last executing test programs: 10.88382891s ago: executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000400), 0x101, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000440)=""/186) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_pts(0xffffffffffffffff, 0x1a1000) syz_open_pts(r1, 0x20000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x40049409, &(0x7f0000001440)={0x3, 'vlan0\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000200)="3d065c1243294dc1ec52e838c640a88cc640be321ed5f50f08c40e54a56a56c68a8b0f04897c782eb38bd4e5cb60af3fcd681efb4586f8e8b2577da8ff791ba74a1b7487469f365027c221f7221dab6b0d4380927de48d5b440cb922f8a6c7125f8e53b940afb3823d112ac4c842ddec0bd9c40d4c2dc8d41c313c9042807a3f658e0e6d2a845fbe1cb8958702d4ffd6377bf2ee2597c7a769e5a73dbc1310e2ffb905d058d4740dcadd16fe111f67d3afc8ed1a5757f6fefa75587e1b79c0ce2f329f607765db68067d8027c2df9bb00d818eae41e3115f79a2a223ed07a42196ec438fad", 0xe5}, {&(0x7f0000000300)="c20774145b4df75eaf569113fcb36f63967ebf5fc72e82fbebdbe7f36dd7ebf52632cc35974e0eea509a6f6fda42f37c63b1cbff963c7122d345ca7578f4117a1948003f52ea63932d16477bb77f2141f16d8e3e0e591eaed7655e42d5ea1327a2a46518930fc3a5931591048f58e98905bf4f77d98d944957b84864f7ce7fbe174059912e7ac29e68fee90d23e6c5b4eac62e76", 0x94}, {&(0x7f0000000180)="038eaa6399a88cd7f012520df05a415d43cc0f780256512f4cd0dc661ee3329c8a49f6be8416c5cb24014f", 0x2b}], 0x3) syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x1117, &(0x7f00000024c0)="$eJzs2cFq1FAUBuD/JqPtbiTug6ALF1JaxgewC4XZutWNSEGwqw4Iiq/hG/gWvoJ25b50r4uCSyESM3GqDKh0KgjfB8k9OcnJyV3emwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBvknwqyfUqacZclaQkbXs8P03Sjvlr7+sqJQ8P5ov7R7MHiyT198fLo6T0VX1Zmr2b282smTV7zd17+7c+LF6+ev7k8PDgaPmakjYnZxudRRlP9flc2WgPAAAA+G91FzbNmxd/0unqJfUHAAAAfmfT+wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6ubruJmDKokJWnb4/lpknZN3ZV/9H0AAADAxZVUeTxdlx+2AVbu5OO0/Mj345fSx7t5u6YeAAAAWHn27qfLbmsZnP+//rUb9Ovu25kM6/Lt4d6NTLKzM8TLIZ/3kzrJ7i+9Ts5ePx2P0tXJ1uXMCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBv7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//YwzhLg==") 8.612952804s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000000c0)=0x7, 0x4) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x810, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x1, 0xa1c, &(0x7f0000000d00)="$eJzs3ctvXGdfB/DvmdiJ47cKaRtKiNJmkiqt2xrHdmiiqAua2OPExRdkO1IjQE3VJCiKRVELUluxSCXEiooKISRgg7pkVaks6AZlB0tWLJCg/wGq2BAk0KA5M3bG9lxi17FD3s9ndHJuv+c258x5MuOZ84T/z+r1ejntcP363+5lZXn6XJn+4Ztvv2pMX97PwRzI28XfJ0NJqsnA/5bnyuDU9NLifJ+M7iU3kzxIiiSH0px3cXjD2s0Uf5rnHq0/SPHXOd4h2dA2G0dfdX6u7ff5BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT6Wp6fHxiSJzswvX3692Vw4B3mP/Wnbfl6N+F9/3K7ZIisaUoaG1ob6PH3u0+6XGP2eS++XayebI30P54mcvHX3nxYHKWvoeFdoTn37+xb0PV1dvf/Jo02DHwIFWuxrLh/aseo/v4M6SXa0tzC4vzs5fvlqrzi4vVi9duDB+7trMcnVmNrXlG8srtfnq1FLt8sriUnVk6o3qxKVL56u1sRuL1xeuTo/N1dY2XvyVyfHxC9X3xn6jdnlpeXHh3Htjy1PXZufmZheuljGN3Y2Yi40T8ddnV6ortcvz1eqdu6u3z/erZCNoouOeYmPQZL+cJscnJycmJicnLrx96e2L4+MDWzaMb5ItEft/0rJ//m53L97w01Ra/X/mMpuFXM/7qXZ8TGU6S1nMfJf9LWv9/9lztZ7ltvf/J5ubTh5/tPtEyv7/lebaK936/y516f+o15s57zT92uPTfJ4vci8fZjWruZ1PfnKOWx7/vUv5VH96a7c+rqaWhcxmOYuZzXwul1uqrS3VXMqFXMh4Psi1zGQ51cxkNnOpZTk3spyV1MozaipLqeVyVrKYpVQzkqm8kWomcimXcj7V1DKWG1nM9SzkaqZzuczlTu6Wz/v5HnVcD5p4nKDJHkG73P/Xn8b/CfKk7fo1HHaq3ur/D3YNqK8tjUztWa0AAACA3fTL/5Qjx174x39LBvNy+bn8zOxcbXy/qwUAAADsovLreicbs8HG0sspvP8HAACAZ01R/sauSDKcU82l5i+hDsSHAAAAAPCMKP/+/0pjNtxYOpVi/U4oN/e7bgAAAMDuOLN+991u99jtG1GMrt3+t3qrOb/Vimjd53d4ZnauNja1OPfORF4r7zJQ/tJgS24HkmKw/PnBmzndjDo93JwPb8xxqBE1MfbORN7MmVZDRl5tzF4d6RA52Yx8vRn5eo/I841IAHjWnenRHz9u//9mRpsRoycGDiYZONGhZx3XswLA06L/GDt9I4pfffT+f7CV7f/U6/X1/v+F3Pmv5lcKxvJRPs5qbmW0/LVB+Y2DDbn+1tetzwzWv4YwntE+nwasxf7zxUpG+3weMNw20Mton08EmrH57eT8kz8QALCHznTph7fT/4+2vf/P1vf/60ML3faTQgB4KqyPYP8EF/a7jQDARnppAAAAAAAAAAAAAAAAAAAAAAAAAAAA2H27erf/oR0m//fWuH5PdhiCLQuHW8/BzvP5syR7V+dil8uq7EI+9SR7dbz2biFHkx0/qx1P44NJ9r9dfRcGWi+Jex+u7tcVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL1UJAc6ba8kh5KMJzm397V6cu7vdwX23q+1rxQP8zCf5cj+VQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NnUuv9/Jc35z5qbMlBJzia5meQ397uOu+nhfldglxzeYbq2+/83jnnqRQaahz3F4NT00uJ84/CXYz9Ufvjm268aU1vyQ49bThlY2TS4RKuEzbF/89za0vNlquHp25/e+/2Pf686fSWVHMyVlZm56fmrS+8+SvJS8V1STXNas1bfPzz7D193aPl3jZZ2trncmfLJmd5a7i91St273F7urt6ebJS0Unt/5Q9+9+5nbbteyOnk1ZFkZGNJv9OYupR0OoO9Sit+LP64OJK/yM3y+DeejaJeNA7RL5TtP3zn7urtsY8+Xr3VpU5HcyrJrWSod52+bNt9qryedFSedZXBRqnjZVDjn2N92thTW44TXdrwfHnKDLfacLBrG9pVu7eh1Pa8Vzrtb9bofJcavZjXOhzp+qGke41e632kOyt+LP61uJZ/yR+1jf9RaRz/s+n+6tyYRRnZdqZ0jaw0I8uWT7bv+GBz5H/85WPVvuMwNWzXn2x48Vbarv+tY7VL16N60fN61Fbi9l4Xm0rcdFb0eF2UPdKxTSlaV59uaVr1PNaM6lLPX8xbycCJXlfFLb31W32uKOvp3+28e6ev/78qRvKfuW/8HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OlXJAc6ba8kZ5McXVuvJvVtZHuo247KcLHdKu6q++v/PBMq201QPMzDfJYjT6Y6AAAAAAAAAOy1K9M/fPPtV42pONza1Pr7fjUZSHK0+PPDmV5anO+T0WByM8mDxvJQh/09/tzfSJfnHq0/aKwd325LAIDH9X8BAAD//zMtZO0=") ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f0000000240)) r6 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r8, r7, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x10, &(0x7f0000000100), 0x4) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000600)=0x6, 0x42) close_range(r0, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 7.000487807s ago: executing program 3: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0xee01, @ANYBLOB="0200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRESHEX, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="dd501e00fd4441b075382885bf164ffcdec234a04fe50316de8e0c0a48d6a75abd292f56f7a61c18d3dcd8c72c1ee8247fad3da85578f139", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="13100000000000000020"], 0x5c, 0x0) syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0xfe, 0x228, &(0x7f00000004c0)="$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") open(&(0x7f0000000040)='./file2\x00', 0x7, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x2) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000002440)='./bus\x00', &(0x7f0000002480)='system.posix_acl_access\x00', &(0x7f00000024c0)=ANY=[@ANYBLOB="02000000010003000000000002000100", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="040006000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="10000200000000002000000000000000"], 0x6c, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0xf5cd87693b1c2be0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0xc2) truncate(&(0x7f0000000100)='./file0\x00', 0x7) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000580), 0x24, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') lseek(r1, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000002900010000000000000000000400008045000c"], 0x5c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x0, 0x2, 0x0, 0x2, 0x1, 0xe}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 6.649314343s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000300)={0x50, 0xffff}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r4) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r7 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x48100}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.509662081s ago: executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000b700000071113200000000008510000000000010850000039500a50500"/48], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff0100000724", @ANYRES16=r1], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000280)=[{0x4c}, {0x28}, {0x6, 0x0, 0x0, 0xffffefff}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0}, 0x4) unshare(0x22040400) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000200)={{0x2, 0x4e23, @remote}, {0x0, @broadcast}, 0x2, {0x2, 0x4e24, @local}, 'wg2\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="8800000000020104000000000000000002000000ca311204e1094810d5b07cfb24010280f2ff0080080001000000000008000200acffb3010c00028005000100000000090000038014000180080001000000000008000000000000000900028005000100000000002c0001801400018008000100ac1414bb08000200ac1414000c00028005000100000000000600034000000000"], 0x88}}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995", @ANYRES64=r5, @ANYRESDEC=0x0], 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) chdir(0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) open(0x0, 0x14d13a, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 4.755965124s ago: executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000003c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x2, 0xb8126c1eaec161b2, 0x0, 0x1, 0x2}}, 0x50) 4.675178783s ago: executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xff) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) 4.610393675s ago: executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002480)=@delchain={0x34, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x7fffe483}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.310695227s ago: executing program 2: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYBLOB="756d61bd2c5447f72b6c60514553855aee736b3d3000000000000000006206a9fb81d3da30303030303030", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp949,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,iocharset=iso8859-2,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,errors=continue,\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$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") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) 4.199403831s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x10}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000a000000000000000018000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000ffe0f505b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb6364871287d363201528c664aa70cb346b17582ffa5660979b895723f88710de9238"], 0x3c}, 0x1, 0x2}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x8, r0, 0x80000}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5efcff00", @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300867cf09a0df70e9f1b98d5ca77ddc4518f72a0ad1f03bf8e89b58793d4f1a99ec4f6959f07e9b15c9b3b593f6e29df717dde1b545aa42ae7e4524985fb029f9d4f974cfa4202b7408d88636ed87b7769c6b603a5579b8a52760dc240d5ec49125134d53a1fae57c470b5db9eca93b106eb88805c401154a144cb993ece2b4acf3dbe04952183de6ce9e5ffd9a5555558fe73bedf8ac9e3bc1828be11c6c9a94db9f193dbc9a07276134cc1b5a6b4a5ff15ba37", @ANYRES32=r7, @ANYBLOB="2800330030800000080211000000080211000000278d10637d2d0000000000000000000001000100080026006c09000008009f0005000000"], 0x54}}, 0x0) socket(0x10, 0x3, 0x0) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x161001, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x401, 0x7, 0x100, 0x800, r8, 0x0, '\x00', 0x0, r8, 0x4, 0x1, 0x1}, 0x48) sendmsg$IPSET_CMD_TYPE(r8, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="340000000d0601040000000000000000010000080500010000050002000000050005eee7e2647fae6145056376dc1a3bbea89ee290e9a56f766d2f8adf68033b59455ee1483ff8c1625e647b3a59c1983b0ebe6ac23b928fc4ea36d7fec76ea6"], 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1d, 0x3, &(0x7f0000000a00)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x86}, @alu={0x7, 0x1, 0x2, 0x5, 0x6, 0x30, 0x10}], &(0x7f0000000c80)='syzkaller\x00', 0x1, 0x78, &(0x7f0000000cc0)=""/120, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000e40)={0x4, 0xb, 0x6, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, r8, r9, r9], 0x0, 0x10, 0x3}, 0x90) writev(r10, &(0x7f0000000540)=[{&(0x7f00000000c0)='u', 0x34000}, {0x0}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20580008}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x7c, r6, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}]}, 0x7c}}, 0x8c5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="03", 0x1a000, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) 3.822355304s ago: executing program 1: setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f0000000140)='./bus\x00', 0x1c1042, 0x0) pwrite64(r0, &(0x7f0000000440)='+', 0x1, 0x4010000bffd) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) sendfile(r1, r0, 0x0, 0x3fe) r2 = open(&(0x7f0000000080)='./bus\x00', 0x824002, 0x165) pwrite64(r2, &(0x7f0000000340)='C', 0x1, 0x100000002) 3.812647232s ago: executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote, 0x8}, {@dev}, {@broadcast}, {@empty}, {@multicast1}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.537487639s ago: executing program 4: r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0xe00, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) 3.360831389s ago: executing program 1: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0xee01, @ANYBLOB="0200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRESHEX, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="dd501e00fd4441b075382885bf164ffcdec234a04fe50316de8e0c0a48d6a75abd292f56f7a61c18d3dcd8c72c1ee8247fad3da85578f139", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="13100000000000000020"], 0x5c, 0x0) syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0xfe, 0x228, &(0x7f00000004c0)="$eJzs28tOE2EUAODTUmliTNy7cSGJLpQW1AgrJcH7/fICBCohFm+4EGKibHwPnkyWblj4Aoxhqta2TC9SOhK+L2nmz5z/zH+mmTMzXTSA46sUUYhCzEdEkiSfP04k5bxLAkYj6WfS+OGtv5sM6trAGUCWsb023M67CmD0dubS/o/tiPj249Pi7898n8/vnbliuv3Sln+z3/zNQro9U2rNvxURt3tmF3aTrUb++bb17wy4/sm2/Lt95zfO/8K51vx7EXE/Ih5ExMOIeBQRjyPiSUQ83Wf9pbb1X7Stk5zusyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/VIjJzp3fk7/j+0xoKsbLlXqtmhk/kcanMqJbp8bT+HRmfiN+OTNeTuOTi2/qS0m5W6FAh2JL/xc74r36f6xH/5e69j+Qp7X1jVcL9Xrt/QEHe7eOYRznYhz0ONeHUUbH4F1EdJ2zOawvcyIihly8wZ9BeYjX/GCDG92vn/9ukPedCThslQ+rbytr6xuXVlYXlmvLtddTs9PVKzMzs9WrlfTNvpL5fu/nNhxxzYd+c9/XX9uzeRUFAAAAAAAAAAzkWUQ8z7sIAABgJEbxd6K8zxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAo+9nAAAA//9zGM9s") open(&(0x7f0000000040)='./file2\x00', 0x7, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x2) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000002440)='./bus\x00', &(0x7f0000002480)='system.posix_acl_access\x00', &(0x7f00000024c0)=ANY=[@ANYBLOB="02000000010003000000000002000100", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="040006000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="10000200000000002000000000000000"], 0x6c, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0xf5cd87693b1c2be0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0xc2) truncate(&(0x7f0000000100)='./file0\x00', 0x7) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000580), 0x24, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') lseek(r1, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000002900010000000000000000000400008045000c"], 0x5c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x0, 0x2, 0x0, 0x2, 0x1, 0xe}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 3.282696392s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000000)="76315c747f31e8894861226cae93de1e3acb97def5"}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) syncfs(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x14}, 0x14}}, 0x0) 3.114778646s ago: executing program 0: dup(0xffffffffffffffff) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0xfffffffffffffffe, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) (async) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x22000c0, &(0x7f0000000680)={[{@codepage={'codepage', 0x3d, 'iso8859-13'}}, {@uid}], [{@euid_eq}, {@obj_role={'obj_role', 0x3d, 'memory.events\x00'}}]}, 0x4, 0x32d, &(0x7f0000001980)="$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") (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000100)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x1d, r5}, 0x10, &(0x7f0000000480)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8becb80ab5c7c7d2"}}, 0x48}}, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f00000000c0)=0x1, 0x4) sendmsg$can_bcm(r4, &(0x7f0000000040)={&(0x7f0000000240)={0x1d, r5}, 0x10, &(0x7f0000000340)={&(0x7f0000000500)={0x3, 0x0, 0x0, {0x77359400}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "665ce2777ba816fe"}}, 0x48}}, 0x0) recvmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000580)=""/77, 0x4d}], 0x2}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) 3.099610015s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f0000301000/0x4000)=nil, 0x4000, 0x0, 0x13012, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000380)='./file1\x00', 0x1014800, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRESOCT=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$eJzs3ctvXFf9APBzx544r/7iNO4vJoTEJJSGR+wmtSg7XCksKqQKKX9BFdKS4pZHwqJVKiVZsCVS1T+AqmtY8MyiUtRVUDcg/oGqKzahqlQgQmqNbJ8zHn8zw51xbI/H8/lId87c+z33nnPmcefOfZ0EjKzGyuP8/HSV0tt33rrw4OT4v5ennGzlmFl5HM9jCymlZmu+lCbD8hYmVtPPPrl+qT39PKdVOp+qVLWmpxfut+Y9kFK6kWbS3TSZLn589PYrHzy/+N6Rm0cuvHnm3ta0HgAARsuD77370z8/9d3rh//zmxMLaaI1vWyfL+Txg3m7f6FaHc9J639A1ZZWbePFnpBvPA+NkG+sQ772cpoh33iX8veE5Ta75JuoKX+sbVqndsMwW/sfXzVm1403GrOzq//Jl304tqeafe3K4ktXB1RRYNN9ejLv4jMYDCM3LB0a9BoIYFU8bviQG3HPwqNpLW28t/LvP9foPD9sgu3+/Ct/uMp/96Y1Dptnt36aSrvK9+hgHo/HEcbDfP1+/8vy4vGIZo/17HYcYViOL3Sr59g212OjutU/fi52qy/ltLwOJ0K8/fsT39NheY+Bzh7Y/28wjOywNOgVELBjxfPmlrISj+f1xfhETXxvTXxfTXx/TfxATRxG2W+v/TLdrtb+58f/9P3uDyv72R7L6f/1WZ+4P7Lf8uN5v/161PLj+cSwo5351/FPf373L/H8/8/D+f+n82/pZF5BlP2Fcb9669z/cGFwo0u+x0N1HuuQf+X51Pp81dTaclLbeuahekyvn+9Qt3zH1+ebDPn2522RvaG+cftkf5ivbH+U9Wp5vcZDe5uhHXtCPco7czine0N7DndrV9iRvSfka+bhSGjXVGjXE2G+/w/tqqbXtyvuPy/1ORqmx+MkJV942x76XYrvRbwu41ROb+X0nZy+n9OPOpQ7isrnsdv5/+XzOZ2a1UtXFi8/ncfL5/TeWHNiefq5ba438Oh6vf5nOq2//udga3qz0b5eOLQ2vWpfL0yG6ee7TH8mj5ffsx+O7VuZPnvpx4s/2OzGw4i7+vobP3pxcfHyzzzxxBNPWk/+x0rj1zMXr23jOgrYGnPXXv3J3NXX3zh75dUXX7788uXXzj397W898+yz83MrW/Vz7dv2wO6y9qM/6JoAAAAAAAAAAAAAPav2dZ6c07r725brycv16fH6eIZDed/Kp6Hcx6Bc/9ntvi7l+s3D21BHNt92XE406DYCnf3D/X8NhpEdlpbcxR/YGQbd/1+572FJD5792+HloWS7/9z69WW8fyE8ip3e/5zyd1f/f63+r3pe/4UesyY3Vu7vHuz7a1ux6Viv5cf2l/vATvVX/u9z+aU1T6beyl/6VSg/3qi0R38I5e/vsfyH2n98Y+X/MZdfXrYzp3stf7XGVWN9PeJ+43IfwLjfuPhTaH+5t18/7T91a+Mdtd3J5cMoG5Z+Jvs1LP1/dlOWW9aDefXcOk5X7r8d+zvot/7lvt/ld+CJsPyq5vdN/5/Dra7/z/L5m9P/J+w6Hzr+ZzCM7LC0tDTQrk9Gtd+VnWLQr/+gtyEHXf6gX/86sf/P+H8p9v8Z47H/zxiP/X/GeOxfK8Zj/5/x9Yz9f8b40bDc2D/odE38CzXxYzXxL9bEj9fE4/+3GJ+piZ+oiZ+siT9eEz9VEz9dE/9KTfzJmvhTNfEzNfHd7ss5HdX2wyiL/Ub6/sPoKMd/un3/p2riwPCK/TrH7/dXa+LA8Crnefh+wwiqOt+xI+5vL/txb+X0nZy+n9OPtqyCbIev5fTrOf1GTr+Z07M5nc3pXE71DTncfvH3YyduV2vn+R0K8V7PJ43XA8T7xJzrsT7x+Fy/57Me7bGcrSp/g5eDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyNxsrj/Px0ldLbd9668M+p73x/ecrJVo6ZlcfxPLaQUmqmlKo8Ph6Wd2NiNf3sk+uXOqVVOr/yWMbTC/db8x5Ynj/NpLtpMl38+OjtVz54fvG9IzePXHjzzL2taT0AAACMhv8GAAD//5Cp5/o=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x40186e8d, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x5, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x1, 0x3, {0xa, 0x4e23, 0x317, @mcast1, 0x9}}}, 0x3a) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x202, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) mlock2(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f00007c9000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) gettid() 2.651165886s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000240)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r1, 0x303, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 2.343495047s ago: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000003c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x2, 0xb8126c1eaec161b2, 0x0, 0x1, 0x2}}, 0x50) 2.291018675s ago: executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xff) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) 2.043039923s ago: executing program 0: syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x200001, &(0x7f0000000000)=ANY=[], 0x1, 0xabf, &(0x7f0000001c80)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000025e40)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4, 0xe}, @CTA_MARK={0x8}]}, 0x70}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0x40786e88, 0x0) 1.922980123s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1f4e0b87713aec50}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) openat$pfkey(0xffffff9c, &(0x7f0000004500), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x3, &(0x7f0000000a40)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)={[{@noblock_validity}, {@errors_continue}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fowner_lt}], 0x2c}, 0x0, 0x45a, &(0x7f0000000480)="$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") r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000, &(0x7f000003d000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x4, &(0x7f00000002c0)=ANY=[], 0x1, 0x158, &(0x7f00000011c0)="$eJzs281KAmEUxvFn/Na+LGsTLYQ2bXJS6cNdXYroJNZYkm2UILqU7q+gbiDDQScchajQN53/b3WeOYyeWbx6NiMAoZVXXpYsxQdhL5V9zFmmRwIwJ31JH30A4RR9Mz0BADNeL6S2pJf3h5qi8Yn9YNA/H/Ujicn+k7QbG/atpFLB/eI5PawG/fTU+zOjz7cyU/sH+6PvX9Gq1rSuDWW1qa1hv+7fv/OHTQgIH0uFYB67ENFl03WO/Bz3ctHPCS+XArns56SXC7Vbtz6rRwDwS5Fvzn80cP5jgfMPYHF1ur3rqus6dxQUi1Mk9C/GWObC9C8TgFmz71ttu9PtHTZb1YbTcG5KZ6XKSfm4eFqxvc3fHt//ASyPrz/98etXpgYCAAAAAAAAAAAAAAA/ltO26REAAAAAzMk8Xicy/YwAAAAAAAAAAAAAAAAAAADAsvgMAAD//yD/IsA=") r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000740)=ANY=[], 0xfd14) fstat(r2, &(0x7f00000004c0)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYRES16=r1], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000200)={0x1, 0x8, 0x2, 0x0, 0x6}) 1.754606497s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x10}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000a000000000000000018000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000ffe0f505b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb6364871287d363201528c664aa70cb346b17582ffa5660979b895723f88710de9238"], 0x3c}, 0x1, 0x2}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x8, r0, 0x80000}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5efcff00", @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300867cf09a0df70e9f1b98d5ca77ddc4518f72a0ad1f03bf8e89b58793d4f1a99ec4f6959f07e9b15c9b3b593f6e29df717dde1b545aa42ae7e4524985fb029f9d4f974cfa4202b7408d88636ed87b7769c6b603a5579b8a52760dc240d5ec49125134d53a1fae57c470b5db9eca93b106eb88805c401154a144cb993ece2b4acf3dbe04952183de6ce9e5ffd9a5555558fe73bedf8ac9e3bc1828be11c6c9a94db9f193dbc9a07276134cc1b5a6b4a5ff15ba37", @ANYRES32=r7, @ANYBLOB="2800330030800000080211000000080211000000278d10637d2d0000000000000000000001000100080026006c09000008009f0005000000"], 0x54}}, 0x0) socket(0x10, 0x3, 0x0) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x161001, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x401, 0x7, 0x100, 0x800, r8, 0x0, '\x00', 0x0, r8, 0x4, 0x1, 0x1}, 0x48) sendmsg$IPSET_CMD_TYPE(r8, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="340000000d0601040000000000000000010000080500010000050002000000050005eee7e2647fae6145056376dc1a3bbea89ee290e9a56f766d2f8adf68033b59455ee1483ff8c1625e647b3a59c1983b0ebe6ac23b928fc4ea36d7fec76ea6"], 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1d, 0x3, &(0x7f0000000a00)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x86}, @alu={0x7, 0x1, 0x2, 0x5, 0x6, 0x30, 0x10}], &(0x7f0000000c80)='syzkaller\x00', 0x1, 0x78, &(0x7f0000000cc0)=""/120, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000e40)={0x4, 0xb, 0x6, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, r8, r9, r9], 0x0, 0x10, 0x3}, 0x90) writev(r10, &(0x7f0000000540)=[{&(0x7f00000000c0)='u', 0x34000}, {0x0}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20580008}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x7c, r6, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}]}, 0x7c}}, 0x8c5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="03", 0x1a000, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) 1.686390344s ago: executing program 2: setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f0000000140)='./bus\x00', 0x1c1042, 0x0) pwrite64(r0, &(0x7f0000000440)='+', 0x1, 0x4010000bffd) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) sendfile(r1, r0, 0x0, 0x3fe) r2 = open(&(0x7f0000000080)='./bus\x00', 0x824002, 0x165) pwrite64(r2, &(0x7f0000000340)='C', 0x1, 0x100000002) 1.673584419s ago: executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1e, 0x4, 0x0, 0x0, 0x78, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote, 0x8}, {@dev}, {@broadcast}, {@empty}, {@multicast1}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.161840804s ago: executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="8c0200001900000226bd7000fddbdf251d01010008000500030700031e01060081b25101b5055d4f2e686234aead64deb90d663f992ded1e54cee25e070951b07fe19c912963dc87d7bbda8c982fd71bf12a05248a7868f692a24f4a42345eee70e31cb4fdae254a154f962dce250053b023150015fb5fa7dd4c0522ba5283c75e91ff2ce7a9e1f75aac614965babd4cc31aaf27fb8f398036324599c305a384fb3df3ef982f77afe0e76726c1d4774f886618d9f13aaeb122bb9181621c24521ebbd3074f0259268a625dc9449536f0e1667fd6cfc46e930c8642e5d66dfee5b9b006e34e0a09afe0a069139441eb4755ed925277fb59a2faf9982f991753915bbd34a6818e648fa4637569b1e56096092fd92528dae0930b90d442ff1c87d32a394f59a30076f2a55304b1c738b6378e5ee92322b500a214bd00001e0106006479000203a23934a026c0f76c325a0db89181e1ae34aa8f401f9b1e3d91f0d53454bb24cc72d8e2824772e525354d2054c3c4b6e1f6151ab852729d1e602d931b565e32d25b8a49c2441fec8680468c9f1ac04bf64b6063b316931b118252e2d8828f4e407312fe5e1cd1220eb5636528b4d86a4eac2795ce4c5e0527ee332e5b5e92d5ae4ab483f9ab07d125e5fe7dc067d44ae1c6b66854ac774122e6e1f8e09793cbb615b2310aa51dbe5be3cdcff1a730356684842c61c4b288f966b8d90285d180875679172e81f1d846458871ec3c3acc0e2ad62a9cb1160ad0474095987d995cf10000285c13559437965c009b8cab5323f95f93fb1293113dbcea0619530f133e0133258e4bdf5a233c8b596db62eeb7aa88865e5320000150002000100000008020000ddfff4fa85adc86606000000150001000200008004030000a5c73a79f62e1734050000000ddb65177ffa97edb8911c04a2a5d833a6fb80c2e075d70455b89862fe48b28f20f4f119621e85a83d57e2df7366b685ac1272e5bdaf88a2d6f134dac4ce51c04a54edaed7f6d5ac3b82726b98ebd9e9f459e5bcbb220e8e7a803c89009a2da866c72b9d826e8400be6b15573b00bc8a3b218c87419470b6ffc69b6517ef113ff06dc2a7c88d8c3faedfd733612e6c33b9d24ab79780faae2ff961a7b2ce07028df32ac727bde3a0b041b7ac71a0602c789f194f1438245eb80093a3ef5f773a2737aa0e77364c1b4a2969fa51c9609d8328b557dfd5257e1b7973781b899363a39c98d489b38eb188440c8814e06e287899a49f566669a15cd0bd47942eca71e4aa0892b948d2f931b040576eac19ca2f1cfd7c4fb04e13ceda26342706bd1208357a7bd121d16e84e95c374442febaa8f71b9fcb289b2b7d535be910b009d7aa7edf9502b036e7f3878b9cf62ba384f44a9440d733a153000d440eb7a7d2112efff92d3fdacbbdad396750ba41526ce1843ad82f9f416f5fa000907cea8780b6"], 0x28c}}, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x5, 0x0, "3258ae1e10006c5d3500"}) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/109}, 0x20) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x810, &(0x7f0000000540)=ANY=[@ANYBLOB="686964652c73657373696f6e3d3078303030303030303030303030303037362c6769643dd90f0000000000000673342769cfb2d0264f659322d416aea740b582072b283cb3b188d70cdc80826d3fa1a06ae8943f278957532d9d40f06f06f10e351cad6f5265cdd8af0b4fba9b2678a1db32b5ca9f5248c1e05bce9fd94904d46fb63338ed7c4beb7732568177782da628", @ANYRESHEX, @ANYBLOB=',check=strict,nojoliet,block=0x0000000000000c00,max=off,check=relaxed,dmode=0x00000000000000ff,\x00'], 0x1, 0x222, &(0x7f0000000300)="$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") r4 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) sendfile(r4, r4, 0x0, 0x8000000a) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000bc0)='./bus\x00', &(0x7f0000002100), 0x0, &(0x7f00000006c0)=ANY=[]) read$FUSE(r6, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) symlinkat(&(0x7f0000000700)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00') write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x28, 0x0, 0x2080020, 0xdf, 0xd0}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000006400)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r10, &(0x7f0000000100), 0x0}, 0x20) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000006c8eb7164217d9798d8caad2e1d52b32ef24dbaa79e16ad5f5f59ee00cb1135bcd763c93a408d961fcba3f944915ceeac3a7cefbfe6be77ed6c27445de20b00b6c2f5953c3b078f45f4fa1d6cb25e70229fed325721bdc86654e7c97ac284bef086944", @ANYRES16=r9, @ANYBLOB="010000000000000000000c000000"], 0x14}}, 0x0) 724.248833ms ago: executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote, 0x8}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ba5000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x7fffdf45a000}) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote, 0x8}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ba5000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x7fffdf45a000}) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) (async) ioctl$KVM_NMI(r5, 0xae9a) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 303.971447ms ago: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000040)=ANY=[], 0x3, 0x657, &(0x7f0000000ac0)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f0000000040)="f3eaac446e72c620ac07bae03880491c88b95e3348f7e42c4ab0fdfe15ed5101a00dc83cbdecbf3eefcb1a72c63178fc157357b1ac", 0x35) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000002c0)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x4b) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0xe) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0xffffffffffffffc4, 0x0, 0xfffffffffffffd67}, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000001f80)=""/226, 0x1a, 0xe2, 0xf}, 0x20) shutdown(r3, 0x1) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00007e3000/0x4000)=nil, &(0x7f0000b7f000/0x4000)=nil, &(0x7f0000d2f000/0x1000)=nil, &(0x7f000080e000/0x4000)=nil, &(0x7f0000a11000/0x4000)=nil, &(0x7f0000b2e000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0, r5}, 0x68) 42.869837ms ago: executing program 1: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0xee01, @ANYBLOB="0200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRESHEX, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="dd501e00fd4441b075382885bf164ffcdec234a04fe50316de8e0c0a48d6a75abd292f56f7a61c18d3dcd8c72c1ee8247fad3da85578f139", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="13100000000000000020"], 0x5c, 0x0) syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0xfe, 0x228, &(0x7f00000004c0)="$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") open(&(0x7f0000000040)='./file2\x00', 0x7, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x2) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000002440)='./bus\x00', &(0x7f0000002480)='system.posix_acl_access\x00', &(0x7f00000024c0)=ANY=[@ANYBLOB="02000000010003000000000002000100", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="040006000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="10000200000000002000000000000000"], 0x6c, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0xf5cd87693b1c2be0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0xc2) truncate(&(0x7f0000000100)='./file0\x00', 0x7) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000580), 0x24, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') lseek(r1, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000002900010000000000000000000400008045000c"], 0x5c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x0, 0x2, 0x0, 0x2, 0x1, 0xe}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 0s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000000)="76315c747f31e8894861226cae93de1e3acb97def5"}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) syncfs(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x14}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): v: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.926968][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.942109][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.190740][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.204756][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.215482][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.228439][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.239023][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.249796][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.259962][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.270716][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.285892][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.449282][ T6835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.458774][ T6835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.470430][ T6835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.480047][ T6835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.581840][ T7006] loop4: detected capacity change from 0 to 1024 [ 421.266466][ T7011] loop0: detected capacity change from 0 to 4096 [ 421.375647][ T7011] ntfs3: loop0: Failed to load $MFT (-22). [ 423.746787][ T7057] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 423.756750][ T7057] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 424.788457][ T7075] binder: BINDER_SET_CONTEXT_MGR already set [ 424.794993][ T7075] binder: 7073:7075 ioctl 4018620d 20000100 returned -16 [ 424.854319][ T7077] binder: 7073:7077 unknown command 809329766 [ 424.860921][ T7077] binder: 7073:7077 ioctl c0306201 20000080 returned -22 [ 425.003404][ T7070] loop1: detected capacity change from 0 to 4096 [ 425.117481][ T7070] ntfs3: loop1: Failed to load $MFT (-22). [ 425.880371][ T7101] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 426.120801][ T7101] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 426.144540][ T7102] loop1: detected capacity change from 0 to 8 [ 426.682324][ T2877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.690387][ T2877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.914730][ T2861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.923106][ T2861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.297981][ T7108] loop0: detected capacity change from 0 to 4096 [ 427.465756][ T7108] NILFS (loop0): invalid segment: Checksum error in segment payload [ 427.481874][ T7108] NILFS (loop0): trying rollback from an earlier position [ 427.608828][ T7108] NILFS (loop0): recovery complete [ 427.629188][ T7120] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 427.853419][ T7108] overlayfs: upper fs does not support tmpfile. [ 427.867174][ T7108] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 427.874814][ T7108] overlayfs: failed to set xattr on upper [ 427.884640][ T7108] overlayfs: ...falling back to redirect_dir=nofollow. [ 427.893073][ T7108] overlayfs: ...falling back to index=off. [ 427.899069][ T7108] overlayfs: ...falling back to uuid=null. [ 429.291651][ T5130] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 429.671834][ T5130] usb 2-1: Using ep0 maxpacket: 8 [ 429.798126][ T5130] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 429.807960][ T5130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.864860][ T5130] usb 2-1: config 0 descriptor?? [ 430.188513][ T5130] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 430.199728][ T5130] asix 2-1:0.0: probe with driver asix failed with error -32 [ 430.293955][ T7138] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 430.657977][ T780] usb 2-1: USB disconnect, device number 5 [ 430.831348][ T7136] loop4: detected capacity change from 0 to 32768 [ 430.861203][ T7136] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 430.869809][ T7136] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 430.894863][ T7136] gfs2: fsid=syz:syz.0: journal 0 mapped with 22 extents in 1ms [ 430.911343][ T4709] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 430.918575][ T4709] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 431.415809][ T4709] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 497ms [ 431.423982][ T4709] gfs2: fsid=syz:syz.0: jid=0: Done [ 431.429508][ T7136] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 433.387944][ T7176] loop0: detected capacity change from 0 to 256 [ 433.444357][ T7176] MINIX-fs: mounting file system with errors, running fsck is recommended [ 433.548966][ T7176] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 433.608547][ T7183] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 433.883143][ T7177] loop1: detected capacity change from 0 to 4096 [ 433.993370][ T7177] ntfs3: loop1: Failed to load $MFT (-22). [ 434.712876][ T7203] tipc: Started in network mode [ 434.718208][ T7203] tipc: Node identity ac14142a, cluster identity 4711 [ 434.728402][ T7203] tipc: Enabled bearer , priority 10 [ 435.873631][ T4709] tipc: Node number set to 2886997034 [ 435.977581][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.043231][ T7215] fuse: Bad value for 'fd' [ 436.191782][ T7216] bridge_slave_0 (unregistering): left allmulticast mode [ 436.199085][ T7216] bridge_slave_0 (unregistering): left promiscuous mode [ 436.206612][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.302098][ T7221] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 436.946038][ T7229] ------------[ cut here ]------------ [ 436.951960][ T7229] WARNING: CPU: 1 PID: 7229 at mm/page_alloc.c:4551 __alloc_pages+0x62e/0xe70 [ 436.961356][ T7229] Modules linked in: [ 436.965715][ T7229] CPU: 1 PID: 7229 Comm: syz-executor.4 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 436.976314][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 436.986761][ T7229] RIP: 0010:__alloc_pages+0x62e/0xe70 [ 436.997662][ T7229] Code: a8 e9 43 02 00 00 44 89 f7 e8 ee 2f 15 00 e9 89 fa ff ff 48 c7 c7 c2 e7 90 91 e8 1d 23 15 00 c6 00 00 c6 05 b5 08 62 0f 01 90 <0f> 0b 90 e9 76 fa ff ff 89 7d c8 89 4d c4 e8 bf 2f 15 00 8b 4d c4 [ 437.019070][ T7229] RSP: 0018:ffff88803994b6c0 EFLAGS: 00010282 [ 437.025686][ T7229] RAX: ffff88823fa587c2 RBX: 0000000000040d40 RCX: 000000023f0ba7c0 [ 437.034859][ T7229] RDX: ffff88823f0ba7c0 RSI: ffff88813fff9020 RDI: ffffffff9190e7c0 [ 437.043240][ T7229] RBP: ffff88803994b790 R08: ffffea000000000f R09: 0000000000000000 [ 437.051603][ T7229] R10: ffff88803914b6f0 R11: 0000000000000004 R12: 0000000000040d40 [ 437.059821][ T7229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 437.068352][ T7229] FS: 00007f741154d6c0(0000) GS:ffff88813fd00000(0000) knlGS:0000000000000000 [ 437.077721][ T7229] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.084747][ T7229] CR2: 00007fe241ae66e4 CR3: 00000001245e0000 CR4: 00000000003506f0 [ 437.098259][ T7229] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 437.110047][ T7229] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 437.118900][ T7229] Call Trace: [ 437.122491][ T7229] [ 437.125602][ T7229] ? show_trace_log_lvl+0x3b1/0x500 [ 437.131199][ T7229] ? __kmalloc_large_node+0x11e/0x370 [ 437.137019][ T7229] ? show_regs+0x148/0x160 [ 437.141876][ T7229] ? __warn+0x2c2/0x770 [ 437.146302][ T7229] ? __alloc_pages+0x62e/0xe70 [ 437.151352][ T7229] ? report_bug+0x929/0xbd0 [ 437.156598][ T7229] ? __alloc_pages+0x62e/0xe70 [ 437.161778][ T7229] ? handle_bug+0x47/0x70 [ 437.166422][ T7229] ? exc_invalid_op+0x1f/0x50 [ 437.171546][ T7229] ? asm_exc_invalid_op+0x1f/0x30 [ 437.176911][ T7229] ? __alloc_pages+0x62e/0xe70 [ 437.182379][ T7229] ? kmsan_get_metadata+0x146/0x1d0 [ 437.187878][ T7229] ? kmsan_get_metadata+0x146/0x1d0 [ 437.193513][ T7229] __kmalloc_large_node+0x11e/0x370 [ 437.204245][ T7229] __kmalloc+0xab2/0x1060 [ 437.208864][ T7229] ? v9fs_fid_xattr_get+0x436/0x570 [ 437.216023][ T7229] ? v9fs_fid_get_acl+0xe9/0x370 [ 437.221305][ T7229] v9fs_fid_get_acl+0xe9/0x370 [ 437.226545][ T7229] v9fs_get_acl+0xd5/0x720 [ 437.231260][ T7229] v9fs_fid_iget_dotl+0x60e/0x7e0 [ 437.236875][ T7229] v9fs_mount+0xc0c/0x12b0 [ 437.241860][ T7229] legacy_get_tree+0x114/0x290 [ 437.247021][ T7229] ? __pfx_v9fs_mount+0x10/0x10 [ 437.252336][ T7229] ? __pfx_legacy_get_tree+0x10/0x10 [ 437.257951][ T7229] vfs_get_tree+0xa7/0x570 [ 437.262881][ T7229] ? mount_capable+0x97/0x120 [ 437.267966][ T7229] do_new_mount+0x71f/0x15e0 [ 437.273035][ T7229] ? kmsan_get_metadata+0x146/0x1d0 [ 437.278548][ T7229] path_mount+0x742/0x1f20 [ 437.283434][ T7229] ? user_path_at_empty+0x325/0x3a0 [ 437.288982][ T7229] __se_sys_mount+0x725/0x810 [ 437.294154][ T7229] ? kmsan_get_metadata+0x146/0x1d0 [ 437.305089][ T7229] __x64_sys_mount+0xe4/0x150 [ 437.310203][ T7229] x64_sys_call+0x2bf4/0x3b50 [ 437.316867][ T7229] do_syscall_64+0xcf/0x1e0 [ 437.321838][ T7229] ? clear_bhb_loop+0x25/0x80 [ 437.326836][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.333220][ T7229] RIP: 0033:0x7f741087cea9 [ 437.338322][ T7229] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 437.358479][ T7229] RSP: 002b:00007f741154d0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 437.367375][ T7229] RAX: ffffffffffffffda RBX: 00007f74109b3f80 RCX: 00007f741087cea9 [ 437.375765][ T7229] RDX: 0000000020000b80 RSI: 00000000200003c0 RDI: 0000000000000000 [ 437.384184][ T7229] RBP: 00007f74108ebff4 R08: 0000000020000500 R09: 0000000000000000 [ 437.392556][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.406500][ T7229] R13: 000000000000000b R14: 00007f74109b3f80 R15: 00007ffd57cc0428 [ 437.416055][ T7229] [ 437.419425][ T7229] ---[ end trace 0000000000000000 ]--- [ 438.953151][ T29] audit: type=1800 audit(1718343395.618:125): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 439.903168][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 440.926486][ T7273] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 441.184866][ T7281] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 441.213049][ T7275] loop4: detected capacity change from 0 to 4096 [ 441.285187][ T7275] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 441.307259][ T7281] sctp: [Deprecated]: syz-executor.3 (pid 7281) Use of int in max_burst socket option. [ 441.307259][ T7281] Use struct sctp_assoc_value instead [ 441.433268][ T7275] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 442.115887][ T7287] loop1: detected capacity change from 0 to 4096 [ 442.252248][ T34] ntfs3: loop4: ino=5, ntfs3_write_inode failed, -22. [ 442.313877][ T7287] ntfs3: loop1: Failed to load $MFT (-22). [ 443.526905][ T7305] loop4: detected capacity change from 0 to 512 [ 443.692988][ T7315] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 443.713267][ T7305] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 443.762676][ T7305] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 2683928664 (level 1) [ 443.799665][ T7315] loop1: detected capacity change from 0 to 16 [ 443.812711][ T7315] erofs: Unknown parameter '18446744073709551615' [ 443.828742][ T7305] EXT4-fs (loop4): Remounting filesystem read-only [ 443.872154][ T7315] loop1: detected capacity change from 0 to 512 [ 443.895260][ T7305] EXT4-fs (loop4): 1 truncate cleaned up [ 443.901090][ T7305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.388227][ T5360] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.691044][ T7327] loop1: detected capacity change from 0 to 256 [ 446.798710][ T7327] MINIX-fs: mounting file system with errors, running fsck is recommended [ 446.883477][ T7327] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 447.007048][ T7330] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 447.569537][ T7338] loop0: detected capacity change from 0 to 4096 [ 447.631878][ T7338] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 447.789701][ T7347] loop1: detected capacity change from 0 to 4096 [ 447.799829][ T7338] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 447.928268][ T7347] ntfs3: loop1: Failed to load $MFT (-22). [ 448.488135][ T7358] loop4: detected capacity change from 0 to 1024 [ 448.500317][ T29] audit: type=1326 audit(1718343405.128:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x0 [ 448.631235][ T7358] hfsplus: unable to load nls mapping "def}" [ 448.637768][ T7358] hfsplus: unable to parse mount options [ 448.714669][ T2861] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [ 449.026907][ T7355] loop4: detected capacity change from 0 to 2048 [ 449.126687][ T7355] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 449.205549][ T7355] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 449.993408][ T7378] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 450.141132][ T7384] loop4: detected capacity change from 0 to 256 [ 450.199076][ T7384] MINIX-fs: mounting file system with errors, running fsck is recommended [ 450.259465][ T7384] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 450.648558][ T7390] loop1: detected capacity change from 0 to 512 [ 450.688328][ T7390] EXT4-fs: Ignoring removed nobh option [ 450.703609][ T7393] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 450.734627][ T7390] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 450.775503][ T7393] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 451.302224][ T7396] loop4: detected capacity change from 0 to 4096 [ 451.348458][ T7396] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 451.358041][ T29] audit: type=1326 audit(1718343407.988:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3c367cea9 code=0x0 [ 451.425461][ T7396] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 452.277301][ T2861] ntfs3: loop4: ino=5, ntfs3_write_inode failed, -22. [ 452.633416][ T7422] loop4: detected capacity change from 0 to 256 [ 452.665861][ T7422] MINIX-fs: mounting file system with errors, running fsck is recommended [ 452.717815][ T7422] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 452.826485][ T7421] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 453.904047][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 454.171363][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 454.278430][ T7445] loop4: detected capacity change from 0 to 4096 [ 454.304951][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.315421][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 454.327798][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31016, setting to 1024 [ 454.339731][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 454.350276][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.359940][ T7445] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 454.363769][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 454.363920][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.498312][ T7445] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 454.510380][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 454.880918][ T5133] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 455.099405][ T7459] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 455.135490][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 455.141972][ T8] usbtmc 1-1:16.0: can't read capabilities [ 455.158976][ T5133] usb 2-1: Using ep0 maxpacket: 8 [ 455.273664][ T2861] ntfs3: loop4: ino=5, ntfs3_write_inode failed, -22. [ 455.302550][ T5133] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 455.312973][ T5133] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 455.326601][ T5133] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31016, setting to 1024 [ 455.339424][ T5133] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 455.350001][ T5133] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.363529][ T5133] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 455.373021][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.678532][ T5133] usb 2-1: GET_CAPABILITIES returned 2f [ 455.684840][ T5133] usbtmc 2-1:16.0: can't read capabilities [ 455.910686][ T5130] usb 2-1: USB disconnect, device number 6 [ 456.010384][ T7475] loop4: detected capacity change from 0 to 512 [ 456.053048][ T7475] EXT4-fs: Ignoring removed nobh option [ 456.085224][ T7475] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 456.429878][ T7484] fuse: Bad value for 'fd' [ 456.692492][ T5133] usb 1-1: USB disconnect, device number 3 [ 456.953427][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 456.982911][ T780] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 457.144573][ T7498] loop0: detected capacity change from 0 to 256 [ 457.184365][ T7498] MINIX-fs: mounting file system with errors, running fsck is recommended [ 457.253645][ T780] usb 5-1: Using ep0 maxpacket: 16 [ 457.343632][ T7498] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 457.444833][ T780] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 457.454059][ T780] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.632624][ T780] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 457.642231][ T780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.650501][ T780] usb 5-1: Product: syz [ 457.654984][ T780] usb 5-1: Manufacturer: syz [ 457.659842][ T780] usb 5-1: SerialNumber: syz [ 457.765747][ T780] cdc_ether 5-1:1.0: skipping garbage [ 457.771992][ T780] usb 5-1: bad CDC descriptors [ 457.978043][ T780] usb 5-1: USB disconnect, device number 12 [ 458.732191][ T29] audit: type=1800 audit(1718343415.378:128): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1949 res=0 errno=0 [ 458.753830][ T29] audit: type=1804 audit(1718343415.398:129): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir911056515/syzkaller.OHfyOm/175/file0" dev="sda1" ino=1949 res=1 errno=0 [ 458.787009][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 458.887780][ T29] audit: type=1326 audit(1718343415.538:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 458.915128][ T29] audit: type=1326 audit(1718343415.548:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 458.940212][ T29] audit: type=1326 audit(1718343415.548:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 458.963685][ T29] audit: type=1326 audit(1718343415.568:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 458.987122][ T29] audit: type=1326 audit(1718343415.568:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 459.014490][ T29] audit: type=1326 audit(1718343415.568:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 459.039829][ T29] audit: type=1326 audit(1718343415.568:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 459.063187][ T29] audit: type=1326 audit(1718343415.608:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 459.251868][ T8] usb 2-1: device not accepting address 7, error -71 [ 459.323877][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 459.491846][ T5133] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 459.754796][ T5133] usb 1-1: Using ep0 maxpacket: 8 [ 459.902305][ T5133] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 459.913917][ T5133] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 459.925068][ T5133] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31016, setting to 1024 [ 459.940255][ T5133] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 459.951883][ T5133] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.965475][ T5133] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 459.974992][ T5133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.004040][ T7541] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 462.553266][ T5134] usb 1-1: USB disconnect, device number 4 [ 462.737913][ T7591] loop1: detected capacity change from 0 to 256 [ 462.812440][ T7591] MINIX-fs: mounting file system with errors, running fsck is recommended [ 462.956554][ T7591] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 463.186464][ T7601] loop0: detected capacity change from 0 to 512 [ 463.258735][ T7601] EXT4-fs: Ignoring removed nobh option [ 463.313843][ T7601] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 463.398176][ T7598] loop4: detected capacity change from 0 to 2048 [ 463.457479][ T7598] EXT4-fs: Ignoring removed bh option [ 463.463387][ T7598] EXT4-fs: Ignoring removed nomblk_io_submit option [ 463.470428][ T7598] EXT4-fs: Ignoring removed nobh option [ 463.732524][ T7598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.937005][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 463.937079][ T29] audit: type=1326 audit(1718343420.628:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0ee7cea9 code=0x7ffc0000 [ 463.967733][ T7598] EXT4-fs error (device loop4): __ext4_remount:6525: comm syz-executor.4: Abort forced by user [ 464.017683][ T7598] EXT4-fs (loop4): Remounting filesystem read-only [ 464.018232][ T29] audit: type=1326 audit(1718343420.658:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa0ee7cea9 code=0x7ffc0000 [ 464.053101][ T29] audit: type=1326 audit(1718343420.668:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0ee7cea9 code=0x7ffc0000 [ 464.076718][ T29] audit: type=1326 audit(1718343420.698:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0ee7cea9 code=0x7ffc0000 [ 464.168365][ T29] audit: type=1326 audit(1718343420.788:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa0ee7cea9 code=0x7ffc0000 [ 464.192154][ T29] audit: type=1326 audit(1718343420.798:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0ee7cea9 code=0x7ffc0000 [ 464.215504][ T29] audit: type=1326 audit(1718343420.798:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faa0ee7a627 code=0x7ffc0000 [ 464.242746][ T29] audit: type=1326 audit(1718343420.798:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faa0ee40309 code=0x7ffc0000 [ 464.267207][ T29] audit: type=1326 audit(1718343420.798:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faa0ee7a627 code=0x7ffc0000 [ 464.290411][ T29] audit: type=1326 audit(1718343420.798:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faa0ee40309 code=0x7ffc0000 [ 464.677677][ T5360] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.678876][ T5134] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 464.894756][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.903012][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.621911][ T7638] loop4: detected capacity change from 0 to 256 [ 465.682875][ T7638] MINIX-fs: mounting file system with errors, running fsck is recommended [ 465.875833][ T7638] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 467.778314][ T7675] loop1: detected capacity change from 0 to 2048 [ 467.828527][ T7675] EXT4-fs: Ignoring removed bh option [ 467.835900][ T7675] EXT4-fs: Ignoring removed nomblk_io_submit option [ 467.844545][ T7675] EXT4-fs: Ignoring removed nobh option [ 467.992958][ T7675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.257896][ T7668] EXT4-fs error (device loop1): __ext4_remount:6525: comm syz-executor.1: Abort forced by user [ 468.300116][ T7668] EXT4-fs (loop1): Remounting filesystem read-only [ 468.715247][ T5086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.122042][ T7702] loop1: detected capacity change from 0 to 256 [ 469.155236][ T7702] MINIX-fs: mounting file system with errors, running fsck is recommended [ 469.243464][ T7702] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 470.104106][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 470.104181][ T29] audit: type=1326 audit(1718343426.798:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x0 [ 470.364652][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 471.528132][ T7737] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 471.581036][ T6133] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 471.608258][ T6133] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 471.623185][ T6133] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 471.658014][ T6133] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 471.682849][ T6133] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 471.694063][ T7732] loop1: detected capacity change from 0 to 2048 [ 471.702261][ T6133] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 471.795464][ T7732] EXT4-fs: Ignoring removed bh option [ 471.801274][ T7732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 471.812645][ T7732] EXT4-fs: Ignoring removed nobh option [ 472.198514][ T7732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.304327][ T7732] EXT4-fs error (device loop1): __ext4_remount:6525: comm syz-executor.1: Abort forced by user [ 472.366379][ T7732] EXT4-fs (loop1): Remounting filesystem read-only [ 472.702659][ T29] audit: type=1326 audit(1718343429.298:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741087cea9 code=0x7ffc0000 [ 472.726133][ T29] audit: type=1326 audit(1718343429.368:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f741087cea9 code=0x7ffc0000 [ 472.753410][ T29] audit: type=1326 audit(1718343429.368:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741087cea9 code=0x7ffc0000 [ 472.777785][ T29] audit: type=1326 audit(1718343429.428:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741087cea9 code=0x7ffc0000 [ 472.801915][ T29] audit: type=1326 audit(1718343429.428:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f741087cea9 code=0x7ffc0000 [ 472.924725][ T29] audit: type=1326 audit(1718343429.518:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741087cea9 code=0x7ffc0000 [ 472.953312][ T29] audit: type=1326 audit(1718343429.538:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f741087a627 code=0x7ffc0000 [ 472.977175][ T29] audit: type=1326 audit(1718343429.538:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7410840309 code=0x7ffc0000 [ 473.007824][ T29] audit: type=1326 audit(1718343429.538:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f741087a627 code=0x7ffc0000 [ 473.048102][ T5086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.135297][ T2877] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.332408][ T2877] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.374157][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 473.390194][ T7744] chnl_net:caif_netlink_parms(): no params data found [ 473.508607][ T2877] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.537675][ T7762] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 473.727445][ T2877] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.852659][ T50] Bluetooth: hci5: command tx timeout [ 474.309869][ T7744] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.317907][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.326367][ T7744] bridge_slave_0: entered allmulticast mode [ 474.335961][ T7744] bridge_slave_0: entered promiscuous mode [ 474.402438][ T2877] bridge_slave_1: left allmulticast mode [ 474.408863][ T2877] bridge_slave_1: left promiscuous mode [ 474.415813][ T2877] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.487706][ T2877] bridge_slave_0: left allmulticast mode [ 474.493935][ T2877] bridge_slave_0: left promiscuous mode [ 474.500691][ T2877] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.552230][ T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 474.802796][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 474.924105][ T43] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.934655][ T43] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 474.946545][ T43] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31016, setting to 1024 [ 474.958517][ T43] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 474.968992][ T43] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.986661][ T43] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 474.997026][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.183148][ T2877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.251337][ T2877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.268307][ T7784] loop4: detected capacity change from 0 to 256 [ 475.284056][ T2877] bond0 (unregistering): Released all slaves [ 475.326571][ T7784] exfat: Deprecated parameter 'utf8' [ 475.327211][ T7744] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.332936][ T7784] exfat: Deprecated parameter 'utf8' [ 475.339666][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.352766][ T7744] bridge_slave_1: entered allmulticast mode [ 475.362220][ T7744] bridge_slave_1: entered promiscuous mode [ 475.371930][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 475.498159][ T43] usb 2-1: GET_CAPABILITIES returned 2f [ 475.504188][ T43] usbtmc 2-1:16.0: can't read capabilities [ 475.582315][ T7784] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x0970cb48, utbl_chksum : 0xe619d30d) [ 475.721080][ T7744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.764099][ T2877] IPVS: stopping backup sync thread 6389 ... [ 475.790835][ T7744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.909477][ T50] Bluetooth: hci5: command tx timeout [ 476.158964][ T7744] team0: Port device team_slave_0 added [ 476.178017][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 476.178092][ T29] audit: type=1326 audit(1718343432.868:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74d567cea9 code=0x0 [ 476.226008][ T7744] team0: Port device team_slave_1 added [ 477.004199][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.014226][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.049933][ T7744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.161954][ T8] usb 2-1: USB disconnect, device number 9 [ 477.206565][ T2877] hsr_slave_0: left promiscuous mode [ 477.270532][ T2877] hsr_slave_1: left promiscuous mode [ 477.309298][ T2877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.317811][ T2877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.356471][ T2877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.364547][ T2877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.431162][ T2877] veth1_macvtap: left promiscuous mode [ 477.437324][ T2877] veth0_macvtap: left promiscuous mode [ 477.448032][ T2877] veth1_vlan: left promiscuous mode [ 477.453852][ T2877] veth0_vlan: left promiscuous mode [ 477.859878][ T7828] loop1: detected capacity change from 0 to 256 [ 477.909991][ T7828] MINIX-fs: mounting file system with errors, running fsck is recommended [ 477.985714][ T7828] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 478.004553][ T50] Bluetooth: hci5: command tx timeout [ 478.510397][ T2877] team0 (unregistering): Port device team_slave_1 removed [ 478.542553][ T2877] team0 (unregistering): Port device team_slave_0 removed [ 478.804439][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.811975][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.838584][ T7744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.297156][ T7744] hsr_slave_0: entered promiscuous mode [ 479.343132][ T7744] hsr_slave_1: entered promiscuous mode [ 479.362553][ T7744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.370361][ T7744] Cannot create hsr debugfs directory [ 480.062125][ T50] Bluetooth: hci5: command tx timeout [ 480.259799][ T29] audit: type=1326 audit(1718343436.868:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 480.283205][ T29] audit: type=1326 audit(1718343436.868:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 480.310568][ T29] audit: type=1326 audit(1718343436.898:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 480.334925][ T29] audit: type=1326 audit(1718343436.898:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 480.358465][ T29] audit: type=1326 audit(1718343436.918:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 480.381901][ T29] audit: type=1326 audit(1718343436.928:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 480.405240][ T29] audit: type=1326 audit(1718343436.928:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe240e7a627 code=0x7ffc0000 [ 480.431934][ T29] audit: type=1326 audit(1718343436.938:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe240e40309 code=0x7ffc0000 [ 480.456315][ T29] audit: type=1326 audit(1718343436.938:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe240e7a627 code=0x7ffc0000 [ 481.105248][ T7744] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 481.173101][ T7744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 481.242628][ T7857] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 481.456155][ T7744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 481.517244][ T7860] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 481.593446][ T7744] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 481.957517][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 481.957596][ T29] audit: type=1326 audit(1718343438.638:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74d567cea9 code=0x0 [ 483.068972][ T7883] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 483.139805][ T7881] loop4: detected capacity change from 0 to 2048 [ 483.231171][ T7879] loop1: detected capacity change from 0 to 2048 [ 483.267509][ T7879] EXT4-fs: Ignoring removed bh option [ 483.273970][ T7879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 483.283122][ T7879] EXT4-fs: Ignoring removed nobh option [ 483.347642][ T7881] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 483.390106][ T7744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.418742][ T7879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.501703][ T7744] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.553207][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.560918][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.577597][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.585404][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.791605][ T7893] UDF-fs: error (device loop4): udf_read_inode: (ino 1347) failed !bh [ 483.814857][ T7879] EXT4-fs error (device loop1): __ext4_remount:6525: comm syz-executor.1: Abort forced by user [ 483.892264][ T7879] EXT4-fs (loop1): Remounting filesystem read-only [ 484.259278][ T5086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.000789][ T7915] loop1: detected capacity change from 0 to 256 [ 486.218299][ T7915] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 486.802726][ T7744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.251504][ T7744] veth0_vlan: entered promiscuous mode [ 487.349450][ T7744] veth1_vlan: entered promiscuous mode [ 487.359896][ T7934] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 487.379953][ T29] audit: type=1326 audit(1718343444.008:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74d567cea9 code=0x0 [ 487.745547][ T7744] veth0_macvtap: entered promiscuous mode [ 487.846127][ T7744] veth1_macvtap: entered promiscuous mode [ 488.046247][ T7939] loop4: detected capacity change from 0 to 2048 [ 488.107788][ T7939] EXT4-fs: Ignoring removed bh option [ 488.113780][ T7939] EXT4-fs: Ignoring removed nomblk_io_submit option [ 488.120844][ T7939] EXT4-fs: Ignoring removed nobh option [ 488.224926][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.236291][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.246597][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.257418][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.267627][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.278460][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.288628][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.304554][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.320953][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.466671][ T7939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.604899][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.615705][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.625807][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.638479][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.651774][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.662617][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.672777][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.683831][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.712766][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.756615][ T7936] EXT4-fs error (device loop4): __ext4_remount:6525: comm syz-executor.4: Abort forced by user [ 488.783481][ T7936] EXT4-fs (loop4): Remounting filesystem read-only [ 488.856158][ T7744] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.869355][ T7744] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.879260][ T7744] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.888492][ T7744] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.104613][ T5360] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.062665][ T7964] loop1: detected capacity change from 0 to 32768 [ 490.134795][ T7964] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7964) [ 490.157740][ T7964] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 490.168251][ T7964] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 490.178426][ T7964] BTRFS info (device loop1): using free-space-tree [ 490.892213][ T5086] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 491.354071][ T7997] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 491.426074][ T7998] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.3'. [ 491.762616][ T8002] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 491.939872][ T8001] loop4: detected capacity change from 0 to 4096 [ 492.031749][ T8001] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 492.144250][ T8007] fuse: Bad value for 'fd' [ 492.508114][ T8001] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 492.588888][ T8001] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 492.728142][ T8017] loop1: detected capacity change from 0 to 512 [ 492.785855][ T29] audit: type=1326 audit(1718343449.428:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f741087cea9 code=0x0 [ 494.914914][ T8043] loop4: detected capacity change from 0 to 32768 [ 495.007898][ T8043] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (8043) [ 495.037344][ T8043] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 495.048113][ T8043] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 495.060920][ T8043] BTRFS info (device loop4): using free-space-tree [ 495.307165][ T8065] loop1: detected capacity change from 0 to 256 [ 495.416568][ T8065] MINIX-fs: mounting file system with errors, running fsck is recommended [ 495.695958][ T8076] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 496.004231][ T5360] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 496.473466][ T3196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.481652][ T3196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.641338][ T3196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.649693][ T3196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.959574][ T8109] loop4: detected capacity change from 0 to 32768 [ 499.003641][ T8109] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (8109) [ 499.326730][ T8106] loop0: detected capacity change from 0 to 4096 [ 499.389974][ T8106] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 499.630908][ T8119] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 499.759223][ T8109] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 499.774478][ T8109] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm [ 499.787909][ T8109] BTRFS info (device loop4): using free-space-tree [ 500.187786][ T8106] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 500.491190][ T8106] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 500.514455][ T29] audit: type=1326 audit(1718343457.158:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 500.537966][ T29] audit: type=1326 audit(1718343457.158:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 500.561157][ T29] audit: type=1326 audit(1718343457.158:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 500.584229][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.594505][ T29] audit: type=1326 audit(1718343457.168:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 500.617472][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.624039][ T29] audit: type=1326 audit(1718343457.178:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 500.646906][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.653392][ T29] audit: type=1326 audit(1718343457.178:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 500.676705][ T29] audit: type=1326 audit(1718343457.198:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe240e7a627 code=0x7ffc0000 [ 500.699480][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.708687][ T29] audit: type=1326 audit(1718343457.198:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe240e40309 code=0x7ffc0000 [ 500.731618][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.741084][ T29] audit: type=1326 audit(1718343457.208:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 500.764188][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.771736][ T29] audit: type=1326 audit(1718343457.228:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe240e7a627 code=0x7ffc0000 [ 500.848679][ T5360] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 502.088432][ T8156] loop0: detected capacity change from 0 to 512 [ 502.148546][ T8156] EXT4-fs: Ignoring removed nobh option [ 502.187782][ T8156] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 503.189699][ T8162] loop1: detected capacity change from 0 to 32768 [ 503.208342][ T8162] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (8162) [ 503.224193][ T8169] loop0: detected capacity change from 0 to 256 [ 503.278606][ T8169] MINIX-fs: mounting file system with errors, running fsck is recommended [ 503.304257][ T8162] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 503.315145][ T8162] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 503.324986][ T8162] BTRFS info (device loop1): using free-space-tree [ 503.411694][ T8169] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 505.269135][ T5086] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 505.715987][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 505.716071][ T29] audit: type=1326 audit(1718343462.408:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 505.746772][ T29] audit: type=1326 audit(1718343462.408:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 505.872101][ T29] audit: type=1326 audit(1718343462.508:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 505.895576][ T29] audit: type=1326 audit(1718343462.528:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 505.922947][ T29] audit: type=1326 audit(1718343462.538:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 505.945666][ T8200] loop4: detected capacity change from 0 to 4096 [ 505.947423][ T29] audit: type=1326 audit(1718343462.538:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe240e7cea9 code=0x7ffc0000 [ 505.975870][ T29] audit: type=1326 audit(1718343462.538:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe240e7a627 code=0x7ffc0000 [ 505.999125][ T29] audit: type=1326 audit(1718343462.538:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe240e40309 code=0x7ffc0000 [ 506.026430][ T29] audit: type=1326 audit(1718343462.538:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe240e7a627 code=0x7ffc0000 [ 506.041879][ T8200] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 506.050617][ T29] audit: type=1326 audit(1718343462.538:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe240e40309 code=0x7ffc0000 [ 506.344338][ T8200] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 506.675613][ T8200] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 506.737515][ T8200] process 'syz-executor.4' launched './file0' with NULL argv: empty string added [ 506.941695][ T8214] loop0: detected capacity change from 0 to 512 [ 507.007059][ T8214] EXT4-fs: Ignoring removed nobh option [ 507.102495][ T8214] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 508.446194][ T8233] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 508.535497][ T8240] trusted_key: encrypted_key: insufficient parameters specified [ 508.590791][ T8227] loop0: detected capacity change from 0 to 32768 [ 508.629867][ T8227] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (8227) [ 508.665061][ T8227] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 508.682056][ T8227] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 508.693131][ T8227] BTRFS info (device loop0): using free-space-tree [ 509.344378][ T7744] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 509.924537][ T8274] loop4: detected capacity change from 0 to 512 [ 509.979897][ T8271] loop1: detected capacity change from 0 to 2048 [ 510.012072][ T8274] EXT4-fs: Ignoring removed nobh option [ 510.084824][ T8274] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 510.131694][ T8271] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 510.458450][ T8278] UDF-fs: error (device loop1): udf_read_inode: (ino 1347) failed !bh [ 510.996268][ T8286] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 511.288570][ T8280] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 511.550104][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 511.550179][ T29] audit: type=1326 audit(1718343468.238:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff85227cea9 code=0x0 [ 513.168568][ T8318] loop4: detected capacity change from 0 to 512 [ 513.237346][ T8318] EXT4-fs: Ignoring removed nobh option [ 513.293996][ T8318] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 513.825714][ T29] audit: type=1800 audit(1718343470.468:685): pid=8327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 513.851702][ T8330] loop4: detected capacity change from 0 to 256 [ 513.921710][ T8330] MINIX-fs: mounting file system with errors, running fsck is recommended [ 514.088133][ T8330] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 514.643855][ T29] audit: type=1326 audit(1718343471.288:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3c367cea9 code=0x0 [ 514.971118][ T8339] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 515.050953][ T8348] loop4: detected capacity change from 0 to 2048 [ 515.193813][ T8348] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 515.271922][ T8352] 9pnet_fd: Insufficient options for proto=fd [ 515.311047][ T8351] 9pnet_fd: Insufficient options for proto=fd [ 515.900047][ T8354] UDF-fs: error (device loop4): udf_read_inode: (ino 1347) failed !bh [ 516.049412][ T8359] loop1: detected capacity change from 0 to 512 [ 516.104772][ T8359] EXT4-fs: Ignoring removed nobh option [ 516.901923][ T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 516.910778][ T50] Bluetooth: hci3: Injecting HCI hardware error event [ 516.919874][ T50] Bluetooth: hci3: hardware error 0x00 [ 517.027547][ T8359] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 517.126210][ T8364] loop0: detected capacity change from 0 to 2048 [ 517.249620][ T8364] EXT4-fs: Ignoring removed bh option [ 517.256606][ T8364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 517.263972][ T8364] EXT4-fs: Ignoring removed nobh option [ 517.540285][ T8364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.751022][ T8364] EXT4-fs error (device loop0): __ext4_remount:6525: comm syz-executor.0: Abort forced by user [ 517.802727][ T8364] EXT4-fs (loop0): Remounting filesystem read-only [ 517.947296][ T8385] loop1: detected capacity change from 0 to 256 [ 518.053747][ T8385] MINIX-fs: mounting file system with errors, running fsck is recommended [ 518.219325][ T8385] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 518.300233][ T7744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.944640][ T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 518.955198][ T8396] 9pnet_fd: Insufficient options for proto=fd [ 519.166145][ T29] audit: type=1326 audit(1718343475.828:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3c367cea9 code=0x0 [ 519.719405][ T8412] loop4: detected capacity change from 0 to 1024 [ 519.897096][ T8412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.028904][ T8412] EXT4-fs error (device loop4): ext4_lookup:1858: inode #2: comm syz-executor.4: deleted inode referenced: 12 [ 520.080732][ T8412] EXT4-fs (loop4): Remounting filesystem read-only [ 520.525563][ T5360] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.017152][ T8432] loop0: detected capacity change from 0 to 2048 [ 521.025013][ T8439] loop4: detected capacity change from 0 to 256 [ 521.082506][ T8439] MINIX-fs: mounting file system with errors, running fsck is recommended [ 521.108318][ T8432] EXT4-fs: Ignoring removed bh option [ 521.114453][ T8432] EXT4-fs: Ignoring removed nomblk_io_submit option [ 521.121685][ T8432] EXT4-fs: Ignoring removed nobh option [ 521.149554][ T8436] loop1: detected capacity change from 0 to 2048 [ 521.239100][ T8432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.252967][ T8436] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 521.284028][ T8439] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 521.452888][ T8449] EXT4-fs error (device loop0): __ext4_remount:6525: comm syz-executor.0: Abort forced by user [ 521.484832][ T8449] EXT4-fs (loop0): Remounting filesystem read-only [ 521.608504][ T8452] 9pnet_fd: Insufficient options for proto=fd [ 521.685767][ T8437] UDF-fs: error (device loop1): udf_read_inode: (ino 1347) failed !bh [ 521.853518][ T7744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.250034][ T8457] gretap0: entered promiscuous mode [ 522.316069][ T8457] gretap0: left promiscuous mode [ 523.603587][ T8464] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 523.653015][ T8464] team0: Port device geneve0 added [ 524.378665][ T8458] loop4: detected capacity change from 0 to 2048 [ 524.430988][ T8458] EXT4-fs: quotafile must be on filesystem root [ 526.103517][ T8490] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 526.330679][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.337877][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.431606][ T8496] 9pnet_fd: Insufficient options for proto=fd [ 526.831137][ T8502] loop1: detected capacity change from 0 to 256 [ 526.979257][ T8502] MINIX-fs: mounting file system with errors, running fsck is recommended [ 527.040830][ T8507] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 527.167209][ T8507] team0: Port device geneve0 added [ 527.315350][ T8502] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 528.637135][ T8510] loop0: detected capacity change from 0 to 512 [ 528.697266][ T8510] EXT4-fs: Ignoring removed nobh option [ 528.782488][ T8510] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 530.010666][ T8537] loop4: detected capacity change from 0 to 256 [ 530.085312][ T8537] MINIX-fs: mounting file system with errors, running fsck is recommended [ 530.115790][ T8527] loop0: detected capacity change from 0 to 2048 [ 530.159132][ T8527] EXT4-fs: quotafile must be on filesystem root [ 530.213617][ T8540] 9pnet_fd: Insufficient options for proto=fd [ 530.273210][ T8537] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 532.044392][ T8545] loop1: detected capacity change from 0 to 40427 [ 532.073886][ T8545] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 532.082117][ T8545] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 532.096559][ T8545] F2FS-fs (loop1): invalid crc value [ 532.126923][ T8545] F2FS-fs (loop1): Found nat_bits in checkpoint [ 532.432550][ T8545] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 532.439880][ T8545] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 534.157230][ T8555] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 534.202167][ T8555] team0: Port device geneve0 added [ 535.003139][ T8558] loop4: detected capacity change from 0 to 2048 [ 535.049442][ T8558] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 535.161914][ T8568] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 535.759002][ T8573] loop0: detected capacity change from 0 to 2048 [ 535.862197][ T8573] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 536.436952][ T8576] UDF-fs: error (device loop0): udf_read_inode: (ino 1347) failed !bh [ 536.751289][ T8585] 9pnet_fd: Insufficient options for proto=fd [ 536.909829][ T8587] loop1: detected capacity change from 0 to 256 [ 537.010011][ T8587] MINIX-fs: mounting file system with errors, running fsck is recommended [ 537.076904][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.180436][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.325713][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.436873][ T8587] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 537.509098][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.916825][ T59] bridge_slave_1: left allmulticast mode [ 538.922905][ T59] bridge_slave_1: left promiscuous mode [ 538.929500][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.964198][ T59] bridge_slave_0: left allmulticast mode [ 538.970101][ T59] bridge_slave_0: left promiscuous mode [ 538.978179][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.670140][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.721193][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.738519][ T59] bond0 (unregistering): Released all slaves [ 540.545225][ T8602] loop1: detected capacity change from 0 to 2048 [ 540.555913][ T8607] pimreg: entered allmulticast mode [ 540.610691][ T8609] pimreg: left allmulticast mode [ 540.650139][ T8602] EXT4-fs: quotafile must be on filesystem root [ 541.907444][ T59] hsr_slave_0: left promiscuous mode [ 542.001958][ T59] hsr_slave_1: left promiscuous mode [ 542.063264][ T6133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 542.078525][ T6133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 542.095255][ T6133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 542.107347][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.115941][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.135271][ T6133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 542.146974][ T6133] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 542.203326][ T6133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 542.256166][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.266405][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.320027][ T59] veth1_macvtap: left promiscuous mode [ 542.326848][ T59] veth0_macvtap: left promiscuous mode [ 542.333201][ T59] veth1_vlan: left promiscuous mode [ 542.338788][ T59] veth0_vlan: left promiscuous mode [ 542.487287][ T8622] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 543.074810][ T59] team0 (unregistering): Port device team_slave_1 removed [ 543.135316][ T59] team0 (unregistering): Port device team_slave_0 removed [ 543.741622][ T8629] loop0: detected capacity change from 0 to 256 [ 543.804578][ T8629] MINIX-fs: mounting file system with errors, running fsck is recommended [ 544.082952][ T8629] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 544.301625][ T6133] Bluetooth: hci0: command tx timeout [ 546.035628][ T8647] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 546.412192][ T6133] Bluetooth: hci0: command tx timeout [ 547.478935][ T8614] chnl_net:caif_netlink_parms(): no params data found [ 548.471852][ T6133] Bluetooth: hci0: command tx timeout [ 549.516319][ T8614] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.523917][ T8614] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.535646][ T8614] bridge_slave_0: entered allmulticast mode [ 549.543980][ T8614] bridge_slave_0: entered promiscuous mode [ 549.753076][ T8614] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.760915][ T8614] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.768759][ T8614] bridge_slave_1: entered allmulticast mode [ 549.777072][ T8614] bridge_slave_1: entered promiscuous mode [ 549.964070][ T8669] loop0: detected capacity change from 0 to 256 [ 549.988340][ T8669] MINIX-fs: mounting file system with errors, running fsck is recommended [ 550.113144][ T8669] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 550.144486][ T8614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.274077][ T8614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.559155][ T6133] Bluetooth: hci0: command tx timeout [ 550.675133][ T8614] team0: Port device team_slave_0 added [ 550.692385][ T8614] team0: Port device team_slave_1 added [ 550.957854][ T8614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.967163][ T8614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.994091][ T8614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.059658][ T8614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.069835][ T8614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.097962][ T8614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.379564][ T8614] hsr_slave_0: entered promiscuous mode [ 551.404110][ T8614] hsr_slave_1: entered promiscuous mode [ 551.535404][ T8692] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 552.688998][ T8698] loop1: detected capacity change from 0 to 2048 [ 552.884754][ T8698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.353143][ T5086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.490701][ T8614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 553.517133][ T8614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 553.643429][ T8614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 553.710151][ T8614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 554.211682][ T8718] tipc: Enabling of bearer rejected, failed to enable media [ 554.414700][ T8719] loop0: detected capacity change from 0 to 2048 [ 554.474361][ T8719] EXT4-fs: Ignoring removed bh option [ 554.480307][ T8719] EXT4-fs: Ignoring removed nomblk_io_submit option [ 554.487767][ T8719] EXT4-fs: Ignoring removed nobh option [ 554.627437][ T8719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.810704][ T8719] EXT4-fs error (device loop0): __ext4_remount:6525: comm syz-executor.0: Abort forced by user [ 554.954290][ T8719] EXT4-fs (loop0): Remounting filesystem read-only [ 555.045899][ T8731] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 555.132589][ T8735] ucma_write: process 595 (syz-executor.1) changed security contexts after opening file descriptor, this is not allowed. [ 555.133078][ T8614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.177189][ T8730] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 555.199721][ T8731] netlink: 508 bytes leftover after parsing attributes in process `syz-executor.1'. [ 555.209752][ T8731] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. [ 555.385152][ T7744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.390304][ T8614] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.459091][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.466968][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.591883][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.599635][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.288275][ T8747] loop1: detected capacity change from 0 to 2048 [ 556.367213][ T8747] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 556.503220][ T8753] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 557.471791][ T5130] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 557.745092][ T5130] usb 2-1: device descriptor read/64, error -71 [ 558.089917][ T8614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.112177][ T5130] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 558.191998][ T8761] loop0: detected capacity change from 0 to 2048 [ 558.344479][ T5130] usb 2-1: device descriptor read/64, error -71 [ 558.372440][ T8761] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 558.492774][ T5130] usb usb2-port1: attempt power cycle [ 558.760485][ T8767] UDF-fs: error (device loop0): udf_read_inode: (ino 1347) failed !bh [ 558.941798][ T5130] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 559.212789][ T5130] usb 2-1: device descriptor read/8, error -71 [ 559.228338][ T8747] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 4096 lbcount: 8192 extent 65+4096 [ 560.216959][ T8783] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 560.845520][ T8614] veth0_vlan: entered promiscuous mode [ 561.016458][ T8614] veth1_vlan: entered promiscuous mode [ 561.382240][ T8614] veth0_macvtap: entered promiscuous mode [ 561.441752][ T8614] veth1_macvtap: entered promiscuous mode [ 561.724962][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.735881][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.746019][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.756816][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.767249][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.778013][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.788177][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.798956][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.814348][ T8614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.964460][ T8805] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 562.997765][ T8810] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 563.160788][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.172057][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.182408][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.193186][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.203615][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.214508][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.224665][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.235494][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.257854][ T8614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.744338][ T8614] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.753741][ T8614] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.768240][ T8614] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.778717][ T8614] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.497545][ T8823] loop0: detected capacity change from 0 to 2048 [ 564.713504][ T8823] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 564.935289][ T8834] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 565.247688][ T8836] UDF-fs: error (device loop0): udf_read_inode: (ino 1347) failed !bh [ 566.759338][ T29] audit: type=1326 audit(1718343523.378:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3c367cea9 code=0x0 [ 568.920680][ T8889] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 569.733559][ T5133] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 569.785251][ T8903] loop1: detected capacity change from 0 to 2048 [ 569.836423][ T8903] EXT4-fs: Ignoring removed bh option [ 569.842471][ T8903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 569.849513][ T8903] EXT4-fs: Ignoring removed nobh option [ 569.975177][ T8903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.034217][ T8903] EXT4-fs error (device loop1): __ext4_remount:6525: comm syz-executor.1: Abort forced by user [ 570.152112][ T5133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.163479][ T5133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.182982][ T5133] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 570.196333][ T5133] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 570.205808][ T5133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.911183][ T8903] EXT4-fs (loop1): Remounting filesystem read-only [ 571.024333][ T5133] usb 1-1: config 0 descriptor?? [ 571.409687][ T5086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.572413][ T5133] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 571.580086][ T5133] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 571.684396][ T5133] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 571.763037][ T5133] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 571.902720][ T5130] usb 1-1: USB disconnect, device number 6 [ 571.981668][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.989654][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.123584][ T5133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.132055][ T5133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.807242][ T8940] loop1: detected capacity change from 0 to 256 [ 572.960976][ T8940] MINIX-fs: mounting file system with errors, running fsck is recommended [ 573.074461][ T8944] fuse: Bad value for 'fd' [ 573.294071][ T8940] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 573.563594][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 574.980735][ T8963] loop1: detected capacity change from 0 to 256 [ 575.480736][ T5133] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 575.874813][ T8974] loop0: detected capacity change from 0 to 2048 [ 575.950762][ T5133] usb 2-1: config 9 has an invalid interface number: 4 but max is 0 [ 575.959209][ T5133] usb 2-1: config 9 has no interface number 0 [ 576.064678][ T8974] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 576.138981][ T8974] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 576.155941][ T5133] usb 2-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=cf.4b [ 576.166381][ T5133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.174786][ T5133] usb 2-1: Product: syz [ 576.179203][ T5133] usb 2-1: Manufacturer: syz [ 576.184151][ T5133] usb 2-1: SerialNumber: syz [ 576.734503][ T5133] usb 2-1: USB disconnect, device number 14 [ 577.170995][ T8995] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 577.249216][ T8993] loop4: detected capacity change from 0 to 2048 [ 577.539189][ T8993] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 578.158953][ T9005] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 579.426265][ T9015] loop0: detected capacity change from 0 to 2048 [ 579.599428][ T9015] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 579.680622][ T9018] loop1: detected capacity change from 0 to 128 [ 579.754770][ T9018] ufs: Invalid option: "t" or missing value [ 579.761183][ T9018] ufs: wrong mount options [ 580.297410][ T9024] fuse: Bad value for 'fd' [ 581.026616][ T9038] loop4: detected capacity change from 0 to 1024 [ 581.039021][ T9040] loop1: detected capacity change from 0 to 256 [ 581.095833][ T9042] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 581.109679][ T9040] MINIX-fs: mounting file system with errors, running fsck is recommended [ 581.186107][ T9038] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 581.227132][ T9040] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 582.337221][ T9060] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 582.385577][ T9060] team0: Port device geneve0 added [ 582.584516][ T29] audit: type=1326 audit(1718343539.158:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d567cea9 code=0x7ffc0000 [ 582.610514][ T29] audit: type=1326 audit(1718343539.178:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74d567cea9 code=0x7ffc0000 [ 582.634857][ T29] audit: type=1326 audit(1718343539.218:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d567cea9 code=0x7ffc0000 [ 582.658529][ T29] audit: type=1326 audit(1718343539.218:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d567cea9 code=0x7ffc0000 [ 582.683919][ T29] audit: type=1326 audit(1718343539.248:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74d567cea9 code=0x7ffc0000 [ 582.709740][ T29] audit: type=1326 audit(1718343539.248:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d567cea9 code=0x7ffc0000 [ 582.876202][ T29] audit: type=1326 audit(1718343539.428:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74d567a627 code=0x7ffc0000 [ 582.899793][ T29] audit: type=1326 audit(1718343539.458:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74d5640309 code=0x7ffc0000 [ 582.925587][ T29] audit: type=1326 audit(1718343539.488:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f74d567cea9 code=0x7ffc0000 [ 582.949809][ T29] audit: type=1326 audit(1718343539.508:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f74d567cea9 code=0x7ffc0000 [ 592.621725][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 592.629063][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.647073][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 592.647149][ T29] audit: type=1326 audit(1718343539.688:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d567cea9 code=0x7ffc0000 [ 593.216163][ T9076] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 593.452859][ T9081] binder: 9070:9081 ioctl 40046210 0 returned -14 [ 593.847532][ T9085] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 593.988619][ T9090] loop1: detected capacity change from 0 to 256 [ 594.098830][ T9088] syzkaller0: entered promiscuous mode [ 594.104649][ T9088] syzkaller0: entered allmulticast mode [ 594.684875][ T5130] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 594.951612][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 595.144847][ T9107] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 596.672428][ T9117] loop4: detected capacity change from 0 to 2048 [ 596.749002][ T9117] EXT4-fs: Ignoring removed bh option [ 596.755120][ T9117] EXT4-fs: Ignoring removed nomblk_io_submit option [ 596.762325][ T9117] EXT4-fs: Ignoring removed nobh option [ 597.069057][ T9117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.112928][ T5130] usb 2-1: unable to read config index 0 descriptor/all [ 597.120279][ T5130] usb 2-1: can't read configurations, error -71 [ 597.256444][ T9117] EXT4-fs error (device loop4): __ext4_remount:6525: comm syz-executor.4: Abort forced by user [ 597.334918][ T9117] EXT4-fs (loop4): Remounting filesystem read-only [ 597.560777][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 597.713786][ T8614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.894326][ T9136] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 598.974940][ T9145] loop4: detected capacity change from 0 to 4096 [ 599.190808][ T9145] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 599.204221][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 599.269261][ T9159] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 600.796234][ T9166] loop0: detected capacity change from 0 to 2048 [ 600.872967][ T9166] EXT4-fs: Ignoring removed bh option [ 600.878748][ T9166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 600.886320][ T9166] EXT4-fs: Ignoring removed nobh option [ 601.126553][ T9166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.264144][ T9145] ntfs3: loop4: Failed to read $UpCase (-4). [ 601.362461][ T9166] EXT4-fs error (device loop0): __ext4_remount:6525: comm syz-executor.0: Abort forced by user [ 601.428094][ T9166] EXT4-fs (loop0): Remounting filesystem read-only [ 601.660808][ T9184] loop1: detected capacity change from 0 to 256 [ 601.783310][ T9184] MINIX-fs: mounting file system with errors, running fsck is recommended [ 601.849868][ T7744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.953264][ T9184] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 602.397550][ T9198] EXT4-fs warning (device sda1): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled. [ 602.928675][ T9207] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 605.428012][ T9223] loop1: detected capacity change from 0 to 2048 [ 605.489596][ T9223] EXT4-fs: Ignoring removed bh option [ 605.495604][ T9223] EXT4-fs: Ignoring removed nomblk_io_submit option [ 605.502947][ T9223] EXT4-fs: Ignoring removed nobh option [ 605.821058][ T9231] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 605.986262][ T9223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.017551][ T9220] EXT4-fs error (device loop1): __ext4_remount:6525: comm syz-executor.1: Abort forced by user [ 606.033855][ T9220] EXT4-fs (loop1): Remounting filesystem read-only [ 606.664752][ T5086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.747261][ T9244] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 607.986071][ T9252] Invalid ELF header magic: != ELF [ 608.065946][ T29] audit: type=1804 audit(1718343564.628:703): pid=9252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir381371076/syzkaller.de16XS/18/bus" dev="sda1" ino=1963 res=1 errno=0 [ 608.092174][ T29] audit: type=1804 audit(1718343564.638:704): pid=9252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir381371076/syzkaller.de16XS/18/bus" dev="sda1" ino=1963 res=1 errno=0 [ 608.116701][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.129541][ T29] audit: type=1804 audit(1718343564.648:705): pid=9252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir381371076/syzkaller.de16XS/18/bus" dev="sda1" ino=1963 res=1 errno=0 [ 608.154640][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.268686][ T29] audit: type=1800 audit(1718343564.908:706): pid=9246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 608.291249][ T29] audit: type=1804 audit(1718343564.908:707): pid=9254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir743505053/syzkaller.J2Uibq/154/bus" dev="sda1" ino=1964 res=1 errno=0 [ 608.316496][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.722920][ T9258] fuse: Bad value for 'fd' [ 608.763672][ T9256] QAT: Invalid ioctl -1006595043 [ 609.445414][ T9273] loop0: detected capacity change from 0 to 256 [ 609.453563][ T9269] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 609.837530][ T5130] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 610.099295][ T9287] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551359) [ 610.110053][ T9287] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 610.295582][ T9291] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 610.304757][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.316493][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.326599][ T5130] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 610.339926][ T5130] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 610.349543][ T5130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.400872][ T9291] team0: Port device geneve0 added [ 610.493473][ T5130] usb 1-1: config 0 descriptor?? [ 612.168227][ T9298] fuse: Bad value for 'fd' [ 612.496436][ T9274] sctp: failed to load transform for md5: -2 [ 612.806338][ T5130] usb 1-1: string descriptor 0 read error: -71 [ 612.933199][ T5130] uclogic 0003:5543:006E.0003: failed retrieving string descriptor #200: -71 [ 612.942700][ T5130] uclogic 0003:5543:006E.0003: failed retrieving pen parameters: -71 [ 612.951289][ T5130] uclogic 0003:5543:006E.0003: failed probing pen v2 parameters: -71 [ 612.959990][ T5130] uclogic 0003:5543:006E.0003: failed probing parameters: -71 [ 612.968206][ T5130] uclogic 0003:5543:006E.0003: probe with driver uclogic failed with error -71 [ 613.162888][ T5130] usb 1-1: USB disconnect, device number 7 [ 613.858624][ T9327] loop0: detected capacity change from 0 to 128 [ 613.890740][ T9327] ufs: Invalid option: "" or missing value [ 613.897057][ T9327] ufs: wrong mount options [ 614.453739][ T9335] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 615.715854][ T9333] loop1: detected capacity change from 0 to 256 [ 615.810124][ T9333] MINIX-fs: mounting file system with errors, running fsck is recommended [ 616.057037][ T9333] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 616.102901][ T9340] fuse: Bad value for 'fd' [ 616.655122][ T780] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 616.973030][ T780] usb 5-1: Using ep0 maxpacket: 8 [ 617.602091][ T9349] loop1: detected capacity change from 0 to 40427 [ 617.652077][ T780] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 617.661663][ T780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.684014][ T9349] F2FS-fs (loop1): invalid crc value [ 617.702995][ T780] usb 5-1: config 0 descriptor?? [ 617.743708][ T9349] F2FS-fs (loop1): Found nat_bits in checkpoint [ 617.947228][ T780] pvrusb2: Hardware description: Terratec Grabster AV400 [ 617.954778][ T780] pvrusb2: ********** [ 617.958933][ T780] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 617.969389][ T780] pvrusb2: Important functionality might not be entirely working. [ 617.977896][ T780] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 617.989387][ T780] pvrusb2: ********** [ 618.012108][ T9349] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 618.022000][ T9351] loop0: detected capacity change from 0 to 512 [ 618.119888][ T1957] pvrusb2: Invalid write control endpoint [ 618.129238][ T5086] syz-executor.1: attempt to access beyond end of device [ 618.129238][ T5086] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 618.363072][ T9351] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 618.423055][ T9351] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 618.497592][ T9342] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 618.520625][ T9351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.662896][ T5130] usb 5-1: USB disconnect, device number 14 [ 618.773415][ T1957] pvrusb2: Invalid write control endpoint [ 618.779351][ T1957] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 618.789292][ T1957] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 618.797175][ T1957] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 618.807451][ T1957] pvrusb2: Device being rendered inoperable [ 618.813691][ T1957] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 618.820998][ T1957] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 618.830412][ T1957] pvrusb2: Attached sub-driver cx25840 [ 618.836182][ T1957] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 618.846563][ T1957] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 619.280772][ T7744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.583503][ T9366] No control pipe specified [ 620.756878][ T9371] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 622.431706][ T780] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 622.711750][ T780] usb 5-1: Using ep0 maxpacket: 8 [ 622.832455][ T780] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 622.841207][ T780] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 622.857046][ T780] usb 5-1: config 135 has no interface number 0 [ 622.866691][ T780] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 623.103032][ T780] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 623.113167][ T780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.121616][ T780] usb 5-1: Product: syz [ 623.126110][ T780] usb 5-1: Manufacturer: syz [ 623.126825][ T9384] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 623.130858][ T780] usb 5-1: SerialNumber: syz [ 623.704105][ T4709] usb 5-1: USB disconnect, device number 15 [ 624.057851][ T9391] loop4: detected capacity change from 0 to 512 [ 624.220890][ T9391] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 624.258962][ T9391] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 624.300022][ T9391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.656276][ T8614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.003595][ T9420] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 627.596014][ T9425] loop4: detected capacity change from 0 to 256 [ 627.658762][ T9425] MINIX-fs: mounting file system with errors, running fsck is recommended [ 627.788840][ T9425] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 627.822666][ T9427] No control pipe specified [ 628.349637][ T9431] fuse: Bad value for 'user_id' [ 628.451993][ T5130] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 628.640859][ T29] audit: type=1804 audit(1718343585.268:708): pid=9431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir911056515/syzkaller.OHfyOm/316/bus" dev="sda1" ino=2027 res=1 errno=0 [ 628.666846][ T29] audit: type=1804 audit(1718343585.318:709): pid=9431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir911056515/syzkaller.OHfyOm/316/bus" dev="sda1" ino=2027 res=1 errno=0 [ 628.753845][ T5130] usb 2-1: Using ep0 maxpacket: 8 [ 628.872657][ T5130] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 628.881687][ T5130] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 628.897426][ T5130] usb 2-1: config 135 has no interface number 0 [ 628.905285][ T5130] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.104870][ T5130] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 629.114348][ T5130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.122737][ T5130] usb 2-1: Product: syz [ 629.127067][ T5130] usb 2-1: Manufacturer: syz [ 629.131953][ T5130] usb 2-1: SerialNumber: syz [ 630.104147][ T9443] binder: BINDER_SET_CONTEXT_MGR already set [ 630.110333][ T9443] binder: 9442:9443 ioctl 4018620d 20000040 returned -16 [ 630.153055][ T9443] binder: 9442:9443 ioctl 400448dd 20000380 returned -22 [ 630.911934][ T780] usb 2-1: USB disconnect, device number 17 [ 631.607888][ T9456] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 633.549807][ T9467] loop4: detected capacity change from 0 to 256 [ 633.596999][ T9467] MINIX-fs: mounting file system with errors, running fsck is recommended [ 633.642674][ T9469] loop0: detected capacity change from 0 to 512 [ 633.813511][ T9467] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 633.830072][ T9469] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 633.878672][ T9469] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 633.995024][ T9469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.363804][ T7744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.175343][ T9484] loop4: detected capacity change from 0 to 2048 [ 635.226147][ T9484] EXT4-fs: Ignoring removed bh option [ 635.232591][ T9484] EXT4-fs: Ignoring removed nomblk_io_submit option [ 635.244710][ T9484] EXT4-fs: Ignoring removed nobh option [ 635.475880][ T9484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.652113][ T9484] EXT4-fs error (device loop4): __ext4_remount:6525: comm syz-executor.4: Abort forced by user [ 635.709772][ T9484] EXT4-fs (loop4): Remounting filesystem read-only [ 636.033851][ T9498] binder: 9493:9498 ioctl 4018620d 0 returned -22 [ 636.220118][ T8614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.259518][ T9516] loop4: detected capacity change from 0 to 40427 [ 639.298523][ T9516] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 639.306889][ T9516] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 639.390123][ T9516] F2FS-fs (loop4): Found nat_bits in checkpoint [ 639.665928][ T9516] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 639.673519][ T9516] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 640.961056][ T9531] loop0: detected capacity change from 0 to 256 [ 641.267866][ T9531] MINIX-fs: mounting file system with errors, running fsck is recommended [ 641.468762][ T9531] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 641.633497][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 641.643047][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 641.664758][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 641.678151][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 641.727666][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 641.737070][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 642.899443][ T9534] chnl_net:caif_netlink_parms(): no params data found [ 643.016515][ T9545] binder: 9542:9545 ioctl 4018620d 0 returned -22 [ 643.834791][ T50] Bluetooth: hci1: command tx timeout [ 643.927410][ T9548] loop0: detected capacity change from 0 to 1024 [ 644.362000][ T4709] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 644.663543][ T4709] usb 1-1: Using ep0 maxpacket: 8 [ 644.850528][ T4709] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 644.859529][ T4709] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 644.871963][ T4709] usb 1-1: config 135 has no interface number 0 [ 644.878377][ T4709] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.975074][ T9534] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.983380][ T9534] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.991088][ T9534] bridge_slave_0: entered allmulticast mode [ 645.000040][ T9534] bridge_slave_0: entered promiscuous mode [ 645.097992][ T9534] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.106084][ T9534] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.114109][ T9534] bridge_slave_1: entered allmulticast mode [ 645.122545][ T9534] bridge_slave_1: entered promiscuous mode [ 645.130881][ T4709] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 645.140755][ T4709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.149105][ T4709] usb 1-1: Product: syz [ 645.153508][ T4709] usb 1-1: Manufacturer: syz [ 645.158241][ T4709] usb 1-1: SerialNumber: syz [ 645.428478][ T9534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.500341][ T4709] usb 1-1: USB disconnect, device number 8 [ 645.563357][ T9534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.893738][ T9534] team0: Port device team_slave_0 added [ 645.902751][ T50] Bluetooth: hci1: command tx timeout [ 645.943908][ T9534] team0: Port device team_slave_1 added [ 646.168206][ T9534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.175539][ T9534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.205419][ T9534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.351994][ T9534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.359174][ T9534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.387539][ T9534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.864393][ T9573] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 646.872835][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 646.882313][ T9573] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 647.018741][ T9534] hsr_slave_0: entered promiscuous mode [ 647.092190][ T9534] hsr_slave_1: entered promiscuous mode [ 647.123187][ T9534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.131233][ T9534] Cannot create hsr debugfs directory [ 647.608500][ T9585] loop4: detected capacity change from 0 to 256 [ 647.686741][ T9585] MINIX-fs: mounting file system with errors, running fsck is recommended [ 647.987912][ T50] Bluetooth: hci1: command tx timeout [ 647.993758][ T9585] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 648.398128][ T9588] loop0: detected capacity change from 0 to 64 [ 648.732623][ T9588] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 649.133303][ T4709] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 649.153406][ T9534] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.217795][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.218062][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.377316][ T4709] usb 2-1: Using ep0 maxpacket: 8 [ 649.477096][ T9534] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.494573][ T4709] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 649.494687][ T4709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.516249][ T4709] usb 2-1: config 0 descriptor?? [ 649.648613][ T9534] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.793275][ T4709] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 649.793897][ T4709] asix 2-1:0.0: probe with driver asix failed with error -32 [ 649.859780][ T9534] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.061960][ T50] Bluetooth: hci1: command tx timeout [ 650.450347][ T9534] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 650.555131][ T9534] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 650.618310][ T9534] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 650.652825][ T9534] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 650.780327][ T4101] bridge_slave_1: left allmulticast mode [ 650.780407][ T4101] bridge_slave_1: left promiscuous mode [ 650.781022][ T4101] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.492081][ T4101] team0: Port device geneve0 removed [ 651.632960][ T4101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.658350][ T4101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.693643][ T4101] bond0 (unregistering): Released all slaves [ 651.922461][ T779] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 652.357046][ T779] usb 5-1: config 0 has no interfaces? [ 652.413711][ T9534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.495343][ T9534] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.504593][ T779] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 652.514144][ T779] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 652.523012][ T779] usb 5-1: Manufacturer: syz [ 652.527854][ T779] usb 5-1: SerialNumber: syz [ 652.548441][ T779] usb 5-1: config 0 descriptor?? [ 652.573221][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.581323][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.628887][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.636717][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.101439][ C0] hrtimer: interrupt took 452628 ns [ 653.328927][ T10] usb 2-1: USB disconnect, device number 18 [ 653.511920][ T779] usb 5-1: USB disconnect, device number 16 [ 653.900955][ T9639] loop0: detected capacity change from 0 to 256 [ 654.044696][ T9639] MINIX-fs: mounting file system with errors, running fsck is recommended [ 654.220410][ T9639] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 654.604190][ T9637] loop1: detected capacity change from 0 to 8192 [ 654.717021][ T9637] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 654.730675][ T9637] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 654.746331][ T9637] REISERFS (device loop1): using ordered data mode [ 654.753607][ T9637] reiserfs: using flush barriers [ 654.815248][ T9637] REISERFS warning (device loop1): sh-458 journal_init_dev: cannot init journal device unknown-block(7,1): -16 [ 654.827612][ T9637] REISERFS warning (device loop1): sh-462 journal_init: unable to initialize journal device [ 654.949182][ T9647] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 655.013547][ T9534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.654569][ T4101] hsr_slave_0: left promiscuous mode [ 655.672621][ T4101] hsr_slave_1: left promiscuous mode [ 655.704361][ T4101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.712410][ T4101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.763107][ T4101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.770870][ T4101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.863607][ T4101] veth1_macvtap: left promiscuous mode [ 655.869490][ T4101] veth0_macvtap: left promiscuous mode [ 655.875628][ T4101] veth1_vlan: left promiscuous mode [ 655.881279][ T4101] veth0_vlan: left promiscuous mode [ 656.257943][ T9654] loop4: detected capacity change from 0 to 512 [ 656.409459][ T9654] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 656.492325][ T9654] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 2683928664 (level 1) [ 656.551869][ T9654] EXT4-fs (loop4): Remounting filesystem read-only [ 656.561146][ T9654] EXT4-fs (loop4): 1 truncate cleaned up [ 656.567231][ T9654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.968757][ T4101] team0 (unregistering): Port device team_slave_1 removed [ 656.989878][ T8614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.075314][ T4101] team0 (unregistering): Port device team_slave_0 removed [ 657.938065][ T9534] veth0_vlan: entered promiscuous mode [ 658.101880][ T9534] veth1_vlan: entered promiscuous mode [ 658.425287][ T9534] veth0_macvtap: entered promiscuous mode [ 658.487781][ T9534] veth1_macvtap: entered promiscuous mode [ 658.718619][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.729539][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.739754][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.750899][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.761054][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.772445][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.784215][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.795438][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.815410][ T9534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.945795][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.957945][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.968704][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.980764][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.991192][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.006911][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.018613][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.029634][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.045059][ T9534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.145850][ T9534] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.155352][ T9534] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.164826][ T9534] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.173964][ T9534] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.995243][ T9681] loop0: detected capacity change from 0 to 256 [ 661.133148][ T9681] MINIX-fs: mounting file system with errors, running fsck is recommended [ 661.353522][ T9681] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 662.131130][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 662.397814][ T9696] loop1: detected capacity change from 0 to 64 [ 664.433775][ T9721] loop1: detected capacity change from 0 to 40427 [ 664.456590][ T9721] F2FS-fs (loop1): Unrecognized mount option "00000000000000000000000" or missing value [ 665.697071][ T9746] loop1: detected capacity change from 0 to 256 [ 665.760933][ T9746] MINIX-fs: mounting file system with errors, running fsck is recommended [ 665.931911][ T9746] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 666.128652][ T9751] loop4: detected capacity change from 0 to 512 [ 666.190604][ T9751] EXT4-fs: Ignoring removed mblk_io_submit option [ 666.236947][ T9751] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 666.394345][ T9751] EXT4-fs (loop4): 1 truncate cleaned up [ 666.400269][ T9751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.414786][ T9411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.422800][ T9411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.593524][ T4101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.601876][ T4101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.702408][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 666.763645][ T9756] overlayfs: failed to resolve './file0': -2 [ 667.732812][ T8614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.119588][ T9778] netlink: 2048 bytes leftover after parsing attributes in process `syz-executor.3'. [ 668.129994][ T9778] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 668.192678][ T9779] fuse: Bad value for 'group_id' [ 669.293043][ T9797] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 669.535298][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 669.640855][ T9805] loop4: detected capacity change from 0 to 512 [ 669.724012][ T9805] EXT4-fs: Ignoring removed mblk_io_submit option [ 669.795698][ T9805] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 669.932693][ T10] usb 2-1: config 0 has no interfaces? [ 669.945536][ T9805] EXT4-fs (loop4): 1 truncate cleaned up [ 669.957588][ T9805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.066260][ T10] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 670.075880][ T10] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 670.084655][ T10] usb 2-1: Manufacturer: syz [ 670.089411][ T10] usb 2-1: SerialNumber: syz [ 670.125090][ T10] usb 2-1: config 0 descriptor?? [ 671.739484][ T5130] usb 2-1: USB disconnect, device number 19 [ 671.891246][ T8614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.382586][ T9829] fuse: Bad value for 'group_id' [ 673.087607][ T9837] loop1: detected capacity change from 0 to 1024 [ 673.582218][ T9847] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 673.600759][ T9841] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 673.709573][ T9847] bond1: entered promiscuous mode [ 674.212925][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 674.313254][ T9843] loop4: detected capacity change from 0 to 8192 [ 674.417830][ T9843] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 674.431864][ T9843] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 674.465494][ T9851] loop1: detected capacity change from 0 to 1024 [ 674.502678][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 674.513499][ T9851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 674.543030][ T9843] REISERFS (device loop4): using ordered data mode [ 674.549991][ T9843] reiserfs: using flush barriers [ 674.574018][ T9851] EXT4-fs (loop1): DAX unsupported by block device. [ 674.609328][ T9843] REISERFS warning (device loop4): sh-458 journal_init_dev: cannot init journal device unknown-block(7,4): -16 [ 674.622227][ T9843] REISERFS warning (device loop4): sh-462 journal_init: unable to initialize journal device [ 674.648956][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 674.657851][ T10] usb 1-1: config 179 has no interface number 0 [ 674.667403][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 674.679769][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 674.691566][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 674.703202][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 674.716922][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 674.726554][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.755836][ T9849] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 674.844022][ T9854] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 674.910211][ T9851] loop1: detected capacity change from 0 to 1024 [ 675.025462][ T9851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.225148][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input11 [ 675.317949][ T5086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.397942][ T9862] fuse: Bad value for 'fd' [ 675.411958][ T9847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.421165][ T9847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.489209][ T5130] usb 1-1: USB disconnect, device number 9 [ 675.491750][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 675.531388][ T5130] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 675.714612][ T9847] lo: entered promiscuous mode [ 675.730241][ T9847] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 675.761186][ T9847] bond1: (slave lo): Enslaving as an active interface with an up link [ 676.853102][ T9881] loop1: detected capacity change from 0 to 256 [ 676.887310][ T9886] loop0: detected capacity change from 0 to 64 [ 676.950933][ T9881] MINIX-fs: mounting file system with errors, running fsck is recommended [ 677.060568][ T9886] hfs: unable to parse mount options [ 677.185266][ T9881] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 677.627007][ T9891] loop4: detected capacity change from 0 to 4096 [ 677.761605][ T9891] NILFS (loop4): invalid segment: Checksum error in segment payload [ 677.770039][ T9891] NILFS (loop4): trying rollback from an earlier position [ 677.849532][ T9891] NILFS (loop4): recovery complete [ 677.863575][ T9897] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 678.366563][ T9901] loop0: detected capacity change from 0 to 2048 [ 678.492018][ T9901] syz-executor.0: attempt to access beyond end of device [ 678.492018][ T9901] loop0: rw=524288, sector=9007199254741068, nr_sectors = 2 limit=2048 [ 679.260624][ T9911] loop0: detected capacity change from 0 to 132 [ 679.898606][ T9922] loop0: detected capacity change from 0 to 1024 [ 680.168292][ T9922] hfsplus: b-tree write err: -5, ino 3 [ 680.205054][ T1093] ===================================================== [ 680.206021][ T9926] loop1: detected capacity change from 0 to 256 [ 680.212315][ T1093] BUG: KMSAN: uninit-value in virtqueue_add+0x1e86/0x65c0 [ 680.225898][ T1093] virtqueue_add+0x1e86/0x65c0 [ 680.230864][ T1093] virtqueue_add_sgs+0x186/0x1b0 [ 680.231105][ T9926] MINIX-fs: mounting file system with errors, running fsck is recommended [ 680.235950][ T1093] virtscsi_add_cmd+0x838/0xad0 [ 680.236065][ T1093] virtscsi_queuecommand+0x898/0xa60 [ 680.236179][ T1093] scsi_queue_rq+0x4cc7/0x5a80 [ 680.236288][ T1093] blk_mq_dispatch_rq_list+0x79b/0x3440 [ 680.265588][ T1093] __blk_mq_sched_dispatch_requests+0x11b7/0x26e0 [ 680.272243][ T1093] blk_mq_sched_dispatch_requests+0x12f/0x270 [ 680.278531][ T1093] blk_mq_run_hw_queue+0x6e4/0xbc0 [ 680.283851][ T1093] blk_mq_flush_plug_list+0x1683/0x2b20 [ 680.289620][ T1093] blk_add_rq_to_plug+0x2c6/0x970 [ 680.294859][ T1093] blk_mq_submit_bio+0x26e8/0x3390 [ 680.300214][ T1093] __submit_bio+0x3b9/0xb60 [ 680.304893][ T1093] submit_bio_noacct_nocheck+0x148c/0x1800 [ 680.310945][ T1093] submit_bio_noacct+0x1bd8/0x27f0 [ 680.316280][ T1093] submit_bio+0x58a/0x5b0 [ 680.320824][ T1093] ext4_bio_write_folio+0x1e76/0x2e40 [ 680.321164][ T9926] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 680.326368][ T1093] mpage_submit_folio+0x351/0x4a0 [ 680.326489][ T1093] ext4_do_writepages+0x3733/0x62e0 [ 680.326589][ T1093] ext4_writepages+0x312/0x830 [ 680.326700][ T1093] do_writepages+0x427/0xc30 [ 680.354796][ T1093] __writeback_single_inode+0x10d/0x12c0 [ 680.360617][ T1093] writeback_sb_inodes+0xc95/0x1e00 [ 680.365993][ T1093] wb_writeback+0x4df/0xea0 [ 680.370659][ T1093] wb_workfn+0x40b/0x1940 [ 680.375186][ T1093] process_scheduled_works+0xa81/0x1bd0 [ 680.380904][ T1093] worker_thread+0xea5/0x1560 [ 680.385751][ T1093] kthread+0x3e2/0x540 [ 680.389987][ T1093] ret_from_fork+0x6d/0x90 [ 680.394561][ T1093] ret_from_fork_asm+0x1a/0x30 [ 680.399507][ T1093] [ 680.401917][ T1093] Uninit was stored to memory at: [ 680.407272][ T1093] copy_page_from_iter_atomic+0x12b7/0x2ae0 [ 680.413370][ T1093] generic_perform_write+0x4c1/0xc60 [ 680.418857][ T1093] ext4_buffered_write_iter+0x564/0xaa0 [ 680.424661][ T1093] ext4_file_write_iter+0x208/0x3450 [ 680.430107][ T1093] __kernel_write_iter+0x64d/0xc80 [ 680.435588][ T1093] dump_user_range+0x8dc/0xee0 [ 680.440624][ T1093] elf_core_dump+0x57c7/0x5ae0 [ 680.445574][ T1093] do_coredump+0x32d5/0x4920 [ 680.450333][ T1093] get_signal+0x267e/0x2d00 [ 680.455009][ T1093] arch_do_signal_or_restart+0x53/0xcb0 [ 680.460764][ T1093] syscall_exit_to_user_mode+0x5d/0x160 [ 680.466501][ T1093] do_syscall_64+0xdc/0x1e0 [ 680.471189][ T1093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.477276][ T1093] [ 680.479675][ T1093] Uninit was created at: [ 680.484131][ T1093] __alloc_pages+0x9d6/0xe70 [ 680.488954][ T1093] alloc_pages_mpol+0x299/0x990 [ 680.493994][ T1093] alloc_pages+0x1bf/0x1e0 [ 680.498662][ T1093] dump_user_range+0x4a/0xee0 [ 680.503527][ T1093] elf_core_dump+0x57c7/0x5ae0 [ 680.508478][ T1093] do_coredump+0x32d5/0x4920 [ 680.513235][ T1093] get_signal+0x267e/0x2d00 [ 680.517902][ T1093] arch_do_signal_or_restart+0x53/0xcb0 [ 680.523664][ T1093] syscall_exit_to_user_mode+0x5d/0x160 [ 680.529397][ T1093] do_syscall_64+0xdc/0x1e0 [ 680.534079][ T1093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.540164][ T1093] [ 680.542562][ T1093] Bytes 0-4095 of 4096 are uninitialized [ 680.548294][ T1093] Memory access of size 4096 starts at ffff888131d3b000 [ 680.555334][ T1093] [ 680.557739][ T1093] CPU: 0 PID: 1093 Comm: kworker/u8:9 Tainted: G W 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 680.569192][ T1093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 680.579399][ T1093] Workqueue: writeback wb_workfn (flush-8:0) [ 680.585616][ T1093] ===================================================== [ 680.592641][ T1093] Disabling lock debugging due to kernel taint [ 680.598896][ T1093] Kernel panic - not syncing: kmsan.panic set ... [ 680.605506][ T1093] CPU: 0 PID: 1093 Comm: kworker/u8:9 Tainted: G B W 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 680.617054][ T1093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 680.627252][ T1093] Workqueue: writeback wb_workfn (flush-8:0) [ 680.633479][ T1093] Call Trace: [ 680.636939][ T1093] [ 680.639968][ T1093] dump_stack_lvl+0x216/0x2d0 [ 680.644845][ T1093] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 680.650846][ T1093] dump_stack+0x1e/0x30 [ 680.655190][ T1093] panic+0x4e2/0xcd0 [ 680.659270][ T1093] ? kmsan_get_metadata+0xf1/0x1d0 [ 680.664914][ T1093] kmsan_report+0x2d5/0x2e0 [ 680.669585][ T1093] ? stack_depot_save_flags+0x2c/0x6e0 [ 680.675219][ T1093] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 680.681676][ T1093] ? kmsan_internal_check_memory+0x48c/0x560 [ 680.687866][ T1093] ? kmsan_handle_dma+0xac/0xc0 [ 680.692881][ T1093] ? virtqueue_add+0x1e86/0x65c0 [ 680.698017][ T1093] ? virtqueue_add_sgs+0x186/0x1b0 [ 680.703312][ T1093] ? virtscsi_add_cmd+0x838/0xad0 [ 680.708527][ T1093] ? virtscsi_queuecommand+0x898/0xa60 [ 680.714172][ T1093] ? scsi_queue_rq+0x4cc7/0x5a80 [ 680.719284][ T1093] ? blk_mq_dispatch_rq_list+0x79b/0x3440 [ 680.725218][ T1093] ? __blk_mq_sched_dispatch_requests+0x11b7/0x26e0 [ 680.732027][ T1093] ? blk_mq_sched_dispatch_requests+0x12f/0x270 [ 680.738472][ T1093] ? blk_mq_run_hw_queue+0x6e4/0xbc0 [ 680.743956][ T1093] ? blk_mq_flush_plug_list+0x1683/0x2b20 [ 680.749893][ T1093] ? blk_add_rq_to_plug+0x2c6/0x970 [ 680.755292][ T1093] ? blk_mq_submit_bio+0x26e8/0x3390 [ 680.760774][ T1093] ? __submit_bio+0x3b9/0xb60 [ 680.765609][ T1093] ? submit_bio_noacct_nocheck+0x148c/0x1800 [ 680.771802][ T1093] ? submit_bio_noacct+0x1bd8/0x27f0 [ 680.777294][ T1093] ? submit_bio+0x58a/0x5b0 [ 680.781994][ T1093] ? ext4_bio_write_folio+0x1e76/0x2e40 [ 680.787765][ T1093] ? mpage_submit_folio+0x351/0x4a0 [ 680.793146][ T1093] ? ext4_do_writepages+0x3733/0x62e0 [ 680.798685][ T1093] ? ext4_writepages+0x312/0x830 [ 680.803801][ T1093] ? do_writepages+0x427/0xc30 [ 680.808727][ T1093] ? __writeback_single_inode+0x10d/0x12c0 [ 680.814722][ T1093] ? writeback_sb_inodes+0xc95/0x1e00 [ 680.820264][ T1093] ? wb_writeback+0x4df/0xea0 [ 680.825094][ T1093] ? wb_workfn+0x40b/0x1940 [ 680.829786][ T1093] ? process_scheduled_works+0xa81/0x1bd0 [ 680.835688][ T1093] ? worker_thread+0xea5/0x1560 [ 680.840712][ T1093] ? kthread+0x3e2/0x540 [ 680.845132][ T1093] ? ret_from_fork+0x6d/0x90 [ 680.849887][ T1093] ? ret_from_fork_asm+0x1a/0x30 [ 680.855020][ T1093] ? ext4_do_writepages+0x3733/0x62e0 [ 680.860554][ T1093] ? ext4_writepages+0x312/0x830 [ 680.865674][ T1093] ? do_writepages+0x427/0xc30 [ 680.870599][ T1093] ? __writeback_single_inode+0x10d/0x12c0 [ 680.876581][ T1093] ? writeback_sb_inodes+0xc95/0x1e00 [ 680.882113][ T1093] ? wb_writeback+0x4df/0xea0 [ 680.886945][ T1093] ? wb_workfn+0x40b/0x1940 [ 680.891643][ T1093] ? process_scheduled_works+0xa81/0x1bd0 [ 680.897543][ T1093] ? worker_thread+0xea5/0x1560 [ 680.902570][ T1093] ? kthread+0x3e2/0x540 [ 680.907014][ T1093] ? ret_from_fork+0x6d/0x90 [ 680.911779][ T1093] ? ret_from_fork_asm+0x1a/0x30 [ 680.916944][ T1093] ? should_fail_ex+0x4a/0x800 [ 680.921894][ T1093] ? kmsan_get_metadata+0x146/0x1d0 [ 680.927308][ T1093] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 680.933328][ T1093] kmsan_internal_check_memory+0x48c/0x560 [ 680.939378][ T1093] kmsan_handle_dma+0xac/0xc0 [ 680.944221][ T1093] virtqueue_add+0x1e86/0x65c0 [ 680.949267][ T1093] ? kmsan_get_metadata+0x146/0x1d0 [ 680.954636][ T1093] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 680.960912][ T1093] ? kmsan_get_metadata+0x146/0x1d0 [ 680.966316][ T1093] ? kmsan_get_metadata+0x146/0x1d0 [ 680.971706][ T1093] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 680.977720][ T1093] virtqueue_add_sgs+0x186/0x1b0 [ 680.982888][ T1093] virtscsi_add_cmd+0x838/0xad0 [ 680.987975][ T1093] virtscsi_queuecommand+0x898/0xa60 [ 680.993464][ T1093] ? __pfx_virtscsi_queuecommand+0x10/0x10 [ 680.999510][ T1093] scsi_queue_rq+0x4cc7/0x5a80 [ 681.004485][ T1093] ? __pfx_scsi_queue_rq+0x10/0x10 [ 681.009774][ T1093] blk_mq_dispatch_rq_list+0x79b/0x3440 [ 681.015663][ T1093] ? sbitmap_get+0x430/0x670 [ 681.020431][ T1093] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 681.026458][ T1093] ? dd_dispatch_request+0x9a1/0xa20 [ 681.032053][ T1093] __blk_mq_sched_dispatch_requests+0x11b7/0x26e0 [ 681.038718][ T1093] ? __blk_mq_sched_dispatch_requests+0x1031/0x26e0 [ 681.045556][ T1093] blk_mq_sched_dispatch_requests+0x12f/0x270 [ 681.051865][ T1093] blk_mq_run_hw_queue+0x6e4/0xbc0 [ 681.057195][ T1093] ? __pfx_dd_insert_requests+0x10/0x10 [ 681.062972][ T1093] blk_mq_flush_plug_list+0x1683/0x2b20 [ 681.068767][ T1093] ? kmsan_get_metadata+0x146/0x1d0 [ 681.074184][ T1093] blk_add_rq_to_plug+0x2c6/0x970 [ 681.079506][ T1093] blk_mq_submit_bio+0x26e8/0x3390 [ 681.084860][ T1093] __submit_bio+0x3b9/0xb60 [ 681.089519][ T1093] ? kmsan_get_metadata+0x146/0x1d0 [ 681.094899][ T1093] submit_bio_noacct_nocheck+0x148c/0x1800 [ 681.100957][ T1093] ? blk_add_trace_bio_remap+0xdb/0x440 [ 681.106720][ T1093] ? kmsan_get_metadata+0x146/0x1d0 [ 681.112100][ T1093] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 681.118111][ T1093] submit_bio_noacct+0x1bd8/0x27f0 [ 681.123468][ T1093] submit_bio+0x58a/0x5b0 [ 681.128002][ T1093] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 681.134006][ T1093] ext4_bio_write_folio+0x1e76/0x2e40 [ 681.139632][ T1093] mpage_submit_folio+0x351/0x4a0 [ 681.144856][ T1093] ext4_do_writepages+0x3733/0x62e0 [ 681.150249][ T1093] ? cfg80211_inform_single_bss_data+0x2a14/0x3100 [ 681.157071][ T1093] ext4_writepages+0x312/0x830 [ 681.162041][ T1093] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 681.168045][ T1093] ? __pfx_ext4_writepages+0x10/0x10 [ 681.173517][ T1093] do_writepages+0x427/0xc30 [ 681.178269][ T1093] ? stack_depot_save_flags+0x2c/0x6e0 [ 681.183912][ T1093] ? kmsan_get_metadata+0x146/0x1d0 [ 681.189316][ T1093] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 681.195316][ T1093] __writeback_single_inode+0x10d/0x12c0 [ 681.201128][ T1093] ? _raw_spin_unlock+0x30/0x50 [ 681.206159][ T1093] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 681.212166][ T1093] writeback_sb_inodes+0xc95/0x1e00 [ 681.217663][ T1093] wb_writeback+0x4df/0xea0 [ 681.222352][ T1093] ? kmsan_get_metadata+0x146/0x1d0 [ 681.227735][ T1093] ? kmsan_get_metadata+0x146/0x1d0 [ 681.233101][ T1093] ? queue_io+0x481/0x780 [ 681.237594][ T1093] wb_workfn+0x40b/0x1940 [ 681.242113][ T1093] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 681.248119][ T1093] ? __pfx_wb_workfn+0x10/0x10 [ 681.253075][ T1093] process_scheduled_works+0xa81/0x1bd0 [ 681.258839][ T1093] worker_thread+0xea5/0x1560 [ 681.263700][ T1093] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 681.269706][ T1093] kthread+0x3e2/0x540 [ 681.273969][ T1093] ? __pfx_worker_thread+0x10/0x10 [ 681.279287][ T1093] ? __pfx_kthread+0x10/0x10 [ 681.284171][ T1093] ret_from_fork+0x6d/0x90 [ 681.288764][ T1093] ? __pfx_kthread+0x10/0x10 [ 681.293543][ T1093] ret_from_fork_asm+0x1a/0x30 [ 681.298511][ T1093] [ 681.301878][ T1093] Kernel Offset: disabled [ 681.306301][ T1093] Rebooting in 86400 seconds..