ 223.299481][ T7888] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.341369][ T7888] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.368574][ T7888] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 224.197733][ T7888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.249024][ T7888] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.268578][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 224.281454][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.288653][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.324757][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.331955][ T6876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.421136][ T7938] loop1: detected capacity change from 0 to 1024 [ 224.473288][ T7943] loop2: detected capacity change from 0 to 64 [ 224.604545][ T28] audit: type=1800 audit(1757205943.895:564): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.662" name="file2" dev="loop1" ino=22 res=0 errno=0 [ 224.722776][ T5781] hfs: request for non-existent node 131072 in B*Tree [ 225.103903][ T7953] overlayfs: failed to resolve './file1': -2 [ 225.240131][ T7952] overlayfs: overlapping lowerdir path [ 225.400725][ T50] Bluetooth: hci3: command tx timeout [ 225.985903][ T7888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.049012][ T7959] loop2: detected capacity change from 0 to 1024 [ 226.074961][ T7959] EXT4-fs: Ignoring removed nobh option [ 226.096820][ T7959] EXT4-fs: Ignoring removed bh option [ 226.118986][ T7888] veth0_vlan: entered promiscuous mode [ 226.163840][ T7959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.167609][ T7888] veth1_vlan: entered promiscuous mode [ 226.286645][ T7888] veth0_macvtap: entered promiscuous mode [ 226.311914][ T7888] veth1_macvtap: entered promiscuous mode [ 226.406654][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.445637][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.485623][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.505922][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.535854][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.555481][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.585035][ T7888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.610097][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.636149][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.675812][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.715473][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.725321][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.772320][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.794213][ T7888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.819083][ T7888] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.835634][ T7888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.855603][ T7888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.864342][ T7888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.904960][ T12] hfsplus: b-tree write err: -5, ino 4 [ 227.070450][ T6867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.086045][ T6867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.115889][ T7959] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.660: Allocating blocks 497-513 which overlap fs metadata [ 227.144883][ T7959] EXT4-fs (loop2): pa ffff888077f18bc8: logic 256, phys. 385, len 8 [ 227.146188][ T6876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.153121][ T7959] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 227.173250][ T6876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.446482][ T50] Bluetooth: hci3: command tx timeout [ 227.557435][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.072408][ T7978] loop1: detected capacity change from 0 to 512 [ 228.329048][ T7978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.342429][ T7978] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.568012][ T28] audit: type=1800 audit(1757205947.825:565): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.664" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 230.806119][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.004961][ T7998] loop1: detected capacity change from 0 to 64 [ 231.384698][ T8009] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 231.403346][ T8009] overlayfs: failed to resolve './file1': -2 [ 231.645747][ T786] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 231.926015][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 231.971771][ T786] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.020582][ T786] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 232.078367][ T786] usb 1-1: config 0 interface 0 has no altsetting 0 [ 232.107284][ T786] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 232.139148][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.178286][ T786] usb 1-1: config 0 descriptor?? [ 232.324531][ T8016] loop1: detected capacity change from 0 to 1024 [ 232.336725][ T8016] EXT4-fs: Ignoring removed nobh option [ 232.342348][ T8016] EXT4-fs: Ignoring removed bh option [ 232.429902][ T8016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.557167][ T8015] loop2: detected capacity change from 0 to 2048 [ 232.607194][ T8015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.646327][ T786] wacom 0003:056A:0094.0005: unknown main item tag 0x0 [ 232.653259][ T786] wacom 0003:056A:0094.0005: unknown main item tag 0x0 [ 232.665596][ T786] wacom 0003:056A:0094.0005: unknown main item tag 0x0 [ 232.672702][ T786] wacom 0003:056A:0094.0005: unknown main item tag 0x0 [ 232.679686][ T786] wacom 0003:056A:0094.0005: unknown main item tag 0x0 [ 232.687441][ T786] wacom 0003:056A:0094.0005: Using device in hidraw-only mode [ 232.714154][ T786] wacom 0003:056A:0094.0005: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 232.788657][ T8015] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.673: bg 0: block 234: padding at end of block bitmap is not set [ 232.826908][ T8015] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 232.865558][ T8015] EXT4-fs (loop2): This should not happen!! Data will be lost [ 232.865558][ T8015] [ 232.893797][ T5883] usb 1-1: USB disconnect, device number 6 [ 232.900271][ T8015] EXT4-fs (loop2): Total free blocks count 0 [ 232.915928][ T8015] EXT4-fs (loop2): Free/Dirty block details [ 232.925779][ T8015] EXT4-fs (loop2): free_blocks=0 [ 232.944783][ T8015] EXT4-fs (loop2): dirty_blocks=16 [ 232.955186][ T8015] EXT4-fs (loop2): Block reservation details [ 232.976706][ T8015] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 233.934337][ T8016] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.672: Allocating blocks 497-513 which overlap fs metadata [ 233.982771][ T8016] EXT4-fs (loop1): pa ffff888074f19e80: logic 256, phys. 385, len 8 [ 233.984166][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.990969][ T8016] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 234.276872][ T8042] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 234.293336][ T8042] overlayfs: failed to resolve './file1': -2 [ 235.166563][ T8046] loop3: detected capacity change from 0 to 1024 [ 235.253947][ T28] audit: type=1800 audit(1757205954.545:566): pid=8046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.684" name="file2" dev="loop3" ino=22 res=0 errno=0 [ 235.392728][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.488801][ T8049] loop2: detected capacity change from 0 to 16 [ 235.715840][ T8049] erofs: (device loop2): mounted with root inode @ nid 36. [ 236.532739][ T8053] loop1: detected capacity change from 0 to 512 [ 236.587090][ T8053] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.624131][ T8053] EXT4-fs: inline encryption not supported [ 236.666725][ T8053] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.703302][ T8053] EXT4-fs (loop1): Test dummy encryption mode enabled [ 236.741578][ T8053] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 236.830938][ T8053] EXT4-fs (loop1): 1 truncate cleaned up [ 236.861742][ T8053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.269664][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.633744][ T8062] bridge: RTM_NEWNEIGH with invalid ether address [ 237.764684][ T6869] hfsplus: b-tree write err: -5, ino 4 [ 240.276548][ T8081] loop2: detected capacity change from 0 to 32768 [ 240.622552][ T8086] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 241.893389][ T8098] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 242.842824][ T8107] loop1: detected capacity change from 0 to 512 [ 242.888684][ T8107] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 243.008159][ T8107] EXT4-fs (loop1): orphan cleanup on readonly fs [ 243.077350][ T8107] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.703: corrupted inode contents [ 243.100095][ T8107] EXT4-fs (loop1): Remounting filesystem read-only [ 243.123686][ T8107] EXT4-fs (loop1): 1 truncate cleaned up [ 243.154389][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 243.190450][ T12] Quota error (device loop1): write_blk: dquota write failed [ 243.202994][ T12] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 243.214286][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 243.237736][ T12] Quota error (device loop1): write_blk: dquota write failed [ 243.254685][ T12] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 243.280825][ T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 243.302984][ T12] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 243.330422][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 243.363570][ T8107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.483196][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.797201][ T8115] loop3: detected capacity change from 0 to 32768 [ 243.967186][ T8126] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 246.457845][ T8150] loop3: detected capacity change from 0 to 1024 [ 246.556524][ T28] audit: type=1800 audit(1757205965.855:567): pid=8150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.717" name="file2" dev="loop3" ino=22 res=0 errno=0 [ 247.239363][ T8158] overlayfs: overlapping lowerdir path [ 247.278782][ T8158] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 247.691729][ T8160] loop1: detected capacity change from 0 to 64 [ 248.211650][ T8152] loop2: detected capacity change from 0 to 32768 [ 248.513319][ T8152] read_mapping_page failed! [ 248.604734][ T8152] diRead: read_metapage failed [ 248.667902][ T8152] jfs_lookup: iget failed on inum 32 [ 249.456109][ T8176] loop2: detected capacity change from 0 to 40427 [ 249.579063][ T8176] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 249.586947][ T8176] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 249.638106][ T8176] F2FS-fs (loop2): invalid crc value [ 249.672081][ T8176] F2FS-fs (loop2): Found nat_bits in checkpoint [ 249.823306][ T8176] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 249.830564][ T8176] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 251.486176][ T48] hfsplus: b-tree write err: -5, ino 4 [ 255.933652][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.943302][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.319014][ T8219] loop1: detected capacity change from 0 to 1024 [ 258.727773][ T28] audit: type=1800 audit(1757205978.035:568): pid=8219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.738" name="file2" dev="loop1" ino=22 res=0 errno=0 [ 259.034967][ T8225] overlayfs: overlapping lowerdir path [ 259.080105][ T8225] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 264.199724][ T48] hfsplus: b-tree write err: -5, ino 4 [ 266.533627][ T8251] vlan2: entered allmulticast mode [ 268.771301][ T12] tipc: Left network mode [ 272.270043][ T8272] overlayfs: overlapping lowerdir path [ 272.613774][ T8275] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 275.747307][ T8293] loop2: detected capacity change from 0 to 256 [ 275.754576][ T8293] exfat: Unknown parameter 'fsmagic' [ 277.921897][ T8295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.762'. [ 279.811665][ T8311] loop1: detected capacity change from 0 to 256 [ 279.849898][ T8308] overlayfs: failed to resolve './file0': -2 [ 283.901711][ T8325] loop3: detected capacity change from 0 to 1024 [ 284.073893][ T28] audit: type=1800 audit(1757206003.375:569): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.775" name="file2" dev="loop3" ino=22 res=0 errno=0 [ 284.661337][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'. [ 284.675203][ T8328] geneve2: entered promiscuous mode [ 284.680591][ T8328] geneve2: entered allmulticast mode [ 286.746817][ T8342] overlayfs: failed to resolve './file0': -2 [ 288.543954][ T12] hsr_slave_0: left promiscuous mode [ 288.749472][ T12] hsr_slave_1: left promiscuous mode [ 288.861542][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.911128][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.925750][ T6869] hfsplus: b-tree write err: -5, ino 4 [ 289.014308][ T12] bridge_slave_1: left allmulticast mode [ 289.021815][ T12] bridge_slave_1: left promiscuous mode [ 289.053597][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.121795][ T12] bridge_slave_0: left allmulticast mode [ 289.140833][ T12] bridge_slave_0: left promiscuous mode [ 289.159058][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.150898][ T8350] loop3: detected capacity change from 0 to 128 [ 292.753479][ T8357] loop1: detected capacity change from 0 to 64 [ 293.755015][ T8363] loop3: detected capacity change from 0 to 1024 [ 293.802216][ T8363] EXT4-fs: Mount option(s) incompatible with ext3 [ 294.863699][ T12] team0 (unregistering): Port device team_slave_1 removed [ 295.033523][ T12] team0 (unregistering): Port device team_slave_0 removed [ 295.169882][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.296132][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.981306][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 297.355767][ T12] bond0 (unregistering): Released all slaves [ 297.626713][ T8372] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 297.663263][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'. [ 298.257124][ T8378] loop1: detected capacity change from 0 to 1024 [ 298.971597][ T8386] overlayfs: failed to resolve './file0': -2 [ 299.609233][ T28] audit: type=1800 audit(1757206018.835:570): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.791" name="file2" dev="loop1" ino=22 res=0 errno=0 [ 299.659228][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 299.672987][ T8380] geneve2: entered promiscuous mode [ 299.678409][ T8380] geneve2: entered allmulticast mode [ 299.881734][ T2956] hfsplus: b-tree write err: -5, ino 4 [ 300.162242][ T8392] x_tables: duplicate underflow at hook 2 [ 300.431860][ T8396] loop1: detected capacity change from 0 to 64 [ 300.565074][ T8395] wg2: left promiscuous mode [ 300.587759][ T8395] wg2: left allmulticast mode [ 300.685666][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 300.712874][ T8400] wg2: entered promiscuous mode [ 300.754473][ T8400] wg2: entered allmulticast mode [ 300.896508][ T23] usb 1-1: too many configurations: 214, using maximum allowed: 8 [ 300.956906][ T23] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 301.233020][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 301.248045][ T23] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 301.258505][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 301.273003][ T23] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 301.305162][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 301.349316][ T23] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 301.378396][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 301.399604][ T23] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 301.417902][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 301.435506][ T23] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 301.457617][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 301.479858][ T23] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 301.497705][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 301.524205][ T23] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 301.537097][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 301.555797][ T23] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 301.565060][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.578294][ T23] usb 1-1: Product: syz [ 301.582550][ T23] usb 1-1: Manufacturer: syz [ 301.590271][ T23] usb 1-1: SerialNumber: syz [ 301.611741][ T23] rtl8150 1-1:1.0: couldn't find required endpoints [ 301.621411][ T23] rtl8150: probe of 1-1:1.0 failed with error -5 [ 301.914365][ T5911] usb 1-1: USB disconnect, device number 7 [ 306.522777][ T8425] loop3: detected capacity change from 0 to 1024 [ 307.339589][ T28] audit: type=1800 audit(1757206026.625:571): pid=8425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.804" name="file2" dev="loop3" ino=22 res=0 errno=0 [ 307.390841][ T8427] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 307.411642][ T8427] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 307.423880][ T8427] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 307.445953][ T8427] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 307.470731][ T8426] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 307.508801][ T42] hfsplus: b-tree write err: -5, ino 4 [ 307.649378][ T8432] loop3: detected capacity change from 0 to 64 [ 308.606456][ T8444] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 309.051941][ T8438] loop2: detected capacity change from 0 to 40427 [ 309.079076][ T8438] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 309.100754][ T8438] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 309.138817][ T8438] F2FS-fs (loop2): Found nat_bits in checkpoint [ 309.260961][ T8438] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 309.269290][ T8438] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 309.897052][ T8453] loop1: detected capacity change from 0 to 4096 [ 309.970550][ T8453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.422222][ T8457] /dev/loop0: Can't open blockdev [ 312.494662][ T5911] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 313.706927][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.716073][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 313.732763][ T5911] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 313.758213][ T5911] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.813688][ T5911] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.901868][ T5911] usb 1-1: string descriptor 0 read error: -71 [ 313.945620][ T5911] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.005713][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.049272][ T8466] loop1: detected capacity change from 0 to 1024 [ 314.061286][ T5911] usb 1-1: can't set config #1, error -71 [ 314.083903][ T5911] usb 1-1: USB disconnect, device number 8 [ 314.199757][ T28] audit: type=1800 audit(1757206033.505:572): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.817" name="file2" dev="loop1" ino=22 res=0 errno=0 [ 314.375962][ T42] hfsplus: b-tree write err: -5, ino 4 [ 314.820853][ T8471] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 314.836714][ T8471] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 314.847889][ T8471] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 314.887467][ T8471] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 314.930110][ T8470] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 315.152551][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 315.538256][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.553501][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.573508][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 315.615603][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 315.642364][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.675296][ T23] usb 3-1: config 0 descriptor?? [ 315.700564][ T8481] loop3: detected capacity change from 0 to 4096 [ 315.751617][ T8481] EXT4-fs: Invalid want_extra_isize 3 [ 316.226174][ T23] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 316.337002][ T23] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 316.488252][ T23] usb 3-1: USB disconnect, device number 6 [ 316.978776][ T8485] fido_id[8485]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 317.570526][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.578124][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.691704][ T8496] loop1: detected capacity change from 0 to 64 [ 320.455884][ T8502] loop3: detected capacity change from 0 to 1024 [ 320.639481][ T28] audit: type=1800 audit(1757206039.945:573): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.829" name="file2" dev="loop3" ino=22 res=0 errno=0 [ 320.863657][ T8506] syz.0.831[8506] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.863791][ T8506] syz.0.831[8506] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.768104][ T8508] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 321.814960][ T8508] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 321.826258][ T8508] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 322.947282][ T8508] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 322.959905][ T8507] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 323.837853][ T7629] hfsplus: b-tree write err: -5, ino 4 [ 323.846793][ T8520] loop2: detected capacity change from 0 to 512 [ 323.884193][ T8520] EXT4-fs: Ignoring removed oldalloc option [ 323.941157][ T8520] EXT4-fs: Ignoring removed bh option [ 324.480442][ T8520] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.836: corrupted in-inode xattr: e_value size too large [ 324.537975][ T8520] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.836: couldn't read orphan inode 15 (err -117) [ 324.580863][ T8520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.600829][ T8528] loop1: detected capacity change from 0 to 64 [ 324.799631][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.858389][ T8530] loop1: detected capacity change from 0 to 32768 [ 331.147600][ T8544] loop2: detected capacity change from 0 to 64 [ 332.707177][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 332.716058][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'. [ 334.450482][ T8561] random: crng reseeded on system resumption [ 334.846190][ T8559] wireguard0: entered promiscuous mode [ 337.043657][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 337.542059][ T8576] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 337.561276][ T8576] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 337.588124][ T8576] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 337.622531][ T8576] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 337.643346][ T8575] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 337.723441][ T8578] loop2: detected capacity change from 0 to 64 [ 337.995744][ T8580] fuse: root generation should be zero [ 338.607606][ T8567] loop1: detected capacity change from 0 to 32768 [ 340.210130][ T8602] netlink: 72 bytes leftover after parsing attributes in process `syz.2.864'. [ 340.256563][ T8603] 9pnet_virtio: no channels available for device syz [ 340.932144][ T8611] 9pnet_virtio: no channels available for device syz [ 343.993396][ T8614] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 345.401175][ T8630] loop3: detected capacity change from 0 to 1024 [ 345.504062][ T28] audit: type=1800 audit(1757206064.805:574): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.873" name="file2" dev="loop3" ino=22 res=0 errno=0 [ 345.788570][ T8637] overlayfs: missing 'lowerdir' [ 349.233994][ T6876] hfsplus: b-tree write err: -5, ino 4 [ 353.388728][ T8662] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 354.298754][ T8668] tipc: Enabled bearer , priority 10 [ 354.381757][ T8668] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 354.429449][ T8668] tipc: Enabled bearer , priority 10 [ 354.980750][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 355.010192][ T8681] ceph: No mds server is up or the cluster is laggy [ 355.031507][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 355.545514][ T5889] tipc: Node number set to 746200624 [ 355.556408][ T8689] Bluetooth: MGMT ver 1.22 [ 356.720079][ T8693] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 356.877083][ T8693] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 356.952319][ T8693] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 357.161185][ T8698] loop3: detected capacity change from 0 to 1024 [ 357.168766][ T8698] ext4: Unknown parameter 'uid>00000000000000000000' [ 357.305194][ T8333] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 361.006591][ T8719] loop1: detected capacity change from 0 to 512 [ 361.069361][ T8719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.141746][ T8719] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.487751][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.015130][ T8735] netlink: 'syz.3.898': attribute type 13 has an invalid length. [ 362.140811][ T8735] netlink: 'syz.3.898': attribute type 17 has an invalid length. [ 362.416940][ T8735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.642439][ T8751] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 367.502271][ T8768] loop2: detected capacity change from 0 to 512 [ 368.349011][ T8768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.413616][ T8768] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.733393][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.164912][ T8778] ubi31: attaching mtd0 [ 369.251150][ T8778] ubi31: scanning is finished [ 369.277676][ T8778] ubi31: empty MTD device detected [ 370.076046][ T8779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.907'. [ 370.223445][ T8778] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 370.464427][ T8778] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 370.484649][ T8778] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 370.500056][ T8778] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 370.509092][ T8778] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 370.522205][ T8778] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 370.532956][ T8778] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 539813592 [ 370.552434][ T8778] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 371.755419][ T8782] ubi31: background thread "ubi_bgt31d" started, PID 8782 [ 378.811229][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.855422][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.918829][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 414.985724][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 415.000878][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 415.028741][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 415.046423][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 415.053903][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 415.259124][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 415.273204][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 415.283831][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 415.292536][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 415.305997][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 415.313335][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 415.390074][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 415.400778][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 415.416303][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 415.424629][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 415.434262][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 415.441724][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.662913][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.788540][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.893475][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.194576][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.037642][ T8857] chnl_net:caif_netlink_parms(): no params data found [ 417.058958][ T8854] chnl_net:caif_netlink_parms(): no params data found [ 417.094760][ T8856] chnl_net:caif_netlink_parms(): no params data found [ 417.125614][ T5787] Bluetooth: hci1: command tx timeout [ 417.405630][ T5787] Bluetooth: hci3: command tx timeout [ 417.427615][ T8857] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.434728][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.442067][ T8857] bridge_slave_0: entered allmulticast mode [ 417.449007][ T8857] bridge_slave_0: entered promiscuous mode [ 417.517028][ T12] tipc: Disabling bearer [ 417.535563][ T5787] Bluetooth: hci2: command tx timeout [ 417.543071][ T12] tipc: Left network mode [ 417.548121][ T8857] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.555333][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.562889][ T8857] bridge_slave_1: entered allmulticast mode [ 417.569685][ T8857] bridge_slave_1: entered promiscuous mode [ 417.597387][ T8856] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.610251][ T8856] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.628979][ T8856] bridge_slave_0: entered allmulticast mode [ 417.645253][ T8856] bridge_slave_0: entered promiscuous mode [ 417.664615][ T8854] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.688176][ T8854] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.700166][ T8854] bridge_slave_0: entered allmulticast mode [ 417.719388][ T8854] bridge_slave_0: entered promiscuous mode [ 417.730868][ T8854] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.739237][ T8854] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.748279][ T8854] bridge_slave_1: entered allmulticast mode [ 417.769512][ T8854] bridge_slave_1: entered promiscuous mode [ 417.834679][ T8857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.939266][ T8856] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.947418][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.957583][ T8856] bridge_slave_1: entered allmulticast mode [ 417.966224][ T8856] bridge_slave_1: entered promiscuous mode [ 418.079355][ T8857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.122502][ T8854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.144016][ T8854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.198333][ T8856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.370509][ T8857] team0: Port device team_slave_0 added [ 418.388607][ T8857] team0: Port device team_slave_1 added [ 418.402770][ T8856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.493454][ T8854] team0: Port device team_slave_0 added [ 418.583139][ T8854] team0: Port device team_slave_1 added [ 418.661202][ T8856] team0: Port device team_slave_0 added [ 418.769843][ T8857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.783694][ T8857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.809963][ T8857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.833261][ T8857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.873519][ T8857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.185789][ T8857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.227057][ T5787] Bluetooth: hci1: command tx timeout [ 419.509745][ T5787] Bluetooth: hci3: command tx timeout [ 419.531450][ T8856] team0: Port device team_slave_1 added [ 419.605506][ T5787] Bluetooth: hci2: command tx timeout [ 419.612894][ T8854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.636324][ T8854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.669083][ T8854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.705963][ T8854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.713040][ T8854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.742477][ T8854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.829222][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.935'. [ 420.005316][ T8857] hsr_slave_0: entered promiscuous mode [ 420.022383][ T8857] hsr_slave_1: entered promiscuous mode [ 420.030100][ T8857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.038031][ T8857] Cannot create hsr debugfs directory [ 420.106156][ T8854] hsr_slave_0: entered promiscuous mode [ 420.123183][ T8854] hsr_slave_1: entered promiscuous mode [ 420.140942][ T8854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.153617][ T8854] Cannot create hsr debugfs directory [ 420.214245][ T8856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.227922][ T8856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.258088][ T8856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.342411][ T8856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.350904][ T8856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.377154][ T8856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.460628][ T8856] hsr_slave_0: entered promiscuous mode [ 420.472673][ T8856] hsr_slave_1: entered promiscuous mode [ 420.481162][ T8856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.494263][ T8856] Cannot create hsr debugfs directory [ 421.142170][ T12] hsr_slave_0: left promiscuous mode [ 421.149833][ T12] hsr_slave_1: left promiscuous mode [ 421.156278][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.163809][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.184472][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.277651][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.300571][ T5787] Bluetooth: hci1: command tx timeout [ 421.359940][ T12] dummy0: left allmulticast mode [ 421.385152][ T12] bridge0: port 3(dummy0) entered disabled state [ 421.513640][ T12] bridge_slave_1: left allmulticast mode [ 421.546010][ T12] bridge_slave_1: left promiscuous mode [ 421.573530][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.669295][ T5787] Bluetooth: hci3: command tx timeout [ 421.732004][ T12] bridge_slave_0: left allmulticast mode [ 421.761584][ T5787] Bluetooth: hci2: command tx timeout [ 421.768859][ T12] bridge_slave_0: left promiscuous mode [ 421.795749][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.092089][ T12] veth1_macvtap: left promiscuous mode [ 422.157445][ T12] veth0_macvtap: left promiscuous mode [ 422.163121][ T12] veth1_vlan: left promiscuous mode [ 422.217117][ T12] veth0_vlan: left promiscuous mode [ 423.365982][ T5787] Bluetooth: hci1: command tx timeout [ 423.620554][ T12] team0 (unregistering): Port device team_slave_1 removed [ 423.669618][ T12] team0 (unregistering): Port device team_slave_0 removed [ 423.688077][ T5787] Bluetooth: hci3: command tx timeout [ 423.723853][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.779773][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.850932][ T5787] Bluetooth: hci2: command tx timeout [ 424.173855][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 424.334443][ T12] bond0 (unregistering): Released all slaves [ 424.536225][ T8854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 424.572835][ T8854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 424.594058][ T8947] Bluetooth: MGMT ver 1.22 [ 424.628080][ T8854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 424.667799][ T8854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 424.883733][ T8857] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 424.929461][ T8857] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 424.943588][ T8857] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 424.985927][ T8857] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 425.044844][ T12] IPVS: stop unused estimator thread 0... [ 425.117662][ T12] ------------[ cut here ]------------ [ 425.123178][ T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:2997 xfrm_state_fini+0x25c/0x2b0 [ 425.134744][ T12] Modules linked in: [ 425.139026][ T12] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 425.146596][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.156754][ T12] Workqueue: netns cleanup_net [ 425.161562][ T12] RIP: 0010:xfrm_state_fini+0x25c/0x2b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 425.167172][ T12] Code: 5c 41 5d 41 5e 41 5f 5d e9 81 20 00 00 e8 4c e6 66 f8 0f 0b e9 2c fe ff ff e8 40 e6 66 f8 0f 0b e9 91 fe ff ff e8 34 e6 66 f8 <0f> 0b 43 80 3c 2c 00 0f 85 fa fe ff ff e9 fd fe ff ff e8 1d e6 66 [ 425.186989][ T12] RSP: 0018:ffffc90000117a98 EFLAGS: 00010293 [ 425.194033][ T12] RAX: ffffffff891ea96c RBX: ffff88802f753a80 RCX: ffff88801ba4da00 [ 425.202479][ T12] RDX: 0000000000000000 RSI: ffffffff8aaabaa0 RDI: ffffffff8afc70c0 [ 425.210822][ T12] RBP: 0000000000000040 R08: ffffffff90da550f R09: 1ffffffff21b4aa1 [ 425.218876][ T12] R10: dffffc0000000000 R11: fffffbfff21b4aa2 R12: 1ffff11005eea9c4 [ 425.227057][ T12] R13: dffffc0000000000 R14: ffff88802f754e20 R15: ffff88802b532900 [ 425.235050][ T12] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 425.244285][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.250513][ T8856] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 425.251000][ T12] CR2: 000055b88fae8950 CR3: 000000006cc8c000 CR4: 00000000003506e0 [ 425.265664][ T12] Call Trace: [ 425.268961][ T12] [ 425.271925][ T12] xfrm_net_exit+0x25/0x60 [ 425.277099][ T12] cleanup_net+0x6f4/0xb90 [ 425.281557][ T12] ? ops_free_list+0x3b0/0x3b0 [ 425.286423][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 425.291643][ T12] ? process_scheduled_works+0x957/0x15b0 [ 425.298597][ T12] ? process_scheduled_works+0x957/0x15b0 [ 425.304340][ T12] process_scheduled_works+0xa45/0x15b0 [ 425.310189][ T12] ? assign_work+0x400/0x400 [ 425.314811][ T12] ? assign_work+0x39e/0x400 [ 425.319482][ T12] worker_thread+0xa55/0xfc0 [ 425.324117][ T12] kthread+0x2fa/0x390 [ 425.328292][ T12] ? pr_cont_work+0x560/0x560 [ 425.333001][ T12] ? kthread_blkcg+0xd0/0xd0 [ 425.337689][ T12] ret_from_fork+0x48/0x80 [ 425.342123][ T12] ? kthread_blkcg+0xd0/0xd0 [ 425.346763][ T12] ret_from_fork_asm+0x11/0x20 [ 425.351561][ T12] [ 425.354591][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 425.361873][ T12] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 425.369251][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.379320][ T12] Workqueue: netns cleanup_net [ 425.384112][ T12] Call Trace: [ 425.387397][ T12] [ 425.390352][ T12] dump_stack_lvl+0x16c/0x230 [ 425.395043][ T12] ? show_regs_print_info+0x20/0x20 [ 425.400257][ T12] ? load_image+0x3b0/0x3b0 [ 425.404805][ T12] panic+0x2c0/0x710 [ 425.408809][ T12] ? bpf_jit_dump+0xd0/0xd0 [ 425.413339][ T12] ? ret_from_fork_asm+0x11/0x20 [ 425.418301][ T12] __warn+0x2e0/0x470 [ 425.422301][ T12] ? xfrm_state_fini+0x25c/0x2b0 [ 425.427257][ T12] ? xfrm_state_fini+0x25c/0x2b0 [ 425.432210][ T12] report_bug+0x2be/0x4f0 [ 425.436548][ T12] ? xfrm_state_fini+0x25c/0x2b0 [ 425.441502][ T12] ? xfrm_state_fini+0x25c/0x2b0 [ 425.446451][ T12] ? xfrm_state_fini+0x25e/0x2b0 [ 425.451404][ T12] handle_bug+0xcf/0x120 [ 425.455664][ T12] exc_invalid_op+0x1a/0x50 [ 425.460185][ T12] asm_exc_invalid_op+0x1a/0x20 [ 425.465052][ T12] RIP: 0010:xfrm_state_fini+0x25c/0x2b0 [ 425.470607][ T12] Code: 5c 41 5d 41 5e 41 5f 5d e9 81 20 00 00 e8 4c e6 66 f8 0f 0b e9 2c fe ff ff e8 40 e6 66 f8 0f 0b e9 91 fe ff ff e8 34 e6 66 f8 <0f> 0b 43 80 3c 2c 00 0f 85 fa fe ff ff e9 fd fe ff ff e8 1d e6 66 [ 425.490212][ T12] RSP: 0018:ffffc90000117a98 EFLAGS: 00010293 [ 425.496276][ T12] RAX: ffffffff891ea96c RBX: ffff88802f753a80 RCX: ffff88801ba4da00 [ 425.504235][ T12] RDX: 0000000000000000 RSI: ffffffff8aaabaa0 RDI: ffffffff8afc70c0 [ 425.512193][ T12] RBP: 0000000000000040 R08: ffffffff90da550f R09: 1ffffffff21b4aa1 [ 425.520157][ T12] R10: dffffc0000000000 R11: fffffbfff21b4aa2 R12: 1ffff11005eea9c4 [ 425.528123][ T12] R13: dffffc0000000000 R14: ffff88802f754e20 R15: ffff88802b532900 [ 425.536095][ T12] ? xfrm_state_fini+0x25c/0x2b0 [ 425.541036][ T12] ? xfrm_state_fini+0x25c/0x2b0 [ 425.545969][ T12] xfrm_net_exit+0x25/0x60 [ 425.550382][ T12] cleanup_net+0x6f4/0xb90 [ 425.554793][ T12] ? ops_free_list+0x3b0/0x3b0 [ 425.559555][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 425.564746][ T12] ? process_scheduled_works+0x957/0x15b0 [ 425.570458][ T12] ? process_scheduled_works+0x957/0x15b0 [ 425.576167][ T12] process_scheduled_works+0xa45/0x15b0 [ 425.581725][ T12] ? assign_work+0x400/0x400 [ 425.586310][ T12] ? assign_work+0x39e/0x400 [ 425.590893][ T12] worker_thread+0xa55/0xfc0 [ 425.595495][ T12] kthread+0x2fa/0x390 [ 425.599552][ T12] ? pr_cont_work+0x560/0x560 [ 425.604220][ T12] ? kthread_blkcg+0xd0/0xd0 [ 425.608800][ T12] ret_from_fork+0x48/0x80 [ 425.613207][ T12] ? kthread_blkcg+0xd0/0xd0 [ 425.617785][ T12] ret_from_fork_asm+0x11/0x20 [ 425.622551][ T12] [ 425.625812][ T12] Kernel Offset: disabled [ 425.630187][ T12] Rebooting in 86400 seconds..