last executing test programs: 1m21.565628361s ago: executing program 3 (id=77): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg$can_raw(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x20) (fail_nth: 2) 1m21.36479433s ago: executing program 3 (id=80): r0 = socket$inet6(0xa, 0x3, 0x7) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000140)={0x6, r1, 0x30, {0xc00000000000, 0x9}}, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'team_slave_0\x00', &(0x7f0000002fc0)=@ethtool_stats}) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x2000) 1m21.297480942s ago: executing program 3 (id=84): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x5, &(0x7f00000001c0)=ANY=[], 0x1, 0x5508, &(0x7f0000002480)="$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") r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002cc0), 0x101, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x880, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$bpf(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x20025, &(0x7f0000000200)={[{@gid={'gid', 0x3d, r2}}]}) (async) write$capi20_data(r0, 0x0, 0x68) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x9004e1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1m20.816249183s ago: executing program 3 (id=93): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000002c0)={[{@pquota}, {@discard}, {@swalloc}, {@grpid}, {@uquota}, {@noalign}, {@inode64}, {@attr2}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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") mount$9p_unix(&(0x7f0000000140)='./file1\x00', &(0x7f0000000240)='./file1\x00', 0x0, 0x801000, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000180)={'ip6_vti0\x00', {0x2, 0x4e23, @broadcast}}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x93a162fb1f423eb1}, 0x0) recvmmsg(r3, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r8, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000000)=0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x2, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0xffff, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xe}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1m19.918866501s ago: executing program 3 (id=99): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0xffff, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xe}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) (fail_nth: 2) 1m19.452699101s ago: executing program 3 (id=103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r3, {0x0}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000c00)={0x8, 0x2, {r5}, {r6}, 0x8, 0x1}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d404e981", @ANYRES16=r4, @ANYBLOB="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"], 0x4d4}, 0x1, 0x0, 0x0, 0x10}, 0xc050) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x114, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x2, 0x0, 0x1, [@typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@remote}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b504681000000000000009ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5", @typed={0x4, 0x111}]}]}, 0x114}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r9, 0x1, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xeb, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xfffe}}, @TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 1m19.385318724s ago: executing program 32 (id=103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r3, {0x0}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000c00)={0x8, 0x2, {r5}, {r6}, 0x8, 0x1}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d404e981", @ANYRES16=r4, @ANYBLOB="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"], 0x4d4}, 0x1, 0x0, 0x0, 0x10}, 0xc050) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x114, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x2, 0x0, 0x1, [@typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@remote}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b504681000000000000009ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5", @typed={0x4, 0x111}]}]}, 0x114}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r9, 0x1, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xeb, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xfffe}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 30.688868814s ago: executing program 4 (id=479): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000006207000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) 30.160070837s ago: executing program 4 (id=487): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) shutdown(r0, 0x1) 30.09690532s ago: executing program 4 (id=488): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x1}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b4", 0x1}], 0x1}}], 0x1, 0x20e8086) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 29.293456484s ago: executing program 4 (id=506): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8) 29.216678567s ago: executing program 4 (id=508): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000180)="c9f7b98600"/14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf27235cb8dee9c5c}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x45}}, 0x3f}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r5, 0x1, 0x70bd25, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 28.91142426s ago: executing program 4 (id=521): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200013, 0xfffffffe, 0x8000, 0x525, 0x9}) 28.873856332s ago: executing program 33 (id=521): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200013, 0xfffffffe, 0x8000, 0x525, 0x9}) 2.776855451s ago: executing program 2 (id=851): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.770226582s ago: executing program 2 (id=853): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r0, &(0x7f0000000080)="cc", 0x1, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x1) sendfile(r1, r1, 0x0, 0x80000000) 2.58490322s ago: executing program 2 (id=861): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 2.584571799s ago: executing program 2 (id=862): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfb010016e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e94d52bb50b43066c1de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x400000000000000, 0x0, 0x413, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r2, 0x401070ca, 0x0) 2.533227252s ago: executing program 2 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x5, 0x91, 'l'}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) 2.439188866s ago: executing program 2 (id=866): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000040)) write$UHID_INPUT(r0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x7, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x38, 0xff, 0x4f, 0x40, 0x13d3, 0x3219, 0x7a67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x1, 0x0, 0x5e, 0x8b, 0x15}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000000)) 1.888730109s ago: executing program 0 (id=881): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb54c01283942ac9b13d6f04ae52bb40a3d35dc6340f126aeffdb8db0f61c11e854198723ba5eddf5f06a860", 0xa6}, {&(0x7f00000002c0)="5bea410000008000000000", 0xb}, {&(0x7f00000005c0)="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", 0x3d0}], 0x3}}], 0x1, 0x95) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 1.703789917s ago: executing program 1 (id=886): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x2, @remote}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.600717011s ago: executing program 1 (id=888): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000002640)={@local, @random="fad1e0480100", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x1, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0xcf, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000002c0)=0x3f7, 0x4) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 1.600225782s ago: executing program 1 (id=890): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x800}]}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) 1.512751335s ago: executing program 5 (id=894): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{}, {0x20, '/dev/fb0\x00'}, {0x20, '#! '}, {0x20, '/dev/loop#\x00'}, {0x20, '\x00'}, {0x20, ')'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea0d007d49c226f35df5a0c3c33bb1e3daf5801aa9e58e4c0873e4"}, 0x63) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 1.512364605s ago: executing program 1 (id=895): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbc, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x401}, 0x18) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 1.485379947s ago: executing program 5 (id=897): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x6c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x2c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x7f}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x8b}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x5}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x12, 0x6}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.41293461s ago: executing program 5 (id=899): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001"], 0x184}}, 0x0) 1.41229541s ago: executing program 5 (id=901): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffe44}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="9eeb01001800000000000000280000002800fe0737dee7f54ec600000100000f03000000020000000000000081ffffff84bf1e000000800000000f01000000d1005f004be6fc322a37de4157c819947a989d517462fb816a4cd52a5c2bdc1d06988c4fdfc2d131564464386b923dbcd3b834525e07aca9e7c66dcd093cbd3068cf9dedcac60f9e3f035786b03dba6196bb4011852eda5dc62a3adaa307f458aa4bde20129a34b233730481c2d6a19361943209c2bd76ab76"], &(0x7f0000000100)=""/135, 0x43, 0x87, 0x1}, 0x28) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x18, 0x0, 0x3, 0xc, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x9}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xfffffff8, @local, 0x8}}]}, 0x60}, 0x1, 0x7}, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f0000000340)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) prctl$PR_SET_THP_DISABLE(0x29, 0x1) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x0, 0xc93, 0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.004526047s ago: executing program 0 (id=914): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@remote, @in6=@mcast1, 0x4e21, 0x9, 0x4e21, 0x8, 0x2, 0x0, 0x0, 0x87}, {0xfffffffffffffffe, 0x9, 0x73, 0xfb, 0x4455, 0x10000, 0xb, 0x9}, {0x1, 0x7, 0xff, 0x2}, 0xff, 0x6e6bbf, 0x2, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d3, 0x6c}, 0xa, @in=@empty, 0x3502, 0x0, 0x3, 0xbd, 0x80000001, 0x7, 0xfffffffc}}, 0xe8) 628.755603ms ago: executing program 1 (id=923): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001d80)=ANY=[@ANYRES32=0x0, @ANYBLOB="3effb820e58e3f9cc157987751ec3d4190e20951acf37cec714a4d211f5c4119119a0f52c11291b5f92001bd2d2064580fd93ccbb4fddec0717373e695b306f9985b1c03d9bfd9ccf23499d1ad0b810a98", @ANYRESOCT, @ANYBLOB="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", @ANYRES64, @ANYRES16], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 606.079534ms ago: executing program 1 (id=924): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x6e20, @local}, 0x10) 528.578637ms ago: executing program 5 (id=927): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 173.240912ms ago: executing program 0 (id=934): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000500)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000001c0)="b77375e5dc", 0x5}], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x2c}, {&(0x7f0000000140)="1121589be0", 0x5}], 0x2}}], 0x800000000000058, 0x20000040) 124.687104ms ago: executing program 0 (id=936): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 124.544824ms ago: executing program 6 (id=937): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb54c01283942ac9b13d6f04ae52bb40a3d35dc6340f126aeffdb8db0f61c11e854198723ba5eddf5f06a860", 0xa6}, {&(0x7f00000005c0)="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", 0x19c}], 0x2}}], 0x1, 0x95) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) 107.865725ms ago: executing program 6 (id=938): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) 106.865125ms ago: executing program 0 (id=939): userfaultfd(0x1) unshare(0x20000400) getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) 89.038256ms ago: executing program 0 (id=940): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES16], 0x0) syz_usb_ep_read(r0, 0xa, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x10000) 20.854398ms ago: executing program 6 (id=941): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) 20.649948ms ago: executing program 6 (id=942): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) syz_io_uring_setup(0x238, 0x0, 0x0, &(0x7f00000001c0)) 20.503698ms ago: executing program 6 (id=943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x34, r1, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}}, 0x4000) 10.846789ms ago: executing program 6 (id=944): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000000)={[{@auto_da_alloc}, {@minixdf}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000440)=ANY=[], 0xfe37, 0x2) 0s ago: executing program 5 (id=945): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8c57, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xf5, 0x2e6, &(0x7f0000000540)="$eJzs3ctrE18UwPGTV5O0v/6ShYiIwqWCKNKhCbhz0SItiAGlbQQrCFM71ZBpUjKhEBGbheDWtYsuXIoggjs3Im678S/wteumOwsWR6Yzk6bJGNNqX/b7WTSnOffMvZm56eO2uVm59GSuOGtp321XdFjqshaStIQlIq66nH+/9On0xLv/3M+VGhuZzGSVCovIrQcvBt5W+268/v9NXJbTt1dWs1+XT02K/Ji8V7BUwVIl21a6mi6XqyGneKZgFTWlrpuGbhmqULKMStXL69OmoWbN8vx8Temlmf7e+YphWUov1VTRqKlqWVUrNaXf1QslpWma6u8ViEi6EYXbcqFOhfnna7Ytq86Fj9fFtu2A1nU/iHm38T8bLA6SluvfsW3b5Ijs5siwF9bsaNfXH/8e9/n/+SnX/2iauDl1dSSXGx1XKiEy93ghv5B3b938xz4piCmGLI1fmFoXsRsk5Hwcu5IbHVIb0nJ2btGrX1zIu98cRma9+oyknJ9TmurFr8+49WprfUx6m+uzkpJjwfVZv17CTfU9cu5MU70mKflwR8piyow4tZv1DzNKXb6Wa+k/udEOAAAAAAAAAIDDSFMNm+v3oc0/9WpafOM/Phr5pHOv087NN9bXhyQl68Hr80OB6/tRORndv8cNAAAAAMBRYtXuF3XTNCq7E0SeJTt0ERMRJxB5NOAMpuMBj3sj7q73HhFpT0U6d7ElSF50+3s57g1MdvNE/aXAf7FGUTdf+amkBDUOb2sCDPYEnvnEnj5A6aaxJHY2seNdT63WILTu33MisI0d+v1xbN2Mba/34W09HX4ZJFpP1OAX97hmhy8a3xpLfAAAAAAOkaZfnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD7Z0eZh/r79W1PivUV8+5Zsre8Tz77/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6gnwEAAP//JZK+GA==") syz_mount_image$squashfs(&(0x7f0000000400), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xa, 0x1cb, &(0x7f00000001c0)="$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") kernel console output (not intermixed with test programs): d 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.150 (5192) [ 65.058468][ T5192] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 65.060622][ T5192] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 65.064784][ T5192] BTRFS info (device loop2): using free space tree [ 65.154639][ T5199] loop4: detected capacity change from 0 to 40427 [ 65.162279][ T5199] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 65.170927][ T5199] F2FS-fs (loop4): invalid crc value [ 65.180815][ T5199] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.200719][ T5199] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 65.215978][ T5192] BTRFS info (device loop2): enabling ssd optimizations [ 65.230895][ T5199] F2FS-fs (loop4) : inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0x650/0xd60 [ 65.261859][ T5224] loop1: detected capacity change from 0 to 32768 [ 65.269080][ T4325] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 65.279197][ T5224] JBD2: Ignoring recovery information on journal [ 65.308577][ T4321] syz-executor: attempt to access beyond end of device [ 65.308577][ T4321] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 65.341707][ T5224] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 65.985327][ T4320] ocfs2: Unmounting device (7,1) on (node local) [ 66.052637][ T5253] loop1: detected capacity change from 0 to 4096 [ 66.070797][ T5253] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 67.035302][ T4725] team0 (unregistering): Port device team_slave_1 removed [ 67.194683][ T4725] team0 (unregistering): Port device team_slave_0 removed [ 67.383406][ T4725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.585219][ T4725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.947724][ T4725] bond0 (unregistering): Released all slaves [ 70.152122][ T5213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 70.199408][ T5250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.155'. [ 70.210623][ T4937] device veth0_vlan entered promiscuous mode [ 70.225445][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.227006][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.228518][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.229995][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.231490][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.232865][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.249011][ T4937] device veth1_vlan entered promiscuous mode [ 70.291571][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.293154][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.294573][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.296066][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.316064][ T4937] device veth0_macvtap entered promiscuous mode [ 70.319212][ T4937] device veth1_macvtap entered promiscuous mode [ 70.325713][ T4937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.327384][ T4937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.329140][ T4937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.330908][ T4937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.332497][ T4937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.343544][ T4937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.344985][ T4937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.346480][ T4937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.352740][ T4937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.361436][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.363030][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.364300][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.365823][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.367766][ T5274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.163'. [ 70.451569][ T4937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.454073][ T4937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.455821][ T4937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.457349][ T4937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.458926][ T4937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.460445][ T4937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.461947][ T4937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.473431][ T4937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.478637][ T4937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.481131][ T4937] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.482468][ T4937] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.499511][ T4937] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.500908][ T4937] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.511132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.512804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.534926][ T5279] loop2: detected capacity change from 0 to 32768 [ 70.545644][ T5270] loop1: detected capacity change from 0 to 32768 [ 70.570730][ T5270] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.162 (5270) [ 70.587525][ T5270] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 70.589370][ T4591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.590663][ T4591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.596284][ T5270] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 70.597553][ T5270] BTRFS info (device loop1): using free space tree [ 70.599966][ T5279] JBD2: Ignoring recovery information on journal [ 70.607983][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.614542][ T5275] loop0: detected capacity change from 0 to 32768 [ 70.617027][ T4591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.618258][ T4591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.623135][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.626713][ T5275] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.164 (5275) [ 70.631451][ T5279] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 70.667858][ T5296] loop4: detected capacity change from 0 to 1764 [ 70.771358][ T27] kauditd_printk_skb: 162 callbacks suppressed [ 70.772673][ T27] audit: type=1326 audit(70.760:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8815b9e8 code=0x7ffc0000 [ 70.803750][ T5299] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 70.805176][ T27] audit: type=1326 audit(70.760:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=430 compat=0 ip=0xffff8815b9e8 code=0x7ffc0000 [ 70.849650][ T27] audit: type=1326 audit(70.760:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8815b9e8 code=0x7ffc0000 [ 70.870458][ T5296] Invalid ELF header magic: != ELF [ 70.881157][ T27] audit: type=1326 audit(70.760:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffff8815b9e8 code=0x7ffc0000 [ 70.896149][ T27] audit: type=1326 audit(70.760:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8815b9e8 code=0x7ffc0000 [ 70.940082][ T27] audit: type=1326 audit(70.760:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=432 compat=0 ip=0xffff8815b9e8 code=0x7ffc0000 [ 70.975807][ T27] audit: type=1326 audit(70.760:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8815b9e8 code=0x7ffc0000 [ 71.012770][ T27] audit: type=1326 audit(70.760:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8815b9e8 code=0x7ffc0000 [ 71.046885][ T27] audit: type=1326 audit(70.760:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8815b9e8 code=0x7ffc0000 [ 71.147332][ T27] audit: type=1326 audit(70.760:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8815b9e8 code=0x7ffc0000 [ 71.174841][ T5326] FAULT_INJECTION: forcing a failure. [ 71.174841][ T5326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.185405][ T5324] sctp: [Deprecated]: syz.4.169 (pid 5324) Use of int in max_burst socket option. [ 71.185405][ T5324] Use struct sctp_assoc_value instead [ 71.193653][ T5326] CPU: 1 PID: 5326 Comm: syz.5.168 Not tainted syzkaller #0 [ 71.194781][ T5326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 71.196432][ T5326] Call trace: [ 71.196936][ T5326] dump_backtrace+0x1c8/0x1f4 [ 71.197665][ T5326] show_stack+0x2c/0x3c [ 71.198322][ T5326] __dump_stack+0x30/0x40 [ 71.199013][ T5326] dump_stack_lvl+0xf8/0x160 [ 71.199713][ T5326] dump_stack+0x1c/0x5c [ 71.200368][ T5326] should_fail_ex+0x3c4/0x520 [ 71.201062][ T5326] should_fail+0x14/0x24 [ 71.201681][ T5326] should_fail_usercopy+0x20/0x30 [ 71.202417][ T5326] iovec_from_user+0xcc/0x5dc [ 71.203082][ T5326] __import_iovec+0x84/0x470 [ 71.203758][ T5326] import_iovec+0x88/0xa4 [ 71.204405][ T5326] copy_msghdr_from_user+0x334/0x4ac [ 71.205172][ T5326] __sys_sendmmsg+0x2c8/0x754 [ 71.205902][ T5326] __arm64_sys_sendmmsg+0xa0/0xbc [ 71.206708][ T5326] invoke_syscall+0x98/0x2bc [ 71.207452][ T5326] el0_svc_common+0x138/0x258 [ 71.208154][ T5326] do_el0_svc+0x58/0x13c [ 71.208810][ T5326] el0_svc+0x58/0x138 [ 71.209373][ T5326] el0t_64_sync_handler+0x84/0xf0 [ 71.210080][ T5326] el0t_64_sync+0x18c/0x190 [ 71.260626][ T4325] ocfs2: Unmounting device (7,2) on (node local) [ 71.276987][ T5270] BTRFS info (device loop1): enabling ssd optimizations [ 71.347785][ T5324] loop4: detected capacity change from 0 to 32768 [ 71.375225][ T5324] ERROR: (device loop4): dbAllocAG: unable to allocate blocks [ 71.375225][ T5324] [ 71.377654][ T4320] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 71.387725][ T5338] device syzkaller1 entered promiscuous mode [ 71.429316][ T5324] ERROR: (device loop4): remounting filesystem as read-only [ 71.466590][ T5355] FAULT_INJECTION: forcing a failure. [ 71.466590][ T5355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.468580][ T5355] CPU: 1 PID: 5355 Comm: syz.1.173 Not tainted syzkaller #0 [ 71.469668][ T5355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 71.471332][ T5355] Call trace: [ 71.471845][ T5355] dump_backtrace+0x1c8/0x1f4 [ 71.472583][ T5355] show_stack+0x2c/0x3c [ 71.473208][ T5355] __dump_stack+0x30/0x40 [ 71.473883][ T5355] dump_stack_lvl+0xf8/0x160 [ 71.474602][ T5355] dump_stack+0x1c/0x5c [ 71.475231][ T5355] should_fail_ex+0x3c4/0x520 [ 71.475961][ T5355] should_fail+0x14/0x24 [ 71.476598][ T5355] should_fail_usercopy+0x20/0x30 [ 71.477339][ T5355] iovec_from_user+0xcc/0x5dc [ 71.478031][ T5355] __import_iovec+0x84/0x470 [ 71.478689][ T5355] import_iovec+0x88/0xa4 [ 71.479336][ T5355] copy_msghdr_from_user+0x334/0x4ac [ 71.480146][ T5355] __sys_sendmsg+0x200/0x320 [ 71.480809][ T5355] __arm64_sys_sendmsg+0x80/0x94 [ 71.481589][ T5355] invoke_syscall+0x98/0x2bc [ 71.482337][ T5355] el0_svc_common+0x138/0x258 [ 71.483100][ T5355] do_el0_svc+0x58/0x13c [ 71.483749][ T5355] el0_svc+0x58/0x138 [ 71.484317][ T5355] el0t_64_sync_handler+0x84/0xf0 [ 71.485007][ T5355] el0t_64_sync+0x18c/0x190 [ 71.538969][ T5360] loop2: detected capacity change from 0 to 1024 [ 71.540276][ T5360] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.593358][ T5360] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 71.688743][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 71.690126][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 71.794841][ T4725] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 71.799000][ T4725] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 71.801238][ T4725] EXT4-fs (loop2): This should not happen!! Data will be lost [ 71.801238][ T4725] [ 71.802742][ T4725] EXT4-fs (loop2): Total free blocks count 0 [ 71.811361][ T4725] EXT4-fs (loop2): Free/Dirty block details [ 71.812337][ T4725] EXT4-fs (loop2): free_blocks=68451041280 [ 71.821492][ T4725] EXT4-fs (loop2): dirty_blocks=0 [ 71.822276][ T4725] EXT4-fs (loop2): Block reservation details [ 71.823511][ T4725] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 71.825833][ T4325] EXT4-fs (loop2): unmounting filesystem. [ 71.881143][ T5379] loop5: detected capacity change from 0 to 2048 [ 71.891777][ T5382] loop2: detected capacity change from 0 to 1024 [ 71.913672][ T5382] hfsplus: unable to parse mount options [ 71.936266][ T5379] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 71.938902][ T5379] EXT4-fs (loop5): shut down requested (2) [ 71.970708][ T5299] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.001916][ T4937] EXT4-fs (loop5): unmounting filesystem. [ 72.026013][ T5397] loop0: detected capacity change from 0 to 1024 [ 72.044554][ T5385] loop1: detected capacity change from 0 to 32768 [ 72.075794][ T5385] JBD2: Ignoring recovery information on journal [ 72.140830][ T5393] loop4: detected capacity change from 0 to 32768 [ 72.149614][ T5385] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 72.157879][ T5393] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.183 (5393) [ 72.170591][ T5393] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 72.172014][ T5393] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 72.189669][ T5393] BTRFS info (device loop4): using free space tree [ 72.211501][ T5414] device syzkaller1 entered promiscuous mode [ 72.230338][ T5414] FAULT_INJECTION: forcing a failure. [ 72.230338][ T5414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.232460][ T5414] CPU: 0 PID: 5414 Comm: syz.5.187 Not tainted syzkaller #0 [ 72.233606][ T5414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 72.235171][ T5414] Call trace: [ 72.235676][ T5414] dump_backtrace+0x1c8/0x1f4 [ 72.236421][ T5414] show_stack+0x2c/0x3c [ 72.237057][ T5414] __dump_stack+0x30/0x40 [ 72.237803][ T5414] dump_stack_lvl+0xf8/0x160 [ 72.238518][ T5414] dump_stack+0x1c/0x5c [ 72.239178][ T5414] should_fail_ex+0x3c4/0x520 [ 72.239878][ T5414] should_fail+0x14/0x24 [ 72.240503][ T5414] should_fail_usercopy+0x20/0x30 [ 72.241280][ T5414] _copy_from_iter+0x18c/0xf40 [ 72.242022][ T5414] tun_get_user+0x2c4/0x3240 [ 72.242705][ T5414] tun_chr_write_iter+0xfc/0x204 [ 72.243454][ T5414] vfs_write+0x5ac/0x7c4 [ 72.244107][ T5414] ksys_write+0x120/0x210 [ 72.244742][ T5414] __arm64_sys_write+0x7c/0x90 [ 72.245436][ T5414] invoke_syscall+0x98/0x2bc [ 72.246172][ T5414] el0_svc_common+0x138/0x258 [ 72.246882][ T5414] do_el0_svc+0x58/0x13c [ 72.247559][ T5414] el0_svc+0x58/0x138 [ 72.248165][ T5414] el0t_64_sync_handler+0x84/0xf0 [ 72.248922][ T5414] el0t_64_sync+0x18c/0x190 [ 72.621956][ T5438] FAULT_INJECTION: forcing a failure. [ 72.621956][ T5438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.627021][ T5438] CPU: 0 PID: 5438 Comm: syz.0.189 Not tainted syzkaller #0 [ 72.628191][ T5438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 72.629832][ T5438] Call trace: [ 72.630378][ T5438] dump_backtrace+0x1c8/0x1f4 [ 72.631177][ T5438] show_stack+0x2c/0x3c [ 72.631805][ T5438] __dump_stack+0x30/0x40 [ 72.632487][ T5438] dump_stack_lvl+0xf8/0x160 [ 72.633209][ T5438] dump_stack+0x1c/0x5c [ 72.633896][ T5438] should_fail_ex+0x3c4/0x520 [ 72.634676][ T5438] should_fail+0x14/0x24 [ 72.635339][ T5438] should_fail_usercopy+0x20/0x30 [ 72.636129][ T5438] iovec_from_user+0xcc/0x5dc [ 72.636850][ T5438] __import_iovec+0x84/0x470 [ 72.637546][ T5438] import_iovec+0x88/0xa4 [ 72.638230][ T5438] copy_msghdr_from_user+0x334/0x4ac [ 72.639074][ T5438] __sys_sendmsg+0x200/0x320 [ 72.639779][ T5438] __arm64_sys_sendmsg+0x80/0x94 [ 72.640525][ T5438] invoke_syscall+0x98/0x2bc [ 72.641234][ T5438] el0_svc_common+0x138/0x258 [ 72.641972][ T5438] do_el0_svc+0x58/0x13c [ 72.642630][ T5438] el0_svc+0x58/0x138 [ 72.643266][ T5438] el0t_64_sync_handler+0x84/0xf0 [ 72.644110][ T5438] el0t_64_sync+0x18c/0x190 [ 72.715337][ T5393] BTRFS info (device loop4): enabling ssd optimizations [ 72.779123][ T4320] ocfs2: Unmounting device (7,1) on (node local) [ 72.804258][ T5451] FAULT_INJECTION: forcing a failure. [ 72.804258][ T5451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.806230][ T5451] CPU: 1 PID: 5451 Comm: syz.0.190 Not tainted syzkaller #0 [ 72.807358][ T5451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 72.808837][ T5451] Call trace: [ 72.809387][ T5451] dump_backtrace+0x1c8/0x1f4 [ 72.810149][ T5451] show_stack+0x2c/0x3c [ 72.810783][ T5451] __dump_stack+0x30/0x40 [ 72.811480][ T5451] dump_stack_lvl+0xf8/0x160 [ 72.812218][ T5451] dump_stack+0x1c/0x5c [ 72.812799][ T5451] should_fail_ex+0x3c4/0x520 [ 72.813512][ T5451] should_fail+0x14/0x24 [ 72.814135][ T5451] should_fail_usercopy+0x20/0x30 [ 72.814855][ T5451] iovec_from_user+0xcc/0x5dc [ 72.815652][ T5451] __import_iovec+0x84/0x470 [ 72.816405][ T5451] import_iovec+0x88/0xa4 [ 72.817108][ T5451] copy_msghdr_from_user+0x334/0x4ac [ 72.818010][ T5451] __sys_sendmsg+0x200/0x320 [ 72.818750][ T5451] __arm64_sys_sendmsg+0x80/0x94 [ 72.819530][ T5451] invoke_syscall+0x98/0x2bc [ 72.820303][ T5451] el0_svc_common+0x138/0x258 [ 72.820965][ T5451] do_el0_svc+0x58/0x13c [ 72.821636][ T5451] el0_svc+0x58/0x138 [ 72.822210][ T5451] el0t_64_sync_handler+0x84/0xf0 [ 72.822989][ T5451] el0t_64_sync+0x18c/0x190 [ 72.828727][ T4321] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 72.877659][ T5450] loop2: detected capacity change from 0 to 32768 [ 72.883657][ T5450] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.191 (5450) [ 72.940575][ T5299] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (5299) [ 73.097472][ T5288] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 73.200783][ T5462] loop2: detected capacity change from 0 to 32768 [ 73.247900][ T5462] XFS (loop2): Mounting V5 Filesystem [ 73.259162][ T5463] loop1: detected capacity change from 0 to 32768 [ 73.265273][ T5463] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 73.287040][ T5462] XFS (loop2): Ending clean mount [ 73.289406][ T5462] XFS (loop2): Quotacheck needed: Please wait. [ 73.310386][ T5462] XFS (loop2): Quotacheck: Done. [ 73.371373][ T4325] XFS (loop2): Unmounting Filesystem [ 73.411689][ T5494] Bluetooth: MGMT ver 1.22 [ 73.428052][ T5497] bond0: option min_links: invalid value (18446744073709551613) [ 73.431537][ T5497] bond0: option min_links: allowed values 0 - 2147483647 [ 73.506304][ T5289] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 73.614627][ T5508] FAULT_INJECTION: forcing a failure. [ 73.614627][ T5508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.622315][ T5508] CPU: 1 PID: 5508 Comm: syz.4.201 Not tainted syzkaller #0 [ 73.623485][ T5508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 73.625024][ T5508] Call trace: [ 73.625543][ T5508] dump_backtrace+0x1c8/0x1f4 [ 73.626255][ T5508] show_stack+0x2c/0x3c [ 73.626904][ T5508] __dump_stack+0x30/0x40 [ 73.627536][ T5508] dump_stack_lvl+0xf8/0x160 [ 73.628239][ T5508] dump_stack+0x1c/0x5c [ 73.628881][ T5508] should_fail_ex+0x3c4/0x520 [ 73.629589][ T5508] should_fail+0x14/0x24 [ 73.630205][ T5508] should_fail_usercopy+0x20/0x30 [ 73.631022][ T5508] iovec_from_user+0xcc/0x5dc [ 73.631765][ T5508] __import_iovec+0x84/0x470 [ 73.632482][ T5508] import_iovec+0x88/0xa4 [ 73.633136][ T5508] copy_msghdr_from_user+0x334/0x4ac [ 73.634059][ T5508] __sys_sendmsg+0x200/0x320 [ 73.634767][ T5508] __arm64_sys_sendmsg+0x80/0x94 [ 73.635634][ T5508] invoke_syscall+0x98/0x2bc [ 73.636398][ T5508] el0_svc_common+0x138/0x258 [ 73.637165][ T5508] do_el0_svc+0x58/0x13c [ 73.637830][ T5508] el0_svc+0x58/0x138 [ 73.638459][ T5508] el0t_64_sync_handler+0x84/0xf0 [ 73.639296][ T5508] el0t_64_sync+0x18c/0x190 [ 73.718195][ T5454] loop0: detected capacity change from 0 to 131072 [ 73.754414][ T5299] I/O error, dev loop0, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.818216][ T5521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'. [ 73.859244][ C1] vcan0: j1939_tp_rxtimer: 0x0000000092d2fb5e: rx timeout, send abort [ 73.983098][ T5523] loop1: detected capacity change from 0 to 32768 [ 74.018916][ T5523] JBD2: Ignoring recovery information on journal [ 74.078697][ T5539] FAULT_INJECTION: forcing a failure. [ 74.078697][ T5539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.081166][ T5539] CPU: 0 PID: 5539 Comm: syz.5.207 Not tainted syzkaller #0 [ 74.082268][ T5539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 74.083928][ T5539] Call trace: [ 74.084472][ T5539] dump_backtrace+0x1c8/0x1f4 [ 74.085199][ T5539] show_stack+0x2c/0x3c [ 74.085816][ T5539] __dump_stack+0x30/0x40 [ 74.086435][ T5539] dump_stack_lvl+0xf8/0x160 [ 74.087157][ T5539] dump_stack+0x1c/0x5c [ 74.087828][ T5539] should_fail_ex+0x3c4/0x520 [ 74.088506][ T5539] should_fail+0x14/0x24 [ 74.089151][ T5539] should_fail_usercopy+0x20/0x30 [ 74.089841][ T5539] iovec_from_user+0xcc/0x5dc [ 74.090535][ T5539] __import_iovec+0x84/0x470 [ 74.091317][ T5539] import_iovec+0x88/0xa4 [ 74.092025][ T5539] copy_msghdr_from_user+0x334/0x4ac [ 74.092881][ T5539] __sys_sendmsg+0x200/0x320 [ 74.093649][ T5539] __arm64_sys_sendmsg+0x80/0x94 [ 74.094468][ T5539] invoke_syscall+0x98/0x2bc [ 74.095218][ T5539] el0_svc_common+0x138/0x258 [ 74.095954][ T5539] do_el0_svc+0x58/0x13c [ 74.096647][ T5539] el0_svc+0x58/0x138 [ 74.097291][ T5539] el0t_64_sync_handler+0x84/0xf0 [ 74.098079][ T5539] el0t_64_sync+0x18c/0x190 [ 74.106124][ T5523] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 74.251516][ T5534] loop0: detected capacity change from 0 to 32768 [ 74.268752][ T5534] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 74.359592][ C1] vcan0: j1939_tp_rxtimer: 0x00000000581c10cc: rx timeout, send abort [ 74.360982][ C1] vcan0: j1939_tp_rxtimer: 0x0000000092d2fb5e: abort rx timeout. Force session deactivation [ 74.363047][ T5542] mkiss: ax0: crc mode is auto. [ 74.526742][ T5543] mkiss: ax0: crc mode is auto. [ 74.610643][ T5546] loop4: detected capacity change from 0 to 2048 [ 74.652117][ T5288] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 74.668738][ T4320] ocfs2: Unmounting device (7,1) on (node local) [ 74.680748][ T5546] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 74.681638][ T5558] FAULT_INJECTION: forcing a failure. [ 74.681638][ T5558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.683880][ T5546] EXT4-fs (loop4): shut down requested (2) [ 74.694837][ T5558] CPU: 0 PID: 5558 Comm: syz.0.211 Not tainted syzkaller #0 [ 74.696033][ T5558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 74.697620][ T5558] Call trace: [ 74.698137][ T5558] dump_backtrace+0x1c8/0x1f4 [ 74.698879][ T5558] show_stack+0x2c/0x3c [ 74.699511][ T5558] __dump_stack+0x30/0x40 [ 74.700154][ T5558] dump_stack_lvl+0xf8/0x160 [ 74.700835][ T5558] dump_stack+0x1c/0x5c [ 74.701515][ T5558] should_fail_ex+0x3c4/0x520 [ 74.702200][ T5558] should_fail+0x14/0x24 [ 74.702802][ T5558] should_fail_usercopy+0x20/0x30 [ 74.703558][ T5558] iovec_from_user+0xcc/0x5dc [ 74.704268][ T5558] __import_iovec+0x84/0x470 [ 74.705020][ T5558] import_iovec+0x88/0xa4 [ 74.705653][ T5558] copy_msghdr_from_user+0x334/0x4ac [ 74.706466][ T5558] __sys_sendmsg+0x200/0x320 [ 74.707181][ T5558] __arm64_sys_sendmsg+0x80/0x94 [ 74.707944][ T5558] invoke_syscall+0x98/0x2bc [ 74.708659][ T5558] el0_svc_common+0x138/0x258 [ 74.709490][ T5558] do_el0_svc+0x58/0x13c [ 74.710156][ T5558] el0_svc+0x58/0x138 [ 74.710739][ T5558] el0t_64_sync_handler+0x84/0xf0 [ 74.711472][ T5558] el0t_64_sync+0x18c/0x190 [ 74.748970][ T5563] 9pnet_fd: Insufficient options for proto=fd [ 74.750325][ T5563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 74.768151][ T4321] EXT4-fs (loop4): unmounting filesystem. [ 74.860958][ C1] vcan0: j1939_tp_rxtimer: 0x00000000581c10cc: abort rx timeout. Force session deactivation [ 74.886713][ T5578] Cannot find set identified by id 0 to match [ 75.257976][ T5590] FAULT_INJECTION: forcing a failure. [ 75.257976][ T5590] name failslab, interval 1, probability 0, space 0, times 0 [ 75.260251][ T5590] CPU: 1 PID: 5590 Comm: syz.2.224 Not tainted syzkaller #0 [ 75.261409][ T5590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 75.262937][ T5590] Call trace: [ 75.263414][ T5590] dump_backtrace+0x1c8/0x1f4 [ 75.264121][ T5590] show_stack+0x2c/0x3c [ 75.264769][ T5590] __dump_stack+0x30/0x40 [ 75.265452][ T5590] dump_stack_lvl+0xf8/0x160 [ 75.266203][ T5590] dump_stack+0x1c/0x5c [ 75.266851][ T5590] should_fail_ex+0x3c4/0x520 [ 75.267601][ T5590] __should_failslab+0xc0/0x120 [ 75.268390][ T5590] should_failslab+0x10/0x28 [ 75.269156][ T5590] __kmem_cache_alloc_node+0x7c/0x320 [ 75.270002][ T5590] __kmalloc_node+0xdc/0x17c [ 75.270753][ T5590] kvmalloc_node+0x88/0x1dc [ 75.271502][ T5590] xt_alloc_table_info+0x54/0xc8 [ 75.272230][ T5590] do_ipt_set_ctl+0x758/0xb20 [ 75.272997][ T5590] nf_setsockopt+0x270/0x290 [ 75.273654][ T5590] ip_setsockopt+0x124/0x134 [ 75.274400][ T5590] tcp_setsockopt+0xcc/0xe8 [ 75.275091][ T5590] sock_common_setsockopt+0xb0/0xcc [ 75.275872][ T5590] __sys_setsockopt+0x2f8/0x504 [ 75.276617][ T5590] __arm64_sys_setsockopt+0xb8/0xd4 [ 75.277413][ T5590] invoke_syscall+0x98/0x2bc [ 75.278090][ T5590] el0_svc_common+0x138/0x258 [ 75.278806][ T5590] do_el0_svc+0x58/0x13c [ 75.279426][ T5590] el0_svc+0x58/0x138 [ 75.279993][ T5590] el0t_64_sync_handler+0x84/0xf0 [ 75.280729][ T5590] el0t_64_sync+0x18c/0x190 [ 75.359889][ T5580] loop5: detected capacity change from 0 to 32768 [ 75.375258][ T5580] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 75.380049][ T5585] loop0: detected capacity change from 0 to 32768 [ 75.407137][ T5585] JBD2: Ignoring recovery information on journal [ 75.444318][ T5288] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 75.455744][ T5597] binder: 5596:5597 BC_ACQUIRE_DONE u0000000000000000 node 1 cookie mismatch 00000000000000fc != 0000000000000000 [ 75.486553][ T5585] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 75.488937][ T5599] loop2: detected capacity change from 0 to 2048 [ 75.495246][ T5597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.227'. [ 75.520656][ T5599] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 75.528000][ T5599] EXT4-fs (loop2): shut down requested (2) [ 75.629237][ T5603] 8021q: VLANs not supported on wg2 [ 75.678058][ T4325] EXT4-fs (loop2): unmounting filesystem. [ 75.809409][ T5611] FAULT_INJECTION: forcing a failure. [ 75.809409][ T5611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.811449][ T5611] CPU: 1 PID: 5611 Comm: syz.5.231 Not tainted syzkaller #0 [ 75.812628][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 75.814192][ T5611] Call trace: [ 75.814724][ T5611] dump_backtrace+0x1c8/0x1f4 [ 75.815468][ T5611] show_stack+0x2c/0x3c [ 75.816137][ T5611] __dump_stack+0x30/0x40 [ 75.816818][ T5611] dump_stack_lvl+0xf8/0x160 [ 75.817529][ T5611] dump_stack+0x1c/0x5c [ 75.818184][ T5611] should_fail_ex+0x3c4/0x520 [ 75.818905][ T5611] should_fail+0x14/0x24 [ 75.819553][ T5611] should_fail_usercopy+0x20/0x30 [ 75.820359][ T5611] iovec_from_user+0xcc/0x5dc [ 75.821067][ T5611] __import_iovec+0x84/0x470 [ 75.821741][ T5611] import_iovec+0x88/0xa4 [ 75.822413][ T5611] copy_msghdr_from_user+0x334/0x4ac [ 75.823214][ T5611] __sys_sendmsg+0x200/0x320 [ 75.823900][ T5611] __arm64_sys_sendmsg+0x80/0x94 [ 75.824663][ T5611] invoke_syscall+0x98/0x2bc [ 75.825354][ T5611] el0_svc_common+0x138/0x258 [ 75.826046][ T5611] do_el0_svc+0x58/0x13c [ 75.826691][ T5611] el0_svc+0x58/0x138 [ 75.827270][ T5611] el0t_64_sync_handler+0x84/0xf0 [ 75.828001][ T5611] el0t_64_sync+0x18c/0x190 [ 75.856685][ T4326] ocfs2: Unmounting device (7,0) on (node local) [ 75.872197][ T5613] loop1: detected capacity change from 0 to 4096 [ 75.893541][ T5613] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 75.901673][ T5619] loop2: detected capacity change from 0 to 2048 [ 76.012329][ T5623] netlink: 'syz.5.232': attribute type 16 has an invalid length. [ 76.013730][ T5623] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.232'. [ 76.054378][ T5623] loop5: detected capacity change from 0 to 512 [ 76.057743][ T5623] EXT4-fs: Ignoring removed orlov option [ 76.266214][ T5613] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 76.284273][ T5628] FAULT_INJECTION: forcing a failure. [ 76.284273][ T5628] name failslab, interval 1, probability 0, space 0, times 0 [ 76.286329][ T5628] CPU: 0 PID: 5628 Comm: syz.0.233 Not tainted syzkaller #0 [ 76.287494][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 76.289067][ T5628] Call trace: [ 76.289567][ T5628] dump_backtrace+0x1c8/0x1f4 [ 76.290308][ T5628] show_stack+0x2c/0x3c [ 76.290944][ T5628] __dump_stack+0x30/0x40 [ 76.291605][ T5628] dump_stack_lvl+0xf8/0x160 [ 76.292258][ T5628] dump_stack+0x1c/0x5c [ 76.292902][ T5628] should_fail_ex+0x3c4/0x520 [ 76.293622][ T5628] __should_failslab+0xc0/0x120 [ 76.294411][ T5628] should_failslab+0x10/0x28 [ 76.295133][ T5628] kmem_cache_alloc+0x88/0x318 [ 76.295849][ T5628] security_inode_alloc+0x38/0x11c [ 76.296630][ T5628] inode_init_always+0x690/0xab0 [ 76.297375][ T5628] new_inode_pseudo+0x7c/0x1cc [ 76.298052][ T5628] do_accept+0x164/0x5d4 [ 76.298692][ T5628] __sys_accept4+0xb4/0x12c [ 76.299414][ T5628] __arm64_sys_accept4+0x9c/0xb8 [ 76.300117][ T5628] invoke_syscall+0x98/0x2bc [ 76.300845][ T5628] el0_svc_common+0x138/0x258 [ 76.301590][ T5628] do_el0_svc+0x58/0x13c [ 76.302233][ T5628] el0_svc+0x58/0x138 [ 76.302882][ T5628] el0t_64_sync_handler+0x84/0xf0 [ 76.303689][ T5628] el0t_64_sync+0x18c/0x190 [ 76.324871][ T5623] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.232: bg 0: block 411: padding at end of block bitmap is not set [ 76.328613][ T5623] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.232: inode #1: comm syz.5.232: iget: illegal inode # [ 76.331726][ T5623] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.232: error while reading EA inode 1 err=-117 [ 76.337397][ T5623] EXT4-fs (loop5): 1 orphan inode deleted [ 76.338367][ T5623] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 76.343662][ T5622] tmpfs: Bad value for 'size' [ 76.440607][ T5620] loop4: detected capacity change from 0 to 32768 [ 76.444327][ T5620] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 76.446198][ T5620] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 76.456928][ T5620] BTRFS info (device loop4): using free space tree [ 76.493348][ T5649] loop0: detected capacity change from 0 to 2048 [ 76.510816][ T5649] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 76.513804][ T5649] EXT4-fs (loop0): shut down requested (2) [ 76.580762][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 76.597501][ T5620] BTRFS info (device loop4): enabling ssd optimizations [ 76.627971][ T5642] loop2: detected capacity change from 0 to 32768 [ 76.630046][ T5642] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.237 (5642) [ 76.660887][ T4321] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 76.707898][ T4937] EXT4-fs (loop5): unmounting filesystem. [ 76.719874][ T5292] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.816656][ T27] kauditd_printk_skb: 186 callbacks suppressed [ 76.816666][ T27] audit: type=1326 audit(76.810:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395b9e8 code=0x7ffc0000 [ 76.821118][ T27] audit: type=1326 audit(76.810:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395b9e8 code=0x7ffc0000 [ 76.829267][ T27] audit: type=1326 audit(76.820:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=430 compat=0 ip=0xffffb395b9e8 code=0x7ffc0000 [ 76.841037][ T27] audit: type=1326 audit(76.820:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395b9e8 code=0x7ffc0000 [ 76.855998][ T27] audit: type=1326 audit(76.820:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395b9e8 code=0x7ffc0000 [ 76.866177][ T27] audit: type=1326 audit(76.820:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffffb395b9e8 code=0x7ffc0000 [ 76.878992][ T27] audit: type=1326 audit(76.820:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395b9e8 code=0x7ffc0000 [ 76.904100][ T27] audit: type=1326 audit(76.820:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395b9e8 code=0x7ffc0000 [ 76.925247][ T27] audit: type=1326 audit(76.820:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=432 compat=0 ip=0xffffb395b9e8 code=0x7ffc0000 [ 76.932209][ T27] audit: type=1326 audit(76.820:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395b9e8 code=0x7ffc0000 [ 76.992792][ T5680] loop1: detected capacity change from 0 to 32768 [ 76.994168][ T51] block nbd4: Attempted send on invalid socket [ 76.995183][ T51] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.001790][ T5680] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.240 (5680) [ 77.021915][ T5680] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 77.030902][ T5680] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 77.037760][ T5680] BTRFS info (device loop1): using free space tree [ 77.051219][ T5689] loop0: detected capacity change from 0 to 32768 [ 77.055763][ T5689] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.245 (5689) [ 77.148237][ T5299] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (5299) [ 77.150593][ T5686] loop2: detected capacity change from 0 to 32768 [ 77.167106][ T5686] JBD2: Ignoring recovery information on journal [ 77.216640][ T5680] BTRFS info (device loop1): enabling ssd optimizations [ 77.217534][ T5719] loop0: detected capacity change from 0 to 2048 [ 77.221716][ T5686] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 77.226811][ T5680] FAULT_INJECTION: forcing a failure. [ 77.226811][ T5680] name failslab, interval 1, probability 0, space 0, times 0 [ 77.228972][ T5680] CPU: 1 PID: 5680 Comm: syz.1.240 Not tainted syzkaller #0 [ 77.230066][ T5680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 77.231661][ T5680] Call trace: [ 77.232119][ T5680] dump_backtrace+0x1c8/0x1f4 [ 77.232822][ T5680] show_stack+0x2c/0x3c [ 77.233481][ T5680] __dump_stack+0x30/0x40 [ 77.234158][ T5680] dump_stack_lvl+0xf8/0x160 [ 77.234855][ T5680] dump_stack+0x1c/0x5c [ 77.235516][ T5680] should_fail_ex+0x3c4/0x520 [ 77.236193][ T5680] __should_failslab+0xc0/0x120 [ 77.236934][ T5680] should_failslab+0x10/0x28 [ 77.237617][ T5680] __kmem_cache_alloc_node+0x7c/0x320 [ 77.238421][ T5680] __kmalloc+0xd8/0x178 [ 77.239027][ T5680] tomoyo_encode+0x274/0x4a4 [ 77.239745][ T5680] tomoyo_realpath_from_path+0x480/0x4d4 [ 77.240646][ T5680] tomoyo_path_number_perm+0x190/0x4dc [ 77.241528][ T5680] tomoyo_file_ioctl+0x2c/0x3c [ 77.242268][ T5680] security_file_ioctl+0x80/0xbc [ 77.243016][ T5680] __arm64_sys_ioctl+0xa8/0x1c8 [ 77.243715][ T5680] invoke_syscall+0x98/0x2bc [ 77.244402][ T5680] el0_svc_common+0x138/0x258 [ 77.245122][ T5680] do_el0_svc+0x58/0x13c [ 77.245761][ T5680] el0_svc+0x58/0x138 [ 77.246383][ T5680] el0t_64_sync_handler+0x84/0xf0 [ 77.247140][ T5680] el0t_64_sync+0x18c/0x190 [ 77.248226][ T5680] ERROR: Out of memory at tomoyo_realpath_from_path. [ 77.257505][ T4320] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 77.272421][ T5719] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 77.276914][ T5719] EXT4-fs (loop0): shut down requested (2) [ 77.431493][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 77.795097][ T4325] ocfs2: Unmounting device (7,2) on (node local) [ 77.828150][ T5734] netlink: 168 bytes leftover after parsing attributes in process `syz.0.251'. [ 78.032211][ T5748] FAULT_INJECTION: forcing a failure. [ 78.032211][ T5748] name failslab, interval 1, probability 0, space 0, times 0 [ 78.034308][ T5748] CPU: 0 PID: 5748 Comm: syz.2.253 Not tainted syzkaller #0 [ 78.035378][ T5748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 78.036780][ T5748] Call trace: [ 78.037281][ T5748] dump_backtrace+0x1c8/0x1f4 [ 78.037983][ T5748] show_stack+0x2c/0x3c [ 78.038602][ T5748] __dump_stack+0x30/0x40 [ 78.039253][ T5748] dump_stack_lvl+0xf8/0x160 [ 78.039908][ T5748] dump_stack+0x1c/0x5c [ 78.040484][ T5748] should_fail_ex+0x3c4/0x520 [ 78.041153][ T5748] __should_failslab+0xc0/0x120 [ 78.041848][ T5748] should_failslab+0x10/0x28 [ 78.042519][ T5748] __kmem_cache_alloc_node+0x7c/0x320 [ 78.043295][ T5748] __kmalloc_node+0xdc/0x17c [ 78.043987][ T5748] crypto_create_tfm_node+0x90/0x330 [ 78.044730][ T5748] crypto_spawn_tfm2+0x64/0x9c [ 78.045402][ T5748] hmac_init_tfm+0x84/0x178 [ 78.046065][ T5748] crypto_shash_init_tfm+0x178/0x298 [ 78.046855][ T5748] crypto_create_tfm_node+0x138/0x330 [ 78.047667][ T5748] crypto_alloc_tfm_node+0x168/0x34c [ 78.048457][ T5748] crypto_alloc_shash+0x40/0x54 [ 78.049161][ T5748] sctp_inet_listen+0x438/0x7e0 [ 78.049886][ T5748] __sys_listen+0x198/0x21c [ 78.050493][ T5748] __arm64_sys_listen+0x5c/0x74 [ 78.051168][ T5748] invoke_syscall+0x98/0x2bc [ 78.051808][ T5748] el0_svc_common+0x138/0x258 [ 78.052425][ T5748] do_el0_svc+0x58/0x13c [ 78.053013][ T5748] el0_svc+0x58/0x138 [ 78.053599][ T5748] el0t_64_sync_handler+0x84/0xf0 [ 78.054318][ T5748] el0t_64_sync+0x18c/0x190 [ 78.086049][ T5731] loop5: detected capacity change from 0 to 131072 [ 78.088554][ T5748] sctp: failed to load transform for md5: -12 [ 78.096325][ T5738] loop0: detected capacity change from 0 to 32768 [ 78.098618][ T5731] F2FS-fs (loop5): invalid crc value [ 78.106361][ T5738] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.254 (5738) [ 78.115650][ T5738] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 78.116013][ T5731] F2FS-fs (loop5): Found nat_bits in checkpoint [ 78.117464][ T5738] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 78.119849][ T5738] BTRFS info (device loop0): using free space tree [ 78.140139][ T5731] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 78.218846][ T5738] BTRFS info (device loop0): enabling ssd optimizations [ 78.262762][ T4326] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 78.542318][ T5784] loop0: detected capacity change from 0 to 2048 [ 78.572405][ T5784] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 78.575263][ T5784] EXT4-fs (loop0): shut down requested (2) [ 78.614220][ T5751] loop4: detected capacity change from 0 to 131072 [ 78.621529][ T5751] F2FS-fs (loop4): invalid crc value [ 78.632810][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 78.658767][ T5751] F2FS-fs (loop4): Found nat_bits in checkpoint [ 78.667981][ T5782] loop5: detected capacity change from 0 to 32768 [ 78.674420][ T5782] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.258 (5782) [ 78.676413][ T5751] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 78.679489][ T5751] FAULT_INJECTION: forcing a failure. [ 78.679489][ T5751] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 78.681571][ T5751] CPU: 1 PID: 5751 Comm: syz.4.257 Not tainted syzkaller #0 [ 78.682701][ T5751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 78.684188][ T5751] Call trace: [ 78.684669][ T5751] dump_backtrace+0x1c8/0x1f4 [ 78.685428][ T5751] show_stack+0x2c/0x3c [ 78.686043][ T5751] __dump_stack+0x30/0x40 [ 78.686654][ T5751] dump_stack_lvl+0xf8/0x160 [ 78.687377][ T5751] dump_stack+0x1c/0x5c [ 78.687968][ T5751] should_fail_ex+0x3c4/0x520 [ 78.688661][ T5751] should_fail_alloc_page+0x74/0xb8 [ 78.689427][ T5751] prepare_alloc_pages+0x1c0/0x504 [ 78.690120][ T5751] __alloc_pages+0x134/0x53c [ 78.690742][ T5751] alloc_pages+0x434/0x6f8 [ 78.691390][ T5751] pte_alloc_one+0x2c/0x258 [ 78.692031][ T5751] __do_fault+0xbc/0x3d8 [ 78.692645][ T5751] handle_mm_fault+0x11b8/0x2ff0 [ 78.693355][ T5751] do_page_fault+0x310/0x99c [ 78.694052][ T5751] do_translation_fault+0x94/0xc8 [ 78.694853][ T5751] do_mem_abort+0x70/0x194 [ 78.695626][ T5751] el1_abort+0x3c/0x5c [ 78.696255][ T5751] el1h_64_sync_handler+0x80/0xcc [ 78.697047][ T5751] el1h_64_sync+0x64/0x68 [ 78.697691][ T5751] __arch_copy_to_user+0x104/0x234 [ 78.698468][ T5751] _copy_to_iter+0x42c/0xe84 [ 78.699195][ T5751] get_random_bytes_user+0x188/0x31c [ 78.699921][ T5751] __arm64_sys_getrandom+0x168/0x254 [ 78.700655][ T5751] invoke_syscall+0x98/0x2bc [ 78.701327][ T5751] el0_svc_common+0x138/0x258 [ 78.702002][ T5751] do_el0_svc+0x58/0x13c [ 78.702600][ T5751] el0_svc+0x58/0x138 [ 78.703211][ T5751] el0t_64_sync_handler+0x84/0xf0 [ 78.703922][ T5751] el0t_64_sync+0x18c/0x190 [ 78.709779][ T5782] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 78.711402][ T5782] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 78.712716][ T5782] BTRFS info (device loop5): using free space tree [ 78.790410][ T5799] FAULT_INJECTION: forcing a failure. [ 78.790410][ T5799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.792414][ T5799] CPU: 1 PID: 5799 Comm: syz.1.264 Not tainted syzkaller #0 [ 78.793631][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 78.795267][ T5799] Call trace: [ 78.795827][ T5799] dump_backtrace+0x1c8/0x1f4 [ 78.796591][ T5799] show_stack+0x2c/0x3c [ 78.797248][ T5799] __dump_stack+0x30/0x40 [ 78.797916][ T5799] dump_stack_lvl+0xf8/0x160 [ 78.798636][ T5799] dump_stack+0x1c/0x5c [ 78.799281][ T5799] should_fail_ex+0x3c4/0x520 [ 78.800008][ T5799] should_fail+0x14/0x24 [ 78.800665][ T5799] should_fail_usercopy+0x20/0x30 [ 78.801450][ T5799] move_addr_to_kernel+0xa8/0x270 [ 78.802237][ T5799] copy_msghdr_from_user+0x3b0/0x4ac [ 78.803111][ T5799] __sys_sendmsg+0x200/0x320 [ 78.803809][ T5799] __arm64_sys_sendmsg+0x80/0x94 [ 78.804522][ T5799] invoke_syscall+0x98/0x2bc [ 78.805212][ T5799] el0_svc_common+0x138/0x258 [ 78.805889][ T5799] do_el0_svc+0x58/0x13c [ 78.806526][ T5799] el0_svc+0x58/0x138 [ 78.807098][ T5799] el0t_64_sync_handler+0x84/0xf0 [ 78.807820][ T5799] el0t_64_sync+0x18c/0x190 [ 78.837345][ T5803] block nbd2: NBD_DISCONNECT [ 78.839051][ T5803] loop2: detected capacity change from 0 to 8 [ 78.852205][ T5803] SQUASHFS error: zlib decompression failed, data probably corrupt [ 78.865256][ T5791] loop0: detected capacity change from 0 to 32768 [ 78.868404][ T5803] SQUASHFS error: Failed to read block 0x9b: -5 [ 78.869744][ T5803] SQUASHFS error: Unable to read metadata cache entry [99] [ 78.871167][ T5803] SQUASHFS error: Unable to read inode 0x127 [ 78.894411][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 78.944367][ T5791] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 78.969394][ T5782] BTRFS info (device loop5): enabling ssd optimizations [ 79.056060][ T4937] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 79.126826][ T4326] ocfs2: Unmounting device (7,0) on (node local) [ 79.127228][ T5821] loop1: detected capacity change from 0 to 32768 [ 79.166564][ T5828] netlink: 180 bytes leftover after parsing attributes in process `syz.5.268'. [ 79.168418][ T5828] netlink: 180 bytes leftover after parsing attributes in process `syz.5.268'. [ 79.169758][ T5828] netlink: 78 bytes leftover after parsing attributes in process `syz.5.268'. [ 79.184732][ T5821] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 79.189743][ T5821] FAULT_INJECTION: forcing a failure. [ 79.189743][ T5821] name failslab, interval 1, probability 0, space 0, times 0 [ 79.191731][ T5821] CPU: 1 PID: 5821 Comm: syz.1.267 Not tainted syzkaller #0 [ 79.192907][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 79.194579][ T5821] Call trace: [ 79.195156][ T5821] dump_backtrace+0x1c8/0x1f4 [ 79.195930][ T5821] show_stack+0x2c/0x3c [ 79.196618][ T5821] __dump_stack+0x30/0x40 [ 79.197304][ T5821] dump_stack_lvl+0xf8/0x160 [ 79.197923][ T5801] loop4: detected capacity change from 0 to 32768 [ 79.198053][ T5821] dump_stack+0x1c/0x5c [ 79.199730][ T5821] should_fail_ex+0x3c4/0x520 [ 79.200441][ T5821] __should_failslab+0xc0/0x120 [ 79.201203][ T5821] should_failslab+0x10/0x28 [ 79.201898][ T5821] __kmem_cache_alloc_node+0x7c/0x320 [ 79.202691][ T5821] __kmalloc+0xd8/0x178 [ 79.203346][ T5821] tomoyo_encode+0x274/0x4a4 [ 79.204012][ T5821] tomoyo_realpath_from_path+0x480/0x4d4 [ 79.204888][ T5821] tomoyo_path_number_perm+0x190/0x4dc [ 79.205706][ T5821] tomoyo_file_ioctl+0x2c/0x3c [ 79.206369][ T5821] security_file_ioctl+0x80/0xbc [ 79.207052][ T5821] __arm64_sys_ioctl+0xa8/0x1c8 [ 79.207759][ T5821] invoke_syscall+0x98/0x2bc [ 79.208461][ T5821] el0_svc_common+0x138/0x258 [ 79.209159][ T5821] do_el0_svc+0x58/0x13c [ 79.209836][ T5821] el0_svc+0x58/0x138 [ 79.210403][ T5821] el0t_64_sync_handler+0x84/0xf0 [ 79.211131][ T5821] el0t_64_sync+0x18c/0x190 [ 79.224649][ T5801] JBD2: Ignoring recovery information on journal [ 79.263734][ T5801] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 79.281812][ T5821] ERROR: Out of memory at tomoyo_realpath_from_path. [ 79.582878][ T4320] ocfs2: Unmounting device (7,1) on (node local) [ 79.614202][ T5842] loop5: detected capacity change from 0 to 2048 [ 79.678593][ T4321] ocfs2: Unmounting device (7,4) on (node local) [ 79.699005][ T5842] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 79.701713][ T5839] EXT4-fs (loop5): shut down requested (2) [ 79.746697][ T5826] loop0: detected capacity change from 0 to 32768 [ 79.748364][ T5826] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.269 (5826) [ 79.753957][ T5826] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 79.755614][ T5826] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 79.757110][ T5826] BTRFS info (device loop0): using free space tree [ 79.823491][ T5848] netlink: 68 bytes leftover after parsing attributes in process `syz.4.273'. [ 79.913101][ T5826] BTRFS info (device loop0): enabling ssd optimizations [ 79.945908][ T5867] loop4: detected capacity change from 0 to 8 [ 79.952852][ T5818] loop2: detected capacity change from 0 to 131072 [ 79.957365][ T5818] F2FS-fs (loop2): invalid crc value [ 79.957967][ T5867] SQUASHFS error: Unable to read inode 0x11f [ 79.992064][ T4937] EXT4-fs (loop5): unmounting filesystem. [ 80.017387][ T5818] F2FS-fs (loop2): Found nat_bits in checkpoint [ 80.043569][ T5818] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 80.106442][ T4326] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 80.112351][ T5881] FAULT_INJECTION: forcing a failure. [ 80.112351][ T5881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.163100][ T5881] CPU: 0 PID: 5881 Comm: syz.1.279 Not tainted syzkaller #0 [ 80.164198][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 80.165778][ T5881] Call trace: [ 80.166333][ T5881] dump_backtrace+0x1c8/0x1f4 [ 80.167093][ T5881] show_stack+0x2c/0x3c [ 80.167834][ T5881] __dump_stack+0x30/0x40 [ 80.168537][ T5881] dump_stack_lvl+0xf8/0x160 [ 80.169152][ T5881] dump_stack+0x1c/0x5c [ 80.169754][ T5881] should_fail_ex+0x3c4/0x520 [ 80.170454][ T5881] should_fail+0x14/0x24 [ 80.171116][ T5881] should_fail_usercopy+0x20/0x30 [ 80.171828][ T5881] _copy_to_iter+0x19c/0xe84 [ 80.172480][ T5881] seq_read_iter+0xa40/0xc00 [ 80.173177][ T5881] proc_reg_read_iter+0x184/0x2b0 [ 80.173861][ T5881] vfs_read+0x5ac/0x7c4 [ 80.174464][ T5881] ksys_read+0x120/0x210 [ 80.175076][ T5881] __arm64_sys_read+0x7c/0x90 [ 80.175776][ T5881] invoke_syscall+0x98/0x2bc [ 80.176456][ T5881] el0_svc_common+0x138/0x258 [ 80.177197][ T5881] do_el0_svc+0x58/0x13c [ 80.177910][ T5881] el0_svc+0x58/0x138 [ 80.178470][ T5881] el0t_64_sync_handler+0x84/0xf0 [ 80.179271][ T5881] el0t_64_sync+0x18c/0x190 [ 80.308415][ T5879] loop4: detected capacity change from 0 to 32768 [ 80.323087][ T5299] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (5299) [ 80.331908][ T5879] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 80.383512][ T5288] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.643268][ T5898] loop1: detected capacity change from 0 to 32768 [ 80.804399][ T5901] loop4: detected capacity change from 0 to 32768 [ 80.808800][ T5901] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 80.986755][ T5288] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 81.219546][ T5910] FAULT_INJECTION: forcing a failure. [ 81.219546][ T5910] name failslab, interval 1, probability 0, space 0, times 0 [ 81.221511][ T5910] CPU: 1 PID: 5910 Comm: syz.1.287 Not tainted syzkaller #0 [ 81.222602][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 81.224077][ T5910] Call trace: [ 81.224588][ T5910] dump_backtrace+0x1c8/0x1f4 [ 81.225239][ T5910] show_stack+0x2c/0x3c [ 81.225866][ T5910] __dump_stack+0x30/0x40 [ 81.226533][ T5910] dump_stack_lvl+0xf8/0x160 [ 81.227229][ T5910] dump_stack+0x1c/0x5c [ 81.227247][ T5910] should_fail_ex+0x3c4/0x520 [ 81.227258][ T5910] __should_failslab+0xc0/0x120 [ 81.227266][ T5910] should_failslab+0x10/0x28 [ 81.227273][ T5910] __kmem_cache_alloc_node+0x7c/0x320 [ 81.227278][ T5910] __kmalloc+0xd8/0x178 [ 81.227283][ T5910] __arm64_sys_memfd_create+0x11c/0x45c [ 81.227289][ T5910] invoke_syscall+0x98/0x2bc [ 81.227296][ T5910] el0_svc_common+0x138/0x258 [ 81.227301][ T5910] do_el0_svc+0x58/0x13c [ 81.227307][ T5910] el0_svc+0x58/0x138 [ 81.227311][ T5910] el0t_64_sync_handler+0x84/0xf0 [ 81.227316][ T5910] el0t_64_sync+0x18c/0x190 [ 81.301990][ T5920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.293'. [ 81.303808][ T5920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.293'. [ 81.312438][ T5920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.293'. [ 81.315365][ T5920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.293'. [ 81.316718][ T5920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.293'. [ 81.318053][ T5920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.293'. [ 81.319443][ T5920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.293'. [ 81.320864][ T5920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.293'. [ 81.343757][ T5920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.293'. [ 81.345162][ T5920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.293'. [ 81.368002][ T5929] overlayfs: upper fs does not support file handles, falling back to index=off. [ 81.369343][ T5929] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 81.382849][ T5930] netlink: 'syz.4.289': attribute type 2 has an invalid length. [ 81.511127][ T5913] loop0: detected capacity change from 0 to 32768 [ 81.521183][ T5934] loop5: detected capacity change from 0 to 4096 [ 81.523972][ T5913] [ 81.523972][ T5913] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.523972][ T5913] [ 81.531714][ T5934] ntfs3: loop5: ino=3, Correct links count -> 2. [ 81.549941][ T5934] FAULT_INJECTION: forcing a failure. [ 81.549941][ T5934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.556334][ T5934] CPU: 0 PID: 5934 Comm: syz.5.295 Not tainted syzkaller #0 [ 81.557553][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 81.559232][ T5934] Call trace: [ 81.559742][ T5934] dump_backtrace+0x1c8/0x1f4 [ 81.560490][ T5934] show_stack+0x2c/0x3c [ 81.561167][ T5934] __dump_stack+0x30/0x40 [ 81.561840][ T5934] dump_stack_lvl+0xf8/0x160 [ 81.562525][ T5934] dump_stack+0x1c/0x5c [ 81.563167][ T5934] should_fail_ex+0x3c4/0x520 [ 81.563910][ T5934] should_fail+0x14/0x24 [ 81.564571][ T5934] should_fail_usercopy+0x20/0x30 [ 81.565330][ T5934] strncpy_from_user+0x48/0x57c [ 81.566095][ T5934] getname_flags+0xec/0x45c [ 81.566827][ T5934] user_path_at_empty+0x40/0x84 [ 81.567590][ T5934] __arm64_sys_mount+0x468/0x584 [ 81.568341][ T5934] invoke_syscall+0x98/0x2bc [ 81.569110][ T5934] el0_svc_common+0x138/0x258 [ 81.569886][ T5934] do_el0_svc+0x58/0x13c [ 81.570596][ T5934] el0_svc+0x58/0x138 [ 81.571245][ T5934] el0t_64_sync_handler+0x84/0xf0 [ 81.572085][ T5934] el0t_64_sync+0x18c/0x190 [ 81.659388][ T5936] loop5: detected capacity change from 0 to 4096 [ 81.665621][ T5936] ntfs3: loop5: ino=3, Correct links count -> 2. [ 81.823856][ T5938] loop5: detected capacity change from 0 to 32768 [ 81.833524][ T5938] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 81.834296][ T5916] loop2: detected capacity change from 0 to 131072 [ 81.852128][ T5916] F2FS-fs (loop2): invalid crc value [ 81.866548][ T5288] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 81.878635][ T5916] F2FS-fs (loop2): Found nat_bits in checkpoint [ 81.891077][ T5916] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 82.182205][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.196994][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.417714][ T4328] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 82.464710][ T5976] loop1: detected capacity change from 0 to 256 [ 82.492517][ T5976] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65db40a, utbl_chksum : 0x7319d30d) [ 82.855292][ T6000] loop1: detected capacity change from 0 to 128 [ 82.893920][ T406] kworker/u4:4: attempt to access beyond end of device [ 82.893920][ T406] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 82.978618][ T6005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.980027][ T6005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.405066][ T6015] loop5: detected capacity change from 0 to 4096 [ 83.420341][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.422262][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.508631][ T6022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.510490][ T6022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.612007][ T6024] loop5: detected capacity change from 0 to 512 [ 83.619943][ T6024] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 83.622270][ T6024] EXT4-fs (loop5): invalid journal inode [ 83.626698][ T6024] EXT4-fs (loop5): can't get journal size [ 83.631573][ T6024] EXT4-fs (loop5): 1 truncate cleaned up [ 83.632411][ T6024] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 83.662736][ T4937] EXT4-fs (loop5): unmounting filesystem. [ 83.680874][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.682907][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.947985][ T6045] overlayfs: missing 'workdir' [ 83.978764][ T6050] loop1: detected capacity change from 0 to 256 [ 83.988965][ T6050] FAT-fs (loop1): Directory bread(block 64) failed [ 83.989977][ T6050] FAT-fs (loop1): Directory bread(block 65) failed [ 83.991088][ T6050] FAT-fs (loop1): Directory bread(block 66) failed [ 83.992148][ T6050] FAT-fs (loop1): Directory bread(block 67) failed [ 83.995166][ T6050] FAT-fs (loop1): Directory bread(block 68) failed [ 83.996382][ T6050] FAT-fs (loop1): Directory bread(block 69) failed [ 83.997599][ T6050] FAT-fs (loop1): Directory bread(block 70) failed [ 83.998737][ T6050] FAT-fs (loop1): Directory bread(block 71) failed [ 83.999825][ T6050] FAT-fs (loop1): Directory bread(block 72) failed [ 84.000923][ T6050] FAT-fs (loop1): Directory bread(block 73) failed [ 84.117804][ T4328] Bluetooth: unknown link type 128 [ 84.139112][ T6063] input: syz0 as /devices/virtual/input/input3 [ 84.209111][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.211948][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.247898][ T4326] [ 84.247898][ T4326] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.247898][ T4326] [ 84.250133][ T4326] [ 84.250133][ T4326] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.250133][ T4326] [ 84.292582][ T6075] loop4: detected capacity change from 0 to 128 [ 84.296002][ T6075] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 84.319364][ T4321] EXT4-fs (loop4): unmounting filesystem. [ 84.340178][ T6078] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 84.342091][ T6078] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 84.402810][ T6086] loop4: detected capacity change from 0 to 512 [ 84.417774][ T6086] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 84.424967][ T6086] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #2: comm syz.4.358: corrupted inode contents [ 84.428636][ T6086] EXT4-fs error (device loop4): ext4_dirty_inode:6133: inode #2: comm syz.4.358: mark_inode_dirty error [ 84.430689][ T6086] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #2: comm syz.4.358: corrupted inode contents [ 84.432829][ T6086] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.358: mark_inode_dirty error [ 84.450511][ T4321] EXT4-fs (loop4): unmounting filesystem. [ 84.515711][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.519616][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.739728][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.741135][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.281646][ T6186] netlink: 'syz.5.378': attribute type 4 has an invalid length. [ 85.285770][ T6187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.287255][ T6187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.837152][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.844276][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.886976][ T6222] loop8: detected capacity change from 0 to 8 [ 85.890622][ T5288] Dev loop8: unable to read RDB block 8 [ 85.891622][ T5288] loop8: unable to read partition table [ 85.892597][ T5288] loop8: partition table beyond EOD, truncated [ 85.899018][ T6222] Dev loop8: unable to read RDB block 8 [ 85.900100][ T6222] loop8: unable to read partition table [ 85.901386][ T6222] loop8: partition table beyond EOD, truncated [ 85.902551][ T6222] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 86.018104][ T6230] tipc: Started in network mode [ 86.018866][ T6230] tipc: Node identity 2eb4bb88933b, cluster identity 4711 [ 86.026355][ T6230] tipc: Enabled bearer , priority 0 [ 86.032750][ T6229] tipc: Resetting bearer [ 86.083113][ T6238] process 'syz.5.400' launched './file0' with NULL argv: empty string added [ 86.112667][ T6241] loop0: detected capacity change from 0 to 512 [ 86.120295][ T6241] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.404: inode has both inline data and extents flags [ 86.123670][ T6241] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.404: couldn't read orphan inode 15 (err -117) [ 86.125663][ T6241] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 86.153514][ T4328] Bluetooth: hci0: command 0x0409 tx timeout [ 86.156968][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 86.202851][ T6250] loop0: detected capacity change from 0 to 512 [ 86.213746][ T6250] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.218238][ T6250] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.221274][ T6250] EXT4-fs (loop0): 1 truncate cleaned up [ 86.222168][ T6250] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 86.236440][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 86.583025][ T1965] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.769238][ T1965] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 86.770815][ T1965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.772017][ T1965] usb 1-1: Product: syz [ 86.772677][ T1965] usb 1-1: Manufacturer: syz [ 86.773500][ T1965] usb 1-1: SerialNumber: syz [ 86.776384][ T1965] usb 1-1: config 0 descriptor?? [ 86.890737][ T6270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.892473][ T6270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.033681][ T1965] tipc: Node number set to 3180313480 [ 88.276307][ T6290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.278277][ T6290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.802834][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.805737][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.307069][ T4542] usb 1-1: USB disconnect, device number 2 [ 96.748105][ T6229] tipc: Disabling bearer [ 96.769966][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 96.774634][ T6261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.777046][ T6281] netlink: 'syz.1.419': attribute type 12 has an invalid length. [ 96.831114][ T6310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.832439][ T6310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.852265][ T6313] loop0: detected capacity change from 0 to 128 [ 96.892818][ T6313] syz.0.430: attempt to access beyond end of device [ 96.892818][ T6313] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 96.931211][ T6315] loop1: detected capacity change from 0 to 2048 [ 96.934130][ T6315] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 96.936664][ T6315] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 96.940206][ T6315] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 96.941457][ T6315] UDF-fs: Scanning with blocksize 512 failed [ 96.948944][ T6315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.098280][ T6327] loop1: detected capacity change from 0 to 2048 [ 97.104295][ T6327] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.217289][ T6333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.219273][ T6333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.840157][ T6342] __nla_validate_parse: 31 callbacks suppressed [ 97.840168][ T6342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.443'. [ 97.877700][ T6344] loop1: detected capacity change from 0 to 4096 [ 97.881373][ T6344] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 98.057840][ T6308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.428'. [ 98.094031][ T6356] loop1: detected capacity change from 0 to 128 [ 98.105815][ T6356] FAT-fs (loop1): bread failed, FSINFO block (sector = 9728) [ 98.106669][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.114930][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.116951][ T6361] device bridge_slave_0 left promiscuous mode [ 98.118818][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.123801][ T6366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.125242][ T6366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.127941][ T6365] Bluetooth: MGMT ver 1.22 [ 98.128657][ T6365] Bluetooth: hci1: expected 2195 bytes, got 2 bytes [ 98.172366][ T6376] loop1: detected capacity change from 0 to 128 [ 98.174643][ T6361] device bridge_slave_1 left promiscuous mode [ 98.176532][ T6374] binder: 6373:6374 tried to acquire reference to desc 0, got 1 instead [ 98.178775][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.180358][ T6376] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 98.184598][ T6374] binder: 6373:6374 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 98.194854][ T6374] binder: 6374 RLIMIT_NICE not set [ 98.195699][ T6374] binder: 6374 RLIMIT_NICE not set [ 98.196569][ T6374] binder: send failed reply for transaction 10 to 6373:6374 [ 98.197750][ T6374] binder: 6373:6374 ioctl c0306201 20000680 returned -14 [ 98.226897][ T6361] bond0: (slave bond_slave_0): Releasing backup interface [ 98.236392][ T6372] loop2: detected capacity change from 0 to 8192 [ 98.273226][ T6361] device bond_slave_0 left promiscuous mode [ 98.281356][ T6387] loop4: detected capacity change from 0 to 736 [ 98.286698][ T6361] bond0: (slave bond_slave_1): Releasing backup interface [ 98.352443][ T6393] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 98.353590][ T6361] device bond_slave_1 left promiscuous mode [ 98.386752][ T6361] team0: Port device team_slave_0 removed [ 98.412628][ T6361] team0: Port device team_slave_1 removed [ 98.420649][ T6361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.425640][ T6361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.428577][ T6361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.429763][ T6361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.433599][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'. [ 98.442806][ T4336] block nbd0: Receive control failed (result -32) [ 98.526577][ T406] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.590895][ T6424] loop0: detected capacity change from 0 to 512 [ 98.597488][ T6419] loop1: detected capacity change from 0 to 2048 [ 98.637904][ T6436] loop4: detected capacity change from 0 to 256 [ 98.651579][ T6424] EXT4-fs (loop0): 1 orphan inode deleted [ 98.652600][ T6424] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.666852][ T4475] __quota_error: 151 callbacks suppressed [ 98.666860][ T4475] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 98.673075][ T4475] EXT4-fs error (device loop0): ext4_release_dquot:6845: comm kworker/u4:7: Failed to release dquot type 1 [ 98.680984][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.474'. [ 98.684228][ T6419] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 98.774551][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 99.037967][ T6451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.039381][ T6451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.071930][ T6463] device syzkaller0 entered promiscuous mode [ 99.118652][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 99.198204][ T6486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.200953][ T6486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.247437][ T6493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.249220][ T6491] loop8: detected capacity change from 0 to 8 [ 99.251114][ T6491] Dev loop8: unable to read RDB block 8 [ 99.251996][ T6491] loop8: unable to read partition table [ 99.252909][ T6491] loop8: partition table beyond EOD, truncated [ 99.253215][ T6493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.261880][ T6491] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 99.292746][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.298579][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.501994][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.503571][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.652851][ T6507] loop0: detected capacity change from 0 to 128 [ 99.728271][ T6511] netlink: 164 bytes leftover after parsing attributes in process `syz.5.491'. [ 99.785959][ T6513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.787403][ T6513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.819687][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.821231][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.063760][ T6525] loop2: detected capacity change from 0 to 2048 [ 100.066944][ T6525] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 100.069966][ T6525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.103027][ T5077] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.151957][ T6529] netlink: 60 bytes leftover after parsing attributes in process `syz.2.500'. [ 100.153572][ T6529] netlink: 60 bytes leftover after parsing attributes in process `syz.2.500'. [ 100.156757][ T6529] netlink: 60 bytes leftover after parsing attributes in process `syz.2.500'. [ 100.158527][ T6529] netlink: 60 bytes leftover after parsing attributes in process `syz.2.500'. [ 100.211793][ T6535] mmap: syz.2.503 (6535) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.284711][ T5077] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.288070][ T5077] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.289509][ T5077] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.290773][ T5077] usb 1-1: Product: syz [ 100.291673][ T5077] usb 1-1: Manufacturer: syz [ 100.292464][ T5077] usb 1-1: SerialNumber: syz [ 100.409174][ T6553] 9pnet_fd: p9_fd_create_tcp (6553): problem connecting socket to 127.0.0.1 [ 100.512032][ T5077] cdc_ncm 1-1:1.0: bind() failure [ 100.518282][ T5077] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 100.519273][ T5077] cdc_ncm 1-1:1.1: bind() failure [ 100.526392][ T5077] usb 1-1: USB disconnect, device number 3 [ 100.602402][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.520'. [ 100.709147][ T4328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.711619][ T4328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.714001][ T4328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.715673][ T4328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.717694][ T4328] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 100.719034][ T4328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.915775][ T4725] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.957745][ T6573] chnl_net:caif_netlink_parms(): no params data found [ 101.034839][ T4725] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.065550][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.067083][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.068802][ T6573] device bridge_slave_0 entered promiscuous mode [ 101.072527][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.074939][ T6573] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.076591][ T6573] device bridge_slave_1 entered promiscuous mode [ 101.124773][ T4725] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.132918][ T6573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.136614][ T6573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.155440][ T6573] team0: Port device team_slave_0 added [ 101.157277][ T6573] team0: Port device team_slave_1 added [ 101.203994][ T4725] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.207727][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.208858][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.212893][ T6573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.215544][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.216617][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.220797][ T6573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.274359][ T6573] device hsr_slave_0 entered promiscuous mode [ 101.323281][ T6573] device hsr_slave_1 entered promiscuous mode [ 101.333581][ T6573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.334893][ T6573] Cannot create hsr debugfs directory [ 101.423061][ T4374] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.445851][ T6603] loop2: detected capacity change from 0 to 128 [ 101.447592][ T6603] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.449946][ T6603] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.488605][ T6573] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 101.540727][ T6606] loop5: detected capacity change from 0 to 2048 [ 101.542675][ T6573] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 101.555897][ T406] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.585648][ T6573] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 101.591882][ T6613] loop2: detected capacity change from 0 to 128 [ 101.600890][ T6614] loop1: detected capacity change from 0 to 1024 [ 101.609742][ T4374] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 101.611064][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.617752][ T4374] usb 1-1: config 0 descriptor?? [ 101.621713][ T4374] cp210x 1-1:0.0: cp210x converter detected [ 101.624051][ T6615] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.626517][ T6614] EXT4-fs: Ignoring removed oldalloc option [ 101.627372][ T6614] EXT4-fs: Ignoring removed bh option [ 101.635839][ T6614] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.637096][ T6613] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 101.640211][ T6606] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 12 [ 101.653256][ T6606] Remounting filesystem read-only [ 101.694121][ T6614] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 101.701622][ T4325] EXT4-fs (loop2): unmounting filesystem. [ 101.707300][ T6573] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 101.728566][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 101.730456][ T6624] loop5: detected capacity change from 0 to 64 [ 101.772876][ T6633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.781032][ T6633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.822185][ T6627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.823893][ T6627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.920224][ T6573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.947313][ T6573] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.977677][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.979176][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.991668][ T6649] device syzkaller0 entered promiscuous mode [ 101.997992][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.999595][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.001237][ T4475] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.002422][ T4475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.010769][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.012671][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.015643][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.017204][ T4475] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.018442][ T4475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.019818][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.021381][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.022632][ T4374] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 102.023809][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.027183][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.028702][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.030141][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.059755][ T6573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.061458][ T6573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.064525][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.066039][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.067331][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.068806][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.070197][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.223046][ T4374] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 102.224313][ T4374] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 102.228105][ T4374] usb 1-1: cp210x converter now attached to ttyUSB0 [ 102.232355][ T4374] usb 1-1: USB disconnect, device number 4 [ 102.237097][ T4374] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 102.238638][ T4374] cp210x 1-1:0.0: device disconnected [ 102.793051][ T4328] Bluetooth: hci2: command 0x0409 tx timeout [ 103.188307][ T6683] loop1: detected capacity change from 0 to 1764 [ 103.228900][ T6685] loop1: detected capacity change from 0 to 512 [ 103.238268][ T6685] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 103.261384][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 103.289507][ T6690] loop1: detected capacity change from 0 to 2048 [ 103.297344][ T6690] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.305833][ T6691] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.403533][ T6699] loop1: detected capacity change from 0 to 256 [ 103.408129][ T6699] exfat: Unknown parameter 'zero_size_dir' [ 104.873032][ T4328] Bluetooth: hci2: command 0x041b tx timeout [ 106.952990][ T4328] Bluetooth: hci2: command 0x040f tx timeout [ 109.032991][ T4328] Bluetooth: hci2: command 0x0419 tx timeout [ 112.730636][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.781108][ T6674] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.783662][ T6674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.784804][ T6674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.851897][ T6712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.856080][ T6712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.869369][ T6715] loop1: detected capacity change from 0 to 512 [ 112.892906][ T6715] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.951560][ T6715] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #17: comm syz.1.558: inode has both inline data and extents flags [ 112.956140][ T6715] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.558: couldn't read orphan inode 17 (err -117) [ 112.963873][ T6715] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 112.997289][ T6715] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.558: bg 0: block 65: padding at end of block bitmap is not set [ 113.005887][ T6715] Quota error (device loop1): write_blk: dquota write failed [ 113.007134][ T6715] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 113.009855][ T6715] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.558: Failed to acquire dquot type 0 [ 113.017544][ T6715] Quota error (device loop1): do_check_range: Getting block 144 out of range 0-5 [ 113.035894][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 113.109778][ T6747] binder: 6745:6747 tried to acquire reference to desc 0, got 1 instead [ 113.123893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.125167][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.134104][ T6573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.149861][ T4542] binder: send failed reply for transaction 17 to 6745:6747 [ 113.163275][ T4542] binder: undelivered TRANSACTION_COMPLETE [ 113.164237][ T4542] binder: undelivered TRANSACTION_ERROR: 29189 [ 113.229285][ T6764] loop5: detected capacity change from 0 to 512 [ 113.241932][ T6764] EXT4-fs: Ignoring removed oldalloc option [ 113.242855][ T6764] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.249994][ T6764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.258531][ T6764] EXT4-fs (loop5): orphan cleanup on readonly fs [ 113.278027][ T6764] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 113.279677][ T6764] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 113.281222][ T6764] EXT4-fs error (device loop5): ext4_acquire_dquot:6809: comm syz.5.571: Failed to acquire dquot type 1 [ 113.289370][ T6768] loop1: detected capacity change from 0 to 4096 [ 113.292176][ T6764] EXT4-fs (loop5): 1 truncate cleaned up [ 113.294188][ T6764] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 113.319074][ T6764] EXT4-fs: Ignoring removed orlov option [ 113.319934][ T6764] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 113.321266][ T6764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.322578][ T6764] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 113.344730][ T6764] EXT4-fs error (device loop5): __ext4_remount:6618: comm syz.5.571: Abort forced by user [ 113.352149][ T6764] EXT4-fs (loop5): Remounting filesystem read-only [ 113.361519][ T6764] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 113.366830][ T6764] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.571: deleted inode referenced: 12 [ 113.384397][ T4320] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 113.387790][ T4320] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 113.414149][ T4937] EXT4-fs (loop5): unmounting filesystem. [ 113.452867][ T6780] loop1: detected capacity change from 0 to 512 [ 113.456194][ T6780] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.577: corrupted in-inode xattr [ 113.458379][ T6780] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.577: couldn't read orphan inode 15 (err -117) [ 113.460267][ T6780] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 113.500853][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 113.531509][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.536445][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.583214][ T6795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.584632][ T6795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.854373][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.855993][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.857496][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.858830][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.861080][ T6573] device veth0_vlan entered promiscuous mode [ 113.870490][ T6573] device veth1_vlan entered promiscuous mode [ 113.876647][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.878221][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.921289][ T4725] device hsr_slave_0 left promiscuous mode [ 113.933972][ T4725] device hsr_slave_1 left promiscuous mode [ 113.993094][ T4725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.994385][ T4725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.996181][ T4725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.997403][ T4725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.998933][ T4725] device bridge_slave_1 left promiscuous mode [ 113.999910][ T4725] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.033637][ T4725] device bridge_slave_0 left promiscuous mode [ 114.034650][ T4725] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.133750][ T4725] device veth1_macvtap left promiscuous mode [ 114.134709][ T4725] device veth0_macvtap left promiscuous mode [ 114.135768][ T4725] device veth1_vlan left promiscuous mode [ 114.136731][ T4725] device veth0_vlan left promiscuous mode [ 114.196060][ T6843] tmpfs: Unknown parameter 'grpquota' [ 114.493001][ T4479] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.694756][ T4479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.696548][ T4479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.698055][ T4479] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.699919][ T4479] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.701332][ T4479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.708022][ T4479] usb 1-1: config 0 descriptor?? [ 114.794374][ T6847] loop8: detected capacity change from 0 to 8 [ 114.795968][ T6847] Dev loop8: unable to read RDB block 8 [ 114.796964][ T6847] loop8: unable to read partition table [ 114.797883][ T6847] loop8: partition table beyond EOD, truncated [ 114.805729][ T6847] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 115.114826][ T4479] usbhid 1-1:0.0: can't add hid device: -71 [ 115.115824][ T4479] usbhid: probe of 1-1:0.0 failed with error -71 [ 115.117505][ T4479] usb 1-1: USB disconnect, device number 5 [ 115.651048][ T6859] loop0: detected capacity change from 0 to 128 [ 115.664187][ T6859] FAT-fs (loop0): error, clusters badly computed (5 != 1) [ 115.665305][ T6859] FAT-fs (loop0): Filesystem has been set read-only [ 115.667392][ T6859] FAT-fs (loop0): error, clusters badly computed (6 != 2) [ 115.668768][ T6859] FAT-fs (loop0): error, clusters badly computed (7 != 3) [ 115.670404][ T6859] FAT-fs (loop0): error, clusters badly computed (8 != 4) [ 115.671625][ T6859] FAT-fs (loop0): error, clusters badly computed (9 != 5) [ 115.672782][ T6859] FAT-fs (loop0): error, clusters badly computed (10 != 6) [ 115.675279][ T6859] FAT-fs (loop0): error, clusters badly computed (11 != 7) [ 115.676478][ T6859] FAT-fs (loop0): error, clusters badly computed (12 != 8) [ 115.677663][ T6859] FAT-fs (loop0): error, clusters badly computed (13 != 9) [ 115.678834][ T6859] FAT-fs (loop0): error, clusters badly computed (14 != 10) [ 115.679925][ T6859] FAT-fs (loop0): error, clusters badly computed (15 != 11) [ 115.681244][ T6859] FAT-fs (loop0): error, clusters badly computed (16 != 12) [ 115.682328][ T6859] FAT-fs (loop0): error, clusters badly computed (17 != 13) [ 115.683950][ T6859] FAT-fs (loop0): error, clusters badly computed (18 != 14) [ 115.685157][ T6859] FAT-fs (loop0): error, clusters badly computed (19 != 15) [ 115.686389][ T6859] FAT-fs (loop0): error, clusters badly computed (20 != 16) [ 115.687569][ T6859] FAT-fs (loop0): error, clusters badly computed (21 != 17) [ 115.691821][ T6859] FAT-fs (loop0): error, clusters badly computed (22 != 18) [ 115.693532][ T6859] FAT-fs (loop0): error, clusters badly computed (23 != 19) [ 115.722547][ T6861] loop0: detected capacity change from 0 to 128 [ 115.732207][ T6861] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 115.749696][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 115.758480][ T4725] team0 (unregistering): Port device team_slave_1 removed [ 115.884765][ T4725] team0 (unregistering): Port device team_slave_0 removed [ 116.043680][ T4725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.243758][ T4725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.515147][ T4725] bond0 (unregistering): Released all slaves [ 118.733086][ T6573] device veth0_macvtap entered promiscuous mode [ 118.740028][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.741682][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.760877][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.774149][ T6573] device veth1_macvtap entered promiscuous mode [ 118.778462][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.780118][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.781676][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.792775][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.794974][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.796566][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.801252][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.823649][ T6883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.833474][ T6883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.836692][ T6887] loop2: detected capacity change from 0 to 136 [ 118.844259][ T6887] rock: directory entry would overflow storage [ 118.845886][ T6887] rock: sig=0x4f50, size=4, remaining=3 [ 118.846773][ T6887] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 118.890614][ T6891] loop0: detected capacity change from 0 to 128 [ 118.892275][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.893909][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.896112][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.897716][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.899250][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.900761][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.902200][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.912068][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.915946][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.917521][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.919041][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.947142][ T6707] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.949383][ T6891] loop0: detected capacity change from 0 to 8 [ 118.949480][ T6707] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.950472][ T6896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.956756][ T6891] unable to read inode lookup table [ 118.959031][ T6896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.959549][ T6894] loop2: detected capacity change from 0 to 64 [ 118.962582][ T6894] hfs: unable to open extent tree [ 118.964784][ T6894] hfs: can't find a HFS filesystem on dev loop2 [ 118.997236][ T6706] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.097514][ T6573] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.098848][ T6573] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.100282][ T6573] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.101605][ T6573] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.160516][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.161778][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.168350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.192042][ T406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.193371][ T406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.195578][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.352228][ T6924] loop6: detected capacity change from 0 to 512 [ 119.371622][ T6924] EXT2-fs (loop6): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 119.382994][ T1965] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.386342][ T6924] EXT2-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 119.389298][ T6924] EXT2-fs (loop6): 0.5b, 95/08/09, bs=2048, gc=1, bpg=16384, ipg=32, mo=8021c] [ 119.408027][ T6924] syz.6.617: attempt to access beyond end of device [ 119.408027][ T6924] loop6: rw=0, sector=511016, nr_sectors = 4 limit=512 [ 119.498923][ T4328] block nbd6: Receive control failed (result -32) [ 119.520569][ T6944] loop1: detected capacity change from 0 to 2048 [ 119.520577][ T6936] block nbd6: shutting down sockets [ 119.524373][ T6944] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.563085][ T1965] usb 1-1: Using ep0 maxpacket: 16 [ 119.566579][ T1965] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 119.570317][ T1965] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 119.571868][ T1965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.573699][ T1965] usb 1-1: Product: syz [ 119.574321][ T1965] usb 1-1: Manufacturer: syz [ 119.577664][ T1965] usb 1-1: SerialNumber: syz [ 119.581183][ T1965] usb 1-1: config 0 descriptor?? [ 119.598720][ T6949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.610469][ T6949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.671773][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.676988][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.812235][ T6975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.815729][ T6975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.010944][ T6991] binder: 6990:6991 tried to acquire reference to desc 0, got 1 instead [ 120.014381][ T6991] binder: 6990:6991 got transaction with invalid data ptr [ 120.015579][ T6991] binder: 6990:6991 transaction async to 6990:0 failed 22/29201/-14, size 0-24 line 3333 [ 120.017862][ T5077] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.036565][ T6993] loop2: detected capacity change from 0 to 16 [ 120.040970][ T6993] erofs: (device loop2): mounted with root inode @ nid 36. [ 120.069404][ T6995] netlink: 260 bytes leftover after parsing attributes in process `syz.2.636'. [ 120.144763][ T7001] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 120.146219][ T7001] overlayfs: missing 'lowerdir' [ 120.202912][ T7006] loop5: detected capacity change from 0 to 4096 [ 120.215512][ T7010] binder: 7009:7010 ioctl c018620c 20000240 returned -1 [ 120.245709][ T7011] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.247917][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.249344][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.272558][ T7015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.644'. [ 120.274197][ T7015] device netdevsim0 entered promiscuous mode [ 120.275523][ T7015] netlink: 40 bytes leftover after parsing attributes in process `syz.2.644'. [ 120.292517][ T7006] overlayfs: upper fs does not support tmpfile. [ 120.306684][ T7006] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 120.310651][ T7006] overlayfs: failed to set xattr on upper [ 120.311538][ T7006] overlayfs: ...falling back to index=off,metacopy=off. [ 120.449594][ T7029] loop5: detected capacity change from 0 to 16 [ 120.456037][ T7029] erofs: (device loop5): mounted with root inode @ nid 36. [ 120.459354][ T7029] erofs: (device loop5): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 120.569988][ T7043] netlink: 24 bytes leftover after parsing attributes in process `syz.5.655'. [ 120.653153][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.654981][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.734124][ T7056] loop5: detected capacity change from 0 to 8192 [ 120.809100][ T7058] loop1: detected capacity change from 0 to 8192 [ 120.923587][ T7067] capability: warning: `syz.1.665' uses deprecated v2 capabilities in a way that may be insecure [ 120.975779][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.667'. [ 121.061689][ T7079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.063855][ T7079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.207582][ T7085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.209526][ T7085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.212142][ T7083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.215052][ T7083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.485920][ T7090] loop5: detected capacity change from 0 to 64 [ 121.541990][ T7093] loop5: detected capacity change from 0 to 4096 [ 121.544996][ T7093] ntfs3: Unknown parameter 'nocase' [ 121.573994][ T6706] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.616623][ T7098] loop5: detected capacity change from 0 to 512 [ 121.616726][ T6706] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.622718][ T7098] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 121.669218][ T7101] loop5: detected capacity change from 0 to 1024 [ 121.670456][ T7101] EXT4-fs: Ignoring removed orlov option [ 121.671450][ T7101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.672497][ T7101] ext4: Unknown parameter 'subj_role' [ 121.676719][ T7103] netlink: 64 bytes leftover after parsing attributes in process `syz.1.682'. [ 121.707413][ T7107] loop9: detected capacity change from 0 to 7 [ 121.710480][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.711870][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.718125][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.719600][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.739358][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.740840][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.742537][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.744043][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.748809][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.750287][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.753974][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.759006][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.760274][ T7107] ldm_validate_partition_table(): Disk read failed. [ 121.761770][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.765710][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.768310][ T7113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.769899][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.771462][ T7113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.772796][ T7107] Dev loop9: unable to read RDB block 0 [ 121.777492][ T7107] loop9: unable to read partition table [ 121.778508][ T7107] loop9: partition table beyond EOD, truncated [ 121.779454][ T7107] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 121.779454][ T7107] ) failed (rc=-5) [ 121.814126][ T7117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.815606][ T7117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.865175][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.691'. [ 121.886144][ T7124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.889050][ T7124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.902252][ T7112] loop2: detected capacity change from 0 to 512 [ 121.928199][ T7112] EXT4-fs (loop2): 1 orphan inode deleted [ 121.929156][ T7112] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 121.931957][ T11] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 121.933477][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6845: comm kworker/u4:1: Failed to release dquot type 1 [ 121.936143][ T7112] EXT4-fs (loop2): unmounting filesystem. [ 122.041922][ T7132] loop2: detected capacity change from 0 to 256 [ 122.135882][ T4479] usb 1-1: USB disconnect, device number 6 [ 122.341729][ T7153] netlink: 304 bytes leftover after parsing attributes in process `syz.5.703'. [ 122.365447][ T7149] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.451784][ T7167] netlink: 'syz.1.708': attribute type 10 has an invalid length. [ 122.454544][ T7165] netlink: 40 bytes leftover after parsing attributes in process `syz.2.707'. [ 122.470675][ T7167] team0: Port device dummy0 added [ 122.475620][ T7167] netlink: 'syz.1.708': attribute type 10 has an invalid length. [ 122.477363][ T7167] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 122.496678][ T7171] loop2: detected capacity change from 0 to 512 [ 122.497461][ T7167] team0: Failed to send options change via netlink (err -105) [ 122.500764][ T7167] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 122.509239][ T7167] team0: Port device dummy0 removed [ 122.512001][ T7167] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 122.520311][ T7171] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 122.528773][ T7171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.531465][ T7171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.586253][ T7183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.587774][ T7183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.689127][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'. [ 122.733623][ T7201] device syzkaller0 entered promiscuous mode [ 122.771176][ T7205] loop8: detected capacity change from 0 to 8 [ 122.772594][ T7205] Dev loop8: unable to read RDB block 8 [ 122.776019][ T7205] loop8: unable to read partition table [ 122.777011][ T7205] loop8: partition table beyond EOD, truncated [ 122.782124][ T7205] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 123.042747][ T4325] EXT4-fs (loop2): unmounting filesystem. [ 123.100639][ T7231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.102114][ T7231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.191522][ T7245] loop0: detected capacity change from 0 to 512 [ 123.204213][ T7245] FAT-fs (loop0): error, invalid access to FAT (entry 0x8e210000) [ 123.210249][ T7245] FAT-fs (loop0): Filesystem has been set read-only [ 123.219428][ T7248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.227727][ T7248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.369617][ T7257] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 123.401309][ T7261] loop5: detected capacity change from 0 to 256 [ 123.800749][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.802469][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.347675][ T7292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.349937][ T7292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.476597][ T4328] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 124.477947][ T4328] Bluetooth: hci3: Injecting HCI hardware error event [ 124.480580][ T4328] Bluetooth: hci3: hardware error 0x00 [ 124.501229][ T7300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.502603][ T7300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.614049][ T7302] loop5: detected capacity change from 0 to 4096 [ 124.615770][ T7302] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 125.088585][ T7320] loop5: detected capacity change from 0 to 128 [ 125.200982][ T7332] __nla_validate_parse: 8 callbacks suppressed [ 125.200992][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.783'. [ 125.244155][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.783'. [ 125.246047][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.6.783'. [ 125.251424][ T7338] netlink: 72 bytes leftover after parsing attributes in process `syz.0.787'. [ 125.272754][ T7338] loop0: detected capacity change from 0 to 4096 [ 125.296204][ T7338] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 125.312092][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 125.317312][ T7347] loop1: detected capacity change from 0 to 2048 [ 125.335254][ T7347] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 125.342595][ T7347] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.390060][ T7355] loop6: detected capacity change from 0 to 128 [ 125.400422][ T7355] syz.6.794: attempt to access beyond end of device [ 125.400422][ T7355] loop6: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 125.411722][ T7355] syz.6.794: attempt to access beyond end of device [ 125.411722][ T7355] loop6: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 125.414985][ T7355] syz.6.794: attempt to access beyond end of device [ 125.414985][ T7355] loop6: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 125.421980][ T7355] syz.6.794: attempt to access beyond end of device [ 125.421980][ T7355] loop6: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 125.424466][ T7355] syz.6.794: attempt to access beyond end of device [ 125.424466][ T7355] loop6: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 125.426474][ T7355] syz.6.794: attempt to access beyond end of device [ 125.426474][ T7355] loop6: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 125.429826][ T7355] syz.6.794: attempt to access beyond end of device [ 125.429826][ T7355] loop6: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 125.457751][ T7361] binder: 7360:7361 ioctl 81f8943c 0 returned -22 [ 125.459763][ T7361] binder: 7360:7361 ioctl 5000943f 0 returned -22 [ 125.511735][ T7368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.519286][ T7368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.539383][ T7370] loop5: detected capacity change from 0 to 1024 [ 125.564039][ T7370] hfsplus: unable to load nls mapping "?it0@rr6lW8i ⠎Vku;HߔLIOɗ]pN$ܜNkW;RU҂I.mOZ:-4ܒR_)+xo =(XP" [ 125.567162][ T7370] hfsplus: unable to parse mount options [ 125.607242][ T6706] blk_print_req_error: 14 callbacks suppressed [ 125.607258][ T6706] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.624896][ T7370] loop5: detected capacity change from 0 to 1024 [ 125.629778][ T7370] EXT4-fs: Ignoring removed bh option [ 125.641818][ T7370] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 125.669599][ T4937] EXT4-fs (loop5): unmounting filesystem. [ 125.739199][ T7388] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 125.787245][ T7394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.793349][ T7394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.801803][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.811554][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.911987][ T7408] sctp: [Deprecated]: syz.2.816 (pid 7408) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.911987][ T7408] Use struct sctp_sack_info instead [ 125.915891][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.916968][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.048280][ T7422] loop1: detected capacity change from 0 to 128 [ 126.058955][ T7422] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 126.064808][ T7422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.108563][ T7427] ax25_connect(): syz.1.822 uses autobind, please contact jreuter@yaina.de [ 126.153902][ T7431] netlink: 830 bytes leftover after parsing attributes in process `syz.1.824'. [ 126.206772][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'. [ 126.298436][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 126.352358][ T7451] loop0: detected capacity change from 0 to 512 [ 126.388899][ T7451] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 126.390582][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.6.835'. [ 126.390591][ T7451] EXT4-fs (loop0): orphan cleanup on readonly fs [ 126.403112][ T7460] loop1: detected capacity change from 0 to 256 [ 126.405459][ T7451] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.829: corrupted inode contents [ 126.407062][ T7451] EXT4-fs (loop0): Remounting filesystem read-only [ 126.407082][ T7451] EXT4-fs error (device loop0): ext4_dirty_inode:6133: inode #16: comm syz.0.829: mark_inode_dirty error [ 126.407264][ T7451] EXT4-fs (loop0): Remounting filesystem read-only [ 126.407348][ T7451] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.829: corrupted inode contents [ 126.407493][ T7451] EXT4-fs (loop0): Remounting filesystem read-only [ 126.407499][ T7451] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.829: mark_inode_dirty error [ 126.407618][ T7451] EXT4-fs (loop0): Remounting filesystem read-only [ 126.407638][ T7451] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.829: corrupted inode contents [ 126.408931][ T7451] EXT4-fs (loop0): Remounting filesystem read-only [ 126.408950][ T7451] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 126.409107][ T7451] EXT4-fs (loop0): Remounting filesystem read-only [ 126.409119][ T7451] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.829: corrupted inode contents [ 126.409238][ T7451] EXT4-fs (loop0): Remounting filesystem read-only [ 126.409244][ T7451] EXT4-fs error (device loop0): ext4_truncate:4318: inode #16: comm syz.0.829: mark_inode_dirty error [ 126.409367][ T7451] EXT4-fs (loop0): Remounting filesystem read-only [ 126.409376][ T7451] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 126.409495][ T7451] EXT4-fs (loop0): Remounting filesystem read-only [ 126.409924][ T7451] EXT4-fs (loop0): 1 truncate cleaned up [ 126.410530][ T11] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 126.410585][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6845: comm kworker/u4:1: Failed to release dquot type 1 [ 126.410743][ T11] EXT4-fs (loop0): Remounting filesystem read-only [ 126.410841][ T7451] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 126.420744][ T7459] device bond1 entered promiscuous mode [ 126.431270][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.835'. [ 126.437906][ T7460] FAT-fs (loop1): Directory bread(block 64) failed [ 126.437945][ T7460] FAT-fs (loop1): Directory bread(block 65) failed [ 126.437977][ T7460] FAT-fs (loop1): Directory bread(block 66) failed [ 126.437992][ T7460] FAT-fs (loop1): Directory bread(block 67) failed [ 126.438024][ T7460] FAT-fs (loop1): Directory bread(block 68) failed [ 126.438037][ T7460] FAT-fs (loop1): Directory bread(block 69) failed [ 126.438065][ T7460] FAT-fs (loop1): Directory bread(block 70) failed [ 126.438079][ T7460] FAT-fs (loop1): Directory bread(block 71) failed [ 126.438110][ T7460] FAT-fs (loop1): Directory bread(block 72) failed [ 126.438123][ T7460] FAT-fs (loop1): Directory bread(block 73) failed [ 126.439318][ T7459] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 126.442110][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 126.451467][ T7459] device bridge1 entered promiscuous mode [ 126.451619][ T7459] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 126.584734][ T7474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.841'. [ 126.713200][ T4328] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 126.722413][ T7489] netlink: 'syz.6.849': attribute type 1 has an invalid length. [ 126.754128][ T7489] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.770115][ T7489] bond2: (slave geneve2): making interface the new active one [ 126.782860][ T7489] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 126.798036][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 126.898655][ T7512] device syzkaller1 entered promiscuous mode [ 126.901622][ T7513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.903903][ T7507] netlink: 'syz.0.852': attribute type 12 has an invalid length. [ 126.904355][ T7513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.938145][ T7515] loop5: detected capacity change from 0 to 4096 [ 126.968358][ T7518] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.986593][ T7520] fuse: Bad value for 'fd' [ 127.093431][ T7532] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 127.179562][ T7545] loop5: detected capacity change from 0 to 16 [ 127.187466][ T7545] erofs: (device loop5): mounted with root inode @ nid 36. [ 127.221318][ T7547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.224065][ T7547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.241163][ T7550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.242748][ T7550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.502728][ T7554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.504565][ T7554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.626206][ T7558] loop0: detected capacity change from 0 to 256 [ 127.627779][ T7558] exfat: Deprecated parameter 'namecase' [ 127.628720][ T7558] exfat: Deprecated parameter 'utf8' [ 127.629830][ T7558] exfat: Deprecated parameter 'namecase' [ 127.630764][ T7558] exfat: Deprecated parameter 'utf8' [ 127.635871][ T7558] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 127.996314][ T7588] loop8: detected capacity change from 0 to 7 [ 127.998173][ T6706] Dev loop8: unable to read RDB block 7 [ 127.999142][ T6706] loop8: unable to read partition table [ 128.000078][ T6706] loop8: partition table beyond EOD, truncated [ 128.006099][ T7588] Dev loop8: unable to read RDB block 7 [ 128.006988][ T7588] loop8: unable to read partition table [ 128.007998][ T7588] loop8: partition table beyond EOD, truncated [ 128.023065][ T7588] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 128.070708][ T7595] netlink: 'syz.5.897': attribute type 2 has an invalid length. [ 128.113457][ T7602] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4 [ 128.136354][ T27] audit: type=1326 audit(128.130:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.5.901" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5b9e8 code=0x0 [ 128.250764][ T7618] loop6: detected capacity change from 0 to 128 [ 128.261426][ T27] audit: type=1326 audit(128.250:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.6.907" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae35b9e8 code=0x7ffc0000 [ 128.267474][ T27] audit: type=1326 audit(128.250:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.6.907" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=12 compat=0 ip=0xffffae35b9e8 code=0x7ffc0000 [ 128.271083][ T27] audit: type=1326 audit(128.250:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.6.907" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae35b9e8 code=0x7ffc0000 [ 128.306274][ T7622] netlink: 'syz.6.909': attribute type 1 has an invalid length. [ 128.317974][ T7622] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 128.321622][ T11] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 128.321861][ T7622] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.325660][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 128.356889][ T7625] tipc: Started in network mode [ 128.357865][ T7625] tipc: Node identity 4, cluster identity 4711 [ 128.358770][ T7625] tipc: Node number set to 4 [ 128.433876][ T254] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 128.600663][ T7636] random: crng reseeded on system resumption [ 128.636345][ T5077] kernel write not supported for file 138/net/vlan/vlan0 (pid: 5077 comm: kworker/0:19) [ 128.870726][ T7653] loop1: detected capacity change from 0 to 128 [ 128.903382][ T7653] syz.1.923: attempt to access beyond end of device [ 128.903382][ T7653] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 128.975444][ T7659] loop6: detected capacity change from 0 to 8 [ 128.987601][ T7659] SQUASHFS error: Failed to read block 0x2fc: -5 [ 128.988933][ T7659] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 128.990306][ T7659] SQUASHFS error: Unable to read directory block [247:26] [ 129.019248][ T7662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.020922][ T7662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.307954][ T7672] loop6: detected capacity change from 0 to 64 [ 129.550708][ T7698] loop6: detected capacity change from 0 to 1024 [ 129.557571][ T7700] loop5: detected capacity change from 0 to 128 [ 129.566797][ T7698] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 129.577507][ T7698] ================================================================== [ 129.578837][ T7698] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x7c0/0x15ac [ 129.580030][ T7698] Read of size 18446744073709551588 at addr ffff0000d26ac040 by task syz.6.944/7698 [ 129.581390][ T7698] [ 129.581727][ T7698] CPU: 0 PID: 7698 Comm: syz.6.944 Not tainted syzkaller #0 [ 129.582772][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 129.584408][ T7698] Call trace: [ 129.584952][ T7698] dump_backtrace+0x1c8/0x1f4 [ 129.585630][ T7698] show_stack+0x2c/0x3c [ 129.586223][ T7698] __dump_stack+0x30/0x40 [ 129.586891][ T7698] dump_stack_lvl+0xf8/0x160 [ 129.587584][ T7698] print_address_description+0x88/0x218 [ 129.588441][ T7698] print_report+0x50/0x68 [ 129.589131][ T7698] kasan_report+0xa8/0x100 [ 129.589791][ T7698] kasan_check_range+0x260/0x2a0 [ 129.590564][ T7698] memmove+0x48/0x90 [ 129.591147][ T7698] ext4_xattr_set_entry+0x7c0/0x15ac [ 129.591984][ T7698] ext4_xattr_block_set+0x614/0x2810 [ 129.592746][ T7698] ext4_xattr_set_handle+0xe30/0x102c [ 129.593631][ T7698] ext4_xattr_set+0x1e0/0x2b4 [ 129.594334][ T7698] ext4_xattr_trusted_set+0x4c/0x64 [ 129.595130][ T7698] __vfs_setxattr+0x388/0x3a4 [ 129.595817][ T7698] __vfs_setxattr_noperm+0x120/0x564 [ 129.596569][ T7698] __vfs_setxattr_locked+0x1ec/0x218 [ 129.597281][ T7698] vfs_setxattr+0x158/0x2ac [ 129.597939][ T7698] setxattr+0x228/0x28c [ 129.598541][ T7698] path_setxattr+0x12c/0x25c [ 129.599265][ T7698] __arm64_sys_lsetxattr+0xbc/0xd8 [ 129.600024][ T7698] invoke_syscall+0x98/0x2bc [ 129.600734][ T7698] el0_svc_common+0x138/0x258 [ 129.601506][ T7698] do_el0_svc+0x58/0x13c [ 129.602157][ T7698] el0_svc+0x58/0x138 [ 129.602780][ T7698] el0t_64_sync_handler+0x84/0xf0 [ 129.603619][ T7698] el0t_64_sync+0x18c/0x190 [ 129.604343][ T7698] [ 129.604692][ T7698] Allocated by task 7698: [ 129.605345][ T7698] kasan_set_track+0x4c/0x80 [ 129.606009][ T7698] kasan_save_alloc_info+0x28/0x34 [ 129.606759][ T7698] __kasan_kmalloc+0xa0/0xb8 [ 129.607412][ T7698] __kmalloc_node_track_caller+0xe0/0x16c [ 129.608293][ T7698] kmemdup+0x5c/0x98 [ 129.608862][ T7698] ext4_xattr_block_set+0x558/0x2810 [ 129.609720][ T7698] ext4_xattr_set_handle+0xe30/0x102c [ 129.610478][ T7698] ext4_xattr_set+0x1e0/0x2b4 [ 129.611152][ T7698] ext4_xattr_trusted_set+0x4c/0x64 [ 129.611921][ T7698] __vfs_setxattr+0x388/0x3a4 [ 129.612594][ T7698] __vfs_setxattr_noperm+0x120/0x564 [ 129.613404][ T7698] __vfs_setxattr_locked+0x1ec/0x218 [ 129.614168][ T7698] vfs_setxattr+0x158/0x2ac [ 129.614822][ T7698] setxattr+0x228/0x28c [ 129.615443][ T7698] path_setxattr+0x12c/0x25c [ 129.616111][ T7698] __arm64_sys_lsetxattr+0xbc/0xd8 [ 129.616803][ T7698] invoke_syscall+0x98/0x2bc [ 129.617462][ T7698] el0_svc_common+0x138/0x258 [ 129.618140][ T7698] do_el0_svc+0x58/0x13c [ 129.618801][ T7698] el0_svc+0x58/0x138 [ 129.619403][ T7698] el0t_64_sync_handler+0x84/0xf0 [ 129.620098][ T7698] el0t_64_sync+0x18c/0x190 [ 129.620792][ T7698] [ 129.621133][ T7698] The buggy address belongs to the object at ffff0000d26ac000 [ 129.621133][ T7698] which belongs to the cache kmalloc-1k of size 1024 [ 129.623096][ T7698] The buggy address is located 64 bytes inside of [ 129.623096][ T7698] 1024-byte region [ffff0000d26ac000, ffff0000d26ac400) [ 129.625115][ T7698] [ 129.625457][ T7698] The buggy address belongs to the physical page: [ 129.626415][ T7698] page:00000000f120fa0e refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1126a8 [ 129.627823][ T7698] head:00000000f120fa0e order:3 compound_mapcount:0 compound_pincount:0 [ 129.629014][ T7698] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 129.630237][ T7698] raw: 05ffc00000010200 dead000000000100 dead000000000122 ffff0000c0002780 [ 129.631538][ T7698] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 129.632812][ T7698] page dumped because: kasan: bad access detected [ 129.633808][ T7698] [ 129.634195][ T7698] Memory state around the buggy address: [ 129.635069][ T7698] ffff0000d26abf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 129.636297][ T7698] ffff0000d26abf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 129.637478][ T7698] >ffff0000d26ac000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 129.638684][ T7698] ^ [ 129.639561][ T7698] ffff0000d26ac080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 129.640779][ T7698] ffff0000d26ac100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 129.641915][ T7698] ================================================================== [ 129.643066][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.646949][ T7698] Disabling lock debugging due to kernel taint [ 129.655418][ T7700] loop5: detected capacity change from 0 to 8 [ 129.660241][ T7700] unable to read inode lookup table [ 129.662845][ T6573] EXT4-fs (loop6): unmounting filesystem. [ 129.723003][ T4479] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 129.904017][ T4479] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 129.905711][ T4479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 129.908840][ T4479] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 129.910258][ T4479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.911652][ T4479] usb 1-1: Product: syz [ 129.912374][ T4479] usb 1-1: Manufacturer: syz [ 129.914436][ T4479] usb 1-1: SerialNumber: syz [ 129.915773][ T4479] usb 1-1: config 0 descriptor?? [ 132.461734][ T4542] usb 1-1: USB disconnect, device number 7