last executing test programs: 19m44.373312404s ago: executing program 32 (id=311): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2], 0x3c}}, 0x0) close(r2) 17m41.068701001s ago: executing program 33 (id=1112): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x4}) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}}) 17m40.714962317s ago: executing program 34 (id=1114): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, 0x0, 0x160) 15m48.47410362s ago: executing program 35 (id=2020): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0xfffffce6}}, 0x0) 14m25.337907316s ago: executing program 36 (id=2661): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) shutdown(r0, 0x0) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) 14m16.234423991s ago: executing program 37 (id=2728): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000006000000010000007f00000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 12m40.304683362s ago: executing program 38 (id=3548): sched_setaffinity(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, &(0x7f0000000240)=0xd, 0x4) 12m7.583337438s ago: executing program 1 (id=3831): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000005c0), 0x13f, 0x6}}, 0x20) ioctl$I2C_TENBIT(r0, 0x704, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x23b) write(r1, 0x0, 0x0) 11m59.340633703s ago: executing program 1 (id=3900): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x1000, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r1, 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 11m59.107815625s ago: executing program 1 (id=3904): socket$alg(0x26, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 11m58.872162718s ago: executing program 1 (id=3907): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1) 11m58.708349593s ago: executing program 1 (id=3909): r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x24, 0x0, 0x2}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 11m58.160231177s ago: executing program 1 (id=3913): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0x0) close(r1) 11m57.519599393s ago: executing program 39 (id=3913): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0x0) close(r1) 10m11.127933407s ago: executing program 7 (id=4817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r1) 10m10.945812755s ago: executing program 7 (id=4820): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x100004c, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = fanotify_init(0x8, 0x40000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fanotify_mark(r0, 0x1, 0x8100011, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8000c62) 10m9.7757223s ago: executing program 7 (id=4837): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 10m9.403214376s ago: executing program 7 (id=4840): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b00000000002460d9fc721d25d48c7dfc48fb4b24cd072245e87480c5e1996229bc1aed6f0d6b547f"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'lo\x00'}}, 0x1e) 10m7.628192602s ago: executing program 7 (id=4860): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffdf5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 10m6.756007554s ago: executing program 7 (id=4867): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r3, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) 10m6.267484156s ago: executing program 40 (id=4867): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r3, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) 7m30.376054197s ago: executing program 6 (id=6332): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m29.982309205s ago: executing program 6 (id=6335): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20) r1 = creat(&(0x7f00000006c0)='./file0\x00', 0x50) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 7m29.351529858s ago: executing program 6 (id=6340): socket$netlink(0x10, 0x3, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x3) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/166, 0xa6}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7m27.484285168s ago: executing program 6 (id=6351): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 7m26.288047833s ago: executing program 6 (id=6361): unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r0, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3) 7m25.67512571s ago: executing program 6 (id=6378): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 7m25.100008088s ago: executing program 41 (id=6378): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 3m49.721748564s ago: executing program 9 (id=7953): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') exit(0x0) read$alg(r2, &(0x7f00000001c0)=""/249, 0xf9) 3m48.55672427s ago: executing program 9 (id=7963): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 3m44.499238921s ago: executing program 9 (id=7985): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m44.160953859s ago: executing program 9 (id=7986): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) write$uinput_user_dev(r0, &(0x7f0000001d00)={'syz1\x00', {0x3, 0x6, 0x5}, 0x49, [0x3, 0x0, 0x4, 0x1, 0x1, 0x5, 0xf3, 0x0, 0x8, 0x11, 0x7, 0x3, 0xfffffffe, 0x101, 0x400, 0x3, 0x6, 0x3, 0xa, 0x1, 0x79, 0xfffffffe, 0x8, 0x100, 0x8000, 0xfff, 0x400, 0x0, 0x20003, 0x404, 0x9, 0x40003, 0x8, 0xffffffff, 0x4, 0x0, 0x1, 0x7, 0x0, 0x0, 0x1192, 0x8, 0x5, 0x8, 0x5, 0x2, 0x10001, 0x3, 0x2b2, 0x4, 0xfbf, 0x1, 0x6, 0x4, 0xedbe, 0x2, 0x2, 0x8, 0xa1, 0xfffffff8, 0x6, 0x80, 0x2, 0x81], [0x1, 0x80000001, 0x563, 0x2, 0x0, 0x0, 0x4, 0x854f000, 0x2, 0x93, 0xfffffff6, 0x2, 0x8b, 0x8ab, 0x3, 0x2a6d2895, 0x5, 0x13, 0x100, 0x1, 0x6, 0x200, 0x5, 0x7, 0x4a63, 0x1, 0x9, 0x8, 0x1000, 0x9, 0x4, 0xf, 0x7, 0x401, 0x4, 0x8, 0x8000, 0x5, 0x4, 0x7ff, 0x8001, 0xdfcf, 0xc1f40800, 0x9, 0x1, 0xfffffffe, 0x6, 0x0, 0x9, 0xfff, 0x0, 0x0, 0xfffff2a1, 0x9, 0x3cb, 0x5bda, 0x4, 0xde7e, 0xfff, 0x7, 0x5, 0x4000524, 0x8001, 0x1], [0x6, 0x4, 0x7, 0xe000, 0x7, 0x5aa, 0x124, 0xc, 0x1, 0x2, 0x6, 0xfffffff8, 0x200009, 0x300000, 0x80000001, 0x4, 0x8008, 0x4, 0xd, 0x9, 0x8001, 0x9, 0x7, 0x4, 0x7, 0x1, 0x6, 0x2, 0x410, 0x20400, 0xff, 0x166, 0x7, 0xc8f, 0x3, 0x8, 0x3, 0x1, 0x1000, 0x80, 0x9, 0x8, 0x1000, 0x9, 0x8000006, 0xfeb, 0x5, 0x8, 0x3ff, 0x3a, 0xa18858f, 0x9, 0x1, 0x9, 0x0, 0x7, 0x4, 0x10, 0x4, 0x3, 0x3, 0x40, 0x5ff, 0x3a], [0xaeaf, 0x6, 0x2, 0x1007ff, 0x3ff, 0x800, 0x40, 0x6, 0x1, 0x5, 0x2, 0xfffffffe, 0x8a4, 0x5, 0xdd, 0xb5, 0x800002, 0x6, 0x2, 0xcb32, 0x3, 0xf018, 0x9, 0x0, 0xda19, 0x80000001, 0x10001, 0x7ff, 0x10001, 0x1, 0x5, 0xcc1, 0x8, 0x1, 0x2, 0x6, 0x3, 0x0, 0x0, 0xb7b, 0xffffff4a, 0x4, 0x7886, 0xbf8d, 0x9, 0x46da, 0x1, 0x40, 0x9, 0x8, 0x10000, 0x1, 0x8, 0x9, 0x770, 0x0, 0x10001, 0x3ff, 0x5, 0x7, 0x8, 0x7d1, 0x1, 0x9]}, 0x45c) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) 3m43.084137319s ago: executing program 9 (id=7996): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r1, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 3m41.983372218s ago: executing program 9 (id=8005): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@ipv6_newnexthop={0x28, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}}, 0x200440c0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 3m41.174808583s ago: executing program 42 (id=8005): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@ipv6_newnexthop={0x28, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}}, 0x200440c0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 11.718720953s ago: executing program 5 (id=9256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x21, r2, 0x80000001, 0x4) 11.697386211s ago: executing program 8 (id=9257): write$nci(0xffffffffffffffff, 0x0, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x11}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) 10.240634433s ago: executing program 5 (id=9261): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)=0x5) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 9.789693546s ago: executing program 8 (id=9263): r0 = gettid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80000, 0x5) 7.912454067s ago: executing program 8 (id=9264): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 7.912132359s ago: executing program 3 (id=9265): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) 7.499455947s ago: executing program 3 (id=9266): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1}, 0x18, 0x0) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x5bb200, 0x0) landlock_restrict_self(r0, 0x4) landlock_restrict_self(r0, 0x2) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x0, 0x0, 0x4) 6.738139786s ago: executing program 3 (id=9269): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 6.510937782s ago: executing program 4 (id=9271): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 6.227766425s ago: executing program 4 (id=9273): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000006280)='./file1\x00', 0x1a18814, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0xfffffff0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) 5.990015139s ago: executing program 2 (id=9274): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0, 0x0, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r0, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.989668794s ago: executing program 3 (id=9275): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) 5.813049273s ago: executing program 5 (id=9276): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = fsopen(&(0x7f0000001700)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 5.796800325s ago: executing program 8 (id=9277): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.220217657s ago: executing program 0 (id=9279): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 5.218780171s ago: executing program 5 (id=9280): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) dup3(r1, r0, 0x80000) 5.016522017s ago: executing program 2 (id=9281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x8a, 0x31, 0x7c, 0x40, 0x545, 0x800d, 0x30a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x8e, 0xd1}}]}}]}}, 0x0) shutdown(r0, 0x1) 4.990245086s ago: executing program 4 (id=9282): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 4.936685244s ago: executing program 8 (id=9283): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\x01\x00\x00\x00;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xff\xfe\xff\xff\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\x948P\xe4\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x9) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) 4.717790181s ago: executing program 0 (id=9284): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x0, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) 3.708178963s ago: executing program 4 (id=9285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 3.707703451s ago: executing program 0 (id=9286): r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 3.493779948s ago: executing program 5 (id=9287): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x2, 0x1, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaa"], 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3.427061325s ago: executing program 2 (id=9288): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bce, 0x80, 0xffffffff, 0x40001c8}, &(0x7f0000001300), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) 3.104189125s ago: executing program 0 (id=9289): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x7ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d", 0x8e}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}], 0x1, 0x0) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)=""/141, 0x8d}], 0x1}, 0x40) 2.636347987s ago: executing program 2 (id=9290): r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000400)={0x1, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket(0xa, 0x1, 0x84) r2 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) r3 = dup3(r2, r0, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000000)={0x1, {{0x2, 0x4e20, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e21, @broadcast}}]}, 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) 2.292079224s ago: executing program 3 (id=9291): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) sendfile(r2, r3, 0x0, 0x20fffe82) sendfile(r0, r1, 0x0, 0x20fffe82) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) 2.227723457s ago: executing program 0 (id=9292): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0, 0x0, 0x1}, {0x0}, {0x0, 0xfffffffffffffcc3}, {&(0x7f0000000500)="a66a2c41a77e88e10e1e7a632c933460e1e39b64f85853a1b50959a19b9bfa4bdb9edf0cb9334de8d0a0d945bc7e806a3684327bb6bfe184ea7471941f81cb2f69a96add23d247cd50a6b72712637144aa37aae1a70d52a9c6ab2ff527023db9ac14ab59baf126dd680c1bb569e2c7b78c8cfbc524364fa83e04c97cef6a83bcb9c1d473011742c33dd48c66e2edbeae2e6312f8b10d2798a8ab9a86254c"}, {&(0x7f0000000880)="341a15565eabc4dfb99fefb14d88d2815b7cae3a45d4ffd2cd441916f3ad08539d460d97ff8981daaf273d7a2f9da1c4719030a5a07ad8a902861407aeefcf2712811d6807c0025ea6fe7831ea280070c996e3ee01f4984c1c111f135ea25f46efd781d3c61f9d8426eb3757be14bac54cc5ed5c08b9106783b28db504483fdd643c3368ae76ebe7608dc031e34e1ade8fecd53bfacfb4a9a8d0672b2271c7ef4075ad9fcd7caf5f4b9ab10a7c3873f9fb69fb611b59b9d97c47d35480570c44183db824023b61ec602752f432a7c2cada8d", 0x0, 0x3}]}, 0x4}, 0x1) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd=r3, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b000000000000001c000000000004"], 0x48) io_uring_enter(r0, 0x26c3, 0xdfffeffb, 0x4c, 0x0, 0x0) 860.851541ms ago: executing program 0 (id=9293): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x2000000000008, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7ffff000) 860.452542ms ago: executing program 8 (id=9294): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0, 0x0, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r0, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 860.268136ms ago: executing program 5 (id=9295): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) 859.65841ms ago: executing program 2 (id=9305): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x18) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}], 0x1}, 0x0) 858.769485ms ago: executing program 4 (id=9296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4) 253.590868ms ago: executing program 2 (id=9297): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0, 0x7fdfee00}, {&(0x7f0000000140)="d9", 0x98}], 0x2, 0x0, 0x0, 0x3) 153.776109ms ago: executing program 4 (id=9298): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000001c0)={0x0, 0x8, 0x7, 0x2, "5242191ac505daf81018ae41a51e28f4f97ebc59e5c05bd54c95819efb28917e"}) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 0s ago: executing program 3 (id=9299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket(0x14, 0x2, 0x4) ioctl$SIOCX25GDTEFACILITIES(r2, 0x401061f4, 0x0) kernel console output (not intermixed with test programs): lt_attr+0x53/0x1f0 [ 1030.941640][T22359] f2fs_write_end_io+0x958/0xcf0 [ 1030.941703][T22359] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1030.941766][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.941827][T22359] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1030.941882][T22359] bio_endio+0x713/0x860 [ 1030.941947][T22359] submit_bio_noacct+0x306/0x1ed0 [ 1030.942015][T22359] __submit_merged_bio+0x33c/0x770 [ 1030.942079][T22359] __submit_merged_write_cond+0x319/0x3f0 [ 1030.942154][T22359] f2fs_write_cache_pages+0x2067/0x2570 [ 1030.942255][T22359] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1030.942319][T22359] ? unwind_next_frame+0x3fe/0x20a0 [ 1030.942364][T22359] ? exit_to_user_mode_loop+0xeb/0x110 [ 1030.942413][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.942500][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.942633][T22359] ? _raw_spin_unlock+0x28/0x50 [ 1030.942681][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.942740][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.942797][T22359] f2fs_write_data_pages+0x4ad/0xd90 [ 1030.942872][T22359] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1030.942933][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.943000][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.943055][T22359] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1030.943123][T22359] do_writepages+0x27a/0x600 [ 1030.943183][T22359] ? __pfx_do_writepages+0x10/0x10 [ 1030.943232][T22359] ? do_raw_spin_unlock+0x172/0x230 [ 1030.943278][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.943325][T22359] ? _raw_spin_unlock+0x28/0x50 [ 1030.943379][T22359] filemap_fdatawrite_wbc+0x104/0x160 [ 1030.943436][T22359] __filemap_fdatawrite_range+0xb9/0x100 [ 1030.943501][T22359] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1030.943639][T22359] ? find_held_lock+0x2b/0x80 [ 1030.943691][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.943740][T22359] ? do_raw_spin_unlock+0x172/0x230 [ 1030.943784][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.943840][T22359] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1030.943930][T22359] block_operations+0x2b0/0xfe0 [ 1030.943996][T22359] ? __pfx_stack_trace_save+0x10/0x10 [ 1030.944056][T22359] ? __lock_acquire+0xb97/0x1ce0 [ 1030.944122][T22359] ? __pfx_block_operations+0x10/0x10 [ 1030.944188][T22359] ? kasan_save_stack+0x42/0x60 [ 1030.944320][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.944369][T22359] ? down_write+0x14d/0x200 [ 1030.944428][T22359] ? __pfx_down_write+0x10/0x10 [ 1030.944492][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.944541][T22359] ? rcu_is_watching+0x12/0xc0 [ 1030.944599][T22359] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1030.944646][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.944693][T22359] ? kfree+0x2b4/0x4d0 [ 1030.944739][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.944786][T22359] ? lockdep_hardirqs_on+0x7c/0x110 [ 1030.944838][T22359] ? f2fs_stop_gc_thread+0x79/0xd0 [ 1030.944882][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.944945][T22359] kill_f2fs_super+0x3c2/0x470 [ 1030.944991][T22359] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1030.945027][T22359] ? lockdep_hardirqs_on+0x7c/0x110 [ 1030.945107][T22359] deactivate_locked_super+0xc1/0x1a0 [ 1030.945170][T22359] deactivate_super+0xde/0x100 [ 1030.945232][T22359] cleanup_mnt+0x225/0x450 [ 1030.945300][T22359] task_work_run+0x150/0x240 [ 1030.945347][T22359] ? __pfx_task_work_run+0x10/0x10 [ 1030.945388][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.945440][T22359] ? __pfx___x64_sys_umount+0x10/0x10 [ 1030.945493][T22359] exit_to_user_mode_loop+0xeb/0x110 [ 1030.945538][T22359] do_syscall_64+0x3f6/0x4c0 [ 1030.945601][T22359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.945641][T22359] RIP: 0033:0x7fea5af8ff17 [ 1030.945673][T22359] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1030.945711][T22359] RSP: 002b:00007ffeaf773cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1030.945749][T22359] RAX: 0000000000000000 RBX: 00007fea5b011c05 RCX: 00007fea5af8ff17 [ 1030.945775][T22359] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeaf773d80 [ 1030.945800][T22359] RBP: 00007ffeaf773d80 R08: 0000000000000000 R09: 0000000000000000 [ 1030.945825][T22359] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeaf774e10 [ 1030.945850][T22359] R13: 00007fea5b011c05 R14: 00000000000fbab8 R15: 00007ffeaf774e50 [ 1030.945908][T22359] [ 1031.497487][T22359] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1031.540995][T22359] CPU: 0 UID: 0 PID: 22359 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1031.541051][T22359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1031.541074][T22359] Call Trace: [ 1031.541087][T22359] [ 1031.541102][T22359] dump_stack_lvl+0x16c/0x1f0 [ 1031.541164][T22359] f2fs_handle_critical_error+0x624/0x9f0 [ 1031.541217][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1031.541265][T22359] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1031.541319][T22359] f2fs_write_end_io+0x958/0xcf0 [ 1031.541378][T22359] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1031.541439][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1031.541497][T22359] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1031.541550][T22359] bio_endio+0x713/0x860 [ 1031.541612][T22359] submit_bio_noacct+0x306/0x1ed0 [ 1031.541669][T22359] __submit_merged_bio+0x33c/0x770 [ 1031.541730][T22359] __submit_merged_write_cond+0x319/0x3f0 [ 1031.541798][T22359] f2fs_write_cache_pages+0x2067/0x2570 [ 1031.541892][T22359] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1031.541961][T22359] ? unwind_next_frame+0x3fe/0x20a0 [ 1031.542007][T22359] ? exit_to_user_mode_loop+0xeb/0x110 [ 1031.542053][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1031.542133][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1031.542250][T22359] ? _raw_spin_unlock+0x28/0x50 [ 1031.542297][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1031.542354][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1031.542408][T22359] f2fs_write_data_pages+0x4ad/0xd90 [ 1031.542480][T22359] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1031.542540][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1031.542599][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1031.542652][T22359] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1031.542717][T22359] do_writepages+0x27a/0x600 [ 1031.542778][T22359] ? __pfx_do_writepages+0x10/0x10 [ 1031.542825][T22359] ? do_raw_spin_unlock+0x172/0x230 [ 1031.542871][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1031.542917][T22359] ? _raw_spin_unlock+0x28/0x50 [ 1031.542976][T22359] filemap_fdatawrite_wbc+0x104/0x160 [ 1031.543034][T22359] __filemap_fdatawrite_range+0xb9/0x100 [ 1031.543099][T22359] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1031.543226][T22359] ? find_held_lock+0x2b/0x80 [ 1031.543277][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1031.543326][T22359] ? do_raw_spin_unlock+0x172/0x230 [ 1031.543369][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1031.543424][T22359] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1031.543512][T22359] block_operations+0x2b0/0xfe0 [ 1031.543575][T22359] ? __pfx_stack_trace_save+0x10/0x10 [ 1031.543634][T22359] ? __lock_acquire+0xb97/0x1ce0 [ 1031.543700][T22359] ? __pfx_block_operations+0x10/0x10 [ 1031.543764][T22359] ? kasan_save_stack+0x42/0x60 [ 1031.543885][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1031.543930][T22359] ? down_write+0x14d/0x200 [ 1031.544001][T22359] ? __pfx_down_write+0x10/0x10 [ 1031.544064][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1031.544110][T22359] ? rcu_is_watching+0x12/0xc0 [ 1031.544168][T22359] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1031.544213][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1031.544260][T22359] ? kfree+0x2b4/0x4d0 [ 1031.544307][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1031.544354][T22359] ? lockdep_hardirqs_on+0x7c/0x110 [ 1031.544405][T22359] ? f2fs_stop_gc_thread+0x79/0xd0 [ 1031.544448][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1031.544508][T22359] kill_f2fs_super+0x3c2/0x470 [ 1031.544547][T22359] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1031.544583][T22359] ? lockdep_hardirqs_on+0x7c/0x110 [ 1031.544656][T22359] deactivate_locked_super+0xc1/0x1a0 [ 1031.544720][T22359] deactivate_super+0xde/0x100 [ 1031.544781][T22359] cleanup_mnt+0x225/0x450 [ 1031.544847][T22359] task_work_run+0x150/0x240 [ 1031.544895][T22359] ? __pfx_task_work_run+0x10/0x10 [ 1031.544935][T22359] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1031.544992][T22359] ? __pfx___x64_sys_umount+0x10/0x10 [ 1031.545042][T22359] exit_to_user_mode_loop+0xeb/0x110 [ 1031.545084][T22359] do_syscall_64+0x3f6/0x4c0 [ 1031.545146][T22359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.545185][T22359] RIP: 0033:0x7fea5af8ff17 [ 1031.545216][T22359] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1031.545254][T22359] RSP: 002b:00007ffeaf773cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1031.545292][T22359] RAX: 0000000000000000 RBX: 00007fea5b011c05 RCX: 00007fea5af8ff17 [ 1031.545318][T22359] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeaf773d80 [ 1031.545343][T22359] RBP: 00007ffeaf773d80 R08: 0000000000000000 R09: 0000000000000000 [ 1031.545367][T22359] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeaf774e10 [ 1031.545392][T22359] R13: 00007fea5b011c05 R14: 00000000000fbab8 R15: 00007ffeaf774e50 [ 1031.545445][T22359] [ 1031.545488][T22359] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1032.193451][T24986] Invalid ELF header magic: != ELF [ 1032.194709][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1032.194734][ T30] audit: type=1326 audit(1756718134.005:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.2.7396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2aef58ebe9 code=0x0 [ 1032.440705][ T976] uclogic 0003:256C:006D.0047: interface is invalid, ignoring [ 1032.734485][ T5997] usb 6-1: USB disconnect, device number 49 [ 1033.035059][T25006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7401'. [ 1033.128427][T25006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7401'. [ 1033.210088][T25008] ref_ctr_offset mismatch. inode: 0x1020 offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 1033.486926][T25011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7403'. [ 1033.552426][T25011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7403'. [ 1034.748726][T25036] 9pnet_fd: Insufficient options for proto=fd [ 1036.625157][T25064] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1036.662596][ T30] audit: type=1326 audit(1756718138.477:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25063 comm="syz.8.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8558ebe9 code=0x7ffc0000 [ 1036.697475][T25067] loop9: detected capacity change from 0 to 1024 [ 1036.704914][T25067] EXT4-fs: Ignoring removed mblk_io_submit option [ 1036.766828][ T30] audit: type=1326 audit(1756718138.477:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25063 comm="syz.8.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8558ebe9 code=0x7ffc0000 [ 1036.833476][ T30] audit: type=1326 audit(1756718138.527:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25063 comm="syz.8.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde8558ebe9 code=0x7ffc0000 [ 1036.946134][T25067] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1036.972089][ T30] audit: type=1326 audit(1756718138.527:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25063 comm="syz.8.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8558ebe9 code=0x7ffc0000 [ 1037.017724][ T30] audit: type=1326 audit(1756718138.527:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25063 comm="syz.8.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8558ebe9 code=0x7ffc0000 [ 1037.121513][ T30] audit: type=1326 audit(1756718138.547:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25063 comm="syz.8.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fde8558ebe9 code=0x7ffc0000 [ 1037.205041][ T30] audit: type=1326 audit(1756718138.547:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25063 comm="syz.8.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8558ebe9 code=0x7ffc0000 [ 1037.300424][ T30] audit: type=1326 audit(1756718138.547:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25063 comm="syz.8.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8558ebe9 code=0x7ffc0000 [ 1037.573428][T22359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.625554][ T30] audit: type=1326 audit(1756718138.567:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25063 comm="syz.8.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fde8558ebe9 code=0x7ffc0000 [ 1037.691710][ T30] audit: type=1326 audit(1756718138.567:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25063 comm="syz.8.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8558ebe9 code=0x7ffc0000 [ 1037.820644][ T30] audit: type=1326 audit(1756718138.577:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25063 comm="syz.8.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8558ebe9 code=0x7ffc0000 [ 1037.924934][ T30] audit: type=1326 audit(1756718138.577:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25063 comm="syz.8.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fde8558ebe9 code=0x7ffc0000 [ 1037.987634][T25092] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 1038.060796][ T30] audit: type=1326 audit(1756718138.577:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25063 comm="syz.8.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8558ebe9 code=0x7ffc0000 [ 1038.149240][ T30] audit: type=1326 audit(1756718138.577:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25063 comm="syz.8.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8558ebe9 code=0x7ffc0000 [ 1038.252645][ T30] audit: type=1326 audit(1756718138.577:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25063 comm="syz.8.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fde8558ebe9 code=0x7ffc0000 [ 1038.331734][ T30] audit: type=1326 audit(1756718138.577:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25063 comm="syz.8.7427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8558ebe9 code=0x7ffc0000 [ 1040.507402][T25104] loop9: detected capacity change from 0 to 32768 [ 1040.549354][T25104] XFS: ikeep mount option is deprecated. [ 1040.580908][T25104] XFS: ikeep mount option is deprecated. [ 1040.609669][T25104] XFS: noikeep mount option is deprecated. [ 1040.689328][T25104] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1040.883018][T25104] XFS (loop9): Ending clean mount [ 1041.381326][T22359] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1041.602549][T25155] netlink: 'syz.4.7452': attribute type 4 has an invalid length. [ 1042.874347][T25169] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1042.893164][ T5854] IPVS: starting estimator thread 0... [ 1043.012894][T25173] IPVS: using max 21 ests per chain, 50400 per kthread [ 1043.981987][T25204] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 1044.897507][T25227] overlayfs: failed to clone lowerpath [ 1044.958801][T25232] overlayfs: failed to clone upperpath [ 1045.692018][T25247] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7491'. [ 1045.761469][T25247] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7491'. [ 1046.354115][T25263] overlayfs: failed to clone upperpath [ 1046.505765][T25268] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7501'. [ 1046.583497][T25268] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7501'. [ 1046.594507][ C1] hrtimer: interrupt took 16738 ns [ 1047.486037][T25299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7510'. [ 1047.762343][T25299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7510'. [ 1048.061639][T25316] netlink: 156 bytes leftover after parsing attributes in process `syz.8.7516'. [ 1048.107603][T25316] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7516'. [ 1048.321984][ C0] vkms_vblank_simulate: vblank timer overrun [ 1048.465773][T25323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7522'. [ 1048.532348][T25323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7522'. [ 1048.948461][T13512] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.292889][T13512] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.652116][T13512] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.166589][T13512] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.283603][T25353] netlink: 'syz.5.7533': attribute type 10 has an invalid length. [ 1050.453549][T25353] veth0_vlan: left promiscuous mode [ 1050.499909][T25353] veth0_vlan: entered promiscuous mode [ 1050.617175][T25353] team0: Device veth0_vlan failed to register rx_handler [ 1050.683334][ T5179] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1050.693958][ T5179] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1050.703070][ T5179] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1050.716948][ T5179] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1050.733550][ T5179] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1051.474538][T13512] bridge_slave_1: left allmulticast mode [ 1051.493365][T13512] bridge_slave_1: left promiscuous mode [ 1051.509071][T13512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.536621][T13512] bridge_slave_0: left allmulticast mode [ 1051.542882][T13512] bridge_slave_0: left promiscuous mode [ 1051.548818][T13512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.813146][ T5870] Bluetooth: hci5: command tx timeout [ 1052.833830][T13512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.852820][T13512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.873487][T13512] bond0 (unregistering): Released all slaves [ 1052.942919][T25388] __nla_validate_parse: 1 callbacks suppressed [ 1052.942946][T25388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7539'. [ 1053.117285][T13512] IPVS: stopping master sync thread 25204 ... [ 1053.207496][T25418] overlayfs: failed to clone upperpath [ 1053.258515][T25388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7539'. [ 1053.338310][T25424] fuse: Bad value for 'fd' [ 1053.991148][T25364] chnl_net:caif_netlink_parms(): no params data found [ 1054.087931][T25440] netlink: 'syz.4.7559': attribute type 10 has an invalid length. [ 1054.173787][T13512] hsr_slave_0: left promiscuous mode [ 1054.182440][T25444] overlayfs: failed to clone upperpath [ 1054.193353][T13512] hsr_slave_1: left promiscuous mode [ 1054.201774][T13512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.240242][T13512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.290582][T13512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.319444][T13512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.438755][T13512] veth1_macvtap: left promiscuous mode [ 1054.446674][T13512] veth0_macvtap: left promiscuous mode [ 1054.455897][T13512] veth1_vlan: left promiscuous mode [ 1054.887472][ T5870] Bluetooth: hci5: command tx timeout [ 1055.014395][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 1055.025323][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 1055.073276][T25453] ceph: No mds server is up or the cluster is laggy [ 1055.107601][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 1055.142840][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 1056.971791][ T5870] Bluetooth: hci5: command tx timeout [ 1057.190680][T13512] team0 (unregistering): Port device team_slave_1 removed [ 1057.333268][T13512] team0 (unregistering): Port device team_slave_0 removed [ 1058.451628][T25440] veth0_vlan: left promiscuous mode [ 1058.471505][T25440] veth0_vlan: entered promiscuous mode [ 1058.503836][T25440] team0: Device veth0_vlan failed to register rx_handler [ 1059.044108][T25364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.051449][ T5870] Bluetooth: hci5: command tx timeout [ 1059.115562][T25364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.144625][T25364] bridge_slave_0: entered allmulticast mode [ 1059.163156][T25364] bridge_slave_0: entered promiscuous mode [ 1059.203501][T25364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.245140][T25364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.277110][T25364] bridge_slave_1: entered allmulticast mode [ 1059.301123][T25364] bridge_slave_1: entered promiscuous mode [ 1059.845854][T25490] bond2: left promiscuous mode [ 1059.850966][T25490] bridge0: port 3(bond2) entered disabled state [ 1059.908214][T25490] bridge_slave_1: left allmulticast mode [ 1059.914170][T25490] bridge_slave_1: left promiscuous mode [ 1059.951366][T25490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.970241][T25490] bridge_slave_0: left allmulticast mode [ 1059.981870][T25490] bridge_slave_0: left promiscuous mode [ 1059.991235][T25490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.256044][T25490] bond0: (slave bridge0): Releasing backup interface [ 1060.467404][T25497] team0: Port device dummy0 removed [ 1060.484836][T25497] batman_adv: batadv0: Adding interface: dummy0 [ 1060.501406][T25497] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.595917][T25497] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1060.682471][T25508] netlink: 'syz.0.7582': attribute type 10 has an invalid length. [ 1060.709403][T25364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.752367][T25364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.107128][T13512] IPVS: stop unused estimator thread 0... [ 1061.159858][T25364] team0: Port device team_slave_0 added [ 1061.178174][T25364] team0: Port device team_slave_1 added [ 1061.247721][T25527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7587'. [ 1061.332596][T25364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.370052][T25364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.430373][T25364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.480853][T25364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.502205][T25364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.535316][T25364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.810623][T25364] hsr_slave_0: entered promiscuous mode [ 1061.836312][T25364] hsr_slave_1: entered promiscuous mode [ 1061.859352][T25364] debugfs: 'hsr0' already exists in 'hsr' [ 1061.895220][T25364] Cannot create hsr debugfs directory [ 1063.002649][T25557] overlayfs: failed to clone upperpath [ 1063.043887][T25557] overlayfs: failed to clone upperpath [ 1063.337865][T25562] netlink: 'syz.4.7602': attribute type 10 has an invalid length. [ 1063.401665][T25364] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1063.449060][T25364] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1063.498416][T25364] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1063.607837][T25562] veth0_vlan: left promiscuous mode [ 1063.690260][T25562] veth0_vlan: entered promiscuous mode [ 1063.795669][T25562] team0: Device veth0_vlan failed to register rx_handler [ 1063.848662][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1063.864592][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1063.914564][T25364] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1064.581817][T25364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.744565][T25364] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.800291][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.807511][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.835102][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.842336][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.640557][T25364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.038179][T25364] veth0_vlan: entered promiscuous mode [ 1068.493718][T25364] veth1_vlan: entered promiscuous mode [ 1068.662221][T25364] veth0_macvtap: entered promiscuous mode [ 1068.714244][T25364] veth1_macvtap: entered promiscuous mode [ 1068.847490][T25364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.933214][T25364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.019708][ T59] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.069577][ T59] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.103326][ T59] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.159487][ T59] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.479870][T13512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.516923][T13512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.586579][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.596653][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.290193][T25668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.674015][T25678] netlink: 'syz.2.7639': attribute type 10 has an invalid length. [ 1070.697700][T25678] veth0_vlan: left promiscuous mode [ 1070.714596][T25678] veth0_vlan: entered promiscuous mode [ 1070.736425][T25678] team0: Device veth0_vlan failed to register rx_handler [ 1072.099345][T25695] overlayfs: failed to resolve './file0/../file0': -2 [ 1072.787740][T25703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7648'. [ 1072.796818][T25703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7648'. [ 1072.999776][T25686] loop9: detected capacity change from 0 to 32768 [ 1073.086613][T25686] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1073.339359][T25686] XFS (loop9): Ending clean mount [ 1073.385144][T25686] XFS (loop9): Quotacheck needed: Please wait. [ 1073.534678][T25686] XFS (loop9): Quotacheck: Done. [ 1073.695952][T25364] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1074.331934][ T5870] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1074.341686][ T5870] Bluetooth: hci5: Injecting HCI hardware error event [ 1074.355346][ T5179] Bluetooth: hci5: hardware error 0x00 [ 1074.518404][T25736] batman_adv: batadv0: Adding interface: dummy0 [ 1074.531905][T25736] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1074.584149][T25736] batman_adv: batadv0: Interface activated: dummy0 [ 1074.626159][T25737] batadv0: mtu less than device minimum [ 1074.677034][T25737] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1074.690532][T25737] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1074.702633][T25737] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1074.714753][T25737] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1074.726890][T25737] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1074.739139][T25737] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1074.751321][T25737] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1074.763613][T25737] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1074.775725][T25737] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1075.286850][T25745] netlink: 'syz.5.7659': attribute type 4 has an invalid length. [ 1075.329565][T25745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7659'. [ 1076.556600][ T5179] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1078.233168][T25789] loop9: detected capacity change from 0 to 1024 [ 1078.264263][T25789] EXT4-fs: Ignoring removed nobh option [ 1078.275346][T25789] EXT4-fs: Ignoring removed bh option [ 1078.366703][T25789] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1078.574283][T25800] overlayfs: failed to clone upperpath [ 1079.227409][T25364] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.027806][T25823] netlink: 'syz.9.7691': attribute type 10 has an invalid length. [ 1080.169995][T25823] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1080.204529][T25823] team0: Failed to send options change via netlink (err -105) [ 1080.234952][T25823] team0: Port device netdevsim0 added [ 1080.923927][T25373] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 1081.123925][T25373] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.159049][T25373] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1081.231536][T25373] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1081.365701][T25373] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1081.553673][T25373] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1081.800531][T25373] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1081.813366][T25373] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1081.814120][T25851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7702'. [ 1081.836167][T25373] usb 10-1: Product: syz [ 1081.840450][T25373] usb 10-1: Manufacturer: syz [ 1081.911756][T25373] usb 10-1: SerialNumber: syz [ 1081.994711][T25373] usb 10-1: config 0 descriptor?? [ 1082.270765][T25373] radio-si470x 10-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1082.303762][T25373] radio-si470x 10-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1082.471717][T25373] radio-si470x 10-1:0.0: software version 0, hardware version 0 [ 1082.511764][T25373] radio-si470x 10-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1082.565161][T25856] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7704'. [ 1082.574574][T25373] radio-si470x 10-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1082.587975][T25856] netlink: 'syz.4.7704': attribute type 7 has an invalid length. [ 1082.613601][T25856] netlink: 'syz.4.7704': attribute type 8 has an invalid length. [ 1082.642135][T25856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7704'. [ 1082.678532][T25373] radio-si470x 10-1:0.0: submitting int urb failed (-90) [ 1083.482065][T25373] radio-si470x 10-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1083.517549][T25373] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -22 [ 1083.561198][T25373] usb 10-1: USB disconnect, device number 15 [ 1083.807470][T25895] sctp: [Deprecated]: syz.8.7719 (pid 25895) Use of int in maxseg socket option. [ 1083.807470][T25895] Use struct sctp_assoc_value instead [ 1083.848730][T25899] netlink: 'syz.0.7720': attribute type 10 has an invalid length. [ 1084.092728][T25908] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7724'. [ 1084.204432][T25913] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7725'. [ 1084.223578][T25913] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7725'. [ 1085.030948][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1085.030977][ T30] audit: type=1326 audit(1756718186.861:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25936 comm="syz.4.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1567d8ebe9 code=0x7ffc0000 [ 1085.073913][ T5996] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1085.248324][ T30] audit: type=1326 audit(1756718186.901:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25936 comm="syz.4.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1567d8ebe9 code=0x7ffc0000 [ 1085.302363][ T5996] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.324688][ T5996] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.365714][ T5996] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1085.413526][ T5996] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.449893][ T5996] usb 10-1: config 0 descriptor?? [ 1085.518833][ T30] audit: type=1326 audit(1756718187.342:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25942 comm="syz.4.7740" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1567d8ebe9 code=0x0 [ 1085.830428][T25953] netlink: 'syz.0.7744': attribute type 10 has an invalid length. [ 1086.700798][ T5996] uclogic 0003:256C:006D.0048: interface is invalid, ignoring [ 1086.722734][ T5996] usb 10-1: USB disconnect, device number 16 [ 1087.365002][T25995] netlink: 25 bytes leftover after parsing attributes in process `syz.4.7760'. [ 1087.425620][T25998] netlink: 'syz.4.7760': attribute type 4 has an invalid length. [ 1088.222280][T26001] overlayfs: failed to clone upperpath [ 1088.452317][T26005] Invalid ELF header magic: != ELF [ 1088.736599][T26021] overlayfs: failed to clone upperpath [ 1090.197552][T26044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7780'. [ 1090.761855][T26058] fuse: Bad value for 'fd' [ 1091.284732][T26068] tipc: Failed to remove unknown binding: 66,1,1/0:1301174962/1301174964 [ 1091.330198][T26068] tipc: Failed to remove unknown binding: 66,1,1/0:1301174962/1301174964 [ 1092.313191][T26091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7801'. [ 1092.554393][T26091] gretap0: entered promiscuous mode [ 1092.648331][T26091] macvtap1: entered promiscuous mode [ 1092.715124][T26091] macvtap1: entered allmulticast mode [ 1092.808358][T26091] gretap0: entered allmulticast mode [ 1092.943984][T26104] 9pnet_fd: Insufficient options for proto=fd [ 1092.951767][T26090] gretap0: left allmulticast mode [ 1092.957068][T26090] gretap0: left promiscuous mode [ 1093.077848][ T6020] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1093.288678][ T6020] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 1093.310680][ T6020] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1093.343583][ T6020] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1093.406933][ T6020] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1093.437862][ T6020] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1093.452557][ T6020] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1093.555982][ T6020] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1093.569736][ T6020] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1093.585889][ T6020] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1093.647911][ T6020] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1093.670937][ T6020] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1093.700873][ T6020] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1093.789912][ T6020] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1093.802949][ T6020] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1093.812562][ T6020] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1093.824367][ T6020] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1093.860801][ T6020] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1093.876942][ T6020] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1093.976872][ T6020] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1094.026962][ T6020] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1094.038805][ T6020] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1094.062797][ T6020] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1094.117593][ T6020] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1094.232775][ T6020] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1094.300408][ T6020] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1094.333133][ T6020] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1094.347180][ T6020] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1094.386092][ T6020] usb 10-1: Product: syz [ 1094.408467][ T6020] usb 10-1: Manufacturer: syz [ 1094.413173][ T6020] usb 10-1: SerialNumber: syz [ 1094.448628][ T6020] usb 10-1: config 0 descriptor?? [ 1094.519650][ T6020] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 1094.758819][T26123] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7815'. [ 1094.924863][T15737] usb 10-1: USB disconnect, device number 17 [ 1094.935365][T15737] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 1096.606126][ T976] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1096.766005][ T976] usb 10-1: Using ep0 maxpacket: 32 [ 1096.781468][ T976] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1096.804328][ T976] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1096.856273][ T976] usb 10-1: can't read configurations, error -71 [ 1098.818396][T26180] tipc: Failed to remove unknown binding: 66,1,1/0:1840592449/1840592451 [ 1098.845202][T26180] tipc: Failed to remove unknown binding: 66,1,1/0:1840592449/1840592451 [ 1099.167619][T26188] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.175024][T26188] IPv6: NLM_F_CREATE should be set when creating new route [ 1100.550319][T26201] orangefs_mount: mount request failed with -4 [ 1100.765356][T26216] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 1100.784320][T15737] IPVS: starting estimator thread 0... [ 1100.904088][T26218] IPVS: using max 21 ests per chain, 50400 per kthread [ 1100.993786][T26221] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.7855'. [ 1101.502632][T26228] netlink: 'syz.8.7858': attribute type 2 has an invalid length. [ 1101.563400][T26228] netlink: 'syz.8.7858': attribute type 2 has an invalid length. [ 1101.571359][T26228] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7858'. [ 1102.023882][ T976] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1102.177564][ T976] usb 6-1: Using ep0 maxpacket: 8 [ 1102.200263][ T976] usb 6-1: config 0 has no interfaces? [ 1102.214954][ T976] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec [ 1102.247775][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.273247][ T976] usb 6-1: Product: syz [ 1102.278958][ T976] usb 6-1: Manufacturer: syz [ 1102.308848][ T976] usb 6-1: SerialNumber: syz [ 1102.330910][ T976] usb 6-1: config 0 descriptor?? [ 1102.441990][T26257] netlink: 'syz.4.7867': attribute type 1 has an invalid length. [ 1102.588798][T26261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7867'. [ 1102.609355][ T976] usb 6-1: USB disconnect, device number 50 [ 1102.645779][T26257] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1103.658273][T26269] netlink: 'syz.5.7873': attribute type 21 has an invalid length. [ 1103.693525][T26269] netlink: 'syz.5.7873': attribute type 22 has an invalid length. [ 1103.701649][T26269] netlink: 'syz.5.7873': attribute type 23 has an invalid length. [ 1103.735332][T26269] netlink: 'syz.5.7873': attribute type 25 has an invalid length. [ 1103.768466][T26269] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7873'. [ 1104.052512][T26271] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 1105.316061][T26261] bond9 (unregistering): Released all slaves [ 1105.378612][T26274] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 1105.708810][T26297] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 1106.460899][T26313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7893'. [ 1107.778412][T26340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7904'. [ 1107.870414][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1107.876903][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1107.883535][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1107.889975][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1107.896643][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1107.903114][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1107.911112][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1107.918940][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1107.926924][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1107.934775][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1107.942750][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1107.950600][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1107.958610][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1107.966458][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1107.974489][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1107.982363][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1107.990489][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1107.998346][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.006341][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.014208][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.022224][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.030104][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.038151][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.046034][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.054156][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.062022][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.070042][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.077916][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.085949][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.093824][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.101872][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.109712][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.117762][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.125664][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.133704][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.141589][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.149580][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.157438][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.165434][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.173289][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.181304][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.189141][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.197131][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.204994][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.213022][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.220993][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.228972][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.236842][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.244853][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.252705][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.260687][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.268515][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.276501][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.284381][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.292363][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.300219][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.308176][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.316033][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.324016][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.331876][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.339846][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.347705][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.355740][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.363609][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.371614][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.379441][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.387431][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.395293][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.403330][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.411205][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.419179][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.427036][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.435038][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.442888][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.450896][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.458742][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.466790][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.474669][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.482675][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.490528][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.498510][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.506373][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1108.514371][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1108.522239][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1109.201659][T26356] overlayfs: failed to clone upperpath [ 1109.271086][ T30] audit: type=1800 audit(1756718211.123:656): pid=26360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7911" name="bus" dev="tmpfs" ino=4662 res=0 errno=0 [ 1109.321210][T26356] overlayfs: failed to clone upperpath [ 1109.741774][T26330] overlayfs: failed to resolve './file0': -2 [ 1109.763131][T26365] netlink: 'syz.2.7927': attribute type 1 has an invalid length. [ 1109.779534][T26365] netlink: 'syz.2.7927': attribute type 4 has an invalid length. [ 1109.824388][T26365] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7927'. [ 1112.383521][T26401] overlayfs: failed to clone upperpath [ 1112.967050][T26422] netlink: 'syz.9.7940': attribute type 4 has an invalid length. [ 1113.034995][T26426] netlink: 'syz.9.7940': attribute type 4 has an invalid length. [ 1117.555777][ T5870] Bluetooth: hci6: command 0xfc11 tx timeout [ 1117.575698][ T5179] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1119.000349][T26529] overlayfs: failed to clone upperpath [ 1120.712210][T26561] loop9: detected capacity change from 0 to 1024 [ 1120.769856][T26561] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1120.894081][T26561] loop9: detected capacity change from 1024 to 64 [ 1120.917112][T26571] overlayfs: failed to clone lowerpath [ 1121.045429][T26573] syz.9.7986: attempt to access beyond end of device [ 1121.045429][T26573] loop9: rw=2049, sector=226, nr_sectors = 2 limit=64 [ 1121.094289][T26573] EXT4-fs warning (device loop9): ext4_end_bio:368: I/O error 10 writing to inode 18 starting block 113) [ 1121.187788][T26573] syz.9.7986: attempt to access beyond end of device [ 1121.187788][T26573] loop9: rw=2049, sector=226, nr_sectors = 2 limit=64 [ 1121.241409][T26573] EXT4-fs warning (device loop9): ext4_end_bio:368: I/O error 10 writing to inode 18 starting block 113) [ 1121.278801][T26573] EXT4-fs (loop9): failed to convert unwritten extents to written extents -- potential data loss! (inode 18, error -5) [ 1121.325084][T26573] Buffer I/O error on device loop9, logical block 113 [ 1121.354564][T26573] Buffer I/O error on device loop9, logical block 113 [ 1121.645122][T25364] EXT4-fs warning (device loop9): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1121.676087][T25364] EXT4-fs warning (device loop9): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1121.739586][T25364] EXT4-fs warning (device loop9): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1121.807031][T25364] EXT4-fs warning (device loop9): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1121.854161][T25364] EXT4-fs warning (device loop9): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1121.867405][T26590] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7998'. [ 1121.917746][T25364] EXT4-fs warning (device loop9): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1121.954580][T25364] EXT4-fs warning (device loop9): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1121.990427][T25364] EXT4-fs warning (device loop9): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1122.559746][T25364] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.644135][T26562] kmmpd-loop9: attempt to access beyond end of device [ 1122.644135][T26562] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 1122.700593][T26610] netlink: 'syz.0.8003': attribute type 4 has an invalid length. [ 1122.703129][T26562] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1122.765914][T26611] netlink: 'syz.0.8003': attribute type 4 has an invalid length. [ 1122.850249][ T49] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.199211][ T49] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.360732][ T49] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.583447][ T49] team0: Port device netdevsim0 removed [ 1123.607355][ T49] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.773143][ T49] bridge_slave_1: left allmulticast mode [ 1124.818441][ T49] bridge_slave_1: left promiscuous mode [ 1124.847965][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.925384][ T49] bridge_slave_0: left allmulticast mode [ 1124.942538][ T49] bridge_slave_0: left promiscuous mode [ 1124.987130][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.262491][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.271665][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.409475][ T5870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1125.453159][ T5870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1125.473837][ T5870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1125.488951][ T5870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1125.506848][ T5870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1127.583361][ T5870] Bluetooth: hci5: command tx timeout [ 1128.599000][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.659746][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.728460][ T49] bond0 (unregistering): Released all slaves [ 1129.660137][ T5870] Bluetooth: hci5: command tx timeout [ 1130.069333][ T49] hsr_slave_0: left promiscuous mode [ 1130.093666][ T49] hsr_slave_1: left promiscuous mode [ 1130.129827][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1130.137270][ T49] net_ratelimit: 10 callbacks suppressed [ 1130.137296][ T49] batadv0: mtu less than device minimum [ 1130.191013][ T49] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1130.204542][ T49] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1130.216769][ T49] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1130.228546][ T49] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1130.240404][ T49] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1130.252227][ T49] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1130.264070][ T49] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1130.275928][ T49] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1130.287861][ T49] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1130.448783][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.475389][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1130.634254][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.645846][ T49] batman_adv: batadv0: Interface deactivated: dummy0 [ 1130.657978][ T49] batman_adv: batadv0: Removing interface: dummy0 [ 1130.711357][ T49] veth1_macvtap: left promiscuous mode [ 1130.726015][ T49] veth0_macvtap: left promiscuous mode [ 1130.736244][ T49] veth1_vlan: left promiscuous mode [ 1130.741868][ T49] veth0_vlan: left promiscuous mode [ 1131.666015][T26722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8050'. [ 1131.737167][ T5870] Bluetooth: hci5: command tx timeout [ 1133.817040][ T5870] Bluetooth: hci5: command tx timeout [ 1134.710153][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1134.779976][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f9c5c00: rx timeout, send abort [ 1134.892575][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1135.288033][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f9c5c00: abort rx timeout. Force session deactivation [ 1135.654251][T26748] kthread_run failed with err -4 [ 1136.090244][T26784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8072'. [ 1136.140626][T26644] chnl_net:caif_netlink_parms(): no params data found [ 1136.154372][T26784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8072'. [ 1136.855594][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.868611][T26807] overlayfs: failed to clone upperpath [ 1136.880594][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.897988][T26813] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8086'. [ 1137.049233][T26644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.079663][T26644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.104904][T26644] bridge_slave_0: entered allmulticast mode [ 1137.123862][T26644] bridge_slave_0: entered promiscuous mode [ 1137.500462][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.522025][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.614199][T26644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.646887][T26822] overlayfs: failed to clone upperpath [ 1137.652668][T26644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.691407][T26644] bridge_slave_1: entered allmulticast mode [ 1137.720105][T26644] bridge_slave_1: entered promiscuous mode [ 1137.852217][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.897293][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.721806][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.762228][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.856267][T26644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.891237][T26644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.013621][ T30] audit: type=1326 audit(1756718240.878:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26843 comm="syz.5.8099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f873758ebe9 code=0x0 [ 1139.189442][T26644] team0: Port device team_slave_0 added [ 1139.252207][T26644] team0: Port device team_slave_1 added [ 1139.504561][T26644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1139.522049][T26644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1139.591104][T26644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1139.769062][T26644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1139.800683][T26644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1139.875280][T26644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.135038][T26644] hsr_slave_0: entered promiscuous mode [ 1140.164030][T26644] hsr_slave_1: entered promiscuous mode [ 1140.171558][T26644] debugfs: 'hsr0' already exists in 'hsr' [ 1140.194899][T26644] Cannot create hsr debugfs directory [ 1140.200826][ T49] bridge_slave_1: left allmulticast mode [ 1140.214979][T25373] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1140.223909][ T49] bridge_slave_1: left promiscuous mode [ 1140.235029][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.255975][ T49] bridge_slave_0: left allmulticast mode [ 1140.266190][ T49] bridge_slave_0: left promiscuous mode [ 1140.279460][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.377179][T25373] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.400444][T25373] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.434927][T25373] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1140.444030][T25373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.506752][T25373] usb 6-1: config 0 descriptor?? [ 1141.598945][T26903] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8114'. [ 1141.742881][T25373] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0049/input/input76 [ 1141.954245][T25373] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0049/input/input77 [ 1142.112212][T25373] uclogic 0003:256C:006D.0049: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 1142.136063][T25373] usb 6-1: USB disconnect, device number 51 [ 1142.160401][ T49] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1143.079517][T26932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8122'. [ 1143.195842][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1143.242934][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.275538][ T49] bond0 (unregistering): Released all slaves [ 1143.359371][T26882] macvlan2: entered promiscuous mode [ 1143.381849][T26882] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1143.438660][T26884] macvlan3: entered promiscuous mode [ 1143.465934][T26884] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 1143.551911][ T49] tipc: Disabling bearer [ 1143.557800][ T49] tipc: Left network mode [ 1144.095083][T26949] net_ratelimit: 30 callbacks suppressed [ 1144.095119][T26949] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1144.132785][T26949] tipc: Enabled bearer , priority 10 [ 1144.172899][T26949] tipc: Bearer : already 2 bearers with priority 10 [ 1144.195093][T26949] tipc: Bearer : trying with adjusted priority [ 1144.215032][T26949] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1144.225063][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1144.239757][T26949] tipc: Enabled bearer , priority 9 [ 1144.306033][ T49] hsr_slave_0: left promiscuous mode [ 1144.325207][ T49] hsr_slave_1: left promiscuous mode [ 1144.354261][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1144.375052][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1144.393193][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1144.415340][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.494981][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1144.528433][T26957] netlink: 2024 bytes leftover after parsing attributes in process `syz.4.8133'. [ 1144.558089][T26957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8133'. [ 1144.624830][ T49] veth1_macvtap: left promiscuous mode [ 1144.630597][ T49] veth0_macvtap: left promiscuous mode [ 1144.675023][ T49] veth1_vlan: left promiscuous mode [ 1144.680425][ T49] veth0_vlan: left promiscuous mode [ 1145.024845][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1146.044870][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1147.106421][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1147.313779][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1147.407634][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1147.980651][T26997] overlayfs: failed to clone upperpath [ 1148.124858][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1148.193809][ T5870] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 1148.919208][T26978] kthread_run failed with err -4 [ 1149.164924][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1149.424599][T27030] netlink: 'syz.2.8160': attribute type 1 has an invalid length. [ 1149.491987][T27030] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1150.204859][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1150.816022][T27052] overlayfs: failed to clone upperpath [ 1150.942749][ T49] IPVS: stop unused estimator thread 0... [ 1151.244923][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1151.493631][T26644] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1151.522062][T26644] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1151.546542][T26644] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1151.571069][T26644] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1151.799308][T26644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1151.843649][T26644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.866696][T26482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.873913][T26482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1152.007427][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.014625][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1152.284907][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1152.433365][T27079] netlink: 'syz.8.8177': attribute type 1 has an invalid length. [ 1152.713472][T27079] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1152.779511][T27084] bond6: (slave geneve3): making interface the new active one [ 1152.802582][T27084] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 1153.325035][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1153.486090][T26644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1153.773234][T27098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8181'. [ 1153.802539][T26644] veth0_vlan: entered promiscuous mode [ 1153.845077][T27098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8181'. [ 1153.872135][T26644] veth1_vlan: entered promiscuous mode [ 1154.147987][T26644] veth0_macvtap: entered promiscuous mode [ 1154.189821][T26644] veth1_macvtap: entered promiscuous mode [ 1154.244564][T27108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8185'. [ 1154.278129][T26644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.364846][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1154.383200][T27108] bond0: (slave syz_tun): Releasing backup interface [ 1154.420315][T26644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.464354][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.495001][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.529237][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.571095][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.821298][T26486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.868991][T26486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.001118][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.034643][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.375049][T27131] tipc: Started in network mode [ 1155.390531][T27131] tipc: Node identity 7f000001, cluster identity 4711 [ 1155.404888][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1155.409361][T27131] tipc: Enabled bearer , priority 10 [ 1155.465636][T27131] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1155.494584][T27131] tipc: Enabled bearer , priority 10 [ 1156.235534][T27146] overlayfs: failed to clone upperpath [ 1156.452083][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1156.544865][T25358] tipc: Node number set to 2130706433 [ 1157.484894][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1158.524878][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1159.072040][T27191] overlayfs: failed to clone upperpath [ 1159.564881][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1159.822487][T27206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8221'. [ 1160.093764][T27211] netlink: 'syz.3.8223': attribute type 1 has an invalid length. [ 1160.109475][T27211] netlink: 'syz.3.8223': attribute type 4 has an invalid length. [ 1160.125622][T27211] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8223'. [ 1160.147244][T27212] netlink: 'syz.3.8223': attribute type 1 has an invalid length. [ 1160.168176][T27212] netlink: 'syz.3.8223': attribute type 4 has an invalid length. [ 1160.177233][T27212] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8223'. [ 1160.604847][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1160.716327][T27235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8229'. [ 1160.778669][T27236] netlink: 536 bytes leftover after parsing attributes in process `syz.0.8231'. [ 1160.807276][T27236] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8231'. [ 1160.945259][T25373] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1161.129767][T25373] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.159957][T25373] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.224837][T25373] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1161.237202][T25373] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.265331][T25373] usb 4-1: config 0 descriptor?? [ 1161.645089][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1161.698574][T25373] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 1161.723136][T25373] cp2112 0003:10C4:EA90.004A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1161.896424][T25373] cp2112 0003:10C4:EA90.004A: Part Number: 0x82 Device Version: 0xFE [ 1162.501239][T27234] cp2112 0003:10C4:EA90.004A: Error starting transaction: -38 [ 1162.522899][T25373] cp2112 0003:10C4:EA90.004A: error reading lock byte: -71 [ 1162.567059][T25373] usb 4-1: USB disconnect, device number 9 [ 1162.684984][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1163.724941][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1163.751429][T27312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8262'. [ 1164.329931][T27328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8269'. [ 1164.764456][T27313] loop3: detected capacity change from 0 to 32768 [ 1164.771365][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1164.802786][T27313] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8264 (27313) [ 1164.974902][T27313] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1164.994297][T27313] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1165.275402][T27313] BTRFS info (device loop3): enabling ssd optimizations [ 1165.324867][T27313] BTRFS info (device loop3): enabling free space tree [ 1165.331993][T27313] BTRFS info (device loop3): use zstd compression, level 3 [ 1165.440713][ T30] audit: type=1800 audit(1756718523.290:658): pid=27313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8264" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 1165.777620][T26644] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1165.804894][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1166.244056][T27391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8285'. [ 1166.845145][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1166.904648][T27414] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8296'. [ 1167.405089][T25373] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1167.573512][T25373] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 1167.585302][T25373] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17801, setting to 1024 [ 1167.596662][T25373] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1167.609920][T25373] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1167.629474][T25373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.654272][T25373] usb 6-1: config 0 descriptor?? [ 1167.668955][T27426] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1167.684910][T25357] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1167.854918][T25357] usb 4-1: Using ep0 maxpacket: 8 [ 1167.871029][T25357] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 1167.884556][T25357] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.884892][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1167.904452][T25357] usb 4-1: config 0 has no interfaces? [ 1167.921286][T25357] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1167.944954][T25357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.969158][T25357] usb 4-1: config 0 descriptor?? [ 1168.110205][T27445] overlayfs: failed to clone upperpath [ 1168.127933][T25373] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1168.924912][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1168.941794][T25373] usb 6-1: USB disconnect, device number 52 [ 1169.669758][T27480] input: syz0 as /devices/virtual/input/input79 [ 1169.740440][T27484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8324'. [ 1169.910590][T27484] netlink: 'syz.4.8324': attribute type 1 has an invalid length. [ 1169.965028][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1170.499341][T25358] usb 4-1: USB disconnect, device number 10 [ 1170.732834][T27509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8334'. [ 1171.004934][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1171.108954][T27515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8336'. [ 1172.044884][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1172.144954][ T6021] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1172.334804][ T6021] usb 6-1: Using ep0 maxpacket: 8 [ 1172.394857][ T6021] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 1172.429209][ T6021] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.500155][ T6021] usb 6-1: config 0 has no interfaces? [ 1172.530553][ T6021] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1172.584413][ T6021] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.650635][ T6021] usb 6-1: config 0 descriptor?? [ 1173.103370][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1174.124857][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1174.832033][T25373] usb 6-1: USB disconnect, device number 53 [ 1174.855012][T25357] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1175.044905][T25357] usb 4-1: Using ep0 maxpacket: 16 [ 1175.059421][T25357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1175.131984][T25357] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1175.141351][T25357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.164881][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1175.171885][T25357] usb 4-1: Product: syz [ 1175.193865][T25357] usb 4-1: Manufacturer: syz [ 1175.204977][T25357] usb 4-1: SerialNumber: syz [ 1175.246421][T25357] usb 4-1: config 0 descriptor?? [ 1175.259046][T25357] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1175.288720][T25357] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1175.868629][T25357] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1176.205005][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1176.738964][T25357] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1176.778973][T25357] em28xx 4-1:0.0: board has no eeprom [ 1176.870098][T25357] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1176.900520][T25357] em28xx 4-1:0.0: dvb set to bulk mode. [ 1176.920831][ T976] em28xx 4-1:0.0: Binding DVB extension [ 1176.955216][T25357] usb 4-1: USB disconnect, device number 11 [ 1176.962913][T25357] em28xx 4-1:0.0: Disconnecting em28xx [ 1177.127772][T27619] input: syz1 as /devices/virtual/input/input80 [ 1177.169102][ T976] em28xx 4-1:0.0: Registering input extension [ 1177.169574][T25357] em28xx 4-1:0.0: Closing input extension [ 1177.244923][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1177.253414][T25357] em28xx 4-1:0.0: Freeing device [ 1178.285034][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1178.295546][T27657] overlayfs: failed to clone upperpath [ 1179.105162][T25373] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1179.285305][T25373] usb 6-1: Using ep0 maxpacket: 32 [ 1179.313601][T25373] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.324963][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1179.354777][T25373] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.388626][T25373] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1179.420771][T25373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.452991][T25373] usb 6-1: config 0 descriptor?? [ 1179.937956][T25373] savu 0003:1E7D:2D5A.004C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1180.239529][ T6021] usb 6-1: USB disconnect, device number 54 [ 1180.364946][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1181.255912][ T5957] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1181.404864][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1181.454825][ T5957] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1181.504590][ T5957] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1181.542427][ T5957] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1181.587566][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.648999][T27705] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1181.685769][ T5957] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1181.894195][ T5957] usb 6-1: USB disconnect, device number 55 [ 1182.444861][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1182.470159][T27735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8422'. [ 1182.661165][T27735] netlink: 'syz.3.8422': attribute type 1 has an invalid length. [ 1183.485562][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1183.688491][T27757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8431'. [ 1183.966060][T27757] netlink: 'syz.2.8431': attribute type 1 has an invalid length. [ 1184.197915][T27748] loop3: detected capacity change from 0 to 32768 [ 1184.289526][T27748] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 1184.355397][ T30] audit: type=1800 audit(1756718542.220:659): pid=27748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8427" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 1184.524955][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1185.532663][T26644] ocfs2: Unmounting device (7,3) on (node local) [ 1185.567070][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1186.605324][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1186.681612][T27802] overlayfs: failed to clone upperpath [ 1186.700883][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1186.713639][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.179032][T27814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.270013][T26478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.277240][T26478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.644985][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1187.824332][T27826] loop3: detected capacity change from 0 to 128 [ 1187.952126][T27830] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1187.988008][T27830] FAT-fs (loop3): Filesystem has been set read-only [ 1188.684965][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1189.725237][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1189.907471][T27836] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8458'. [ 1190.139506][T27841] netlink: 'syz.8.8458': attribute type 1 has an invalid length. [ 1190.764839][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1191.859011][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1192.924935][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1193.430546][T27888] overlayfs: failed to clone lowerpath [ 1193.964945][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1194.473290][T27888] overlayfs: failed to clone lowerpath [ 1195.004895][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1195.488346][T27902] loop3: detected capacity change from 0 to 512 [ 1195.634146][T27902] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.8485: casefold flag without casefold feature [ 1195.727603][T27902] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.8485: couldn't read orphan inode 15 (err -117) [ 1195.759279][T27902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1196.044843][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1196.249112][T26644] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.934903][ T30] audit: type=1326 audit(1756718554.790:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27933 comm="syz.2.8497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2aef58ebe9 code=0x0 [ 1197.084838][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1197.148596][T27942] netlink: 104 bytes leftover after parsing attributes in process `syz.8.8503'. [ 1197.376953][T25373] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1197.559134][T25373] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1197.581148][T25373] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.614562][T25373] usb 4-1: config 0 descriptor?? [ 1197.635378][T27954] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8508'. [ 1197.868008][T25373] ath6kl: Failed to submit usb control message: -71 [ 1197.885405][T25373] ath6kl: unable to send the bmi data to the device: -71 [ 1197.900025][T25373] ath6kl: Unable to send get target info: -71 [ 1197.917621][T25373] ath6kl: Failed to init ath6kl core: -71 [ 1197.923965][T25373] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1197.998883][T25373] usb 4-1: USB disconnect, device number 12 [ 1198.124837][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1199.165216][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1200.205051][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1201.244930][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1201.462925][T27995] overlayfs: failed to resolve './file1': -2 [ 1202.057355][T27980] syz.3.8517 (27980): drop_caches: 2 [ 1202.285194][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1203.052793][ T30] audit: type=1326 audit(1756718560.900:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28025 comm="syz.4.8536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1567d8ebe9 code=0x7ffc0000 [ 1203.169099][ T30] audit: type=1326 audit(1756718560.910:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28025 comm="syz.4.8536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1567d8ebe9 code=0x7ffc0000 [ 1203.313519][ T30] audit: type=1326 audit(1756718560.910:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28025 comm="syz.4.8536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1567d8ebe9 code=0x7ffc0000 [ 1203.336456][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1203.355258][ T30] audit: type=1326 audit(1756718560.910:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28025 comm="syz.4.8536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1567d8ebe9 code=0x7ffc0000 [ 1203.403672][ T30] audit: type=1326 audit(1756718560.910:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28025 comm="syz.4.8536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1567d8ebe9 code=0x7ffc0000 [ 1203.465006][ T30] audit: type=1326 audit(1756718560.920:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28025 comm="syz.4.8536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1567d8ebe9 code=0x7ffc0000 [ 1203.587614][ T30] audit: type=1326 audit(1756718560.920:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28025 comm="syz.4.8536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1567d8ebe9 code=0x7ffc0000 [ 1203.696432][ T30] audit: type=1326 audit(1756718560.920:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28025 comm="syz.4.8536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1567d8ebe9 code=0x7ffc0000 [ 1203.846004][ T30] audit: type=1326 audit(1756718560.920:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28025 comm="syz.4.8536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1567d8ebe9 code=0x7ffc0000 [ 1203.926682][ T30] audit: type=1326 audit(1756718560.920:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28025 comm="syz.4.8536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1567d8ebe9 code=0x7ffc0000 [ 1204.365127][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1205.405006][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1205.587307][T28056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8546'. [ 1205.633421][T28056] netlink: 'syz.3.8546': attribute type 14 has an invalid length. [ 1205.905233][T28056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8546'. [ 1205.921938][T26482] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1205.951211][T26482] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1205.961305][T28056] netlink: 'syz.3.8546': attribute type 14 has an invalid length. [ 1205.975584][T26482] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1205.992334][T26482] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.429883][T28066] netlink: 'syz.5.8551': attribute type 4 has an invalid length. [ 1206.455066][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1207.382541][T28092] loop3: detected capacity change from 0 to 22 [ 1207.400985][T28097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8564'. [ 1207.421666][T28097] netlink: 'syz.5.8564': attribute type 14 has an invalid length. [ 1207.431232][T28092] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1207.449336][T28097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8564'. [ 1207.461410][T28092] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1207.485098][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1207.492924][T28097] netlink: 'syz.5.8564': attribute type 14 has an invalid length. [ 1207.604035][T28101] netlink: 'syz.0.8567': attribute type 4 has an invalid length. [ 1207.763843][T28102] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8566'. [ 1207.804416][T28108] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8570'. [ 1207.867995][T28108] geneve2: entered promiscuous mode [ 1207.962400][T28113] netlink: 165 bytes leftover after parsing attributes in process `syz.0.8571'. [ 1208.037090][T28118] loop3: detected capacity change from 0 to 64 [ 1208.158866][T28118] syz.3.8572: attempt to access beyond end of device [ 1208.158866][T28118] loop3: rw=2049, sector=73, nr_sectors = 89 limit=64 [ 1208.191606][T28120] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1208.198186][T28120] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1208.224918][T28120] vhci_hcd vhci_hcd.0: Device attached [ 1208.288737][T28122] vhci_hcd: connection closed [ 1208.289769][T26478] vhci_hcd: stop threads [ 1208.309094][T26478] vhci_hcd: release socket [ 1208.313559][T26478] vhci_hcd: disconnect device [ 1208.504045][T26482] kworker/u8:13: attempt to access beyond end of device [ 1208.504045][T26482] loop3: rw=1, sector=162, nr_sectors = 1 limit=64 [ 1208.525004][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1208.542916][T26482] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 1208.561781][T26482] kworker/u8:13: attempt to access beyond end of device [ 1208.561781][T26482] loop3: rw=1, sector=167, nr_sectors = 1 limit=64 [ 1208.590301][T26482] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 1208.619577][T26482] kworker/u8:13: attempt to access beyond end of device [ 1208.619577][T26482] loop3: rw=1, sector=169, nr_sectors = 1 limit=64 [ 1208.663983][T26482] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 1208.704451][T26482] kworker/u8:13: attempt to access beyond end of device [ 1208.704451][T26482] loop3: rw=1, sector=171, nr_sectors = 1 limit=64 [ 1208.738774][T26482] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 1208.757711][T26482] kworker/u8:13: attempt to access beyond end of device [ 1208.757711][T26482] loop3: rw=1, sector=172, nr_sectors = 1 limit=64 [ 1208.772529][T26482] Buffer I/O error on dev loop3, logical block 172, lost async page write [ 1208.781621][T26482] kworker/u8:13: attempt to access beyond end of device [ 1208.781621][T26482] loop3: rw=1, sector=173, nr_sectors = 1 limit=64 [ 1208.814958][T26482] Buffer I/O error on dev loop3, logical block 173, lost async page write [ 1208.823673][T26482] kworker/u8:13: attempt to access beyond end of device [ 1208.823673][T26482] loop3: rw=1, sector=174, nr_sectors = 1 limit=64 [ 1208.874878][T26482] Buffer I/O error on dev loop3, logical block 174, lost async page write [ 1208.903953][T26482] kworker/u8:13: attempt to access beyond end of device [ 1208.903953][T26482] loop3: rw=1, sector=175, nr_sectors = 1 limit=64 [ 1208.944832][T26482] Buffer I/O error on dev loop3, logical block 175, lost async page write [ 1208.964981][T26482] kworker/u8:13: attempt to access beyond end of device [ 1208.964981][T26482] loop3: rw=1, sector=176, nr_sectors = 1 limit=64 [ 1209.013525][T26482] Buffer I/O error on dev loop3, logical block 176, lost async page write [ 1209.041617][T26482] Buffer I/O error on dev loop3, logical block 177, lost async page write [ 1209.564967][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1210.265333][T15737] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1210.424908][T15737] usb 4-1: Using ep0 maxpacket: 16 [ 1210.449263][T15737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1210.604992][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1210.764275][T15737] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1210.834841][T15737] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1210.866630][T15737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.902570][T15737] usb 4-1: config 0 descriptor?? [ 1211.356172][T15737] zydacron 0003:13EC:0006.004D: item fetching failed at offset 2/5 [ 1211.375279][T15737] zydacron 0003:13EC:0006.004D: parse failed [ 1211.396470][T15737] zydacron 0003:13EC:0006.004D: probe with driver zydacron failed with error -22 [ 1211.591235][T25357] usb 4-1: USB disconnect, device number 13 [ 1211.645064][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1212.531004][T28191] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.8594'. [ 1212.580725][T28191] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8594'. [ 1212.684912][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1213.044212][T28201] overlayfs: failed to clone upperpath [ 1213.095684][T28202] overlayfs: failed to clone upperpath [ 1213.654986][T28214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8604'. [ 1213.734853][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1213.835727][T28214] : entered promiscuous mode [ 1214.764870][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1215.135057][T28247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1215.777968][T28255] overlayfs: failed to clone upperpath [ 1215.804871][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1216.840672][ T5957] libceph: connect (1)[c::]:6789 error -101 [ 1216.854863][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1216.916073][ T5957] libceph: mon0 (1)[c::]:6789 connect error [ 1217.185366][ T5957] libceph: connect (1)[c::]:6789 error -101 [ 1217.198479][ T5957] libceph: mon0 (1)[c::]:6789 connect error [ 1217.469186][T28278] ceph: No mds server is up or the cluster is laggy [ 1217.769396][T28298] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 1217.777634][T28298] mac80211_hwsim hwsim16 syzkaller0: entered allmulticast mode [ 1217.884952][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1218.924839][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1219.113051][T28329] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1219.184978][T28329] overlayfs: failed to set xattr on upper [ 1219.215006][T28329] overlayfs: ...falling back to redirect_dir=nofollow. [ 1219.221907][T28329] overlayfs: ...falling back to metacopy=off. [ 1219.303400][T28329] overlayfs: ...falling back to index=off. [ 1219.335204][T28329] overlayfs: ...falling back to uuid=null. [ 1219.595920][T28337] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8648'. [ 1219.965660][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1220.141971][T28349] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8652'. [ 1220.149936][T28351] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8654'. [ 1220.891084][T28370] netlink: 'syz.2.8662': attribute type 1 has an invalid length. [ 1221.004857][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1221.083921][T28370] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1221.228175][T28374] bond8: (slave gretap2): making interface the new active one [ 1221.258547][T28374] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 1222.044891][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1222.985024][T28425] overlayfs: failed to clone upperpath [ 1223.084901][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1223.399622][T28438] loop3: detected capacity change from 0 to 64 [ 1223.700780][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1223.700845][ T30] audit: type=1800 audit(1756718581.550:679): pid=28441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8691" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 1224.134895][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1224.597614][T28448] overlayfs: failed to clone upperpath [ 1225.174833][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1225.613809][T28477] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8706'. [ 1226.140851][T28492] sch_tbf: burst 19869 is lower than device lo mtu (11337746) ! [ 1226.204916][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1227.244868][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1227.933895][T28524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8725'. [ 1228.099109][T28530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8726'. [ 1228.139616][T28530] netlink: 'syz.4.8726': attribute type 12 has an invalid length. [ 1228.285203][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1228.367115][T28530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8726'. [ 1228.391698][T28530] netlink: 'syz.4.8726': attribute type 12 has an invalid length. [ 1228.393897][T28535] netlink: 'syz.8.8728': attribute type 4 has an invalid length. [ 1229.325145][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1230.365068][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1231.405065][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1232.397224][T28574] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1232.423626][T28574] overlayfs: failed to set xattr on upper [ 1232.444981][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1232.465335][T28574] overlayfs: ...falling back to redirect_dir=nofollow. [ 1232.472231][T28574] overlayfs: ...falling back to uuid=null. [ 1232.550002][T28577] netlink: 'syz.4.8745': attribute type 4 has an invalid length. [ 1232.746642][ T30] audit: type=1804 audit(1756718590.600:680): pid=28582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8746" name="file0" dev="tmpfs" ino=7251 res=1 errno=0 [ 1234.748221][T28620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8760'. [ 1235.023107][T28620] netlink: 'syz.4.8760': attribute type 1 has an invalid length. [ 1235.977089][T28647] loop3: detected capacity change from 0 to 1024 [ 1236.020251][T28647] EXT4-fs: Ignoring removed orlov option [ 1236.122689][T28647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1236.212997][ T30] audit: type=1800 audit(1756718594.060:681): pid=28647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8773" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1236.892134][ T30] audit: type=1800 audit(1756718594.740:682): pid=28647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8773" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1236.969056][ T30] audit: type=1804 audit(1756718594.790:683): pid=28647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.8773" name="/newroot/74/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 1237.649690][T26644] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.956782][ T30] audit: type=1800 audit(1756718595.810:684): pid=28669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8781" name="file1" dev="tmpfs" ino=5562 res=0 errno=0 [ 1238.657407][T25357] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1238.814840][T25357] usb 4-1: Using ep0 maxpacket: 32 [ 1238.973616][T25357] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1238.985031][T25357] usb 4-1: config 0 has no interface number 0 [ 1239.023700][T25357] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1239.046964][T25357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.065239][T25357] usb 4-1: Product: syz [ 1239.077548][T25357] usb 4-1: Manufacturer: syz [ 1239.097685][T25357] usb 4-1: SerialNumber: syz [ 1239.109777][T25357] usb 4-1: config 0 descriptor?? [ 1239.118601][T25357] smsc95xx v2.0.0 [ 1239.705845][T28694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8791'. [ 1240.168811][T25357] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -32 [ 1240.200390][T25357] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1240.258456][T25357] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1240.314854][T25357] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1240.384180][T25357] usb 4-1: USB disconnect, device number 14 [ 1241.563567][T28713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8798'. [ 1241.572779][T28713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1243.007003][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.327321][T28738] overlayfs: failed to clone upperpath [ 1244.377869][T28749] overlayfs: failed to clone upperpath [ 1246.479298][T28771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8823'. [ 1246.504412][T28771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8823'. [ 1247.826480][T28780] : entered promiscuous mode [ 1247.894624][ T1162] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1247.935458][ T1162] netdevsim netdevsim5 eth0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1247.943974][ T1162] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.963697][ T1162] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1247.992965][ T1162] netdevsim netdevsim5 eth1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1248.001706][ T1162] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.135721][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.142089][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1248.239030][ T1162] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1248.304242][ T1162] netdevsim netdevsim5 eth2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1248.341838][ T1162] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.392219][ T1162] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1248.433192][ T1162] netdevsim netdevsim5 eth3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1248.467127][ T1162] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.502994][T28838] netlink: 'syz.0.8839': attribute type 10 has an invalid length. [ 1250.136313][T28842] fuse: Bad value for 'fd' [ 1250.212055][ T5870] Bluetooth: hci5: command 0x0406 tx timeout [ 1250.401114][T28844] overlayfs: failed to clone upperpath [ 1250.596945][T28848] overlayfs: failed to clone upperpath [ 1253.200195][T28892] l2tp_ppp: sess 2/0: no socket in recv [ 1253.473770][T28895] bond0: (slave bridge0): Releasing backup interface [ 1253.736910][T28895] bridge0: left allmulticast mode [ 1253.760123][T28895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.767859][T28895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.825503][T28895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.883720][T28895] bridge_slave_1: left allmulticast mode [ 1253.900136][T28895] bridge_slave_1: left promiscuous mode [ 1253.915088][T28895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.036223][T28895] bond0: (slave bond_slave_0): Releasing backup interface [ 1254.086199][T28895] bond_slave_0: left allmulticast mode [ 1254.155673][T28895] bond0: (slave bond_slave_1): Releasing backup interface [ 1254.171920][T28895] bond_slave_1: left allmulticast mode [ 1254.234981][T28895] team0: Port device team_slave_1 removed [ 1254.342922][T28895] bond2: (slave geneve2): Releasing active interface [ 1254.354380][T28895] geneve2: left promiscuous mode [ 1254.375099][T28895] geneve2: left allmulticast mode [ 1254.394116][T28895] bond3: left promiscuous mode [ 1254.413921][T28895] bridge0: port 3(bond3) entered disabled state [ 1254.526685][T28898] team0: Mode changed to "loadbalance" [ 1254.566065][T28905] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8867'. [ 1255.458883][T28921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8882'. [ 1255.504909][T28914] sd 0:0:1:0: PR command failed: 1026 [ 1255.515475][T28914] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1255.741892][T28914] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1258.949786][T25357] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1259.042037][T28983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8894'. [ 1259.090059][T28983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8894'. [ 1259.134768][T25357] usb 4-1: Using ep0 maxpacket: 32 [ 1259.182555][T25357] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 1259.275184][T25357] usb 4-1: config 0 has no interface number 0 [ 1259.284805][T25357] usb 4-1: config 0 interface 126 has no altsetting 0 [ 1259.320413][T25357] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1259.358449][T25357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.433252][T25357] usb 4-1: Product: syz [ 1259.447832][T25357] usb 4-1: Manufacturer: syz [ 1259.452496][T25357] usb 4-1: SerialNumber: syz [ 1259.554006][T25357] usb 4-1: config 0 descriptor?? [ 1259.637227][T28989] overlayfs: failed to clone upperpath [ 1260.183952][T25357] ir_usb 4-1:0.126: required endpoints missing [ 1260.241483][T25357] usb 4-1: USB disconnect, device number 15 [ 1260.488691][ T30] audit: type=1804 audit(1756718618.340:685): pid=29001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8903" name="file0" dev="tmpfs" ino=5726 res=1 errno=0 [ 1260.578930][T29002] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8905'. [ 1261.246413][T29021] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8924'. [ 1261.265950][T29021] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8924'. [ 1262.257748][T29039] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8921'. [ 1262.403193][ T30] audit: type=1326 audit(1756718620.260:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29036 comm="syz.5.8920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873758ebe9 code=0x7fc00000 [ 1263.019209][ T30] audit: type=1326 audit(1756718620.870:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29036 comm="syz.5.8920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f873758ebe9 code=0x7fc00000 [ 1263.386178][ T6021] libceph: connect (1)[c::]:6789 error -101 [ 1263.392340][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 1263.427428][T29064] ceph: No mds server is up or the cluster is laggy [ 1264.185056][ T6021] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1264.842689][ T6021] usb 6-1: Using ep0 maxpacket: 32 [ 1264.860706][ T6021] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1264.874934][ T6021] usb 6-1: config 0 has no interface number 0 [ 1264.883064][ T6021] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1264.899837][ T6021] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1264.909497][ T6021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.919685][ T6021] usb 6-1: Product: syz [ 1264.923885][ T6021] usb 6-1: Manufacturer: syz [ 1264.929359][ T6021] usb 6-1: SerialNumber: syz [ 1264.945814][ T6021] usb 6-1: config 0 descriptor?? [ 1264.966391][ T6021] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1265.260764][ T6021] em28xx 6-1:0.89: Video interface 89 found: bulk [ 1265.712892][ T6021] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1266.164922][ T6021] em28xx 6-1:0.89: AC97 command still being executed: not handled properly! [ 1266.346017][ T6021] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1266.354144][ T6021] em28xx 6-1:0.89: board has no eeprom [ 1266.416626][ T6021] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1266.423901][ T6021] em28xx 6-1:0.89: analog set to bulk mode. [ 1266.430112][ T6020] em28xx 6-1:0.89: Registering V4L2 extension [ 1266.444267][ T6021] usb 6-1: USB disconnect, device number 56 [ 1266.456567][ T6021] em28xx 6-1:0.89: Disconnecting em28xx [ 1266.490659][ T6020] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1266.499584][ T6020] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1266.506843][ T6020] em28xx 6-1:0.89: No AC97 audio processor [ 1266.523218][ T6020] usb 6-1: Decoder not found [ 1266.528568][ T6020] em28xx 6-1:0.89: failed to create media graph [ 1266.535215][ T6020] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1266.548736][ T6020] em28xx 6-1:0.89: Registering snapshot button... [ 1266.561708][ T6020] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input82 [ 1266.589452][ T6020] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1266.599260][ T6021] em28xx 6-1:0.89: Closing input extension [ 1266.608418][ T6021] em28xx 6-1:0.89: Deregistering snapshot button [ 1266.641726][ T6021] em28xx 6-1:0.89: Freeing device [ 1267.864650][T29110] netlink: 'syz.8.8945': attribute type 10 has an invalid length. [ 1269.725773][ T5957] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1269.931409][ T5957] usb 6-1: Using ep0 maxpacket: 8 [ 1269.950812][ T5957] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1270.015378][ T5957] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1270.026582][ T5957] usb 6-1: string descriptor 0 read error: -22 [ 1270.032921][ T5957] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1270.134024][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.207867][ T5957] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1270.260582][ T5957] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1270.324307][ T5957] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1270.360548][ T5957] usb 6-1: media controller created [ 1270.450275][T29129] usb 6-1: dvb_usb_au6610: wlen=0, aborting [ 1270.492950][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1270.657107][ T5957] zl10353_read_register: readreg error (reg=127, ret==0) [ 1270.836783][ T5957] usb 6-1: USB disconnect, device number 57 [ 1274.665891][T29213] loop3: detected capacity change from 0 to 1024 [ 1274.673292][T29213] EXT4-fs: Ignoring removed orlov option [ 1274.891307][T29213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1275.111137][ T30] audit: type=1800 audit(1756718632.970:688): pid=29213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8986" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1275.311101][ T30] audit: type=1800 audit(1756718633.170:689): pid=29213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8986" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1275.652549][ T30] audit: type=1804 audit(1756718633.190:690): pid=29213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.8986" name="/newroot/99/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 1276.130649][T26644] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1277.347113][ T6021] libceph: connect (1)[c::]:6789 error -101 [ 1277.353360][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 1277.382482][T29243] ceph: No mds server is up or the cluster is laggy [ 1280.005081][T29282] ceph: No mds server is up or the cluster is laggy [ 1280.468838][T29298] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1280.495498][T29298] overlayfs: failed to set xattr on upper [ 1280.515095][T29298] overlayfs: ...falling back to redirect_dir=nofollow. [ 1280.522072][T29298] overlayfs: ...falling back to metacopy=off. [ 1280.528579][T29298] overlayfs: ...falling back to index=off. [ 1280.534671][T29298] overlayfs: ...falling back to uuid=null. [ 1280.892957][T29309] block nbd5: shutting down sockets [ 1282.550258][T29332] tipc: Failed to remove unknown binding: 66,1,1/0:2294228296/2294228298 [ 1282.605551][ T6021] libceph: connect (1)[c::]:6789 error -22 [ 1282.611617][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 1282.895310][ T6021] libceph: connect (1)[c::]:6789 error -22 [ 1282.901427][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 1283.405372][T29335] ceph: No mds server is up or the cluster is laggy [ 1283.435489][ T6021] libceph: connect (1)[c::]:6789 error -22 [ 1283.441660][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 1284.926770][T29362] netlink: 372 bytes leftover after parsing attributes in process `syz.8.9047'. [ 1285.913316][T29349] loop3: detected capacity change from 0 to 40427 [ 1285.974476][T29349] F2FS-fs (loop3): invalid crc value [ 1286.338746][T29349] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1286.402857][T29349] F2FS-fs (loop3): Start checkpoint disabled! [ 1288.682483][T29405] overlayfs: failed to clone upperpath [ 1289.099929][T29410] loop3: detected capacity change from 0 to 512 [ 1289.703312][T29410] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1289.775297][T29410] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1289.836878][T29410] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 1289.909631][T29410] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1289.985619][T29410] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.9044: Failed to acquire dquot type 1 [ 1290.050174][T29410] EXT4-fs (loop3): 1 truncate cleaned up [ 1290.156358][T29410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1290.421099][T26644] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.146664][T29434] loop3: detected capacity change from 0 to 32768 [ 1291.159798][T29434] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.9059 (29434) [ 1291.178390][T29434] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1291.189190][T29434] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1291.540201][T29434] BTRFS info (device loop3): enabling ssd optimizations [ 1291.547302][T29434] BTRFS info (device loop3): enabling free space tree [ 1291.576945][T29454] overlayfs: failed to clone upperpath [ 1291.891776][T26644] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1295.515356][ T976] libceph: connect (1)[c::]:6789 error -22 [ 1295.521552][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 1295.537732][T29509] ceph: No mds server is up or the cluster is laggy [ 1296.443678][T29528] batman_adv: batadv0: Interface activated: dummy0 [ 1296.460084][T29528] batadv0: mtu less than device minimum [ 1296.470439][T29528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1296.482264][T29528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1296.494032][T29528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1296.505843][T29528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1296.517572][T29528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1296.529307][T29528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1296.540978][T29528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1296.552739][T29528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1296.564423][T29528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1297.346947][T29544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9093'. [ 1298.475230][T29556] ceph: No mds server is up or the cluster is laggy [ 1299.616896][T29575] overlayfs: failed to clone upperpath [ 1300.125517][T29579] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9106'. [ 1300.172420][T29582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9108'. [ 1300.240439][T29582] : entered promiscuous mode [ 1300.388978][T29579] netlink: 'syz.8.9106': attribute type 1 has an invalid length. [ 1300.630834][T29589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9121'. [ 1301.711223][T29621] loop3: detected capacity change from 0 to 2048 [ 1301.879188][T29621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1301.902215][T29626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9123'. [ 1301.918237][T29626] : entered promiscuous mode [ 1302.569216][T29635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9124'. [ 1302.794598][T29639] netlink: 'syz.5.9124': attribute type 1 has an invalid length. [ 1303.385659][T29652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9141'. [ 1304.200350][ T30] audit: type=1800 audit(1756718662.030:691): pid=29666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.9136" name="bus" dev="overlay" ino=6935 res=0 errno=0 [ 1306.863476][T29697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.870868][T29697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.878558][T29697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.885766][T29697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1307.403286][T29697] net_ratelimit: 11 callbacks suppressed [ 1307.403309][T29697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1308.709299][ T976] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 1308.720879][T29714] loop3: detected capacity change from 0 to 512 [ 1308.776175][T29714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1308.815337][ T976] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1308.825628][T29714] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1309.105076][T29720] overlayfs: failed to clone upperpath [ 1309.302643][T26644] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1309.575694][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1309.583578][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.028165][T29739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9161'. [ 1310.038178][T29739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1310.739013][T29741] loop3: detected capacity change from 0 to 65536 [ 1310.840354][T29741] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1310.904902][T29741] XFS (loop3): Ending clean mount [ 1310.944888][T29741] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x12d/0x1d0, xfs_agfl block 0x3 [ 1310.957144][T29741] XFS (loop3): Unmount and run xfs_repair [ 1310.962949][T29741] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1310.970688][T29741] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 1310.979617][T29741] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 1310.988554][T29741] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 1310.997549][T29741] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 1311.006689][T29741] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1311.015576][T29741] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1311.024449][T29741] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1311.033849][T29741] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1311.042785][T29741] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x23b/0x390" at daddr 0x3 len 1 error 74 [ 1311.055627][T29741] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x400/0x970 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 1311.070351][T29741] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 1311.251305][T26644] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1311.635550][T29759] overlayfs: failed to clone upperpath [ 1314.142727][T29785] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9171'. [ 1315.062244][ T30] audit: type=1800 audit(1756718672.920:692): pid=29794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.9176" name="file1" dev="tmpfs" ino=6147 res=0 errno=0 [ 1318.747215][T29836] loop3: detected capacity change from 0 to 16 [ 1319.120413][T29836] erofs (device loop3): mounted with root inode @ nid 36. [ 1321.103093][T29863] sch_fq: defrate 0 ignored. [ 1324.318914][T29896] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9214'. [ 1324.527607][T29900] overlayfs: failed to clone upperpath [ 1325.669725][T29915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9221'. [ 1327.841760][T29932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9229'. [ 1327.888516][T29932] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9229'. [ 1329.502036][T29965] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.9241'. [ 1329.524268][T29965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9241'. [ 1330.960589][T29985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9247'. [ 1331.928599][ T30] audit: type=1804 audit(1756718689.790:693): pid=29994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.9251" name="/newroot/1327/file0" dev="tmpfs" ino=7060 res=1 errno=0 [ 1332.239960][T29905] Set syz1 is full, maxelem 65536 reached [ 1338.232570][T30045] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1339.129521][T30066] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9277'. [ 1342.165171][T30091] bridge_slave_0: left promiscuous mode [ 1342.852529][T30091] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1343.079567][T30091] bond2: left promiscuous mode [ 1343.084443][T30091] bond2: left allmulticast mode [ 1343.100342][T30091] bond3: left allmulticast mode [ 1343.203492][T26482] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1343.253988][T26482] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.301464][T26482] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1343.330912][T26482] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.351760][T26482] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1343.378731][T26482] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.406224][T26482] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1343.429876][T26482] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.677260][T30113] loop3: detected capacity change from 0 to 32768 [ 1343.704304][ T30] audit: type=1800 audit(1756718701.560:694): pid=30113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9291" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 1343.757713][ T30] audit: type=1800 audit(1756718701.560:695): pid=30113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9291" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 1344.303272][T30115] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root [ 1344.303272][T30115] [ 1344.326093][T30115] ERROR: (device loop3): remounting filesystem as read-only [ 1344.745500][T26644] ------------[ cut here ]------------ [ 1344.752096][T26644] kernel BUG at fs/jfs/inode.c:169! [ 1344.770947][T26644] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1344.777430][T26644] CPU: 1 UID: 0 PID: 26644 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1344.786991][T26644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1344.797044][T26644] RIP: 0010:jfs_evict_inode+0x3eb/0x4b0 [ 1344.802600][T26644] Code: 24 80 00 74 0d e8 e5 8f 78 fe 48 89 df e8 5d 8c 02 00 e8 d8 8f 78 fe 48 89 df e8 60 b1 15 ff e9 e7 fc ff ff e8 c6 8f 78 fe 90 <0f> 0b 48 c7 c7 e0 2b b9 8e e8 27 f5 dd fe e9 44 fc ff ff e8 1d f5 [ 1344.822240][T26644] RSP: 0018:ffffc9000be17b70 EFLAGS: 00010293 [ 1344.828311][T26644] RAX: 0000000000000000 RBX: ffff888076e36998 RCX: ffffffff8258959b [ 1344.836279][T26644] RDX: ffff888066be0000 RSI: ffffffff8342fdba RDI: ffff888076e36988 [ 1344.844258][T26644] RBP: ffff888076e36620 R08: 0000000000000005 R09: 0000000000000000 [ 1344.852229][T26644] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888076e36bb8 [ 1344.860201][T26644] R13: ffffffff8342f9d0 R14: 0000000000000000 R15: ffff888076e36b60 [ 1344.868262][T26644] FS: 0000555564dbb500(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 1344.877194][T26644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1344.883774][T26644] CR2: 000000110c3bfc45 CR3: 0000000060292000 CR4: 0000000000350ef0 [ 1344.891745][T26644] Call Trace: [ 1344.895017][T26644] [ 1344.897971][T26644] ? __pfx_jfs_evict_inode+0x10/0x10 [ 1344.903262][T26644] evict+0x3e6/0x920 [ 1344.907165][T26644] ? __pfx_evict+0x10/0x10 [ 1344.911594][T26644] ? __pfx___might_resched+0x10/0x10 [ 1344.916902][T26644] ? find_held_lock+0x2b/0x80 [ 1344.921588][T26644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1344.927237][T26644] ? find_held_lock+0x2b/0x80 [ 1344.931928][T26644] dispose_list+0x117/0x1e0 [ 1344.936450][T26644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1344.942093][T26644] evict_inodes+0x365/0x460 [ 1344.946609][T26644] ? __pfx_evict_inodes+0x10/0x10 [ 1344.951642][T26644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1344.957287][T26644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1344.962932][T26644] ? shrink_dcache_for_umount+0x1a6/0x3e0 [ 1344.968668][T26644] generic_shutdown_super+0xb2/0x390 [ 1344.973965][T26644] kill_block_super+0x3b/0x90 [ 1344.978652][T26644] deactivate_locked_super+0xc1/0x1a0 [ 1344.984060][T26644] deactivate_super+0xde/0x100 [ 1344.988834][T26644] cleanup_mnt+0x225/0x450 [ 1344.993265][T26644] task_work_run+0x150/0x240 [ 1344.997856][T26644] ? __pfx_task_work_run+0x10/0x10 [ 1345.002973][T26644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1345.008617][T26644] ? __pfx___x64_sys_umount+0x10/0x10 [ 1345.013994][T26644] exit_to_user_mode_loop+0xeb/0x110 [ 1345.019281][T26644] do_syscall_64+0x3f6/0x4c0 [ 1345.023913][T26644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.029806][T26644] RIP: 0033:0x7f4bbe18ff17 [ 1345.034216][T26644] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1345.053821][T26644] RSP: 002b:00007ffcceb23678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1345.062235][T26644] RAX: 0000000000000000 RBX: 00007f4bbe211c05 RCX: 00007f4bbe18ff17 [ 1345.070204][T26644] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcceb23730 [ 1345.078169][T26644] RBP: 00007ffcceb23730 R08: 0000000000000000 R09: 0000000000000000 [ 1345.086134][T26644] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcceb247c0 [ 1345.094101][T26644] R13: 00007f4bbe211c05 R14: 000000000014855c R15: 00007ffcceb24800 [ 1345.102079][T26644] [ 1345.105117][T26644] Modules linked in: [ 1345.109982][T26644] ---[ end trace 0000000000000000 ]--- [ 1345.224772][T26644] RIP: 0010:jfs_evict_inode+0x3eb/0x4b0 [ 1345.234761][T26644] Code: 24 80 00 74 0d e8 e5 8f 78 fe 48 89 df e8 5d 8c 02 00 e8 d8 8f 78 fe 48 89 df e8 60 b1 15 ff e9 e7 fc ff ff e8 c6 8f 78 fe 90 <0f> 0b 48 c7 c7 e0 2b b9 8e e8 27 f5 dd fe e9 44 fc ff ff e8 1d f5 [ 1345.322584][T26644] RSP: 0018:ffffc9000be17b70 EFLAGS: 00010293 [ 1345.373540][T26644] RAX: 0000000000000000 RBX: ffff888076e36998 RCX: ffffffff8258959b [ 1345.443450][T26644] RDX: ffff888066be0000 RSI: ffffffff8342fdba RDI: ffff888076e36988 [ 1345.524134][T26644] RBP: ffff888076e36620 R08: 0000000000000005 R09: 0000000000000000 [ 1345.534181][T26644] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888076e36bb8 [ 1345.548928][T26644] R13: ffffffff8342f9d0 R14: 0000000000000000 R15: ffff888076e36b60 [ 1345.558399][T26644] FS: 0000555564dbb500(0000) GS:ffff8881246b9000(0000) knlGS:0000000000000000 [ 1345.572614][T26644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1345.581638][T26644] CR2: 0000001b32718ff8 CR3: 0000000060292000 CR4: 0000000000350ef0 [ 1345.609428][T26644] Kernel panic - not syncing: Fatal exception [ 1345.615636][T26644] Kernel Offset: disabled [ 1345.619961][T26644] Rebooting in 86400 seconds..