last executing test programs: 17.622188439s ago: executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x5169, &(0x7f0000000140), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x80, 0xf9002fd280fa163a}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000000c0), 0xfd, 0x4ef, &(0x7f0000000a00)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x38}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff6b) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x33, 0x8}, {0x7fff, 0x8, 0x80}, {0x4, 0x2f, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a500000023000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000003c0)={'#! ', '', [{0x20, '@}'}, {0x20, 'security.ima\x00'}, {0x20, 'GPL\x00'}]}, 0x1a) syz_open_dev$tty1(0xc, 0x4, 0x4) 16.217289453s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x40}}, 0x0) 15.228954807s ago: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 14.623002951s ago: executing program 0: socket(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) 13.632756526s ago: executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x5169, &(0x7f0000000140), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x80, 0xf9002fd280fa163a}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000000c0), 0xfd, 0x4ef, &(0x7f0000000a00)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x38}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff6b) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x33, 0x8}, {0x7fff, 0x8, 0x80}, {0x4, 0x2f, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a500000023000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000003c0)={'#! ', '', [{0x20, '@}'}, {0x20, 'security.ima\x00'}, {0x20, 'GPL\x00'}]}, 0x1a) syz_open_dev$tty1(0xc, 0x4, 0x4) 11.825497453s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') read(r1, &(0x7f0000001a00)=""/177, 0xb1) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x1000d}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x86) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x330, r4}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) getpid() sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000940)={0x20, 0x1d, 0x0, 0x0, 0x0, {0x0, 0xd601, 0x9}, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xba, 0x0, 0x0, @pid}]}]}, 0x20}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}}) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) 11.263352143s ago: executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYBLOB="a6af891d142bbbe86c2b6c42ac9eefc3f3124a519189b105d77c5f5267121c170995cd3bb174096f3c", @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYBLOB="64eb9d8a8a48c79c95d055fb439250f5c3eb02d760adf9a0512dcd910bb0f61df6e958b21125bf7821948fea8cd1c5aa12dc764a351434b8c9bdfa20acfa7369538b00f5058238e0532f4c45d34d94bddc281e19be1206fb5d8479b0f190d253269ec5", @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRES16], 0x0, 0x1e1, &(0x7f00000004c0)="$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") mkdirat(r1, &(0x7f0000000440)='./file2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x2, 0x810, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000780)=ANY=[], 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='ubifs\x00', 0xcc16, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800", 0x30}], 0x1) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000200)={@multicast2, @remote, @local}, 0xc) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10.812047584s ago: executing program 1: socket(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) 10.557164727s ago: executing program 4: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r2) 9.746169735s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = getpgrp(r2) syz_pidfd_open(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='.\x00', &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) r6 = epoll_create1(0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f00000000c0)={0x60000005}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000000)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000180)) 9.702297199s ago: executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x9, 0x30}, &(0x7f0000000140)=0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000c30501000000000095"], &(0x7f00000007c0)='GPL\x00', 0x3, 0x27, &(0x7f0000000800)=""/39}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000001200)={'bridge0\x00', {0x2, 0x0, @broadcast}}) socket$kcm(0x23, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3400008e24bb8564ae984669b27bb1fcf161b9001400010000000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000100ff0100000000000000000000000000010800080002040000"], 0x34}, 0x1, 0x0, 0x0, 0x4880}, 0x800) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={r1, 0x769}, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf25060000004c00018008000100", @ANYRES32=r5, @ANYBLOB="0800030001000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d7265673000000000000000000014000200627269646765300000000000000000003400018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0800030000000000080001006ec31c4dd9835a6c2d4c369fea02e05df94b0ce41a5ae7a8e7583f72b1c551f8f1df886fa87cc997bcf4c6f3c04a98ff5435d290bb878f", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="3000018008000300010000001400020076657468315f746f5f62617461647600080003000000000008000100", @ANYRES32=r5, @ANYBLOB="440001800800030002000000080003000000000014000200697036746e6c300000000000000000000800030003000000140002006c6f00"/68], 0x108}}, 0x4800) r6 = socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c200000000000000000086dd6000000000483a001189c793000000000000000000000001ff010000000000000000000000000001010090780000000060edb5690000000000000000000000000000ffffe0000001fe8000000000000000000000000000000000000000070800"/126], 0x0) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(r7, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x10) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003fc0)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000340)=""/247, 0xf7}, {&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000000440)=""/46, 0x2e}, {&(0x7f0000000480)=""/224, 0xe0}, {&(0x7f0000000580)=""/136, 0x88}, {&(0x7f0000000640)=""/58, 0x3a}, {&(0x7f00000006c0)=""/15, 0xf}], 0x7}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000000800)=""/132, 0x84}, {&(0x7f00000008c0)=""/47, 0x2f}, {&(0x7f0000000900)=""/6, 0x6}, {&(0x7f0000000940)=""/226, 0xe2}, {&(0x7f0000000a40)=""/39, 0x27}, {&(0x7f0000000a80)=""/30, 0x1e}, {&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/180, 0xb4}, {&(0x7f0000003d00)=""/180, 0xb4}, {&(0x7f0000003dc0)=""/199, 0xc7}], 0xa, &(0x7f0000003f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x2, 0x100, &(0x7f0000004040)={0x0, 0x3938700}) 9.545573518s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x40}}, 0x0) 8.458920826s ago: executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x5169, &(0x7f0000000140), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x80, 0xf9002fd280fa163a}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000000c0), 0xfd, 0x4ef, &(0x7f0000000a00)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x38}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff6b) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x33, 0x8}, {0x7fff, 0x8, 0x80}, {0x4, 0x2f, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a500000023000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000003c0)={'#! ', '', [{0x20, '@}'}, {0x20, 'security.ima\x00'}, {0x20, 'GPL\x00'}]}, 0x1a) syz_open_dev$tty1(0xc, 0x4, 0x4) 8.226822573s ago: executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mlock(&(0x7f0000a74000/0x1000)=nil, 0x1000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000b99000/0x1000)=nil, 0x1000}, 0x4}) madvise(&(0x7f0000535000/0x800000)=nil, 0x802202, 0x19) 7.184758081s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000006700000000000000a4000000010000"], &(0x7f0000000600)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) 6.996139248s ago: executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r0, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001340)=""/96, 0x60}, {&(0x7f00000013c0)=""/180, 0xb4}, {&(0x7f0000001480)=""/117, 0x75}, {&(0x7f0000001500)=""/232, 0xe8}, {&(0x7f0000001600)=""/230, 0xe6}, {&(0x7f00000017c0)=""/246, 0xf6}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x7}}, {{&(0x7f0000002a40), 0x6e, &(0x7f0000000500)=[{&(0x7f0000002ac0)=""/75, 0x4b}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/119, 0x77}], 0x3, &(0x7f0000003bc0)}}, {{&(0x7f0000003c80), 0x6e, &(0x7f0000000680)=[{&(0x7f0000003d00)=""/145, 0x91}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/135, 0x87}], 0x3}}], 0x3, 0x0, 0x0) 6.560443339s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) getresuid(&(0x7f0000000540), &(0x7f0000000480), &(0x7f00000004c0)) 6.036268273s ago: executing program 2: socket(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) 5.58981273s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) clock_settime(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="8b742d0480aa498bae3fefffffffffffffb3e430dd"], 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_page_alloc\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{}, &(0x7f00000014c0), &(0x7f0000001500)=r3}, 0x20) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="000a00000000000007300000000000000000102dcc00001100000000000000000000000000000000000000000720000000000600000000000000000000000000000000000200feffff07000000000000000047d7a9"], 0x60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x9478c2, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) fcntl$setlease(r5, 0x400, 0x0) link(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./bus\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x700, 0x10, 0x4f0, 0xfffffff7, {{0x1c, 0x4, 0x1, 0x9, 0x70, 0x67, 0x0, 0xa2, 0x4, 0x0, @local, @local, {[@timestamp_addr={0x44, 0xc, 0x80, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x7ff}]}, @timestamp={0x44, 0x8, 0xd4, 0x0, 0x7, [0x7]}, @generic={0x7, 0x7, "5eac16e9e0"}, @timestamp_addr={0x44, 0x24, 0x83, 0x1, 0x8, [{@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@remote, 0x80000000}, {@broadcast, 0x6}]}, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x1, 0x7, "a0f6114c50"}, {0x0, 0xc, "2d2c81dc7b0039f0c1f1"}]}, @end]}}}}}) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCOUTQNSD(r8, 0x894b, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) 5.431297806s ago: executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYBLOB="a6af891d142bbbe86c2b6c42ac9eefc3f3124a519189b105d77c5f5267121c170995cd3bb174096f3c", @ANYRESDEC=0x0, @ANYBLOB="01ce6671a3b30f673148672100038bbb4413ea284b892438cdddda3dc5766f98f85fb413504b3bbb8dce2bcd2b09f68cd741168d69dae50652ca7b67c5b0a27ab80ff9afa5000443de8c748e1d5beabee7c1346b215f641ae190d56ea4ab81bacd909929deb5757040e8d5b2752ea779c30f600bd516a68d881e9cc7289826d49e35134a94e27f115c8195a0f152cbd840ffdb008356c72319cceb43ccb1280556efdf0fdf582fd3cfc830dff178a068d948b7400f5aef57b6dcbfde7af6012383adb085c40e4c295c2a3be750a42400e58523d24b8eecd758aabcee22347bdb78b72b400d080a044ebde5d39ad91ff0ef75aa244381cf00cd6fe9b9a92a9968104bf02481022af426853287e521a4e3cfe480f984efcea1319ff932ebd3bc75aefea41074799f3502a7472a6686b4011a41d7f0cfb25b3dc3077b4e8ded17cfff2b1d59bc12f637c36690f5ca91ee999ec138f6ce76522e652939847435edb78f9ae18489f9d2b73c81609399f0d123f1721171bd72c012623f04d8965d3e5785d057c17998ab36af821c9b308731422ba3859b9895ace14068ea58f8cb6060c205caf209a73628eff5b9270a4a55c2d7fc59a4fe6e023bd424d8b010e2232d1b2e6ca603b466b2c82afff4a8cc469e8664d54769fc97df122b3ff8c34354dad46f900eaf6e72e5e9f8090000000000000074dadad47a42af7cdae5bde6a12f412fe2a876aa191e78e91fbf780e2f4a20f57d41376b29f990ce63aa6edf622d2203fee37df269abf869d13b175852b775fff70491d1e5d1311b7e82cba4584c147c6e79c77e89ef954a101ddb98c5ba2b312528485ece7aff23cc6fee599daea0fca71a902c969fc9077bd75970cf0f11b52af4c82b49640cc3fabbc401dead4f83aa0c4072a9e98ab5afca90be17961fc073e2f8ec0000000000f7f574d97d4b4fcece55eeac5968262e9bd94c1d1bc1138cda4410bee318185f933c130b8765e5078e7642abf5aa7fb04f7b7c930d776622f38fc1422af38d18398766ab0e98f3b07603981b1d0c0b353eb0ae7089ea49a060367512a13eea1d7d608b7297a902508744e4d75dfcdf75fc6dc73f23ef3e97dc7a357cc2e6a0f0c43636f5bdc6beddc09858a6a2ced9d33bd0e0eca77d1821865ad6e4d61b2b65005d", @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYBLOB="64eb9d8a8a48c79c95d055fb439250f5c3eb02d760adf9a0512dcd910bb0f61df6e958b21125bf7821948fea8cd1c5aa12dc764a351434b8c9bdfa20acfa7369538b00f5058238e0532f4c45d34d94bddc281e19be1206fb5d8479b0f190d253269ec5", @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRES16], 0x0, 0x1e1, &(0x7f00000004c0)="$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") mkdirat(r1, &(0x7f0000000440)='./file2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x2, 0x810, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000780)=ANY=[], 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='ubifs\x00', 0xcc16, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800", 0x30}], 0x1) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000200)={@multicast2, @remote, @local}, 0xc) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 5.332597411s ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) inotify_init1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {}, 0x0, 0x1, {0x0}}) 5.039861055s ago: executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffffffffffff, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20}) sendmmsg$inet(r0, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x58}}], 0x1, 0x40000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}]}]}, 0x28}}, 0x0) ioperm(0x0, 0x7, 0x1f) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) io_uring_setup(0xad1, &(0x7f0000000340)={0x0, 0xac9d, 0x2, 0x1}) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000480)='./file0\x00', 0x446, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32, @ANYRESHEX, @ANYBLOB="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", @ANYRES64], 0x0, 0x309, &(0x7f0000000b00)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000e40)={'#! ', './file0', [{0x20, '#\x8b\x14\xf8! \x05h\xbd\x0f\xda\x9d\xee\xb2u\xb2i*s\x9f\xd4-\xa4 \xcd9\x19\x8c\x05@\xb5\xeb\xcf?RN[\x18\"\'\xeeN\xd4^\xbb\xdd\xe3`\xd1\xfc\x89\\\xde\x91A\xb6\xddn\xf8\x7fz\xf2\x8f\xff\xa6\x01\xb9\x97\xc2\xb6\x84\xb0r\f!\xc3\xae \x9e\xaf\x1c\xb8\xb9\xca\xbb\xab\x9b\xaa\xdb\xe9m\xb6\xb8\x03\x8b\x83\xfd5Q|\xe9\f\'\xd9\xb2\xae\xdfJ\xaeFY\xa1\xf2x\x1e\x10 \xe3O\x8eda\x96\xb6\xd5\xa9\b(j\x8d\xbcf\xc6g\xf8\xe3\xb4\x94\xcc\t\x91%gI\x9bp\xe8^Je\x9dPr\xf6\xbe\xdc\x95W\x98\x7f\xb7n\xd7\xf1(RK\x89\xe5\xe4\xc8\xb5\x93\xceD\xa6I\xc31@T\x15\x99\xcfl\x9d\xe4~\xfds&\x1c\xc0\f\x1e_z\xac\xe7S\xaa\xb4o2\xff]\xdcP\x97\x19\xee\x90\xe3.K \x7f\xba(-\x8b\x1f\x1b\xc4\x9f;\xddvTe\xb6X\x00\xa3\xcb\xd4\n\x05J\x04\xbf\xba\f\x12+\xd9\x13\x0e^x/6\xc4\xfc\xb2\x10_\x98\xd5\xa3\x01-D\xc7e^\x0f\xfb\xa1\xcc\xa2\x82|\"b\xae\xd7\nx8\xd9\xa2'}, {0x20, ']'}, {0x20, '(\x85^&'}, {0x20, 'memory.events\x00'}, {}, {0x20, '-+%$-\x88[\x9b\'$\\(+\xd9'}], 0xa, "e1146777fbcc8d18853f61539247bf25b25fd6b450d4d4e403eed21ba0bb14117bb107b48f74f67b597ab159417d86cc8614ce1c52a8bb6061751e1e43ed081b4e2d39a0bb8d73334f9147a1b5b312dcec9879162d16ae868791d2e5c9a8c7a9"}, 0x1ac) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.984340707s ago: executing program 3: syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5ea7, &(0x7f00000085c0)="$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") syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f00000014c0)={[{@codepage={'codepage', 0x3d, 'cp932'}}, {@part={'part', 0x3d, 0x1}}, {@file_umask={'file_umask', 0x3d, 0x4a7}}, {@umask={'umask', 0x3d, 0x6}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp862'}}]}, 0x1, 0x2db, &(0x7f0000000800)="$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") write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000001040)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES64, @ANYRES32, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000f40)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x402) write$binfmt_script(r2, &(0x7f00000001c0), 0x208e24b) 3.301274998s ago: executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) 1.921698182s ago: executing program 1: r0 = memfd_create(&(0x7f00000005c0)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x99\xd9\x89\xab\xf8P\xacYt]\xa3\xed\xfa\xd2\n\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9],t\'V|u\x86\x14s>p1\xcd\x1e\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xf5\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x13\x02\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xd6\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket(0x22, 0x2, 0x1) userfaultfd(0x80001) close_range(r0, 0xffffffffffffffff, 0x0) 777.327555ms ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x3}) 693.153439ms ago: executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, &(0x7f00000000c0), 0xff2a) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd6007000000303a00fe8000ffe800000000000000000000aaff02000000000000000000000000000101"], 0x0) 140.69968ms ago: executing program 1: syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x14008, &(0x7f0000000100)=ANY=[@ANYBLOB="63726561746f723d6a708eb82c6469725f756d61736b3d30303030303030303030303030303030303031303030302c636f6465706167653d63703836392c706172743d3078303030303030303030303030332c6469725f756d61736b3d30303030303030303030303030303030303030303030372c00"], 0xff, 0x2e9, &(0x7f00000008c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[], 0x7) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) 36.085879ms ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x10, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000006c0)=0x39) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010200000000000000001000000008000300", @ANYRESDEC, @ANYBLOB="08000600", @ANYRES32=r4], 0x24}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x0, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r5}, 0x38) r6 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYBLOB="bf"], 0x1c}}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x2040, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x1}}) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000007e40), 0x4000000000000aa, 0x810) recvmmsg(r9, &(0x7f0000001980)=[{{&(0x7f0000000b80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000c00)=""/143, 0x8f}, {&(0x7f0000000cc0)=""/216, 0xd8}, {&(0x7f0000000dc0)=""/178, 0xb2}, {&(0x7f0000000e80)=""/107, 0x6b}, {&(0x7f0000000f00)=""/28, 0x1c}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/19, 0x13}, {&(0x7f0000001040)=""/133, 0x85}, {&(0x7f0000001100)=""/46, 0x2e}, {&(0x7f0000001140)=""/39, 0x27}], 0xa}, 0x400}, {{&(0x7f00000013c0)=@nl=@proc, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001440)=""/178, 0xb2}, {&(0x7f0000001500)=""/254, 0xfe}], 0x2, &(0x7f0000001780)=""/75, 0x4b}}, {{&(0x7f0000001800)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001880)=""/243, 0xf3}, 0x3}], 0x3, 0x100, &(0x7f0000001a80)={0x0, 0x989680}) recvmmsg(r6, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080603000000000000000000000000040500010006000000"], 0x1c}}, 0x0) 0s ago: executing program 2: syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) kernel console output (not intermixed with test programs): slave bond_slave_0): Enslaving as an active interface with an up link [ 216.732122][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.739251][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.765712][ T5083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.990700][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.003471][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.011453][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.039072][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.059112][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.066506][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.092972][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.108382][ T50] Bluetooth: hci4: command tx timeout [ 217.140570][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.147727][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.174213][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.313923][ T5101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.327047][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.334388][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.361179][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.381042][ T5093] team0: Port device team_slave_0 added [ 217.453691][ T5101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.471935][ T5093] team0: Port device team_slave_1 added [ 217.524106][ T5083] hsr_slave_0: entered promiscuous mode [ 217.533408][ T5083] hsr_slave_1: entered promiscuous mode [ 217.677168][ T5082] hsr_slave_0: entered promiscuous mode [ 217.686118][ T5082] hsr_slave_1: entered promiscuous mode [ 217.694994][ T5082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.705541][ T5082] Cannot create hsr debugfs directory [ 217.846821][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.854109][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.881191][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.915068][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.922544][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.948888][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.968427][ T5101] team0: Port device team_slave_0 added [ 217.985605][ T5101] team0: Port device team_slave_1 added [ 218.004531][ T5091] hsr_slave_0: entered promiscuous mode [ 218.014796][ T5091] hsr_slave_1: entered promiscuous mode [ 218.023367][ T5091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.031159][ T5091] Cannot create hsr debugfs directory [ 218.274781][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.282184][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.308581][ T5101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.371343][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.378507][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.404969][ T5101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.419614][ T50] Bluetooth: hci0: command tx timeout [ 218.425579][ T50] Bluetooth: hci1: command tx timeout [ 218.700592][ T5088] Bluetooth: hci2: command tx timeout [ 218.723411][ T5093] hsr_slave_0: entered promiscuous mode [ 218.736345][ T5093] hsr_slave_1: entered promiscuous mode [ 218.744438][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.752336][ T5093] Cannot create hsr debugfs directory [ 218.791481][ T5088] Bluetooth: hci3: command tx timeout [ 218.927680][ T5101] hsr_slave_0: entered promiscuous mode [ 218.937512][ T5101] hsr_slave_1: entered promiscuous mode [ 218.946445][ T5101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.954876][ T5101] Cannot create hsr debugfs directory [ 219.118889][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.126379][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.200622][ T5088] Bluetooth: hci4: command tx timeout [ 219.692709][ T5083] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.781663][ T5083] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.841767][ T5083] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.862237][ T5083] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.041797][ T5091] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 220.114431][ T5091] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.157298][ T5091] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.188440][ T5091] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.208211][ T5082] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.296430][ T5082] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.397798][ T5093] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 220.422820][ T5082] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.460672][ T5088] Bluetooth: hci1: command tx timeout [ 220.466297][ T5088] Bluetooth: hci0: command tx timeout [ 220.481444][ T5093] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 220.503743][ T5082] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.594581][ T5093] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 220.648287][ T5093] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 220.756531][ T5101] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.793454][ T5088] Bluetooth: hci2: command tx timeout [ 220.854981][ T5101] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.873974][ T5088] Bluetooth: hci3: command tx timeout [ 220.954004][ T5101] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.052852][ T5101] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.286564][ T5088] Bluetooth: hci4: command tx timeout [ 221.498118][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.673625][ T5083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.788413][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.815637][ T5083] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.869611][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.919843][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.927666][ T4568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.052693][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.060694][ T4568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.159048][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.166817][ T4568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.227177][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.264442][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.272594][ T4568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.342713][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.387707][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.395605][ T4568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.530113][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.537915][ T4568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.577555][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.857820][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.865727][ T4568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.066265][ T5101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.093833][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.101651][ T4568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.170695][ T5082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.353941][ T5101] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.533135][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.540931][ T4568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.558413][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.566184][ T4568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.834299][ T5083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.954723][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.252316][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.481484][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.593100][ T5091] veth0_vlan: entered promiscuous mode [ 225.720314][ T5091] veth1_vlan: entered promiscuous mode [ 225.882500][ T5082] veth0_vlan: entered promiscuous mode [ 226.120005][ T5091] veth0_macvtap: entered promiscuous mode [ 226.138710][ T5082] veth1_vlan: entered promiscuous mode [ 226.275470][ T5091] veth1_macvtap: entered promiscuous mode [ 226.309689][ T5101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.326501][ T5093] veth0_vlan: entered promiscuous mode [ 226.516488][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.546189][ T5093] veth1_vlan: entered promiscuous mode [ 226.652472][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.662544][ T5082] veth0_macvtap: entered promiscuous mode [ 226.764840][ T5091] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.774038][ T5091] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.784423][ T5091] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.793665][ T5091] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.852026][ T5082] veth1_macvtap: entered promiscuous mode [ 226.950630][ T5093] veth0_macvtap: entered promiscuous mode [ 227.041697][ T5093] veth1_macvtap: entered promiscuous mode [ 227.099503][ T5101] veth0_vlan: entered promiscuous mode [ 227.142042][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.152891][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.168301][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.268221][ T5101] veth1_vlan: entered promiscuous mode [ 227.317987][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.328792][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.346995][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.432465][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.445949][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.456271][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.467050][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.482690][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.543850][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.557489][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.568694][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.579441][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.594534][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.644756][ T5082] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.655283][ T5082] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.666048][ T5082] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.675325][ T5082] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.790053][ T5093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.802545][ T5093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.811817][ T5093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.820998][ T5093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.974943][ T5083] veth0_vlan: entered promiscuous mode [ 228.037343][ T5101] veth0_macvtap: entered promiscuous mode [ 228.102584][ T5101] veth1_macvtap: entered promiscuous mode [ 228.152031][ T5083] veth1_vlan: entered promiscuous mode [ 228.416118][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.429472][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.442227][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.454521][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.465326][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.476500][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.491782][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.685273][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.696107][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.709849][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.721977][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.732135][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.742829][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.757789][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.828140][ T5083] veth0_macvtap: entered promiscuous mode [ 228.931425][ T5101] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.941269][ T5101] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.950415][ T5101] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.959428][ T5101] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.979791][ T5083] veth1_macvtap: entered promiscuous mode [ 229.207586][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.218984][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.229233][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.240120][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.250413][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.263847][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.275023][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.285884][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.301311][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.419449][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.434333][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.446802][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.457651][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.467799][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.478571][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.488705][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.499516][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.519451][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.605824][ T5083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.615080][ T5083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.624330][ T5083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.633533][ T5083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.835624][ T4409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.845204][ T4409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.086521][ T3394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.094751][ T3394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.498242][ T2890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.507428][ T2890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.849057][ T4568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.857354][ T4568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.977248][ T4568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.985846][ T4568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.268580][ T2929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.277881][ T2929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.987539][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.995889][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.213081][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.221311][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.306364][ T4409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.314544][ T4409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.563266][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.574604][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.239420][ T5293] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 239.027498][ T5306] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.256670][ T29] audit: type=1326 audit(1718279994.571:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745f579 code=0x0 [ 239.414107][ T5088] Bluetooth: unknown link type 32 [ 239.627381][ T5314] loop1: detected capacity change from 0 to 1024 [ 239.662210][ C1] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 239.799312][ T5309] loop2: detected capacity change from 0 to 2048 [ 239.803200][ T5314] hfsplus: failed to load root directory [ 240.107968][ T5309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.121656][ T5309] ext4 filesystem being mounted at /root/syzkaller-testdir905776816/syzkaller.yuwFFf/5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.248238][ T5309] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 240.642497][ T5091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.512447][ T5088] Bluetooth: hci3: command tx timeout [ 241.521797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 241.669686][ T5335] loop1: detected capacity change from 0 to 1024 [ 242.134057][ T5338] loop2: detected capacity change from 0 to 8 [ 242.220860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 242.229392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 242.362713][ T5338] SQUASHFS error: Unable to read inode 0xe3 [ 242.428946][ T5338] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 242.638417][ T5335] EXT4-fs: Ignoring removed orlov option [ 242.644672][ T5335] ext4: Unknown parameter 'uid>00000000000000000000' [ 242.748880][ T5338] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 243.035700][ T5332] overlayfs: missing 'workdir' [ 244.672802][ T5360] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.682816][ T5360] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 245.654723][ T5368] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 245.896592][ T5370] net_ratelimit: 44 callbacks suppressed [ 245.896758][ T5370] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 246.098275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 246.728880][ T5372] loop4: detected capacity change from 0 to 4096 [ 247.010516][ T5379] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.168704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 247.276071][ T29] audit: type=1804 audit(1718280002.541:3): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir239024083/syzkaller.oqLu4H/4/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 247.684395][ T5384] loop0: detected capacity change from 0 to 8 [ 247.718802][ T5384] SQUASHFS error: Unable to read inode 0xe3 [ 248.042197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 248.208227][ T5388] loop3: detected capacity change from 0 to 1024 [ 248.216740][ T5385] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 248.285907][ T5388] EXT4-fs: Ignoring removed orlov option [ 248.294054][ T5388] ext4: Unknown parameter 'uid>00000000000000000000' [ 248.554882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 248.688806][ T5382] overlayfs: missing 'workdir' [ 248.782577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 249.715285][ T5401] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 249.725162][ T5401] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.467095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 250.773184][ T5410] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.014518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 251.170127][ T5413] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 252.466439][ T5420] loop1: detected capacity change from 0 to 4096 [ 252.625035][ T5426] loop3: detected capacity change from 0 to 1024 [ 252.687488][ T5426] EXT4-fs: Ignoring removed orlov option [ 252.693881][ T5426] ext4: Unknown parameter 'uid>00000000000000000000' [ 252.893440][ T5427] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.007321][ T29] audit: type=1804 audit(1718280008.311:4): pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir786310141/syzkaller.gJHhM9/10/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 253.167249][ T5424] overlayfs: missing 'workdir' [ 253.424703][ T5429] loop0: detected capacity change from 0 to 8 [ 253.620951][ T5429] SQUASHFS error: Unable to read inode 0xe3 [ 254.104451][ T5429] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 256.477504][ T5449] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.089895][ T5457] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 258.746066][ T5466] loop3: detected capacity change from 0 to 1024 [ 258.760067][ T5463] loop0: detected capacity change from 0 to 4096 [ 258.807669][ T5466] EXT4-fs: Ignoring removed orlov option [ 258.814948][ T5466] ext4: Unknown parameter 'uid>00000000000000000000' [ 258.953674][ T5468] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.078721][ T5470] loop4: detected capacity change from 0 to 8 [ 259.158144][ T29] audit: type=1804 audit(1718280014.401:5): pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1985622427/syzkaller.PlY6Zp/15/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 259.193746][ T5465] overlayfs: missing 'workdir' [ 259.311475][ T5470] SQUASHFS error: Unable to read inode 0xe3 [ 259.562004][ T5472] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 261.676573][ T5493] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 263.625440][ T5505] loop0: detected capacity change from 0 to 4096 [ 263.708836][ T5509] loop2: detected capacity change from 0 to 1024 [ 263.753030][ T5509] EXT4-fs: Ignoring removed orlov option [ 263.759565][ T5509] ext4: Unknown parameter 'uid>00000000000000000000' [ 263.792785][ T5510] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 264.033561][ T5507] overlayfs: missing 'workdir' [ 265.054261][ T5520] loop0: detected capacity change from 0 to 8 [ 265.169596][ T5520] SQUASHFS error: Unable to read inode 0xe3 [ 265.419202][ T5526] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 266.208401][ T5533] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 268.578953][ T5551] loop0: detected capacity change from 0 to 4096 [ 268.808907][ T5556] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 269.006492][ T5557] loop3: detected capacity change from 0 to 1024 [ 269.086477][ T5557] EXT4-fs: Ignoring removed orlov option [ 269.093245][ T5557] ext4: Unknown parameter 'uid>00000000000000000000' [ 269.402912][ T5554] overlayfs: missing 'workdir' [ 271.057174][ T5571] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 271.116343][ T5570] loop1: detected capacity change from 0 to 8 [ 271.272546][ T5570] SQUASHFS error: Unable to read inode 0xe3 [ 271.677429][ T5573] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 274.925059][ T5591] loop4: detected capacity change from 0 to 4096 [ 275.059564][ T5595] loop0: detected capacity change from 0 to 1024 [ 275.131743][ T5597] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.233076][ T5595] EXT4-fs: Ignoring removed orlov option [ 275.239189][ T5595] ext4: Unknown parameter 'uid>00000000000000000000' [ 275.685391][ T5595] overlayfs: missing 'workdir' [ 276.219083][ T5605] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.681727][ T5614] loop3: detected capacity change from 0 to 8 [ 276.768946][ T5614] SQUASHFS error: Unable to read inode 0xe3 [ 277.136935][ T5615] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 279.985630][ T5636] loop0: detected capacity change from 0 to 4096 [ 280.262146][ T5641] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.559685][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.566320][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.421030][ T5647] loop4: detected capacity change from 0 to 1024 [ 281.467582][ T5647] EXT4-fs: Ignoring removed orlov option [ 281.473871][ T5647] ext4: Unknown parameter 'uid>00000000000000000000' [ 281.669577][ T5645] overlayfs: missing 'workdir' [ 281.863636][ T5651] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 283.080583][ T5660] loop0: detected capacity change from 0 to 8 [ 283.236252][ T5660] SQUASHFS error: Unable to read inode 0xe3 [ 283.533158][ T5670] mmap: syz-executor.3 (5670) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 283.733027][ T5660] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 285.180109][ T5687] loop0: detected capacity change from 0 to 1024 [ 285.203895][ T5679] loop1: detected capacity change from 0 to 4096 [ 285.256344][ T5687] EXT4-fs: Ignoring removed orlov option [ 285.263411][ T5687] ext4: Unknown parameter 'uid>00000000000000000000' [ 285.478997][ T5689] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.677901][ T5684] overlayfs: missing 'workdir' [ 286.563427][ T5694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 288.411148][ T5713] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 288.421300][ T5713] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 289.393290][ T5718] loop1: detected capacity change from 0 to 8 [ 289.453583][ T5718] SQUASHFS error: Unable to read inode 0xe3 [ 289.837206][ T5720] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 291.619993][ T5730] loop1: detected capacity change from 0 to 1024 [ 291.704430][ T5730] EXT4-fs: Ignoring removed orlov option [ 291.711179][ T5730] ext4: Unknown parameter 'uid>00000000000000000000' [ 292.144023][ T5728] overlayfs: missing 'workdir' [ 292.449864][ T5732] loop3: detected capacity change from 0 to 4096 [ 292.648458][ T5735] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.988811][ T5740] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 294.559813][ T5754] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 294.569957][ T5754] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 294.691475][ T5757] loop3: detected capacity change from 0 to 8 [ 294.790157][ T5757] SQUASHFS error: Unable to read inode 0xe3 [ 295.404648][ T5762] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 297.119834][ T5774] loop3: detected capacity change from 0 to 1024 [ 297.209182][ T5774] EXT4-fs: Ignoring removed orlov option [ 297.215524][ T5774] ext4: Unknown parameter 'uid>00000000000000000000' [ 297.485933][ T5774] overlayfs: missing 'workdir' [ 298.333754][ T5781] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 298.432639][ T5779] loop0: detected capacity change from 0 to 4096 [ 298.576140][ T5782] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.844618][ T29] audit: type=1804 audit(1718280054.101:6): pid=5784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1985622427/syzkaller.PlY6Zp/43/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 300.799566][ T5800] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 300.810805][ T5800] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 300.867207][ T5801] loop0: detected capacity change from 0 to 8 [ 300.988365][ T5801] SQUASHFS error: Unable to read inode 0xe3 [ 301.332560][ T5801] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 302.596788][ T5819] loop1: detected capacity change from 0 to 1024 [ 302.645783][ T5819] EXT4-fs: Ignoring removed orlov option [ 302.652063][ T5819] ext4: Unknown parameter 'uid>00000000000000000000' [ 302.919683][ T5816] overlayfs: missing 'workdir' [ 303.490561][ T5824] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 304.039342][ T5825] loop4: detected capacity change from 0 to 4096 [ 304.258838][ T5832] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 304.603754][ T29] audit: type=1804 audit(1718280059.861:7): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir239024083/syzkaller.oqLu4H/25/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 305.396556][ T5845] loop3: detected capacity change from 0 to 8 [ 305.575063][ T5845] SQUASHFS error: Unable to read inode 0xe3 [ 305.777542][ T5850] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 305.926380][ T5854] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 305.937740][ T5854] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 307.615548][ T5865] loop3: detected capacity change from 0 to 1024 [ 307.733477][ T5865] EXT4-fs: Ignoring removed orlov option [ 307.743813][ T5865] ext4: Unknown parameter 'uid>00000000000000000000' [ 308.103458][ T5863] overlayfs: missing 'workdir' [ 308.719641][ T5873] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 309.810028][ T5881] loop2: detected capacity change from 0 to 4096 [ 310.005039][ T5889] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.289535][ T29] audit: type=1804 audit(1718280065.541:8): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir905776816/syzkaller.yuwFFf/24/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 311.048447][ T5895] loop0: detected capacity change from 0 to 8 [ 311.152515][ T5895] SQUASHFS error: Unable to read inode 0xe3 [ 311.429333][ T5899] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 312.001350][ T5903] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 312.011157][ T5903] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 313.337047][ T5913] loop0: detected capacity change from 0 to 1024 [ 313.405988][ T5913] EXT4-fs: Ignoring removed orlov option [ 313.412447][ T5913] ext4: Unknown parameter 'uid>00000000000000000000' [ 313.670924][ T5911] overlayfs: missing 'workdir' [ 314.453257][ T5919] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 315.507411][ T5925] loop0: detected capacity change from 0 to 4096 [ 315.666739][ T5930] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.878662][ T29] audit: type=1804 audit(1718280071.171:9): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1985622427/syzkaller.PlY6Zp/55/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 316.934787][ T5941] loop0: detected capacity change from 0 to 8 [ 317.021541][ T5941] SQUASHFS error: Unable to read inode 0xe3 [ 317.444471][ T5944] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 318.485047][ T5952] loop3: detected capacity change from 0 to 1024 [ 318.557216][ T5952] EXT4-fs: Ignoring removed orlov option [ 318.563960][ T5952] ext4: Unknown parameter 'uid>00000000000000000000' [ 318.728050][ T5958] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.019085][ T5948] overlayfs: missing 'workdir' [ 319.915065][ T5967] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 320.366266][ T5972] loop0: detected capacity change from 0 to 4096 [ 320.721569][ T5979] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 320.961121][ T5088] Bluetooth: hci4: command 0x0405 tx timeout [ 321.219277][ T5982] loop2: detected capacity change from 0 to 8 [ 321.272679][ T5982] SQUASHFS error: Unable to read inode 0xe3 [ 321.401663][ T29] audit: type=1804 audit(1718280076.661:10): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1985622427/syzkaller.PlY6Zp/58/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 321.615074][ T5986] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 321.887065][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.914214][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 321.933759][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 321.964580][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 321.978435][ T50] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 321.987243][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.863176][ T5998] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 323.325771][ T6003] loop1: detected capacity change from 0 to 1024 [ 323.453333][ T6003] EXT4-fs: Ignoring removed orlov option [ 323.459506][ T6003] ext4: Unknown parameter 'uid>00000000000000000000' [ 323.772422][ T5999] overlayfs: missing 'workdir' [ 323.882256][ T5987] chnl_net:caif_netlink_parms(): no params data found [ 324.072224][ T50] Bluetooth: hci5: command tx timeout [ 324.649361][ T75] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.855960][ T75] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.039552][ T75] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.209720][ T75] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.455020][ T6024] loop1: detected capacity change from 0 to 4096 [ 325.464467][ T6031] loop2: detected capacity change from 0 to 8 [ 325.621202][ T75] bridge_slave_1: left allmulticast mode [ 325.627099][ T75] bridge_slave_1: left promiscuous mode [ 325.634370][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.647122][ T6031] SQUASHFS error: Unable to read inode 0xe3 [ 325.676309][ T6034] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.688314][ T75] bridge_slave_0: left allmulticast mode [ 325.695621][ T75] bridge_slave_0: left promiscuous mode [ 325.702406][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.955981][ T29] audit: type=1804 audit(1718280081.161:11): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir786310141/syzkaller.gJHhM9/42/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 326.192026][ T50] Bluetooth: hci5: command tx timeout [ 326.545030][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.672659][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.755274][ T75] bond0 (unregistering): Released all slaves [ 326.848906][ T6038] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 326.965539][ T6043] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 327.761933][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.769475][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.777196][ T5987] bridge_slave_0: entered allmulticast mode [ 327.785326][ T5987] bridge_slave_0: entered promiscuous mode [ 328.036991][ T75] hsr_slave_0: left promiscuous mode [ 328.120962][ T75] hsr_slave_1: left promiscuous mode [ 328.174556][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.182984][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.222200][ T50] Bluetooth: hci5: command tx timeout [ 328.291654][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.299317][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.427354][ T75] veth1_macvtap: left promiscuous mode [ 328.433824][ T75] veth0_macvtap: left promiscuous mode [ 328.439708][ T75] veth1_vlan: left promiscuous mode [ 328.445227][ T75] veth0_vlan: left promiscuous mode [ 329.583226][ T75] team0 (unregistering): Port device team_slave_1 removed [ 329.619932][ T75] team0 (unregistering): Port device team_slave_0 removed [ 329.882727][ T6063] loop2: detected capacity change from 0 to 1024 [ 329.909493][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.917485][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.926286][ T5987] bridge_slave_1: entered allmulticast mode [ 329.935387][ T5987] bridge_slave_1: entered promiscuous mode [ 330.141030][ T6063] EXT4-fs: Ignoring removed orlov option [ 330.147514][ T6063] ext4: Unknown parameter 'uid>00000000000000000000' [ 330.300734][ T50] Bluetooth: hci5: command tx timeout [ 330.454253][ T6060] overlayfs: missing 'workdir' [ 330.561766][ T5987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.738169][ T5987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.195862][ T6075] hsr_slave_0: left promiscuous mode [ 331.268992][ T6075] hsr_slave_1: left promiscuous mode [ 331.496611][ T5987] team0: Port device team_slave_0 added [ 331.614434][ T5987] team0: Port device team_slave_1 added [ 331.714458][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 331.724337][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 331.889149][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.898069][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.926879][ T5987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.154361][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.161769][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.188626][ T5987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.834958][ T6091] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 332.878767][ T5987] hsr_slave_0: entered promiscuous mode [ 332.915275][ T6092] loop1: detected capacity change from 0 to 8 [ 332.926536][ T5987] hsr_slave_1: entered promiscuous mode [ 333.163756][ T6092] SQUASHFS error: Unable to read inode 0xe3 [ 333.488235][ T6092] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 335.647857][ T5987] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 335.836777][ T5987] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 335.992468][ T5987] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 336.179526][ T5987] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 336.658673][ T6118] loop2: detected capacity change from 0 to 1024 [ 336.705917][ T6118] EXT4-fs: Ignoring removed orlov option [ 336.713085][ T6118] ext4: Unknown parameter 'uid>00000000000000000000' [ 337.211550][ T6117] overlayfs: missing 'workdir' [ 338.165894][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 338.175803][ T6138] nbd: nbd0 already in use [ 338.461536][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.525667][ T6144] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 338.678277][ T5987] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.739191][ T6134] sctp: failed to load transform for md5: -2 [ 338.807702][ T788] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.815507][ T788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.951753][ T6127] Bluetooth: hci0: command 0x0406 tx timeout [ 338.958915][ T6126] Bluetooth: hci2: command 0x0406 tx timeout [ 339.001670][ T788] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.009353][ T788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.041981][ T5088] Bluetooth: hci3: command 0x0406 tx timeout [ 339.048255][ T5088] Bluetooth: hci4: command 0x0405 tx timeout [ 339.226489][ T6151] loop2: detected capacity change from 0 to 8 [ 339.376629][ T6151] SQUASHFS error: Unable to read inode 0xe3 [ 340.065667][ T6162] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 342.037181][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.079775][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.086452][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 345.372697][ T5987] veth0_vlan: entered promiscuous mode [ 345.523328][ T5987] veth1_vlan: entered promiscuous mode [ 345.698032][ T6213] loop3: detected capacity change from 0 to 1024 [ 345.768266][ T6213] EXT4-fs: Ignoring removed orlov option [ 345.774799][ T6213] ext4: Unknown parameter 'uid>00000000000000000000' [ 345.897888][ T5987] veth0_macvtap: entered promiscuous mode [ 345.938415][ T5987] veth1_macvtap: entered promiscuous mode [ 346.091908][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 346.092960][ T6208] overlayfs: missing 'workdir' [ 346.103088][ T6216] nbd: nbd0 already in use [ 346.199048][ T6218] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 346.409434][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.420866][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.431206][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.441930][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.454783][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.466420][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.476648][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.487393][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.503007][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.868380][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.880312][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.891458][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.902195][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.912284][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.923240][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.933357][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.944117][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.961364][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.306315][ T5987] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.315492][ T5987] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.324729][ T5987] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.333829][ T5987] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.404448][ T6229] loop2: detected capacity change from 0 to 8 [ 347.573940][ T6229] SQUASHFS error: Unable to read inode 0xe3 [ 348.052926][ T6241] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 349.833834][ T6267] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 350.090721][ T6268] loop0: detected capacity change from 0 to 1024 [ 350.181655][ T6268] EXT4-fs: Ignoring removed orlov option [ 350.188183][ T6268] ext4: Unknown parameter 'uid>00000000000000000000' [ 350.508303][ T6261] overlayfs: missing 'workdir' [ 350.565254][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 350.575463][ T6273] nbd: nbd0 already in use [ 352.482477][ T6297] loop0: detected capacity change from 0 to 8 [ 352.706921][ T6297] SQUASHFS error: Unable to read inode 0xe3 [ 353.123917][ T6305] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 353.942124][ T29] audit: type=1804 audit(1718280109.191:12): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir905776816/syzkaller.yuwFFf/53/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 354.673412][ T6324] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 355.506932][ T6333] loop2: detected capacity change from 0 to 1024 [ 355.637447][ T6333] EXT4-fs: Ignoring removed orlov option [ 355.643893][ T6333] ext4: Unknown parameter 'uid>00000000000000000000' [ 355.775941][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 355.785827][ T6338] nbd: nbd0 already in use [ 355.963099][ T6328] overlayfs: missing 'workdir' [ 356.382095][ T6344] mkiss: ax0: crc mode is auto. [ 356.525524][ T6344] loop0: detected capacity change from 0 to 64 [ 356.645301][ T6343] 9pnet_fd: Insufficient options for proto=fd [ 356.749258][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.757851][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.082032][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.090172][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.659925][ T6362] loop2: detected capacity change from 0 to 8 [ 358.780949][ T6362] SQUASHFS error: Unable to read inode 0xe3 [ 359.234374][ T6364] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 360.545723][ T6374] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 361.486989][ T6380] loop0: detected capacity change from 0 to 1024 [ 361.573780][ T6380] EXT4-fs: Ignoring removed orlov option [ 361.579881][ T6380] ext4: Unknown parameter 'uid>00000000000000000000' [ 361.874134][ T6378] overlayfs: missing 'workdir' [ 365.213173][ T6400] loop2: detected capacity change from 0 to 8 [ 365.417209][ T6400] SQUASHFS error: Unable to read inode 0xe3 [ 365.590704][ T6402] mkiss: ax0: crc mode is auto. [ 365.797903][ T6404] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 365.828672][ T6410] loop1: detected capacity change from 0 to 64 [ 365.868309][ T6408] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 365.884449][ T6409] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 366.132160][ T6402] 9pnet_fd: Insufficient options for proto=fd [ 367.145292][ T6417] loop0: detected capacity change from 0 to 1024 [ 367.205275][ T6417] EXT4-fs: Ignoring removed orlov option [ 367.211823][ T6417] ext4: Unknown parameter 'uid>00000000000000000000' [ 367.492967][ T6413] overlayfs: missing 'workdir' [ 369.005188][ T6431] syz-executor.3[6431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.005774][ T6431] syz-executor.3[6431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.532924][ T6424] Zero length message leads to an empty skb [ 371.073589][ T6445] loop4: detected capacity change from 0 to 8 [ 371.181068][ T6445] SQUASHFS error: Unable to read inode 0xe3 [ 371.671758][ T6449] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 373.957234][ T6460] loop2: detected capacity change from 0 to 1024 [ 374.102506][ T6460] EXT4-fs: Ignoring removed orlov option [ 374.108610][ T6460] ext4: Unknown parameter 'uid>00000000000000000000' [ 374.429319][ T6456] overlayfs: missing 'workdir' [ 375.212641][ T6472] loop3: detected capacity change from 0 to 64 [ 375.442728][ T6470] 9pnet_fd: Insufficient options for proto=fd [ 376.425919][ T6482] loop1: detected capacity change from 0 to 8 [ 376.517482][ T6482] SQUASHFS error: Unable to read inode 0xe3 [ 376.918637][ T6484] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 381.886501][ T6505] loop2: detected capacity change from 0 to 1024 [ 381.993369][ T6505] EXT4-fs: Ignoring removed orlov option [ 381.999838][ T6505] ext4: Unknown parameter 'uid>00000000000000000000' [ 382.376457][ T6504] overlayfs: missing 'workdir' [ 383.191633][ T4568] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 383.306638][ T6516] loop2: detected capacity change from 0 to 8 [ 383.509447][ T6516] SQUASHFS error: Unable to read inode 0xe3 [ 383.624524][ T4568] usb 4-1: config index 0 descriptor too short (expected 106, got 36) [ 383.633726][ T4568] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.645626][ T4568] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.656086][ T4568] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 383.665964][ T4568] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.780402][ T4568] usb 4-1: config 0 descriptor?? [ 383.897135][ T6517] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 384.284004][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 384.292141][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.300042][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.307992][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.315668][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.323308][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.330997][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 384.341044][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.348583][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 384.356840][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.365039][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.373304][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.381246][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.388907][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 384.396833][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.404604][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.412487][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.420325][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.428042][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.441341][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.449078][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.457292][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 385.032444][ T8] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 385.244367][ T4568] usbhid 4-1:0.0: can't add hid device: -71 [ 385.250934][ T4568] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 385.342479][ T4568] usb 4-1: USB disconnect, device number 2 [ 385.475067][ T6522] mkiss: ax0: crc mode is auto. [ 385.605394][ T6523] loop2: detected capacity change from 0 to 64 [ 385.734928][ T6522] 9pnet_fd: Insufficient options for proto=fd [ 387.281979][ T29] audit: type=1326 audit(1718280142.561:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 387.307046][ T29] audit: type=1326 audit(1718280142.561:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 387.330434][ T29] audit: type=1326 audit(1718280142.571:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 387.353182][ T29] audit: type=1326 audit(1718280142.571:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 387.376094][ T29] audit: type=1326 audit(1718280142.581:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=107 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 387.398975][ T29] audit: type=1326 audit(1718280142.591:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 387.424477][ T29] audit: type=1326 audit(1718280142.591:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 387.960468][ T6531] loop4: detected capacity change from 0 to 512 [ 388.037616][ T6531] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 388.145803][ T6531] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a840e01c, mo2=0002] [ 388.236630][ T6531] System zones: 1-12 [ 388.269814][ T6531] EXT4-fs (loop4): orphan cleanup on readonly fs [ 388.279373][ T6531] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz-executor.4: Inode bitmap for bg 0 marked uninitialized [ 388.380745][ T6531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 388.639480][ T5987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.800868][ T6545] loop3: detected capacity change from 0 to 1024 [ 389.883261][ T6545] EXT4-fs: Ignoring removed orlov option [ 389.889646][ T6545] ext4: Unknown parameter 'uid>00000000000000000000' [ 389.911068][ T6548] loop4: detected capacity change from 0 to 8 [ 390.044593][ T6548] SQUASHFS error: Unable to read inode 0xe3 [ 390.101091][ T6025] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 390.247695][ T6550] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 390.284795][ T6544] overlayfs: missing 'workdir' [ 390.414835][ T6554] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 391.128345][ T6557] mkiss: ax0: crc mode is auto. [ 391.257931][ T6560] loop0: detected capacity change from 0 to 64 [ 391.460056][ T6557] 9pnet_fd: Insufficient options for proto=fd [ 393.307531][ T6587] loop4: detected capacity change from 0 to 1024 [ 393.354174][ T6587] EXT4-fs: Ignoring removed orlov option [ 393.362906][ T6587] ext4: Unknown parameter 'uid>00000000000000000000' [ 393.639905][ T6591] loop3: detected capacity change from 0 to 8 [ 393.663219][ T6583] overlayfs: missing 'workdir' [ 393.743076][ T6591] SQUASHFS error: Unable to read inode 0xe3 [ 394.177165][ T6592] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 397.823825][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 397.833997][ T6627] nbd: nbd0 already in use [ 398.257117][ T6630] loop4: detected capacity change from 0 to 1024 [ 398.349700][ T6630] EXT4-fs: Ignoring removed orlov option [ 398.356432][ T6630] ext4: Unknown parameter 'uid>00000000000000000000' [ 398.364010][ T6634] loop0: detected capacity change from 0 to 8 [ 398.477418][ T6634] SQUASHFS error: Unable to read inode 0xe3 [ 398.693405][ T6628] overlayfs: missing 'workdir' [ 398.994965][ T6636] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 399.107299][ T6641] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 400.212290][ T6650] loop0: detected capacity change from 0 to 1 [ 400.270774][ T6650] syz-executor.0: attempt to access beyond end of device [ 400.270774][ T6650] loop0: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 400.284822][ T6650] SQUASHFS error: Failed to read block 0x0: -5 [ 400.291311][ T6650] unable to read squashfs_super_block [ 400.456075][ T6655] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 400.789339][ T6656] loop4: detected capacity change from 0 to 128 [ 400.841817][ T6656] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 400.892987][ T6656] sysv_count_free_blocks: free block count was -2041545935, correcting to 3 [ 401.352531][ T6656] sysv_count_free_inodes: unable to read inode table [ 401.601552][ T5987] sysv_free_block: trying to free block not in datazone [ 401.609736][ T5987] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 401.619006][ T6658] loop1: detected capacity change from 0 to 1764 [ 401.681885][ T6658] ======================================================= [ 401.681885][ T6658] WARNING: The mand mount option has been deprecated and [ 401.681885][ T6658] and is ignored by this kernel. Remove the mand [ 401.681885][ T6658] option from the mount to silence this warning. [ 401.681885][ T6658] ======================================================= [ 402.839564][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 402.849781][ T6666] nbd: nbd0 already in use [ 403.445880][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.453063][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.551411][ T6670] loop1: detected capacity change from 0 to 1024 [ 403.617276][ T6670] EXT4-fs: Ignoring removed orlov option [ 403.623732][ T6670] ext4: Unknown parameter 'uid>00000000000000000000' [ 404.023707][ T6668] overlayfs: missing 'workdir' [ 404.030243][ T29] audit: type=1804 audit(1718280159.301:20): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3828843270/syzkaller.xxIKTp/27/file0" dev="sda1" ino=1968 res=1 errno=0 [ 404.746645][ T6674] loop1: detected capacity change from 0 to 8 [ 404.913051][ T6674] SQUASHFS error: Unable to read inode 0xe3 [ 405.415443][ T6678] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 405.861083][ T6686] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 406.444288][ T6690] IPv6: NLM_F_REPLACE set, but no existing node found! [ 406.574171][ T6692] loop1: detected capacity change from 0 to 64 [ 406.655593][ T6692] hfs: unable to parse mount options [ 406.826727][ T6692] loop1: detected capacity change from 0 to 8 [ 407.333006][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 407.344256][ T6698] nbd: nbd0 already in use [ 407.898189][ T6702] loop3: detected capacity change from 0 to 1024 [ 407.964282][ T6702] EXT4-fs: Ignoring removed orlov option [ 407.970711][ T6702] ext4: Unknown parameter 'uid>00000000000000000000' [ 408.657843][ T6700] overlayfs: missing 'workdir' [ 409.605322][ T6709] process 'syz-executor.3' launched './file0' with NULL argv: empty string added [ 410.630763][ T6713] loop2: detected capacity change from 0 to 2048 [ 410.802360][ T6713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.815326][ T6713] ext4 filesystem being mounted at /root/syzkaller-testdir905776816/syzkaller.yuwFFf/72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.937977][ T6720] loop4: detected capacity change from 0 to 8 [ 411.072192][ T6720] SQUASHFS error: Unable to read inode 0xe3 [ 411.097383][ T6723] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 411.148340][ T5091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.397236][ T6727] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 412.140817][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 412.150476][ T6738] nbd: nbd0 already in use [ 413.017974][ T6746] loop1: detected capacity change from 0 to 1024 [ 413.067678][ T6746] EXT4-fs: Ignoring removed orlov option [ 413.074211][ T6746] ext4: Unknown parameter 'uid>00000000000000000000' [ 413.343334][ T6741] overlayfs: missing 'workdir' [ 414.652061][ T29] audit: type=1800 audit(1718280169.901:21): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 415.046903][ T6764] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 415.683328][ T6768] loop0: detected capacity change from 0 to 8 [ 415.782394][ T6768] SQUASHFS error: Unable to read inode 0xe3 [ 416.143787][ T6769] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 418.892208][ T6784] loop3: detected capacity change from 0 to 1024 [ 418.976830][ T6784] EXT4-fs: Ignoring removed orlov option [ 418.983889][ T6784] ext4: Unknown parameter 'uid>00000000000000000000' [ 419.242534][ T6783] overlayfs: missing 'workdir' [ 420.397622][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 420.476284][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 420.586213][ T6796] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 421.204579][ T6799] loop4: detected capacity change from 0 to 8 [ 421.328337][ T6799] SQUASHFS error: Unable to read inode 0xe3 [ 421.702303][ T6801] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 424.033360][ T6824] loop3: detected capacity change from 0 to 1024 [ 424.094064][ T6824] EXT4-fs: Ignoring removed orlov option [ 424.100415][ T6824] ext4: Unknown parameter 'uid>00000000000000000000' [ 424.496096][ T6815] overlayfs: missing 'workdir' [ 426.763742][ T6921] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 427.905206][ T6940] loop4: detected capacity change from 0 to 8 [ 428.111213][ T6940] SQUASHFS error: Unable to read inode 0xe3 [ 428.348277][ T6940] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 429.101502][ T29] audit: type=1804 audit(1718280184.351:22): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir786310141/syzkaller.gJHhM9/92/bus" dev="sda1" ino=1952 res=1 errno=0 [ 431.063397][ T6964] loop3: detected capacity change from 0 to 1024 [ 431.162145][ T6964] EXT4-fs: Ignoring removed orlov option [ 431.168623][ T6964] ext4: Unknown parameter 'uid>00000000000000000000' [ 431.304850][ T6025] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 431.506670][ T6962] overlayfs: missing 'workdir' [ 432.526764][ T29] audit: type=1800 audit(1718280187.741:23): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.1" name="/root/syzkaller-testdir786310141/syzkaller.gJHhM9/92/bus" dev="sda1" ino=1952 res=0 errno=0 [ 432.703921][ T6972] loop3: detected capacity change from 0 to 512 [ 432.844299][ T6972] EXT4-fs: Invalid want_extra_isize 1048622 [ 433.042859][ T6025] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 433.912206][ T6975] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 434.358890][ T6978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.485760][ T6984] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 434.554565][ T6978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.657713][ T6985] loop4: detected capacity change from 0 to 8 [ 434.741399][ T5141] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 434.774318][ T6985] SQUASHFS error: Unable to read inode 0xe3 [ 434.775811][ T6978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.196739][ T6978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.333508][ T6989] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 435.832736][ T6978] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.857844][ T6978] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.879478][ T6978] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.900721][ T6978] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.135733][ T5141] usb 2-1: unable to get BOS descriptor or descriptor too short [ 436.281852][ T5141] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 436.290152][ T5141] usb 2-1: can't read configurations, error -71 [ 436.825625][ T7007] loop4: detected capacity change from 0 to 1024 [ 436.893724][ T7007] EXT4-fs: Ignoring removed orlov option [ 436.899894][ T7007] ext4: Unknown parameter 'uid>00000000000000000000' [ 437.167670][ T7004] overlayfs: missing 'workdir' [ 437.181162][ T29] audit: type=1804 audit(1718280192.401:24): pid=7013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3769509632/syzkaller.6JiesB/130/bus" dev="sda1" ino=1956 res=1 errno=0 [ 437.215853][ T7012] loop0: detected capacity change from 0 to 512 [ 437.311946][ T7012] EXT4-fs: Invalid want_extra_isize 1048622 [ 437.930125][ T7020] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 438.045074][ T29] audit: type=1326 audit(1718280193.311:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7467579 code=0x7ffc0000 [ 438.069289][ T29] audit: type=1326 audit(1718280193.341:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7467579 code=0x7ffc0000 [ 438.092358][ T29] audit: type=1326 audit(1718280193.351:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7467579 code=0x7ffc0000 [ 438.118045][ T29] audit: type=1326 audit(1718280193.371:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7467579 code=0x7ffc0000 [ 438.141932][ T29] audit: type=1326 audit(1718280193.401:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7467579 code=0x7ffc0000 [ 438.165582][ T29] audit: type=1326 audit(1718280193.451:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7467579 code=0x7ffc0000 [ 438.188461][ T29] audit: type=1326 audit(1718280193.451:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7467579 code=0x7ffc0000 [ 438.214124][ T29] audit: type=1326 audit(1718280193.451:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf74675a7 code=0x7ffc0000 [ 438.237721][ T29] audit: type=1326 audit(1718280193.451:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7467579 code=0x7ffc0000 [ 438.358325][ T4490] udevd[4490]: worker [5479] terminated by signal 33 (Unknown signal 33) [ 438.410915][ T4490] udevd[4490]: worker [5479] failed while handling '/devices/virtual/block/loop2' [ 438.440165][ T4490] udevd[4490]: worker [5251] terminated by signal 33 (Unknown signal 33) [ 438.457179][ T4490] udevd[4490]: worker [5251] failed while handling '/devices/virtual/block/loop0' [ 438.486725][ T4490] udevd[4490]: worker [6025] terminated by signal 33 (Unknown signal 33) [ 438.547692][ T4490] udevd[4490]: worker [6025] failed while handling '/devices/virtual/block/loop4' [ 440.049310][ T7041] loop0: detected capacity change from 0 to 8 [ 440.196319][ T7041] SQUASHFS error: Unable to read inode 0xe3 [ 440.211920][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 440.425265][ T7041] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 440.988791][ T7054] loop4: detected capacity change from 0 to 1024 [ 441.087781][ T7054] EXT4-fs: Ignoring removed orlov option [ 441.094118][ T7054] ext4: Unknown parameter 'uid>00000000000000000000' [ 441.405111][ T7050] overlayfs: missing 'workdir' [ 441.790046][ T7062] loop0: detected capacity change from 0 to 512 [ 441.844166][ T7062] EXT4-fs: Invalid want_extra_isize 1048622 [ 442.203127][ T7066] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 442.268303][ T7067] loop4: detected capacity change from 0 to 512 [ 442.481562][ T7067] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 442.542719][ T7067] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 442.581629][ T7067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.935433][ T5987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.028568][ T7071] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 443.605691][ T7078] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 443.689778][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 443.689856][ T29] audit: type=1804 audit(1718280199.011:45): pid=7080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1985622427/syzkaller.PlY6Zp/115/bus" dev="sda1" ino=1965 res=1 errno=0 [ 445.769912][ T7089] loop4: detected capacity change from 0 to 8 [ 445.928759][ T7089] SQUASHFS error: Unable to read inode 0xe3 [ 446.259192][ T7090] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 446.463676][ T4434] Bluetooth: hci5: command 0x0406 tx timeout [ 447.879739][ T7095] loop1: detected capacity change from 0 to 1024 [ 448.009837][ T7095] EXT4-fs: Ignoring removed orlov option [ 448.016699][ T7095] ext4: Unknown parameter 'uid>00000000000000000000' [ 448.315963][ T7095] overlayfs: missing 'workdir' [ 448.817424][ T7100] loop0: detected capacity change from 0 to 512 [ 448.862610][ T7100] EXT4-fs: Invalid want_extra_isize 1048622 [ 449.221401][ T7102] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 449.901785][ T7107] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 450.517783][ T7112] loop0: detected capacity change from 0 to 256 [ 450.828490][ T7112] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 451.084760][ T7117] loop3: detected capacity change from 0 to 8 [ 451.326424][ T7117] SQUASHFS error: Unable to read inode 0xe3 [ 451.648724][ T7117] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 451.888610][ T29] audit: type=1804 audit(1718280207.121:46): pid=7123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1985622427/syzkaller.PlY6Zp/119/bus" dev="sda1" ino=1967 res=1 errno=0 [ 452.804580][ T7125] loop4: detected capacity change from 0 to 1024 [ 452.874775][ T7125] EXT4-fs: Ignoring removed orlov option [ 452.882024][ T7125] ext4: Unknown parameter 'uid>00000000000000000000' [ 452.894651][ T7130] loop3: detected capacity change from 0 to 512 [ 452.935894][ T7130] EXT4-fs: Invalid want_extra_isize 1048622 [ 453.185832][ T7125] overlayfs: missing 'workdir' [ 454.146174][ T7136] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 454.333158][ T7135] loop3: detected capacity change from 0 to 2048 [ 454.546858][ T7135] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.753151][ T7140] loop4: detected capacity change from 0 to 1024 [ 455.834983][ T7143] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 456.688913][ T7154] loop3: detected capacity change from 0 to 8 [ 456.822505][ T7154] SQUASHFS error: Unable to read inode 0xe3 [ 457.147641][ T7154] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 457.210847][ T7157] loop0: detected capacity change from 0 to 1024 [ 457.225916][ T7161] loop2: detected capacity change from 0 to 1764 [ 457.266677][ T7157] EXT4-fs: Ignoring removed orlov option [ 457.273812][ T7157] ext4: Unknown parameter 'uid>00000000000000000000' [ 457.313763][ T7164] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 457.401216][ T7165] loop1: detected capacity change from 0 to 16 [ 457.452765][ T7161] loop2: detected capacity change from 0 to 256 [ 457.475409][ T7161] FAT-fs (loop2): bogus number of FAT sectors [ 457.482239][ T7161] FAT-fs (loop2): Can't find a valid FAT filesystem [ 457.504888][ T7165] erofs: (device loop1): mounted with root inode @ nid 36. [ 457.584281][ T7157] overlayfs: missing 'workdir' [ 457.948188][ T7168] loop4: detected capacity change from 0 to 1024 [ 457.973736][ T7161] loop2: detected capacity change from 0 to 2048 [ 458.109149][ T7168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.168963][ T7161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.470414][ T5141] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 458.563680][ T7180] loop0: detected capacity change from 0 to 1764 [ 458.658986][ T5091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.751255][ T5141] usb 2-1: Using ep0 maxpacket: 8 [ 458.803426][ T5987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.921270][ T5141] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.061463][ T5141] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 459.071027][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 459.079299][ T5141] usb 2-1: SerialNumber: syz [ 459.244282][ T5141] usb-storage 2-1:1.0: USB Mass Storage device detected [ 459.355494][ T5141] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 459.611204][ T5141] usb 2-1: USB disconnect, device number 4 [ 459.617676][ T7192] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 459.888857][ T5143] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 460.292064][ T5143] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.302606][ T5143] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.377798][ T7199] loop4: detected capacity change from 0 to 256 [ 460.425199][ T5143] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 460.434764][ T5143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 460.443105][ T5143] usb 1-1: SerialNumber: syz [ 460.475478][ T7199] exfat: Deprecated parameter 'namecase' [ 460.664504][ T7199] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 460.790706][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 460.883732][ T5143] usb 1-1: 0:2 : does not exist [ 460.993607][ T7206] loop1: detected capacity change from 0 to 8 [ 461.086835][ T5143] usb 1-1: USB disconnect, device number 2 [ 461.096105][ T7206] SQUASHFS error: Unable to read inode 0xe3 [ 461.391188][ T7208] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 461.618681][ T7195] udevd[7195]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.144668][ T7216] loop4: detected capacity change from 0 to 1024 [ 462.221878][ T7216] EXT4-fs: Ignoring removed orlov option [ 462.228051][ T7216] ext4: Unknown parameter 'uid>00000000000000000000' [ 462.506780][ T7213] overlayfs: missing 'workdir' [ 462.615845][ T7217] loop0: detected capacity change from 0 to 512 [ 462.769680][ T7220] loop3: detected capacity change from 0 to 2048 [ 462.801778][ T5143] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 462.813603][ T7217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.826996][ T7217] ext4 filesystem being mounted at /root/syzkaller-testdir1985622427/syzkaller.PlY6Zp/124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.170528][ T7220] loop3: detected capacity change from 0 to 2048 [ 463.212037][ T5143] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 463.221998][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.324737][ T5143] usb 2-1: config 0 descriptor?? [ 463.328509][ T7220] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 463.539698][ T5082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.709582][ T7222] loop1: detected capacity change from 0 to 1024 [ 463.761644][ T7222] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 463.875955][ T7222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.196747][ T7234] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.1: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 464.321089][ T5168] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 464.801382][ T5168] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 464.812954][ T5168] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 464.824803][ T5168] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 464.834311][ T5168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.940559][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.947394][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.032854][ T7243] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 465.110471][ T7241] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 465.292084][ T5168] usb 1-1: string descriptor 0 read error: -71 [ 465.300124][ T5168] hub 1-1:32.0: USB hub found [ 465.412353][ T5168] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 465.608410][ T5168] usb 1-1: USB disconnect, device number 3 [ 465.684377][ T7195] udevd[7195]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.729730][ T29] audit: type=1804 audit(1718280221.031:47): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3769509632/syzkaller.6JiesB/143/file0" dev="sda1" ino=1966 res=1 errno=0 [ 466.887191][ T7250] loop0: detected capacity change from 0 to 2048 [ 467.117153][ T7250] loop0: detected capacity change from 0 to 2048 [ 467.212078][ T7250] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 468.231522][ T7254] loop0: detected capacity change from 0 to 8 [ 468.361644][ T7254] SQUASHFS error: Unable to read inode 0xe3 [ 468.787461][ T7257] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 469.360958][ T5143] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -110 [ 469.371676][ T5143] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffff92 [ 469.382594][ T5143] asix 2-1:0.0: probe with driver asix failed with error -110 [ 470.203498][ T7263] loop0: detected capacity change from 0 to 1024 [ 470.273317][ T7263] EXT4-fs: Ignoring removed orlov option [ 470.279437][ T7263] ext4: Unknown parameter 'uid>00000000000000000000' [ 470.509360][ T7263] overlayfs: missing 'workdir' [ 471.467617][ T7270] pim6reg1: entered promiscuous mode [ 471.473456][ T7270] pim6reg1: entered allmulticast mode [ 471.714975][ T7268] loop2: detected capacity change from 0 to 512 [ 472.102858][ T7268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.116019][ T7268] ext4 filesystem being mounted at /root/syzkaller-testdir905776816/syzkaller.yuwFFf/87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.812170][ T7278] syz-executor.0[7278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 472.813106][ T7278] syz-executor.0[7278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 472.822285][ T5091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.851141][ T7283] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 474.805509][ T7292] loop2: detected capacity change from 0 to 8 [ 475.049312][ T7292] SQUASHFS error: Unable to read inode 0xe3 [ 475.412176][ T7299] loop0: detected capacity change from 0 to 1024 [ 475.448071][ T7299] EXT4-fs: Ignoring removed orlov option [ 475.456135][ T7299] ext4: Unknown parameter 'uid>00000000000000000000' [ 475.542783][ T7295] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 475.895331][ T7297] overlayfs: missing 'workdir' [ 477.001754][ T7302] can: request_module (can-proto-0) failed. [ 477.819872][ T7309] loop2: detected capacity change from 0 to 512 [ 478.067800][ T7309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.080928][ T7309] ext4 filesystem being mounted at /root/syzkaller-testdir905776816/syzkaller.yuwFFf/91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.965078][ T7319] syz-executor.0[7319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.965470][ T7319] syz-executor.0[7319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.095906][ T5091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.249127][ T7322] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 480.469055][ T7333] loop4: detected capacity change from 0 to 8 [ 480.539100][ T7333] SQUASHFS error: Unable to read inode 0xe3 [ 480.941323][ T7337] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 481.008059][ T7335] loop0: detected capacity change from 0 to 1024 [ 481.045151][ T7335] EXT4-fs: Ignoring removed orlov option [ 481.051473][ T7335] ext4: Unknown parameter 'uid>00000000000000000000' [ 481.297627][ T7331] overlayfs: missing 'workdir' [ 483.410506][ T5143] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 483.753348][ T5143] usb 5-1: Using ep0 maxpacket: 16 [ 484.134945][ T5143] usb 5-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 484.144553][ T5143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.152903][ T5143] usb 5-1: Product: syz [ 484.157293][ T5143] usb 5-1: Manufacturer: syz [ 484.162505][ T5143] usb 5-1: SerialNumber: syz [ 484.382442][ T5143] usb 5-1: config 0 descriptor?? [ 484.539851][ T5143] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 484.552562][ T5143] dvb-usb: bulk message failed: -22 (2/0) [ 484.558514][ T5143] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 484.770828][ T5143] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 484.781309][ T5143] usb 5-1: media controller created [ 484.861923][ T5143] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.023253][ T5143] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 485.032206][ T5143] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 485.722750][ T7363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 485.793706][ T5168] usb 2-1: USB disconnect, device number 5 [ 485.861189][ T5143] rc_core: IR keymap rc-dtt200u not found [ 485.867139][ T5143] Registered IR keymap rc-empty [ 485.873890][ T5143] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 485.888030][ T5143] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6 [ 485.913757][ T5093] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.141698][ T5143] dvb-usb: schedule remote query interval to 300 msecs. [ 486.148880][ T5143] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 486.465844][ T5143] usb 5-1: USB disconnect, device number 2 [ 486.600887][ T7371] loop4: detected capacity change from 0 to 512 [ 486.826119][ T7371] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 486.901589][ T5143] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 487.167329][ T7371] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 64: padding at end of block bitmap is not set [ 487.256857][ T7371] Quota error (device loop4): write_blk: dquota write failed [ 487.265349][ T7371] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 487.275951][ T7371] EXT4-fs error (device loop4): ext4_acquire_dquot:6882: comm syz-executor.4: Failed to acquire dquot type 0 [ 487.376281][ T7371] EXT4-fs (loop4): 1 truncate cleaned up [ 487.382351][ T7371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.422533][ T7381] loop1: detected capacity change from 0 to 8 [ 487.526647][ T7381] SQUASHFS error: Unable to read inode 0xe3 [ 487.722826][ T7382] loop0: detected capacity change from 0 to 1024 [ 487.731526][ T7371] syz-executor.4 (7371) used greatest stack depth: 2888 bytes left [ 487.785768][ T7382] EXT4-fs: Ignoring removed orlov option [ 487.792339][ T7382] ext4: Unknown parameter 'uid>00000000000000000000' [ 487.972668][ T7386] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 488.026665][ T5987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.132987][ T7380] overlayfs: missing 'workdir' [ 488.862215][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 489.823846][ T7410] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 489.870454][ T5168] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 490.321908][ T5168] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 490.331462][ T5168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.350297][ T5168] usb 5-1: config 0 descriptor?? [ 490.822366][ T7404] loop4: detected capacity change from 0 to 1024 [ 490.899770][ T7404] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 491.012825][ T7404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.295046][ T7419] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.4: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 492.124099][ T7428] loop3: detected capacity change from 0 to 512 [ 492.202760][ T7428] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 492.542495][ T7428] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 64: padding at end of block bitmap is not set [ 492.644531][ T7428] Quota error (device loop3): write_blk: dquota write failed [ 492.652700][ T7428] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 492.662998][ T7428] EXT4-fs error (device loop3): ext4_acquire_dquot:6882: comm syz-executor.3: Failed to acquire dquot type 0 [ 492.756504][ T7428] EXT4-fs (loop3): 1 truncate cleaned up [ 492.764187][ T7428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.279292][ T5101] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.858806][ T7440] loop1: detected capacity change from 0 to 1024 [ 494.887086][ T7444] loop3: detected capacity change from 0 to 8 [ 494.898937][ T7440] EXT4-fs: Ignoring removed orlov option [ 494.905215][ T7440] ext4: Unknown parameter 'uid>00000000000000000000' [ 495.063267][ T7444] SQUASHFS error: Unable to read inode 0xe3 [ 495.166599][ T7440] overlayfs: missing 'workdir' [ 495.465074][ T7447] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 496.127908][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 496.685451][ T5168] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -110 [ 496.695829][ T5168] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffff92 [ 496.706881][ T5168] asix 5-1:0.0: probe with driver asix failed with error -110 [ 496.959520][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 499.487362][ T7476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 499.832842][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 499.845813][ T7480] nbd: nbd0 already in use [ 500.410530][ T7484] loop3: detected capacity change from 0 to 1024 [ 500.426097][ T7484] EXT4-fs: Ignoring removed orlov option [ 500.432618][ T7484] ext4: Unknown parameter 'uid>00000000000000000000' [ 500.695421][ T7482] overlayfs: missing 'workdir' [ 500.974705][ T7487] loop2: detected capacity change from 0 to 8 [ 501.094735][ T7487] SQUASHFS error: Unable to read inode 0xe3 [ 501.446508][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 501.509220][ T7489] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 502.266387][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 502.460482][ T5084] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 502.469005][ T5084] Bluetooth: hci2: Injecting HCI hardware error event [ 502.476406][ T5084] Bluetooth: hci2: hardware error 0x00 [ 503.313698][ T7507] fuse: Bad value for 'fd' [ 503.611997][ T4434] Bluetooth: hci4: unexpected event for opcode 0x200c [ 504.546629][ T5084] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 505.859048][ T7521] loop1: detected capacity change from 0 to 1024 [ 505.897657][ T7521] EXT4-fs: Ignoring removed orlov option [ 505.903945][ T7521] ext4: Unknown parameter 'uid>00000000000000000000' [ 506.033527][ T7195] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 506.127027][ T7521] overlayfs: missing 'workdir' [ 506.466480][ T7527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 507.662147][ T5084] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 507.670798][ T5084] Bluetooth: hci4: Injecting HCI hardware error event [ 507.678519][ T4434] Bluetooth: hci4: hardware error 0x00 [ 507.680971][ T7536] loop3: detected capacity change from 0 to 8 [ 507.837238][ T7536] SQUASHFS error: Unable to read inode 0xe3 [ 508.151165][ T7537] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 508.288147][ T7543] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 509.354675][ T5084] Bluetooth: hci4: unexpected event for opcode 0x200c [ 509.740434][ T4434] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 510.197131][ T7553] fuse: Bad value for 'fd' [ 511.376644][ T7563] loop2: detected capacity change from 0 to 2048 [ 511.461869][ T7563] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 511.568503][ T7195] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 511.728709][ T7567] loop1: detected capacity change from 0 to 1024 [ 511.793976][ T7567] EXT4-fs: Ignoring removed orlov option [ 511.800156][ T7567] ext4: Unknown parameter 'uid>00000000000000000000' [ 512.114275][ T7565] overlayfs: missing 'workdir' [ 513.006164][ T5168] usb 5-1: USB disconnect, device number 3 [ 513.028097][ T7569] loop0: detected capacity change from 0 to 4096 [ 513.045501][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 513.057420][ T7575] nbd: nbd0 already in use [ 513.085704][ T7569] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 513.112063][ T5987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.554181][ T7577] loop3: detected capacity change from 0 to 8 [ 513.683246][ T7577] SQUASHFS error: Unable to read inode 0xe3 [ 514.031550][ T7580] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 514.144766][ T7586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 514.612112][ T4434] Bluetooth: hci5: unexpected event for opcode 0x200c [ 516.279554][ T7607] loop4: detected capacity change from 0 to 1024 [ 516.336951][ T7607] EXT4-fs: Ignoring removed orlov option [ 516.343727][ T7607] ext4: Unknown parameter 'uid>00000000000000000000' [ 516.704052][ T7605] overlayfs: missing 'workdir' [ 516.714420][ T7609] fuse: Bad value for 'fd' [ 517.411012][ T5143] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 517.903369][ T5143] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 517.913379][ T5143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.964000][ T5143] usb 1-1: config 0 descriptor?? [ 517.975765][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 517.986011][ T7619] nbd: nbd0 already in use [ 518.391466][ T7611] loop0: detected capacity change from 0 to 1024 [ 518.438225][ T7611] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 518.626500][ T4434] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 518.635572][ T4434] Bluetooth: hci5: Injecting HCI hardware error event [ 518.639880][ T7611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.649560][ T4434] Bluetooth: hci5: hardware error 0x00 [ 518.981475][ T7625] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.0: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 519.363760][ T7630] loop3: detected capacity change from 0 to 8 [ 519.519375][ T7630] SQUASHFS error: Unable to read inode 0xe3 [ 519.653466][ T7632] loop4: detected capacity change from 0 to 2048 [ 519.752603][ T7632] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 519.833423][ T7638] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 519.979803][ T7636] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 520.709462][ T4434] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 520.874712][ T7644] loop2: detected capacity change from 0 to 1024 [ 520.904725][ T7644] hfsplus: unable to parse mount options [ 524.300803][ T4434] Bluetooth: hci0: command tx timeout [ 524.360942][ T5143] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -110 [ 524.371488][ T5143] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffff92 [ 524.382367][ T5143] asix 1-1:0.0: probe with driver asix failed with error -110 [ 525.519900][ T7671] loop4: detected capacity change from 0 to 8 [ 525.599045][ T7671] SQUASHFS error: Unable to read inode 0xe3 [ 525.846472][ T7673] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 526.349019][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.356496][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.506392][ T7679] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 526.926809][ T7680] loop2: detected capacity change from 0 to 1024 [ 526.997588][ T7680] hfsplus: unable to parse mount options [ 528.705721][ T7695] loop3: detected capacity change from 0 to 2048 [ 528.723815][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 528.733359][ T7697] nbd: nbd0 already in use [ 528.767290][ T7695] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 532.084862][ T7709] loop2: detected capacity change from 0 to 8 [ 532.152554][ T7709] SQUASHFS error: Unable to read inode 0xe3 [ 532.473964][ T7712] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 533.858531][ T7718] loop2: detected capacity change from 0 to 1024 [ 533.914500][ T7718] hfsplus: unable to parse mount options [ 534.014879][ T7722] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 535.276443][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 535.286243][ T7735] nbd: nbd0 already in use [ 536.274293][ T7744] loop3: detected capacity change from 0 to 8 [ 536.354741][ T7744] SQUASHFS error: Unable to read inode 0xe3 [ 536.750958][ T7746] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 538.595984][ T5168] usb 1-1: USB disconnect, device number 4 [ 538.647457][ T5082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.452804][ T7758] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 541.096425][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 541.107382][ T7778] nbd: nbd0 already in use [ 541.134823][ T7780] loop0: detected capacity change from 0 to 8 [ 541.296409][ T7779] SQUASHFS error: Unable to read inode 0xe3 [ 541.607944][ T7780] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 541.842487][ T8] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 542.279407][ T8] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 542.289092][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.372285][ T8] usb 4-1: config 0 descriptor?? [ 542.776942][ T7787] loop3: detected capacity change from 0 to 1024 [ 542.827622][ T7787] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 542.958742][ T7787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.053238][ T7800] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 543.067677][ T7800] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 543.202550][ T7800] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 543.380075][ T7802] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.3: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 543.391028][ T7801] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 543.740820][ T7805] loop4: detected capacity change from 0 to 512 [ 543.814307][ T7805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.827486][ T7805] ext4 filesystem being mounted at /root/syzkaller-testdir3828843270/syzkaller.xxIKTp/99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.507999][ T7812] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 544.859437][ T5987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.406137][ T7827] loop0: detected capacity change from 0 to 8 [ 546.494518][ T7827] SQUASHFS error: Unable to read inode 0xe3 [ 546.862644][ T7832] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 548.643222][ T8] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -110 [ 548.653737][ T8] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffff92 [ 548.664578][ T8] asix 4-1:0.0: probe with driver asix failed with error -110 [ 548.904718][ T7846] loop4: detected capacity change from 0 to 512 [ 549.099865][ T7846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.113659][ T7846] ext4 filesystem being mounted at /root/syzkaller-testdir3828843270/syzkaller.xxIKTp/103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.620004][ T7859] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 550.045281][ T5987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.404275][ T7871] loop1: detected capacity change from 0 to 8 [ 551.497607][ T7871] SQUASHFS error: Unable to read inode 0xe3 [ 551.653676][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 551.666108][ T7876] nbd: nbd0 already in use [ 551.763300][ T7878] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 553.217325][ T7887] pim6reg1: entered promiscuous mode [ 553.223121][ T7887] pim6reg1: entered allmulticast mode [ 554.299008][ T7896] loop1: detected capacity change from 0 to 512 [ 554.484615][ T7896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.497764][ T7896] ext4 filesystem being mounted at /root/syzkaller-testdir786310141/syzkaller.gJHhM9/141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.542714][ T7903] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 555.400753][ T5093] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.376921][ T7914] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 557.409486][ T7926] loop0: detected capacity change from 0 to 8 [ 557.544076][ T7926] SQUASHFS error: Unable to read inode 0xe3 [ 557.853689][ T7930] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 559.225204][ T7940] loop4: detected capacity change from 0 to 512 [ 559.268342][ T7945] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 559.678132][ T7940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.691382][ T7940] ext4 filesystem being mounted at /root/syzkaller-testdir3828843270/syzkaller.xxIKTp/111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.822963][ T5987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.915276][ T7959] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 561.990028][ T7967] loop0: detected capacity change from 0 to 8 [ 562.128739][ T7967] SQUASHFS error: Unable to read inode 0xe3 [ 562.544413][ T7973] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 563.661557][ T5143] usb 4-1: USB disconnect, device number 3 [ 563.731772][ T5101] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.364808][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 564.425790][ T7815] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 564.696658][ T7997] loop4: detected capacity change from 0 to 512 [ 564.703636][ T7815] usb 1-1: Using ep0 maxpacket: 8 [ 564.831179][ T7815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.838404][ T8003] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 564.842491][ T7815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.862719][ T7815] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 564.875138][ T7815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.926973][ T7815] usb 1-1: config 0 descriptor?? [ 564.956573][ T7997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.972433][ T7997] ext4 filesystem being mounted at /root/syzkaller-testdir3828843270/syzkaller.xxIKTp/116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.506877][ T7815] usbhid 1-1:0.0: can't add hid device: -71 [ 565.513907][ T7815] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 565.586345][ T7815] usb 1-1: USB disconnect, device number 5 [ 565.722981][ T5987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.961897][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 565.972788][ T8017] nbd: nbd0 already in use [ 566.270021][ T8016] fuse: Bad value for 'group_id' [ 566.390467][ T8020] loop4: detected capacity change from 0 to 8 [ 566.440391][ T8020] SQUASHFS error: Unable to read inode 0xe3 [ 566.670696][ T8023] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 567.925805][ T8033] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 568.392483][ T8040] loop1: detected capacity change from 0 to 128 [ 568.479422][ T8042] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 568.542551][ T29] audit: type=1804 audit(1718280323.791:48): pid=8040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir786310141/syzkaller.gJHhM9/151/file2/bus" dev="loop1" ino=1048606 res=1 errno=0 [ 568.570844][ T29] audit: type=1804 audit(1718280323.801:49): pid=8040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir786310141/syzkaller.gJHhM9/151/file2/bus" dev="loop1" ino=1048606 res=1 errno=0 [ 568.929482][ T8046] syz-executor.1: attempt to access beyond end of device [ 568.929482][ T8046] loop1: rw=2049, sector=401, nr_sectors = 640 limit=128 [ 569.055721][ T8048] loop4: detected capacity change from 0 to 512 [ 569.247461][ T8048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.260568][ T8048] ext4 filesystem being mounted at /root/syzkaller-testdir3828843270/syzkaller.xxIKTp/119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.838872][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 569.848833][ T8058] nbd: nbd0 already in use [ 570.062139][ T5987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.542105][ T8064] loop4: detected capacity change from 0 to 8 [ 570.675822][ T8064] SQUASHFS error: Unable to read inode 0xe3 [ 571.031117][ T8071] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 571.601361][ T8075] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 572.543610][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 573.318927][ T8095] loop4: detected capacity change from 0 to 512 [ 573.551050][ T8095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.564481][ T8095] ext4 filesystem being mounted at /root/syzkaller-testdir3828843270/syzkaller.xxIKTp/122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.809571][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 573.820562][ T8108] nbd: nbd0 already in use [ 574.334315][ T5987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.807512][ T8115] loop4: detected capacity change from 0 to 8 [ 574.847503][ T8117] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 574.925412][ T8115] SQUASHFS error: Unable to read inode 0xe3 [ 575.244484][ T8122] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 575.646568][ T8132] fuse: Bad value for 'fd' [ 576.495222][ T8139] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 577.201814][ T8142] tc_dump_action: action bad kind [ 578.185815][ T8160] team0: entered promiscuous mode [ 578.191391][ T8160] team_slave_0: entered promiscuous mode [ 578.198280][ T8160] team_slave_1: entered promiscuous mode [ 578.206810][ T8156] loop4: detected capacity change from 0 to 512 [ 578.267375][ T8160] team0: left promiscuous mode [ 578.272604][ T8160] team_slave_0: left promiscuous mode [ 578.282446][ T8160] team_slave_1: left promiscuous mode [ 578.399369][ T8156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.413558][ T8156] ext4 filesystem being mounted at /root/syzkaller-testdir3828843270/syzkaller.xxIKTp/125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.032992][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 579.185982][ T5987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.811000][ T8182] loop4: detected capacity change from 0 to 8 [ 579.938484][ T8182] SQUASHFS error: Unable to read inode 0xe3 [ 579.977511][ T8185] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 580.201695][ T8191] fuse: Bad value for 'fd' [ 580.359543][ T8189] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 581.548811][ T8205] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.4'. [ 582.576889][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 582.590672][ T8212] nbd: nbd0 already in use [ 582.929303][ T8214] loop0: detected capacity change from 0 to 512 [ 582.999633][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 583.131733][ T8214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.145304][ T8214] ext4 filesystem being mounted at /root/syzkaller-testdir1985622427/syzkaller.PlY6Zp/188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.765252][ T5082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.924654][ T8233] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 584.299524][ T8240] loop0: detected capacity change from 0 to 8 [ 584.391925][ T8240] SQUASHFS error: Unable to read inode 0xe3 [ 584.715777][ T8244] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 585.157034][ T8253] fuse: Bad value for 'fd' [ 585.358016][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 585.368532][ T8256] nbd: nbd0 already in use [ 585.474384][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 586.279682][ T8266] fuse: Bad value for 'group_id' [ 586.319117][ T8265] loop1: detected capacity change from 0 to 512 [ 586.511252][ T8265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.524650][ T8265] ext4 filesystem being mounted at /root/syzkaller-testdir786310141/syzkaller.gJHhM9/171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 587.415155][ T5093] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.763677][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.770873][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 587.879358][ T8286] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 588.146918][ T8290] loop0: detected capacity change from 0 to 8 [ 588.322837][ T8290] SQUASHFS error: Unable to read inode 0xe3 [ 588.681589][ T8294] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 589.149268][ T8299] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 590.199727][ T8313] fuse: Invalid rootmode [ 590.547049][ T8315] loop4: detected capacity change from 0 to 512 [ 590.703645][ T8315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.717659][ T8315] ext4 filesystem being mounted at /root/syzkaller-testdir3828843270/syzkaller.xxIKTp/134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.692321][ T5987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.527530][ T8336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 592.548452][ T8335] loop3: detected capacity change from 0 to 8 [ 592.661080][ T8335] SQUASHFS error: Unable to read inode 0xe3 [ 593.022932][ T8335] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 594.011948][ T8349] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 594.088136][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 594.098982][ T8347] nbd: nbd0 already in use [ 595.118366][ T8362] loop1: detected capacity change from 0 to 512 [ 595.349001][ T8362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.362479][ T8362] ext4 filesystem being mounted at /root/syzkaller-testdir786310141/syzkaller.gJHhM9/180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.506183][ T8370] fuse: Invalid rootmode [ 596.032550][ T5093] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.206547][ T8375] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 597.458217][ T8382] loop3: detected capacity change from 0 to 8 [ 597.558435][ T8382] SQUASHFS error: Unable to read inode 0xe3 [ 597.921498][ T8389] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 597.993602][ T8386] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 598.768739][ T4434] Bluetooth: hci3: unexpected event for opcode 0x070c [ 599.002043][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 599.011768][ T8398] nbd: nbd0 already in use [ 599.350607][ T8401] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 600.185309][ T8408] loop0: detected capacity change from 0 to 512 [ 600.195537][ T8413] fuse: Invalid rootmode [ 600.251102][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 600.336231][ T8408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.349508][ T8408] ext4 filesystem being mounted at /root/syzkaller-testdir1985622427/syzkaller.PlY6Zp/202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.982561][ T5082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.102585][ T8431] loop1: detected capacity change from 0 to 8 [ 602.237780][ T8431] SQUASHFS error: Unable to read inode 0xe3 [ 602.541712][ T8436] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 602.784202][ T4434] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 602.792993][ T4434] Bluetooth: hci3: Injecting HCI hardware error event [ 602.801475][ T5084] Bluetooth: hci3: hardware error 0x00 [ 603.151060][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 603.160643][ T8444] nbd: nbd0 already in use [ 603.644087][ T8446] loop2: detected capacity change from 0 to 4096 [ 603.764700][ T8451] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 603.942879][ T29] audit: type=1804 audit(1718280359.241:50): pid=8453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir905776816/syzkaller.yuwFFf/158/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 604.169170][ T8455] loop0: detected capacity change from 0 to 512 [ 604.402281][ T8455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.415677][ T8455] ext4 filesystem being mounted at /root/syzkaller-testdir1985622427/syzkaller.PlY6Zp/206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 604.518075][ T8465] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 604.860688][ T5084] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 605.372754][ T5082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.688880][ T8478] loop4: detected capacity change from 0 to 1024 [ 605.813116][ T8478] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 605.824152][ T8478] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 605.908619][ T8478] EXT4-fs (loop4): invalid journal inode [ 605.914799][ T8478] EXT4-fs (loop4): can't get journal size [ 605.972337][ T8478] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz-executor.4: blocks 48-48 from inode overlap system zone [ 606.007748][ T8478] EXT4-fs (loop4): failed to initialize system zone (-117) [ 606.151778][ T8478] EXT4-fs (loop4): mount failed [ 606.376367][ T8486] fuse: Bad value for 'group_id' [ 606.411038][ T8489] loop3: detected capacity change from 0 to 8 [ 606.531513][ T8489] SQUASHFS error: Unable to read inode 0xe3 [ 606.821572][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 606.831268][ T8496] nbd: nbd0 already in use [ 606.906191][ T8490] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 609.244675][ T8517] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 609.333808][ T8514] loop3: detected capacity change from 0 to 512 [ 609.454639][ T8514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.467950][ T8514] ext4 filesystem being mounted at /root/syzkaller-testdir3769509632/syzkaller.6JiesB/203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.194501][ T5101] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.139568][ T8537] loop3: detected capacity change from 0 to 8 [ 612.158639][ T8535] loop1: detected capacity change from 0 to 512 [ 612.198149][ T8535] EXT4-fs: Ignoring removed nobh option [ 612.243216][ T8537] SQUASHFS error: Unable to read inode 0xe3 [ 612.321320][ T8535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.334743][ T8535] ext4 filesystem being mounted at /root/syzkaller-testdir786310141/syzkaller.gJHhM9/193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.466044][ T29] audit: type=1326 audit(1718280367.791:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ea579 code=0x0 [ 612.681906][ T8537] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 613.891680][ T5093] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.357481][ T8565] loop1: detected capacity change from 0 to 64 [ 617.518515][ T8565] ===================================================== [ 617.525961][ T8565] BUG: KMSAN: uninit-value in hfs_revalidate_dentry+0x30b/0x3f0 [ 617.533998][ T8565] hfs_revalidate_dentry+0x30b/0x3f0 [ 617.539570][ T8565] lookup_fast+0x418/0x8e0 [ 617.544383][ T8565] path_openat+0x950/0x5b00 [ 617.549082][ T8565] do_filp_open+0x20e/0x590 [ 617.553908][ T8565] do_sys_openat2+0x1bf/0x2f0 [ 617.558770][ T8565] __ia32_compat_sys_openat+0x298/0x300 2024/06/13 12:06:12 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 617.564621][ T8565] ia32_sys_call+0x38e1/0x40a0 [ 617.569713][ T8565] __do_fast_syscall_32+0xb4/0x120 [ 617.575797][ T8565] do_fast_syscall_32+0x38/0x80 [ 617.581493][ T8565] do_SYSENTER_32+0x1f/0x30 [ 617.586210][ T8565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 617.592902][ T8565] [ 617.595317][ T8565] Uninit was created at: [ 617.599778][ T8565] __alloc_pages+0x9d6/0xe70 [ 617.606908][ T8565] new_slab+0x2de/0x1400 [ 617.611723][ T8565] ___slab_alloc+0x121d/0x34a0 [ 617.616784][ T8565] kmem_cache_alloc_lru+0x6da/0xc20 [ 617.622297][ T8565] hfs_alloc_inode+0x5a/0xd0 [ 617.627170][ T8565] alloc_inode+0x86/0x460 [ 617.634009][ T8565] iget_locked+0x2bf/0xee0 [ 617.638884][ T8565] hfs_btree_open+0x16c/0x1aa0 [ 617.643924][ T8565] hfs_mdb_get+0x1fe2/0x28b0 [ 617.648703][ T8565] hfs_fill_super+0x1cf6/0x23c0 [ 617.653958][ T8565] mount_bdev+0x397/0x520 [ 617.658486][ T8565] hfs_mount+0x4d/0x60 [ 617.664903][ T8565] legacy_get_tree+0x114/0x290 [ 617.669868][ T8565] vfs_get_tree+0xa7/0x570 [ 617.674958][ T8565] do_new_mount+0x71f/0x15e0 [ 617.680402][ T8565] path_mount+0x742/0x1f20 [ 617.686663][ T8565] __se_sys_mount+0x725/0x810 [ 617.691687][ T8565] __ia32_sys_mount+0xe3/0x150 [ 617.696657][ T8565] ia32_sys_call+0x3a9a/0x40a0 [ 617.701734][ T8565] __do_fast_syscall_32+0xb4/0x120 [ 617.709172][ T8565] do_fast_syscall_32+0x38/0x80 [ 617.714640][ T8565] do_SYSENTER_32+0x1f/0x30 [ 617.719352][ T8565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 617.726481][ T8565] [ 617.728916][ T8565] CPU: 1 PID: 8565 Comm: syz-executor.1 Not tainted 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 617.739214][ T8565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 617.749597][ T8565] ===================================================== [ 617.757151][ T8565] Disabling lock debugging due to kernel taint [ 617.763515][ T8565] Kernel panic - not syncing: kmsan.panic set ... [ 617.770056][ T8565] CPU: 1 PID: 8565 Comm: syz-executor.1 Tainted: G B 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 617.782140][ T8565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 617.792361][ T8565] Call Trace: [ 617.795758][ T8565] [ 617.798790][ T8565] dump_stack_lvl+0x216/0x2d0 [ 617.803685][ T8565] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 617.809693][ T8565] dump_stack+0x1e/0x30 [ 617.814055][ T8565] panic+0x4e2/0xcd0 [ 617.818177][ T8565] ? kmsan_get_metadata+0xf1/0x1d0 [ 617.823495][ T8565] kmsan_report+0x2d5/0x2e0 [ 617.828186][ T8565] ? kmsan_get_metadata+0x146/0x1d0 [ 617.833576][ T8565] ? kmsan_get_metadata+0x146/0x1d0 [ 617.838965][ T8565] ? __msan_warning+0x95/0x120 [ 617.843908][ T8565] ? hfs_revalidate_dentry+0x30b/0x3f0 [ 617.849586][ T8565] ? lookup_fast+0x418/0x8e0 [ 617.854361][ T8565] ? path_openat+0x950/0x5b00 [ 617.859237][ T8565] ? do_filp_open+0x20e/0x590 [ 617.864116][ T8565] ? do_sys_openat2+0x1bf/0x2f0 [ 617.869162][ T8565] ? __ia32_compat_sys_openat+0x298/0x300 [ 617.875096][ T8565] ? ia32_sys_call+0x38e1/0x40a0 [ 617.880257][ T8565] ? __do_fast_syscall_32+0xb4/0x120 [ 617.885758][ T8565] ? do_fast_syscall_32+0x38/0x80 [ 617.890997][ T8565] ? do_SYSENTER_32+0x1f/0x30 [ 617.895879][ T8565] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 617.902702][ T8565] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 617.908722][ T8565] ? kmsan_get_metadata+0x146/0x1d0 [ 617.914124][ T8565] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 617.920229][ T8565] ? __d_lookup_rcu_op_compare+0x673/0x6f0 [ 617.926264][ T8565] ? kmsan_get_metadata+0x146/0x1d0 [ 617.931648][ T8565] ? kmsan_get_metadata+0x146/0x1d0 [ 617.937048][ T8565] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 617.943543][ T8565] ? kmsan_get_metadata+0x146/0x1d0 [ 617.948938][ T8565] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 617.954958][ T8565] ? kmsan_get_metadata+0x146/0x1d0 [ 617.960360][ T8565] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 617.966375][ T8565] __msan_warning+0x95/0x120 [ 617.971150][ T8565] hfs_revalidate_dentry+0x30b/0x3f0 [ 617.976673][ T8565] ? __pfx_hfs_revalidate_dentry+0x10/0x10 [ 617.982704][ T8565] lookup_fast+0x418/0x8e0 [ 617.987318][ T8565] path_openat+0x950/0x5b00 [ 617.992029][ T8565] ? kmsan_get_metadata+0x146/0x1d0 [ 617.997416][ T8565] ? do_filp_open+0x4b/0x590 [ 618.002231][ T8565] ? stack_depot_save_flags+0x2c/0x6e0 [ 618.007895][ T8565] do_filp_open+0x20e/0x590 [ 618.012651][ T8565] do_sys_openat2+0x1bf/0x2f0 [ 618.017533][ T8565] __ia32_compat_sys_openat+0x298/0x300 [ 618.023298][ T8565] ia32_sys_call+0x38e1/0x40a0 [ 618.028353][ T8565] __do_fast_syscall_32+0xb4/0x120 [ 618.033681][ T8565] ? irqentry_exit+0x16/0x60 [ 618.038459][ T8565] do_fast_syscall_32+0x38/0x80 [ 618.043509][ T8565] do_SYSENTER_32+0x1f/0x30 [ 618.048201][ T8565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 618.054750][ T8565] RIP: 0023:0xf73ea579 [ 618.058939][ T8565] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 618.078814][ T8565] RSP: 002b:00000000f5e735ac EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 618.087391][ T8565] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000080 [ 618.095499][ T8565] RDX: 0000000000007a05 RSI: 0000000000001700 RDI: 0000000000000000 [ 618.103599][ T8565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 618.111686][ T8565] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 618.119783][ T8565] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 618.128160][ T8565] [ 618.131505][ T8565] Kernel Offset: disabled [ 618.135892][ T8565] Rebooting in 86400 seconds..