last executing test programs: 6m51.005418652s ago: executing program 32 (id=398): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0xfffffffffffffc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a", @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 6m41.666074545s ago: executing program 33 (id=436): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 6m40.918395406s ago: executing program 34 (id=439): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 4m33.708402093s ago: executing program 35 (id=1158): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_add_dev(r2, 0x0, r0, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x3, 0x67b, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r2, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0xa2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x40, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x208}}], 0x1, 0x0, 0x0) 4m9.699022552s ago: executing program 7 (id=1291): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2c24", 0x5dc}], 0x1}, 0x30008b08) 4m8.990611427s ago: executing program 7 (id=1297): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'lblcr\x00', 0x1, 0x6, 0x48}, 0x2c) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m8.661732809s ago: executing program 7 (id=1300): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fb", 0x42}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 4m7.44373799s ago: executing program 7 (id=1310): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)='./file0\x00') 4m6.824776634s ago: executing program 7 (id=1316): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0xa, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000080}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m5.88278552s ago: executing program 7 (id=1322): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000380)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) 4m5.135979876s ago: executing program 36 (id=1322): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000380)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) 2m38.405517553s ago: executing program 9 (id=1768): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x802) 2m37.798882464s ago: executing program 9 (id=1772): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x30}, 0x8}, 0x1c, 0x0}}], 0x1, 0x24048940) r0 = io_uring_setup(0x47f0, &(0x7f0000000000)={0x0, 0xd7af, 0x10000, 0x0, 0x2b}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000180), 0x1900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2a00}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m37.434541609s ago: executing program 9 (id=1774): socket$inet6_udp(0xa, 0x2, 0x0) fanotify_init(0x16, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m37.196499611s ago: executing program 9 (id=1777): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 2m36.585682697s ago: executing program 9 (id=1781): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 2m35.915994248s ago: executing program 9 (id=1787): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x3020) 2m34.944649886s ago: executing program 37 (id=1787): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x3020) 54.726335947s ago: executing program 2 (id=2322): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 54.480817632s ago: executing program 2 (id=2327): mkdirat(0xffffffffffffff9c, &(0x7f0000000010)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x0, 0x0) mount(&(0x7f0000000020)=@filename='sysfs\x00', &(0x7f0000000030)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000000d0)='idma64\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/idma64/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='pcspkr\x00', 0x6) 54.163329607s ago: executing program 2 (id=2329): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x6, 0x400ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x4000800, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) 53.953532035s ago: executing program 2 (id=2332): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x88f41, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 52.13411085s ago: executing program 2 (id=2348): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000000)={[{@nogrpid}, {@dioread_lock}, {@nouid32}]}, 0xfe, 0x244, &(0x7f0000000840)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x140) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 51.633567567s ago: executing program 2 (id=2350): setpgid(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/config.gz\x00', 0x0, 0x80) lseek(r0, 0x3, 0x1) 37.447849042s ago: executing program 5 (id=2407): r0 = inotify_init() r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 37.018246379s ago: executing program 5 (id=2413): syz_read_part_table(0x5d6, &(0x7f0000000880)="$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") r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x200001d4}, 0x8840) r1 = socket(0x23, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000100)={[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@flag='dirsync'}, {@fsname={'fsname', 0x3d, 'msdos\x00'}}, {@subj_user={'subj_user', 0x3d, 'msdos\x00'}}, {@appraise}, {@measure}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x1b3, &(0x7f0000000280)="$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") 36.156827051s ago: executing program 38 (id=2350): setpgid(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/config.gz\x00', 0x0, 0x80) lseek(r0, 0x3, 0x1) 36.127406522s ago: executing program 5 (id=2422): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x80000001}, 0x8) 35.876306635s ago: executing program 5 (id=2424): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000680)={[{@data_err_ignore}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@nodelalloc}, {@debug}]}, 0x1, 0x488, &(0x7f00000001c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x85b400, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) 34.52119906s ago: executing program 5 (id=2432): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='!', 0x1, 0x2cf2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x101042, 0x4a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='fd\x00') getdents(r2, &(0x7f0000001ec0)=""/4108, 0x100c) 33.956288731s ago: executing program 5 (id=2434): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, 0x0, 0x0, 0x2, 0x100e, &(0x7f0000001880)=""/4110, 0x40f00, 0x39}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@netkit}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="000000002c12070008000400"], 0x28}}, 0x4004090) 33.363007038s ago: executing program 39 (id=2434): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, 0x0, 0x0, 0x2, 0x100e, &(0x7f0000001880)=""/4110, 0x40f00, 0x39}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@netkit}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="000000002c12070008000400"], 0x28}}, 0x4004090) 7.713182684s ago: executing program 0 (id=2550): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MEDIA_SET(r1, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x39d88, 0x17294}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}]}, 0x40}, 0x1, 0x8100, 0x0, 0x4010}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0xd) 7.397324852s ago: executing program 4 (id=2551): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 7.055111578s ago: executing program 3 (id=2553): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000002f77fbac141516e0000001440c0510b18000890304000084500806325f003901050b038da1002125181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 6.811133362s ago: executing program 8 (id=2555): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004005) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x1cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000440)={0x0, 0x1d, "e2e6a141cd18cb820abf00386d51a2edab535ea30308a7ebcb456c5941"}, &(0x7f0000000480)=0x25) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) io_uring_enter(r0, 0x2219, 0x34d3, 0x16, 0x0, 0x0) 6.8093057s ago: executing program 6 (id=2567): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_ublk_setup_io_uring(0x1b, &(0x7f0000000540)={0x0, 0x30b5, 0x800, 0x2, 0x15e}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.436397862s ago: executing program 0 (id=2557): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) shutdown(0xffffffffffffffff, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) shutdown(r0, 0x1) 6.032080803s ago: executing program 4 (id=2558): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x8000}, 0x0) 6.025131302s ago: executing program 3 (id=2559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70, 0x500}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) 5.851874681s ago: executing program 8 (id=2560): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(0x0, 0x0, 0x322020, 0x0, 0x1, 0x0, 0x0) 5.544261273s ago: executing program 6 (id=2561): setresuid(0x0, 0xee01, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.537149718s ago: executing program 4 (id=2562): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) shutdown(r0, 0x0) 5.363842796s ago: executing program 1 (id=2563): memfd_create(0x0, 0x1) syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000340)=""/170, 0xaa) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) 5.18493667s ago: executing program 8 (id=2564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x10483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03002cbd70000e0000000100000008000100", @ANYRES32=r3, @ANYBLOB="0800020000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 5.095450184s ago: executing program 4 (id=2565): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1401, 0x400, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) 5.030177495s ago: executing program 6 (id=2566): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x5, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x866, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.972057335s ago: executing program 3 (id=2568): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000580)="1038", 0x2}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000540), 0x4) 4.966284121s ago: executing program 0 (id=2580): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000002480)) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001580)='ns/uts\x00') ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x8008b705, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.798030943s ago: executing program 4 (id=2569): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0x8, 0x80000, 0x4}) 4.573348617s ago: executing program 8 (id=2570): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MEDIA_SET(r1, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x39d88, 0x17294}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}]}, 0x40}, 0x1, 0x8100, 0x0, 0x4010}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0xd) 3.818746572s ago: executing program 3 (id=2571): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x221c448, &(0x7f0000000080)=ANY=[], 0x0, 0xa80, &(0x7f0000000280)="$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") socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269be, 0x48031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) get_mempolicy(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000006000/0x2000)=nil, 0x2) 3.815296332s ago: executing program 1 (id=2584): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1401, 0x400, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) 3.79530193s ago: executing program 6 (id=2572): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) 3.671678558s ago: executing program 0 (id=2573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.450218465s ago: executing program 1 (id=2574): syz_open_dev$sndmidi(0x0, 0x2, 0x141102) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x0, 0x9}) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.441241017s ago: executing program 8 (id=2575): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000002f77fbac141516e0000001440c0510b18000890304000084500806325f003901050b038da1002125181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 2.960735102s ago: executing program 3 (id=2576): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f00000001c0)={0x0, 0x17, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.949979379s ago: executing program 1 (id=2577): r0 = syz_clone(0x87002100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0xdc, 0xe6, 0x1b, 0x20, 0x17ef, 0x720c, 0xd2e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x80, 0x0, 0x0, "", [{{0x9, 0x4, 0x72, 0x4, 0x0, 0x19, 0x19, 0xc6, 0x1}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') pread64(r2, &(0x7f0000000080)=""/11, 0xb, 0x2) 1.556837911s ago: executing program 1 (id=2578): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 1.556703631s ago: executing program 0 (id=2579): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.555202159s ago: executing program 6 (id=2592): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$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") r0 = fanotify_init(0x8, 0x40000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fanotify_mark(r0, 0x1, 0x8100011, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) close_range(r0, r1, 0x0) 1.553222244s ago: executing program 4 (id=2581): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) shutdown(0xffffffffffffffff, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) shutdown(r0, 0x1) 1.54757269s ago: executing program 8 (id=2593): mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f00000002c0)={[{@filestreams}, {@uqnoenforce}, {@swalloc}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@dax_always}]}, 0xc2, 0x9646, &(0x7f00000259c0)="$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") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x10) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) 758.118698ms ago: executing program 6 (id=2582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70, 0x500}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) 373.369186ms ago: executing program 0 (id=2583): setresuid(0x0, 0xee01, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 131.986705ms ago: executing program 1 (id=2585): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_ublk_setup_io_uring(0x1b, &(0x7f0000000540)={0x0, 0x30b5, 0x800, 0x2, 0x15e}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 3 (id=2586): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000580)="1038", 0x2}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000540), 0x4) kernel console output (not intermixed with test programs): SB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 391.865184][T11670] hfsplus: failed to load extents file [ 391.898941][ T5851] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 391.920313][ T5851] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 391.951104][ T5851] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 391.995920][ T5851] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 392.065729][ T5851] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.135707][ T5851] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.151748][T11681] tipc: Started in network mode [ 392.187044][T11681] tipc: Node identity 1, cluster identity 4711 [ 392.202340][T11681] tipc: Node number set to 1 [ 392.225931][T11685] tipc: New replicast peer: 127.0.0.1 [ 392.378428][T11685] tipc: Enabled bearer , priority 10 [ 392.422074][ T5851] usb 10-1: usb_control_msg returned -32 [ 392.441373][ T5851] usbtmc 10-1:16.0: can't read capabilities [ 392.506758][T11690] tipc: Disabling bearer [ 392.542728][T11694] fuse: Bad value for 'fd' [ 393.282474][T11719] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 393.485209][ T5338] usb 10-1: USB disconnect, device number 10 [ 394.914939][T11761] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 394.989134][T11756] overlayfs: failed to resolve './file0': -2 [ 395.113981][T11767] overlayfs: failed to clone upperpath [ 396.453394][T11782] loop9: detected capacity change from 0 to 131072 [ 396.479261][T11782] F2FS-fs (loop9): invalid crc value [ 396.630342][T11782] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 396.653127][T11782] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 396.746324][T11789] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1677'. [ 396.789056][T11789] netlink: 'syz.6.1677': attribute type 7 has an invalid length. [ 396.872609][T11789] netlink: 'syz.6.1677': attribute type 8 has an invalid length. [ 396.950490][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1677'. [ 397.071901][T11789] erspan0: entered promiscuous mode [ 397.175596][T11789] erspan0: left promiscuous mode [ 399.080373][T11843] fuse: Bad value for 'fd' [ 399.219478][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1687'. [ 399.506593][T11855] overlayfs: failed to clone upperpath [ 400.105670][T11868] loop6: detected capacity change from 0 to 2048 [ 400.220764][T11868] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #2: comm syz.6.1695: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 261(261) [ 400.476916][T11868] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 400.482401][T11868] EXT4-fs (loop6): Remounting filesystem read-only [ 400.491612][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 400.491641][ C0] EXT4-fs (loop6): initial error at time 3934740503: ext4_ext_check_inode:521: inode 2 [ 400.491690][ C0] EXT4-fs (loop6): last error at time 3934740503: ext4_ext_check_inode:521: inode 2 [ 400.604556][T11868] EXT4-fs (loop6): get root inode failed [ 400.635234][T11868] EXT4-fs (loop6): mount failed [ 401.995032][T11906] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1710'. [ 402.026210][T11906] netlink: 'syz.9.1710': attribute type 7 has an invalid length. [ 402.064899][T11906] netlink: 'syz.9.1710': attribute type 8 has an invalid length. [ 402.081054][ T30] audit: type=1326 audit(3934740504.899:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11907 comm="syz.8.1711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf9e0d9 code=0x7ffc0000 [ 402.103309][T11906] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1710'. [ 402.185838][ T30] audit: type=1326 audit(3934740504.899:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11907 comm="syz.8.1711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf9e0d9 code=0x7ffc0000 [ 402.248290][ T30] audit: type=1326 audit(3934740504.899:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11907 comm="syz.8.1711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf9e0d9 code=0x7ffc0000 [ 402.295958][T11906] erspan0: entered promiscuous mode [ 402.329182][ T30] audit: type=1326 audit(3934740504.899:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11907 comm="syz.8.1711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf9e0d9 code=0x7ffc0000 [ 402.377381][T11906] erspan0: left promiscuous mode [ 402.427687][ T30] audit: type=1326 audit(3934740504.899:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11907 comm="syz.8.1711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7ff58cf9e0d9 code=0x7ffc0000 [ 402.462451][T11914] fuse: Bad value for 'fd' [ 402.511427][T11917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1716'. [ 402.518024][ T30] audit: type=1326 audit(3934740504.899:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11907 comm="syz.8.1711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf9e0d9 code=0x7ffc0000 [ 402.624213][ T30] audit: type=1326 audit(3934740504.909:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11907 comm="syz.8.1711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf9e0d9 code=0x7ffc0000 [ 402.695513][ T30] audit: type=1326 audit(3934740504.909:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11907 comm="syz.8.1711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf9e0d9 code=0x7ffc0000 [ 402.762395][ T30] audit: type=1326 audit(3934740504.899:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11907 comm="syz.8.1711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf9e0d9 code=0x7ffc0000 [ 402.805623][T11923] loop6: detected capacity change from 0 to 128 [ 402.837208][T11923] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 402.891596][ T30] audit: type=1326 audit(3934740504.909:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11907 comm="syz.8.1711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7ff58cf9e0d9 code=0x7ffc0000 [ 403.160525][T11917] mac80211_hwsim hwsim30 wlan1: entered promiscuous mode [ 403.218327][T11926] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 403.273153][T11926] overlayfs: failed to set xattr on upper [ 403.297049][T11926] overlayfs: ...falling back to redirect_dir=nofollow. [ 403.338418][T11926] overlayfs: ...falling back to uuid=null. [ 403.368446][T11926] overlayfs: conflicting lowerdir path [ 404.875420][T11948] loop9: detected capacity change from 0 to 512 [ 404.958424][T11951] netlink: 'syz.6.1724': attribute type 1 has an invalid length. [ 405.002729][T11948] EXT4-fs warning (device loop9): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 405.016280][T11948] EXT4-fs warning (device loop9): dx_probe:848: Enable large directory feature to access it [ 405.027542][T11948] EXT4-fs warning (device loop9): dx_probe:933: inode #2: comm syz.9.1728: Corrupt directory, running e2fsck is recommended [ 405.095418][T11951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.294628][T11948] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 405.342213][T11948] EXT4-fs error (device loop9): ext4_iget_extra_inode:5151: inode #15: comm syz.9.1728: corrupted in-inode xattr: invalid ea_ino [ 405.473467][T11948] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.474002][T11948] EXT4-fs (loop9): Remounting filesystem read-only [ 405.483528][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 405.483561][ C0] EXT4-fs (loop9): initial error at time 3934740508: ext4_iget_extra_inode:5151: inode 15 [ 405.483615][ C0] EXT4-fs (loop9): last error at time 3934740508: ext4_iget_extra_inode:5151: inode 15 [ 405.656406][T11975] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1735'. [ 405.680217][T11948] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.748006][ T12] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.764100][T11975] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1735'. [ 405.806240][ T12] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.823955][ T12] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.856533][ T12] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.122942][T11985] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1738'. [ 406.166407][T11985] netlink: 'syz.8.1738': attribute type 11 has an invalid length. [ 406.185014][ T9674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.186315][T11985] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1738'. [ 406.208507][T11965] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 406.263568][T11985] netlink: 'syz.8.1738': attribute type 11 has an invalid length. [ 406.397610][T11965] usb 5-1: Using ep0 maxpacket: 32 [ 406.420725][T11965] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 406.457641][T11965] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 406.484988][T11965] usb 5-1: config 0 has no interface number 0 [ 406.496488][T11965] usb 5-1: config 0 interface 184 has no altsetting 0 [ 406.514982][T11965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.532466][T11965] usb 5-1: Product: syz [ 406.538680][T11965] usb 5-1: Manufacturer: syz [ 406.548069][T11965] usb 5-1: SerialNumber: syz [ 406.568889][T11965] usb 5-1: config 0 descriptor?? [ 407.677390][T12006] loop6: detected capacity change from 0 to 512 [ 407.728330][T12006] EXT4-fs: Ignoring removed mblk_io_submit option [ 407.774236][T12006] EXT4-fs error (device loop6): ext4_iget_extra_inode:5151: inode #15: comm syz.6.1745: corrupted in-inode xattr: e_value size too large [ 407.810849][T12006] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 407.813819][T12006] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1745: couldn't read orphan inode 15 (err -117) [ 407.823234][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 407.823266][ C1] EXT4-fs (loop6): initial error at time 3934740510: ext4_iget_extra_inode:5151: inode 15 [ 407.823319][ C1] EXT4-fs (loop6): last error at time 3934740510: ext4_iget_extra_inode:5151: inode 15 [ 407.863267][T12006] loop6: lost filesystem error report for type 5 error -117 [ 407.869693][T12006] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.004626][T12006] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #2: block 12: comm syz.6.1745: lblock 3 mapped to illegal pblock 12 (length 1) [ 408.101571][T11965] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 408.106738][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 408.135156][T11965] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 408.172483][T11965] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 408.204008][T11965] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 408.215202][T11965] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 408.225968][T11965] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 408.240367][T11965] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 408.248486][T12019] overlayfs: failed to resolve './file0': -2 [ 408.261156][ T6933] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.290961][T11965] usb 5-1: USB disconnect, device number 15 [ 408.316218][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 408.325524][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 408.368775][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.394602][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 408.452264][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 408.512762][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 408.547934][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.578737][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 408.590022][ T9] usb 1-1: Manufacturer: syz [ 408.608040][ T9] usb 1-1: config 0 descriptor?? [ 409.017445][ T9] rc_core: IR keymap rc-hauppauge not found [ 409.047890][ T9] Registered IR keymap rc-empty [ 409.071171][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 409.116507][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 409.163154][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 409.219133][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input18 [ 409.414336][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 409.477122][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 409.520716][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 409.567695][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 409.618033][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 409.668669][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 409.728156][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 409.781420][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 409.816696][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 409.847234][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 409.965570][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 409.975463][T12037] loop4: detected capacity change from 0 to 32768 [ 409.991072][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 410.049406][T12037] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1759 (12037) [ 410.085577][ T9] usb 1-1: USB disconnect, device number 5 [ 410.162745][T12037] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 410.199112][T12037] BTRFS info (device loop4): using sha256 checksum algorithm [ 410.523205][T12037] BTRFS info (device loop4): enabling ssd optimizations [ 410.551284][T12082] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 410.551284][T12082] The task syz.8.1771 (12082) triggered the difference, watch for misbehavior. [ 410.578780][T12037] BTRFS info (device loop4): turning on sync discard [ 410.614228][T12037] BTRFS info (device loop4): enabling free space tree [ 410.679044][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1770'. [ 410.723590][T12084] netlink: 'syz.0.1770': attribute type 11 has an invalid length. [ 410.791795][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1770'. [ 410.805629][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.836502][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.865113][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.884542][T12084] netlink: 'syz.0.1770': attribute type 11 has an invalid length. [ 410.908012][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.493389][T10948] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 411.566766][ T5909] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 411.738480][ T5909] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 411.798448][ T5909] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.825288][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.339281][ T5909] wacom 0003:056A:033B.0014: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 412.420768][ T5909] wacom 0003:056A:033B.0014: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 412.496634][ T5909] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0014/input/input19 [ 412.749071][T12120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.184876][ T9] usb 1-1: USB disconnect, device number 6 [ 413.192876][T11339] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.565068][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1791'. [ 413.635384][T11339] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.880870][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 413.898160][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 413.911153][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 413.923822][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 413.932720][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 413.990655][T11339] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.390670][T11339] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.006261][ T5607] Bluetooth: hci0: command tx timeout [ 417.418955][T11339] bridge_slave_1: left allmulticast mode [ 417.439130][T11339] bridge_slave_1: left promiscuous mode [ 417.457135][T11339] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.543911][T11339] bridge_slave_0: left allmulticast mode [ 417.574859][T11339] bridge_slave_0: left promiscuous mode [ 417.597655][T11339] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.086651][ T5607] Bluetooth: hci0: command tx timeout [ 418.356530][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 418.541059][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 418.590548][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.642430][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.695876][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 418.731925][T11339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.769368][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.801005][T12218] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.802696][T11339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.863557][ T9] usb 7-1: config 0 descriptor?? [ 418.943697][T12218] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 418.944034][T11339] bond0 (unregistering): Released all slaves [ 419.154553][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 419.181436][T11339] ´: left promiscuous mode [ 419.390280][ T9] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 419.699046][T11339] tipc: Left network mode [ 420.166591][ T5623] Bluetooth: hci0: command tx timeout [ 420.247310][ T5623] Bluetooth: hci6: command 0x1003 tx timeout [ 420.253202][ T5607] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 420.697115][T11339] hsr_slave_0: left promiscuous mode [ 420.739783][T11339] hsr_slave_1: left promiscuous mode [ 420.758014][T11339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.765466][T12249] 9p: Bad value for 'rfdno' [ 420.794083][T11339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.835024][T11339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.866281][T11339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.961122][T11339] veth1_macvtap: left promiscuous mode [ 420.989863][T11339] veth0_macvtap: left promiscuous mode [ 421.019849][T11339] veth1_vlan: left promiscuous mode [ 421.039322][T11339] veth0_vlan: left promiscuous mode [ 421.670063][ T187] usb 7-1: USB disconnect, device number 9 [ 422.058452][T12269] loop6: detected capacity change from 0 to 40427 [ 422.070236][T12269] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 422.078044][T12269] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 422.173722][T12269] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 422.189386][T12269] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 422.196505][T12269] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 422.256205][ T5607] Bluetooth: hci0: command tx timeout [ 422.740204][T12269] syz.6.1829: attempt to access beyond end of device [ 422.740204][T12269] loop6: rw=2049, sector=45096, nr_sectors = 2048 limit=40427 [ 422.775528][T12269] syz.6.1829: attempt to access beyond end of device [ 422.775528][T12269] loop6: rw=2049, sector=47144, nr_sectors = 2056 limit=40427 [ 422.805267][T12269] syz.6.1829: attempt to access beyond end of device [ 422.805267][T12269] loop6: rw=2049, sector=49200, nr_sectors = 2048 limit=40427 [ 422.837110][T12269] syz.6.1829: attempt to access beyond end of device [ 422.837110][T12269] loop6: rw=2049, sector=51248, nr_sectors = 2000 limit=40427 [ 422.853332][T12269] syz.6.1829: attempt to access beyond end of device [ 422.853332][T12269] loop6: rw=2049, sector=45056, nr_sectors = 8 limit=40427 [ 422.926355][T12269] syz.6.1829: attempt to access beyond end of device [ 422.926355][T12269] loop6: rw=2049, sector=57344, nr_sectors = 8216 limit=40427 [ 423.009056][T12269] syz.6.1829: attempt to access beyond end of device [ 423.009056][T12269] loop6: rw=2049, sector=65560, nr_sectors = 8168 limit=40427 [ 423.038131][T12269] syz.6.1829: attempt to access beyond end of device [ 423.038131][T12269] loop6: rw=2049, sector=73728, nr_sectors = 8 limit=40427 [ 423.052276][T12269] syz.6.1829: attempt to access beyond end of device [ 423.052276][T12269] loop6: rw=2049, sector=73736, nr_sectors = 8 limit=40427 [ 423.066462][T12269] syz.6.1829: attempt to access beyond end of device [ 423.066462][T12269] loop6: rw=2049, sector=73744, nr_sectors = 8 limit=40427 [ 423.695730][T11339] team0 (unregistering): Port device team_slave_1 removed [ 423.789266][T11339] team0 (unregistering): Port device team_slave_0 removed [ 423.852402][ T6933] CPU: 0 UID: 0 PID: 6933 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 423.852464][ T6933] Tainted: [L]=SOFTLOCKUP [ 423.852477][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 423.852499][ T6933] Call Trace: [ 423.852510][ T6933] [ 423.852524][ T6933] dump_stack_lvl+0x100/0x190 [ 423.852577][ T6933] f2fs_stop_checkpoint+0x5e6/0xb30 [ 423.852638][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.852684][ T6933] ? errseq_set+0xe3/0x150 [ 423.852722][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.852775][ T6933] f2fs_write_end_bio+0xef9/0x12d0 [ 423.852845][ T6933] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 423.852915][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.852975][ T6933] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 423.853035][ T6933] bio_endio+0x778/0x8e0 [ 423.853088][ T6933] submit_bio_noacct+0x64c/0x1ff0 [ 423.853139][ T6933] f2fs_submit_write_bio+0x133/0x330 [ 423.853205][ T6933] __submit_merged_bio+0x330/0x7b0 [ 423.853266][ T6933] ? rcu_is_watching+0x13/0xc0 [ 423.853309][ T6933] __submit_merged_write_cond+0x3fe/0x510 [ 423.853383][ T6933] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 423.853457][ T6933] ? __pfx___might_resched+0x10/0x10 [ 423.853504][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.853550][ T6933] ? folio_clear_dirty_for_io+0x178/0x960 [ 423.853620][ T6933] f2fs_sync_node_pages+0x13c6/0x1690 [ 423.853689][ T6933] ? check_prev_add+0xfe/0xe60 [ 423.853743][ T6933] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 423.853800][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.853845][ T6933] ? __lock_acquire+0xe15/0x1ec0 [ 423.853946][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.853994][ T6933] ? down_write+0x146/0x1f0 [ 423.854040][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.854088][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.854133][ T6933] ? up_write+0x2dc/0x5b0 [ 423.854196][ T6933] block_operations+0x938/0xfc0 [ 423.854255][ T6933] ? __pfx_block_operations+0x10/0x10 [ 423.854355][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.854405][ T6933] ? ktime_get+0x22c/0x320 [ 423.854455][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.854502][ T6933] ? rcu_is_watching+0x13/0xc0 [ 423.854545][ T6933] f2fs_write_checkpoint+0x58b/0x53d0 [ 423.854596][ T6933] ? _raw_spin_unlock_irq+0x23/0x50 [ 423.854658][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.854703][ T6933] ? _raw_spin_unlock_irq+0x2e/0x50 [ 423.854760][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.854806][ T6933] ? __wait_for_common+0x1f3/0x4c0 [ 423.854842][ T6933] ? __pfx_schedule_timeout+0x10/0x10 [ 423.854904][ T6933] ? __pfx___wait_for_common+0x10/0x10 [ 423.854949][ T6933] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 423.854997][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.855053][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.855098][ T6933] ? rcu_is_watching+0x13/0xc0 [ 423.855135][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.855180][ T6933] ? kthread_stop+0x280/0x630 [ 423.855224][ T6933] kill_f2fs_super+0x3f1/0x4a0 [ 423.855271][ T6933] ? __pfx_kill_f2fs_super+0x10/0x10 [ 423.855338][ T6933] ? lockdep_hardirqs_on+0x7d/0x110 [ 423.855376][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.855423][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.855483][ T6933] deactivate_locked_super+0xbd/0x140 [ 423.855535][ T6933] deactivate_super+0xea/0x110 [ 423.855587][ T6933] cleanup_mnt+0x21f/0x450 [ 423.855649][ T6933] task_work_run+0x150/0x240 [ 423.855699][ T6933] ? __pfx_task_work_run+0x10/0x10 [ 423.855748][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.855802][ T6933] exit_to_user_mode_loop+0x1d8/0x700 [ 423.855857][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.855901][ T6933] ? rcu_is_watching+0x13/0xc0 [ 423.855948][ T6933] do_syscall_64+0x661/0x790 [ 423.855992][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.856030][ T6933] RIP: 0033:0x7f2c9df9f317 [ 423.856059][ T6933] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 423.856097][ T6933] RSP: 002b:00007ffc90d3f858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 423.856132][ T6933] RAX: 0000000000000000 RBX: 00007f2c9e034474 RCX: 00007f2c9df9f317 [ 423.856156][ T6933] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc90d3f910 [ 423.856178][ T6933] RBP: 00007ffc90d3f910 R08: 00007ffc90d40910 R09: 00000000ffffffff [ 423.856203][ T6933] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc90d409a0 [ 423.856226][ T6933] R13: 00007f2c9e034474 R14: 0000000000067690 R15: 00007ffc90d409e0 [ 423.856275][ T6933] [ 424.348926][ T6933] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 424.484020][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 424.576187][ T187] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 424.746368][ T187] usb 5-1: Using ep0 maxpacket: 8 [ 424.752220][ T187] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 424.768334][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 424.776509][ T187] usb 5-1: Product: syz [ 424.780725][ T187] usb 5-1: Manufacturer: syz [ 424.786155][ T187] usb 5-1: SerialNumber: syz [ 424.817762][ T187] usb 5-1: config 0 descriptor?? [ 424.855165][ T187] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 425.012710][T12308] loop0: detected capacity change from 0 to 64 [ 425.041102][T12133] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.113468][T12133] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.141178][T12133] bridge_slave_0: entered allmulticast mode [ 425.185079][T12133] bridge_slave_0: entered promiscuous mode [ 425.260636][T12133] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.293424][T12133] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.333776][T12133] bridge_slave_1: entered allmulticast mode [ 425.373727][ T187] gspca_sn9c2028: read1 error -110 [ 425.385088][T12133] bridge_slave_1: entered promiscuous mode [ 425.442147][ T187] gspca_sn9c2028: read1 error -71 [ 425.464040][ T187] gspca_sn9c2028: read1 error -71 [ 425.496371][ T187] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 425.559203][ T187] usb 5-1: USB disconnect, device number 16 [ 425.751496][T12133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.822980][T12133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.968953][T12133] team0: Port device team_slave_0 added [ 426.086475][T12133] team0: Port device team_slave_1 added [ 426.314761][T12133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.355674][T12133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.482175][T12133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.524348][T12133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.531416][T12133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.561360][T12133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.194383][T12133] hsr_slave_0: entered promiscuous mode [ 427.230687][T12133] hsr_slave_1: entered promiscuous mode [ 427.396328][T12357] VFS: file-max limit 0 reached [ 427.525071][T12360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1855'. [ 427.568114][T12360] netlink: 'syz.2.1855': attribute type 8 has an invalid length. [ 427.608514][T12360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1855'. [ 427.645575][T12366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1855'. [ 427.761078][T12366] netlink: 'syz.2.1855': attribute type 8 has an invalid length. [ 427.815133][T12366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1855'. [ 427.964603][T12363] loop6: detected capacity change from 0 to 8192 [ 428.009856][T12363] vfat filesystem being mounted at /225/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 428.095360][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 428.319153][T12379] ip_tables: iptables: counters copy to user failed while replacing table [ 430.300053][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 430.405243][T12431] netlink: 'syz.6.1875': attribute type 2 has an invalid length. [ 430.431876][T12431] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1875'. [ 430.519538][T12431] : entered promiscuous mode [ 430.970515][T12133] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 431.032713][T12133] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.072321][T12133] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 431.127296][T12133] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.161056][T12133] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 431.202466][T12133] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.228085][T12133] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 431.294624][T12133] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.654840][T12133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.788905][T12133] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.834780][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.842045][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.948699][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.955938][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.085520][T12475] overlayfs: failed to clone upperpath [ 432.542212][T12491] overlayfs: failed to clone upperpath [ 433.422025][T12512] ip_tables: iptables: counters copy to user failed while replacing table [ 434.441891][T12133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.771234][T12541] loop6: detected capacity change from 0 to 2048 [ 435.120788][T12545] loop4: detected capacity change from 0 to 40427 [ 435.135418][T12545] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 435.143264][T12545] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 435.299109][T12545] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 435.346802][T12545] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 435.353893][T12545] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 435.656593][T12563] ip_tables: iptables: counters copy to user failed while replacing table [ 435.759245][T12543] bio_check_eod: 1009 callbacks suppressed [ 435.759273][T12543] syz.4.1904: attempt to access beyond end of device [ 435.759273][T12543] loop4: rw=2049, sector=45096, nr_sectors = 1568 limit=40427 [ 435.914010][T12541] loop6: detected capacity change from 0 to 4096 [ 436.041862][T12541] ntfs3(loop6): Failed to load $Extend (-22). [ 436.081803][T12541] ntfs3(loop6): Failed to initialize $Extend. [ 436.119625][T12572] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1908'. [ 436.161272][T12545] syz.4.1904: attempt to access beyond end of device [ 436.161272][T12545] loop4: rw=2049, sector=46664, nr_sectors = 4088 limit=40427 [ 436.198554][T12545] syz.4.1904: attempt to access beyond end of device [ 436.198554][T12545] loop4: rw=2049, sector=50752, nr_sectors = 2496 limit=40427 [ 436.214955][T12545] syz.4.1904: attempt to access beyond end of device [ 436.214955][T12545] loop4: rw=2049, sector=45056, nr_sectors = 8 limit=40427 [ 436.286444][T12545] syz.4.1904: attempt to access beyond end of device [ 436.286444][T12545] loop4: rw=2049, sector=57344, nr_sectors = 8184 limit=40427 [ 436.310062][T12545] syz.4.1904: attempt to access beyond end of device [ 436.310062][T12545] loop4: rw=2049, sector=65528, nr_sectors = 392 limit=40427 [ 436.580518][T12133] veth0_vlan: entered promiscuous mode [ 436.630697][T12578] overlayfs: failed to clone upperpath [ 436.641024][T12133] veth1_vlan: entered promiscuous mode [ 436.683201][T12578] overlayfs: failed to clone upperpath [ 436.800622][T12133] veth0_macvtap: entered promiscuous mode [ 436.858682][T12133] veth1_macvtap: entered promiscuous mode [ 436.995784][T12133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.064443][T12133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.169910][ T1155] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.220641][ T1138] kworker/u8:7: attempt to access beyond end of device [ 437.220641][ T1138] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 437.241552][T10995] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.268508][ T29] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 437.288567][T10995] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.336873][T10995] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.358492][ T1138] kworker/u8:7: attempt to access beyond end of device [ 437.358492][ T1138] loop4: rw=1, sector=45120, nr_sectors = 8 limit=40427 [ 437.433660][ T1138] kworker/u8:7: attempt to access beyond end of device [ 437.433660][ T1138] loop4: rw=1, sector=45192, nr_sectors = 24 limit=40427 [ 437.496225][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 437.534498][ T29] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 437.576148][ T29] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 437.628171][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.643888][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.671097][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.689857][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.706289][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.743578][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.786049][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.830291][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.873732][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.899949][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.923373][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.939518][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.982722][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 438.024920][ T29] usb 1-1: SerialNumber: syz [ 438.072713][ T29] usb 1-1: config 0 descriptor?? [ 438.254521][ T29] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input22 [ 438.482707][T12586] input: syz1 as /devices/virtual/input/input23 [ 438.774106][ T4957] bcm5974 1-1:0.0: could not read from device [ 438.774497][ T29] usb 1-1: USB disconnect, device number 7 [ 439.036471][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 439.243338][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.258627][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 439.290501][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 439.303602][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 439.333420][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.359540][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.380339][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.391337][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.421305][ T9] usb 6-1: config 0 descriptor?? [ 439.915233][ T9] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 440.363365][ T24] usb 6-1: USB disconnect, device number 7 [ 440.466934][T12643] fido_id[12643]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 440.688901][T12656] veth1_to_bond: entered allmulticast mode [ 440.740127][T12656] veth1_to_bond: left allmulticast mode [ 442.243261][T12680] overlayfs: failed to clone upperpath [ 443.412927][T12707] syzkaller1: entered promiscuous mode [ 443.478016][T12707] syzkaller1: entered allmulticast mode [ 443.851019][ T5607] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 444.741923][T12710] loop6: detected capacity change from 0 to 131072 [ 444.757689][T12710] F2FS-fs (loop6): invalid crc value [ 444.882069][T12710] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 444.897010][T12710] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 446.239261][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1953'. [ 447.128168][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1956'. [ 447.215641][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1956'. [ 448.576979][T12798] fuse: Bad value for 'fd' [ 448.722768][T12779] loop0: detected capacity change from 0 to 131072 [ 448.902055][T12779] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 448.918468][T12779] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 449.094334][T12779] F2FS-fs (loop0): lookup inode (7) has corrupted xattr [ 450.389438][T12826] overlayfs: failed to clone upperpath [ 450.896443][T12832] syz.4.1968 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 450.988397][T12832] CPU: 0 UID: 0 PID: 12832 Comm: syz.4.1968 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.988461][T12832] Tainted: [L]=SOFTLOCKUP [ 450.988475][T12832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 450.988497][T12832] Call Trace: [ 450.988509][T12832] [ 450.988523][T12832] dump_stack_lvl+0x100/0x190 [ 450.988577][T12832] dump_header+0xfb/0x606 [ 450.988624][T12832] oom_kill_process.cold+0xd/0x330 [ 450.988673][T12832] out_of_memory+0x340/0x14f0 [ 450.988735][T12832] ? __pfx_out_of_memory+0x10/0x10 [ 450.988784][T12832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.988847][T12832] mem_cgroup_out_of_memory+0xc6/0x130 [ 450.988907][T12832] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 450.988963][T12832] ? find_held_lock+0x2b/0x80 [ 450.989013][T12832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.989067][T12832] ? do_raw_spin_unlock+0x145/0x1e0 [ 450.989131][T12832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.989179][T12832] ? _raw_spin_unlock+0x28/0x50 [ 450.989244][T12832] try_charge_memcg+0x6e1/0xdf0 [ 450.989299][T12832] ? __pfx_try_charge_memcg+0x10/0x10 [ 450.989343][T12832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.989389][T12832] ? find_held_lock+0x2b/0x80 [ 450.989428][T12832] ? rcu_read_unlock+0x17/0x60 [ 450.989474][T12832] ? rcu_read_unlock+0x17/0x60 [ 450.989518][T12832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.989583][T12832] __memcg_slab_post_alloc_hook+0x46c/0x1160 [ 450.989647][T12832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.989694][T12832] ? kasan_save_track+0x14/0x30 [ 450.989735][T12832] kmem_cache_alloc_lru_noprof+0x57f/0x6a0 [ 450.989800][T12832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.989846][T12832] ? _raw_spin_unlock+0x28/0x50 [ 450.989904][T12832] ? alloc_inode+0x183/0x250 [ 450.989961][T12832] alloc_inode+0x183/0x250 [ 450.990011][T12832] new_inode+0x22/0x1c0 [ 450.990063][T12832] ? dput.part.0+0x4f/0x240 [ 450.990116][T12832] simple_fill_super+0x2da/0x690 [ 450.990163][T12832] ? __pfx_nfsd_fill_super+0x10/0x10 [ 450.990231][T12832] nfsd_fill_super+0x98/0x560 [ 450.990296][T12832] ? __pfx_nfsd_fill_super+0x10/0x10 [ 450.990356][T12832] get_tree_keyed+0x10e/0x1d0 [ 450.990412][T12832] vfs_get_tree+0x92/0x320 [ 450.990453][T12832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.990504][T12832] path_mount+0x7d0/0x24c0 [ 450.990555][T12832] ? __pfx_path_mount+0x10/0x10 [ 450.990596][T12832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.990643][T12832] ? lockdep_hardirqs_on+0x7d/0x110 [ 450.990687][T12832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.990734][T12832] ? kmem_cache_free+0x127/0x6b0 [ 450.990805][T12832] ? __x64_sys_mount+0x293/0x310 [ 450.990847][T12832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.990893][T12832] __x64_sys_mount+0x293/0x310 [ 450.990939][T12832] ? __pfx___x64_sys_mount+0x10/0x10 [ 450.990990][T12832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.991122][T12832] do_syscall_64+0x123/0x790 [ 450.991166][T12832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.991207][T12832] RIP: 0033:0x7f2c9839e0d9 [ 450.991237][T12832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.991275][T12832] RSP: 002b:00007f2c992f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 450.991312][T12832] RAX: ffffffffffffffda RBX: 00007f2c98625fa0 RCX: 00007f2c9839e0d9 [ 450.991337][T12832] RDX: 0000200000000400 RSI: 0000200000000100 RDI: 0000000000000000 [ 450.991362][T12832] RBP: 00007f2c98435024 R08: 0000000000000000 R09: 0000000000000000 [ 450.991387][T12832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.991410][T12832] R13: 00007f2c98626038 R14: 00007f2c98625fa0 R15: 00007ffe8c2454b8 [ 450.991463][T12832] [ 451.363475][T12832] memory: usage 8kB, limit 8kB, failcnt 21 [ 451.369388][T12832] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 451.378752][T12832] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 451.385611][T12832] Memory cgroup stats for /syz4/test: [ 451.386182][T12832] cache 0 [ 451.394477][T12832] rss 0 [ 451.397278][T12832] rss_huge 0 [ 451.400484][T12832] shmem 0 [ 451.403503][T12832] mapped_file 0 [ 451.408302][T12832] dirty 0 [ 451.411245][T12832] writeback 0 [ 451.414532][T12832] workingset_refault_anon 0 [ 451.419121][T12832] workingset_refault_file 0 [ 451.423631][T12832] swap 0 [ 451.451145][T12832] swapcached 0 [ 451.454566][T12832] pgpgin 0 [ 451.457657][T12832] pgpgout 0 [ 451.460778][T12832] pgfault 4 [ 451.463888][T12832] pgmajfault 0 [ 451.467720][T12832] inactive_anon 0 [ 451.471452][T12832] active_anon 0 [ 451.474913][T12832] inactive_file 0 [ 451.478663][T12832] active_file 0 [ 451.482128][T12832] unevictable 0 [ 451.485588][T12832] hierarchical_memory_limit 8192 [ 451.490622][T12832] hierarchical_memsw_limit 9223372036854771712 [ 451.496905][T12832] total_cache 0 [ 451.500369][T12832] total_rss 0 [ 451.503669][T12832] total_rss_huge 0 [ 451.507490][T12832] total_shmem 0 [ 451.512181][T12832] total_mapped_file 0 [ 451.516237][T12832] total_dirty 0 [ 451.519713][T12832] total_writeback 0 [ 451.523525][T12832] total_workingset_refault_anon 0 [ 451.530635][T12832] total_workingset_refault_file 0 [ 451.535671][T12832] total_swap 0 [ 451.539218][T12832] total_swapcached 0 [ 451.543130][T12832] total_pgpgin 0 [ 451.546747][T12832] total_pgpgout 0 [ 451.550385][T12832] total_pgfault 4 [ 451.554024][T12832] total_pgmajfault 0 [ 451.558001][T12832] total_inactive_anon 0 [ 451.562170][T12832] total_active_anon 0 [ 451.568393][T12832] total_inactive_file 0 [ 451.573794][T12832] total_active_file 0 [ 451.579006][T12832] total_unevictable 0 [ 451.583668][T12832] anon_cost 0 [ 451.587105][T12832] file_cost 0 [ 451.590394][T12832] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.1968,pid=12831,uid=0 [ 451.606885][T12832] Memory cgroup out of memory: Killed process 12832 (syz.4.1968) total-vm:104300kB, anon-rss:1420kB, file-rss:22884kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 451.989153][T12845] CIFS: Attempting to mount //127.0.0.1/share [ 452.105554][T12850] loop6: detected capacity change from 0 to 1024 [ 452.140706][T12850] EXT4-fs: Ignoring removed nomblk_io_submit option [ 452.200431][T12850] EXT4-fs: Ignoring removed nomblk_io_submit option [ 452.313437][T12850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 452.359229][T12850] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.579062][T12860] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.1972: bg 0: block 112: padding at end of block bitmap is not set [ 452.632174][T12860] EXT4-fs (loop6): Remounting filesystem read-only [ 452.694968][T10995] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:5071: inode #15: block 3: len 1: ext4_ext_map_blocks returned -30 [ 452.743221][T12864] overlayfs: failed to clone upperpath [ 452.748994][ T29] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 452.782882][T12845] CIFS: VFS: cifs_mount failed w/return code = -112 [ 452.832843][ T6933] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 452.926925][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 452.959419][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 452.992425][ T29] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 453.040256][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.077982][T12871] syz.8.1977 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 453.088643][ T29] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 453.121631][ T29] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 453.169031][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.187119][ T29] usb 6-1: Product: syz [ 453.197621][ T29] usb 6-1: Manufacturer: syz [ 453.209395][ T29] usb 6-1: SerialNumber: syz [ 453.498836][ T29] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 453.531983][ T29] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 453.584797][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 453.584827][ T30] audit: type=1800 audit(3934740556.399:304): pid=12883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1965" name="bus" dev="overlay" ino=358 res=0 errno=0 [ 453.900605][ T29] usb 6-1: 2:1 : invalid Cluster Descriptor size [ 454.234861][ T29] usb 6-1: USB disconnect, device number 8 [ 455.477361][ T1955] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 455.668481][ T1955] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 455.717217][ T1955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.777951][ T1955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.834563][ T1955] usb 5-1: config 0 descriptor?? [ 455.901690][ T1955] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 456.432083][ T9] usb 5-1: USB disconnect, device number 17 [ 456.936982][T12976] loop0: detected capacity change from 0 to 256 [ 457.016794][T12976] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 457.110013][T12976] vfat filesystem being mounted at /64/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 459.503201][T13027] loop0: detected capacity change from 0 to 2048 [ 459.811998][T13027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.270031][T13019] kexec: Could not allocate control_code_buffer [ 460.554830][ T1155] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 460.621123][ T1155] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 460.673300][ T1155] EXT4-fs (loop0): This should not happen!! Data will be lost [ 460.673300][ T1155] [ 460.713664][ T1155] EXT4-fs (loop0): Total free blocks count 0 [ 460.743385][ T1155] EXT4-fs (loop0): Free/Dirty block details [ 460.767445][ T1155] EXT4-fs (loop0): free_blocks=2415919504 [ 460.780321][T13024] loop6: detected capacity change from 0 to 32768 [ 460.791895][ T1155] EXT4-fs (loop0): dirty_blocks=16 [ 460.801865][ T1155] EXT4-fs (loop0): Block reservation details [ 460.828001][ T1155] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 460.848087][T13024] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 460.851420][ T57] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 460.941883][T13024] XFS (loop6): Ending clean mount [ 460.954202][T11037] EXT4-fs warning (device loop0): ext4_evict_inode:197: inode #15: comm syz-executor: data will be lost [ 461.048038][ T1955] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 461.237218][ T187] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 461.248530][ T1955] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 461.298906][ T1955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.327047][ T1955] usb 5-1: Product: syz [ 461.343214][ T1955] usb 5-1: Manufacturer: syz [ 461.358026][ T1955] usb 5-1: SerialNumber: syz [ 461.399966][ T187] usb 6-1: Using ep0 maxpacket: 8 [ 461.406657][T13066] loop0: detected capacity change from 0 to 2048 [ 461.415975][ T187] usb 6-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 461.452829][ T187] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.464313][ T187] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 461.480798][ T187] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.494151][ T187] usb 6-1: config 0 interface 0 has no altsetting 0 [ 461.501179][ T187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.522826][ T187] usb 6-1: config 0 descriptor?? [ 461.530815][T13059] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 461.847608][ T1955] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 461.861943][ T1955] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 461.972677][ T6933] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 462.154937][ T187] input: HID 1b96:000a as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:1B96:000A.0017/input/input25 [ 462.264007][ T187] ntrig 0003:1B96:000A.0017: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:000a] on usb-dummy_hcd.5-1/input0 [ 462.350337][ T187] ntrig 0003:1B96:000A.0017: Firmware version: 2.11.10.15.1 (ed15 f141) [ 462.572693][ T1955] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 462.619323][ T1955] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 462.643827][ T5767] usb 6-1: USB disconnect, device number 9 [ 462.712871][T13070] fido_id[13070]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 462.735095][ T1955] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 462.804201][ T1955] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 462.876835][ T1955] usb 5-1: USB disconnect, device number 18 [ 463.953507][T13107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2034'. [ 463.999680][T13109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2035'. [ 464.943149][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2042'. [ 468.795260][T13209] loop5: detected capacity change from 0 to 4096 [ 468.811200][T13209] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 468.911648][T13209] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 468.937449][T13209] ntfs3(loop5): Failed to load $Extend (-22). [ 468.958695][T13209] ntfs3(loop5): Failed to initialize $Extend. [ 473.678688][T13341] netlink: 'syz.2.2083': attribute type 4 has an invalid length. [ 474.203537][T13351] xt_hashlimit: size too large, truncated to 1048576 [ 475.383560][T13376] loop5: detected capacity change from 0 to 512 [ 475.392965][T13345] loop6: detected capacity change from 0 to 32768 [ 475.440115][T13376] EXT4-fs: Ignoring removed i_version option [ 475.483986][T13376] EXT4-fs: Ignoring removed bh option [ 475.509658][T13345] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 475.600849][T13376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.725910][T13376] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 475.749132][T13345] XFS (loop6): Ending clean mount [ 475.854692][T13374] EXT4-fs error (device loop5): ext4_resize_begin:60: comm syz.5.2095: resize_inode disabled but reserved GDT blocks non-zero [ 477.291940][ T5607] Bluetooth: hci3: command 0x0406 tx timeout [ 477.399097][ T6933] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 477.985611][T12133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.695655][ T8978] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 478.833329][T13454] netlink: 'syz.2.2111': attribute type 4 has an invalid length. [ 478.886881][ T8978] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 478.932401][ T8978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.266523][ T8978] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 480.963022][T13497] netlink: 140 bytes leftover after parsing attributes in process `syz.8.2121'. [ 481.103666][T13501] xt_hashlimit: size too large, truncated to 1048576 [ 481.466034][T13512] overlayfs: failed to clone upperpath [ 482.411697][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 484.740804][ T5909] usb 1-1: USB disconnect, device number 8 [ 485.599229][ T9] hid_parser_main: 4007 callbacks suppressed [ 485.599261][ T9] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 485.731925][ T9] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 485.826691][ T29] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 486.017390][ T29] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 486.068923][ T29] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 486.108614][ T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.166629][ T29] usb 7-1: config 0 has no interfaces? [ 486.178848][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.215359][ T29] usb 7-1: config 0 descriptor?? [ 486.415613][T13583] netlink: 'syz.2.2156': attribute type 2 has an invalid length. [ 486.468588][ T29] usb 7-1: USB disconnect, device number 10 [ 486.862248][T13593] overlayfs: failed to clone upperpath [ 486.892667][T13593] overlayfs: failed to clone upperpath [ 487.286911][T13607] xt_hashlimit: size too large, truncated to 1048576 [ 487.867923][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2168'. [ 487.885393][T13615] syz.4.2167 invoked oom-killer: gfp_mask=0x2dc0(GFP_KERNEL|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 487.984301][T13615] CPU: 1 UID: 0 PID: 13615 Comm: syz.4.2167 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.984362][T13615] Tainted: [L]=SOFTLOCKUP [ 487.984376][T13615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 487.984399][T13615] Call Trace: [ 487.984410][T13615] [ 487.984424][T13615] dump_stack_lvl+0x100/0x190 [ 487.984478][T13615] dump_header+0xfb/0x606 [ 487.984524][T13615] oom_kill_process.cold+0xd/0x330 [ 487.984573][T13615] out_of_memory+0x340/0x14f0 [ 487.984636][T13615] ? __pfx_out_of_memory+0x10/0x10 [ 487.984684][T13615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.984746][T13615] mem_cgroup_out_of_memory+0xc6/0x130 [ 487.984810][T13615] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 487.984866][T13615] ? find_held_lock+0x2b/0x80 [ 487.984915][T13615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.984962][T13615] ? do_raw_spin_unlock+0x145/0x1e0 [ 487.985028][T13615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.985080][T13615] ? _raw_spin_unlock+0x28/0x50 [ 487.985145][T13615] try_charge_memcg+0x6e1/0xdf0 [ 487.985200][T13615] ? __pfx_try_charge_memcg+0x10/0x10 [ 487.985244][T13615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.985290][T13615] ? find_held_lock+0x2b/0x80 [ 487.985328][T13615] ? rcu_read_unlock+0x17/0x60 [ 487.985374][T13615] ? rcu_read_unlock+0x17/0x60 [ 487.985417][T13615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.985486][T13615] __memcg_slab_post_alloc_hook+0x46c/0x1160 [ 487.985550][T13615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.985597][T13615] ? kasan_save_track+0x14/0x30 [ 487.985637][T13615] kmem_cache_alloc_bulk_noprof+0x5e4/0x890 [ 487.985704][T13615] ? kmem_cache_alloc_bulk_noprof+0x9d/0x890 [ 487.985783][T13615] __io_alloc_req_refill+0x9e/0x330 [ 487.985847][T13615] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 487.985905][T13615] ? lockdep_hardirqs_on+0x7d/0x110 [ 487.985952][T13615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.985999][T13615] ? rcu_is_watching+0x13/0xc0 [ 487.986035][T13615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.986094][T13615] ? io_submit_fail_init+0x569/0x580 [ 487.986158][T13615] io_submit_sqes.cold+0xf6/0x301 [ 487.986242][T13615] __do_sys_io_uring_enter+0xa88/0x1b10 [ 487.986294][T13615] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 487.986343][T13615] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 487.986389][T13615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.986436][T13615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.986483][T13615] ? __x64_sys_futex+0x358/0x4d0 [ 487.986548][T13615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.986597][T13615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.986644][T13615] ? xfd_validate_state+0x129/0x190 [ 487.986708][T13615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.986754][T13615] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.986809][T13615] do_syscall_64+0x123/0x790 [ 487.986853][T13615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.986893][T13615] RIP: 0033:0x7f2c9839e0d9 [ 487.986924][T13615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.986962][T13615] RSP: 002b:00007f2c992f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 487.986999][T13615] RAX: ffffffffffffffda RBX: 00007f2c98625fa0 RCX: 00007f2c9839e0d9 [ 487.987025][T13615] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 487.987049][T13615] RBP: 00007f2c98435024 R08: 0000000000000000 R09: 0000000000000000 [ 487.987079][T13615] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 487.987102][T13615] R13: 00007f2c98626038 R14: 00007f2c98625fa0 R15: 00007ffe8c2454b8 [ 487.987156][T13615] [ 488.603072][T13615] memory: usage 8kB, limit 8kB, failcnt 60 [ 488.715628][T13615] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 488.794579][T13615] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 488.848840][T13615] Memory cgroup stats for /syz4/test: [ 488.849135][T13615] cache 0 [ 488.914693][T13615] rss 0 [ 488.949488][T13615] rss_huge 0 [ 488.984470][T13615] shmem 0 [ 488.998235][T13615] mapped_file 0 [ 489.001738][T13615] dirty 0 [ 489.021948][T13615] writeback 0 [ 489.033409][T13615] workingset_refault_anon 0 [ 489.059834][T13615] workingset_refault_file 0 [ 489.066526][ T29] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 489.083756][T13615] swap 0 [ 489.090383][T13615] swapcached 0 [ 489.093827][T13615] pgpgin 0 [ 489.108554][T13615] pgpgout 0 [ 489.116718][T13615] pgfault 19 [ 489.126882][T13615] pgmajfault 0 [ 489.147588][T13615] inactive_anon 0 [ 489.151277][T13615] active_anon 0 [ 489.177466][T13615] inactive_file 0 [ 489.181157][T13615] active_file 0 [ 489.184713][T13615] unevictable 0 [ 489.217648][T13615] hierarchical_memory_limit 8192 [ 489.234173][T13615] hierarchical_memsw_limit 9223372036854771712 [ 489.256513][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 489.270215][T13615] total_cache 0 [ 489.273713][T13615] total_rss 0 [ 489.299444][T13615] total_rss_huge 0 [ 489.303297][T13615] total_shmem 0 [ 489.328030][T13615] total_mapped_file 0 [ 489.339513][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 489.354630][T13615] total_dirty 0 [ 489.360512][T13615] total_writeback 0 [ 489.364437][T13615] total_workingset_refault_anon 0 [ 489.370350][ T29] usb 1-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=d2.e5 [ 489.391447][T13615] total_workingset_refault_file 0 [ 489.401203][ T29] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 489.411315][T13615] total_swap 0 [ 489.414753][T13615] total_swapcached 0 [ 489.422254][ T29] usb 1-1: can't read configurations, error -71 [ 489.440398][T13615] total_pgpgin 0 [ 489.458112][T13615] total_pgpgout 0 [ 489.466742][T13615] total_pgfault 19 [ 489.470480][T13615] total_pgmajfault 0 [ 489.481622][T13615] total_inactive_anon 0 [ 489.487795][T13615] total_active_anon 0 [ 489.492243][T13615] total_inactive_file 0 [ 489.510016][T13615] total_active_file 0 [ 489.514117][T13615] total_unevictable 0 [ 489.533463][T13615] anon_cost 0 [ 489.546298][T13615] file_cost 0 [ 489.553713][T13615] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.2167,pid=13613,uid=0 [ 489.616708][T13615] Memory cgroup out of memory: Killed process 13615 (syz.4.2167) total-vm:104300kB, anon-rss:1680kB, file-rss:23076kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 490.913168][ T29] libceph: connect (1)[c::]:6789 error -101 [ 490.938256][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 491.068846][ T29] libceph: connect (1)[c::]:6789 error -101 [ 491.099843][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 491.236562][ T1955] libceph: connect (1)[c::]:6789 error -101 [ 491.287255][ T1955] libceph: mon0 (1)[c::]:6789 connect error [ 491.404991][ T1955] libceph: connect (1)[c::]:6789 error -101 [ 491.445711][ T1955] libceph: mon0 (1)[c::]:6789 connect error [ 491.693574][T13664] ceph: No mds server is up or the cluster is laggy [ 491.702189][T13669] ceph: No mds server is up or the cluster is laggy [ 491.830043][ T5768] libceph: connect (1)[c::]:6789 error -101 [ 491.860503][ T5768] libceph: mon0 (1)[c::]:6789 connect error [ 492.003480][ T5768] libceph: connect (1)[c::]:6789 error -101 [ 492.028158][ T5768] libceph: mon0 (1)[c::]:6789 connect error [ 493.234905][ T29] libceph: connect (1)[c::]:6789 error -101 [ 493.254787][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 494.955364][ T30] audit: type=1800 audit(3934740598.761:305): pid=13744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2210" name="nullb0" dev="tmpfs" ino=1704 res=0 errno=0 [ 495.757390][T13754] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2214'. [ 495.825235][T13756] overlayfs: failed to verify index (index/00fb2100018b4dfee9cb744848977be9fb5afe61f3d20eec702102000000000000, ftype=4000, err=-116) [ 496.739484][T13712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.181637][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2220'. [ 497.675133][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2220'. [ 498.080917][ T9] libceph: connect (1)[c::]:6789 error -101 [ 498.100858][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 498.241209][T13785] ceph: No mds server is up or the cluster is laggy [ 498.378542][ T9] libceph: connect (1)[c::]:6789 error -101 [ 498.393543][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 499.150789][T13809] netlink: 'syz.6.2233': attribute type 10 has an invalid length. [ 499.246031][T13811] loop4: detected capacity change from 0 to 128 [ 499.253917][T13811] vfat: Bad value for 'nfs' [ 499.349918][T13813] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2235'. [ 499.398408][ T30] audit: type=1804 audit(3934740603.221:306): pid=13811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2234" name="/newroot/98/file0/file1" dev="overlay" ino=565 res=1 errno=0 [ 500.520861][T13821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.815789][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.822345][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.907691][T13822] overlayfs: failed to clone upperpath [ 504.540619][T13894] loop0: detected capacity change from 0 to 1024 [ 504.662456][T13894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.860722][T13894] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.2258: missing EA_INODE flag [ 504.882217][T13894] EXT4-fs (loop0): Remounting filesystem read-only [ 505.169767][T11037] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.652343][T13921] syzkaller0: entered promiscuous mode [ 505.669595][T13921] syzkaller0: entered allmulticast mode [ 505.706986][T13931] loop0: detected capacity change from 0 to 16 [ 505.725011][T13931] erofs (device loop0): invalid ishare xattr prefix id 0 [ 507.067372][ T5768] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 507.235285][ T5768] usb 5-1: unable to get BOS descriptor or descriptor too short [ 507.248245][ T5768] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 507.262307][ T5768] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.290437][ T5768] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 507.308363][ T5768] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 507.333703][ T5768] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 507.356139][ T5768] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 507.376211][ T5768] usb 5-1: config 1 interface 1 has no altsetting 0 [ 507.397967][ T5768] usb 5-1: string descriptor 0 read error: -22 [ 507.409403][ T5768] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.524862][T13960] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2284'. [ 508.553594][ T5768] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 508.794952][ T5768] usb 5-1: USB disconnect, device number 19 [ 511.726195][T14016] loop4: detected capacity change from 0 to 1024 [ 511.738820][T14016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 511.820629][T14016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.896457][T14023] overlayfs: failed to clone upperpath [ 511.899982][ T30] audit: type=1800 audit(3934740615.721:307): pid=14025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2311" name="bus" dev="tmpfs" ino=2485 res=0 errno=0 [ 512.675576][ T30] audit: type=1800 audit(3934740616.491:308): pid=14016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2308" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 512.733879][ T30] audit: type=1800 audit(3934740616.491:309): pid=14029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2308" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 512.979565][T10948] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.228485][T14050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.822331][T14045] uprobe: syz.5.2316:14045 failed to unregister, leaking uprobe [ 514.060131][T14045] uprobe: syz.5.2316:14045 failed to unregister, leaking uprobe [ 514.546571][ T5846] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 514.609343][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7d71 instead [ 514.657578][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xd721 instead [ 514.708705][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xdee3 instead [ 514.716211][ T5846] usb 6-1: Using ep0 maxpacket: 32 [ 514.746354][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x1e3c instead [ 514.749038][ T5846] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 514.785821][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xe086 instead [ 514.818976][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.837733][ T5846] usb 6-1: Product: syz [ 514.852182][ T5846] usb 6-1: Manufacturer: syz [ 514.864469][ T5846] usb 6-1: SerialNumber: syz [ 514.866017][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x3ac5 instead [ 514.916920][ T5846] usb 6-1: config 0 descriptor?? [ 514.945749][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xac61 instead [ 515.000115][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0xf624 instead [ 515.042435][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8fd8 instead [ 515.075203][T14104] loop6: detected capacity change from 0 to 128 [ 515.085598][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xda84 instead [ 515.124204][T14104] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 515.138779][T14104] ext4 filesystem being mounted at /289/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 515.143238][T14091] jffs2: Further such events for this erase block will not be printed [ 515.282679][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x1f67 instead [ 515.340565][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xf25b instead [ 515.404706][T14104] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 515.428491][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x1e4d instead [ 515.433327][ T5846] airspy 6-1:0.0: Board ID: 00 [ 515.468934][ T5846] airspy 6-1:0.0: Firmware version: [ 515.491052][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xcbb1 instead [ 515.566250][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x60cf instead [ 515.597488][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0xe0f2 instead [ 515.632915][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x0d0a instead [ 515.644199][ T6933] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 515.660202][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0xedb0 instead [ 515.675565][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x1e78 instead [ 515.749794][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0xe6a0 instead [ 515.797163][T14091] jffs2: Further such events for this erase block will not be printed [ 515.832616][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x9ed4 instead [ 515.873854][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x671e instead [ 515.926210][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0xe36e instead [ 515.963864][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xb3bc instead [ 516.001787][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x1f9a instead [ 516.039932][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x0a86 instead [ 516.076473][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xb24f instead [ 516.126633][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x020f instead [ 516.188058][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x3d90 instead [ 516.223138][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x9084 instead [ 516.281083][T14091] jffs2: Further such events for this erase block will not be printed [ 516.365379][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0xc7af instead [ 516.429634][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xb0d6 instead [ 516.467349][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x2080 instead [ 516.493209][ T5846] airspy 6-1:0.0: usb_control_msg() failed -71 request 10 [ 516.512039][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x2115 instead [ 516.571637][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x13ab instead [ 516.621206][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x697b instead [ 516.658735][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x9bc4 instead [ 516.713781][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xdedd instead [ 516.759885][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xbfd3 instead [ 516.811820][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0xb71a instead [ 516.820688][ T5846] airspy 6-1:0.0: Registered as swradio24 [ 516.834687][T14091] jffs2: Further such events for this erase block will not be printed [ 516.865929][ T5846] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 516.877992][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0xf77d instead [ 516.936147][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0xd504 instead [ 516.958781][ T5846] usb 6-1: USB disconnect, device number 10 [ 516.989254][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0xb027 instead [ 517.034444][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0xb367 instead [ 517.082610][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x572c instead [ 517.142165][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x2ee3 instead [ 517.203969][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xba17 instead [ 517.262270][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x3a7f instead [ 517.316575][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x2b4b instead [ 517.395494][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x3665 instead [ 517.462627][T14091] jffs2: Further such events for this erase block will not be printed [ 517.515153][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xebb7 instead [ 517.556022][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x78b8 instead [ 517.584183][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x9dd1 instead [ 517.631099][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x4a19 instead [ 517.680635][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x98ca instead [ 517.728583][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x3350 instead [ 517.780556][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xa0e5 instead [ 517.820614][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x296b instead [ 517.872015][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x9293 instead [ 517.909374][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x9d3b instead [ 517.957702][T14091] jffs2: Further such events for this erase block will not be printed [ 517.990079][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x3803 instead [ 518.013760][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x282e instead [ 518.040559][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x722e instead [ 518.064541][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x18a9 instead [ 518.111291][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x33fb instead [ 518.146437][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x7e6b instead [ 518.191925][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x9f39 instead [ 518.224979][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x4263 instead [ 518.258575][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x2cc3 instead [ 518.303712][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0xa40c instead [ 518.324565][ T30] audit: type=1326 audit(3934740622.141:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.8.2352" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf9e0d9 code=0x7fc00000 [ 518.342197][T14091] jffs2: Further such events for this erase block will not be printed [ 518.392473][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x9522 instead [ 518.430708][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xb79a instead [ 518.483973][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x9e64 instead [ 518.539417][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x80c3 instead [ 518.583435][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x14cb instead [ 518.626305][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x9054 instead [ 518.663207][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x9e5f instead [ 518.676886][T14160] loop0: detected capacity change from 0 to 4096 [ 518.708541][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0xd48e instead [ 518.755840][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x5d8f instead [ 518.800010][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0xe951 instead [ 518.828082][T14091] jffs2: Further such events for this erase block will not be printed [ 518.862256][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x0384 instead [ 518.906600][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0435 instead [ 518.927871][T14168] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 518.956855][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0xc8c1 instead [ 519.011303][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x9f3a instead [ 519.056248][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x32c4 instead [ 519.087329][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x0ccf instead [ 519.128217][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xbfbf instead [ 519.160868][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x7e76 instead [ 519.195120][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x4842 instead [ 519.223586][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0xcc25 instead [ 519.257470][T14091] jffs2: Further such events for this erase block will not be printed [ 519.287002][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x375b instead [ 519.315219][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x601e instead [ 519.346304][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x284e instead [ 519.374974][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x509e instead [ 519.397843][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x5e64 instead [ 519.421409][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x2855 instead [ 519.442244][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x2532 instead [ 519.464098][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x34e0 instead [ 519.488192][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x61df instead [ 519.511411][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xeb01 instead [ 519.531638][T14091] jffs2: Further such events for this erase block will not be printed [ 519.549722][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0xb745 instead [ 519.573730][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x4a68 instead [ 519.599189][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x2d72 instead [ 519.617684][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xf3e4 instead [ 519.640698][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x060d instead [ 519.659480][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x2982 instead [ 519.687930][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xe00a instead [ 519.716181][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0xf2ee instead [ 519.736219][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x6f7f instead [ 519.757701][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x250e instead [ 519.780097][T14091] jffs2: Further such events for this erase block will not be printed [ 519.798580][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x07b4 instead [ 519.826138][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x2217 instead [ 519.846137][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x1b11 instead [ 519.866920][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x3186 instead [ 519.887698][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0xf830 instead [ 519.909872][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x3d22 instead [ 519.934703][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xb6ae instead [ 519.956183][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x3905 instead [ 519.977729][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0xdeb7 instead [ 520.007397][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x74f9 instead [ 520.026335][T14091] jffs2: Further such events for this erase block will not be printed [ 520.047051][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x9f69 instead [ 520.066276][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x8eda instead [ 520.086146][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x1e20 instead [ 520.106249][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x7bec instead [ 520.127709][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xa104 instead [ 520.156164][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x4550 instead [ 520.176232][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x7985 instead [ 520.196156][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x5521 instead [ 520.220154][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x33d1 instead [ 520.241139][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0xa559 instead [ 520.275770][T14091] jffs2: Further such events for this erase block will not be printed [ 520.295337][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x3664 instead [ 520.316244][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x3b1c instead [ 520.346175][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x89f4 instead [ 520.367600][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0xa73d instead [ 520.391713][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xfbf5 instead [ 520.416109][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0xd8ff instead [ 520.428120][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x43d9 instead [ 520.439111][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0xbdd8 instead [ 520.449934][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x463b instead [ 520.460778][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x63d2 instead [ 520.472937][T14091] jffs2: Further such events for this erase block will not be printed [ 520.483913][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xfa82 instead [ 520.502156][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x9f7b instead [ 520.513075][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x82b7 instead [ 520.523958][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x50ee instead [ 520.537824][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x3053 instead [ 520.571191][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x7471 instead [ 520.594822][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xdc6a instead [ 520.630980][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0xe108 instead [ 520.789465][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0xc643 instead [ 520.826870][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x368f instead [ 520.863109][T14091] jffs2: Further such events for this erase block will not be printed [ 520.880904][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x88dc instead [ 520.904192][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x8d3d instead [ 520.934241][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x25ce instead [ 520.976212][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xdc92 instead [ 521.023193][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0xa475 instead [ 521.071961][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xe324 instead [ 521.123523][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x6725 instead [ 521.151219][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x3667 instead [ 521.164715][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0xa411 instead [ 521.225064][T14091] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0xbdf4 instead [ 521.254489][T14091] jffs2: Further such events for this erase block will not be printed [ 521.276775][T14091] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 521.311274][T14091] jffs2: empty_blocks 16, bad_blocks 0, c->nr_blocks 32 [ 522.032953][T14196] loop5: detected capacity change from 0 to 512 [ 522.589333][T14196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.641835][T14207] loop0: detected capacity change from 0 to 512 [ 522.821979][T14196] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.878465][T14207] ext4: Unknown parameter 'fsuuid' [ 523.151050][T14207] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x20) [ 523.234928][T14207] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 523.274288][T14207] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0xb) [ 523.337929][T14207] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 523.632303][T12133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.675204][T14224] fuse: Bad value for 'fd' [ 524.065862][T13291] IPVS: starting estimator thread 0... [ 524.089847][T14237] IPVS: fo: FWM 3 0x00000003 - no destination available [ 524.115852][T14228] loop0: detected capacity change from 0 to 4096 [ 524.127768][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 524.186265][T14239] IPVS: using max 24 ests per chain, 57600 per kthread [ 524.240185][T14228] ntfs3(loop0): Failed to load $Extend (-22). [ 524.269005][T14228] ntfs3(loop0): Failed to initialize $Extend. [ 528.032535][T14286] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 528.177348][T14286] overlayfs: failed to set xattr on upper [ 528.215856][T14286] overlayfs: ...falling back to redirect_dir=nofollow. [ 528.242568][T14286] overlayfs: ...falling back to index=off. [ 528.267986][T14286] overlayfs: ...falling back to uuid=null. [ 528.287461][T14286] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 528.317035][T14286] overlayfs: maximum fs stacking depth exceeded [ 528.356663][T11965] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 528.516860][T11965] usb 7-1: Using ep0 maxpacket: 32 [ 528.542337][T11965] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 528.579253][T11965] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.646555][T11965] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.667437][T11965] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.704044][T11965] usb 7-1: config 0 descriptor?? [ 528.719076][T14294] af_packet: tpacket_rcv: packet too big, clamped from 65512 to 4294967272. macoff=96 [ 529.162461][T11965] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 529.201314][T14298] loop5: detected capacity change from 0 to 4096 [ 529.201338][T11965] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 529.358426][T11965] ft260 0003:0403:6030.0019: chip code: 0000 0000 [ 529.418390][T14298] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 529.559349][T11965] ft260 0003:0403:6030.0019: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 529.614317][T11340] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 529.645838][T12133] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 529.672521][T12133] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 529.726727][T12133] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 529.755676][T13324] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 529.783556][T11965] ft260 0003:0403:6030.0019: failed to retrieve status: -32, no wakeup [ 529.805561][T14312] overlayfs: failed to clone upperpath [ 529.819298][T11965] ft260 0003:0403:6030.0019: i2c bus error: 0x32 [ 530.029717][T11965] ft260 0003:0403:6030.0019: failed to reset I2C controller: -71 [ 530.159728][T11965] usb 7-1: USB disconnect, device number 11 [ 531.625566][T14350] loop5: detected capacity change from 0 to 2048 [ 531.850888][ T5607] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 531.866266][ T5607] Bluetooth: hci0: Injecting HCI hardware error event [ 531.880550][ T5607] Bluetooth: hci0: hardware error 0x00 [ 532.401906][T14370] loop4: detected capacity change from 0 to 512 [ 532.479180][T14370] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2420: iget: bad i_size value: 38620345925642 [ 532.732732][T14370] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 532.736080][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 532.751765][ C0] EXT4-fs (loop4): initial error at time 3934740636: ext4_orphan_get:1399: inode 15 [ 532.761297][ C0] EXT4-fs (loop4): last error at time 3934740636: ext4_orphan_get:1399: inode 15 [ 532.793821][T14379] loop5: detected capacity change from 0 to 512 [ 532.804687][T14370] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2420: couldn't read orphan inode 15 (err -117) [ 532.859606][T14370] loop4: lost filesystem error report for type 5 error -117 [ 532.873219][T14370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.897929][T14379] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002] [ 532.970732][T14379] System zones: 1-12 [ 533.041324][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 533.060669][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 533.084073][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 533.132955][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 533.144277][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 533.220384][T14379] EXT4-fs warning (device loop5): ext4_xattr_inode_get:544: inode #11: comm syz.5.2424: ea_inode file size=0 entry size=6 [ 533.308067][T14379] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.2424: iget: bad extra_isize 90 (inode size 256) [ 533.385751][T14379] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 533.406116][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 533.420349][T10948] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.421754][ C0] EXT4-fs (loop5): initial error at time 3934740637: ext4_xattr_inode_iget:441: inode 11 [ 533.440597][ C0] EXT4-fs (loop5): last error at time 3934740637: ext4_xattr_inode_iget:441: inode 11 [ 533.509134][T14379] EXT4-fs error (device loop5): ext4_xattr_inode_iget:444: comm syz.5.2424: error while reading EA inode 11 err=-117 [ 533.581171][T14379] loop5: lost filesystem error report for type 5 error -117 [ 533.604869][T14379] EXT4-fs (loop5): 1 orphan inode deleted [ 533.661606][T14379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.827933][T12133] EXT4-fs error (device loop5): htree_dirblock_to_tree:1077: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 533.887965][T12133] EXT4-fs error (device loop5): ext4_lookup:1785: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 533.939476][T12133] EXT4-fs error (device loop5): ext4_lookup:1785: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 534.086314][ T5607] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 534.336503][T12133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.786258][ T187] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 534.976947][ T187] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 535.010437][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.035929][ T187] usb 1-1: Product: syz [ 535.046712][ T187] usb 1-1: Manufacturer: syz [ 535.056403][ T187] usb 1-1: SerialNumber: syz [ 535.186624][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2440'. [ 535.288511][ T5607] Bluetooth: hci6: command tx timeout [ 535.375961][T14382] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.397692][T14382] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.405274][T14382] bridge_slave_0: entered allmulticast mode [ 535.415736][T14382] bridge_slave_0: entered promiscuous mode [ 535.433321][T14382] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.441002][T14382] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.458036][T14382] bridge_slave_1: entered allmulticast mode [ 535.480938][T14382] bridge_slave_1: entered promiscuous mode [ 535.509400][ T187] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 535.534677][T14435] CIFS: Attempting to mount //127.0.0.1/share [ 535.565196][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 535.581272][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 535.594850][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 535.604142][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 535.612827][ T187] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 535.623932][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 535.646286][T14444] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 535.724147][T14435] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 535.738629][T14435] CIFS: VFS: cifs_mount failed w/return code = -11 [ 536.059677][T14382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.153854][T14382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.304203][ T187] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 536.341158][ T187] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 536.364566][T14382] team0: Port device team_slave_0 added [ 536.394410][T14382] team0: Port device team_slave_1 added [ 536.419092][ T187] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 536.479171][ T187] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 536.526218][T14462] Bluetooth: MGMT ver 1.23 [ 536.545270][ T187] usb 1-1: USB disconnect, device number 11 [ 536.561575][T14382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.585371][T14382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.643183][T14382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.667466][T14382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.674558][T14382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.733781][T14382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.898876][T14382] hsr_slave_0: entered promiscuous mode [ 536.912997][T14382] hsr_slave_1: entered promiscuous mode [ 536.919782][T14382] debugfs: 'hsr0' already exists in 'hsr' [ 536.925621][T14382] Cannot create hsr debugfs directory [ 537.367232][ T5607] Bluetooth: hci6: command tx timeout [ 537.686283][ T5607] Bluetooth: hci0: command tx timeout [ 538.581497][T14481] ip_tables: iptables: counters copy to user failed while replacing table [ 538.625051][T14466] kexec: Could not allocate control_code_buffer [ 539.185645][T13326] IPVS: starting estimator thread 0... [ 539.187753][T14491] IPVS: fo: FWM 3 0x00000003 - no destination available [ 539.198758][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 539.309730][T14492] IPVS: using max 25 ests per chain, 60000 per kthread [ 539.447209][ T5607] Bluetooth: hci6: command tx timeout [ 539.766250][ T5607] Bluetooth: hci0: command tx timeout [ 540.204281][T14515] CIFS: Attempting to mount //127.0.0.1/share [ 540.539715][T14523] loop4: detected capacity change from 0 to 4096 [ 540.721157][T14528] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 541.082060][T14515] CIFS: VFS: Error connecting to socket. Aborting operation. [ 541.120947][T14515] CIFS: VFS: cifs_mount failed w/return code = -4 [ 541.373521][T14382] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 541.381248][T14544] netlink: 'syz.4.2461': attribute type 4 has an invalid length. [ 541.415711][T14382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.432719][T14437] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.445064][T14437] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.461096][T14437] bridge_slave_0: entered allmulticast mode [ 541.479173][T14437] bridge_slave_0: entered promiscuous mode [ 541.513359][T14382] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 541.527199][ T5607] Bluetooth: hci6: command tx timeout [ 541.553571][T14382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.588552][T14437] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.597112][T14437] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.604438][T14437] bridge_slave_1: entered allmulticast mode [ 541.622635][T14437] bridge_slave_1: entered promiscuous mode [ 541.631157][T14382] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 541.650782][T14382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 541.714888][T14382] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 541.731761][T14382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 541.774744][T14437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.804640][T14437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.846675][ T5607] Bluetooth: hci0: command tx timeout [ 541.882841][T14437] team0: Port device team_slave_0 added [ 541.908891][T14437] team0: Port device team_slave_1 added [ 541.977767][T14437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.985818][T14437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.021046][T14437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.053027][T14437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.061227][T14437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.093078][T14437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.291183][T14437] hsr_slave_0: entered promiscuous mode [ 542.298242][T14437] hsr_slave_1: entered promiscuous mode [ 542.304666][T14437] debugfs: 'hsr0' already exists in 'hsr' [ 542.310639][T14437] Cannot create hsr debugfs directory [ 542.564467][T14382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.620500][T14382] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.787768][T13290] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.794968][T13290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.827032][T10995] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.834252][T10995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.743894][T14437] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 543.758923][T14437] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 543.772983][T14437] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 543.798579][T14437] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 543.827442][T14437] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 543.844370][T14437] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 543.877037][T14437] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 543.905010][T14437] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 543.926920][ T5607] Bluetooth: hci0: command tx timeout [ 544.194842][T14437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.218678][T14382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.238105][T14437] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.273141][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.280433][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.306016][T10995] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.313348][T10995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.499611][T14382] veth0_vlan: entered promiscuous mode [ 544.537235][T14382] veth1_vlan: entered promiscuous mode [ 544.617055][T14382] veth0_macvtap: entered promiscuous mode [ 544.641823][T14382] veth1_macvtap: entered promiscuous mode [ 544.678159][T14382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.721270][T14382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.768481][T13308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.788644][T13308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.845702][T13308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.883021][T13308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.128765][T10995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.157150][T10995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.231498][T13300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.240008][T13300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.566683][T14638] fuse: Bad value for 'fd' [ 545.574499][T14634] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2473'. [ 545.596918][T14641] loop1: detected capacity change from 0 to 256 [ 545.644782][T14645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2474'. [ 545.664028][T14641] exfat: Deprecated parameter 'utf8' [ 545.741924][T14641] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 545.821418][T14641] exfat filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447f) [ 546.018204][T14437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.403089][T14437] veth0_vlan: entered promiscuous mode [ 546.529513][T14666] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2478'. [ 546.811282][T14437] veth1_vlan: entered promiscuous mode [ 547.011087][T14437] veth0_macvtap: entered promiscuous mode [ 547.076528][T14437] veth1_macvtap: entered promiscuous mode [ 547.178747][T14437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.261491][T14437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.299407][T14683] ip_tables: iptables: counters copy to user failed while replacing table [ 547.328950][T13290] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.369551][T13290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.487009][T13308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.576778][T13300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.000850][T13308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.047821][T13308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.273369][T13290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.314398][T13290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.259987][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2482'. [ 551.038354][T14775] ip_tables: iptables: counters copy to user failed while replacing table [ 552.516889][T14795] loop6: detected capacity change from 0 to 1764 [ 553.613362][ T5846] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 553.800177][ T5846] usb 7-1: unable to get BOS descriptor or descriptor too short [ 553.845704][ T5846] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 553.893634][ T5846] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.924421][ T5846] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 553.955836][ T5846] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 553.981014][ T5846] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 554.014416][ T5846] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 554.062109][ T5846] usb 7-1: config 1 interface 1 has no altsetting 0 [ 554.092332][ T5846] usb 7-1: string descriptor 0 read error: -22 [ 554.115211][ T5846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.409770][T14849] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2514'. [ 554.450953][T14850] loop1: detected capacity change from 0 to 1024 [ 554.593125][T14850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.709646][T14850] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.2513: missing EA_INODE flag [ 554.738170][T14850] EXT4-fs (loop1): Remounting filesystem read-only [ 555.021972][T14382] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.258025][T14833] loop3: detected capacity change from 0 to 32768 [ 555.323089][T14833] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 555.353283][ T5846] usb 7-1: 2:0: failed to get current value for ch 1 (-71) [ 555.488802][T14833] XFS (loop3): Ending clean mount [ 555.661943][ T5846] usb 7-1: USB disconnect, device number 12 [ 555.892185][T14881] xt_hashlimit: size too large, truncated to 1048576 [ 556.021054][T14885] loop1: detected capacity change from 0 to 1764 [ 556.374333][T14437] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 556.593625][T14894] loop4: detected capacity change from 0 to 2048 [ 556.631275][ T8978] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 556.827360][ T8978] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 556.869877][ T8978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.928111][ T8978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.971583][ T8978] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 557.042746][ T8978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.149133][ T8978] usb 1-1: config 0 descriptor?? [ 557.249746][T14907] CIFS: Attempting to mount //127.0.0.1/share [ 557.278384][T14904] xt_hashlimit: size too large, truncated to 1048576 [ 557.313181][T14912] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 557.352851][T14907] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 557.410544][T14907] CIFS: VFS: cifs_mount failed w/return code = -11 [ 557.699548][ T8978] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 557.734409][T14924] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2529'. [ 557.873239][T14927] loop3: detected capacity change from 0 to 1024 [ 557.992230][T14927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.363523][T14927] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2530: missing EA_INODE flag [ 558.382430][T14927] EXT4-fs (loop3): Remounting filesystem read-only [ 558.554102][T14437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.822264][ T29] usb 1-1: USB disconnect, device number 12 [ 559.840884][T14974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2543'. [ 562.015874][T15034] netlink: 'syz.1.2556': attribute type 4 has an invalid length. [ 562.125991][T15036] xt_hashlimit: size too large, truncated to 1048576 [ 562.254887][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.263018][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.832037][T15049] overlayfs: failed to clone upperpath [ 562.892805][T15050] overlayfs: failed to clone upperpath [ 563.571471][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2564'. [ 563.621820][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2566'. [ 563.967848][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 564.150541][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 564.195857][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.236262][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.263505][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 564.302984][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.365804][ T9] usb 5-1: config 0 descriptor?? [ 564.877615][ T5768] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 564.879526][T15106] loop3: detected capacity change from 0 to 1764 [ 564.924726][ T5768] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 564.952407][ T9] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 565.390905][ T5768] usb 5-1: USB disconnect, device number 20 [ 565.498448][T15119] fido_id[15119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 565.836851][T11965] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 565.936469][ T5846] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 566.019508][T11965] usb 4-1: Using ep0 maxpacket: 32 [ 566.033524][T11965] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 566.062365][T11965] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 566.087700][T11965] usb 4-1: config 0 has no interface number 0 [ 566.105766][T11965] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 566.106291][ T5846] usb 2-1: Using ep0 maxpacket: 32 [ 566.124524][T11965] usb 4-1: config 0 interface 89 has no altsetting 0 [ 566.149185][T11965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.169989][T11965] usb 4-1: Product: syz [ 566.179473][T11965] usb 4-1: Manufacturer: syz [ 566.189630][T11965] usb 4-1: SerialNumber: syz [ 566.209561][T11965] usb 4-1: config 0 descriptor?? [ 566.225892][ T5846] usb 2-1: unable to get BOS descriptor or descriptor too short [ 566.239898][ T5846] usb 2-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=d2.e5 [ 566.246994][T11965] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 566.252262][ T5846] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 566.272014][ T5846] usb 2-1: can't read configurations, error -71 [ 566.296127][T11965] em28xx 4-1:0.89: Video interface 89 found: [ 566.861724][T11965] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 567.005833][T15157] loop6: detected capacity change from 0 to 2048 [ 567.017548][T15160] netlink: 'syz.0.2579': attribute type 4 has an invalid length. [ 567.036516][T15161] ip_tables: iptables: counters copy to user failed while replacing table [ 567.130096][T15162] xt_hashlimit: size too large, truncated to 1048576 [ 567.199614][T15157] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.326226][T11965] em28xx 4-1:0.89: AC97 command still being executed: not handled properly! [ 567.537584][T11965] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 567.587454][T11965] em28xx 4-1:0.89: board has no eeprom [ 567.667686][T11965] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 567.668719][ T6933] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.695603][T11965] em28xx 4-1:0.89: analog set to bulk mode. [ 567.713715][ T29] em28xx 4-1:0.89: Registering V4L2 extension [ 567.782944][T11965] usb 4-1: USB disconnect, device number 12 [ 567.797203][T11965] em28xx 4-1:0.89: Disconnecting em28xx [ 568.060064][ T29] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 568.125531][ T29] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 568.177217][ T29] em28xx 4-1:0.89: No AC97 audio processor [ 568.520178][ T29] usb 4-1: Decoder not found [ 568.532908][ T29] em28xx 4-1:0.89: failed to create media graph [ 568.563055][ T29] em28xx 4-1:0.89: V4L2 device video0 deregistered [ 568.808434][ T29] INFO: trying to register non-static key. [ 568.814287][ T29] The code is fine but needs lockdep annotation, or maybe [ 568.821402][ T29] you didn't initialize this object before use? [ 568.827651][ T29] turning off the locking correctness validator. [ 568.833989][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.834043][ T29] Tainted: [L]=SOFTLOCKUP [ 568.834056][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 568.834081][ T29] Workqueue: events request_module_async [ 568.834123][ T29] Call Trace: [ 568.834134][ T29] [ 568.834146][ T29] dump_stack_lvl+0x100/0x190 [ 568.834192][ T29] register_lock_class+0x79b/0x7b0 [ 568.834263][ T29] __lock_acquire+0x3e7/0x1ec0 [ 568.834312][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 568.834359][ T29] ? lock_acquire+0x1b9/0x370 [ 568.834407][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 568.834457][ T29] lock_acquire+0x1b9/0x370 [ 568.834505][ T29] ? __wake_up+0x1c/0x60 [ 568.834545][ T29] ? vb2_video_unregister_device+0x12b/0x2e0 [ 568.834607][ T29] ? kobject_put+0xb9/0x640 [ 568.834652][ T29] ? _raw_spin_lock_irqsave+0x52/0x60 [ 568.834713][ T29] _raw_spin_lock_irqsave+0x3a/0x60 [ 568.834763][ T29] ? __wake_up+0x1c/0x60 [ 568.834798][ T29] __wake_up+0x1c/0x60 [ 568.834835][ T29] __vb2_queue_cancel+0x348/0xe90 [ 568.834889][ T29] ? __pfx_device_del+0x10/0x10 [ 568.834925][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 568.834964][ T29] ? kobject_put+0xb9/0x640 [ 568.835009][ T29] vb2_core_queue_release+0x27/0x190 [ 568.835065][ T29] vb2_video_unregister_device+0x152/0x2e0 [ 568.835121][ T29] em28xx_v4l2_init.cold+0xe1a/0x3a18 [ 568.835167][ T29] ? __pfx_em28xx_v4l2_init+0x10/0x10 [ 568.835208][ T29] em28xx_init_extension+0x13a/0x200 [ 568.835272][ T29] request_module_async+0x1e/0x30 [ 568.835306][ T29] process_one_work+0xa23/0x1940 [ 568.835353][ T29] ? __pfx_process_one_work+0x10/0x10 [ 568.835391][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 568.835438][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 568.835482][ T29] worker_thread+0x5ef/0xe50 [ 568.835528][ T29] ? kthread+0x13a/0x450 [ 568.835560][ T29] ? __pfx_worker_thread+0x10/0x10 [ 568.835597][ T29] kthread+0x373/0x450 [ 568.835630][ T29] ? __pfx_kthread+0x10/0x10 [ 568.835665][ T29] ret_from_fork+0x730/0xd60 [ 568.835714][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 568.835763][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 568.835803][ T29] ? __switch_to+0x800/0x10f0 [ 568.835836][ T29] ? __switch_to_asm+0x39/0x70 [ 568.835886][ T29] ? __pfx_kthread+0x10/0x10 [ 568.835921][ T29] ret_from_fork_asm+0x1a/0x30 [ 568.835982][ T29] [ 568.836024][ T29] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 569.086590][ T29] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 569.095014][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.105889][ T29] Tainted: [L]=SOFTLOCKUP [ 569.110222][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 569.120648][ T29] Workqueue: events request_module_async [ 569.126318][ T29] RIP: 0010:__wake_up_common+0x9b/0x1f0 [ 569.131902][ T29] Code: 02 00 0f 85 5b 01 00 00 48 8b 5b 40 48 8d 43 e8 4c 39 fb 0f 84 b3 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 d9 48 c1 e9 03 <80> 3c 11 00 0f 85 18 01 00 00 48 bd 00 00 00 00 00 fc ff df 4c 8b [ 569.151894][ T29] RSP: 0018:ffffc90000a579c0 EFLAGS: 00010056 [ 569.157987][ T29] RAX: ffffffffffffffe8 RBX: 0000000000000000 RCX: 0000000000000000 [ 569.165976][ T29] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88803f939790 [ 569.173972][ T29] RBP: ffff88803f939790 R08: 0000000000000000 R09: fffff5200014af2f [ 569.181969][ T29] R10: 0000000000000003 R11: 00000000000075bb R12: 0000000000000003 [ 569.189952][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88803f9397d0 [ 569.198114][ T29] FS: 0000000000000000(0000) GS:ffff888123cb7000(0000) knlGS:0000000000000000 [ 569.207072][ T29] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 569.213847][ T29] CR2: 00007f7af63dda10 CR3: 0000000089fff000 CR4: 0000000000350ef0 [ 569.221834][ T29] Call Trace: [ 569.225162][ T29] [ 569.228133][ T29] __wake_up+0x31/0x60 [ 569.232239][ T29] __vb2_queue_cancel+0x348/0xe90 [ 569.237390][ T29] ? __pfx_device_del+0x10/0x10 [ 569.242267][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.247924][ T29] ? kobject_put+0xb9/0x640 [ 569.252454][ T29] vb2_core_queue_release+0x27/0x190 [ 569.257821][ T29] vb2_video_unregister_device+0x152/0x2e0 [ 569.263671][ T29] em28xx_v4l2_init.cold+0xe1a/0x3a18 [ 569.269075][ T29] ? __pfx_em28xx_v4l2_init+0x10/0x10 [ 569.274486][ T29] em28xx_init_extension+0x13a/0x200 [ 569.279806][ T29] request_module_async+0x1e/0x30 [ 569.284840][ T29] process_one_work+0xa23/0x1940 [ 569.289802][ T29] ? __pfx_process_one_work+0x10/0x10 [ 569.295200][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.300864][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.306525][ T29] worker_thread+0x5ef/0xe50 [ 569.311149][ T29] ? kthread+0x13a/0x450 [ 569.315401][ T29] ? __pfx_worker_thread+0x10/0x10 [ 569.320527][ T29] kthread+0x373/0x450 [ 569.324607][ T29] ? __pfx_kthread+0x10/0x10 [ 569.329212][ T29] ret_from_fork+0x730/0xd60 [ 569.333833][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 569.338965][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.344646][ T29] ? __switch_to+0x800/0x10f0 [ 569.349330][ T29] ? __switch_to_asm+0x39/0x70 [ 569.354293][ T29] ? __pfx_kthread+0x10/0x10 [ 569.358894][ T29] ret_from_fork_asm+0x1a/0x30 [ 569.363703][ T29] [ 569.366712][ T29] Modules linked in: [ 569.370615][ T29] ---[ end trace 0000000000000000 ]--- [ 569.376066][ T29] RIP: 0010:__wake_up_common+0x9b/0x1f0 [ 569.381635][ T29] Code: 02 00 0f 85 5b 01 00 00 48 8b 5b 40 48 8d 43 e8 4c 39 fb 0f 84 b3 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 d9 48 c1 e9 03 <80> 3c 11 00 0f 85 18 01 00 00 48 bd 00 00 00 00 00 fc ff df 4c 8b [ 569.401257][ T29] RSP: 0018:ffffc90000a579c0 EFLAGS: 00010056 [ 569.407332][ T29] RAX: ffffffffffffffe8 RBX: 0000000000000000 RCX: 0000000000000000 [ 569.415335][ T29] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88803f939790 [ 569.423333][ T29] RBP: ffff88803f939790 R08: 0000000000000000 R09: fffff5200014af2f [ 569.431304][ T29] R10: 0000000000000003 R11: 00000000000075bb R12: 0000000000000003 [ 569.439282][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88803f9397d0 [ 569.447260][ T29] FS: 0000000000000000(0000) GS:ffff888123cb7000(0000) knlGS:0000000000000000 [ 569.456203][ T29] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 569.462799][ T29] CR2: 00007f7af63dda10 CR3: 0000000089fff000 CR4: 0000000000350ef0 [ 569.470861][ T29] Kernel panic - not syncing: Fatal exception [ 569.477165][ T29] Kernel Offset: disabled [ 569.481505][ T29] Rebooting in 86400 seconds..