last executing test programs: 15.564692421s ago: executing program 1 (id=1217): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x8802, &(0x7f00000003c0)=ANY=[@ANYBLOB="006e4eaeb9edca22f95f846301960db1cb584c83f283b3ee7f1bd0b565db853c1a030000005d05d699987f4560a7ad99272e7621e4c56e1f59358eae67b6e150103c72651be2f2c2d277f7abf3d0d79f651b41a7bb37b984556bb3ef971fb85e966ea740ff250ba5716f845bdd29aff6568eb2272ac5cca97636a16010201341d780fcb05a2e305cc7a77a451596eb6c96e75584bdbb27a8368f95a350c25502ec"], 0x1, 0x1534, &(0x7f0000002d00)="$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") socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)={0x14, r4, 0xf09, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x20008004) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x40000) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x2f) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r6, &(0x7f0000000040)="050000000100", 0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x1c}}, 0x800) 15.528044501s ago: executing program 3 (id=1221): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1010}, 0x0, 0xe3d08660d3cd4684}) r4 = io_uring_setup(0x669, &(0x7f00000002c0)) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000100)=0xa7, 0xc0000) sendmmsg$inet(r9, &(0x7f0000001540), 0x0, 0x0) close(r8) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfffffff9}]}}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 14.092562224s ago: executing program 2 (id=1222): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004200ff9d7275c600fedbdf250500000008000200050000f3"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) 13.7258868s ago: executing program 3 (id=1224): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x8044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2024) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002280)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xef9, 0x0, 0xfffffffd}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a}, 0x20) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000022c0)="c2d66fd9b34273237a178f249c3aa21fd5d325f2bdc7149a9c89760724c099d9b86d23faf340c4996f76c882396db23d645c80eab1b2967327f5b0c76ca510b265333bcd0ce0007205bca6f7ab9219949e2b46be86c0d199075272dac08d1114f0b421504dc7129ebb2fcb58d7d0e272e7c8aff10d9e82e0c5f8e7a92f140f5e5fb5651198cb56916db4c259f8981fac2faf2d72329d7246d7c658b1852e4340e2cf212f58a6f34e210e3318ff75124942516a16ab64013b1aae724fbe723a03ce80e5bc8f4610ecb853e39632a4c0619641aaa01eeff4", 0xd7) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x64, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}]}, 0x64}}, 0x20000000) 13.554653203s ago: executing program 0 (id=1225): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) poll(&(0x7f00000000c0)=[{r6, 0x4000}], 0x1, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}}, 0x0) 11.422962327s ago: executing program 1 (id=1226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) poll(&(0x7f00000000c0)=[{r6, 0x4000}], 0x1, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}}, 0x0) 11.158937321s ago: executing program 2 (id=1227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000001c0)='encrypted\x00', 0x0, &(0x7f0000000180), 0x0, 0xfffffffffffffffd) pread64(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x7fff) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="0000000003120100500012800b00010062"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(r4, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000a80)={0x7fff, 0xd, 0x3, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337", 0x35323645}) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r6, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xa7, 0xc, 0xaf, 0x40, 0x742, 0x2009, 0x9f2b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x0, 0x2, 0x46, 0xf4, 0x2b, 0x0, [], [{{0x9, 0x5, 0xb, 0x10, 0x400, 0x4, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x8, 0x18, 0x1}}]}}]}}]}}, 0x0) 11.158421001s ago: executing program 3 (id=1228): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1cc, &(0x7f00000001c0)="$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") syz_open_dev$usbfs(0x0, 0x76, 0x109301) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) open(0x0, 0x0, 0x28) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r2, 0xffffffffffffffff, 0x7, 0x0, @val=@kprobe_multi=@syms={0x1, 0x1, &(0x7f0000000280)=[0x0], 0x0, 0x800}}, 0x30) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x200040, 0x4) syz_open_dev$loop(0x0, 0x100, 0x70400) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b, 0x1b, 0x5, [@datasec={0x6, 0x0, 0x0, 0xf, 0x3, [], "8f54b7"}, @typedef={0x2, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x5f, 0x0, 0x61]}}, 0x0, 0x39}, 0x28) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, 0x0, 0x0) 9.085488384s ago: executing program 4 (id=1229): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) futex(0x0, 0x0, 0x2, &(0x7f0000000080)={0x77359400}, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x800}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180), 0x4) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2e, 0x0, 0x21, 0x4800}, 0x4000880) ioctl$TCSETA(r3, 0x5406, &(0x7f00000001c0)={0x7d8, 0x6, 0x1, 0x2, 0x8e, "25a2581fffffef00"}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x6, @none, 0xff, 0x1}, 0xe) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="04222e0300000000000080000cd5195cf448eaefcdcdc2f761fc2f058ec0de10346b6ab1000006ffffffffffff08007fe0bc57faff0284b2e50607514ba65239f7cee7ee09524109a9689f712ee2c89501f94f8be01efc6e4b26260a5bfd707cf134a6a1debbe331ac472a611fb58be0806a671e7162e2131df60744227ff1535b300860c97fe410d0f40a254946090840ea7040c893ac653c6249edd48c3b16cae725b8b3e8795a222c8fed"], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x0, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getpeername$llc(r9, 0x0, 0x0) 8.498682394s ago: executing program 4 (id=1230): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f00000001c0)=ANY=[], 0xf, 0xad, &(0x7f0000000380)="$eJzs1zFKA0EYBeDnCrKtjQgW1tt4B49irY1YaWNygdwkV8k9UqRIG0ImZHaXkDbNQvi+4u2+nxn421ntli9tl5T/pHTP3+ty9vP79/nx1We4SU2SuyRtktfHvm/e66fOm5pJtvcX92aneFhMsTIAAHClJm/j77z2QxkG++EVWMvTeKidYEcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAKR0DAAD///ziJXU=") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000002900)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x1, 0x40800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x6b912e513dbcb127}, 0x4000) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) r6 = dup(0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000000)={0x6, 0x0, 0x8, 0x7fffffff}, 0x10) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20040080) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000340), 0x4) 8.482537804s ago: executing program 3 (id=1231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) connect$inet(r6, 0x0, 0x0) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) connect$unix(r4, 0x0, 0x0) 8.391991806s ago: executing program 1 (id=1232): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) poll(&(0x7f00000000c0)=[{r6, 0x4000}], 0x1, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}}, 0x0) 8.373778976s ago: executing program 0 (id=1233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r9], 0x18}, 0x8810) sendmsg$unix(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000000000000010000000100", @ANYRES32=r9], 0x18}, 0x0) close(r9) close(0xffffffffffffffff) 6.954991878s ago: executing program 2 (id=1234): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000007000000181200", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x3ef, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) 6.947057399s ago: executing program 4 (id=1235): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0xb7f, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fallocate(r0, 0xa, 0x44, 0x3e8a) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r4 = fanotify_init(0xf00, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_raw(r5, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f00000005c0)={0x0}}, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r6, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ife={0x74, 0x1, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_METALST={0x4}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 6.739979722s ago: executing program 0 (id=1236): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1836000004001800000000000000000010a32000080000004db18000010000002fb93000ffffffff02f309000800000018450000faffffff0000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4b, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) io_uring_setup(0x773d, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r4, 0x4) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x6, 0x0, 0x5, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6.726683303s ago: executing program 1 (id=1237): socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @random="00005403cb00", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03136c", 0x8, 0x87, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@routing={0x1d, 0x0, 0x1, 0x6}]}}}}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) readv(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x48) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r3, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e1f, 0x0, @loopback}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x48) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x0, 0x8001, 0x1}}, 0x44) 4.506631018s ago: executing program 2 (id=1238): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004200ff9d7275c600fedbdf250500000008000200050000f3"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) 4.460035939s ago: executing program 4 (id=1239): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) listen(r5, 0x0) syz_open_dev$video(0x0, 0xc000, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x274100) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x600000) ioctl$SIOCAX25CTLCON(r7, 0x89e8, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x5, 0x5, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$inet(0x2, 0x4, 0x729a742e) write$P9_RSTATu(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x801) unshare(0x22020400) 4.019258166s ago: executing program 0 (id=1240): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r1, r1, 0x2, r4, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.456453545s ago: executing program 3 (id=1241): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1cc, &(0x7f00000001c0)="$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") syz_open_dev$usbfs(0x0, 0x76, 0x109301) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) open(0x0, 0x0, 0x28) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r2, 0xffffffffffffffff, 0x7, 0x0, @val=@kprobe_multi=@syms={0x1, 0x1, &(0x7f0000000280)=[0x0], 0x0, 0x800}}, 0x30) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x200040, 0x4) syz_open_dev$loop(0x0, 0x100, 0x70400) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b, 0x1b, 0x5, [@datasec={0x6, 0x0, 0x0, 0xf, 0x3, [], "8f54b7"}, @typedef={0x2, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x5f, 0x0, 0x61]}}, 0x0, 0x39}, 0x28) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, 0x0, 0x0) 2.570779199s ago: executing program 4 (id=1242): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) poll(&(0x7f00000000c0)=[{r6, 0x4000}], 0x1, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}}, 0x0) 2.460014681s ago: executing program 1 (id=1243): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) poll(&(0x7f00000000c0)=[{r6, 0x4000}], 0x1, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}}, 0x0) 2.296487834s ago: executing program 0 (id=1244): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) poll(&(0x7f00000000c0)=[{r7, 0x4000}], 0x1, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}}, 0x0) 2.292253764s ago: executing program 2 (id=1254): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x400, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000006c0)={{&(0x7f00009d6000/0x3000)=nil, 0x3000}, 0x4}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) read$FUSE(r6, &(0x7f0000005180)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 187.167297ms ago: executing program 0 (id=1245): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000001c0)='encrypted\x00', 0x0, &(0x7f0000000180), 0x0, 0xfffffffffffffffd) pread64(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x7fff) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="0000000003120100500012800b00010062"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(r4, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000a80)={0x7fff, 0xd, 0x3, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337", 0x35323645}) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r6, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xa7, 0xc, 0xaf, 0x40, 0x742, 0x2009, 0x9f2b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x0, 0x2, 0x46, 0xf4, 0x2b, 0x0, [], [{{0x9, 0x5, 0xb, 0x10, 0x400, 0x4, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x8, 0x18, 0x1}}]}}]}}]}}, 0x0) 186.815508ms ago: executing program 2 (id=1246): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) poll(&(0x7f00000000c0)=[{r7, 0x4000}], 0x1, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}}, 0x0) 159.605198ms ago: executing program 1 (id=1247): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x4, 0x3, 0x0, [0x0, 0x18000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, 0x0, 0x0) unlink(&(0x7f00000002c0)='./file0\x00') 158.930498ms ago: executing program 3 (id=1248): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004200ff9d7275c600fedbdf250500000008000200050000f3"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) 0s ago: executing program 4 (id=1249): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) poll(&(0x7f00000000c0)=[{r7, 0x4000}], 0x1, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): ded to keep mac addresses unique to avoid problems! [ 65.397848][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.408500][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.418441][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.429319][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.443372][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.458221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.485116][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.665006][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.680001][ T4263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.689358][ T4263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.698680][ T4263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.859351][ T4263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.869153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 65.877539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!! [ 65.885870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!! [ 66.103737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.112037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.120343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.128632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 66.136914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 66.145199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 66.543095][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 66.549160][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 66.555286][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 66.561325][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 66.567557][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 66.896324][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.486123][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.591382][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.667955][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.676102][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.695742][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.712160][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.722032][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.729582][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.730483][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.761138][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.782334][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.059907][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.358341][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.369651][ T4403] process 'syz.1.2' launched '/dev/fd/5' with NULL argv: empty string added [ 69.382843][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.408608][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.439520][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.461045][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.684767][ T4408] loop0: detected capacity change from 0 to 8 [ 70.707430][ T4418] loop1: detected capacity change from 0 to 2048 [ 70.717398][ T4418] UDF-fs: bad mount option "18446744073709551615" or missing value [ 71.371454][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.378125][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.907097][ T4255] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.093563][ T4424] loop3: detected capacity change from 0 to 16 [ 72.105679][ T4422] loop2: detected capacity change from 0 to 1024 [ 72.131888][ T4424] erofs: (device loop3): mounted with root inode @ nid 36. [ 72.194422][ T4424] syz.3.10: attempt to access beyond end of device [ 72.194422][ T4424] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 72.557766][ T4432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 76.697425][ T1169] cfg80211: failed to load regulatory.db [ 77.122071][ T4459] input: syz0 as /devices/virtual/input/input5 [ 77.265884][ T4461] loop4: detected capacity change from 0 to 128 [ 78.419000][ T4464] sched: RT throttling activated [ 78.951701][ T4469] loop3: detected capacity change from 0 to 131072 [ 79.489993][ T4469] F2FS-fs (loop3): Unrecognized mount option "(tcAq7TMo" or missing value [ 80.544364][ T4429] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 86.145396][ T4518] CUSE: unknown device info "" [ 86.145413][ T4518] CUSE: zero length info key specified [ 87.768113][ T4526] IPv6: Can't replace route, no match found [ 88.983905][ T4281] Bluetooth: hci5: command 0x1003 tx timeout [ 88.991243][ T4268] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 90.561202][ T4544] loop4: detected capacity change from 0 to 64 [ 90.569574][ T4544] hfs: type requires a 4 character value [ 90.575606][ T4544] hfs: unable to parse mount options [ 90.588362][ T4543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.597038][ T4543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.608954][ T4543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.616716][ T4543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.785158][ T4542] loop4: detected capacity change from 0 to 64 [ 92.358830][ T4559] loop4: detected capacity change from 0 to 164 [ 92.385666][ T26] audit: type=1326 audit(1753210844.204:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 92.660436][ T26] audit: type=1326 audit(1753210844.234:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 92.699586][ T26] audit: type=1326 audit(1753210844.244:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 92.721766][ T26] audit: type=1326 audit(1753210844.514:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 92.743949][ T26] audit: type=1326 audit(1753210844.514:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 92.781522][ T26] audit: type=1326 audit(1753210844.594:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 93.042389][ T4557] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 93.498925][ T4566] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 93.508033][ T4566] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 93.524221][ T26] audit: type=1326 audit(1753210844.624:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 94.228215][ T26] audit: type=1326 audit(1753210844.624:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 94.258180][ T4576] Bluetooth: MGMT ver 1.22 [ 94.411554][ T26] audit: type=1326 audit(1753210844.624:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b2218d310 code=0x7ffc0000 [ 94.520736][ T26] audit: type=1326 audit(1753210844.624:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 94.677936][ T4580] loop0: detected capacity change from 0 to 32768 [ 95.086051][ T4584] loop4: detected capacity change from 0 to 2048 [ 95.107120][ T4580] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.44 (4580) [ 95.142125][ T4580] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.152599][ T4580] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 95.161371][ T4580] BTRFS info (device loop0): using free space tree [ 95.174627][ T4584] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.469245][ T4584] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 95.506849][ T4600] loop3: detected capacity change from 0 to 40427 [ 95.517156][ T4584] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.537393][ T4600] F2FS-fs (loop3): invalid crc value [ 95.768325][ T4600] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.493748][ T4620] mkiss: ax0: crc mode is auto. [ 96.522086][ T4614] loop2: detected capacity change from 0 to 256 [ 96.529763][ T4614] ======================================================= [ 96.529763][ T4614] WARNING: The mand mount option has been deprecated and [ 96.529763][ T4614] and is ignored by this kernel. Remove the mand [ 96.529763][ T4614] option from the mount to silence this warning. [ 96.529763][ T4614] ======================================================= [ 97.499666][ T4600] F2FS-fs (loop3): Start checkpoint disabled! [ 97.714948][ T4600] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 98.136562][ T4580] BTRFS error (device loop0): open_ctree failed: -12 [ 100.235698][ T4605] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 100.302151][ T4255] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4255) [ 100.500338][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 101.763959][ T4662] loop2: detected capacity change from 0 to 4096 [ 101.826751][ T4342] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.904828][ T4662] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4558: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 101.918289][ T4662] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 102.062025][ T34] kworker/u4:2: attempt to access beyond end of device [ 102.062025][ T34] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 102.083085][ T4342] usb 2-1: Using ep0 maxpacket: 16 [ 102.132861][ T4659] kworker/u4:16: attempt to access beyond end of device [ 102.132861][ T4659] loop3: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 102.171364][ T4342] usb 2-1: config 0 has an invalid interface number: 194 but max is 0 [ 102.223044][ T4342] usb 2-1: config 0 has no interface number 0 [ 102.231735][ T4342] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 102.259705][ T4342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.291496][ T4342] usb 2-1: Product: syz [ 102.311732][ T4342] usb 2-1: Manufacturer: syz [ 102.324866][ T4283] udevd[4283]: incorrect ext4 checksum on /dev/loop2 [ 102.396461][ T4342] usb 2-1: SerialNumber: syz [ 102.422261][ T4667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.54'. [ 102.434898][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 102.435311][ T26] audit: type=1800 audit(1753210854.194:28): pid=4667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.54" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 103.034364][ T4342] usb 2-1: config 0 descriptor?? [ 103.067831][ T4342] cypress_cy7c63 2-1:0.194: Cypress CY7C63xxx device now attached [ 103.466815][ T4342] usb 2-1: USB disconnect, device number 2 [ 103.879778][ T4342] cypress_cy7c63 2-1:0.194: Cypress CY7C63xxx device now disconnected [ 104.785214][ T4686] 9pnet_fd: p9_fd_create_tcp (4686): problem connecting socket to 127.0.0.1 [ 105.494372][ T4688] lo speed is unknown, defaulting to 1000 [ 105.500422][ T4688] lo speed is unknown, defaulting to 1000 [ 105.509425][ T4688] lo speed is unknown, defaulting to 1000 [ 105.519698][ T4688] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.532522][ T4688] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 105.726663][ T4688] lo speed is unknown, defaulting to 1000 [ 105.733816][ T4688] lo speed is unknown, defaulting to 1000 [ 105.740028][ T4688] lo speed is unknown, defaulting to 1000 [ 105.746275][ T4688] lo speed is unknown, defaulting to 1000 [ 105.752603][ T4688] lo speed is unknown, defaulting to 1000 [ 106.458753][ T4695] loop0: detected capacity change from 0 to 128 [ 106.508889][ T4677] block device autoloading is deprecated and will be removed. [ 107.146607][ T4702] xt_l2tp: v2 doesn't support IP mode [ 108.949246][ T4717] ptrace attach of "./syz-executor exec"[4723] was attempted by "./syz-executor exec"[4717] [ 108.959699][ T4718] loop0: detected capacity change from 0 to 2048 [ 108.969220][ T4717] loop1: detected capacity change from 0 to 1024 [ 109.029816][ T4718] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 109.500146][ T4726] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.076224][ T4731] Zero length message leads to an empty skb [ 110.121854][ T4731] loop3: detected capacity change from 0 to 1024 [ 111.512336][ T4731] mkiss: ax0: crc mode is auto. [ 113.027320][ T4742] loop1: detected capacity change from 0 to 8 [ 113.036847][ T4742] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 114.494580][ T4255] udevd[4255]: incorrect cramfs checksum on /dev/loop1 [ 114.773970][ T4752] loop4: detected capacity change from 0 to 1024 [ 115.005215][ T4738] cramfs: Error -3 while decompressing! [ 115.010979][ T4738] cramfs: ffffffff96d711c2(26)->ffff888072199000(4096) [ 115.017967][ T4738] cramfs: Error -3 while decompressing! [ 115.023594][ T4738] cramfs: ffffffff96d711dc(16)->ffff888072182000(4096) [ 115.030546][ T4738] cramfs: Error -3 while decompressing! [ 115.036254][ T4738] cramfs: ffffffff96d711c2(26)->ffff888072199000(4096) [ 115.045284][ T26] audit: type=1800 audit(1753210866.864:29): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.72" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 115.089411][ T4419] hfsplus: b-tree write err: -5, ino 4 [ 115.252750][ T4255] udevd[4255]: incorrect cramfs checksum on /dev/loop1 [ 115.423154][ T4759] device bridge1 entered promiscuous mode [ 115.451756][ T4759] team0: Port device bridge1 added [ 115.988049][ T4738] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.036851][ T4255] udevd[4255]: incorrect cramfs checksum on /dev/loop1 [ 118.212000][ T4774] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 119.737411][ T4784] loop0: detected capacity change from 0 to 512 [ 121.260936][ T4784] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 121.270214][ T4784] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.204814][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 122.553288][ T34] hfsplus: b-tree write err: -5, ino 4 [ 123.115854][ T41] libceph: connect (1)[c::]:6789 error -101 [ 123.122460][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 123.219526][ T4811] 9pnet_fd: Insufficient options for proto=fd [ 124.136120][ T4809] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 124.143034][ T4809] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.151587][ T4809] vhci_hcd vhci_hcd.0: Device attached [ 124.160007][ T4810] vhci_hcd: connection closed [ 124.162522][ T4801] vhci_hcd: stop threads [ 124.643391][ T4794] ceph: No mds server is up or the cluster is laggy [ 124.839355][ T41] libceph: connect (1)[c::]:6789 error -101 [ 124.967152][ T4801] vhci_hcd: release socket [ 124.971633][ T4801] vhci_hcd: disconnect device [ 124.983069][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 125.339202][ T4819] loop2: detected capacity change from 0 to 512 [ 126.217284][ T4819] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.90: casefold flag without casefold feature [ 126.266188][ T4835] loop4: detected capacity change from 0 to 8 [ 126.294178][ T4835] SQUASHFS error: Failed to read block 0x4de: -5 [ 126.301616][ T4835] SQUASHFS error: Failed to read block 0x4de: -5 [ 126.317693][ T4835] SQUASHFS error: Failed to read block 0x4de: -5 [ 126.325015][ T4835] SQUASHFS error: Failed to read block 0x4de: -5 [ 126.331767][ T4835] SQUASHFS error: Failed to read block 0x4de: -5 [ 126.339050][ T4835] SQUASHFS error: Failed to read block 0x4de: -5 [ 126.393013][ T26] audit: type=1800 audit(1753210878.124:30): pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.89" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 126.412914][ T4819] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.90: couldn't read orphan inode 15 (err -117) [ 126.486696][ T4832] loop1: detected capacity change from 0 to 40427 [ 126.601421][ T4838] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 126.645051][ T4819] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.656386][ T4832] F2FS-fs (loop1): invalid crc value [ 126.715840][ T4836] loop0: detected capacity change from 0 to 2048 [ 126.902919][ T4836] Alternate GPT is invalid, using primary GPT. [ 126.909706][ T4836] loop0: p1 p2 p3 [ 126.941227][ T4832] F2FS-fs (loop1): Found nat_bits in checkpoint [ 127.016327][ T4832] F2FS-fs (loop1): Start checkpoint disabled! [ 127.110417][ T4832] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 128.862203][ T4840] kworker/u4:19: attempt to access beyond end of device [ 128.862203][ T4840] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 128.893327][ T4850] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 128.967913][ T4840] kworker/u4:19: attempt to access beyond end of device [ 128.967913][ T4840] loop1: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 129.056121][ T4819] kvm [4818]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 129.152203][ T4255] udevd[4255]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 129.152607][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 129.163733][ T4818] EXT4-fs (loop2): unmounting filesystem. [ 129.200615][ T4631] udevd[4631]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 129.268069][ T4819] kvm [4818]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 130.478934][ T4866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.97'. [ 131.337099][ T4871] loop0: detected capacity change from 0 to 2048 [ 131.444509][ T4871] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.700198][ T4873] loop3: detected capacity change from 0 to 40427 [ 131.770482][ T4873] F2FS-fs (loop3): invalid crc value [ 131.782396][ T4873] F2FS-fs (loop3): Found nat_bits in checkpoint [ 131.807575][ T4873] F2FS-fs (loop3): Start checkpoint disabled! [ 131.823268][ T4873] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 131.896651][ T26] audit: type=1800 audit(1753210883.714:31): pid=4863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.100" name="bus" dev="loop0" ino=1371 res=0 errno=0 [ 133.334699][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.341037][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.675227][ T4889] netlink: 28 bytes leftover after parsing attributes in process `syz.2.106'. [ 134.516918][ T34] kworker/u4:2: attempt to access beyond end of device [ 134.516918][ T34] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 134.635870][ T34] kworker/u4:2: attempt to access beyond end of device [ 134.635870][ T34] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 135.134571][ T4898] loop4: detected capacity change from 0 to 2048 [ 135.538065][ T4896] device bridge1 entered promiscuous mode [ 135.551634][ T4896] team0: Port device bridge1 added [ 135.725963][ T4898] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.889734][ T26] audit: type=1800 audit(1753210887.704:32): pid=4903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.108" name="bus" dev="loop4" ino=1371 res=0 errno=0 [ 135.904585][ T4902] loop1: detected capacity change from 0 to 2048 [ 136.101273][ T4902] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.398126][ T4902] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 136.424481][ T4902] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.174803][ T4919] mkiss: ax0: crc mode is auto. [ 139.691961][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 140.512623][ T4935] loop3: detected capacity change from 0 to 2048 [ 140.519972][ T26] audit: type=1326 audit(1753210892.334:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4938 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf78e9a9 code=0x7ffc0000 [ 140.605760][ T26] audit: type=1326 audit(1753210892.364:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4938 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf78e9a9 code=0x7ffc0000 [ 140.608338][ T4941] loop0: detected capacity change from 0 to 2048 [ 140.656645][ T4935] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.709765][ T26] audit: type=1326 audit(1753210892.364:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4938 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f18cf78e9a9 code=0x7ffc0000 [ 140.750710][ T4941] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.774798][ T26] audit: type=1326 audit(1753210892.364:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4938 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf78e9a9 code=0x7ffc0000 [ 140.920933][ T26] audit: type=1326 audit(1753210892.364:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4938 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f18cf78e9a9 code=0x7ffc0000 [ 141.159844][ T4948] loop3: detected capacity change from 0 to 2048 [ 141.964647][ T4950] loop1: detected capacity change from 0 to 8 [ 142.076675][ T4950] SQUASHFS error: Failed to read block 0x4de: -5 [ 142.083816][ T4950] SQUASHFS error: Failed to read block 0x4de: -5 [ 142.135865][ T4950] SQUASHFS error: Failed to read block 0x4de: -5 [ 142.142635][ T4950] SQUASHFS error: Failed to read block 0x4de: -5 [ 142.149353][ T4950] SQUASHFS error: Failed to read block 0x4de: -5 [ 142.156156][ T4950] SQUASHFS error: Failed to read block 0x4de: -5 [ 142.365318][ T26] audit: type=1800 audit(1753210892.364:38): pid=4940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.115" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 142.386492][ T26] audit: type=1326 audit(1753210892.364:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4938 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf78e9a9 code=0x7ffc0000 [ 142.397825][ T4948] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.408706][ T26] audit: type=1326 audit(1753210892.364:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4938 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f18cf78e9a9 code=0x7ffc0000 [ 142.440657][ T26] audit: type=1326 audit(1753210892.364:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4938 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf78e9a9 code=0x7ffc0000 [ 142.471168][ T26] audit: type=1326 audit(1753210892.374:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4938 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18cf78e9a9 code=0x7ffc0000 [ 142.559007][ T4958] loop4: detected capacity change from 0 to 512 [ 142.691448][ T4960] loop0: detected capacity change from 0 to 2048 [ 142.854477][ T4964] loop1: detected capacity change from 0 to 64 [ 142.875969][ T4964] hfs: type requires a 4 character value [ 142.881805][ T4964] hfs: unable to parse mount options [ 143.774444][ T4960] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.806062][ T4631] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.834343][ T4958] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.124: casefold flag without casefold feature [ 143.849322][ T4961] loop1: detected capacity change from 0 to 64 [ 143.899404][ T4958] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.124: couldn't read orphan inode 15 (err -117) [ 144.201488][ T4958] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 145.371052][ T4955] EXT4-fs (loop4): unmounting filesystem. [ 145.542193][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 145.557421][ T4985] IPVS: Error joining to the multicast group [ 146.421929][ T4986] loop3: detected capacity change from 0 to 2048 [ 146.862533][ T4986] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.266069][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 147.273332][ T26] audit: type=1800 audit(1753210899.014:73): pid=4986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.138" name="bus" dev="loop3" ino=1371 res=0 errno=0 [ 149.304596][ T4393] libceph: connect (1)[c::]:6789 error -101 [ 149.371060][ T4393] libceph: mon0 (1)[c::]:6789 connect error [ 149.695035][ T4999] loop1: detected capacity change from 0 to 2048 [ 149.746922][ T5004] ceph: No mds server is up or the cluster is laggy [ 149.753338][ T4393] libceph: connect (1)[c::]:6789 error -101 [ 149.760471][ T4393] libceph: mon0 (1)[c::]:6789 connect error [ 149.783207][ T4999] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.955014][ T26] audit: type=1800 audit(1753210901.774:74): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.144" name="bus" dev="loop1" ino=1369 res=0 errno=0 [ 150.683101][ T4393] libceph: connect (1)[c::]:6789 error -101 [ 150.689145][ T4393] libceph: mon0 (1)[c::]:6789 connect error [ 152.809560][ T5040] loop0: detected capacity change from 0 to 128 [ 153.004675][ T5040] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 153.050008][ T5040] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.129246][ T5050] device bridge0 entered promiscuous mode [ 153.135635][ T5050] device macvlan2 entered promiscuous mode [ 154.368425][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 157.852926][ T5085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.860408][ T5085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.887064][ T5085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.894588][ T5085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.267403][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.277964][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.287806][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.298266][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.309673][ T5091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.090532][ T5091] device batadv_slave_0 entered promiscuous mode [ 161.243968][ T5112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.161'. [ 161.952627][ T5102] loop0: detected capacity change from 0 to 4096 [ 162.144256][ T5123] input: syz0 as /devices/virtual/input/input6 [ 163.121373][ T5120] loop1: detected capacity change from 0 to 512 [ 163.138084][ T5128] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.237975][ T5120] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 163.666268][ T5102] syz.0.160 (5102) used greatest stack depth: 19728 bytes left [ 163.674090][ T5120] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 163.737541][ T5120] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 163.773149][ T5120] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #11: comm syz.1.165: corrupted inode contents [ 163.803455][ T5120] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #11: comm syz.1.165: mark_inode_dirty error [ 163.825337][ T5134] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 163.834477][ T5134] 9pnet_fd: Insufficient options for proto=fd [ 163.887525][ T5120] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.165: invalid indirect mapped block 1 (level 1) [ 163.967526][ T5120] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #11: comm syz.1.165: corrupted inode contents [ 163.997518][ T5138] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.157'. [ 164.028956][ T5120] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 164.041969][ T5120] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #11: comm syz.1.165: corrupted inode contents [ 164.072162][ T5120] EXT4-fs error (device loop1): ext4_truncate:4312: inode #11: comm syz.1.165: mark_inode_dirty error [ 164.085627][ T5120] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 164.095698][ T5120] EXT4-fs (loop1): 1 truncate cleaned up [ 164.101504][ T5120] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 164.282353][ T5142] loop0: detected capacity change from 0 to 512 [ 164.513972][ T26] audit: type=1400 audit(1753210916.168:75): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5140 comm="syz.3.168" [ 164.883995][ T5142] ext4: Unknown parameter 'func' [ 164.999018][ T4283] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.332790][ T5155] loop3: detected capacity change from 0 to 64 [ 165.344270][ T5155] hfs: unable to parse mount options [ 166.814871][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 170.349478][ T5172] loop0: detected capacity change from 0 to 16 [ 170.360437][ T5172] erofs: (device loop0): mounted with root inode @ nid 36. [ 170.578325][ T5180] netlink: 'syz.2.175': attribute type 3 has an invalid length. [ 170.587519][ T5180] netlink: 'syz.2.175': attribute type 3 has an invalid length. [ 170.595477][ T5180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'. [ 170.640337][ T5180] lo speed is unknown, defaulting to 1000 [ 171.095395][ T5184] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 171.111679][ T5183] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 173.322494][ T5193] loop0: detected capacity change from 0 to 40427 [ 173.361186][ T5195] overlayfs: failed to clone upperpath [ 173.709042][ T5193] F2FS-fs (loop0): invalid crc value [ 173.974740][ T5193] F2FS-fs (loop0): Found nat_bits in checkpoint [ 174.024706][ T5193] F2FS-fs (loop0): Start checkpoint disabled! [ 174.053110][ T5193] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 174.914669][ T5208] kthread_run failed with err -4 [ 177.500677][ T5222] input: syz0 as /devices/virtual/input/input7 [ 177.561816][ T5204] IPv6: Can't replace route, no match found [ 178.318896][ T4659] kworker/u4:16: attempt to access beyond end of device [ 178.318896][ T4659] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 178.324304][ T5232] vivid-001: ================= START STATUS ================= [ 178.335209][ T4659] kworker/u4:16: attempt to access beyond end of device [ 178.335209][ T4659] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 178.341669][ T5232] vivid-001: Radio HW Seek Mode: Bounded [ 178.367847][ T5232] vivid-001: Radio Programmable HW Seek: false [ 178.374476][ T5232] vivid-001: RDS Rx I/O Mode: Block I/O [ 178.380461][ T5232] vivid-001: Generate RBDS Instead of RDS: false [ 178.387329][ T5232] vivid-001: RDS Reception: true [ 178.392511][ T5232] vivid-001: RDS Program Type: 0 inactive [ 178.398692][ T5232] vivid-001: RDS PS Name: inactive [ 178.404258][ T5232] vivid-001: RDS Radio Text: inactive [ 178.409896][ T5232] vivid-001: RDS Traffic Announcement: false inactive [ 178.417519][ T5232] vivid-001: RDS Traffic Program: false inactive [ 178.439570][ T5232] vivid-001: RDS Music: false inactive [ 178.447284][ T5232] vivid-001: ================== END STATUS ================== [ 178.927266][ T5237] device bridge0 entered promiscuous mode [ 178.933358][ T5237] device macvlan2 entered promiscuous mode [ 180.800440][ T5249] loop0: detected capacity change from 0 to 2048 [ 180.903150][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 180.909195][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 180.916108][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 180.916133][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 181.140570][ T5249] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.776786][ T5249] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 181.793978][ T5249] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.132491][ T5257] loop3: detected capacity change from 0 to 2048 [ 182.426695][ T5265] netlink: 'syz.1.197': attribute type 16 has an invalid length. [ 182.427102][ T5257] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.437407][ T5265] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.197'. [ 182.755470][ T5266] mkiss: ax0: crc mode is auto. [ 182.998598][ T5266] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.191: bg 0: block 345: padding at end of block bitmap is not set [ 183.823974][ T26] audit: type=1800 audit(1753210935.638:76): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.195" name="bus" dev="loop3" ino=1371 res=0 errno=0 [ 183.981860][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 184.003690][ T5276] loop1: detected capacity change from 0 to 128 [ 184.051866][ T5276] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 184.320053][ T5276] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.542801][ T5281] loop0: detected capacity change from 0 to 2048 [ 184.940894][ T5281] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.163864][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 185.177440][ T26] audit: type=1800 audit(1753210936.988:77): pid=5286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.200" name="bus" dev="loop0" ino=1371 res=0 errno=0 [ 185.702954][ T5290] loop3: detected capacity change from 0 to 8 [ 186.152264][ T5290] SQUASHFS error: zlib decompression failed, data probably corrupt [ 186.184797][ T5290] SQUASHFS error: Failed to read block 0x9b: -5 [ 186.191079][ T5290] SQUASHFS error: Unable to read metadata cache entry [99] [ 186.194072][ T5294] loop1: detected capacity change from 0 to 2048 [ 186.418786][ T5290] SQUASHFS error: Unable to read inode 0x127 [ 186.438713][ T5294] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.273184][ T26] audit: type=1800 audit(1753210939.088:78): pid=5305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.211" name="bus" dev="loop1" ino=1371 res=0 errno=0 [ 188.754487][ T5311] loop3: detected capacity change from 0 to 40427 [ 189.003670][ T5311] F2FS-fs (loop3): invalid crc value [ 189.107257][ T5311] F2FS-fs (loop3): Found nat_bits in checkpoint [ 189.276180][ T5311] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 190.055705][ T5331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'. [ 190.394296][ T4263] syz-executor: attempt to access beyond end of device [ 190.394296][ T4263] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.177399][ T4393] libceph: connect (1)[c::]:6789 error -101 [ 191.193695][ T4393] libceph: mon0 (1)[c::]:6789 connect error [ 191.388556][ T5340] ceph: No mds server is up or the cluster is laggy [ 191.905075][ T4267] libceph: connect (1)[c::]:6789 error -101 [ 191.925415][ T4267] libceph: mon0 (1)[c::]:6789 connect error [ 193.800209][ T5369] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.215'. [ 194.202166][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.208548][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.868303][ T5379] overlayfs: missing 'lowerdir' [ 197.779641][ T5383] loop0: detected capacity change from 0 to 40427 [ 197.797843][ T5383] F2FS-fs (loop0): invalid crc value [ 197.834192][ T5383] F2FS-fs (loop0): Found nat_bits in checkpoint [ 197.878956][ T5383] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 197.990714][ T5384] futex_wake_op: syz.2.227 tries to shift op by -1; fix this program [ 200.394943][ T5398] sctp: failed to load transform for md5: -2 [ 200.791737][ T5415] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 203.746707][ T5435] loop1: detected capacity change from 0 to 2048 [ 203.831995][ T5435] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.622428][ T26] audit: type=1800 audit(1753210956.428:79): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.241" name="bus" dev="loop1" ino=1371 res=0 errno=0 [ 204.916491][ T5450] overlayfs: failed to clone upperpath [ 205.790246][ T5459] netlink: 'syz.4.244': attribute type 3 has an invalid length. [ 205.799582][ T5459] netlink: 'syz.4.244': attribute type 3 has an invalid length. [ 205.807404][ T5459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.244'. [ 206.290385][ T5459] lo speed is unknown, defaulting to 1000 [ 208.021816][ T5467] loop0: detected capacity change from 0 to 2048 [ 208.769019][ T5467] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.881160][ T5477] loop3: detected capacity change from 0 to 2048 [ 208.899848][ T5475] kthread_run failed with err -4 [ 209.078974][ T26] audit: type=1800 audit(1753210960.888:80): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.247" name="bus" dev="loop0" ino=1371 res=0 errno=0 [ 209.190848][ T5477] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.692174][ T5490] loop1: detected capacity change from 0 to 512 [ 210.244524][ T26] audit: type=1800 audit(1753210962.058:81): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.249" name="bus" dev="loop3" ino=1371 res=0 errno=0 [ 210.433906][ T5490] ext4: Unknown parameter 'func' [ 210.485417][ T5496] netlink: 'syz.2.253': attribute type 16 has an invalid length. [ 210.496746][ T5496] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.253'. [ 211.029578][ T5502] loop0: detected capacity change from 0 to 2048 [ 211.041405][ T5502] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.161019][ T26] audit: type=1800 audit(1753210962.968:82): pid=5505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.254" name="bus" dev="loop0" ino=1371 res=0 errno=0 [ 213.202278][ T5525] netlink: 'syz.1.259': attribute type 3 has an invalid length. [ 213.211035][ T5525] netlink: 'syz.1.259': attribute type 3 has an invalid length. [ 213.218946][ T5525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'. [ 213.374284][ T5525] lo speed is unknown, defaulting to 1000 [ 214.159386][ T5528] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.257'. [ 214.867960][ T5526] loop3: detected capacity change from 0 to 2048 [ 214.906497][ T5526] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.346794][ T26] audit: type=1800 audit(1753210967.158:83): pid=5536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.260" name="bus" dev="loop3" ino=1371 res=0 errno=0 [ 215.870797][ T5540] hub 8-0:1.0: USB hub found [ 215.878348][ T5540] hub 8-0:1.0: 1 port detected [ 218.150074][ T5554] kthread_run failed with err -4 [ 219.390746][ T5568] overlayfs: failed to clone upperpath [ 222.154573][ T5592] loop3: detected capacity change from 0 to 40427 [ 222.197095][ T5592] F2FS-fs (loop3): invalid crc value [ 222.239814][ T5592] F2FS-fs (loop3): Found nat_bits in checkpoint [ 222.320034][ T5592] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 223.497772][ T4263] syz-executor: attempt to access beyond end of device [ 223.497772][ T4263] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 223.955892][ T5615] loop1: detected capacity change from 0 to 128 [ 223.970422][ T5615] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 223.984558][ T5615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.500572][ T5636] netlink: 'syz.0.289': attribute type 3 has an invalid length. [ 227.509166][ T5636] netlink: 'syz.0.289': attribute type 3 has an invalid length. [ 227.517059][ T5636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.289'. [ 227.614970][ T5636] lo speed is unknown, defaulting to 1000 [ 229.032629][ T5652] loop0: detected capacity change from 0 to 2048 [ 229.055192][ T5652] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.629015][ T5669] loop1: detected capacity change from 0 to 8 [ 231.801465][ T26] audit: type=1800 audit(1753210983.606:84): pid=5661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.304" name="bus" dev="loop0" ino=1369 res=0 errno=0 [ 231.893121][ T5672] ufs: You didn't specify the type of your ufs filesystem [ 231.893121][ T5672] [ 231.893121][ T5672] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 231.893121][ T5672] [ 231.893121][ T5672] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 231.924245][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.005191][ T52] block nbd1: Attempted send on invalid socket [ 232.013070][ T52] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.082254][ T5670] SQUASHFS error: xz decompression failed, data probably corrupt [ 232.090586][ T5670] SQUASHFS error: Failed to read block 0xa8: -5 [ 232.123625][ T5670] SQUASHFS error: xz decompression failed, data probably corrupt [ 232.131624][ T5670] SQUASHFS error: Failed to read block 0xa8: -5 [ 233.435327][ T26] audit: type=1800 audit(1753210983.956:85): pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.297" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 233.601659][ T5675] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.298'. [ 235.094884][ T5685] loop1: detected capacity change from 0 to 1764 [ 237.331577][ T5696] loop3: detected capacity change from 0 to 16 [ 238.161303][ T5696] erofs: (device loop3): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 238.402759][ T4255] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 241.499223][ T5716] sctp: failed to load transform for md5: -2 [ 241.602633][ T5733] loop1: detected capacity change from 0 to 64 [ 241.609885][ T5733] hfs: type requires a 4 character value [ 241.615686][ T5733] hfs: unable to parse mount options [ 241.948882][ T4283] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 241.990463][ T5728] loop1: detected capacity change from 0 to 64 [ 243.204409][ T5739] overlayfs: missing 'lowerdir' [ 243.356867][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 243.367826][ T5746] IPVS: Error joining to the multicast group [ 244.175472][ T5745] device macvlan3 entered promiscuous mode [ 244.706472][ T5753] loop3: detected capacity change from 0 to 2048 [ 245.201715][ T5753] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.381010][ T26] audit: type=1800 audit(1753210997.186:86): pid=5755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.312" name="bus" dev="loop3" ino=1371 res=0 errno=0 [ 247.850226][ T5779] netlink: 'syz.3.318': attribute type 3 has an invalid length. [ 247.858746][ T5779] netlink: 'syz.3.318': attribute type 3 has an invalid length. [ 247.866729][ T5779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.318'. [ 247.981788][ T5779] lo speed is unknown, defaulting to 1000 [ 251.140476][ T5814] loop0: detected capacity change from 0 to 64 [ 251.153529][ T5814] hfs: type requires a 4 character value [ 251.159241][ T5814] hfs: unable to parse mount options [ 251.583266][ T5814] loop0: detected capacity change from 0 to 64 [ 254.047477][ T5836] netlink: 156 bytes leftover after parsing attributes in process `syz.3.335'. [ 254.627038][ T5836] x_tables: duplicate underflow at hook 2 [ 255.913764][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.920167][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.979165][ T5849] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 256.296878][ T5856] loop0: detected capacity change from 0 to 4096 [ 256.308001][ T5856] ntfs3: Unknown parameter '0x00000000000000040x0000000000000000' [ 256.587839][ T5862] loop1: detected capacity change from 0 to 16 [ 257.018775][ T5862] erofs: (device loop1): mounted with root inode @ nid 36. [ 257.265287][ T5856] slcan: can't register candev [ 257.298011][ T5852] netlink: 'syz.2.337': attribute type 3 has an invalid length. [ 257.306035][ T5852] netlink: 'syz.2.337': attribute type 3 has an invalid length. [ 257.313931][ T5852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'. [ 257.327876][ T5854] lo speed is unknown, defaulting to 1000 [ 259.603769][ T5880] netlink: 'syz.1.353': attribute type 3 has an invalid length. [ 259.612087][ T5880] netlink: 'syz.1.353': attribute type 3 has an invalid length. [ 259.620012][ T5880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'. [ 260.476426][ T5880] lo speed is unknown, defaulting to 1000 [ 260.550473][ T26] audit: type=1326 audit(1753211011.166:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 261.145968][ T26] audit: type=1326 audit(1753211011.176:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 262.631889][ T26] audit: type=1326 audit(1753211011.206:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 263.526818][ T5919] loop3: detected capacity change from 0 to 4096 [ 264.547189][ T5919] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 264.789566][ T26] audit: type=1326 audit(1753211011.206:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 264.825453][ T5925] fuse: Bad value for 'fd' [ 264.906736][ T5910] device syz_tun entered promiscuous mode [ 264.955027][ T5910] device batadv_slave_0 entered promiscuous mode [ 264.968910][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 264.984004][ T26] audit: type=1326 audit(1753211011.206:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 265.423489][ T26] audit: type=1326 audit(1753211011.226:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 265.792872][ T26] audit: type=1326 audit(1753211011.226:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 267.245192][ T5938] loop0: detected capacity change from 0 to 32768 [ 267.252293][ T5938] XFS: ikeep mount option is deprecated. [ 267.852354][ T26] audit: type=1326 audit(1753211011.236:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 267.876390][ T26] audit: type=1326 audit(1753211011.246:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 268.848609][ T5955] device bridge0 entered promiscuous mode [ 268.855947][ T5955] device macvlan2 entered promiscuous mode [ 269.775118][ T26] audit: type=1326 audit(1753211011.326:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 269.889240][ T26] audit: type=1326 audit(1753211011.326:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 269.912000][ T26] audit: type=1326 audit(1753211011.326:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 269.943021][ T26] audit: type=1326 audit(1753211011.336:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 270.366936][ T26] audit: type=1326 audit(1753211011.336:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 270.697587][ T26] audit: type=1326 audit(1753211011.336:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 270.748527][ T26] audit: type=1326 audit(1753211011.336:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 271.184276][ T26] audit: type=1326 audit(1753211011.336:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 271.207945][ T26] audit: type=1326 audit(1753211011.336:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 271.232356][ T26] audit: type=1326 audit(1753211011.336:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 271.354575][ T26] audit: type=1326 audit(1753211011.336:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 271.382938][ T26] audit: type=1326 audit(1753211011.336:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 271.863812][ T26] audit: type=1326 audit(1753211011.336:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 272.552831][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 272.668660][ T26] audit: type=1326 audit(1753211011.336:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 273.415625][ T5998] loop0: detected capacity change from 0 to 512 [ 273.455751][ T5998] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 273.567062][ T26] audit: type=1326 audit(1753211011.336:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 273.567287][ T5998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 274.165703][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 274.183178][ T5998] System zones: 1-12 [ 274.213213][ T5998] EXT4-fs (loop0): 1 truncate cleaned up [ 274.218877][ T5998] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 274.256324][ T26] audit: type=1326 audit(1753211011.336:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 274.474170][ T6007] loop1: detected capacity change from 0 to 40427 [ 274.528179][ T6007] F2FS-fs (loop1): invalid crc value [ 274.555357][ T26] audit: type=1326 audit(1753211011.336:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb49d8e9a9 code=0x7ffc0000 [ 274.738881][ T6007] F2FS-fs (loop1): Found nat_bits in checkpoint [ 276.748744][ T6007] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 276.767272][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 277.481761][ T4265] syz-executor: attempt to access beyond end of device [ 277.481761][ T4265] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 280.859040][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 280.859055][ T26] audit: type=1326 audit(1753735320.672:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 280.975301][ T4342] Process accounting resumed [ 281.254921][ T26] audit: type=1326 audit(1753735320.702:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 281.278358][ T26] audit: type=1326 audit(1753735320.702:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 281.366257][ T26] audit: type=1326 audit(1753735320.712:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 281.512591][ T26] audit: type=1326 audit(1753735320.712:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 281.843313][ T6057] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 282.074143][ T6057] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 282.123498][ T6057] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 282.126759][ T26] audit: type=1326 audit(1753735320.712:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 282.131240][ T6057] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 282.159622][ T6057] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 282.165680][ T6057] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 282.173039][ T6057] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 282.179085][ T6057] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 282.247798][ T6057] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 282.273166][ T26] audit: type=1326 audit(1753735320.712:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 282.370428][ T6074] loop1: detected capacity change from 0 to 256 [ 282.431105][ T6074] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 282.479856][ T6057] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 282.492941][ T6057] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 282.498958][ T6057] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 282.530161][ T26] audit: type=1326 audit(1753735320.712:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 282.564815][ T26] audit: type=1326 audit(1753735320.712:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 282.573108][ T6074] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 282.587605][ T26] audit: type=1326 audit(1753735320.722:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 283.142213][ T6081] loop0: detected capacity change from 0 to 40427 [ 283.195895][ T6081] F2FS-fs (loop0): invalid crc value [ 283.209832][ T6074] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 283.290147][ T6081] F2FS-fs (loop0): Found nat_bits in checkpoint [ 283.380495][ T6081] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 283.703127][ T4277] Bluetooth: hci1: command 0x0c1a tx timeout [ 284.183232][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 284.183243][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout [ 284.200426][ T4264] syz-executor: attempt to access beyond end of device [ 284.200426][ T4264] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 284.592946][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 285.782907][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 286.263067][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 286.274640][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 286.662971][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 287.527828][ T6116] loop0: detected capacity change from 0 to 128 [ 287.545060][ T6116] FAT-fs (loop0): Unrecognized mount option "ut" or missing value [ 287.793949][ T4325] Process accounting resumed [ 290.468996][ T6144] tipc: Started in network mode [ 290.474848][ T6144] tipc: Node identity ac1414aa, cluster identity 4711 [ 290.883729][ T6144] tipc: Enabled bearer , priority 10 [ 292.165434][ T4325] tipc: Node number set to 2886997162 [ 296.218744][ T6197] loop3: detected capacity change from 0 to 4096 [ 296.280434][ T6197] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 296.310576][ T6197] ntfs3: loop3: Failed to load $MFT. [ 297.668268][ T6206] loop1: detected capacity change from 0 to 2048 [ 297.701180][ T6206] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.864845][ T6220] syz.2.422 uses obsolete (PF_INET,SOCK_PACKET) [ 300.947894][ T6221] fuse: Bad value for 'fd' [ 301.889923][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 302.120301][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 302.127216][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 302.133784][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 302.140225][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 302.146813][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 302.153294][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 302.159805][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 302.166321][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 302.172853][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 302.177935][ T6233] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 302.179261][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 304.637627][ T6261] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.431'. [ 306.398912][ T6276] loop1: detected capacity change from 0 to 2048 [ 306.506413][ T6276] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.938765][ T6288] delete_channel: no stack [ 311.073444][ T4282] Bluetooth: hci3: command 0x0405 tx timeout [ 312.155910][ T6316] Set syz1 is full, maxelem 65536 reached [ 312.354363][ T6320] loop3: detected capacity change from 0 to 256 [ 312.373982][ T6320] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 312.623419][ T6320] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 313.027383][ T6320] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 313.053049][ T6328] loop0: detected capacity change from 0 to 512 [ 314.006306][ T6328] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.446: casefold flag without casefold feature [ 314.060072][ T6328] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.446: couldn't read orphan inode 15 (err -117) [ 314.091249][ T6328] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 315.441113][ T6339] overlayfs: failed to clone upperpath [ 316.538668][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 316.625263][ T6351] loop1: detected capacity change from 0 to 2048 [ 316.686435][ T6351] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.877207][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.902065][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.066948][ T6404] 9pnet_virtio: no channels available for device syz [ 322.126136][ T6407] loop3: detected capacity change from 0 to 2048 [ 322.234728][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 322.234749][ T26] audit: type=1326 audit(1754259650.049:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 322.910766][ T26] audit: type=1326 audit(1754259650.719:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 323.067341][ T6410] mmap: syz.0.466 (6410) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 323.084131][ T6416] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 324.326997][ T6427] overlayfs: missing 'lowerdir' [ 325.355924][ T26] audit: type=1326 audit(1754259650.719:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 326.129308][ T26] audit: type=1326 audit(1754259650.719:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 326.254028][ T26] audit: type=1326 audit(1754259650.719:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 326.372476][ T26] audit: type=1326 audit(1754259650.829:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 327.741839][ T26] audit: type=1326 audit(1754259650.849:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 327.917928][ T26] audit: type=1326 audit(1754259650.849:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 329.512316][ T4282] Bluetooth: hci4: unexpected cc 0x2039 length: 9 > 1 [ 329.520842][ T4282] Bluetooth: hci4: unexpected event for opcode 0x2039 [ 330.157796][ T6475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.479'. [ 331.043347][ T6477] block device autoloading is deprecated and will be removed. [ 332.234187][ T6495] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 333.568528][ T4282] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 333.578870][ T4282] Bluetooth: hci4: Injecting HCI hardware error event [ 333.590488][ T4281] Bluetooth: hci4: hardware error 0x00 [ 336.190809][ T4281] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 337.727214][ T6533] QAT: failed to copy from user. [ 338.393023][ T6546] syz.1.496 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 338.572954][ T6546] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 342.465767][ T6558] loop3: detected capacity change from 0 to 128 [ 342.504735][ T6558] FAT-fs (loop3): Unrecognized mount option "ut" or missing value [ 344.226447][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 344.236321][ T6563] IPVS: Unknown mcast interface: vcan0 [ 345.453669][ T6574] misc userio: No port type given on /dev/userio [ 345.475469][ T6574] misc userio: The device must be registered before sending interrupts [ 348.111479][ T6566] lo speed is unknown, defaulting to 1000 [ 354.005970][ T6616] 9pnet_virtio: no channels available for device 127.0.0.1 [ 354.402465][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 354.413671][ T6611] IPVS: Unknown mcast interface: vcan0 [ 355.331630][ T6628] loop1: detected capacity change from 0 to 2048 [ 355.953097][ T6628] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 356.393966][ T6638] loop3: detected capacity change from 0 to 64 [ 358.447670][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 360.526879][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 360.600205][ T6669] IPVS: Error joining to the multicast group [ 360.737824][ T6674] loop0: detected capacity change from 0 to 512 [ 362.153377][ T6674] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 362.173178][ T6674] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.678667][ T4281] Bluetooth: hci3: unexpected event for opcode 0x0407 [ 363.275711][ T6674] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.536: iget: bad i_size value: 2533274857506816 [ 363.395040][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 363.433018][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 363.659084][ T6709] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.536: iget: bad i_size value: 2533274857506816 [ 363.726922][ T6701] ceph: No mds server is up or the cluster is laggy [ 363.762491][ T6713] netlink: 'syz.3.540': attribute type 5 has an invalid length. [ 363.792292][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 364.160492][ T6711] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.536: iget: bad i_size value: 2533274857506816 [ 364.187089][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 364.880302][ T1169] libceph: connect (1)[c::]:6789 error -101 [ 364.898834][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 364.903356][ T1169] libceph: mon0 (1)[c::]:6789 connect error [ 366.744791][ T4281] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 366.755541][ T4281] Bluetooth: hci3: Injecting HCI hardware error event [ 366.767106][ T4282] Bluetooth: hci3: hardware error 0x00 [ 367.761971][ T6727] loop1: detected capacity change from 0 to 32768 [ 368.617349][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'. [ 368.627280][ T6735] IPVS: Error joining to the multicast group [ 369.230265][ T6737] xt_connbytes: Forcing CT accounting to be enabled [ 369.388219][ T6737] set match dimension is over the limit! [ 370.462246][ T4282] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 370.681221][ T6756] loop3: detected capacity change from 0 to 256 [ 370.732955][ T6756] FAT-fs (loop3): bogus number of FAT sectors [ 370.810515][ T6756] FAT-fs (loop3): Can't find a valid FAT filesystem [ 373.440749][ T6780] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 373.458678][ T6780] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 373.466025][ T6780] comedi comedi3: 8255: I/O port conflict (0x100000,4) [ 373.474612][ T6780] comedi comedi3: 8255: I/O port conflict (0x8f,4) [ 373.481861][ T6780] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 373.490592][ T6780] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 373.499044][ T6780] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 373.506835][ T6780] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 373.517763][ T6780] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 374.275279][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 374.289284][ T6789] IPVS: Error joining to the multicast group [ 376.416151][ T6816] device bridge0 entered promiscuous mode [ 376.416276][ T6816] device macvlan2 entered promiscuous mode [ 377.392970][ T26] audit: type=1326 audit(1754259705.199:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9258e9a9 code=0x7ffc0000 [ 377.433304][ T6821] loop3: detected capacity change from 0 to 8 [ 377.482884][ T26] audit: type=1326 audit(1754259705.199:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9258e9a9 code=0x7ffc0000 [ 377.506305][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.553659][ T6821] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 377.598093][ T4283] udevd[4283]: incorrect cramfs checksum on /dev/loop3 [ 377.636374][ T26] audit: type=1326 audit(1754259705.199:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0c9258e9a9 code=0x7ffc0000 [ 377.670616][ T26] audit: type=1326 audit(1754259705.199:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9258e9a9 code=0x7ffc0000 [ 378.237500][ T6830] cramfs: Error -5 while decompressing! [ 378.246495][ T6830] cramfs: ffffffff96d751a8(26)->ffff88804b7b8000(4096) [ 378.256768][ T6830] cramfs: Error -3 while decompressing! [ 378.509903][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.517492][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.636096][ T26] audit: type=1326 audit(1754259705.199:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9258e9a9 code=0x7ffc0000 [ 378.668733][ T6830] cramfs: ffffffff96d751c2(26)->ffff88804b7b9000(4096) [ 378.678743][ T6830] cramfs: Error -3 while decompressing! [ 378.686741][ T6830] cramfs: ffffffff96d751dc(16)->ffff88804b7ba000(4096) [ 378.701365][ T6830] cramfs: Error -5 while decompressing! [ 378.712855][ T6830] cramfs: ffffffff96d751a8(26)->ffff88804b7b8000(4096) [ 379.023163][ T26] audit: type=1326 audit(1754259705.199:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c9258e9a9 code=0x7ffc0000 [ 379.053188][ T26] audit: type=1326 audit(1754259705.199:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9258e9a9 code=0x7ffc0000 [ 379.080072][ T26] audit: type=1326 audit(1754259705.199:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9258e9a9 code=0x7ffc0000 [ 379.104644][ T26] audit: type=1326 audit(1754259705.199:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0c9258e9a9 code=0x7ffc0000 [ 379.132157][ T26] audit: type=1326 audit(1754259705.199:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9258e9a9 code=0x7ffc0000 [ 380.145178][ T6846] loop1: detected capacity change from 0 to 512 [ 380.163192][ T6846] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 380.932981][ T6846] EXT4-fs (loop1): 1 truncate cleaned up [ 380.940346][ T6846] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 381.299674][ T6847] xt_recent: hitcount (4294967294) is larger than allowed maximum (255) [ 381.455287][ T6855] loop3: detected capacity change from 0 to 1024 [ 381.641072][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 381.661505][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 381.690704][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.218335][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 383.279666][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.343205][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.351123][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.365414][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.373586][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.381709][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.599740][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.609721][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.617727][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.628107][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.636082][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.647352][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.656270][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.664421][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.672477][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.680900][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.689434][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.697913][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.705916][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.716529][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.724796][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.734264][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.742548][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.754083][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.763442][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.772626][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 383.781182][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 384.083017][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 384.083035][ T26] audit: type=1804 audit(1754259711.789:245): pid=6871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.576" name="/newroot/107/file1/file1" dev="loop3" ino=20 res=1 errno=0 [ 384.165526][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 384.173636][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 384.182520][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 384.191149][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 384.200035][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 384.279135][ T6873] lo speed is unknown, defaulting to 1000 [ 384.288822][ T6873] lo speed is unknown, defaulting to 1000 [ 384.304087][ T6873] lo speed is unknown, defaulting to 1000 [ 384.357491][ T6873] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 384.482628][ T6873] lo speed is unknown, defaulting to 1000 [ 384.496099][ T6873] lo speed is unknown, defaulting to 1000 [ 384.509339][ T6873] lo speed is unknown, defaulting to 1000 [ 384.521537][ T6873] lo speed is unknown, defaulting to 1000 [ 384.535350][ T6873] lo speed is unknown, defaulting to 1000 [ 384.830490][ T6855] hfsplus: request for non-existent node 16777216 in B*Tree [ 384.846786][ T6871] hfsplus: request for non-existent node 16777216 in B*Tree [ 384.854894][ T6871] hfsplus: request for non-existent node 16777216 in B*Tree [ 384.863694][ T6871] hfsplus: request for non-existent node 16777216 in B*Tree [ 384.871243][ T6871] hfsplus: request for non-existent node 16777216 in B*Tree [ 384.879332][ T6871] hfsplus: request for non-existent node 16777216 in B*Tree [ 384.887995][ T6871] hfsplus: request for non-existent node 16777216 in B*Tree [ 386.357851][ T26] audit: type=1800 audit(1754259712.649:246): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.576" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 386.395006][ T26] audit: type=1800 audit(1754259712.709:247): pid=6871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.576" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 386.763459][ T6883] device macvlan3 entered promiscuous mode [ 389.094477][ T6895] delete_channel: no stack [ 391.960354][ T6913] loop1: detected capacity change from 0 to 128 [ 392.221489][ T6919] overlayfs: failed to clone upperpath [ 399.673207][ T6973] loop3: detected capacity change from 0 to 8 [ 400.191358][ T6973] SQUASHFS error: zlib decompression failed, data probably corrupt [ 401.551654][ T26] audit: type=1326 audit(1754259729.359:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.0.603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x0 [ 402.118251][ T6973] SQUASHFS error: Failed to read block 0x9b: -5 [ 402.853154][ T6973] SQUASHFS error: Unable to read metadata cache entry [99] [ 402.860998][ T6973] SQUASHFS error: Unable to read inode 0x127 [ 403.042273][ T6983] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 403.049668][ T6983] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 403.185734][ T6992] vhci_hcd: connection closed [ 403.186270][ T6983] vhci_hcd vhci_hcd.0: Device attached [ 403.507126][ T7004] Bluetooth: MGMT ver 1.22 [ 404.838442][ T4379] vhci_hcd: stop threads [ 404.875792][ T4379] vhci_hcd: release socket [ 404.893218][ T4379] vhci_hcd: disconnect device [ 404.902941][ T4318] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 404.912344][ T4318] usb 35-1: enqueue for inactive port 0 [ 405.202916][ T4318] vhci_hcd: vhci_device speed not set [ 406.656234][ T26] audit: type=1326 audit(1754259734.469:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 408.021286][ T7023] loop0: detected capacity change from 0 to 32768 [ 408.179293][ T7016] loop3: detected capacity change from 0 to 2048 [ 408.305964][ T26] audit: type=1326 audit(1754259734.499:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 408.334337][ T26] audit: type=1326 audit(1754259734.499:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 408.361981][ T26] audit: type=1326 audit(1754259734.499:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 408.389652][ T26] audit: type=1326 audit(1754259734.509:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 408.414859][ T26] audit: type=1326 audit(1754259734.509:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 408.440038][ T26] audit: type=1326 audit(1754259734.509:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 408.464963][ T26] audit: type=1326 audit(1754259734.509:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 408.517198][ T26] audit: type=1326 audit(1754259734.509:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 408.691538][ T26] audit: type=1326 audit(1754259734.509:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5b2218e9a9 code=0x7ffc0000 [ 408.759135][ T7016] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 408.800647][ T7016] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.375025][ T7033] Set syz1 is full, maxelem 65536 reached [ 410.600567][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 418.768983][ T7116] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 420.363571][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.373045][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.576072][ T7113] Set syz1 is full, maxelem 65536 reached [ 420.862584][ T7136] loop3: detected capacity change from 0 to 128 [ 420.907997][ T7136] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 431.216960][ T7198] trusted_key: encrypted_key: insufficient parameters specified [ 435.781676][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 437.625715][ T7234] loop1: detected capacity change from 0 to 128 [ 438.455079][ T7237] netlink: 'syz.4.664': attribute type 10 has an invalid length. [ 438.534186][ T7237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.547572][ T7237] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 439.500485][ T7234] syz.1.661: attempt to access beyond end of device [ 439.500485][ T7234] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 439.597400][ T7234] syz.1.661: attempt to access beyond end of device [ 439.597400][ T7234] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 439.620355][ T7234] syz.1.661: attempt to access beyond end of device [ 439.620355][ T7234] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 440.423339][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.444992][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.473597][ T7234] syz.1.661: attempt to access beyond end of device [ 440.473597][ T7234] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 440.495210][ T7234] syz.1.661: attempt to access beyond end of device [ 440.495210][ T7234] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 440.513230][ T7234] syz.1.661: attempt to access beyond end of device [ 440.513230][ T7234] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 440.550556][ T7256] syz.1.661: attempt to access beyond end of device [ 440.550556][ T7256] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 441.234054][ T7258] tipc: Started in network mode [ 441.239334][ T7258] tipc: Node identity 4, cluster identity 4711 [ 441.245962][ T7258] tipc: Node number set to 4 [ 441.517520][ T7266] loop1: detected capacity change from 0 to 1024 [ 443.357150][ T4679] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 444.331512][ T4679] usb 2-1: config 2 has an invalid interface number: 219 but max is 0 [ 444.342261][ T4679] usb 2-1: config 2 has no interface number 0 [ 444.349729][ T4679] usb 2-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76 [ 444.359846][ T4679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.391789][ T4679] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 445.037745][ T4679] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110 [ 445.054065][ T4679] pac7311: probe of 2-1:2.219 failed with error -110 [ 446.276287][ T7304] xt_HMARK: proto mask must be zero with L3 mode [ 446.297614][ T4636] usb 2-1: USB disconnect, device number 3 [ 446.891996][ T4396] hfsplus: b-tree write err: -5, ino 4 [ 446.906777][ T7307] loop3: detected capacity change from 0 to 128 [ 446.941214][ T7307] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 447.414464][ T7307] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 447.548452][ T7310] x_tables: ip_tables: osf match: only valid for protocol 6 [ 448.779873][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 448.779888][ T26] audit: type=1326 audit(1754259776.459:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7313 comm="syz.1.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf78e9a9 code=0x7ffc0000 [ 449.754815][ T4419] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 449.835736][ T26] audit: type=1326 audit(1754259776.469:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7313 comm="syz.1.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf78e9a9 code=0x7ffc0000 [ 451.213338][ T7318] loop1: detected capacity change from 0 to 32768 [ 451.479324][ T26] audit: type=1326 audit(1754259776.469:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7313 comm="syz.1.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18cf78e9a9 code=0x7ffc0000 [ 451.502698][ C0] vkms_vblank_simulate: vblank timer overrun [ 451.659991][ T26] audit: type=1326 audit(1754259776.469:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7313 comm="syz.1.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf78e9a9 code=0x7ffc0000 [ 451.683322][ T26] audit: type=1326 audit(1754259776.479:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7313 comm="syz.1.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf78e9a9 code=0x7ffc0000 [ 452.490193][ T7336] loop0: detected capacity change from 0 to 2048 [ 455.334636][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 457.447558][ T7391] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 459.667239][ T7405] loop1: detected capacity change from 0 to 128 [ 459.822938][ T7389] sctp: failed to load transform for md5: -2 [ 459.875888][ T7405] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 460.949390][ T7422] xt_TCPMSS: Only works on TCP SYN packets [ 463.051525][ T7436] loop0: detected capacity change from 0 to 2048 [ 463.189709][ T7436] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 465.263819][ T26] audit: type=1800 audit(1754259793.079:300): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.712" name="bus" dev="loop0" ino=1371 res=0 errno=0 [ 470.227504][ T26] audit: type=1326 audit(1754259798.039:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.0.722" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b2218e9a9 code=0x0 [ 471.148475][ T7487] trusted_key: encrypted_key: insufficient parameters specified [ 475.261406][ T7511] binder_alloc: 7509: pid 7509 spamming oneway? 2 buffers allocated for a total size of 5120 [ 475.479270][ T7511] binder_alloc: 7509: pid 7509 spamming oneway? 3 buffers allocated for a total size of 5128 [ 475.505267][ T7511] loop0: detected capacity change from 0 to 128 [ 476.005737][ T7511] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 476.033026][ T7511] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 479.087363][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 479.794269][ T7555] trusted_key: encrypted_key: insufficient parameters specified [ 480.083350][ T7563] loop1: detected capacity change from 0 to 8 [ 480.704937][ T7565] loop0: detected capacity change from 0 to 8 [ 480.808571][ T7565] SQUASHFS error: zlib decompression failed, data probably corrupt [ 480.816798][ T7565] SQUASHFS error: Failed to read block 0x9b: -5 [ 480.823097][ T7565] SQUASHFS error: Unable to read metadata cache entry [99] [ 480.830364][ T7565] SQUASHFS error: Unable to read inode 0x127 [ 483.823453][ T7595] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 484.011505][ T7597] netlink: 76 bytes leftover after parsing attributes in process `syz.3.753'. [ 486.928706][ T7622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.379714][ T7622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.379743][ T7622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.480419][ T7623] loop1: detected capacity change from 0 to 2048 [ 487.497060][ T7623] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 488.219732][ T26] audit: type=1800 audit(1754259816.029:302): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.760" name="bus" dev="loop1" ino=1371 res=0 errno=0 [ 490.088807][ T7650] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 490.833157][ T7648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.840658][ T7648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.331975][ T7648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.339544][ T7648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.180929][ T7648] bond0: (slave batadv0): Releasing backup interface [ 493.282947][ T7665] loop0: detected capacity change from 0 to 1024 [ 494.998190][ T4419] hfsplus: b-tree write err: -5, ino 4 [ 495.606200][ T7691] loop0: detected capacity change from 0 to 2048 [ 495.618976][ T7691] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 496.764516][ T7686] input: syz0 as /devices/virtual/input/input8 [ 497.598646][ T26] audit: type=1800 audit(1754259825.409:303): pid=7704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.775" name="bus" dev="loop0" ino=1371 res=0 errno=0 [ 500.202943][ T7707] xt_CT: No such helper "pptp" [ 501.385843][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.392194][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.030479][ T7749] loop3: detected capacity change from 0 to 2048 [ 504.075342][ T7749] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 505.366577][ T26] audit: type=1800 audit(2000000005.450:304): pid=7764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.793" name="bus" dev="loop3" ino=1371 res=0 errno=0 [ 506.995978][ T7779] loop3: detected capacity change from 0 to 1764 [ 507.008348][ T7781] gfs2: gfs2 mount does not exist [ 509.118393][ C0] hrtimer: interrupt took 65372 ns [ 509.265247][ T7786] overlayfs: missing 'lowerdir' [ 510.024548][ T4281] Bluetooth: hci5: command 0x1003 tx timeout [ 510.031196][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 510.420758][ T7830] loop0: detected capacity change from 0 to 256 [ 510.591595][ T7834] loop3: detected capacity change from 0 to 64 [ 513.153322][ T7859] ubi31: attaching mtd0 [ 513.164265][ T7859] ubi31: scanning is finished [ 513.169185][ T7859] ubi31: empty MTD device detected [ 513.496014][ T7859] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 513.504301][ T7859] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 513.526417][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 513.535990][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.816'. [ 514.103084][ T7874] netlink: 'syz.4.818': attribute type 21 has an invalid length. [ 514.116478][ T7874] netlink: 128 bytes leftover after parsing attributes in process `syz.4.818'. [ 514.126198][ T7874] netlink: 'syz.4.818': attribute type 6 has an invalid length. [ 514.134341][ T7874] netlink: 3 bytes leftover after parsing attributes in process `syz.4.818'. [ 514.314009][ T7859] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 514.321463][ T7859] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 514.329464][ T7859] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 514.336585][ T7859] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 514.345069][ T7859] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2145067137 [ 514.355563][ T7859] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 514.380358][ T7867] ubi31: background thread "ubi_bgt31d" started, PID 7867 [ 515.599611][ T7892] loop3: detected capacity change from 0 to 2048 [ 515.705515][ T7892] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 515.762920][ T7892] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.946550][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'. [ 518.677511][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 521.652794][ T7932] sctp: [Deprecated]: syz.2.835 (pid 7932) Use of int in max_burst socket option deprecated. [ 521.652794][ T7932] Use struct sctp_assoc_value instead [ 524.357964][ T7954] loop1: detected capacity change from 0 to 2048 [ 524.409516][ T7954] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 526.552143][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 528.999650][ T7990] loop3: detected capacity change from 0 to 32768 [ 529.089706][ T7990] [ 529.089706][ T7990] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 529.089706][ T7990] [ 529.449391][ T7990] ERROR: (device loop3): diWrite: ixpxd invalid [ 529.449391][ T7990] [ 529.461076][ T7990] ERROR: (device loop3): txCommit: [ 529.461076][ T7990] [ 529.799115][ T7995] sctp: failed to load transform for md5: -2 [ 530.140065][ T7990] ERROR: (device loop3): diWrite: ixpxd invalid [ 530.140065][ T7990] [ 530.149228][ T7990] ERROR: (device loop3): txCommit: [ 530.149228][ T7990] [ 530.160246][ T26] audit: type=1326 audit(2000000030.240:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 530.206621][ T26] audit: type=1326 audit(2000000030.240:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 530.276283][ T7990] trusted_key: encrypted_key: insufficient parameters specified [ 530.448717][ T26] audit: type=1326 audit(2000000030.240:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 531.770499][ T4263] [ 531.770499][ T4263] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 531.770499][ T4263] [ 531.873290][ T4263] [ 531.873290][ T4263] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 531.873290][ T4263] [ 532.756704][ T26] audit: type=1326 audit(2000000030.240:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 532.787326][ T26] audit: type=1326 audit(2000000030.240:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 533.661964][ T26] audit: type=1326 audit(2000000030.270:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 534.113052][ T4342] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 534.280041][ T26] audit: type=1326 audit(2000000030.270:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 534.303477][ T26] audit: type=1326 audit(2000000030.270:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 534.312356][ T4342] usb 4-1: Invalid ep0 maxpacket: 64 [ 535.168979][ T26] audit: type=1326 audit(2000000030.270:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 535.553285][ T8042] loop0: detected capacity change from 0 to 32768 [ 535.564180][ T4342] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 535.565003][ T26] audit: type=1326 audit(2000000030.270:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 535.854474][ T4342] usb 4-1: Invalid ep0 maxpacket: 64 [ 536.120762][ T4342] usb usb4-port1: attempt power cycle [ 536.257403][ T26] audit: type=1326 audit(2000000030.270:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 538.404294][ T8056] sctp: [Deprecated]: syz.0.859 (pid 8056) Use of int in max_burst socket option. [ 538.404294][ T8056] Use struct sctp_assoc_value instead [ 538.427827][ T4342] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 538.618402][ T8042] read_mapping_page failed! [ 538.623913][ T8042] jfs_create: dtInsert returned -EIO [ 538.629657][ T8042] ERROR: (device loop0): jfs_create: [ 538.629657][ T8042] [ 538.673944][ T8042] ERROR: (device loop0): remounting filesystem as read-only [ 538.685228][ T4342] usb 4-1: device not accepting address 4, error -71 [ 539.405902][ T26] audit: type=1326 audit(2000000030.350:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 539.439086][ T26] audit: type=1326 audit(2000000030.350:317): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 541.748830][ T26] audit: type=1326 audit(2000000030.350:318): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 542.653748][ T26] audit: type=1326 audit(2000000030.360:319): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 542.677623][ T26] audit: type=1326 audit(2000000030.360:320): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 542.703615][ T26] audit: type=1326 audit(2000000030.360:321): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 542.727961][ T26] audit: type=1326 audit(2000000030.360:322): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 543.427319][ T26] audit: type=1326 audit(2000000030.370:323): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 543.451013][ T26] audit: type=1326 audit(2000000030.370:324): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 543.645219][ T26] audit: type=1326 audit(2000000030.370:325): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 543.781481][ T26] audit: type=1326 audit(2000000030.370:326): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 544.458133][ T26] audit: type=1326 audit(2000000030.370:327): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf18e9a9 code=0x7ffc0000 [ 544.509332][ T8105] loop1: detected capacity change from 0 to 2048 [ 544.558259][ T8105] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 544.586928][ T8108] loop3: detected capacity change from 0 to 1024 [ 545.300166][ T8113] netlink: 32 bytes leftover after parsing attributes in process `syz.4.875'. [ 545.365561][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.496596][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.560780][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.832635][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.841100][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.850507][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.861584][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.870843][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.879051][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 545.888687][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.302802][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.310203][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.327774][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.347770][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.356278][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.363924][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.371567][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.380226][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.387852][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.395291][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.403030][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.410387][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.472584][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.480152][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.489019][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.496416][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.504150][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.511492][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.519385][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.527110][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.545567][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.553211][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.561138][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.568542][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.576157][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.621725][ T8108] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.632750][ T8128] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.640255][ T8128] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.651272][ T8128] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.658923][ T8128] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.667131][ T8128] hfsplus: request for non-existent node 16777216 in B*Tree [ 546.711201][ T8128] hfsplus: request for non-existent node 16777216 in B*Tree [ 549.599895][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'. [ 554.695495][ T8207] loop3: detected capacity change from 0 to 1024 [ 554.713723][ T8207] EXT4-fs: Ignoring removed bh option [ 554.720870][ T8207] EXT4-fs: Mount option(s) incompatible with ext2 [ 561.664312][ T8258] sctp: [Deprecated]: syz.2.908 (pid 8258) Use of int in max_burst socket option. [ 561.664312][ T8258] Use struct sctp_assoc_value instead [ 561.680265][ T8258] capability: warning: `syz.2.908' uses 32-bit capabilities (legacy support in use) [ 562.600604][ T26] kauditd_printk_skb: 45 callbacks suppressed [ 562.600620][ T26] audit: type=1326 audit(2000000317.890:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.0.907" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b2218e9a9 code=0x0 [ 562.846933][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.853814][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.875860][ T8269] loop0: detected capacity change from 0 to 512 [ 562.882895][ T8269] EXT4-fs: Ignoring removed mblk_io_submit option [ 562.894122][ T8269] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 563.034498][ T8272] syz.3.901[8272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.034949][ T8272] syz.3.901[8272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.835430][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 563.867024][ T8269] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.909: iget: bad extended attribute block 1 [ 563.882843][ T8269] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.909: couldn't read orphan inode 15 (err -117) [ 563.895782][ T8269] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 564.412621][ T8277] capability: warning: `syz.0.909' uses deprecated v2 capabilities in a way that may be insecure [ 564.668453][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 565.237044][ T8290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.244582][ T8290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.275602][ T8290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.283255][ T8290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.458485][ T8298] loop0: detected capacity change from 0 to 512 [ 566.064105][ T8298] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0102] [ 566.072218][ T8298] System zones: 1-12 [ 566.486759][ T8298] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.915: error while reading EA inode 32 err=-116 [ 566.629667][ T8316] loop3: detected capacity change from 0 to 64 [ 566.993139][ T8298] EXT4-fs (loop0): Remounting filesystem read-only [ 567.771633][ T8298] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 567.934156][ T8298] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.915: error while reading EA inode 32 err=-116 [ 568.892842][ T8298] EXT4-fs (loop0): Remounting filesystem read-only [ 568.900138][ T8298] EXT4-fs (loop0): 1 orphan inode deleted [ 568.907234][ T8298] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 569.311600][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 570.034539][ T8343] binder: 8336:8343 ioctl 4018620d 0 returned -22 [ 570.042753][ T8343] binder: 8336:8343 ioctl 4018620d 0 returned -22 [ 571.025228][ T8353] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.067391][ T8347] block device autoloading is deprecated and will be removed. [ 574.555102][ T8383] overlayfs: failed to clone lowerpath [ 575.912380][ T8398] No such timeout policy "syz1" [ 583.821384][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.947'. [ 587.476337][ T8499] qrtr: Invalid version 212 [ 590.489130][ T8526] loop1: detected capacity change from 0 to 512 [ 590.679467][ T8526] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 590.701015][ T8526] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.814906][ T26] audit: type=1800 audit(2000000602.900:374): pid=8526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.962" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 591.399813][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 593.714810][ T8558] input: syz1 as /devices/virtual/input/input9 [ 594.175415][ T8561] loop3: detected capacity change from 0 to 8 [ 594.232305][ T8561] SQUASHFS error: zlib decompression failed, data probably corrupt [ 594.240971][ T8561] SQUASHFS error: Failed to read block 0x9b: -5 [ 594.251532][ T8561] SQUASHFS error: Unable to read metadata cache entry [99] [ 594.259398][ T8561] SQUASHFS error: Unable to read inode 0x127 [ 596.929099][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.978'. [ 596.938375][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.978'. [ 598.387010][ T8567] syz.2.972 sent an empty control message without MSG_MORE. [ 601.054621][ T8611] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 601.083854][ T8613] loop1: detected capacity change from 0 to 512 [ 601.362366][ T8613] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 601.383058][ T8613] ext4 filesystem being mounted at /173/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.405048][ T8611] netlink: 48 bytes leftover after parsing attributes in process `syz.3.984'. [ 602.311578][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 604.210358][ T8643] input: syz1 as /devices/virtual/input/input10 [ 604.278871][ T8643] loop1: detected capacity change from 0 to 64 [ 605.767172][ T8643] syz.1.990: attempt to access beyond end of device [ 605.767172][ T8643] loop1: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 605.782549][ T8643] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 605.791520][ T8643] syz.1.990: attempt to access beyond end of device [ 605.791520][ T8643] loop1: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 605.805270][ T8643] Buffer I/O error on dev loop1, logical block 66, lost async page write [ 605.815453][ T8643] syz.1.990: attempt to access beyond end of device [ 605.815453][ T8643] loop1: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 605.829201][ T8643] Buffer I/O error on dev loop1, logical block 67, lost async page write [ 605.846387][ T8643] syz.1.990: attempt to access beyond end of device [ 605.846387][ T8643] loop1: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 605.869963][ T8643] Buffer I/O error on dev loop1, logical block 68, lost async page write [ 605.884316][ T8643] syz.1.990: attempt to access beyond end of device [ 605.884316][ T8643] loop1: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 605.897697][ T8643] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 605.906678][ T8643] syz.1.990: attempt to access beyond end of device [ 605.906678][ T8643] loop1: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 605.920240][ T8643] Buffer I/O error on dev loop1, logical block 73, lost async page write [ 605.938074][ T8643] syz.1.990: attempt to access beyond end of device [ 605.938074][ T8643] loop1: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 605.962192][ T8643] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 605.981753][ T8643] syz.1.990: attempt to access beyond end of device [ 605.981753][ T8643] loop1: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 607.311621][ T8643] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 607.377481][ T8643] syz.1.990: attempt to access beyond end of device [ 607.377481][ T8643] loop1: rw=2049, sector=78, nr_sectors = 560 limit=64 [ 609.271872][ T8672] Process accounting resumed [ 622.290189][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'. [ 627.225749][ T8838] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 627.270145][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.281897][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.501201][ T8834] sctp: failed to load transform for md5: -2 [ 630.112832][ T4281] Bluetooth: Frame is too long (len 18, expected len 4) [ 633.310814][ T8906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1048'. [ 634.455535][ T8918] loop1: detected capacity change from 0 to 128 [ 634.483704][ T8918] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 637.358862][ T8946] loop3: detected capacity change from 0 to 64 [ 643.936597][ T8996] loop1: detected capacity change from 0 to 16 [ 643.984670][ T8996] erofs: (device loop1): mounted with root inode @ nid 36. [ 644.240520][ T9003] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 645.233713][ T9002] sctp: failed to load transform for md5: -2 [ 645.779036][ T9019] loop1: detected capacity change from 0 to 64 [ 648.274008][ T9048] Option ''MO' to dns_resolver key: bad/missing value [ 650.995947][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1098'. [ 651.791475][ T9075] Process accounting resumed [ 653.722387][ T9114] loop1: detected capacity change from 0 to 64 [ 658.516783][ T9146] netlink: 'syz.1.1105': attribute type 21 has an invalid length. [ 658.524960][ T9146] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1105'. [ 658.534531][ T9146] netlink: 'syz.1.1105': attribute type 6 has an invalid length. [ 658.542377][ T9146] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1105'. [ 663.151000][ T26] audit: type=1326 audit(2000000675.230:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9178 comm="syz.1.1117" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18cf78e9a9 code=0x0 [ 666.363356][ T9216] netlink: 'syz.2.1122': attribute type 21 has an invalid length. [ 666.371510][ T9216] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1122'. [ 666.380853][ T9216] netlink: 'syz.2.1122': attribute type 6 has an invalid length. [ 666.388797][ T9216] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1122'. [ 670.612455][ T9247] loop3: detected capacity change from 0 to 256 [ 677.931819][ T9309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1141'. [ 682.406085][ T9374] loop3: detected capacity change from 0 to 8 [ 683.365249][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 683.375149][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1156'. [ 685.774545][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.780938][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.744818][ T9413] sctp: failed to load transform for md5: -2 [ 688.943725][ T9428] device syzkaller0 entered promiscuous mode [ 688.974322][ T9428] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 692.662667][ T9454] loop3: detected capacity change from 0 to 4096 [ 692.960167][ T9454] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 693.865788][ T9454] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 693.879080][ T9454] ntfs3: loop3: Failed to load $Extend. [ 696.602646][ T4325] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 697.782099][ T9493] Option ''MO' to dns_resolver key: bad/missing value [ 701.145566][ T4281] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 703.407172][ T9526] loop3: detected capacity change from 0 to 256 [ 703.464549][ T9526] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 703.826137][ T26] audit: type=1326 audit(2000000715.910:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.4.1189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb49d8e9a9 code=0x0 [ 704.548007][ T9538] loop3: detected capacity change from 0 to 1024 [ 704.576324][ T9538] EXT4-fs (loop3): filesystem is read-only [ 705.021108][ T9538] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 705.040719][ T9538] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 705.063146][ T9538] EXT4-fs error (device loop3): ext4_get_journal_inode:5735: comm syz.3.1191: inode #1: comm syz.3.1191: iget: illegal inode # [ 705.109577][ T9538] EXT4-fs (loop3): no journal found [ 705.125890][ T9538] EXT4-fs (loop3): can't get journal size [ 705.133476][ T9538] EXT4-fs error (device loop3): __ext4_fill_super:5402: inode #2: comm syz.3.1191: iget: bad extra_isize 65535 (inode size 1024) [ 705.148006][ T9538] EXT4-fs (loop3): get root inode failed [ 705.162272][ T9538] EXT4-fs (loop3): mount failed [ 706.099895][ T9538] loop3: detected capacity change from 0 to 2048 [ 706.283330][ T9538] EXT4-fs: inline encryption not supported [ 706.297416][ T9538] EXT4-fs: Ignoring removed mblk_io_submit option [ 706.320935][ T9538] ext4: Unknown parameter 'audit' [ 706.571565][ T9568] overlayfs: './file0' not a directory [ 706.582761][ T4436] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 707.030468][ T9568] Process accounting resumed [ 707.252646][ T4436] usb 2-1: Using ep0 maxpacket: 16 [ 707.259579][ T4436] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.282713][ T4436] usb 2-1: config 0 interface 0 has no altsetting 0 [ 707.341015][ T4436] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 707.360646][ T4436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.390631][ T4436] usb 2-1: Product: syz [ 707.395338][ T4436] usb 2-1: Manufacturer: syz [ 707.399968][ T4436] usb 2-1: SerialNumber: syz [ 707.416153][ T4436] usb 2-1: config 0 descriptor?? [ 707.805582][ T4436] hub 2-1:0.0: bad descriptor, ignoring hub [ 707.939059][ T4436] hub: probe of 2-1:0.0 failed with error -5 [ 708.344220][ T4436] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 708.375804][ T34] usb 2-1: Failed to submit usb control message: -71 [ 708.390290][ T34] usb 2-1: unable to send the bmi data to the device: -71 [ 708.397996][ T34] usb 2-1: unable to get target info from device [ 708.405582][ T34] usb 2-1: could not get target info (-71) [ 708.411631][ T34] usb 2-1: could not probe fw (-71) [ 709.452202][ T4281] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 709.462400][ T9573] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 709.573230][ T4636] usb 2-1: USB disconnect, device number 4 [ 710.062824][ T26] audit: type=1326 audit(2000000721.940:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.3.1204" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effdf18e9a9 code=0x0 [ 710.406034][ T9606] loop1: detected capacity change from 0 to 8 [ 710.650113][ T9606] SQUASHFS error: zlib decompression failed, data probably corrupt [ 711.127024][ T9606] SQUASHFS error: Failed to read block 0x9b: -5 [ 711.598881][ T9606] SQUASHFS error: Unable to read metadata cache entry [99] [ 711.606713][ T9606] SQUASHFS error: Unable to read inode 0x127 [ 712.398543][ T9624] No such timeout policy "syz1" [ 715.486764][ T6215] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 715.537990][ T9664] loop1: detected capacity change from 0 to 256 [ 716.753462][ T6215] usb 1-1: Using ep0 maxpacket: 16 [ 716.765163][ T9664] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 716.786417][ T9673] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.802484][ T6215] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.890695][ T6215] usb 1-1: config 0 interface 0 has no altsetting 0 [ 716.971402][ T6215] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 717.086266][ T6215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.283331][ T6215] usb 1-1: Product: syz [ 717.288369][ T6215] usb 1-1: Manufacturer: syz [ 717.293422][ T6215] usb 1-1: SerialNumber: syz [ 718.295768][ T6215] usb 1-1: config 0 descriptor?? [ 718.310526][ T6215] usb 1-1: can't set config #0, error -71 [ 718.317464][ T6215] usb 1-1: USB disconnect, device number 2 [ 721.887390][ T9719] loop3: detected capacity change from 0 to 8 [ 722.057844][ T9719] SQUASHFS error: zlib decompression failed, data probably corrupt [ 722.066301][ T9719] SQUASHFS error: Failed to read block 0x9b: -5 [ 722.073907][ T9719] SQUASHFS error: Unable to read metadata cache entry [99] [ 722.081284][ T9719] SQUASHFS error: Unable to read inode 0x127 [ 727.768964][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1240'. [ 727.998575][ T9769] loop3: detected capacity change from 0 to 8 [ 728.156544][ T9769] SQUASHFS error: zlib decompression failed, data probably corrupt [ 728.165211][ T9769] SQUASHFS error: Failed to read block 0x9b: -5 [ 728.171692][ T9769] SQUASHFS error: Unable to read metadata cache entry [99] [ 728.194773][ T9769] SQUASHFS error: Unable to read inode 0x127 [ 731.884846][ T4342] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 732.359209][ T9823] ================================================================== [ 732.367332][ T9823] BUG: KASAN: use-after-free in rose_transmit_link+0x5b6/0x730 [ 732.374908][ T9823] Read of size 1 at addr ffff88805753e432 by task syz.3.1248/9823 [ 732.382729][ T9823] [ 732.385084][ T9823] CPU: 0 PID: 9823 Comm: syz.3.1248 Not tainted 6.1.146-syzkaller #0 [ 732.393165][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 732.403256][ T9823] Call Trace: [ 732.406543][ T9823] [ 732.409467][ T9823] dump_stack_lvl+0x168/0x22e [ 732.414148][ T9823] ? read_lock_is_recursive+0x10/0x10 [ 732.419519][ T9823] ? show_regs_print_info+0x12/0x12 [ 732.424726][ T9823] ? load_image+0x3b0/0x3b0 [ 732.429245][ T9823] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 732.434621][ T9823] ? __virt_addr_valid+0x188/0x540 [ 732.439731][ T9823] ? __virt_addr_valid+0x465/0x540 [ 732.444851][ T9823] ? rose_transmit_link+0x5b6/0x730 [ 732.450076][ T9823] print_report+0xa8/0x200 [ 732.454510][ T9823] kasan_report+0x10b/0x140 [ 732.459017][ T9823] ? rose_transmit_link+0x5b6/0x730 [ 732.464216][ T9823] rose_transmit_link+0x5b6/0x730 [ 732.469243][ T9823] ? skb_put+0x117/0x210 [ 732.473485][ T9823] rose_write_internal+0x1096/0x1eb0 [ 732.478770][ T9823] ? debug_object_assert_init+0x1ed/0x2f0 [ 732.484485][ T9823] ? rose_validate_nr+0x120/0x120 [ 732.489506][ T9823] ? skb_queue_purge+0x64/0x1b0 [ 732.494363][ T9823] rose_release+0x22a/0x4f0 [ 732.498865][ T9823] sock_close+0xd5/0x240 [ 732.503281][ T9823] ? sock_mmap+0x90/0x90 [ 732.507521][ T9823] __fput+0x22c/0x920 [ 732.511503][ T9823] task_work_run+0x1ca/0x250 [ 732.516131][ T9823] ? task_work_cancel+0x230/0x230 [ 732.521172][ T9823] get_signal+0x11a6/0x1350 [ 732.525685][ T9823] arch_do_signal_or_restart+0xb0/0x1230 [ 732.531317][ T9823] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 732.536685][ T9823] ? wake_bit_function+0x200/0x200 [ 732.541793][ T9823] ? __might_fault+0xa6/0x120 [ 732.546485][ T9823] ? get_sigframe_size+0x10/0x10 [ 732.551414][ T9823] ? __sys_connect+0x239/0x410 [ 732.556183][ T9823] ? exit_to_user_mode_loop+0x3b/0x110 [ 732.561640][ T9823] exit_to_user_mode_loop+0x70/0x110 [ 732.566923][ T9823] exit_to_user_mode_prepare+0xb1/0x140 [ 732.572469][ T9823] syscall_exit_to_user_mode+0x16/0x40 [ 732.577926][ T9823] do_syscall_64+0x58/0xa0 [ 732.582364][ T9823] ? clear_bhb_loop+0x60/0xb0 [ 732.587120][ T9823] ? clear_bhb_loop+0x60/0xb0 [ 732.591788][ T9823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.597684][ T9823] RIP: 0033:0x7effdf18e9a9 [ 732.602194][ T9823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.621799][ T9823] RSP: 002b:00007effdefff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 732.630236][ T9823] RAX: fffffffffffffe00 RBX: 00007effdf3b6160 RCX: 00007effdf18e9a9 [ 732.638204][ T9823] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000d [ 732.646165][ T9823] RBP: 00007effdf210d69 R08: 0000000000000000 R09: 0000000000000000 [ 732.654126][ T9823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.662085][ T9823] R13: 0000000000000000 R14: 00007effdf3b6160 R15: 00007ffdfbbf2ac8 [ 732.670144][ T9823] [ 732.673154][ T9823] [ 732.675463][ T9823] Allocated by task 7375: [ 732.679859][ T9823] kasan_set_track+0x4b/0x70 [ 732.684444][ T9823] __kasan_kmalloc+0x8e/0xa0 [ 732.689025][ T9823] rose_add_node+0x227/0xdb0 [ 732.693606][ T9823] rose_rt_ioctl+0xa4c/0xe90 [ 732.698190][ T9823] rose_ioctl+0x27a/0x790 [ 732.702525][ T9823] sock_do_ioctl+0xd3/0x2f0 [ 732.707040][ T9823] sock_ioctl+0x4ed/0x6e0 [ 732.711364][ T9823] __se_sys_ioctl+0xfa/0x170 [ 732.715944][ T9823] do_syscall_64+0x4c/0xa0 [ 732.720349][ T9823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.726247][ T9823] [ 732.728555][ T9823] Freed by task 9821: [ 732.732519][ T9823] kasan_set_track+0x4b/0x70 [ 732.737122][ T9823] kasan_save_free_info+0x2d/0x50 [ 732.742319][ T9823] ____kasan_slab_free+0x126/0x1e0 [ 732.747457][ T9823] slab_free_freelist_hook+0x131/0x1a0 [ 732.752908][ T9823] __kmem_cache_free+0xb6/0x1f0 [ 732.757753][ T9823] rose_rt_device_down+0x4e2/0x530 [ 732.762862][ T9823] rose_device_event+0x600/0x690 [ 732.767791][ T9823] raw_notifier_call_chain+0xcb/0x160 [ 732.773152][ T9823] __dev_notify_flags+0x178/0x2d0 [ 732.778168][ T9823] dev_change_flags+0xe3/0x1a0 [ 732.782921][ T9823] dev_ifsioc+0x159/0xe90 [ 732.787245][ T9823] dev_ioctl+0x578/0xea0 [ 732.791481][ T9823] sock_do_ioctl+0x222/0x2f0 [ 732.796066][ T9823] sock_ioctl+0x4ed/0x6e0 [ 732.800392][ T9823] __se_sys_ioctl+0xfa/0x170 [ 732.804972][ T9823] do_syscall_64+0x4c/0xa0 [ 732.809375][ T9823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.815261][ T9823] [ 732.817572][ T9823] The buggy address belongs to the object at ffff88805753e400 [ 732.817572][ T9823] which belongs to the cache kmalloc-512 of size 512 [ 732.831621][ T9823] The buggy address is located 50 bytes inside of [ 732.831621][ T9823] 512-byte region [ffff88805753e400, ffff88805753e600) [ 732.844804][ T9823] [ 732.847121][ T9823] The buggy address belongs to the physical page: [ 732.853528][ T9823] page:ffffea00015d4f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805753d800 pfn:0x5753c [ 732.864969][ T9823] head:ffffea00015d4f00 order:2 compound_mapcount:0 compound_pincount:0 [ 732.873289][ T9823] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 732.881275][ T9823] raw: 00fff00000010200 ffffea0000619708 ffffea000158e608 ffff888017441c80 [ 732.889848][ T9823] raw: ffff88805753d800 000000000010000c 00000001ffffffff 0000000000000000 [ 732.898418][ T9823] page dumped because: kasan: bad access detected [ 732.904912][ T9823] page_owner tracks the page as allocated [ 732.910611][ T9823] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4266, tgid 4266 (syz-executor), ts 59217378133, free_ts 12321711368 [ 732.932141][ T9823] post_alloc_hook+0x173/0x1a0 [ 732.936921][ T9823] get_page_from_freelist+0x1a26/0x1ac0 [ 732.942461][ T9823] __alloc_pages+0x1df/0x4e0 [ 732.947043][ T9823] alloc_slab_page+0x5d/0x160 [ 732.951706][ T9823] new_slab+0x87/0x2c0 [ 732.955766][ T9823] ___slab_alloc+0xbc6/0x1220 [ 732.960430][ T9823] __kmem_cache_alloc_node+0x1a0/0x260 [ 732.965885][ T9823] __kmalloc_node_track_caller+0x9e/0x230 [ 732.971599][ T9823] __alloc_skb+0x22a/0x7e0 [ 732.976004][ T9823] alloc_uevent_skb+0x7d/0x230 [ 732.980759][ T9823] kobject_uevent_net_broadcast+0x17e/0x530 [ 732.986644][ T9823] kobject_uevent_env+0x54c/0x8a0 [ 732.991662][ T9823] net_rx_queue_update_kobjects+0x23f/0x4a0 [ 732.997546][ T9823] netdev_register_kobject+0x223/0x310 [ 733.002999][ T9823] register_netdevice+0x12b9/0x1aa0 [ 733.008186][ T9823] veth_newlink+0x592/0xbe0 [ 733.012689][ T9823] page last free stack trace: [ 733.017369][ T9823] free_unref_page_prepare+0x8b4/0x9a0 [ 733.022849][ T9823] free_unref_page+0x2e/0x3f0 [ 733.027522][ T9823] free_contig_range+0x9d/0x150 [ 733.032364][ T9823] destroy_args+0xef/0x8bf [ 733.036772][ T9823] debug_vm_pgtable+0x32a/0x37e [ 733.041614][ T9823] do_one_initcall+0x214/0x7a0 [ 733.046368][ T9823] do_initcall_level+0x137/0x1e4 [ 733.051300][ T9823] do_initcalls+0x4b/0x8a [ 733.055627][ T9823] kernel_init_freeable+0x3fa/0x5ac [ 733.060935][ T9823] kernel_init+0x19/0x1b0 [ 733.065288][ T9823] ret_from_fork+0x1f/0x30 [ 733.069701][ T9823] [ 733.072012][ T9823] Memory state around the buggy address: [ 733.077633][ T9823] ffff88805753e300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 733.085689][ T9823] ffff88805753e380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 733.093741][ T9823] >ffff88805753e400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 733.101791][ T9823] ^ [ 733.107410][ T9823] ffff88805753e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 733.115458][ T9823] ffff88805753e500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 733.123505][ T9823] ================================================================== [ 733.316816][ T9823] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 733.324228][ T9823] CPU: 1 PID: 9823 Comm: syz.3.1248 Not tainted 6.1.146-syzkaller #0 [ 733.332328][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 733.342452][ T9823] Call Trace: [ 733.345717][ T9823] [ 733.348633][ T9823] dump_stack_lvl+0x168/0x22e [ 733.353297][ T9823] ? memcpy+0x3c/0x60 [ 733.357266][ T9823] ? show_regs_print_info+0x12/0x12 [ 733.362923][ T9823] ? load_image+0x3b0/0x3b0 [ 733.367436][ T9823] panic+0x2c9/0x710 [ 733.371317][ T9823] ? bpf_jit_dump+0xd0/0xd0 [ 733.375976][ T9823] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 733.381919][ T9823] ? _raw_spin_unlock+0x40/0x40 [ 733.386757][ T9823] check_panic_on_warn+0x80/0xa0 [ 733.391681][ T9823] ? rose_transmit_link+0x5b6/0x730 [ 733.396990][ T9823] end_report+0x66/0x110 [ 733.401248][ T9823] kasan_report+0x118/0x140 [ 733.405768][ T9823] ? rose_transmit_link+0x5b6/0x730 [ 733.410952][ T9823] rose_transmit_link+0x5b6/0x730 [ 733.415960][ T9823] ? skb_put+0x117/0x210 [ 733.420185][ T9823] rose_write_internal+0x1096/0x1eb0 [ 733.425457][ T9823] ? debug_object_assert_init+0x1ed/0x2f0 [ 733.431159][ T9823] ? rose_validate_nr+0x120/0x120 [ 733.436203][ T9823] ? skb_queue_purge+0x64/0x1b0 [ 733.441041][ T9823] rose_release+0x22a/0x4f0 [ 733.445539][ T9823] sock_close+0xd5/0x240 [ 733.449868][ T9823] ? sock_mmap+0x90/0x90 [ 733.454128][ T9823] __fput+0x22c/0x920 [ 733.458112][ T9823] task_work_run+0x1ca/0x250 [ 733.462689][ T9823] ? task_work_cancel+0x230/0x230 [ 733.467704][ T9823] get_signal+0x11a6/0x1350 [ 733.472198][ T9823] arch_do_signal_or_restart+0xb0/0x1230 [ 733.477817][ T9823] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 733.483175][ T9823] ? wake_bit_function+0x200/0x200 [ 733.488301][ T9823] ? __might_fault+0xa6/0x120 [ 733.493051][ T9823] ? get_sigframe_size+0x10/0x10 [ 733.497971][ T9823] ? __sys_connect+0x239/0x410 [ 733.502717][ T9823] ? exit_to_user_mode_loop+0x3b/0x110 [ 733.508159][ T9823] exit_to_user_mode_loop+0x70/0x110 [ 733.513428][ T9823] exit_to_user_mode_prepare+0xb1/0x140 [ 733.518965][ T9823] syscall_exit_to_user_mode+0x16/0x40 [ 733.524407][ T9823] do_syscall_64+0x58/0xa0 [ 733.528804][ T9823] ? clear_bhb_loop+0x60/0xb0 [ 733.533459][ T9823] ? clear_bhb_loop+0x60/0xb0 [ 733.538116][ T9823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.544083][ T9823] RIP: 0033:0x7effdf18e9a9 [ 733.548480][ T9823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.568157][ T9823] RSP: 002b:00007effdefff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 733.576554][ T9823] RAX: fffffffffffffe00 RBX: 00007effdf3b6160 RCX: 00007effdf18e9a9 [ 733.584530][ T9823] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000d [ 733.592483][ T9823] RBP: 00007effdf210d69 R08: 0000000000000000 R09: 0000000000000000 [ 733.600438][ T9823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.608395][ T9823] R13: 0000000000000000 R14: 00007effdf3b6160 R15: 00007ffdfbbf2ac8 [ 733.616524][ T9823] [ 733.619803][ T9823] Kernel Offset: disabled [ 733.624114][ T9823] Rebooting in 86400 seconds..