last executing test programs: 14.386267908s ago: executing program 3 (id=825): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x20000000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) epoll_create(0x281) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, r4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f0000000840)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0x1}}, 0x120) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000680)="1fef362428895a754caecb8211ca3a50eb6d41bb1ed7a8424c07c3677c76f553d01ea40dc315d955801597c80de9d3f722e32bccc636548d68fc13cd44be7a5ee8f2a4a4ba76999b3d1ec899a148ee0edcc8162d395583af5500d2c3fb7cc7e6306122b94419597a6689d058b51a874ccf9d1cd99a2c64911761e181c32aadc9a8116382ded27778aa0d3339101feef0daf309bb284918e98e163360e3dc9bb48f7b6356e69dae0549c7505cf5b4b6654255ce0ab5ca95adb2f883217e9e007354aef098c66bb15bd235777887a29570c875026716686a700e", 0xd9}, {&(0x7f0000000780)="5510e0cfd9f4177a2a4ac222f9a7fc721e6d66b49238273a03c25dd9b3343f2909f3bc2b8e4058067ef8fe2f481121fe418be6c46cb48a192c6b51f5540c8935c6175a2faaaf1a401d1363ceae43dfa28a7ee4e59be78bb06ddc441abdfb28e71a93bfcfe0356034f8a8484f5dca9a83d42d42871b28acaa7d2f7f8ead18631b0016005d26dd72ba0c73a023ba9dcae211a95e3b720faa0bf8496497dec7f7b24b3b898dd9a8af12ed425874c1c8de6b4d2e31df8dc6ed", 0xb7}], 0x2) kexec_load(0x7, 0x0, 0x0, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x9, 0x2006e}, 0x2c) 12.845905272s ago: executing program 2 (id=826): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0), 0x1, 0xa10, &(0x7f0000001540)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f00000003c0)=""/34) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000080)={{0x4, 0x6, 0x8, 0xa, 'syz0\x00', 0x75f}, 0x1, [0x0, 0x5, 0x7, 0x8000, 0x9, 0x8, 0x7ff, 0xfe, 0x5, 0x47f1, 0x2, 0x8, 0x5, 0x7, 0x1, 0x8, 0x0, 0x8000000000000001, 0x81, 0x1, 0x8000000000000000, 0xfff, 0x8, 0x1, 0xbddb, 0xb74, 0xe, 0x14, 0x567, 0x9, 0x0, 0x5, 0xcc, 0x81, 0xea, 0x80000000, 0x8687, 0x0, 0x3, 0x2e, 0x1, 0xab91, 0x2d5, 0xacc5f34, 0x8e, 0x6, 0x800, 0x0, 0x5, 0x2, 0x5, 0x3, 0x3, 0x100000000, 0x9a, 0x9, 0x0, 0x8, 0x2, 0x7, 0x1, 0x8, 0xfffffffffffffff2, 0x5, 0x1, 0x0, 0x7fffffff, 0xc, 0x7, 0xb, 0xfffffffffffffffd, 0x2, 0xcb5c, 0x2, 0x2, 0x8, 0x1, 0x80, 0xb1, 0x5, 0x26, 0x3, 0x8, 0x9, 0x1, 0xffffffffffffffff, 0x8, 0x100000000, 0x9, 0x1, 0x2, 0xa9, 0x1, 0xffffffffffffffff, 0x9, 0x5, 0x4, 0x0, 0x8, 0x12b, 0x10001, 0x1, 0x6, 0x9, 0x9, 0x9, 0x80000000, 0x2, 0x3, 0xfffffffffffffffb, 0x271a, 0x0, 0x8, 0xff, 0x7, 0x4000000000000008, 0xa, 0x33, 0x2, 0x1bde, 0xfff, 0x3, 0x38000000000, 0xfffffffffffffe2d, 0x1, 0x5, 0x66fd]}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c}) 12.838664533s ago: executing program 1 (id=827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x4000, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0x94}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) write$eventfd(r4, &(0x7f00000000c0)=0x33482a8d, 0x8) r5 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) poll(&(0x7f0000000080)=[{r5, 0x212c}], 0x1, 0xf0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000003c0)) r6 = syz_io_uring_setup(0x113, &(0x7f00000002c0), &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x0, r9, 0x0, 0x0, 0x0, 0x102, 0x1, {0x3}}) io_uring_enter(r6, 0x8aa, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000200)={@broadcast, @random="56b6378053d1", @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x4, 0x0, 0x2}}, {@mpls_mc={0x8848, {[], @generic="235541d1b47003e8d6714a45d3c38b81c3c16e48497ee3509716e6ae7196a36679d74b27189052b495d25a83d817075d5aa14ba4b38823019f3188ecf13b738b638477a472fbf305264fdc47db8c5ce942618a8dab2123b0ec0375ead3f43598b12eb2fbbaa0623838"}}}}, &(0x7f0000000340)={0x1, 0x3, [0x4, 0xba, 0xf03, 0x3bf]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11.161877178s ago: executing program 2 (id=830): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4040000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 10.067717107s ago: executing program 1 (id=831): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xc2, &(0x7f00000003c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @val={@void, {0x8100, 0x7, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xffff, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000440)={{0x6, 0x3}, 'port1\x00', 0x192, 0x40010, 0x8, 0x91, 0xd, 0x8, 0x4, 0x0, 0x0, 0x3}) setsockopt$inet_opts(r1, 0x0, 0x8, &(0x7f0000000000)="a8", 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, 0x0, &(0x7f0000000180)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x9, 0x6, 0x5]}, &(0x7f0000000080)=0x44) syz_clone(0xca011, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0x64000ba6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r4, &(0x7f0000000000), 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000100070000000900020073797a31000000000c00078008001240000000020c000300686173683a697000050005000200000005000400010000009c92a936a88cba90df014ca10860"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 9.872627582s ago: executing program 3 (id=832): openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) eventfd2(0x4, 0x80800) r4 = syz_io_uring_setup(0x75bc, 0x0, &(0x7f00000001c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, 0x0) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r6, &(0x7f0000000340), 0x0}, 0x20) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x2000) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 9.770212171s ago: executing program 2 (id=833): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) socket(0x2, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48810}, 0x4048040) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) 9.709291096s ago: executing program 0 (id=834): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000906010200"/19], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2000003, &(0x7f0000000540)=ANY=[@ANYBLOB="6e6f6465636f6d706f7365008000000000000042000fc32c6e6f636172726965722c6e6f6465636e6d706f736500a580263e005a80c976898113cb9f4680642ce86dd3b5d3ba4a739e6654e4a1277ef2dd52ea98c5ea630da0c29cd73f8b9f4fd077e97f3ec1acc1ac91b93eec369217142e5897"], 0x1, 0x5f8, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$ax25(0x3, 0x3, 0x7) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 8.720036955s ago: executing program 2 (id=835): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd000000"], 0x48) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) socket(0x10, 0x3, 0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f785"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x5717, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0x4, 0x25d}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 8.717828906s ago: executing program 1 (id=836): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0), 0x1, 0xa10, &(0x7f0000001540)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f00000003c0)=""/34) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000080)={{0x4, 0x6, 0x8, 0xa, 'syz0\x00', 0x75f}, 0x1, [0x0, 0x5, 0x7, 0x8000, 0x9, 0x8, 0x7ff, 0xfe, 0x5, 0x47f1, 0x2, 0x8, 0x5, 0x7, 0x1, 0x8, 0x0, 0x8000000000000001, 0x81, 0x1, 0x8000000000000000, 0xfff, 0x8, 0x1, 0xbddb, 0xb74, 0xe, 0x14, 0x567, 0x9, 0x0, 0x5, 0xcc, 0x81, 0xea, 0x80000000, 0x8687, 0x0, 0x3, 0x2e, 0x1, 0xab91, 0x2d5, 0xacc5f34, 0x8e, 0x6, 0x800, 0x0, 0x5, 0x2, 0x5, 0x3, 0x3, 0x100000000, 0x9a, 0x9, 0x0, 0x8, 0x2, 0x7, 0x1, 0x8, 0xfffffffffffffff2, 0x5, 0x1, 0x0, 0x7fffffff, 0xc, 0x7, 0xb, 0xfffffffffffffffd, 0x2, 0xcb5c, 0x2, 0x2, 0x8, 0x1, 0x80, 0xb1, 0x5, 0x26, 0x3, 0x8, 0x9, 0x1, 0xffffffffffffffff, 0x8, 0x100000000, 0x9, 0x1, 0x2, 0xa9, 0x1, 0xffffffffffffffff, 0x9, 0x5, 0x4, 0x0, 0x8, 0x12b, 0x10001, 0x1, 0x6, 0x9, 0x9, 0x9, 0x80000000, 0x2, 0x3, 0xfffffffffffffffb, 0x271a, 0x0, 0x8, 0xff, 0x7, 0x4000000000000008, 0xa, 0x33, 0x2, 0x1bde, 0xfff, 0x3, 0x38000000000, 0xfffffffffffffe2d, 0x1, 0x5, 0x66fd]}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c}) 8.483059075s ago: executing program 3 (id=837): openat$autofs(0xffffffffffffff9c, 0x0, 0xcd40, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) shutdown(r2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$vivid(&(0x7f0000001240), 0x3, 0x2) gettid() iopl(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) 7.386538863s ago: executing program 3 (id=838): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0), 0x1, 0xa10, &(0x7f0000001540)="$eJzs3U2MG1cdAPBn73rTfJQ4JaFLGtqEQls+uttslvARQVM1F6Km6q1SxSVK0xKRBkQqQasekpy40aoKVz7EqZcKEBK9oKgnLpVoJC49FQ4ciIJUiQMUkkXrfc/r/cfW2Jvser3+/aTZ55n/s98b73g8npn3XgLGVr31d35+upbS5XfePPaPh/6+dXHJ4+0czdbfyY65Rkqplucnw+t9OLGU3vjotVPd0lqaa/0t8+np6+3nbk8pXUj705XUTHsvX33jvbmnTlw8funA+28dubY2aw8AAOPlmStH5vf89c/37fr47fuPpi3t5eX4vJnnd+Tj/qP5wL8c/9fTyvlax9RpKuSbzFM95Jvokq+znEbIN9mj/Knwuo0e+bZUlD/RsazbesMoK9txM9XqMyvm6/WZmaXf5Kn1u36qNnPuzNkXzg+posAd968HUkr7TSbTOE4LO4e9BwJYEq8X3uJCPLNwe9qvNtlf+defqHd/PtwB6739K3+0yv/1RXsc7pzNujWV9Sqfox15Pl5HiPcvDfr5L68Xr0c0+qxnr+sIo3J9oVc9J9a5HqvVq/5xu9isvpnT8j58K8Q7Pz/xfzoq/2Ogu387/28yje20MOwdELBhxfvmFrISj/f1xfiWivhdFfGtFfFtFfHtFXEYZ797+afp9dry7/z4m37Q82HlPNvdOf3EgPWJ5yMHLT/e9zuo2y0/3k8MG9kfTj57+mvPP3d16f7/2uL237rl/2be3vfnfM382bqSN/dyvjCeV1++9/+ZFeXUe+S7J9Tn7i75W493r8xX2738OqljP3NLPaZXPm9nr3z7VuZrhnxb83RXqG88PtkWnleOP8p+tbxfk2F9G2E9pkI9yn5lV05jPWA1yvbY6/7/sn1Op0bthTNnTz+W58t2+qeJxpbF5QfXud7A7eu3/c90Wtn+Z0d7eaPeuV/Yuby81rlfaIblcz2WH8rz5XvuuxNbW8tnTn3/7PN3euVhzJ1/5dXvnTx79vQPPfDAAw/aD4a9ZwLW2uzLL/1g9vwrrz565qWTL55+8fS5Q4cPH5qbO/z1Q/OzreP62c6je2AzWf7SH3ZNAAAAAAAAAAAAgH796Pixq39596sfLLX/X27/V9r/lzt/S/v/n4T2/7GdfGkHX9oB7uoSb+UJHaxOhXyNPH0y1Hd3KGdPeN6nctoexy+3/y/FxX5dS33uDctj/70lX+hO4Jb+UqZCHyRxvMDP5vRSTn+VYIhqW7svzmlV/9ZlWy/9U+iXYjSV/1vZGko/JqX9d69+ncr+f9c61JE7bz2aEw57HYHu/qn/b5NpbKeFBaN4ABvDsMf/LOc9S3ruj9++a3Eq2a4/sXJ/Gfsvhdux0cefVP7mGv+zPf5d3/u/MGJec3Xl/ufn1z7oKDbt7bf8uP6lH+jdg5X/cS6/rM3Dqb/yF34Zyo8XhPr031D+tj7Lv2X9962u/P/l8svb9siD/Za/VONafWU94nnjcv0vnjcuboT1L317Drz+qxyo8WYuH8bZqIwzO6hRGf+3l3gfxlfyfNkRlvsc4ngng9a/3F9Rvgf2hNevVXy/bfbxfy+uY12G4Rs5rfo8lPF/y/bY7DJf75hvdHlvN+u+BkbVh67/mUxjOy0sLKztCa0KQy2cob//w/6dMOzyh/3+V4nj/8Zj+Dj+b4zH8X9jPI7/G+NxfL0Yj+P/xvczjv8b4/eG143jA09XxD9dEd9bEb+vIr6vIv6ZiviBivj9FfEHKuL3VMQfrIh/riL++Yr4QxXxRyriX6iIb3alPcq4rj+Ms9g+z+cfxke5/tPr87+7Ig6Mrp+9ffDJ5377neZS+/+p9vmQch3vaJ7fn387/zjPx+veqWN+MfZunv9biG/08x0wTmL/GfH7/eGKODC6yn1ePt8whmrde+zpt9+qXsf5jJYv5vRLOf1yTh/N6UxOZ3N6MKdz61Q/1saTv/n9kddry7/3d4Z4v/eTx/ZAsZ+oQ33WJ54fGPR+9tiP36But/xVNgcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYmnrr7/z8dC2ly++8eezZE2dmF5c83s7RbP2d7JhrtJ+X0mM5ncjpL/KDGx+9dqozvZnTWppLtVRrL09PX2+XtD2ldCHtT1dSM+29fPWN9+aeOnHx+KUD77915NravQMAAACw+f0/AAD//8MLDok=") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f00000003c0)=""/34) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000080)={{0x4, 0x6, 0x8, 0xa, 'syz0\x00', 0x75f}, 0x1, [0x0, 0x5, 0x7, 0x8000, 0x9, 0x8, 0x7ff, 0xfe, 0x5, 0x47f1, 0x2, 0x8, 0x5, 0x7, 0x1, 0x8, 0x0, 0x8000000000000001, 0x81, 0x1, 0x8000000000000000, 0xfff, 0x8, 0x1, 0xbddb, 0xb74, 0xe, 0x14, 0x567, 0x9, 0x0, 0x5, 0xcc, 0x81, 0xea, 0x80000000, 0x8687, 0x0, 0x3, 0x2e, 0x1, 0xab91, 0x2d5, 0xacc5f34, 0x8e, 0x6, 0x800, 0x0, 0x5, 0x2, 0x5, 0x3, 0x3, 0x100000000, 0x9a, 0x9, 0x0, 0x8, 0x2, 0x7, 0x1, 0x8, 0xfffffffffffffff2, 0x5, 0x1, 0x0, 0x7fffffff, 0xc, 0x7, 0xb, 0xfffffffffffffffd, 0x2, 0xcb5c, 0x2, 0x2, 0x8, 0x1, 0x80, 0xb1, 0x5, 0x26, 0x3, 0x8, 0x9, 0x1, 0xffffffffffffffff, 0x8, 0x100000000, 0x9, 0x1, 0x2, 0xa9, 0x1, 0xffffffffffffffff, 0x9, 0x5, 0x4, 0x0, 0x8, 0x12b, 0x10001, 0x1, 0x6, 0x9, 0x9, 0x9, 0x80000000, 0x2, 0x3, 0xfffffffffffffffb, 0x271a, 0x0, 0x8, 0xff, 0x7, 0x4000000000000008, 0xa, 0x33, 0x2, 0x1bde, 0xfff, 0x3, 0x38000000000, 0xfffffffffffffe2d, 0x1, 0x5, 0x66fd]}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c}) 6.977844176s ago: executing program 0 (id=839): openat$autofs(0xffffffffffffff9c, 0x0, 0xcd40, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) shutdown(r2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$vivid(&(0x7f0000001240), 0x3, 0x2) gettid() iopl(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) 6.649138913s ago: executing program 1 (id=840): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x803, 0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x24000000) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) pipe2$9p(&(0x7f0000000300), 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 5.856910807s ago: executing program 3 (id=841): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) pipe2$9p(0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x5000) read$FUSE(r3, 0x0, 0x0) 5.786024083s ago: executing program 2 (id=842): syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x0, 0x26}, 0x28) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000002c0)=0xefb) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0x1000000d}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xb8) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 5.715081488s ago: executing program 0 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_uring_setup(0x3450, &(0x7f0000000240)={0x0, 0xad12, 0x0, 0x4, 0xffff7ffb}) unshare(0x26020280) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r3, &(0x7f0000000500), 0x100000000000031a) add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@grpquota}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendto$packet(r5, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @link_local}, 0x14) 3.979238958s ago: executing program 2 (id=844): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0xfec3) keyctl$read(0xb, 0x0, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f00000000c0)={0x3, r4, 0x2000000, 0x401, 0xa, 0x1ff, 0x1}) 3.409966144s ago: executing program 1 (id=845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000002cc0)={0x401, 0x101, 0x4, 0x7, 0x990}, 0x14) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0xff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b0732306c090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb000000002f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d6ced5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed700129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb21fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x800, 0x0, 0x3, 0x41298, r4, 0x5, '\x00', 0x0, r7, 0x5, 0x4, 0x5, 0xf}, 0x50) mkdir(0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.373551777s ago: executing program 0 (id=846): openat$autofs(0xffffffffffffff9c, 0x0, 0xcd40, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) shutdown(r2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$vivid(&(0x7f0000001240), 0x3, 0x2) gettid() iopl(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) 2.458963711s ago: executing program 0 (id=847): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x288a80, 0x0) add_key$user(&(0x7f00000001c0), 0x0, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) open_tree(0xffffffffffffffff, 0x0, 0x81301) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c830750071000100020204000300f8"], 0x7a) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup(r4) 1.361872209s ago: executing program 1 (id=848): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x8b1fb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet6(r0, 0x0, 0x0, 0x3404c8d4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000402, &(0x7f00000003c0)={'trans=rdma,', {'port', 0x3d, 0x4e1f}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x4}}, {@timeout={'timeout', 0x3d, 0x9}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '(8+:'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}, {@subj_role={'subj_role', 0x3d, '/dev/fuse\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/fuse\x00'}}, {@dont_hash}, {@appraise}]}}) 345.216382ms ago: executing program 0 (id=849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0x6c, r1, 0x402, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000001, @mcast1, 0x7a}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff8000}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x22}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x802) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x4, 0x4, 0x644, 0xffffffff, 0x100, 0x3f8, 0x0, 0xfeffffff, 0xffffffff, 0x57c, 0x57c, 0x57c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xdc, 0x100, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @REJECT={0x24}}, {{@ipv6={@private2, @empty, [], [], 'pimreg\x00', 'batadv_slave_1\x00'}, 0x0, 0x2d4, 0x2f8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1000}}]}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0x160, 0x184, 0x0, {}, [@common=@frag={{0x30}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6a0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="a01d432a8fc898ed85c1aa68e1e7d3e2874b1357c9dce87f6f4c5ad203a7385415d49eeb76ef6436311d431404c6755eee43b4634640dc031df91404c9f80618ed7c03054b948da28662bcd051ed0a06a5a9ea633708642879dd5e0b7a5993f87fa318f3a5c727a0997e2bd938ee35f3c2c2", @ANYRES32=r3, @ANYRESOCT=r3, @ANYRESOCT=r3, @ANYRES8=r3], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xfffffffffffffdb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30}, 0x50) listen(r2, 0xc4d) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) 0s ago: executing program 3 (id=850): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0), 0x1, 0xa10, &(0x7f0000001540)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f00000003c0)=""/34) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000080)={{0x4, 0x6, 0x8, 0xa, 'syz0\x00', 0x75f}, 0x1, [0x0, 0x5, 0x7, 0x8000, 0x9, 0x8, 0x7ff, 0xfe, 0x5, 0x47f1, 0x2, 0x8, 0x5, 0x7, 0x1, 0x8, 0x0, 0x8000000000000001, 0x81, 0x1, 0x8000000000000000, 0xfff, 0x8, 0x1, 0xbddb, 0xb74, 0xe, 0x14, 0x567, 0x9, 0x0, 0x5, 0xcc, 0x81, 0xea, 0x80000000, 0x8687, 0x0, 0x3, 0x2e, 0x1, 0xab91, 0x2d5, 0xacc5f34, 0x8e, 0x6, 0x800, 0x0, 0x5, 0x2, 0x5, 0x3, 0x3, 0x100000000, 0x9a, 0x9, 0x0, 0x8, 0x2, 0x7, 0x1, 0x8, 0xfffffffffffffff2, 0x5, 0x1, 0x0, 0x7fffffff, 0xc, 0x7, 0xb, 0xfffffffffffffffd, 0x2, 0xcb5c, 0x2, 0x2, 0x8, 0x1, 0x80, 0xb1, 0x5, 0x26, 0x3, 0x8, 0x9, 0x1, 0xffffffffffffffff, 0x8, 0x100000000, 0x9, 0x1, 0x2, 0xa9, 0x1, 0xffffffffffffffff, 0x9, 0x5, 0x4, 0x0, 0x8, 0x12b, 0x10001, 0x1, 0x6, 0x9, 0x9, 0x9, 0x80000000, 0x2, 0x3, 0xfffffffffffffffb, 0x271a, 0x0, 0x8, 0xff, 0x7, 0x4000000000000008, 0xa, 0x33, 0x2, 0x1bde, 0xfff, 0x3, 0x38000000000, 0xfffffffffffffe2d, 0x1, 0x5, 0x66fd]}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c}) kernel console output (not intermixed with test programs): 10][ T6893] ? stack_trace_save+0x9c/0xe0 [ 210.432383][ T6893] ? zone_watermark_ok_safe+0x230/0x230 [ 210.437959][ T6893] ? kasan_set_track+0x5f/0x70 [ 210.442740][ T6893] ? kasan_set_track+0x4e/0x70 [ 210.447517][ T6893] ? __kasan_kmalloc+0x8f/0xa0 [ 210.452295][ T6893] ? xsk_init_queue+0xb0/0x110 [ 210.457069][ T6893] ? xsk_setsockopt+0x43c/0x6f0 [ 210.461939][ T6893] ? do_sock_setsockopt+0x175/0x1a0 [ 210.467163][ T6893] ? __x64_sys_setsockopt+0x184/0x200 [ 210.472557][ T6893] __vmalloc_node_range+0x126/0x1320 [ 210.477894][ T6893] ? free_vm_area+0x50/0x50 [ 210.482430][ T6893] vmalloc_user+0x74/0x80 [ 210.486780][ T6893] ? xskq_create+0xbf/0x170 [ 210.491298][ T6893] xskq_create+0xbf/0x170 [ 210.495645][ T6893] xsk_init_queue+0xb0/0x110 [ 210.500255][ T6893] xsk_setsockopt+0x43c/0x6f0 [ 210.504959][ T6893] ? xsk_poll+0x670/0x670 [ 210.509316][ T6893] ? __fget_files+0x28/0x4d0 [ 210.513926][ T6893] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 210.519494][ T6893] ? security_socket_setsockopt+0x7e/0xa0 [ 210.525231][ T6893] ? xsk_poll+0x670/0x670 [ 210.529585][ T6893] do_sock_setsockopt+0x175/0x1a0 [ 210.534631][ T6893] ? __fdget+0x180/0x210 [ 210.538893][ T6893] __x64_sys_setsockopt+0x184/0x200 [ 210.544114][ T6893] do_syscall_64+0x55/0xb0 [ 210.548545][ T6893] ? clear_bhb_loop+0x40/0x90 [ 210.553230][ T6893] ? clear_bhb_loop+0x40/0x90 [ 210.557919][ T6893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.563842][ T6893] RIP: 0033:0x7f7beff8ebe9 [ 210.568281][ T6893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.587911][ T6893] RSP: 002b:00007f7bf0d2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 210.596350][ T6893] RAX: ffffffffffffffda RBX: 00007f7bf01b6090 RCX: 00007f7beff8ebe9 [ 210.604340][ T6893] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 210.612325][ T6893] RBP: 00007f7bf0011e19 R08: 0000000000000004 R09: 0000000000000000 [ 210.620308][ T6893] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.628298][ T6893] R13: 00007f7bf01b6128 R14: 00007f7bf01b6090 R15: 00007fff55a7a188 [ 210.636316][ T6893] [ 210.640859][ T6893] Mem-Info: [ 210.644050][ T6893] active_anon:11834 inactive_anon:0 isolated_anon:0 [ 210.644050][ T6893] active_file:976 inactive_file:39654 isolated_file:0 [ 210.644050][ T6893] unevictable:2728 dirty:287 writeback:0 [ 210.644050][ T6893] slab_reclaimable:10353 slab_unreclaimable:94074 [ 210.644050][ T6893] mapped:26444 shmem:9101 pagetables:586 [ 210.644050][ T6893] sec_pagetables:0 bounce:0 [ 210.644050][ T6893] kernel_misc_reclaimable:0 [ 210.644050][ T6893] free:1352190 free_pcp:10505 free_cma:0 [ 210.689535][ T6893] Node 0 active_anon:47336kB inactive_anon:0kB active_file:3904kB inactive_file:158412kB unevictable:9376kB isolated(anon):0kB isolated(file):0kB mapped:105776kB dirty:1144kB writeback:0kB shmem:34868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11556kB pagetables:2344kB sec_pagetables:0kB all_unreclaimable? no [ 210.722842][ T6893] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 210.753914][ T6893] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 210.781465][ T6893] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 210.787742][ T6893] Node 0 DMA32 free:1498724kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:47188kB inactive_anon:0kB active_file:3904kB inactive_file:157092kB unevictable:9376kB writepending:1144kB present:3129332kB managed:2589600kB mlocked:7840kB bounce:0kB free_pcp:20632kB local_pcp:4368kB free_cma:0kB [ 210.819615][ T6893] lowmem_reserve[]: 0 0 1 1 1 [ 210.824696][ T6893] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 210.852165][ T6893] lowmem_reserve[]: 0 0 0 0 0 [ 210.857139][ T6893] Node 1 Normal free:3894668kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21440kB local_pcp:11040kB free_cma:0kB [ 210.886770][ T6893] lowmem_reserve[]: 0 0 0 0 0 [ 210.891788][ T6893] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 210.905065][ T6893] Node 0 DMA32: 797*4kB (UE) 970*8kB (UME) 470*16kB (UME) 118*32kB (UE) 14*64kB (UE) 2*128kB (U) 1*256kB (E) 5*512kB (UME) 4*1024kB (ME) 3*2048kB (UM) 357*4096kB (UM) = 1498724kB [ 210.924659][ T6893] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 210.937092][ T6893] Node 1 Normal: 219*4kB (UME) 70*8kB (UME) 53*16kB (UME) 103*32kB (UME) 31*64kB (UME) 12*128kB (UME) 4*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 948*4096kB (ME) = 3894668kB [ 210.955602][ T6893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 210.965237][ T6893] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 210.974674][ T6893] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 210.984298][ T6893] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 210.993751][ T6893] 50255 total pagecache pages [ 210.998614][ T6893] 0 pages in swap cache [ 211.002786][ T6893] Free swap = 124448kB [ 211.007070][ T6893] Total swap = 124996kB [ 211.012251][ T6893] 2097051 pages RAM [ 211.016291][ T6893] 0 pages HighMem/MovableOnly [ 211.021016][ T6893] 416137 pages reserved [ 211.025223][ T6893] 0 pages cma reserved [ 211.374718][ T5801] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 211.962544][ T6898] loop1: detected capacity change from 0 to 512 [ 211.977478][ T6898] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.990563][ T6898] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 212.283970][ T6898] EXT4-fs (loop1): 1 truncate cleaned up [ 212.293029][ T6898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.004369][ T6909] netlink: 92 bytes leftover after parsing attributes in process `syz.0.214'. [ 213.349335][ T6916] loop0: detected capacity change from 0 to 2048 [ 213.448826][ T6916] NILFS (loop0): invalid segment: Inconsistency found [ 213.478888][ T6916] NILFS (loop0): trying rollback from an earlier position [ 213.606827][ T6916] NILFS (loop0): recovery complete [ 213.623060][ T6920] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.888487][ T6922] netlink: 'syz.1.215': attribute type 16 has an invalid length. [ 213.896414][ T6922] netlink: 'syz.1.215': attribute type 3 has an invalid length. [ 213.904198][ T6922] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.215'. [ 213.973486][ T6923] overlayfs: missing 'lowerdir' [ 217.121053][ T6946] loop3: detected capacity change from 0 to 40427 [ 217.207279][ T6946] F2FS-fs (loop3): Unrecognized mount option "18446744073709551615" or missing value [ 217.595508][ T6950] loop2: detected capacity change from 0 to 512 [ 217.602840][ T6950] EXT4-fs: Ignoring removed nobh option [ 217.638410][ T6950] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 218.286668][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.899311][ T6967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.227'. [ 218.908553][ T6967] netlink: del zone limit has 8 unknown bytes [ 225.381013][ T7025] loop2: detected capacity change from 0 to 40427 [ 226.285678][ T7025] F2FS-fs (loop2): Unrecognized mount option "18446744073709551615" or missing value [ 226.772719][ T7056] loop2: detected capacity change from 0 to 2048 [ 226.831667][ T7057] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 227.794532][ T7056] NILFS (loop2): invalid segment: Inconsistency found [ 227.858845][ T7056] NILFS (loop2): trying rollback from an earlier position [ 228.702834][ T7056] NILFS (loop2): recovery complete [ 228.779987][ T7066] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.341748][ T7071] loop0: detected capacity change from 0 to 32768 [ 229.349256][ T7071] XFS: ikeep mount option is deprecated. [ 229.427452][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.237'. [ 229.436488][ T7068] netlink: del zone limit has 8 unknown bytes [ 229.450450][ T7075] xt_socket: unknown flags 0x50 [ 229.463236][ T7075] overlayfs: missing 'lowerdir' [ 229.882582][ T7071] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 230.667124][ T7071] XFS (loop0): Ending clean mount [ 231.030476][ T7071] XFS (loop0): Quotacheck needed: Please wait. [ 231.072921][ T7071] XFS (loop0): Quotacheck: Done. [ 231.257808][ T7096] loop3: detected capacity change from 0 to 8 [ 232.881230][ T5789] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 235.093905][ T7116] loop0: detected capacity change from 0 to 1024 [ 236.193326][ T7112] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 236.273146][ T7113] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 236.335597][ T7113] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 236.359622][ T7113] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 238.227789][ T7142] netlink: 'syz.1.251': attribute type 11 has an invalid length. [ 240.927547][ T7152] loop3: detected capacity change from 0 to 512 [ 240.953903][ T7152] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 240.993799][ T7152] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 241.018278][ T7152] System zones: 1-12 [ 241.248563][ T7152] EXT4-fs (loop3): 1 truncate cleaned up [ 241.256027][ T7152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.657080][ T7163] loop1: detected capacity change from 0 to 128 [ 241.668576][ T7163] qnx6: invalid mount options. [ 242.183301][ T7171] netlink: 'syz.3.254': attribute type 21 has an invalid length. [ 242.678357][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.797690][ T7181] xt_socket: unknown flags 0x50 [ 243.805431][ T7181] overlayfs: missing 'lowerdir' [ 245.082342][ T7191] loop1: detected capacity change from 0 to 64 [ 246.929503][ T7205] loop1: detected capacity change from 0 to 164 [ 247.533199][ T7205] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 247.546460][ T7203] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 247.997408][ T7213] loop1: detected capacity change from 0 to 256 [ 248.016520][ T7213] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 248.027430][ T7213] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 248.073415][ T7213] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 249.420545][ T7221] loop1: detected capacity change from 0 to 512 [ 249.435568][ T7221] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.444330][ T7221] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 249.969002][ T7221] EXT4-fs (loop1): 1 truncate cleaned up [ 250.006983][ T7221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.507352][ T7221] netlink: 'syz.1.269': attribute type 16 has an invalid length. [ 250.515492][ T7221] netlink: 'syz.1.269': attribute type 3 has an invalid length. [ 250.523284][ T7221] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.269'. [ 251.121868][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.442170][ T7253] syz_tun: entered allmulticast mode [ 253.696536][ T7262] loop3: detected capacity change from 0 to 2048 [ 253.772471][ T7262] NILFS (loop3): invalid segment: Inconsistency found [ 253.790041][ T7262] NILFS (loop3): trying rollback from an earlier position [ 253.876652][ T7262] NILFS (loop3): recovery complete [ 253.908444][ T7265] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.502632][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 255.042611][ T7278] xt_socket: unknown flags 0x50 [ 255.104627][ T7278] overlayfs: missing 'lowerdir' [ 256.018651][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.025416][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.472290][ T7293] atomic_op ffff888025b1e198 conn xmit_atomic 0000000000000000 [ 257.709365][ T27] audit: type=1326 audit(1754635067.420:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7beff8ebe9 code=0x7ffc0000 [ 257.814462][ T27] audit: type=1326 audit(1754635067.420:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7beff8ebe9 code=0x7ffc0000 [ 257.887377][ T27] audit: type=1326 audit(1754635067.420:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7beff8ebe9 code=0x7ffc0000 [ 257.941267][ T7301] loop0: detected capacity change from 0 to 512 [ 257.965739][ T7301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 257.996305][ T7301] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 258.031180][ T27] audit: type=1326 audit(1754635067.420:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7beff8ebe9 code=0x7ffc0000 [ 258.063533][ T27] audit: type=1326 audit(1754635067.420:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7beff8ebe9 code=0x7ffc0000 [ 258.172266][ T7301] EXT4-fs (loop0): 1 truncate cleaned up [ 258.184729][ T27] audit: type=1326 audit(1754635067.420:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f7beff8ebe9 code=0x7ffc0000 [ 258.244480][ T27] audit: type=1326 audit(1754635067.500:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7beff8ebe9 code=0x7ffc0000 [ 258.871921][ T27] audit: type=1326 audit(1754635067.500:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7beff8ebe9 code=0x7ffc0000 [ 258.902237][ T7301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.323338][ T7312] loop3: detected capacity change from 0 to 2048 [ 259.382013][ T7312] NILFS (loop3): invalid segment: Inconsistency found [ 259.404848][ T7312] NILFS (loop3): trying rollback from an earlier position [ 259.509183][ T7314] loop1: detected capacity change from 0 to 2048 [ 259.509350][ T7312] NILFS (loop3): recovery complete [ 259.534625][ T5795] Bluetooth: hci3: command 0x0405 tx timeout [ 259.574687][ T7315] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.620804][ T7314] NILFS (loop1): invalid segment: Inconsistency found [ 259.701507][ T7314] NILFS (loop1): trying rollback from an earlier position [ 259.761437][ T7314] NILFS (loop1): recovery complete [ 259.910989][ T7319] netlink: 'syz.0.286': attribute type 16 has an invalid length. [ 259.918858][ T7319] netlink: 'syz.0.286': attribute type 3 has an invalid length. [ 259.926579][ T7319] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.286'. [ 260.163000][ T7322] xt_socket: unknown flags 0x50 [ 260.169846][ T7322] overlayfs: missing 'lowerdir' [ 260.328826][ T7324] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.770316][ T7328] xt_socket: unknown flags 0x50 [ 260.779760][ T7328] overlayfs: missing 'lowerdir' [ 260.905748][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.579516][ T7339] fuse: Unknown parameter '0xffffffffffffffff' [ 263.158522][ T7341] loop1: detected capacity change from 0 to 8 [ 263.182513][ T27] audit: type=1326 audit(1754635072.460:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7beff8ebe9 code=0x7ffc0000 [ 263.245586][ T7341] SQUASHFS error: xz decompression failed, data probably corrupt [ 263.253715][ T7341] SQUASHFS error: Failed to read block 0x108: -5 [ 263.260365][ T7341] SQUASHFS error: Unable to read metadata cache entry [106] [ 263.267755][ T7341] SQUASHFS error: Unable to read inode 0x11f [ 264.218941][ T7330] netlink: 'syz.3.291': attribute type 11 has an invalid length. [ 264.294649][ T5801] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 264.331774][ T27] audit: type=1326 audit(1754635072.460:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7beff8ebe9 code=0x7ffc0000 [ 264.362718][ T7338] loop1: detected capacity change from 0 to 512 [ 264.414940][ T27] audit: type=1326 audit(1754635072.460:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7beff8d457 code=0x7ffc0000 [ 264.444606][ T27] audit: type=1326 audit(1754635072.460:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7beff9038a code=0x7ffc0000 [ 264.469491][ T27] audit: type=1326 audit(1754635072.470:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7beff8ebe9 code=0x7ffc0000 [ 264.561264][ T27] audit: type=1326 audit(1754635072.470:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7beff8ebe9 code=0x7ffc0000 [ 264.638880][ T27] audit: type=1326 audit(1754635072.470:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7beff8ebe9 code=0x7ffc0000 [ 264.685701][ T27] audit: type=1326 audit(1754635072.470:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7beff8ebe9 code=0x7ffc0000 [ 264.689400][ T7338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.714502][ T27] audit: type=1326 audit(1754635072.470:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7beff8ebe9 code=0x7ffc0000 [ 264.720737][ T7338] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.790002][ T7351] Cannot find add_set index 0 as target [ 265.371022][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.404600][ T27] audit: type=1326 audit(1754635072.470:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7beff8ebe9 code=0x7ffc0000 [ 266.634116][ T7368] loop2: detected capacity change from 0 to 2048 [ 266.920826][ T7373] xt_socket: unknown flags 0x50 [ 267.006718][ T7369] overlayfs: missing 'lowerdir' [ 267.043632][ T7368] NILFS (loop2): invalid segment: Inconsistency found [ 267.051178][ T7368] NILFS (loop2): trying rollback from an earlier position [ 267.097601][ T7368] NILFS (loop2): recovery complete [ 267.141086][ T7375] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.361270][ T7376] loop1: detected capacity change from 0 to 4096 [ 267.595310][ T7380] xt_socket: unknown flags 0x50 [ 267.614470][ T7380] overlayfs: missing 'lowerdir' [ 267.804979][ T7382] xt_socket: unknown flags 0x50 [ 267.835011][ T7382] overlayfs: missing 'lowerdir' [ 268.224488][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 268.224516][ T27] audit: type=1326 audit(1754635078.080:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7353 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e0b8ebe9 code=0x7fc00000 [ 268.246824][ T7376] ntfs3: loop1: This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 268.246824][ T7376] Volume contains 64 bits run: vcn 0, lcn ffffffffff000000, len 7ff. [ 268.246824][ T7376] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 268.282157][ T7376] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 268.302742][ T7376] ntfs3: loop1: Failed to load $BadClus (-95). [ 268.686277][ T7386] loop1: detected capacity change from 0 to 256 [ 269.582458][ T7390] lo: entered promiscuous mode [ 269.589707][ T7390] tunl0: entered promiscuous mode [ 269.595740][ T7390] gre0: entered promiscuous mode [ 269.601669][ T7390] gretap0: entered promiscuous mode [ 269.609967][ T7390] erspan0: entered promiscuous mode [ 269.616029][ T7390] ip_vti0: entered promiscuous mode [ 269.622058][ T7390] ip6_vti0: entered promiscuous mode [ 269.629552][ T7390] sit0: entered promiscuous mode [ 269.636567][ T7390] ip6tnl0: entered promiscuous mode [ 269.642610][ T7390] ip6gre0: entered promiscuous mode [ 269.648958][ T7390] syz_tun: entered promiscuous mode [ 269.659185][ T7390] ip6gretap0: entered promiscuous mode [ 269.666049][ T7390] vcan0: entered promiscuous mode [ 269.671575][ T7390] bond0: entered promiscuous mode [ 269.676942][ T7390] bond_slave_0: entered promiscuous mode [ 269.682992][ T7390] bond_slave_1: entered promiscuous mode [ 269.692308][ T7390] dummy0: entered promiscuous mode [ 269.737104][ T7390] team0: entered promiscuous mode [ 269.742522][ T7390] team_slave_0: entered promiscuous mode [ 269.754435][ T7390] team_slave_1: entered promiscuous mode [ 269.869663][ T7390] nlmon0: entered promiscuous mode [ 269.876617][ T7390] caif0: entered promiscuous mode [ 269.881723][ T7390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.362071][ T7412] loop0: detected capacity change from 0 to 2048 [ 271.425167][ T7412] NILFS (loop0): invalid segment: Inconsistency found [ 271.432572][ T7412] NILFS (loop0): trying rollback from an earlier position [ 271.516224][ T7412] NILFS (loop0): recovery complete [ 271.554189][ T7416] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 271.922594][ T7417] loop3: detected capacity change from 0 to 2048 [ 272.175247][ T7420] xt_socket: unknown flags 0x50 [ 272.188168][ T7420] overlayfs: missing 'lowerdir' [ 272.495725][ T7417] NILFS (loop3): invalid segment: Inconsistency found [ 272.502571][ T7417] NILFS (loop3): trying rollback from an earlier position [ 272.575672][ T7417] NILFS (loop3): recovery complete [ 272.611912][ T7421] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 272.768900][ T7425] loop1: detected capacity change from 0 to 512 [ 272.776766][ T7425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 272.831163][ T7425] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 272.942089][ T7425] EXT4-fs (loop1): 1 truncate cleaned up [ 272.962019][ T7425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.177950][ T7432] xt_socket: unknown flags 0x50 [ 273.189648][ T7432] overlayfs: missing 'lowerdir' [ 273.457431][ T7434] netlink: 'syz.1.312': attribute type 16 has an invalid length. [ 273.465384][ T7434] netlink: 'syz.1.312': attribute type 3 has an invalid length. [ 273.473031][ T7434] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.312'. [ 274.996563][ T7448] binder: 7443:7448 ioctl c0306201 0 returned -14 [ 275.510503][ T7453] loop2: detected capacity change from 0 to 2048 [ 275.588197][ T7453] NILFS (loop2): invalid segment: Inconsistency found [ 275.605838][ T7453] NILFS (loop2): trying rollback from an earlier position [ 275.664587][ T7453] NILFS (loop2): recovery complete [ 275.677974][ T7457] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.929989][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.014106][ T7460] xt_socket: unknown flags 0x50 [ 276.026060][ T7460] overlayfs: missing 'lowerdir' [ 276.326440][ T7461] lo: entered promiscuous mode [ 276.344172][ T7461] tunl0: entered promiscuous mode [ 276.362628][ T7461] gre0: entered promiscuous mode [ 276.394793][ T7461] gretap0: entered promiscuous mode [ 276.444804][ T7461] erspan0: entered promiscuous mode [ 276.477048][ T7461] ip_vti0: entered promiscuous mode [ 276.483162][ T7461] ip6_vti0: entered promiscuous mode [ 276.527411][ T7461] sit0: entered promiscuous mode [ 276.571669][ T7461] ip6tnl0: entered promiscuous mode [ 276.577805][ T7461] ip6gre0: entered promiscuous mode [ 276.583854][ T7461] syz_tun: entered promiscuous mode [ 276.592706][ T7461] ip6gretap0: entered promiscuous mode [ 276.704380][ T7461] bridge0: entered promiscuous mode [ 276.728988][ T7461] vcan0: entered promiscuous mode [ 277.121949][ T7461] bond0: entered promiscuous mode [ 277.646326][ T7461] bond_slave_0: entered promiscuous mode [ 277.652427][ T7461] bond_slave_1: entered promiscuous mode [ 277.667748][ T7461] team0: entered promiscuous mode [ 277.672840][ T7461] team_slave_0: entered promiscuous mode [ 277.684731][ T7461] team_slave_1: entered promiscuous mode [ 277.694638][ T7461] dummy0: entered promiscuous mode [ 277.812796][ T7461] nlmon0: entered promiscuous mode [ 278.085539][ T7461] caif0: entered promiscuous mode [ 278.090629][ T7461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.107723][ T7474] loop0: detected capacity change from 0 to 2048 [ 278.138481][ T7474] NILFS (loop0): invalid segment: Inconsistency found [ 278.156555][ T7474] NILFS (loop0): trying rollback from an earlier position [ 278.236763][ T7474] NILFS (loop0): recovery complete [ 278.244549][ T7476] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.896574][ T7480] xt_socket: unknown flags 0x50 [ 278.904520][ T7480] overlayfs: missing 'lowerdir' [ 279.256385][ T7492] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 279.916873][ T7500] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 280.044074][ T7503] loop2: detected capacity change from 0 to 512 [ 280.064402][ T7503] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.119542][ T7503] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 280.332577][ T7503] EXT4-fs (loop2): 1 truncate cleaned up [ 280.340071][ T7503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.463460][ T7522] syz_tun: entered allmulticast mode [ 281.787943][ T7524] netlink: 'syz.2.327': attribute type 16 has an invalid length. [ 281.795730][ T7524] netlink: 'syz.2.327': attribute type 3 has an invalid length. [ 281.803495][ T7524] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.327'. [ 282.016297][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 282.813138][ T7535] loop0: detected capacity change from 0 to 4096 [ 282.893197][ T7535] ntfs3: loop0: This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 282.893197][ T7535] Volume contains 64 bits run: vcn 0, lcn ffffffffff000000, len 7ff. [ 282.893197][ T7535] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 283.096398][ T7535] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 283.153724][ T7535] ntfs3: loop0: Failed to load $BadClus (-95). [ 283.766563][ T7545] loop0: detected capacity change from 0 to 256 [ 284.116213][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 284.457929][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.761033][ T7549] loop2: detected capacity change from 0 to 2048 [ 284.807622][ T7549] NILFS (loop2): invalid segment: Inconsistency found [ 284.845082][ T7549] NILFS (loop2): trying rollback from an earlier position [ 284.876829][ T7549] NILFS (loop2): recovery complete [ 285.036907][ T7552] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.036228][ T7558] xt_socket: unknown flags 0x50 [ 286.047826][ T7558] overlayfs: missing 'lowerdir' [ 287.583124][ T7565] xt_socket: unknown flags 0x50 [ 287.596176][ T7565] overlayfs: missing 'lowerdir' [ 289.679046][ T7576] loop0: detected capacity change from 0 to 16 [ 289.748597][ T7576] erofs: (device loop0): mounted with root inode @ nid 36. [ 291.292695][ T7590] loop0: detected capacity change from 0 to 512 [ 291.526676][ T7590] EXT4-fs: Ignoring removed nomblk_io_submit option [ 291.535810][ T7590] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 291.709844][ T7590] EXT4-fs (loop0): 1 truncate cleaned up [ 291.716869][ T7590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.094547][ T7596] netlink: 'syz.0.343': attribute type 16 has an invalid length. [ 292.102540][ T7596] netlink: 'syz.0.343': attribute type 3 has an invalid length. [ 292.110268][ T7596] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.343'. [ 292.751520][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.839269][ T7600] loop1: detected capacity change from 0 to 2048 [ 292.856377][ T7600] NILFS (loop1): invalid segment: Inconsistency found [ 292.866384][ T7600] NILFS (loop1): trying rollback from an earlier position [ 293.173549][ T7600] NILFS (loop1): recovery complete [ 293.355274][ T7606] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.364097][ T7602] loop3: detected capacity change from 0 to 2048 [ 293.463221][ T7602] NILFS (loop3): invalid segment: Inconsistency found [ 293.493258][ T7602] NILFS (loop3): trying rollback from an earlier position [ 293.539405][ T7602] NILFS (loop3): recovery complete [ 293.598118][ T7607] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.921078][ T7610] xt_socket: unknown flags 0x50 [ 293.927914][ T7610] overlayfs: missing 'lowerdir' [ 294.071953][ T7612] xt_socket: unknown flags 0x50 [ 294.088113][ T7612] overlayfs: missing 'lowerdir' [ 294.475193][ T50] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 297.803841][ T7655] loop3: detected capacity change from 0 to 512 [ 297.814596][ T7655] EXT4-fs: Ignoring removed nomblk_io_submit option [ 297.853044][ T7655] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 297.874762][ T7655] EXT4-fs (loop3): 1 truncate cleaned up [ 297.884483][ T7655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.057605][ T7655] netlink: 'syz.3.355': attribute type 16 has an invalid length. [ 298.065451][ T7655] netlink: 'syz.3.355': attribute type 3 has an invalid length. [ 298.073208][ T7655] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.355'. [ 298.194215][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.348152][ T7660] loop0: detected capacity change from 0 to 2048 [ 298.359514][ T7660] NILFS (loop0): invalid segment: Inconsistency found [ 298.398034][ T7660] NILFS (loop0): trying rollback from an earlier position [ 298.499638][ T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 298.508735][ T50] Bluetooth: hci3: Injecting HCI hardware error event [ 298.517607][ T50] Bluetooth: hci3: hardware error 0x00 [ 298.553563][ T7663] netlink: 'syz.1.358': attribute type 1 has an invalid length. [ 298.567630][ T7660] NILFS (loop0): recovery complete [ 298.707009][ T7669] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 300.292402][ T7663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.360317][ T7678] xt_socket: unknown flags 0x50 [ 300.372051][ T7678] overlayfs: missing 'lowerdir' [ 300.694728][ T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 300.781818][ T7668] bond1: (slave veth3): Enslaving as an active interface with a down link [ 300.883671][ T7670] bond1: (slave veth0_to_bond): making interface the new active one [ 300.893629][ T27] audit: type=1326 audit(1754635110.767:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefceb8ebe9 code=0x7ffc0000 [ 300.961230][ T7670] veth0_to_bond: entered promiscuous mode [ 300.968727][ T7670] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 300.981377][ T27] audit: type=1326 audit(1754635110.767:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fefceb8ebe9 code=0x7ffc0000 [ 301.035178][ T7672] vlan2: entered allmulticast mode [ 301.062619][ T7672] veth1: entered allmulticast mode [ 301.069373][ T7672] veth1: entered promiscuous mode [ 301.075064][ T7672] veth1: left promiscuous mode [ 301.137000][ T7672] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 301.151129][ T27] audit: type=1326 audit(1754635111.027:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefceb8ebe9 code=0x7ffc0000 [ 301.482523][ T27] audit: type=1326 audit(1754635111.027:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefceb8ebe9 code=0x7ffc0000 [ 303.004156][ T7697] loop3: detected capacity change from 0 to 40427 [ 303.091104][ T7697] F2FS-fs (loop3): LFS is not compatible with checkpoint=disable [ 303.206237][ T7702] loop2: detected capacity change from 0 to 512 [ 303.439795][ T7702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 303.519974][ T7702] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 303.584817][ T7702] EXT4-fs (loop2): 1 truncate cleaned up [ 303.606560][ T7702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.946951][ T7702] netlink: 'syz.2.365': attribute type 16 has an invalid length. [ 303.954851][ T7702] netlink: 'syz.2.365': attribute type 3 has an invalid length. [ 303.962635][ T7702] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.365'. [ 304.038091][ T7711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.367'. [ 304.841307][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.194919][ T7717] loop1: detected capacity change from 0 to 2048 [ 305.202283][ T7713] loop3: detected capacity change from 0 to 4096 [ 305.226095][ T7717] NILFS (loop1): invalid segment: Inconsistency found [ 305.267676][ T7717] NILFS (loop1): trying rollback from an earlier position [ 305.322918][ T7717] NILFS (loop1): recovery complete [ 305.375819][ T7718] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.398977][ T7713] ntfs3: loop3: This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 305.398977][ T7713] Volume contains 64 bits run: vcn 0, lcn ffffffffff000000, len 7ff. [ 305.398977][ T7713] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 305.474641][ T7713] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 305.514177][ T7721] loop0: detected capacity change from 0 to 512 [ 305.521857][ T7721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 305.545492][ T7713] ntfs3: loop3: Failed to load $BadClus (-95). [ 305.557265][ T7721] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 305.689492][ T7721] EXT4-fs (loop0): 1 truncate cleaned up [ 305.704868][ T7721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.773696][ T7726] xt_socket: unknown flags 0x50 [ 305.785444][ T7726] overlayfs: missing 'lowerdir' [ 305.960764][ T7722] loop2: detected capacity change from 0 to 2048 [ 306.208657][ T7722] NILFS (loop2): invalid segment: Inconsistency found [ 306.215558][ T7722] NILFS (loop2): trying rollback from an earlier position [ 306.297369][ T7728] netlink: 'syz.0.370': attribute type 16 has an invalid length. [ 306.305329][ T7728] netlink: 'syz.0.370': attribute type 3 has an invalid length. [ 306.313233][ T7728] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.370'. [ 306.353924][ T7722] NILFS (loop2): recovery complete [ 306.400779][ T7729] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.471093][ T7737] xt_socket: unknown flags 0x50 [ 307.491516][ T7733] overlayfs: missing 'lowerdir' [ 308.407054][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.481878][ T7744] loop2: detected capacity change from 0 to 128 [ 308.492147][ T7744] EXT4-fs: Ignoring removed nobh option [ 309.192214][ T7744] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 309.204790][ T7744] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 309.457539][ T5786] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 312.285808][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 313.185913][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 313.209055][ T7776] macvtap1: entered promiscuous mode [ 313.216264][ T7776] macvtap1: entered allmulticast mode [ 313.259866][ T7776] team0: entered allmulticast mode [ 313.265112][ T7776] team_slave_0: entered allmulticast mode [ 313.436277][ T7776] team_slave_1: entered allmulticast mode [ 313.974613][ T7776] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 314.248219][ T7785] loop3: detected capacity change from 0 to 256 [ 314.265232][ T7785] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011ded, chksum : 0x9838888d, utbl_chksum : 0xe619d30d) [ 317.079164][ T7812] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.701221][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.707533][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.451344][ T7845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.399'. [ 322.334235][ T7859] xt_CT: You must specify a L4 protocol and not use inversions on it [ 323.558390][ T7852] IPv6: Can't replace route, no match found [ 323.618829][ T41] veth0_to_bond: left promiscuous mode [ 323.959102][ T7870] vxcan1: entered allmulticast mode [ 323.966088][ T7870] vxcan1: left allmulticast mode [ 325.048047][ T7875] sctp: [Deprecated]: syz.2.403 (pid 7875) Use of int in max_burst socket option deprecated. [ 325.048047][ T7875] Use struct sctp_assoc_value instead [ 325.895973][ T7883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.406'. [ 327.798431][ T7902] loop3: detected capacity change from 0 to 128 [ 327.808432][ T7902] EXT4-fs: Ignoring removed nobh option [ 328.525372][ T7902] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 328.538783][ T7902] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 328.743925][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 330.922912][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 330.933089][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 331.236839][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 331.243725][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 331.270204][ T7925] ceph: No mds server is up or the cluster is laggy [ 331.655337][ T7937] netlink: 'syz.1.418': attribute type 4 has an invalid length. [ 331.871913][ T7940] netlink: 76 bytes leftover after parsing attributes in process `syz.3.421'. [ 333.445036][ T7949] netlink: 'syz.3.423': attribute type 1 has an invalid length. [ 334.584966][ T7958] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 336.185229][ T7976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.430'. [ 337.827914][ T7983] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 337.834902][ T7983] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 338.029255][ T7991] loop0: detected capacity change from 0 to 2048 [ 338.041381][ T7991] NILFS (loop0): invalid segment: Inconsistency found [ 338.052678][ T7984] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 338.059321][ T7984] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 338.072816][ T7991] NILFS (loop0): trying rollback from an earlier position [ 338.135548][ T7991] NILFS (loop0): recovery complete [ 338.137694][ T7993] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 338.150778][ T7983] vhci_hcd vhci_hcd.0: Device attached [ 338.152420][ T7984] vhci_hcd vhci_hcd.0: Device attached [ 338.163820][ T7994] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 338.170450][ T7994] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 338.188298][ T7998] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 338.222786][ T5869] vhci_hcd: vhci_device speed not set [ 338.252063][ T7994] vhci_hcd vhci_hcd.0: Device attached [ 338.444550][ T7983] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(9) [ 338.451126][ T7983] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 338.455238][ T5869] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 338.469670][ T7983] vhci_hcd vhci_hcd.0: Device attached [ 338.685544][ T8008] xt_socket: unknown flags 0x50 [ 338.695340][ T8009] overlayfs: missing 'lowerdir' [ 339.159366][ T7984] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(19) [ 339.166026][ T7984] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 339.177198][ T7984] vhci_hcd vhci_hcd.0: Device attached [ 339.366501][ T7984] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 339.435242][ T7984] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 339.483727][ T7983] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 339.532655][ T7983] vhci_hcd vhci_hcd.0: port 0 already used [ 339.611867][ T7996] vhci_hcd: connection closed [ 339.616640][ T8002] vhci_hcd: connection closed [ 339.623182][ T8003] vhci_hcd: connection closed [ 339.635110][ T7992] vhci_hcd: connection closed [ 339.669379][ T7041] vhci_hcd: stop threads [ 339.678576][ T7986] vhci_hcd: connection reset by peer [ 339.686365][ T7041] vhci_hcd: release socket [ 339.690921][ T7041] vhci_hcd: disconnect device [ 339.697551][ T7041] vhci_hcd: stop threads [ 339.701818][ T7041] vhci_hcd: release socket [ 339.707593][ T7041] vhci_hcd: disconnect device [ 339.732830][ T7041] vhci_hcd: stop threads [ 339.738135][ T7041] vhci_hcd: release socket [ 339.744382][ T7041] vhci_hcd: disconnect device [ 339.762830][ T7041] vhci_hcd: stop threads [ 339.767130][ T7041] vhci_hcd: release socket [ 339.792859][ T7041] vhci_hcd: disconnect device [ 339.803484][ T7041] vhci_hcd: stop threads [ 339.807803][ T7041] vhci_hcd: release socket [ 339.844133][ T7041] vhci_hcd: disconnect device [ 340.242923][ T8020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.435'. [ 343.111683][ T8031] loop3: detected capacity change from 0 to 2048 [ 343.156494][ T8031] NILFS (loop3): invalid segment: Inconsistency found [ 343.176749][ T8031] NILFS (loop3): trying rollback from an earlier position [ 343.200330][ T8031] NILFS (loop3): recovery complete [ 343.208544][ T8038] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 343.554571][ T8043] xt_socket: unknown flags 0x50 [ 343.566579][ T8043] overlayfs: missing 'lowerdir' [ 344.375987][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 344.657198][ T5869] vhci_hcd: vhci_device speed not set [ 344.771828][ T8050] loop2: detected capacity change from 0 to 2048 [ 345.152009][ T8050] NILFS (loop2): invalid segment: Inconsistency found [ 345.197439][ T8050] NILFS (loop2): trying rollback from an earlier position [ 345.204349][ T8058] loop3: detected capacity change from 0 to 2048 [ 345.227224][ T8058] NILFS (loop3): invalid segment: Inconsistency found [ 345.231136][ T8050] NILFS (loop2): recovery complete [ 345.234623][ T8058] NILFS (loop3): trying rollback from an earlier position [ 345.276204][ T8058] NILFS (loop3): recovery complete [ 345.292053][ T8059] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 345.349843][ T8062] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 345.817985][ T8066] xt_socket: unknown flags 0x50 [ 345.824930][ T8066] overlayfs: missing 'lowerdir' [ 345.957352][ T8068] xt_socket: unknown flags 0x50 [ 345.969377][ T8068] overlayfs: missing 'lowerdir' [ 346.849382][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 346.855521][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 346.913447][ T8080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.448'. [ 347.673848][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 347.845893][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 347.851942][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 348.060946][ T8073] ceph: No mds server is up or the cluster is laggy [ 349.680510][ T8089] loop2: detected capacity change from 0 to 40427 [ 349.690055][ T8089] F2FS-fs (loop2): LFS is not compatible with checkpoint=disable [ 350.043239][ T8087] loop2: detected capacity change from 0 to 40427 [ 350.094488][ T8087] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 350.102310][ T8087] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 350.146740][ T8087] F2FS-fs (loop2): invalid crc value [ 350.232000][ T8087] F2FS-fs (loop2): Found nat_bits in checkpoint [ 350.295775][ T8087] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 350.303063][ T8087] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 350.342166][ T27] audit: type=1800 audit(1754635160.201:128): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.450" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 351.320555][ T8101] unsupported nlmsg_type 40 [ 352.632060][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 353.154604][ T8115] loop1: detected capacity change from 0 to 2048 [ 353.313876][ T8115] NILFS (loop1): invalid segment: Inconsistency found [ 353.548908][ T8115] NILFS (loop1): trying rollback from an earlier position [ 353.905991][ T8115] NILFS (loop1): recovery complete [ 353.950772][ T8121] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 354.642335][ T8125] xt_socket: unknown flags 0x50 [ 354.649182][ T8125] overlayfs: missing 'lowerdir' [ 355.579600][ T8133] nvme_fabrics: missing parameter 'transport=%s' [ 355.586619][ T8133] nvme_fabrics: missing parameter 'nqn=%s' [ 356.275528][ T8149] loop1: detected capacity change from 0 to 256 [ 356.386088][ T8149] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 356.397003][ T8149] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 356.413892][ T8149] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 356.457323][ T27] audit: type=1800 audit(1754635166.310:129): pid=8147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.460" name="file1" dev="loop1" ino=1048600 res=0 errno=0 [ 356.544129][ T8146] loop2: detected capacity change from 0 to 2048 [ 356.562103][ T8146] NILFS (loop2): invalid segment: Inconsistency found [ 356.569358][ T8146] NILFS (loop2): trying rollback from an earlier position [ 356.593707][ T8146] NILFS (loop2): recovery complete [ 356.603335][ T8151] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 357.400114][ T8157] xt_socket: unknown flags 0x50 [ 357.414059][ T8157] overlayfs: missing 'lowerdir' [ 358.327817][ T8167] netlink: 'syz.0.464': attribute type 4 has an invalid length. [ 358.455310][ T5869] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 360.236225][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 360.770922][ T5869] usb 4-1: device descriptor read/all, error -71 [ 360.996611][ T8177] sctp: [Deprecated]: syz.0.467 (pid 8177) Use of int in max_burst socket option deprecated. [ 360.996611][ T8177] Use struct sctp_assoc_value instead [ 361.677610][ T8189] loop2: detected capacity change from 0 to 2048 [ 361.712886][ T8189] NILFS (loop2): invalid segment: Inconsistency found [ 361.759626][ T8189] NILFS (loop2): trying rollback from an earlier position [ 361.821902][ T8192] netlink: 'syz.3.470': attribute type 20 has an invalid length. [ 361.830024][ T8189] NILFS (loop2): recovery complete [ 361.879632][ T8195] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.466412][ T8191] dvmrp17: entered allmulticast mode [ 362.488127][ T8191] dvmrp17: left allmulticast mode [ 362.889632][ T8199] xt_socket: unknown flags 0x50 [ 362.897469][ T8199] overlayfs: missing 'lowerdir' [ 364.311586][ T8215] loop2: detected capacity change from 0 to 2048 [ 364.343939][ T8215] NILFS (loop2): invalid segment: Inconsistency found [ 364.364606][ T8215] NILFS (loop2): trying rollback from an earlier position [ 364.435373][ T8215] NILFS (loop2): recovery complete [ 364.447448][ T8216] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 364.702727][ T8218] xt_socket: unknown flags 0x50 [ 364.714848][ T8218] overlayfs: missing 'lowerdir' [ 365.109120][ T8222] loop0: detected capacity change from 0 to 2048 [ 365.127682][ T8222] NILFS (loop0): invalid segment: Inconsistency found [ 365.144849][ T8222] NILFS (loop0): trying rollback from an earlier position [ 365.165281][ T8222] NILFS (loop0): recovery complete [ 365.341485][ T8228] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 365.457716][ T8230] netlink: 'syz.2.476': attribute type 4 has an invalid length. [ 366.357454][ T8233] xt_socket: unknown flags 0x50 [ 366.372182][ T8233] overlayfs: missing 'lowerdir' [ 367.981568][ T8250] loop2: detected capacity change from 0 to 2048 [ 368.015814][ T8250] NILFS (loop2): invalid segment: Inconsistency found [ 368.025261][ T8253] loop1: detected capacity change from 0 to 2048 [ 368.032342][ T8250] NILFS (loop2): trying rollback from an earlier position [ 368.283061][ T8250] NILFS (loop2): recovery complete [ 368.301697][ T8253] NILFS (loop1): invalid segment: Inconsistency found [ 368.473035][ T8253] NILFS (loop1): trying rollback from an earlier position [ 368.520391][ T8256] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 368.760057][ T8253] NILFS (loop1): recovery complete [ 368.978593][ T8258] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 369.070999][ T8259] xt_socket: unknown flags 0x50 [ 369.082811][ T8259] overlayfs: missing 'lowerdir' [ 369.557171][ T8264] xt_socket: unknown flags 0x50 [ 369.568864][ T8264] overlayfs: missing 'lowerdir' [ 370.036115][ T8268] loop2: detected capacity change from 0 to 2048 [ 370.079929][ T8268] NILFS (loop2): invalid segment: Inconsistency found [ 370.115680][ T8268] NILFS (loop2): trying rollback from an earlier position [ 370.169873][ T8268] NILFS (loop2): recovery complete [ 370.192552][ T8270] loop1: detected capacity change from 0 to 2048 [ 370.201625][ T8272] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 370.294543][ T8270] NILFS (loop1): invalid segment: Inconsistency found [ 370.306246][ T8270] NILFS (loop1): trying rollback from an earlier position [ 370.452586][ T8270] NILFS (loop1): recovery complete [ 370.731856][ T8281] netlink: 'syz.3.488': attribute type 4 has an invalid length. [ 370.944652][ T8282] xt_socket: unknown flags 0x50 [ 370.951634][ T8282] overlayfs: missing 'lowerdir' [ 371.268571][ T8285] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 371.764919][ T8293] xt_socket: unknown flags 0x50 [ 371.778624][ T8293] overlayfs: missing 'lowerdir' [ 372.147906][ T8297] loop3: detected capacity change from 0 to 512 [ 372.174168][ T8297] EXT4-fs: Ignoring removed nomblk_io_submit option [ 372.216407][ T8297] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 372.235265][ T8297] EXT4-fs (loop3): 1 truncate cleaned up [ 372.248287][ T8297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.783890][ T8306] netlink: 'syz.3.492': attribute type 16 has an invalid length. [ 372.791780][ T8306] netlink: 'syz.3.492': attribute type 3 has an invalid length. [ 372.799483][ T8306] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.492'. [ 373.262838][ T8312] loop0: detected capacity change from 0 to 2048 [ 373.301217][ T8312] NILFS (loop0): invalid segment: Inconsistency found [ 373.328448][ T8312] NILFS (loop0): trying rollback from an earlier position [ 373.372483][ T8312] NILFS (loop0): recovery complete [ 373.375604][ T8310] loop2: detected capacity change from 0 to 2048 [ 373.410242][ T8314] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 373.413881][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.506059][ T8315] overlayfs: failed to resolve 'rootcontext=root': -2 [ 373.515168][ T8310] NILFS (loop2): invalid segment: Inconsistency found [ 373.707849][ T8310] NILFS (loop2): trying rollback from an earlier position [ 373.989736][ T8310] NILFS (loop2): recovery complete [ 374.197022][ T8317] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 374.624650][ T8325] xt_socket: unknown flags 0x50 [ 374.638502][ T8320] overlayfs: missing 'lowerdir' [ 375.164911][ T8331] xt_socket: unknown flags 0x50 [ 375.177478][ T8331] overlayfs: missing 'lowerdir' [ 376.569866][ T8341] loop1: detected capacity change from 0 to 2048 [ 376.877634][ T8341] NILFS (loop1): invalid segment: Inconsistency found [ 376.914175][ T8341] NILFS (loop1): trying rollback from an earlier position [ 376.919253][ T8338] loop2: detected capacity change from 0 to 2048 [ 376.947893][ T8342] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 378.245491][ T8338] NILFS (loop2): invalid segment: Inconsistency found [ 378.248372][ T8341] NILFS (loop1): recovery complete [ 378.258694][ T8338] NILFS (loop2): trying rollback from an earlier position [ 378.282650][ T8347] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 378.307890][ T8338] NILFS (loop2): recovery complete [ 378.319904][ T8348] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 378.587895][ T8350] xt_socket: unknown flags 0x50 [ 378.599759][ T8350] overlayfs: missing 'lowerdir' [ 379.051287][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.058074][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.170292][ T8353] xt_socket: unknown flags 0x50 [ 379.181846][ T8353] overlayfs: missing 'lowerdir' [ 380.623431][ T42] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 380.847915][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 381.227159][ T8368] loop2: detected capacity change from 0 to 1024 [ 381.967317][ T42] usb 2-1: config 1 has an invalid interface number: 76 but max is 0 [ 381.988598][ T42] usb 2-1: config 1 has no interface number 0 [ 382.006610][ T42] usb 2-1: config 1 interface 76 has no altsetting 0 [ 382.376119][ T8372] loop2: detected capacity change from 0 to 2048 [ 382.410112][ T8372] NILFS (loop2): invalid segment: Inconsistency found [ 382.438566][ T8372] NILFS (loop2): trying rollback from an earlier position [ 382.563106][ T8376] loop3: detected capacity change from 0 to 256 [ 382.749022][ T8376] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 382.759890][ T8376] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 382.825039][ T8376] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 382.960992][ T8372] NILFS (loop2): recovery complete [ 383.027916][ T8377] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.028156][ T42] usb 2-1: string descriptor 0 read error: -71 [ 383.045212][ T42] usb 2-1: New USB device found, idVendor=2692, idProduct=9005, bcdDevice=aa.0a [ 383.054408][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.292141][ T8381] xt_socket: unknown flags 0x50 [ 383.304065][ T8381] overlayfs: missing 'lowerdir' [ 383.659430][ T42] usb 2-1: can't set config #1, error -71 [ 383.674687][ T42] usb 2-1: USB disconnect, device number 2 [ 383.858413][ T8385] loop2: detected capacity change from 0 to 256 [ 383.867046][ T8385] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 383.884714][ T8385] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 383.912544][ T8385] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 385.473577][ T8393] loop3: detected capacity change from 0 to 2048 [ 385.524988][ T8393] NILFS (loop3): invalid segment: Inconsistency found [ 385.542475][ T8393] NILFS (loop3): trying rollback from an earlier position [ 385.577946][ T8393] NILFS (loop3): recovery complete [ 385.596946][ T8399] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 386.976063][ T8406] xt_socket: unknown flags 0x50 [ 386.987926][ T8406] overlayfs: missing 'lowerdir' [ 387.537591][ T8397] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 389.393071][ T8424] loop2: detected capacity change from 0 to 2048 [ 389.903915][ T8424] NILFS (loop2): invalid segment: Inconsistency found [ 389.991469][ T8424] NILFS (loop2): trying rollback from an earlier position [ 390.157759][ T8424] NILFS (loop2): recovery complete [ 390.178609][ T8434] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.715707][ T8440] xt_socket: unknown flags 0x50 [ 390.736008][ T8440] overlayfs: missing 'lowerdir' [ 392.347048][ T8452] loop2: detected capacity change from 0 to 16 [ 392.504806][ T8452] erofs: (device loop2): mounted with root inode @ nid 36. [ 395.948908][ T8461] loop0: detected capacity change from 0 to 40427 [ 395.973517][ T8461] F2FS-fs (loop0): LFS is not compatible with checkpoint=disable [ 397.500925][ T8482] loop1: detected capacity change from 0 to 16 [ 397.558023][ T8482] erofs: (device loop1): mounted with root inode @ nid 36. [ 398.300433][ T8486] syz.1.534: attempt to access beyond end of device [ 398.300433][ T8486] loop1: rw=0, sector=48, nr_sectors = 16 limit=16 [ 398.346692][ T8486] syz.1.534: attempt to access beyond end of device [ 398.346692][ T8486] loop1: rw=0, sector=13478624032, nr_sectors = 8 limit=16 [ 398.361860][ T8486] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 399.257872][ T8490] loop2: detected capacity change from 0 to 2048 [ 399.446741][ T8490] NILFS (loop2): invalid segment: Inconsistency found [ 399.514525][ T8490] NILFS (loop2): trying rollback from an earlier position [ 399.542335][ T8490] NILFS (loop2): recovery complete [ 400.300507][ T8499] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 400.635185][ T8503] hugetlbfs: syz.0.539 (8503): Using mlock ulimits for SHM_HUGETLB is obsolete [ 400.810079][ T8503] mmap: syz.0.539 (8503) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 401.134507][ T8507] xt_socket: unknown flags 0x50 [ 401.146513][ T8507] overlayfs: missing 'lowerdir' [ 401.440585][ T8505] loop3: detected capacity change from 0 to 2048 [ 401.498429][ T8505] NILFS (loop3): invalid segment: Inconsistency found [ 401.514026][ T8505] NILFS (loop3): trying rollback from an earlier position [ 401.584984][ T8505] NILFS (loop3): recovery complete [ 402.020825][ T8514] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 402.314047][ T8520] xt_socket: unknown flags 0x50 [ 402.326314][ T8520] overlayfs: missing 'lowerdir' [ 404.996410][ T8544] loop3: detected capacity change from 0 to 2048 [ 405.041011][ T8546] loop0: detected capacity change from 0 to 512 [ 405.051841][ T8546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 405.072830][ T8544] NILFS (loop3): invalid segment: Inconsistency found [ 405.082902][ T8546] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 405.096866][ T8544] NILFS (loop3): trying rollback from an earlier position [ 406.553268][ T8546] EXT4-fs (loop0): 1 truncate cleaned up [ 406.560161][ T8546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.606357][ T8544] NILFS (loop3): recovery complete [ 406.677702][ T8557] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 407.343588][ T8559] netlink: 'syz.0.549': attribute type 16 has an invalid length. [ 407.351402][ T8559] netlink: 'syz.0.549': attribute type 3 has an invalid length. [ 407.359042][ T8559] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.549'. [ 407.563908][ T8567] xt_socket: unknown flags 0x50 [ 407.643070][ T8568] overlayfs: missing 'lowerdir' [ 407.956462][ T8569] loop2: detected capacity change from 0 to 2048 [ 407.984189][ T8569] NILFS (loop2): invalid segment: Inconsistency found [ 407.999594][ T8569] NILFS (loop2): trying rollback from an earlier position [ 408.085251][ T8569] NILFS (loop2): recovery complete [ 408.117393][ T8571] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 408.129828][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.568282][ T8574] xt_socket: unknown flags 0x50 [ 408.574392][ T8574] overlayfs: missing 'lowerdir' [ 410.630965][ T8592] loop0: detected capacity change from 0 to 2048 [ 410.709903][ T8592] NILFS (loop0): invalid segment: Inconsistency found [ 410.745248][ T8592] NILFS (loop0): trying rollback from an earlier position [ 410.877112][ T8597] netlink: set zone limit has 8 unknown bytes [ 410.895880][ T8592] NILFS (loop0): recovery complete [ 410.957088][ T8600] bpq0: entered allmulticast mode [ 411.797947][ T8602] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 412.257702][ T8608] loop3: detected capacity change from 0 to 4096 [ 412.514802][ T8610] xt_socket: unknown flags 0x50 [ 412.526215][ T8610] overlayfs: missing 'lowerdir' [ 413.168534][ T8608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.978512][ T8617] netlink: 'syz.2.560': attribute type 20 has an invalid length. [ 415.127500][ T8617] dvmrp17: entered allmulticast mode [ 415.391851][ T8617] dvmrp17: left allmulticast mode [ 415.529158][ T8622] loop0: detected capacity change from 0 to 512 [ 415.673871][ T8622] EXT4-fs: Ignoring removed nomblk_io_submit option [ 415.699560][ T8622] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 416.026787][ T8622] EXT4-fs (loop0): 1 truncate cleaned up [ 416.037910][ T8622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.280388][ T8628] netlink: 'syz.0.561': attribute type 16 has an invalid length. [ 416.288517][ T8628] netlink: 'syz.0.561': attribute type 3 has an invalid length. [ 416.296307][ T8628] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.561'. [ 416.591474][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.832785][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.823815][ T8664] loop0: detected capacity change from 0 to 256 [ 420.869896][ T8663] loop2: detected capacity change from 0 to 2048 [ 420.887133][ T8664] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 420.921868][ T8664] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 420.941647][ T8663] NILFS (loop2): invalid segment: Inconsistency found [ 420.955982][ T8663] NILFS (loop2): trying rollback from an earlier position [ 420.978559][ T8664] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 421.005476][ T8663] NILFS (loop2): recovery complete [ 421.078127][ T8668] loop3: detected capacity change from 0 to 512 [ 421.085633][ T8668] EXT4-fs: Ignoring removed nomblk_io_submit option [ 421.121267][ T8669] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 421.242995][ T8668] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 421.690073][ T8673] loop1: detected capacity change from 0 to 1024 [ 423.873023][ T8668] EXT4-fs (loop3): 1 truncate cleaned up [ 424.018216][ T8668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.351234][ T48] hfsplus: b-tree write err: -5, ino 4 [ 424.394469][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.436877][ T8708] loop0: detected capacity change from 0 to 1764 [ 430.352621][ T8737] loop3: detected capacity change from 0 to 512 [ 430.378849][ T27] audit: type=1326 audit(1754635240.242:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 430.407512][ T8737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 430.431786][ T27] audit: type=1326 audit(1754635240.242:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 430.465015][ T8737] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 430.471203][ T27] audit: type=1326 audit(1754635240.272:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 430.542275][ T27] audit: type=1326 audit(1754635240.272:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 430.575813][ T8737] EXT4-fs (loop3): 1 truncate cleaned up [ 430.582655][ T8737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.611136][ T27] audit: type=1326 audit(1754635240.272:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 430.654562][ T8745] dns_resolver: Unsupported content type (216) [ 430.856995][ T27] audit: type=1326 audit(1754635240.272:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 430.913761][ T27] audit: type=1326 audit(1754635240.272:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 431.459799][ T8748] netlink: 'syz.3.584': attribute type 16 has an invalid length. [ 431.467719][ T8748] netlink: 'syz.3.584': attribute type 3 has an invalid length. [ 431.475547][ T8748] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.584'. [ 431.763170][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.772497][ T27] audit: type=1326 audit(1754635240.282:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 431.800043][ T27] audit: type=1326 audit(1754635240.282:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 431.874828][ T27] audit: type=1326 audit(1754635240.282:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 431.979818][ T8754] loop1: detected capacity change from 0 to 1024 [ 432.278467][ T8759] loop0: detected capacity change from 0 to 512 [ 432.288659][ T8759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 432.448133][ T8759] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 432.896736][ T8759] EXT4-fs (loop0): 1 truncate cleaned up [ 432.965261][ T8759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.705526][ T8773] netlink: 'syz.0.590': attribute type 16 has an invalid length. [ 433.713449][ T8773] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.590'. [ 434.211153][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.710376][ T8790] loop0: detected capacity change from 0 to 2048 [ 435.731798][ T8790] NILFS (loop0): invalid segment: Inconsistency found [ 435.754562][ T8790] NILFS (loop0): trying rollback from an earlier position [ 435.791407][ T8792] loop3: detected capacity change from 0 to 64 [ 435.809370][ T8790] NILFS (loop0): recovery complete [ 435.836519][ T8795] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 435.875910][ T8796] loop1: detected capacity change from 0 to 512 [ 435.895016][ T8796] EXT4-fs: Ignoring removed nomblk_io_submit option [ 435.922937][ T8792] hfs: unable to load codepage "cp94)" [ 435.930811][ T8796] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 435.941658][ T8792] hfs: unable to parse mount options [ 436.094960][ T8796] EXT4-fs (loop1): 1 truncate cleaned up [ 436.126706][ T5801] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 436.137434][ T8796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.346276][ T8800] xt_socket: unknown flags 0x50 [ 436.357762][ T8800] overlayfs: missing 'lowerdir' [ 436.557314][ T8802] netlink: 1 bytes leftover after parsing attributes in process `syz.3.595'. [ 437.002766][ T8804] netlink: 'syz.1.597': attribute type 16 has an invalid length. [ 437.010644][ T8804] netlink: 'syz.1.597': attribute type 3 has an invalid length. [ 437.018424][ T8804] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.597'. [ 437.331365][ T8806] loop3: detected capacity change from 0 to 512 [ 437.405681][ T8806] EXT4-fs: Ignoring removed nomblk_io_submit option [ 437.436163][ T8806] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 437.453444][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.694554][ T8806] EXT4-fs (loop3): 1 truncate cleaned up [ 437.811686][ T8806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.932848][ T8816] loop1: detected capacity change from 0 to 8 [ 439.588000][ T8821] loop0: detected capacity change from 0 to 512 [ 439.597152][ T8822] netlink: 'syz.3.598': attribute type 16 has an invalid length. [ 439.605098][ T8822] netlink: 'syz.3.598': attribute type 3 has an invalid length. [ 439.612787][ T8822] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.598'. [ 439.625840][ T8816] SQUASHFS error: zlib decompression failed, data probably corrupt [ 439.633799][ T8816] SQUASHFS error: Failed to read block 0x9b: -5 [ 439.640183][ T8816] SQUASHFS error: Unable to read metadata cache entry [99] [ 439.647430][ T8816] SQUASHFS error: Unable to read inode 0x127 [ 439.734032][ T8815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.600'. [ 439.769013][ T8821] EXT4-fs: Ignoring removed nomblk_io_submit option [ 439.837760][ T8821] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 439.961956][ T8821] EXT4-fs (loop0): 1 truncate cleaned up [ 439.988050][ T8821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.475983][ T8833] netlink: 'syz.0.602': attribute type 16 has an invalid length. [ 440.484118][ T8833] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.602'. [ 441.415559][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.463004][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.513074][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.590431][ T8837] loop2: detected capacity change from 0 to 2048 [ 442.650656][ T8837] NILFS (loop2): invalid segment: Inconsistency found [ 442.657665][ T8837] NILFS (loop2): trying rollback from an earlier position [ 442.716810][ T8846] loop0: detected capacity change from 0 to 2048 [ 442.779249][ T8846] NILFS (loop0): invalid segment: Inconsistency found [ 442.791913][ T8837] NILFS (loop2): recovery complete [ 442.835660][ T8846] NILFS (loop0): trying rollback from an earlier position [ 442.846809][ T8847] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 442.898176][ T8846] NILFS (loop0): recovery complete [ 442.915876][ T8850] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 443.399310][ T8856] xt_socket: unknown flags 0x50 [ 443.406609][ T8856] overlayfs: missing 'lowerdir' [ 443.841837][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.048535][ T8860] xt_socket: unknown flags 0x50 [ 444.067661][ T8860] overlayfs: missing 'lowerdir' [ 444.334494][ T8862] loop1: detected capacity change from 0 to 512 [ 444.448908][ T8862] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 444.554510][ T8862] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 444.563650][ T8862] System zones: 1-12 [ 444.578624][ T8862] EXT4-fs (loop1): 1 truncate cleaned up [ 444.585675][ T8862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.991929][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.997774][ T8869] loop0: detected capacity change from 0 to 512 [ 445.025135][ T8869] EXT4-fs: Ignoring removed nomblk_io_submit option [ 446.087182][ T27] kauditd_printk_skb: 51 callbacks suppressed [ 446.087196][ T27] audit: type=1326 audit(1754635255.230:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8868 comm="syz.2.611" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefceb8ebe9 code=0x0 [ 446.178048][ T8869] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 446.258102][ T8869] EXT4-fs (loop0): 1 truncate cleaned up [ 446.265044][ T8869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.989494][ T8887] netlink: 'syz.0.613': attribute type 16 has an invalid length. [ 446.997506][ T8887] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.613'. [ 447.618338][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.044240][ T8902] loop2: detected capacity change from 0 to 256 [ 449.072101][ T8902] FAT-fs (loop2): Unrecognized mount option "shor†name=mixed" or missing value [ 449.191909][ T8903] loop1: detected capacity change from 0 to 2048 [ 449.425914][ T8903] NILFS (loop1): invalid segment: Inconsistency found [ 449.455730][ T8903] NILFS (loop1): trying rollback from an earlier position [ 451.103436][ T8903] NILFS (loop1): recovery complete [ 451.255331][ T8913] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 451.467921][ T8915] loop0: detected capacity change from 0 to 2048 [ 451.482643][ T8915] NILFS (loop0): invalid segment: Inconsistency found [ 451.489683][ T8915] NILFS (loop0): trying rollback from an earlier position [ 451.525670][ T8915] NILFS (loop0): recovery complete [ 451.671168][ T8916] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 451.776483][ T8918] xt_socket: unknown flags 0x50 [ 451.797207][ T8918] overlayfs: missing 'lowerdir' [ 452.283583][ T8921] xt_socket: unknown flags 0x50 [ 452.300989][ T8921] overlayfs: missing 'lowerdir' [ 455.076737][ T8938] kernel profiling enabled (shift: 7) [ 460.256234][ T8963] loop3: detected capacity change from 0 to 512 [ 460.390785][ T8963] EXT4-fs: Ignoring removed nomblk_io_submit option [ 460.593471][ T8963] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 460.777537][ T8966] loop0: detected capacity change from 0 to 2048 [ 460.896068][ T8966] NILFS (loop0): invalid segment: Inconsistency found [ 460.904958][ T8966] NILFS (loop0): trying rollback from an earlier position [ 461.006122][ T8963] EXT4-fs (loop3): 1 truncate cleaned up [ 461.030373][ T8963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.125803][ T8966] NILFS (loop0): recovery complete [ 461.903225][ T8977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.636'. [ 462.017529][ T8975] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 462.341701][ T8982] xt_socket: unknown flags 0x50 [ 462.361731][ T8982] overlayfs: missing 'lowerdir' [ 462.663652][ T8983] netlink: 'syz.3.634': attribute type 16 has an invalid length. [ 462.671524][ T8983] netlink: 'syz.3.634': attribute type 3 has an invalid length. [ 462.679269][ T8983] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.634'. [ 462.906986][ T8985] loop0: detected capacity change from 0 to 2048 [ 462.924661][ T8985] NILFS (loop0): invalid segment: Inconsistency found [ 462.953479][ T8985] NILFS (loop0): trying rollback from an earlier position [ 463.210615][ T8985] NILFS (loop0): recovery complete [ 463.731661][ T8995] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 464.458930][ T8998] xt_socket: unknown flags 0x50 [ 464.510470][ T8998] overlayfs: missing 'lowerdir' [ 466.923746][ T9010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.642'. [ 467.004473][ T9016] loop1: detected capacity change from 0 to 128 [ 467.022202][ T9016] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 467.076360][ T9016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 467.400821][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.021181][ T9045] loop0: detected capacity change from 0 to 1024 [ 475.088147][ T9045] EXT4-fs: Ignoring removed orlov option [ 475.133029][ T9042] loop2: detected capacity change from 0 to 4096 [ 475.904198][ T9045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.981131][ T9052] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 477.957383][ T9060] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.648: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 478.513587][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.745852][ T9067] loop2: detected capacity change from 0 to 2048 [ 479.441462][ T27] audit: type=1326 audit(1754635289.146:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.0.654" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f660798ebe9 code=0x0 [ 479.656705][ T9067] NILFS (loop2): invalid segment: Inconsistency found [ 479.700351][ T9067] NILFS (loop2): trying rollback from an earlier position [ 480.775267][ T9067] NILFS (loop2): recovery complete [ 481.010515][ T9085] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 481.506211][ T9088] loop3: detected capacity change from 0 to 1024 [ 482.078518][ T9094] xt_socket: unknown flags 0x50 [ 482.093479][ T9094] overlayfs: missing 'lowerdir' [ 482.338606][ T9096] QAT: Device 5 not found [ 482.533262][ T9097] loop1: detected capacity change from 0 to 16 [ 482.574079][ T9097] erofs: (device loop1): mounted with root inode @ nid 36. [ 482.747046][ T9093] loop0: detected capacity change from 0 to 8192 [ 482.823490][ T7035] hfsplus: b-tree write err: -5, ino 4 [ 483.107575][ T27] audit: type=1800 audit(1754635292.875:193): pid=9101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.661" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 483.533750][ T9106] loop2: detected capacity change from 0 to 512 [ 483.551240][ T9106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 483.577691][ T9106] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 483.677297][ T9106] EXT4-fs (loop2): 1 truncate cleaned up [ 483.749630][ T9106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.774977][ T9113] netlink: 'syz.3.666': attribute type 64 has an invalid length. [ 483.783081][ T9113] netlink: 'syz.3.666': attribute type 4 has an invalid length. [ 483.790994][ T9113] netlink: 152 bytes leftover after parsing attributes in process `syz.3.666'. [ 485.515483][ T9118] netlink: 'syz.2.664': attribute type 16 has an invalid length. [ 485.523459][ T9118] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.664'. [ 485.851800][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.671348][ T5869] IPVS: starting estimator thread 0... [ 486.772541][ T9135] IPVS: using max 21 ests per chain, 50400 per kthread [ 486.883756][ T9130] loop0: detected capacity change from 0 to 512 [ 486.914652][ T9130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 487.015399][ T9130] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 487.074944][ T9138] loop2: detected capacity change from 0 to 128 [ 487.205113][ T9130] EXT4-fs (loop0): 1 truncate cleaned up [ 487.301375][ T9130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.594699][ T9152] netlink: 'syz.0.669': attribute type 16 has an invalid length. [ 488.603687][ T9152] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.669'. [ 488.776366][ T9154] loop3: detected capacity change from 0 to 2048 [ 488.807138][ T9154] NILFS (loop3): invalid segment: Inconsistency found [ 488.822268][ T9157] loop2: detected capacity change from 0 to 16 [ 488.824481][ T9154] NILFS (loop3): trying rollback from an earlier position [ 488.842608][ T9157] erofs: (device loop2): mounted with root inode @ nid 36. [ 488.875241][ T9154] NILFS (loop3): recovery complete [ 488.895985][ T9158] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 489.376484][ T27] audit: type=1800 audit(1754635299.145:194): pid=9161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.674" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 489.996644][ T9164] loop2: detected capacity change from 0 to 512 [ 490.021651][ T9164] EXT4-fs: Ignoring removed nomblk_io_submit option [ 490.044066][ T9164] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 490.083403][ T9164] EXT4-fs (loop2): 1 truncate cleaned up [ 490.090309][ T9164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.234138][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.298404][ T9154] xt_socket: unknown flags 0x50 [ 490.305403][ T9154] overlayfs: missing 'lowerdir' [ 490.513633][ T9171] netlink: 'syz.2.675': attribute type 16 has an invalid length. [ 490.521761][ T9171] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.675'. [ 491.041776][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.437539][ T27] audit: type=1326 audit(1754635304.184:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.3.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e0b8ebe9 code=0x7ffc0000 [ 495.773928][ T27] audit: type=1326 audit(1754635304.184:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.3.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e0b8ebe9 code=0x7ffc0000 [ 495.937977][ T9216] loop1: detected capacity change from 0 to 512 [ 495.944609][ T27] audit: type=1326 audit(1754635304.184:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.3.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa4e0b8ebe9 code=0x7ffc0000 [ 495.945537][ T9216] EXT4-fs: Ignoring removed nomblk_io_submit option [ 496.709612][ T9216] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 496.747724][ T9219] loop0: detected capacity change from 0 to 2048 [ 496.767458][ T9216] EXT4-fs (loop1): 1 truncate cleaned up [ 496.775102][ T9216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.776291][ T27] audit: type=1326 audit(1754635305.624:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.3.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e0b8ebe9 code=0x7ffc0000 [ 496.843130][ T9219] NILFS (loop0): invalid segment: Inconsistency found [ 496.877777][ T9219] NILFS (loop0): trying rollback from an earlier position [ 496.883252][ T27] audit: type=1326 audit(1754635305.624:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.3.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e0b8ebe9 code=0x7ffc0000 [ 497.048240][ T27] audit: type=1326 audit(1754635305.624:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.3.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4e0b8d550 code=0x7ffc0000 [ 497.134200][ T9224] netlink: 'syz.1.687': attribute type 16 has an invalid length. [ 497.142138][ T9224] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.687'. [ 497.344902][ T9219] NILFS (loop0): recovery complete [ 497.361066][ T27] audit: type=1326 audit(1754635305.624:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.3.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e0b8ebe9 code=0x7ffc0000 [ 497.421731][ T9225] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 497.557437][ T27] audit: type=1326 audit(1754635305.624:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.3.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e0b8ebe9 code=0x7ffc0000 [ 497.636109][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.661330][ T27] audit: type=1326 audit(1754635305.794:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.3.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa4e0b8ebe9 code=0x7ffc0000 [ 497.690504][ T27] audit: type=1326 audit(1754635305.794:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.3.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e0b8ebe9 code=0x7ffc0000 [ 497.713283][ T9227] netlink: 'syz.3.689': attribute type 10 has an invalid length. [ 498.279869][ T9235] capability: warning: `syz.1.690' uses deprecated v2 capabilities in a way that may be insecure [ 498.570381][ T9227] binder: 9226:9227 unknown command 1074553619 [ 498.577286][ T9227] binder: 9226:9227 ioctl c0306201 200000000540 returned -22 [ 499.626497][ T5795] Bluetooth: hci1: command 0x0406 tx timeout [ 499.760770][ T9245] xt_socket: unknown flags 0x50 [ 499.767676][ T9245] overlayfs: missing 'lowerdir' [ 499.889345][ T9247] loop3: detected capacity change from 0 to 8192 [ 499.898015][ T9251] loop2: detected capacity change from 0 to 16 [ 499.965613][ T9251] erofs: (device loop2): mounted with root inode @ nid 36. [ 501.041155][ T9261] loop1: detected capacity change from 0 to 2048 [ 501.069192][ T9263] loop2: detected capacity change from 0 to 2048 [ 501.106590][ T9261] NILFS (loop1): invalid segment: Inconsistency found [ 501.115490][ T9263] NILFS (loop2): invalid segment: Inconsistency found [ 501.129150][ T9261] NILFS (loop1): trying rollback from an earlier position [ 501.156656][ T9263] NILFS (loop2): trying rollback from an earlier position [ 501.184079][ T9261] NILFS (loop1): recovery complete [ 501.210111][ T9263] NILFS (loop2): recovery complete [ 501.215776][ T9264] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 501.250120][ T9265] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 501.591757][ T9267] loop3: detected capacity change from 0 to 1024 [ 501.668360][ T9267] hfsplus: bad catalog folder entry [ 501.740845][ T5801] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 501.874916][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.881257][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.305804][ T9270] xt_socket: unknown flags 0x50 [ 502.540826][ T9274] loop0: detected capacity change from 0 to 512 [ 502.580006][ T9274] EXT4-fs: Ignoring removed nomblk_io_submit option [ 502.612448][ T9270] overlayfs: missing 'lowerdir' [ 502.647558][ T9274] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 502.662977][ T9276] xt_socket: unknown flags 0x50 [ 502.687361][ T9274] EXT4-fs (loop0): 1 truncate cleaned up [ 502.694137][ T9276] overlayfs: missing 'lowerdir' [ 502.704642][ T9274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.055852][ T9280] netlink: 'syz.0.699': attribute type 16 has an invalid length. [ 503.063815][ T9280] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.699'. [ 503.564958][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.366885][ T9285] loop0: detected capacity change from 0 to 1024 [ 505.676530][ T9292] QAT: Device 5 not found [ 506.044098][ T48] hfsplus: b-tree write err: -5, ino 4 [ 506.076755][ T9294] loop1: detected capacity change from 0 to 2048 [ 506.100965][ T9294] NILFS (loop1): invalid segment: Inconsistency found [ 506.118861][ T9294] NILFS (loop1): trying rollback from an earlier position [ 506.231121][ T9294] NILFS (loop1): recovery complete [ 506.261999][ T9298] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 506.519356][ T9301] netlink: 'syz.3.705': attribute type 10 has an invalid length. [ 506.527441][ T9301] netlink: 40 bytes leftover after parsing attributes in process `syz.3.705'. [ 506.553564][ T9301] batman_adv: batadv0: Adding interface: vlan1 [ 506.559865][ T9301] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.585690][ T9301] batman_adv: batadv0: Interface activated: vlan1 [ 508.279593][ T9310] loop3: detected capacity change from 0 to 512 [ 508.304497][ T9310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 508.338030][ T9310] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 508.459999][ T9315] xt_socket: unknown flags 0x50 [ 508.467046][ T9315] overlayfs: missing 'lowerdir' [ 508.548577][ T9310] EXT4-fs (loop3): 1 truncate cleaned up [ 508.558289][ T9311] loop2: detected capacity change from 0 to 8192 [ 508.567290][ T9310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.992025][ T9318] netlink: 'syz.3.708': attribute type 16 has an invalid length. [ 508.999935][ T9318] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.708'. [ 509.475785][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.903477][ T9338] loop2: detected capacity change from 0 to 2048 [ 511.934687][ T9338] NILFS (loop2): invalid segment: Inconsistency found [ 511.936269][ T9336] loop1: detected capacity change from 0 to 1024 [ 511.941519][ T9338] NILFS (loop2): trying rollback from an earlier position [ 511.954978][ T9340] loop3: detected capacity change from 0 to 2048 [ 511.981085][ T9338] NILFS (loop2): recovery complete [ 511.986458][ T9340] NILFS (loop3): invalid segment: Inconsistency found [ 512.006699][ T9343] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 512.023264][ T9340] NILFS (loop3): trying rollback from an earlier position [ 512.265315][ T9344] netlink: 'syz.0.715': attribute type 10 has an invalid length. [ 512.275450][ T9344] tipc: Resetting bearer [ 512.423517][ T9340] NILFS (loop3): recovery complete [ 512.673405][ T9347] QAT: Device 5 not found [ 513.162741][ T9348] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 513.206684][ T11] hfsplus: b-tree write err: -5, ino 4 [ 513.219188][ T9344] tipc: Resetting bearer [ 513.230161][ T9344] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.322252][ T9342] binder: 9341:9342 unknown command 1074553619 [ 513.324721][ T9344] bond0: (slave team0): Enslaving as an active interface with an up link [ 513.329073][ T9342] binder: 9341:9342 ioctl c0306201 200000000540 returned -22 [ 514.507396][ T9361] loop0: detected capacity change from 0 to 512 [ 514.543045][ T9364] loop1: detected capacity change from 0 to 512 [ 514.545286][ T9361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 514.567507][ T9364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 514.598656][ T9365] xt_socket: unknown flags 0x50 [ 514.605481][ T9364] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 514.605914][ T9361] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 514.634506][ T9366] xt_socket: unknown flags 0x50 [ 514.640869][ T9365] overlayfs: missing 'lowerdir' [ 514.660991][ T9366] overlayfs: missing 'lowerdir' [ 514.667483][ T9364] EXT4-fs (loop1): 1 truncate cleaned up [ 514.677895][ T9361] EXT4-fs (loop0): 1 truncate cleaned up [ 514.679013][ T9364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.707813][ T9361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.150946][ T9372] netlink: 'syz.0.718': attribute type 16 has an invalid length. [ 515.158933][ T9372] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.718'. [ 515.356037][ T9373] netlink: 'syz.1.719': attribute type 16 has an invalid length. [ 515.364007][ T9373] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.719'. [ 515.603158][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.023858][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 517.023875][ T27] audit: type=1326 audit(1754635326.852:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 517.562655][ T27] audit: type=1326 audit(1754635326.862:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 517.826243][ T27] audit: type=1326 audit(1754635326.972:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 517.886180][ T27] audit: type=1326 audit(1754635326.972:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 517.909432][ T27] audit: type=1326 audit(1754635326.972:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 517.932392][ T27] audit: type=1326 audit(1754635326.972:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 517.955448][ T27] audit: type=1326 audit(1754635326.982:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 518.025202][ T27] audit: type=1326 audit(1754635326.982:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f660798d550 code=0x7ffc0000 [ 518.048504][ T27] audit: type=1326 audit(1754635326.982:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 518.073867][ T27] audit: type=1326 audit(1754635326.982:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660798ebe9 code=0x7ffc0000 [ 518.930094][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.301480][ T9398] loop3: detected capacity change from 0 to 40427 [ 519.560990][ T9398] F2FS-fs (loop3): invalid crc value [ 519.920660][ T9398] F2FS-fs (loop3): Found nat_bits in checkpoint [ 519.979840][ T9398] F2FS-fs (loop3): Start checkpoint disabled! [ 520.036227][ T9398] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 523.254029][ T48] kworker/u4:3: attempt to access beyond end of device [ 523.254029][ T48] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 523.429120][ T9418] loop0: detected capacity change from 0 to 16 [ 523.443790][ T7016] kworker/u4:16: attempt to access beyond end of device [ 523.443790][ T7016] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 523.481049][ T9418] erofs: (device loop0): mounted with root inode @ nid 36. [ 523.515681][ T7016] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 523.523253][ T7016] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 523.532062][ T7016] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 523.542701][ T7016] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 524.612919][ T9428] loop2: detected capacity change from 0 to 2048 [ 524.676074][ T9428] NILFS (loop2): invalid segment: Inconsistency found [ 524.683153][ T9428] NILFS (loop2): trying rollback from an earlier position [ 524.736469][ T9428] NILFS (loop2): recovery complete [ 524.968228][ T9434] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 525.803351][ T9441] loop3: detected capacity change from 0 to 512 [ 525.810902][ T9441] EXT4-fs: Ignoring removed nomblk_io_submit option [ 525.946464][ T9441] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 526.568534][ T9441] EXT4-fs (loop3): 1 truncate cleaned up [ 526.578440][ T9441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.612446][ T9449] xt_socket: unknown flags 0x50 [ 526.806707][ T9428] overlayfs: missing 'lowerdir' [ 526.909366][ T9452] netlink: 'syz.3.729': attribute type 16 has an invalid length. [ 526.917327][ T9452] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.729'. [ 527.307237][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.326331][ T9454] loop0: detected capacity change from 0 to 2048 [ 527.351576][ T9454] NILFS (loop0): invalid segment: Inconsistency found [ 527.362565][ T9454] NILFS (loop0): trying rollback from an earlier position [ 527.425487][ T9454] NILFS (loop0): recovery complete [ 527.485796][ T9455] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 528.009833][ T9461] xt_socket: unknown flags 0x50 [ 528.435341][ T9461] overlayfs: missing 'lowerdir' [ 528.478885][ T9463] loop2: detected capacity change from 0 to 1024 [ 528.600897][ T9463] EXT4-fs: Ignoring removed oldalloc option [ 528.628414][ T9463] EXT4-fs: Ignoring removed bh option [ 528.646293][ T9463] EXT4-fs: Ignoring removed orlov option [ 528.706373][ T9463] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 528.800457][ T9468] Invalid ELF header magic: != ELF [ 529.699518][ T9463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.587030][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.154365][ T9498] loop2: detected capacity change from 0 to 512 [ 533.166819][ T9498] EXT4-fs: Ignoring removed nomblk_io_submit option [ 533.174516][ T9498] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 533.207790][ T9498] EXT4-fs (loop2): 1 truncate cleaned up [ 533.217006][ T9498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.750883][ T9510] netlink: 'syz.2.747': attribute type 16 has an invalid length. [ 533.758770][ T9510] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.747'. [ 533.892074][ T9504] loop1: detected capacity change from 0 to 2048 [ 533.906988][ T9504] NILFS (loop1): invalid segment: Inconsistency found [ 533.914372][ T9504] NILFS (loop1): trying rollback from an earlier position [ 533.939467][ T9504] NILFS (loop1): recovery complete [ 533.953272][ T9511] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 534.105029][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.283684][ T9515] loop3: detected capacity change from 0 to 512 [ 534.332735][ T9515] ext4: Unknown parameter 'smackfshat' [ 535.270013][ T9523] xt_socket: unknown flags 0x50 [ 535.277032][ T9523] overlayfs: missing 'lowerdir' [ 538.382204][ T9543] loop0: detected capacity change from 0 to 512 [ 538.504656][ T9543] EXT4-fs: Ignoring removed nomblk_io_submit option [ 538.538176][ T9543] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 538.569727][ T9543] EXT4-fs (loop0): 1 truncate cleaned up [ 538.601310][ T9543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.358988][ T9550] netlink: 'syz.0.755': attribute type 16 has an invalid length. [ 539.366857][ T9550] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.755'. [ 539.482973][ T9554] random: crng reseeded on system resumption [ 540.675750][ T9560] loop2: detected capacity change from 0 to 2048 [ 540.776501][ T9560] NILFS (loop2): invalid segment: Inconsistency found [ 540.783296][ T9560] NILFS (loop2): trying rollback from an earlier position [ 540.852483][ T9560] NILFS (loop2): recovery complete [ 540.876991][ T9562] loop1: detected capacity change from 0 to 512 [ 540.891091][ T9564] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 540.915933][ T9562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 540.931760][ T9565] bpq0: left allmulticast mode [ 540.949227][ T9562] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 541.130754][ T9562] EXT4-fs (loop1): 1 truncate cleaned up [ 541.153466][ T9562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.586304][ T9574] netlink: 'syz.1.760': attribute type 16 has an invalid length. [ 541.595230][ T9574] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.760'. [ 542.012538][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.119715][ T9575] xt_socket: unknown flags 0x50 [ 542.126823][ T9575] overlayfs: missing 'lowerdir' [ 544.116318][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.645730][ T9594] loop3: detected capacity change from 0 to 2048 [ 544.657895][ T9594] NILFS (loop3): invalid segment: Inconsistency found [ 544.665143][ T9594] NILFS (loop3): trying rollback from an earlier position [ 544.811338][ T9594] NILFS (loop3): recovery complete [ 544.894793][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 545.516107][ T9598] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 545.639964][ T9602] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 545.968402][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 546.355297][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'. [ 549.071871][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 549.102727][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 549.127431][ T8] usb 2-1: can't read configurations, error -71 [ 549.143712][ T9620] loop0: detected capacity change from 0 to 512 [ 549.178873][ T9620] EXT4-fs: Ignoring removed nomblk_io_submit option [ 549.215152][ T9620] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 549.491181][ T9625] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 549.990106][ T9620] EXT4-fs (loop0): 1 truncate cleaned up [ 550.039954][ T9620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.300935][ T9647] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 552.307514][ T9647] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 552.315855][ T9647] vhci_hcd vhci_hcd.0: Device attached [ 552.329547][ T9654] vhci_hcd: connection closed [ 552.331452][ T7041] vhci_hcd: stop threads [ 552.414502][ T9651] loop3: detected capacity change from 0 to 512 [ 552.450824][ T7041] vhci_hcd: release socket [ 552.455425][ T7041] vhci_hcd: disconnect device [ 552.907671][ T9651] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.779: casefold flag without casefold feature [ 553.082113][ T9651] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.779: couldn't read orphan inode 15 (err -117) [ 553.096181][ T9651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.330045][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.419606][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.461453][ T9672] loop0: detected capacity change from 0 to 2048 [ 554.543573][ T9672] NILFS (loop0): invalid segment: Inconsistency found [ 554.578102][ T9672] NILFS (loop0): trying rollback from an earlier position [ 554.583780][ T9674] loop3: detected capacity change from 0 to 2048 [ 554.636238][ T9674] NILFS (loop3): invalid segment: Inconsistency found [ 554.644420][ T9674] NILFS (loop3): trying rollback from an earlier position [ 554.664317][ T9674] NILFS (loop3): recovery complete [ 554.675848][ T9672] NILFS (loop0): recovery complete [ 554.689197][ T9677] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 554.702309][ T9678] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 555.505753][ T9681] loop1: detected capacity change from 0 to 2048 [ 555.590432][ T9681] NILFS (loop1): invalid segment: Inconsistency found [ 555.597280][ T9681] NILFS (loop1): trying rollback from an earlier position [ 555.691404][ T9681] NILFS (loop1): recovery complete [ 555.735090][ T9686] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 556.055845][ T9681] xt_socket: unknown flags 0x50 [ 556.113545][ T9681] overlayfs: missing 'lowerdir' [ 556.798942][ T9695] xt_socket: unknown flags 0x50 [ 556.805790][ T9695] overlayfs: missing 'lowerdir' [ 557.594611][ T9704] xt_socket: unknown flags 0x50 [ 557.616510][ T9704] overlayfs: missing 'lowerdir' [ 557.993867][ T9708] loop2: detected capacity change from 0 to 512 [ 558.022049][ T9708] EXT4-fs: Ignoring removed nomblk_io_submit option [ 558.073101][ T9709] binder: 9705:9709 ioctl c0306201 0 returned -14 [ 558.137844][ T9708] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 558.379936][ T9708] EXT4-fs (loop2): 1 truncate cleaned up [ 558.552181][ T9708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.251226][ T9715] netlink: 'syz.2.790': attribute type 16 has an invalid length. [ 559.259293][ T9715] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.790'. [ 560.075134][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.283105][ T9728] loop3: detected capacity change from 0 to 256 [ 561.352422][ T9728] FAT-fs (loop3): bogus logical sector size 0 [ 561.380053][ T9728] FAT-fs (loop3): Can't find a valid FAT filesystem [ 561.950207][ T9738] sp0: Synchronizing with TNC [ 563.000939][ T9748] syz.3.800 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 564.709683][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.716772][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.977173][ T9766] loop0: detected capacity change from 0 to 512 [ 565.405422][ T9766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 565.638903][ T9764] loop2: detected capacity change from 0 to 2048 [ 565.646283][ T9766] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 565.745739][ T9764] NILFS (loop2): invalid segment: Inconsistency found [ 565.830064][ T9764] NILFS (loop2): trying rollback from an earlier position [ 566.069600][ T9766] EXT4-fs (loop0): 1 truncate cleaned up [ 566.247912][ T9766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.334413][ T9764] NILFS (loop2): recovery complete [ 566.690489][ T9774] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 567.002807][ T9779] netlink: 'syz.0.801': attribute type 16 has an invalid length. [ 567.010716][ T9779] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.801'. [ 567.266878][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.406868][ T9784] xt_socket: unknown flags 0x50 [ 567.419013][ T9784] overlayfs: missing 'lowerdir' [ 567.446850][ T9781] loop3: detected capacity change from 0 to 2048 [ 567.666161][ T9781] NILFS (loop3): invalid segment: Inconsistency found [ 567.950658][ T9781] NILFS (loop3): trying rollback from an earlier position [ 568.202491][ T9781] NILFS (loop3): recovery complete [ 568.239607][ T9789] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 568.817366][ T9781] xt_socket: unknown flags 0x50 [ 568.824353][ T9781] overlayfs: missing 'lowerdir' [ 573.270018][ T9819] syz.0.812[9819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 573.271572][ T9819] syz.0.812[9819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 573.385272][ T9819] loop0: detected capacity change from 0 to 128 [ 575.027779][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 575.037084][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 575.046029][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 575.054941][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 575.064082][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 575.073014][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 575.082602][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 575.091667][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 575.100607][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 575.109651][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 575.177453][ T9828] loop0: detected capacity change from 0 to 512 [ 575.189468][ T9828] EXT4-fs: Ignoring removed nomblk_io_submit option [ 575.209849][ T9828] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 575.298993][ T9828] EXT4-fs (loop0): 1 truncate cleaned up [ 575.314553][ T9828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.963294][ T9835] netlink: 'syz.0.815': attribute type 16 has an invalid length. [ 576.203355][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.364959][ T9846] netlink: 'syz.0.818': attribute type 3 has an invalid length. [ 576.374214][ T9846] netlink: 'syz.0.818': attribute type 3 has an invalid length. [ 577.317342][ T9847] loop3: detected capacity change from 0 to 512 [ 577.385366][ T9847] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 577.956491][ T9847] EXT4-fs (loop3): 1 truncate cleaned up [ 578.133831][ T9847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.236560][ T9867] loop1: detected capacity change from 0 to 2048 [ 579.247490][ T9867] NILFS (loop1): invalid segment: Inconsistency found [ 579.256251][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.432061][ T9867] NILFS (loop1): trying rollback from an earlier position [ 579.552888][ T9874] ISOFS: Unable to identify CD-ROM format. [ 579.770616][ T9867] NILFS (loop1): recovery complete [ 579.930967][ T9880] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 580.491959][ T9889] xt_socket: unknown flags 0x50 [ 580.498956][ T9889] overlayfs: missing 'lowerdir' [ 580.623805][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 580.671288][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 580.761663][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 580.769227][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 580.778351][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 580.786186][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 580.793829][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 580.802745][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 580.810182][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 580.819065][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 580.836834][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 580.876116][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 580.914174][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 580.933044][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 580.950893][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 580.970641][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 580.992149][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 581.008629][ T9891] loop2: detected capacity change from 0 to 2048 [ 581.009927][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 581.029194][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 581.034810][ T9891] NILFS (loop2): invalid segment: Inconsistency found [ 581.048582][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 581.054004][ T9891] NILFS (loop2): trying rollback from an earlier position [ 581.072138][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 581.107014][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 581.270586][ T9891] NILFS (loop2): recovery complete [ 581.294350][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 581.543619][ T9901] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 581.625588][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 581.749275][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 581.771553][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 581.779618][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 581.788823][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 581.797007][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 581.806309][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 581.988367][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 582.005767][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 582.015163][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 582.023875][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 582.032146][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 582.040547][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 582.099364][ T9906] xt_socket: unknown flags 0x50 [ 582.106305][ T9906] overlayfs: missing 'lowerdir' [ 582.242097][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 582.384345][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 582.508898][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 582.560922][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 582.823947][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 582.839561][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 582.857379][ T8] hid-generic 0000:007F:0001.0001: unknown main item tag 0x0 [ 582.915299][ T8] hid-generic 0000:007F:0001.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 583.956757][ T9912] fido_id[9912]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 583.979726][ T9922] loop0: detected capacity change from 0 to 1024 [ 584.113855][ T9922] hfsplus: bad catalog folder entry [ 584.485471][ T9930] netlink: 'syz.3.832': attribute type 9 has an invalid length. [ 584.493346][ T9930] __nla_validate_parse: 46 callbacks suppressed [ 584.493358][ T9930] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.832'. [ 584.966399][ T9933] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 584.972967][ T9933] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.015268][ T9933] vhci_hcd vhci_hcd.0: Device attached [ 585.053936][ T9936] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 585.060593][ T9936] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.081717][ T9933] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(15) [ 585.088383][ T9933] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 585.119501][ T9936] vhci_hcd vhci_hcd.0: Device attached [ 585.171653][ T9933] vhci_hcd vhci_hcd.0: Device attached [ 585.186465][ T9933] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 585.553639][ T9942] loop1: detected capacity change from 0 to 2048 [ 585.572910][ T23] IPVS: starting estimator thread 0... [ 585.574792][ T9933] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 585.585030][ T9933] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.601959][ T9933] vhci_hcd vhci_hcd.0: Device attached [ 585.611585][ T8] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 586.031819][ T9942] NILFS (loop1): invalid segment: Inconsistency found [ 586.062356][ T9942] NILFS (loop1): trying rollback from an earlier position [ 586.106536][ T9936] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 586.144329][ T9947] IPVS: using max 20 ests per chain, 48000 per kthread [ 586.242513][ T9933] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(20) [ 586.249176][ T9933] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 586.257403][ T9942] NILFS (loop1): recovery complete [ 586.285662][ T9957] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 586.294543][ T9955] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 586.361262][ T9959] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 586.365815][ T9958] loop3: detected capacity change from 0 to 2048 [ 586.386704][ T9958] NILFS (loop3): invalid segment: Inconsistency found [ 586.394388][ T9958] NILFS (loop3): trying rollback from an earlier position [ 586.413598][ T9933] vhci_hcd vhci_hcd.0: Device attached [ 586.555216][ T9958] NILFS (loop3): recovery complete [ 586.603425][ T9937] vhci_hcd: connection closed [ 586.606220][ T9961] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 586.638919][ T9962] xt_socket: unknown flags 0x50 [ 586.645820][ T9962] overlayfs: missing 'lowerdir' [ 586.793895][ T9934] vhci_hcd: connection reset by peer [ 586.815259][ T7028] vhci_hcd: stop threads [ 586.819614][ T7028] vhci_hcd: release socket [ 586.821725][ T9940] vhci_hcd: connection closed [ 586.835535][ T9950] vhci_hcd: connection closed [ 586.840300][ T9948] vhci_hcd: connection closed [ 586.864348][ T7028] vhci_hcd: disconnect device [ 586.967627][ T7028] vhci_hcd: stop threads [ 587.022081][ T7028] vhci_hcd: release socket [ 587.032748][ T7028] vhci_hcd: disconnect device [ 587.500216][ T9970] xt_socket: unknown flags 0x50 [ 587.507299][ T9970] overlayfs: missing 'lowerdir' [ 587.592263][ T7028] vhci_hcd: stop threads [ 587.621614][ T7028] vhci_hcd: release socket [ 587.641096][ T7028] vhci_hcd: disconnect device [ 587.657884][ T7028] vhci_hcd: stop threads [ 587.747405][ T7028] vhci_hcd: release socket [ 587.932391][ T7028] vhci_hcd: disconnect device [ 588.155929][ T7028] vhci_hcd: stop threads [ 588.257218][ T7028] vhci_hcd: release socket [ 588.347013][ T7028] vhci_hcd: disconnect device [ 589.021355][ T9985] ubi31: attaching mtd0 [ 589.028728][ T9985] ubi31: scanning is finished [ 589.033520][ T9985] ubi31: empty MTD device detected [ 589.107921][ T9982] loop0: detected capacity change from 0 to 512 [ 589.483792][ T9982] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 589.536293][ T9985] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 589.624006][ T9982] EXT4-fs (loop0): 1 truncate cleaned up [ 589.630353][ T9982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.129374][ T9982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.196055][ T8] vhci_hcd: vhci_device speed not set [ 593.972795][ C1] ================================================================== [ 593.980908][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x46a/0x4b0 [ 593.988794][ C1] Read of size 2 at addr ffff888026a3e82a by task syz.1.848/10020 [ 593.996585][ C1] [ 593.998906][ C1] CPU: 1 PID: 10020 Comm: syz.1.848 Not tainted 6.6.101-syzkaller #0 [ 594.006964][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 594.017023][ C1] Call Trace: [ 594.020318][ C1] [ 594.023174][ C1] dump_stack_lvl+0x16c/0x230 [ 594.027875][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 594.032924][ C1] ? show_regs_print_info+0x20/0x20 [ 594.038148][ C1] ? load_image+0x3b0/0x3b0 [ 594.042679][ C1] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 594.048082][ C1] ? __virt_addr_valid+0x18c/0x540 [ 594.053221][ C1] ? __virt_addr_valid+0x469/0x540 [ 594.058372][ C1] print_report+0xac/0x220 [ 594.062815][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 594.067968][ C1] kasan_report+0x117/0x150 [ 594.072494][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 594.077624][ C1] rose_timer_expiry+0x46a/0x4b0 [ 594.082561][ C1] call_timer_fn+0x16e/0x530 [ 594.087151][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 594.092165][ C1] ? call_timer_fn+0xbf/0x530 [ 594.096852][ C1] ? __run_timers+0x7d0/0x7d0 [ 594.101512][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 594.106712][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 594.111916][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 594.116920][ C1] __run_timers+0x52d/0x7d0 [ 594.121428][ C1] ? detach_timer+0x2b0/0x2b0 [ 594.126085][ C1] ? lock_chain_count+0x20/0x20 [ 594.130928][ C1] run_timer_softirq+0x67/0xf0 [ 594.135676][ C1] handle_softirqs+0x280/0x820 [ 594.140419][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 594.145161][ C1] ? do_softirq+0x180/0x180 [ 594.149642][ C1] __irq_exit_rcu+0xc7/0x190 [ 594.154257][ C1] ? irq_exit_rcu+0x20/0x20 [ 594.158756][ C1] irq_exit_rcu+0x9/0x20 [ 594.162997][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 594.168619][ C1] [ 594.171537][ C1] [ 594.174518][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 594.180520][ C1] RIP: 0010:do_recvmmsg+0x55a/0x7d0 [ 594.185730][ C1] Code: a8 0b 00 00 31 d2 e8 a5 06 fd f8 2e 2e 2e 31 c0 44 39 64 24 14 74 5a 8b 5c 24 04 89 d8 c1 e8 0a 83 e0 40 09 c3 e8 b6 69 25 f9 <41> ff c4 e9 bd fd ff ff e8 a9 69 25 f9 41 bc a8 ff ff ff e9 52 01 [ 594.205329][ C1] RSP: 0018:ffffc90019a77c80 EFLAGS: 00000246 [ 594.211391][ C1] RAX: ffffffff88602bda RBX: 0000000000000002 RCX: 0000000000080000 [ 594.219375][ C1] RDX: ffffc9000e46e000 RSI: 000000000007ffff RDI: 0000000000080000 [ 594.227363][ C1] RBP: ffffc90019a77e50 R08: ffffffff8e4a84ef R09: 1ffffffff1c9509d [ 594.235436][ C1] R10: dffffc0000000000 R11: fffffbfff1c9509e R12: 0000000000006a49 [ 594.243406][ C1] R13: 0000000000000000 R14: 00002000000000c0 R15: dffffc0000000000 [ 594.251368][ C1] ? do_recvmmsg+0x55a/0x7d0 [ 594.255970][ C1] ? __sys_recvmmsg+0x280/0x280 [ 594.260807][ C1] ? vma_end_read+0x18/0x170 [ 594.265378][ C1] ? _raw_spin_unlock+0x40/0x40 [ 594.270214][ C1] __x64_sys_recvmmsg+0x191/0x240 [ 594.275250][ C1] ? do_recvmmsg+0x7d0/0x7d0 [ 594.279836][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 594.285034][ C1] do_syscall_64+0x55/0xb0 [ 594.289443][ C1] ? clear_bhb_loop+0x40/0x90 [ 594.294108][ C1] ? clear_bhb_loop+0x40/0x90 [ 594.298823][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.304711][ C1] RIP: 0033:0x7f7beff8ebe9 [ 594.309145][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.328736][ C1] RSP: 002b:00007f7bf0d2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 594.337136][ C1] RAX: ffffffffffffffda RBX: 00007f7bf01b6090 RCX: 00007f7beff8ebe9 [ 594.345119][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 594.353073][ C1] RBP: 00007f7bf0011e19 R08: 0000000000000000 R09: 0000000000000000 [ 594.361273][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 594.369246][ C1] R13: 00007f7bf01b6128 R14: 00007f7bf01b6090 R15: 00007fff55a7a188 [ 594.377235][ C1] [ 594.380294][ C1] [ 594.382609][ C1] Allocated by task 5158: [ 594.386932][ C1] kasan_set_track+0x4e/0x70 [ 594.391544][ C1] __kasan_kmalloc+0x8f/0xa0 [ 594.396123][ C1] kernfs_fop_open+0x3f5/0xcc0 [ 594.400887][ C1] do_dentry_open+0x8c6/0x1500 [ 594.405642][ C1] path_openat+0x274b/0x3190 [ 594.410223][ C1] do_filp_open+0x1c5/0x3d0 [ 594.414717][ C1] do_sys_openat2+0x12c/0x1c0 [ 594.419393][ C1] __x64_sys_openat+0x139/0x160 [ 594.424225][ C1] do_syscall_64+0x55/0xb0 [ 594.428621][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.434514][ C1] [ 594.436827][ C1] Freed by task 5158: [ 594.440782][ C1] kasan_set_track+0x4e/0x70 [ 594.445356][ C1] kasan_save_free_info+0x2e/0x50 [ 594.450360][ C1] ____kasan_slab_free+0x126/0x1e0 [ 594.455461][ C1] slab_free_freelist_hook+0x130/0x1b0 [ 594.460964][ C1] __kmem_cache_free+0xba/0x1f0 [ 594.465806][ C1] kernfs_fop_release+0x166/0x190 [ 594.470815][ C1] __fput+0x234/0x970 [ 594.474779][ C1] __se_sys_close+0x15f/0x220 [ 594.479444][ C1] do_syscall_64+0x55/0xb0 [ 594.483841][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.489717][ C1] [ 594.492021][ C1] Last potentially related work creation: [ 594.497728][ C1] kasan_save_stack+0x3e/0x60 [ 594.502398][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 594.507763][ C1] insert_work+0x3d/0x310 [ 594.512105][ C1] __queue_work+0xd2c/0x1020 [ 594.516677][ C1] call_timer_fn+0x16e/0x530 [ 594.521249][ C1] __run_timers+0x558/0x7d0 [ 594.525844][ C1] run_timer_softirq+0x67/0xf0 [ 594.530605][ C1] handle_softirqs+0x280/0x820 [ 594.535361][ C1] __irq_exit_rcu+0xc7/0x190 [ 594.539937][ C1] irq_exit_rcu+0x9/0x20 [ 594.544161][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 594.549779][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 594.555752][ C1] [ 594.558075][ C1] Second to last potentially related work creation: [ 594.564637][ C1] kasan_save_stack+0x3e/0x60 [ 594.569297][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 594.574649][ C1] task_work_add+0xd3/0x440 [ 594.579145][ C1] __io_req_task_work_add+0x2d5/0x840 [ 594.584515][ C1] io_acct_cancel_pending_work+0x3eb/0x510 [ 594.590341][ C1] io_wq_cancel_cb+0xca/0x330 [ 594.595009][ C1] io_try_cancel+0x1b7/0x2f0 [ 594.599582][ C1] __io_async_cancel+0x85/0x470 [ 594.604481][ C1] io_sync_cancel+0x532/0x8d0 [ 594.609158][ C1] __se_sys_io_uring_register+0x55b/0xc50 [ 594.614866][ C1] do_syscall_64+0x55/0xb0 [ 594.619298][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.625192][ C1] [ 594.627498][ C1] The buggy address belongs to the object at ffff888026a3e800 [ 594.627498][ C1] which belongs to the cache kmalloc-512 of size 512 [ 594.641707][ C1] The buggy address is located 42 bytes inside of [ 594.641707][ C1] freed 512-byte region [ffff888026a3e800, ffff888026a3ea00) [ 594.655425][ C1] [ 594.657728][ C1] The buggy address belongs to the physical page: [ 594.664125][ C1] page:ffffea00009a8f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26a3c [ 594.674258][ C1] head:ffffea00009a8f00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 594.683173][ C1] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 594.691603][ C1] page_type: 0xffffffff() [ 594.695911][ C1] raw: 00fff00000000840 ffff888017841c80 0000000000000000 dead000000000001 [ 594.704476][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 594.713032][ C1] page dumped because: kasan: bad access detected [ 594.719431][ C1] page_owner tracks the page as allocated [ 594.725129][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 787, tgid 787 (kworker/0:2), ts 9851070885, free_ts 0 [ 594.745254][ C1] post_alloc_hook+0x1cd/0x210 [ 594.750004][ C1] get_page_from_freelist+0x195c/0x19f0 [ 594.755559][ C1] __alloc_pages+0x1e3/0x460 [ 594.760144][ C1] alloc_slab_page+0x5d/0x170 [ 594.764816][ C1] new_slab+0x87/0x2e0 [ 594.768875][ C1] ___slab_alloc+0xc6d/0x12f0 [ 594.773541][ C1] __kmem_cache_alloc_node+0x1a2/0x260 [ 594.778989][ C1] kmalloc_trace+0x2a/0xe0 [ 594.783388][ C1] device_add+0xbe/0xc20 [ 594.787611][ C1] device_create_with_groups+0x25d/0x2f0 [ 594.793224][ C1] led_classdev_register_ext+0x430/0x940 [ 594.798835][ C1] input_leds_connect+0x4eb/0x6b0 [ 594.803843][ C1] input_register_device+0xcdc/0x1070 [ 594.809219][ C1] atkbd_connect+0x6fb/0x9a0 [ 594.813806][ C1] serio_driver_probe+0x7a/0xa0 [ 594.818636][ C1] really_probe+0x25b/0xb40 [ 594.823118][ C1] page_owner free stack trace missing [ 594.828495][ C1] [ 594.830795][ C1] Memory state around the buggy address: [ 594.836424][ C1] ffff888026a3e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 594.844468][ C1] ffff888026a3e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 594.852521][ C1] >ffff888026a3e800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 594.860580][ C1] ^ [ 594.865941][ C1] ffff888026a3e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 594.873985][ C1] ffff888026a3e900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 594.882019][ C1] ================================================================== [ 594.890145][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.896236][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 594.903428][ C1] CPU: 1 PID: 10020 Comm: syz.1.848 Not tainted 6.6.101-syzkaller #0 [ 594.911491][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 594.921526][ C1] Call Trace: [ 594.924791][ C1] [ 594.927628][ C1] dump_stack_lvl+0x16c/0x230 [ 594.932307][ C1] ? show_regs_print_info+0x20/0x20 [ 594.937486][ C1] ? load_image+0x3b0/0x3b0 [ 594.941987][ C1] panic+0x2c0/0x710 [ 594.945877][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 594.950391][ C1] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 594.956272][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 594.962152][ C1] ? _raw_spin_unlock+0x40/0x40 [ 594.966990][ C1] ? print_memory_metadata+0x314/0x400 [ 594.972445][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 594.977537][ C1] check_panic_on_warn+0x84/0xa0 [ 594.982455][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 594.987543][ C1] end_report+0x6f/0x140 [ 594.991764][ C1] kasan_report+0x128/0x150 [ 594.996245][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 595.001345][ C1] rose_timer_expiry+0x46a/0x4b0 [ 595.006263][ C1] call_timer_fn+0x16e/0x530 [ 595.010860][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 595.015867][ C1] ? call_timer_fn+0xbf/0x530 [ 595.020529][ C1] ? __run_timers+0x7d0/0x7d0 [ 595.025183][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 595.030363][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 595.035542][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 595.040629][ C1] __run_timers+0x52d/0x7d0 [ 595.045116][ C1] ? detach_timer+0x2b0/0x2b0 [ 595.049775][ C1] ? lock_chain_count+0x20/0x20 [ 595.054625][ C1] run_timer_softirq+0x67/0xf0 [ 595.059426][ C1] handle_softirqs+0x280/0x820 [ 595.064188][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 595.068938][ C1] ? do_softirq+0x180/0x180 [ 595.073442][ C1] __irq_exit_rcu+0xc7/0x190 [ 595.078012][ C1] ? irq_exit_rcu+0x20/0x20 [ 595.082515][ C1] irq_exit_rcu+0x9/0x20 [ 595.086751][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 595.092393][ C1] [ 595.095311][ C1] [ 595.098224][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 595.104216][ C1] RIP: 0010:do_recvmmsg+0x55a/0x7d0 [ 595.109411][ C1] Code: a8 0b 00 00 31 d2 e8 a5 06 fd f8 2e 2e 2e 31 c0 44 39 64 24 14 74 5a 8b 5c 24 04 89 d8 c1 e8 0a 83 e0 40 09 c3 e8 b6 69 25 f9 <41> ff c4 e9 bd fd ff ff e8 a9 69 25 f9 41 bc a8 ff ff ff e9 52 01 [ 595.129006][ C1] RSP: 0018:ffffc90019a77c80 EFLAGS: 00000246 [ 595.135079][ C1] RAX: ffffffff88602bda RBX: 0000000000000002 RCX: 0000000000080000 [ 595.143035][ C1] RDX: ffffc9000e46e000 RSI: 000000000007ffff RDI: 0000000000080000 [ 595.151037][ C1] RBP: ffffc90019a77e50 R08: ffffffff8e4a84ef R09: 1ffffffff1c9509d [ 595.159022][ C1] R10: dffffc0000000000 R11: fffffbfff1c9509e R12: 0000000000006a49 [ 595.167012][ C1] R13: 0000000000000000 R14: 00002000000000c0 R15: dffffc0000000000 [ 595.174981][ C1] ? do_recvmmsg+0x55a/0x7d0 [ 595.179570][ C1] ? __sys_recvmmsg+0x280/0x280 [ 595.184411][ C1] ? vma_end_read+0x18/0x170 [ 595.188990][ C1] ? _raw_spin_unlock+0x40/0x40 [ 595.193841][ C1] __x64_sys_recvmmsg+0x191/0x240 [ 595.198871][ C1] ? do_recvmmsg+0x7d0/0x7d0 [ 595.203454][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 595.208640][ C1] do_syscall_64+0x55/0xb0 [ 595.213045][ C1] ? clear_bhb_loop+0x40/0x90 [ 595.217703][ C1] ? clear_bhb_loop+0x40/0x90 [ 595.222358][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.228239][ C1] RIP: 0033:0x7f7beff8ebe9 [ 595.232648][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.252537][ C1] RSP: 002b:00007f7bf0d2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 595.260953][ C1] RAX: ffffffffffffffda RBX: 00007f7bf01b6090 RCX: 00007f7beff8ebe9 [ 595.268918][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 595.276884][ C1] RBP: 00007f7bf0011e19 R08: 0000000000000000 R09: 0000000000000000 [ 595.284844][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 595.292813][ C1] R13: 00007f7bf01b6128 R14: 00007f7bf01b6090 R15: 00007fff55a7a188 [ 595.300790][ C1] [ 595.304023][ C1] Kernel Offset: disabled [ 595.308333][ C1] Rebooting in 86400 seconds..