last executing test programs: 15m25.49825364s ago: executing program 32 (id=79): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001400), 0x42942, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a0000000000000000020000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 15m14.411341417s ago: executing program 33 (id=126): syz_usb_connect$midi(0x5, 0x87, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000040820548004000010203010902750001010840e809044f3916000003010300020d24030103030803000b0cfcf70724010e00070009050e000000090b7f1025010c9c9742fddbe24751feb03b42090509032000e803e81025010cd93100791ef96a5e9532f1c009051802ff030405db1425011003aca414f69f6c8ecf5a042f8e098071"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000007e80)={&(0x7f0000007dc0)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x20004008) mmap$IORING_OFF_SQ_RING(0x0, 0xb3, 0x200000e, 0x80010, 0xffffffffffffffff, 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r1, 0x903b1000) 14m55.417136619s ago: executing program 34 (id=141): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x20, 0x0, 0x801, 0x400, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000002060300"/17], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 14m51.201278798s ago: executing program 35 (id=227): r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) msgsnd(r0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], 0x0, 0x0) msgsnd(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200"], 0x1008, 0x0) msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c0"], 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) 14m23.031981663s ago: executing program 36 (id=352): recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000004140)=[{0x0}, {&(0x7f00000002c0)=""/31, 0x1f}], 0x2}, 0x8}], 0x1, 0x2000, 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, &(0x7f0000000100)={0x1, 0x5d000}) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 13m30.16967307s ago: executing program 37 (id=707): socket$kcm(0x29, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x3c9}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x0, 0x3dd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0xfffffffd, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7497, 0x40}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x45c9, 0x80000, 0x4003, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xbcd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 13m16.171595773s ago: executing program 38 (id=760): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd23, 0x25dfdbff, {{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x4, 0x7fff, 0xa, 0x0, 0x20, 0x87}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40408c0}, 0x8008010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x20004004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 12m41.505278609s ago: executing program 39 (id=957): prctl$PR_SET_SECUREBITS(0x1c, 0x4) setresuid(0x0, 0xee00, 0xee01) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x84) fchdir(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 12m15.147918919s ago: executing program 40 (id=1056): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x60}, 0x20000000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 11m53.989295631s ago: executing program 41 (id=1140): r0 = fsopen(&(0x7f0000000080)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000006b40)='.\x00', 0x0, 0x1f8) getdents(r2, &(0x7f0000006b80)=""/53, 0x25) getdents(r2, 0x0, 0x58) 11m31.98213823s ago: executing program 42 (id=1255): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000007c0)=0x3, 0x4) bind$can_raw(r0, &(0x7f0000000800)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000840)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8}, 0x10}, 0x1, 0x0, 0x0, 0x24880}, 0xd209f6d81482fb16) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x60, 0x0) 11m11.519598531s ago: executing program 43 (id=1355): r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x12a) close(r0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x80300, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x100000001) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1) r2 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000014c0)='./file1\x00', &(0x7f0000001500), 0x200000, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 10m35.083615606s ago: executing program 44 (id=1527): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x7, &(0x7f0000002080)=""/4101, 0x0, 0xc}, 0x94) 9m57.332722016s ago: executing program 45 (id=1723): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000240)='\x00', 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000026c0)='cgroup.controllers\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="85000000ae00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x14, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 9m4.048568275s ago: executing program 46 (id=1990): r0 = fsopen(&(0x7f00000002c0)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000400)='7', 0x1) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000440)='proc\x00', &(0x7f0000000480)='\\', 0x1) 8m49.05310585s ago: executing program 47 (id=2056): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000140)='./file0/file0\x00', 0x8a8009, &(0x7f00000065c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x80, 0x0, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002340)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x810040, 0x0, 0x5, 0x81, 0x0, 0x0, 0x0, 0x40, 0xfffffffe}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000023c0)="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", 0x2000, &(0x7f00000043c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x4, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x5, 0x9, 0x5296, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r2, r3, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m36.216651046s ago: executing program 48 (id=2098): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x1a) 8m2.127388572s ago: executing program 49 (id=2169): socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x5e28, &(0x7f0000000200)={0x0, 0x350e, 0x1000, 0x0, 0x1d4}) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="200704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m56.089051506s ago: executing program 50 (id=2208): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000005c0)={0x3, &(0x7f0000000600)=[{0x20, 0x3, 0x81, 0xfffff034}, {0x20, 0x22, 0x8, 0xffffe010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000640)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000680)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f00000006c0)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000700)="8ce2ad4d4f95e087a7846d3f81", 0xd, 0x0, &(0x7f0000000740)={0x2, 0x0, @multicast2}, 0x10) 7m31.088078399s ago: executing program 51 (id=2320): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x4) mount(0x0, 0x0, &(0x7f0000000200)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000500)=@filename='mtd0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000600)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x1a7) setxattr$incfs_metadata(&(0x7f00000006c0)='./mnt\x00', &(0x7f0000000700), &(0x7f0000000740)="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", 0xf8b, 0x0) 6m50.37354761s ago: executing program 52 (id=2545): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700), 0x80002, 0x0) write$binfmt_aout(r0, &(0x7f0000000740)=ANY=[], 0xff70) r1 = gettid() timer_create(0x0, &(0x7f0000000740)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000007c0)) timer_settime(0x0, 0x0, &(0x7f0000000800)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000780)) 6m17.813301151s ago: executing program 53 (id=2691): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x200000, @empty, 0x4}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e23590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 5m53.83456159s ago: executing program 5 (id=2808): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x280040a, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xfd, 0x553e, &(0x7f0000006b40)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000002340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002380), 0xfffffedf, 0x10, &(0x7f00000023c0), 0xffffff95, 0x0, 0xffffffffffffffff, 0x10}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002400)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000002480)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000003140), &(0x7f0000003180)}, 0x50) poll(&(0x7f00000031c0)=[{0xffffffffffffffff, 0x2010}, {0xffffffffffffffff, 0x404}], 0x2, 0x4) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 5m51.689179908s ago: executing program 4 (id=2821): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 5m51.248099733s ago: executing program 5 (id=2824): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000a00)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000a80)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000ac0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000b40)={r3, 0x3, r0, 0x5}) 5m50.877638851s ago: executing program 5 (id=2827): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000500)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x16, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18, 0x1000}, {"5fcc"}}}}}}}, 0x0) 5m50.634657775s ago: executing program 5 (id=2829): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fcntl$setlease(r0, 0x400, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e5c}, 0x6e) 5m50.317823888s ago: executing program 4 (id=2831): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r2}, &(0x7f0000000b80)=0x20000, &(0x7f0000000bc0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r2, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r3}, &(0x7f0000000d00)=0x2000000, &(0x7f0000000d40)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000d80)={r0, &(0x7f0000000dc0), 0x0}, 0x20) 5m50.213479749s ago: executing program 5 (id=2832): r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x554e, &(0x7f0000000580)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000076c0)='./file1\x00', 0x1c1341, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10000) unlink(&(0x7f0000007840)='./file1\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5m50.014573789s ago: executing program 4 (id=2833): r0 = io_uring_setup(0x3650, &(0x7f0000000080)={0x0, 0x65c9, 0x80, 0x3, 0x80}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x2009, 0xfffffffe}, 0x8) bind$bt_sco(r1, &(0x7f0000000240), 0x8) listen(r1, 0x0) shutdown(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m49.633790327s ago: executing program 4 (id=2837): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/65, 0x41}], 0x1) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000a2b000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000340)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) 5m48.880485864s ago: executing program 8 (id=2840): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002880)={0xffffffffffffffff}) pipe(&(0x7f00000028c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002900)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000002940)='./debug\x00', &(0x7f0000002980)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000029c0)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) splice(r0, 0x0, r1, 0x0, 0x2000000008, 0x0) 5m48.62393468s ago: executing program 8 (id=2842): unshare(0x26020480) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000340)=0x1, 0x4) bind$rds(r0, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)=""/111, 0x6f}], 0x1, &(0x7f0000000500)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/192, 0xc0}, {&(0x7f0000000740)=""/182, 0xb6}, {&(0x7f0000000800)=""/100, 0x64}, {&(0x7f0000000880)=""/90, 0x5a}, {&(0x7f0000000900)=""/115, 0x73}, {&(0x7f0000000980)=""/159, 0x9f}, {&(0x7f0000000a40)=""/53, 0x35}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/47, 0x2f}], 0x10000000000001c9}, 0x6}], 0x2, 0x0, 0x0) poll(&(0x7f0000000b40)=[{r0, 0x4}], 0x1, 0x9) 5m48.554353118s ago: executing program 4 (id=2844): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x120485a, &(0x7f0000000b40)=ANY=[], 0x1, 0x2e7, &(0x7f0000000280)="$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") r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x3, 0x9, 0x6, 0x3, 0x24103, 0x6, {0x200004, 0x10005c60, 0x203, 0x1000000003, 0xfffffffeffffffff, 0xd616, 0x10000006, 0x6, 0x0, 0x2000, 0x81000001, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000100)=0x4, 0x80000000) connect$unix(r0, 0x0, 0x0) dup(0xffffffffffffffff) unlink(&(0x7f0000000900)='./file1\x00') 5m48.316728201s ago: executing program 8 (id=2845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x7, 0x6, 0x0, 0x256, 0x3ff, 0x0, 0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m47.910765413s ago: executing program 8 (id=2847): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x20) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004740)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4c9f2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f07ef5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8981c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/146, 0x92}], 0x1, 0x8000, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)="3c3e0f2397b4d84500b5f812365f00000000000000", 0xff40) 5m41.017535714s ago: executing program 4 (id=2849): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001300)={0x1, &(0x7f0000001340)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) fchdir(r1) 5m37.364887696s ago: executing program 5 (id=2850): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000880)='8', 0x1) unshare(0x2e000480) 5m36.801765182s ago: executing program 8 (id=2851): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m29.739155491s ago: executing program 54 (id=2848): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001400)=[@text64={0x40, &(0x7f0000001440)="f2f0450fbb3364410f01c9363e0f955c8600400f01c53e4c0fc75e0a66ba2100ed660f3a161f3366baf80cb81218428aef66bafc0cb000eec4e3c96bc90ec744240017010000c74424027cbeb742ff2c24", 0x51}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m25.71732495s ago: executing program 55 (id=2849): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001300)={0x1, &(0x7f0000001340)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) fchdir(r1) 5m22.147197653s ago: executing program 56 (id=2850): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000880)='8', 0x1) unshare(0x2e000480) 5m22.047615973s ago: executing program 8 (id=2855): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x156) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='27', 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7effffe, 0x300000b, 0x401d031, r0, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x81, 0x10, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0xb, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0xff, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xff, 0x7, {0x8, 0x25, 0x1, 0x3, 0x3c, 0x8, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xb, 0x8, 0x4, {0x8, 0x25, 0x1, 0x80, 0x3, 0x2, 0x7}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 5m6.670706327s ago: executing program 57 (id=2855): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x156) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='27', 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7effffe, 0x300000b, 0x401d031, r0, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x81, 0x10, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0xb, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0xff, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xff, 0x7, {0x8, 0x25, 0x1, 0x3, 0x3c, 0x8, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xb, 0x8, 0x4, {0x8, 0x25, 0x1, 0x80, 0x3, 0x2, 0x7}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 1m26.22115438s ago: executing program 0 (id=3071): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x1}, 0x14) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x3, 0x1, 0x1, 0x0, 0x6, @random="ee52e7e07522"}, 0x14) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x5, 0x50, 0x0, &(0x7f0000000640)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1m26.066389485s ago: executing program 0 (id=3072): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x200008, &(0x7f00000005c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000600)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='.\x00', 0x0, 0x0) openat2(r1, &(0x7f0000000a00)='./cgroup\x00', &(0x7f0000000a40)={0x40, 0x0, 0x13}, 0x18) 1m25.850180497s ago: executing program 0 (id=3074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000a40)=""/270, 0x10e}], 0x1, 0x11, 0xffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000b80)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1m25.178039775s ago: executing program 0 (id=3082): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x49a, &(0x7f00000003c0)="$eJzs3M1rHOUfAPDvTF7a/vqS/Gp9aS0YLUJQTJq0ag9eFAWRioIeKp5isi2h20aSKLYUm4rUiyAFPYtH0b/AmyiingSvevEkhaK9tPUUmdmZvGyzSZNsdmPz+cBmn2dmdub73XnZZ55nNwFsWX3ZnyRiV0T8FhE9teriBfpqTzevXxi9df3CaBKzs6/9leTL3bh+YbRctHzdzqLSn0akHybFRhabOnf+9Ei1Wpks6oPTZ94enDp3/ol3z4ycqpyqnB0+duzokaGnnxp+ci1pbaufkOV148D7Ewf3v/jGlZdHT1x566evs3h3FfMX5rHy2u5MX5b437O5+nmPrm2Vm9buBeWks42BsCodEZHtrq78/O+JjpjfeT3xwgdtDQ7YUNln0zIfbzOzwF0siXZHALRH+UGf3f+WjxY1PTaFa8/WboCyvG8Wj9qczkiLZbrq7m+bqS8iTsz883n2iJX6IQAAmuDj0c+Od0fM9tz66qWs7dEzNyeN+/LnP/K/e4oxlN6I+H9E7I2IeyJiX0TcG5Eve39EPLDOeG5v/6RX17nKZWXtv2eKsa3F7b+y9Re9HUVtd55/V3JyvFo5XLwn/dG1LasPLbONb5//9ZNG8xa2/7JHtv2yLVjEcbWzroNubGR6JG+UNsG1SxEHOpfKP5kbCUgiYn9EHFjdqveUhfHHvjzYaKGV819GE8aZZr/I0pvJ8p+JuvxLycLxyfHbxicHt0e1cniwPCpuj/DnXy6/2mj768q/Ca5Vas8L9n/9Ir3J/JtRmZxa/TYu//5Rw3uaNR7/aXfyej7O3F1Me29kenpyKKI7OZ7XF00fnn9tWS+Xz47//kNLn/97i9dkyT8YEQfnrwnxUBH7wxHxSEQcWib/H59rPK/MP9I27f9LEWNLXv/mjv9s/xfj9UkyOTdwf+eFjtM/fNNo+3e2/4/mpf5iSn79W8FS4WQnY32A63nvAAAA4L8izb8Dn6QDc+U0HRiofYd/X/wvrU5MTT9+cuKds2O178r3Rlda9nT1FP2h1fFqZSiZKdZY6x8dLvqKy/7SI0W/8acdO/L6wOhEdazNucNWt7PB+Z/5s6Pd0QEbbMeSU4e7Wx4I0Ab14+jp4urFV8LFAO5Wfq8NW9cK53/aqjiA1utcttrYmxsQC9BaS53wF+vqxgLg7uT+H7auFc7/Nf77S2DTS79rdwRAG2n/w5a0hp/zt6KwfXLq+80d4QYWVptyZ7QwwoiykLb9jVLYwEKbL0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABN8m8AAAD//6qe4j0=") mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x89901) move_mount(r0, &(0x7f0000000900)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x152) 1m24.429556092s ago: executing program 0 (id=3087): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000440)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000480)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000006c0)=0x10, 0x4) sendmsg$can_raw(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@can={{0x4, 0x0, 0x0, 0x1}, 0x3, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x40000043, 0x0) 1m23.85351173s ago: executing program 0 (id=3091): wait4(0x0, 0x0, 0x40000000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='6', 0x1}], 0x1, 0x0, 0x30, 0x40045}}], 0x1, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x5, 0x4) 1m23.07224396s ago: executing program 58 (id=3091): wait4(0x0, 0x0, 0x40000000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='6', 0x1}], 0x1, 0x0, 0x30, 0x40045}}], 0x1, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x5, 0x4) 52.180327272s ago: executing program 7 (id=3206): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0xf4, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_REALM={0xb7, 0xfa, "96edf75afc9d2f0904f59186c5c973fafb4d6b10971b1dde74825d825d07eeeca30b96cdeda2ecced8a9bb6d8163ca609daec828fe114827ec0079e9d107d64b206376eded4255cdaf2f529df53a7e0feaf93c6cd1af8f1e9a118a738f74a0355009791893199e0adc49a5ed034a28dd518608ffe6a19de7d2c3b1a802697166c308bc93ede4c9777deaf0e2ff8413a9ca287e757aca0acbf851b0db79e7466799b4c51740505ab04ebaedf301e545c9f9321a"}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PREV_BSSID={0xa}]}, 0xf4}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000) 51.975218843s ago: executing program 7 (id=3207): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000a00)={0x1, {&(0x7f0000000240)=""/39, 0x27, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000340)=""/69, 0x45, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f00000005c0)={0x1, {&(0x7f0000000400)=""/140, 0x8c, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f00000003c0)=""/19, 0xff5b, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 51.736052497s ago: executing program 7 (id=3209): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000100)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000280)={0x0, 0x0, r4, r3, 0x0, 0x20, 0x0, 0x800, {0x4, 0x1, 0x3, 0x69, 0x201, 0x0, 0x2, 0x5, 0x4cab, 0xe156, 0x0, 0x0, 0x25, 0xb, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 51.467058565s ago: executing program 7 (id=3210): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000dc0)='./file0\x00', 0x800714, &(0x7f0000000e00)={[{@nobarrier}]}, 0xff, 0x4a5, &(0x7f0000001b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000001600)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) open(&(0x7f0000001640)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000001680)=@loop={'/dev/loop', 0x0}, &(0x7f00000016c0)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000001700)='./bus\x00', 0x8000, 0xa3) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x14, 0x15, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x7]}) 49.142014561s ago: executing program 7 (id=3217): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000540), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3ff, @empty, 0x10}, {0xa, 0x4e1e, 0x8000009, @mcast1, 0xffff7ffc}, r1, 0x1}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 48.549336491s ago: executing program 7 (id=3220): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x234a0c7, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000280)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0x100, 0x9, 0x0) 47.886376929s ago: executing program 59 (id=3220): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x234a0c7, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000280)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0x100, 0x9, 0x0) 33.42676173s ago: executing program 6 (id=3291): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x90000005}) 31.8506994s ago: executing program 6 (id=3303): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x18, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000001c0)={0x13, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f00000005c0)={0x40, 0x16, 0x2, '/d'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 25.721171893s ago: executing program 6 (id=3326): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000b80)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000ac0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100040, 0x0, 0x1, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000"], &(0x7f0000000000), 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x81000c88) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 25.714135294s ago: executing program 6 (id=3330): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000dc0)='./file0\x00', 0x800714, &(0x7f0000000e00)={[{@nobarrier}]}, 0xff, 0x4a5, &(0x7f0000001b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000001600)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) open(&(0x7f0000001640)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000001680)=@loop={'/dev/loop', 0x0}, &(0x7f00000016c0)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000001700)='./bus\x00', 0x8000, 0xa3) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x14, 0x15, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x7]}) 23.364930493s ago: executing program 6 (id=3336): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000180)={r2, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f00000026c0)={0x0, 0x8, 0x10, 0xbf9, 0xffff}, &(0x7f0000002700)=0x18) 22.677503453s ago: executing program 6 (id=3340): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x28000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000380)={0x100000011, @multicast2, 0x4, 0x0, 'sed\x00', 0x7370617a91088c28, 0x10000, 0x5a}, 0x2c) 21.930550199s ago: executing program 60 (id=3340): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x28000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000380)={0x100000011, @multicast2, 0x4, 0x0, 'sed\x00', 0x7370617a91088c28, 0x10000, 0x5a}, 0x2c) 6.636843195s ago: executing program 2 (id=3412): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x9) syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) 5.331822588s ago: executing program 1 (id=3418): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r1}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000005c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000006c0)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000900)={0x48, 0xa, r4, 0x0, r1}) 5.150618016s ago: executing program 1 (id=3419): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x1ff) syz_mount_image$vfat(&(0x7f0000000640), &(0x7f0000000680)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000006c0)) mount$overlay(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x4008, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0/file1\x00', 0x40, 0x83) fcntl$setstatus(r0, 0x4, 0x70c00) readahead(r0, 0x6, 0x1) 4.922324789s ago: executing program 1 (id=3421): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b1b, &(0x7f0000000040)) 4.631487919s ago: executing program 1 (id=3423): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x200008, &(0x7f00000005c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000600)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='.\x00', 0x0, 0x0) openat2(r1, &(0x7f0000000a00)='./cgroup\x00', &(0x7f0000000a40)={0x40, 0x0, 0x13}, 0x18) 4.048501848s ago: executing program 2 (id=3424): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000780)=r1, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000800)={&(0x7f0000000840)=@hci, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000900)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000bc0)={0x0, 0xfffffff5, &(0x7f0000000c00)=[{&(0x7f0000000c40)="a2", 0xfffffdef}], 0x1}, 0x0) 4.048299558s ago: executing program 1 (id=3425): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_mount_image$udf(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001440)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000001480)='.\x00', 0xffffffd3) setuid(0xee01) open(&(0x7f00000014c0)='.\x00', 0x51a382, 0x78e22799f4a46e8e) 3.63038131s ago: executing program 1 (id=3428): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000001680)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000016c0)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001780)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) 3.33861457s ago: executing program 9 (id=3431): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r0, &(0x7f0000000900), 0x1000) 3.137171401s ago: executing program 3 (id=3432): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x400, 0x1, 0x235}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0xd000}], 0x1, &(0x7f0000001740)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}], 0x18}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 2.884722466s ago: executing program 3 (id=3433): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f00000002c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois', 0x8) recvfrom$inet(r0, &(0x7f00000003c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.177559289s ago: executing program 9 (id=3434): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x400, @loopback, 0x80}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x3000, 0x3, 0x1, 0x80, r0, 0x0}]) 2.176025858s ago: executing program 3 (id=3442): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='27', 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80d80, 0x0) socket(0x28, 0x5, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) 1.658971061s ago: executing program 2 (id=3435): r0 = io_uring_setup(0x136a, &(0x7f0000001b40)={0x0, 0x1f8a, 0x40, 0x1, 0x100028c}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.630246484s ago: executing program 9 (id=3436): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000300)={0xa, 0x0, 0xfffffffe, @loopback}, 0x43) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3ff, @empty, 0x0, 0x4005}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c, 0x0, 0x10}, 0x0) 1.340930723s ago: executing program 9 (id=3437): r0 = open(&(0x7f0000000140)='./file0\x00', 0x1e1142, 0xfb) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="b86ec4b253cc", 0x6}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendfile(r2, r0, &(0x7f0000000340)=0x5, 0x3af) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20002040) 1.113505526s ago: executing program 9 (id=3438): r0 = socket(0x26, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0x3}, &(0x7f0000000080)=0x8) 989.201469ms ago: executing program 2 (id=3439): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$P9_RSTATu(r0, &(0x7f00000008c0)={0xd5, 0x7d, 0xa, {{0x0, 0xa9, 0x3, 0x5, {0x0, 0x0, 0x5}, 0xb00000, 0x8, 0x7, 0x2, 0x1, '\x85', 0x1, '\x00', 0x73, '\x17\xe0_|s/\xec\xcf\x1e|~\xf4*wIX\xbe[_\x12\xd4zZs\x85\xc4/\xa2?\xbc=\x82O\xc7\xf7\xf1\r\xd0\x06\x14\xbb\xf1\xbb\x99\xaa\xdb\xf1\xf0\xe3\xdf\x1c\x16{\"\f\x8c0\xd0I\xff\x02):9\xe7\xa6\x9e~\xa9\xa3\xf7\xaaW)o\x96\x1bm+\xcb\xf1\xbf\x0e\xaa\xd6|\"\xf73r+F\x10\xf2P\xcc\x1f\xd7\x7f\xfc\x0e,x\xe5\x10^\xff\xf9\x12\x00\x00\x00\x00\x00\x00', 0x1, '{'}, 0x17, '\x97\xfe\xef\x85\xec\x92\xbf\xa6z\xa0K\x1f-Es\x020\x8frQ\x92\x81\xf4'}}, 0xd5) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) 979.92394ms ago: executing program 3 (id=3440): r0 = gettid() timer_create(0x1, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000600)=0x0) timer_settime(r1, 0x1, &(0x7f0000000640)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x200000000000008, 0xe2080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000006c0)=0x7) read(r2, &(0x7f0000006800)=""/4116, 0x1014) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000007840)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 909.521327ms ago: executing program 9 (id=3441): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@nodiscard}]}, 0x5, 0x559a, &(0x7f00000003c0)="$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") r1 = openat(r0, &(0x7f0000005980)='./file0\x00', 0x8400, 0x21a) ioctl$FITRIM(r1, 0xc4009420, &(0x7f00000059c0)={0x5, 0x204}) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = open(&(0x7f0000007b40)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0xc0185879, &(0x7f0000007b80)={0x4, 0xffffffffffdffffb, 0x7, 0x40000000001, 0x89a, 0x0, 0x2401}) 698.097329ms ago: executing program 3 (id=3443): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = syz_open_dev$sndctrl(&(0x7f00000014c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000001500)=0xffb) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001540)={{0x1088, 0x1, 0x2, 0x800, 'syz0\x00', 0xce6f7df0}, 0x4, 0x20000000, 0x1, r1, 0x0, 0x8, 'syz1\x00', 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000001680)=0x7b1) 584.73954ms ago: executing program 2 (id=3444): bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x12, 0x3, 0x0, &(0x7f0000000d40)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a80)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000ac0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r1) keyctl$search(0xa, r1, &(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x1, 0x2e}, 0x0) 405.533789ms ago: executing program 3 (id=3445): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000740)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000780)=r1, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000800)={&(0x7f0000000840)=@hci, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000900)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000bc0)={0x0, 0xfffffff5, &(0x7f0000000c00)=[{&(0x7f0000000c40)="a2", 0xfffffdef}], 0x1}, 0x0) 0s ago: executing program 2 (id=3446): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000780)={'syz_tun\x00', 0x1}) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="00000805001001"], 0xa) kernel console output (not intermixed with test programs): [ 910.801471][T20034] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 910.914345][T19856] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 911.016156][T19856] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 911.084134][T19856] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 911.131838][T19856] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 911.208736][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 911.420492][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.479009][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.508063][ T8] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 911.524362][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.533089][T20034] (syz.0.2892,20034,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 911.597814][ T8] usb 4-1: config 0 descriptor?? [ 911.755661][T19820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.791754][T19661] ocfs2: Unmounting device (7,0) on (node local) [ 911.802923][T19856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.916666][T19856] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.000886][ T8324] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.008209][ T8324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.041114][ T8324] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.048385][ T8324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.075072][ T8] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 912.089513][ T8] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 912.127304][ T8] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 912.134421][ T8] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 912.167685][ T8] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 912.180287][ T8] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 912.209448][ T8] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 912.253254][ T8] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 912.382138][ T8] cp2112 0003:10C4:EA90.0017: Part Number: 0x00 Device Version: 0x00 [ 912.909519][T19856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.959753][T19820] veth0_vlan: entered promiscuous mode [ 913.013399][T19820] veth1_vlan: entered promiscuous mode [ 913.153977][T19820] veth0_macvtap: entered promiscuous mode [ 913.209962][T19820] veth1_macvtap: entered promiscuous mode [ 913.284876][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.308192][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.315788][ T8] usb 4-1: USB disconnect, device number 12 [ 913.344670][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.388560][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.426007][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.449232][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.474960][T19820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 913.550555][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.577217][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.592657][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.603527][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.624363][T20070] loop0: detected capacity change from 0 to 32768 [ 913.637265][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.679812][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.683039][T20070] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 913.768719][T19820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 913.832791][T20070] XFS (loop0): Ending clean mount [ 913.862171][T19820] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.904452][T19820] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.946626][T19820] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.966075][T19820] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.146037][T19661] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 914.335800][T20110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2896'. [ 914.699650][T19856] veth0_vlan: entered promiscuous mode [ 914.745156][T19856] veth1_vlan: entered promiscuous mode [ 914.887812][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.899466][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.973897][T19856] veth0_macvtap: entered promiscuous mode [ 915.019965][T20121] netlink: 'syz.3.2898': attribute type 1 has an invalid length. [ 915.084510][T19856] veth1_macvtap: entered promiscuous mode [ 915.120303][T15801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.140590][T15801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.210245][T19856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.242169][T19856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.281565][T19856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.307793][T19856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.347209][T19856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.377210][T19856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.408879][T19856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.440671][T19856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.479578][T19856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.516917][T19856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.577236][T19856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.615062][T19856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.647716][T19856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.672485][T19856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.707398][T19856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.737295][T19856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.765514][T19856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.801148][T19856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.872736][T19856] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.904736][T19856] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.930293][T19856] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.959355][T19856] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.994367][T20136] rxe_eth0 speed is unknown, defaulting to 1000 [ 916.445775][ T8324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.474928][ T8324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.585459][ T8328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.607734][ T8328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.752833][T20162] loop6: detected capacity change from 0 to 256 [ 916.868563][T20162] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 917.020793][T20165] loop0: detected capacity change from 0 to 1024 [ 917.157404][T20165] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 917.549038][T20165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 917.575709][T20183] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2907'. [ 917.877740][T20190] loop3: detected capacity change from 0 to 4096 [ 917.904201][T20190] EXT4-fs: Ignoring removed mblk_io_submit option [ 917.937530][T20190] EXT4-fs: Ignoring removed orlov option [ 918.003816][T20190] EXT4-fs (loop3): Test dummy encryption mode enabled [ 918.070693][T20190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 918.360762][T19643] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.448972][T19661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.804673][T20210] loop6: detected capacity change from 0 to 40427 [ 919.841589][T20210] F2FS-fs (loop6): Invalid log blocks per segment (1) [ 919.869174][T20210] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 919.897842][T20210] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7 [ 919.947329][T20210] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff [ 919.955809][T20210] F2FS-fs (loop6): Image doesn't support compression [ 920.009301][T20210] F2FS-fs (loop6): invalid crc value [ 920.032544][T20210] F2FS-fs (loop6): Found nat_bits in checkpoint [ 920.246874][T20210] F2FS-fs (loop6): Start checkpoint disabled! [ 920.326877][ C0] vkms_vblank_simulate: vblank timer overrun [ 920.375875][T20210] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 920.427202][T20210] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 920.550221][T20210] F2FS-fs (loop6): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x13a/0xbc0 [ 920.610243][T20244] syz.6.2915: attempt to access beyond end of device [ 920.610243][T20244] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 921.084799][T17397] kworker/u4:24: attempt to access beyond end of device [ 921.084799][T17397] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 921.133451][T17397] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 921.150513][T17397] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 921.390985][ C0] vkms_vblank_simulate: vblank timer overrun [ 922.270924][T20291] Bluetooth: MGMT ver 1.22 [ 922.275559][T20291] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 922.369714][T20293] loop3: detected capacity change from 0 to 1024 [ 922.386731][T20293] journal_path: Lookup failure for './bus' [ 922.399814][T20293] EXT4-fs: error: could not find journal device path [ 922.710031][T20304] FAULT_INJECTION: forcing a failure. [ 922.710031][T20304] name failslab, interval 1, probability 0, space 0, times 0 [ 922.743115][T20304] CPU: 1 PID: 20304 Comm: syz.9.2937 Not tainted syzkaller #0 [ 922.750738][T20304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 922.760862][T20304] Call Trace: [ 922.764194][T20304] [ 922.767188][T20304] dump_stack_lvl+0x18c/0x250 [ 922.771940][T20304] ? show_regs_print_info+0x20/0x20 [ 922.777229][T20304] ? load_image+0x420/0x420 [ 922.781887][T20304] ? __might_sleep+0xe0/0xe0 [ 922.786537][T20304] ? __lock_acquire+0x7eb0/0x7eb0 [ 922.791652][T20304] should_fail_ex+0x394/0x4c0 [ 922.796426][T20304] should_failslab+0x9/0x20 [ 922.801003][T20304] slab_pre_alloc_hook+0x59/0x300 [ 922.806076][T20304] ? free_vm_area+0x50/0x50 [ 922.810619][T20304] ? bpf_prog_alloc_no_stats+0xd7/0x460 [ 922.816212][T20304] __kmem_cache_alloc_node+0x53/0x260 [ 922.821622][T20304] ? bpf_prog_alloc_no_stats+0xd7/0x460 [ 922.827207][T20304] kmalloc_trace+0x2a/0xe0 [ 922.831666][T20304] bpf_prog_alloc_no_stats+0xd7/0x460 [ 922.837087][T20304] bpf_prog_alloc+0x3d/0x1a0 [ 922.841722][T20304] ? bpf_prog_create_from_user+0x31/0x420 [ 922.847644][T20304] bpf_prog_create_from_user+0xa6/0x420 [ 922.853279][T20304] fanout_set_data+0x2ae/0x430 [ 922.858193][T20304] ? fanout_add+0x1310/0x1310 [ 922.863028][T20304] packet_setsockopt+0x8be/0x1500 [ 922.868095][T20304] ? packet_ioctl+0x350/0x350 [ 922.872815][T20304] ? aa_sk_perm+0x7bb/0x8e0 [ 922.877382][T20304] ? aa_af_perm+0x330/0x330 [ 922.881943][T20304] ? __fget_files+0x28/0x460 [ 922.886582][T20304] ? aa_sock_opt_perm+0x74/0x100 [ 922.891665][T20304] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 922.897260][T20304] ? security_socket_setsockopt+0x7e/0xa0 [ 922.903035][T20304] ? packet_ioctl+0x350/0x350 [ 922.907761][T20304] do_sock_setsockopt+0x175/0x1a0 [ 922.912825][T20304] ? __fdget+0x180/0x210 [ 922.917113][T20304] __x64_sys_setsockopt+0x182/0x200 [ 922.922353][T20304] do_syscall_64+0x55/0xb0 [ 922.927156][T20304] ? clear_bhb_loop+0x40/0x90 [ 922.931874][T20304] ? clear_bhb_loop+0x40/0x90 [ 922.936619][T20304] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 922.942566][T20304] RIP: 0033:0x7f1ee4da8f19 [ 922.947028][T20304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.966705][T20304] RSP: 002b:00007f1ee5ba2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 922.975277][T20304] RAX: ffffffffffffffda RBX: 00007f1ee5025fa0 RCX: 00007f1ee4da8f19 [ 922.983302][T20304] RDX: 0000000000000016 RSI: 0000000000000107 RDI: 0000000000000004 [ 922.991351][T20304] RBP: 00007f1ee4e37f6d R08: 0000000000000010 R09: 0000000000000000 [ 922.999401][T20304] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 923.007417][T20304] R13: 00007f1ee5026038 R14: 00007f1ee5025fa0 R15: 00007ffcdfe74ce8 [ 923.015438][T20304] [ 923.099238][T20308] input: syz1 as /devices/virtual/input/input37 [ 923.527366][ T7445] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 923.756183][ T7445] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 923.771748][ T7445] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 923.811957][ T7445] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 923.848406][T20335] netlink: 'syz.0.2945': attribute type 1 has an invalid length. [ 923.857586][ T7445] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 923.887446][ T7445] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.206234][T20335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 924.369489][ T7445] cxacru 4-1:1.0: send of cm 0x91 failed (-71) [ 924.396225][ T7445] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 924.418611][T20338] bond1: (slave macvlan0): Enslaving as a backup interface with an up link [ 924.429924][ T7445] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 924.486609][ T7445] cxacru: probe of 4-1:1.0 failed with error -71 [ 924.567878][ T7445] usb 4-1: USB disconnect, device number 13 [ 925.390658][T20378] syzkaller0: entered promiscuous mode [ 925.412546][T20378] syzkaller0: entered allmulticast mode [ 925.468445][T20388] FAULT_INJECTION: forcing a failure. [ 925.468445][T20388] name failslab, interval 1, probability 0, space 0, times 0 [ 925.497560][T20388] CPU: 1 PID: 20388 Comm: syz.9.2955 Not tainted syzkaller #0 [ 925.505190][T20388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 925.515333][T20388] Call Trace: [ 925.518667][T20388] [ 925.521657][T20388] dump_stack_lvl+0x18c/0x250 [ 925.526498][T20388] ? show_regs_print_info+0x20/0x20 [ 925.531913][T20388] ? load_image+0x420/0x420 [ 925.536522][T20388] ? __might_sleep+0xe0/0xe0 [ 925.541179][T20388] ? __lock_acquire+0x7eb0/0x7eb0 [ 925.546273][T20388] should_fail_ex+0x394/0x4c0 [ 925.551020][T20388] should_failslab+0x9/0x20 [ 925.555594][T20388] slab_pre_alloc_hook+0x59/0x300 [ 925.560689][T20388] kmem_cache_alloc_node+0x5e/0x320 [ 925.565980][T20388] ? __alloc_skb+0x103/0x2c0 [ 925.570635][T20388] __alloc_skb+0x103/0x2c0 [ 925.575115][T20388] tcp_stream_alloc_skb+0x3d/0x330 [ 925.580314][T20388] tcp_connect+0x16da/0x5310 [ 925.585020][T20388] ? mark_lock+0x94/0x320 [ 925.589429][T20388] ? __lock_acquire+0x7eb0/0x7eb0 [ 925.594523][T20388] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 925.600839][T20388] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 925.607178][T20388] ? lock_chain_count+0x20/0x20 [ 925.612105][T20388] ? tcp_options_write+0xc70/0xc70 [ 925.617285][T20388] ? get_random_u32+0x4d5/0x930 [ 925.622207][T20388] ? lockdep_hardirqs_on+0x98/0x150 [ 925.627470][T20388] ? read_tsc+0x9/0x20 [ 925.631604][T20388] ? __asan_memset+0x22/0x40 [ 925.636263][T20388] ? tcp_fastopen_active_should_disable+0x240/0x240 [ 925.642930][T20388] ? inet6_hash_connect+0x7b/0xe0 [ 925.648028][T20388] tcp_v6_connect+0x11ba/0x18e0 [ 925.653059][T20388] ? tcp_v6_pre_connect+0xf0/0xf0 [ 925.658268][T20388] ? tcp_sendmsg_locked+0x44ee/0x4ab0 [ 925.663726][T20388] ? tcp_sendmsg+0x2f/0x50 [ 925.668213][T20388] ? __sys_sendto+0x4a9/0x6b0 [ 925.673038][T20388] ? __x64_sys_sendto+0xde/0xf0 [ 925.677946][T20388] ? do_syscall_64+0x55/0xb0 [ 925.682661][T20388] __inet_stream_connect+0x290/0xf50 [ 925.688184][T20388] ? inet_dgram_connect+0x340/0x340 [ 925.693484][T20388] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 925.698774][T20388] tcp_sendmsg_locked+0x44ee/0x4ab0 [ 925.704051][T20388] ? verify_lock_unused+0x140/0x140 [ 925.709309][T20388] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 925.715363][T20388] ? preempt_schedule+0xc0/0xd0 [ 925.720291][T20388] ? preempt_schedule_common+0x82/0xc0 [ 925.725823][T20388] ? preempt_schedule+0xc0/0xd0 [ 925.730775][T20388] ? mark_lock+0x94/0x320 [ 925.735274][T20388] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 925.741406][T20388] ? lock_chain_count+0x20/0x20 [ 925.746321][T20388] ? tcp_set_state+0x6c0/0x6c0 [ 925.751178][T20388] tcp_sendmsg+0x2f/0x50 [ 925.755494][T20388] __sys_sendto+0x4a9/0x6b0 [ 925.760063][T20388] ? __ia32_sys_getpeername+0x90/0x90 [ 925.765510][T20388] ? aa_af_perm+0x330/0x330 [ 925.770084][T20388] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 925.776156][T20388] ? lock_chain_count+0x20/0x20 [ 925.781075][T20388] __x64_sys_sendto+0xde/0xf0 [ 925.785906][T20388] do_syscall_64+0x55/0xb0 [ 925.790397][T20388] ? clear_bhb_loop+0x40/0x90 [ 925.795138][T20388] ? clear_bhb_loop+0x40/0x90 [ 925.799890][T20388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 925.805849][T20388] RIP: 0033:0x7f1ee4da8f19 [ 925.810325][T20388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.830010][T20388] RSP: 002b:00007f1ee5ba2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 925.838506][T20388] RAX: ffffffffffffffda RBX: 00007f1ee5025fa0 RCX: 00007f1ee4da8f19 [ 925.846543][T20388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 925.854575][T20388] RBP: 00007f1ee4e37f6d R08: 0000200000001ac0 R09: 000000000000001c [ 925.862606][T20388] R10: 0000000020000075 R11: 0000000000000246 R12: 0000000000000000 [ 925.870634][T20388] R13: 00007f1ee5026038 R14: 00007f1ee5025fa0 R15: 00007ffcdfe74ce8 [ 925.878704][T20388] [ 926.358550][T20402] FAULT_INJECTION: forcing a failure. [ 926.358550][T20402] name failslab, interval 1, probability 0, space 0, times 0 [ 926.402813][T20402] CPU: 0 PID: 20402 Comm: syz.0.2957 Not tainted syzkaller #0 [ 926.410376][T20402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 926.420515][T20402] Call Trace: [ 926.423839][T20402] [ 926.426815][T20402] dump_stack_lvl+0x18c/0x250 [ 926.431563][T20402] ? show_regs_print_info+0x20/0x20 [ 926.436826][T20402] ? load_image+0x420/0x420 [ 926.441414][T20402] ? __might_sleep+0xe0/0xe0 [ 926.446081][T20402] ? __lock_acquire+0x7eb0/0x7eb0 [ 926.451172][T20402] should_fail_ex+0x394/0x4c0 [ 926.455921][T20402] should_failslab+0x9/0x20 [ 926.460513][T20402] slab_pre_alloc_hook+0x59/0x300 [ 926.465589][T20402] ? down_write+0x16e/0x200 [ 926.470155][T20402] ? __list_lru_init+0xb4/0x600 [ 926.475064][T20402] ? __list_lru_init+0xb4/0x600 [ 926.479954][T20402] __kmem_cache_alloc_node+0x53/0x260 [ 926.485366][T20402] ? up_write+0x1be/0x410 [ 926.489736][T20402] ? __list_lru_init+0xb4/0x600 [ 926.494622][T20402] __kmalloc+0xa7/0x240 [ 926.498839][T20402] __list_lru_init+0xb4/0x600 [ 926.503567][T20402] alloc_super+0x74c/0x910 [ 926.508019][T20402] sget_fc+0x2ee/0x930 [ 926.512129][T20402] ? kill_litter_super+0x60/0x60 [ 926.517112][T20402] ? bpf_get_tree+0x20/0x20 [ 926.521658][T20402] get_tree_nodev+0x2a/0x140 [ 926.526299][T20402] vfs_get_tree+0x8c/0x280 [ 926.530760][T20402] vfs_cmd_create+0xe3/0x230 [ 926.535393][T20402] __se_sys_fsconfig+0x70a/0x850 [ 926.540379][T20402] ? __x64_sys_fsconfig+0xc0/0xc0 [ 926.545453][T20402] ? lockdep_hardirqs_on+0x98/0x150 [ 926.551220][T20402] ? __x64_sys_fsconfig+0x20/0xc0 [ 926.556311][T20402] do_syscall_64+0x55/0xb0 [ 926.560776][T20402] ? clear_bhb_loop+0x40/0x90 [ 926.565517][T20402] ? clear_bhb_loop+0x40/0x90 [ 926.570252][T20402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 926.576184][T20402] RIP: 0033:0x7fccb5ba8f19 [ 926.580636][T20402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.600631][T20402] RSP: 002b:00007fccb69a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 926.609103][T20402] RAX: ffffffffffffffda RBX: 00007fccb5e25fa0 RCX: 00007fccb5ba8f19 [ 926.617116][T20402] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 926.625124][T20402] RBP: 00007fccb5c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 926.633128][T20402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.641136][T20402] R13: 00007fccb5e26038 R14: 00007fccb5e25fa0 R15: 00007ffd15b24898 [ 926.649173][T20402] [ 926.940565][T20406] loop0: detected capacity change from 0 to 256 [ 928.919044][T20422] gadgetfs: bound to dummy_udc driver [ 929.198630][T20422] gadgetfs: suspended from state 2 [ 929.242912][ T7445] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 931.549329][T20428] netlink: 'syz.0.2968': attribute type 3 has an invalid length. [ 931.784973][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.791656][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.804875][ T1299] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 933.684883][ T28] audit: type=1800 audit(1700000571.780:131): pid=20464 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.0.2978" name="UDC" dev="configfs" ino=66233 res=0 errno=0 [ 933.735759][T20467] tipc: Started in network mode [ 933.740805][T20467] tipc: Node identity 4, cluster identity 4711 [ 933.747825][T20467] tipc: Node number set to 4 [ 935.153592][ T7445] hid-generic 0005:16C0:05DF.0018: unknown main item tag 0x0 [ 935.209032][ T7445] hid-generic 0005:16C0:05DF.0018: unknown main item tag 0x0 [ 935.216574][ T7445] hid-generic 0005:16C0:05DF.0018: unknown main item tag 0x0 [ 935.277753][ T7445] hid-generic 0005:16C0:05DF.0018: unknown main item tag 0x0 [ 935.285248][ T7445] hid-generic 0005:16C0:05DF.0018: unknown main item tag 0x0 [ 935.346511][ T7445] hid-generic 0005:16C0:05DF.0018: unknown main item tag 0x0 [ 935.367315][ T7445] hid-generic 0005:16C0:05DF.0018: unknown main item tag 0x0 [ 935.374928][ T7445] hid-generic 0005:16C0:05DF.0018: unknown main item tag 0x0 [ 935.420617][ T7445] hid-generic 0005:16C0:05DF.0018: unknown main item tag 0x0 [ 935.450737][ T7445] hid-generic 0005:16C0:05DF.0018: unknown main item tag 0x0 [ 935.561532][ T7445] hid-generic 0005:16C0:05DF.0018: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 935.703474][T20521] loop6: detected capacity change from 0 to 256 [ 935.733403][T20521] exfat: Deprecated parameter 'utf8' [ 935.836552][T20518] fido_id[20518]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 935.864949][T20521] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 936.037748][T20524] syz.3.2994 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 936.081192][T20524] CPU: 0 PID: 20524 Comm: syz.3.2994 Not tainted syzkaller #0 [ 936.088777][T20524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 936.098995][T20524] Call Trace: [ 936.102362][T20524] [ 936.105354][T20524] dump_stack_lvl+0x18c/0x250 [ 936.110109][T20524] ? show_regs_print_info+0x20/0x20 [ 936.115430][T20524] ? load_image+0x420/0x420 [ 936.119991][T20524] ? ___ratelimit+0x478/0x610 [ 936.124737][T20524] ? radix_tree_cpu_dead+0x160/0x160 [ 936.130078][T20524] dump_header+0xd8/0x820 [ 936.134454][T20524] oom_kill_process+0x390/0x580 [ 936.139361][T20524] out_of_memory+0xe0e/0x1200 [ 936.144084][T20524] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 936.150296][T20524] ? mutex_lock_nested+0x20/0x20 [ 936.155333][T20524] ? unregister_oom_notifier+0x20/0x20 [ 936.160874][T20524] mem_cgroup_out_of_memory+0x2c2/0x390 [ 936.166479][T20524] ? try_charge_memcg+0xc8c/0x17c0 [ 936.171637][T20524] ? drain_local_stock+0x630/0x630 [ 936.176807][T20524] ? do_raw_spin_unlock+0x121/0x230 [ 936.182051][T20524] try_charge_memcg+0xc9c/0x17c0 [ 936.187052][T20524] ? folio_flags+0x120/0x120 [ 936.191694][T20524] ? percpu_ref_tryget+0x15/0x180 [ 936.196777][T20524] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 936.202552][T20524] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 936.208582][T20524] ? percpu_ref_tryget+0x15/0x180 [ 936.213678][T20524] ? percpu_ref_tryget+0x15/0x180 [ 936.218804][T20524] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 936.224588][T20524] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 936.230359][T20524] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 936.236209][T20524] obj_cgroup_charge+0x36e/0x630 [ 936.241216][T20524] ? get_obj_cgroup_from_current+0xd4/0x280 [ 936.247154][T20524] ? obj_cgroup_charge+0xed/0x630 [ 936.252232][T20524] ? mod_objcg_mlstate+0x320/0x320 [ 936.257395][T20524] ? percpu_ref_tryget+0x15/0x180 [ 936.262471][T20524] ? percpu_ref_tryget+0x15/0x180 [ 936.267575][T20524] ? get_obj_cgroup_from_current+0xd4/0x280 [ 936.273525][T20524] slab_pre_alloc_hook+0x2e2/0x300 [ 936.278702][T20524] ? down_write_killable+0x181/0x230 [ 936.284027][T20524] ? write_ldt+0x49f/0x750 [ 936.288485][T20524] __kmem_cache_alloc_node+0x53/0x260 [ 936.293899][T20524] ? __might_fault+0xaa/0x120 [ 936.298624][T20524] ? write_ldt+0x49f/0x750 [ 936.303081][T20524] kmalloc_trace+0x2a/0xe0 [ 936.307548][T20524] write_ldt+0x49f/0x750 [ 936.311836][T20524] ? native_write_gdt_entry+0x30/0x30 [ 936.317248][T20524] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 936.323353][T20524] ? lock_chain_count+0x20/0x20 [ 936.328253][T20524] __se_sys_modify_ldt+0x6c/0x2f0 [ 936.333349][T20524] do_syscall_64+0x55/0xb0 [ 936.337808][T20524] ? clear_bhb_loop+0x40/0x90 [ 936.342614][T20524] ? clear_bhb_loop+0x40/0x90 [ 936.347333][T20524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 936.353283][T20524] RIP: 0033:0x7f56f07a8f19 [ 936.357760][T20524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.377425][T20524] RSP: 002b:00007f56f159c028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 936.385887][T20524] RAX: ffffffffffffffda RBX: 00007f56f0a25fa0 RCX: 00007f56f07a8f19 [ 936.393916][T20524] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 936.401927][T20524] RBP: 00007f56f0837f6d R08: 0000000000000000 R09: 0000000000000000 [ 936.410041][T20524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 936.418306][T20524] R13: 00007f56f0a26038 R14: 00007f56f0a25fa0 R15: 00007ffcef856088 [ 936.426334][T20524] [ 936.437284][T20521] rxe_eth0 speed is unknown, defaulting to 1000 [ 936.937271][T20524] memory: usage 0kB, limit 0kB, failcnt 19 [ 936.943188][T20524] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 936.977397][T20524] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 936.997233][T20524] Memory cgroup stats for /syz3/test: [ 936.998049][T20524] cache 0 [ 937.009178][T20524] rss 0 [ 937.012023][T20524] rss_huge 0 [ 937.015278][T20524] shmem 0 [ 937.018549][T20524] mapped_file 0 [ 937.024929][T20524] dirty 0 [ 937.059569][T20524] writeback 0 [ 937.063093][T20524] workingset_refault_anon 0 [ 937.073703][T20524] workingset_refault_file 0 [ 937.078654][T20524] swap 0 [ 937.081697][T20524] pgpgin 0 [ 937.085070][T20524] pgpgout 0 [ 937.088362][T20524] pgfault 3 [ 937.091608][T20524] pgmajfault 0 [ 937.095300][T20524] inactive_anon 0 [ 937.099110][T20524] active_anon 0 [ 937.102723][T20524] inactive_file 0 [ 937.106668][T20524] active_file 0 [ 937.110384][T20524] unevictable 0 [ 937.113984][T20524] hierarchical_memory_limit 0 [ 937.122922][T20524] hierarchical_memsw_limit 9223372036854771712 [ 937.144438][T20524] total_cache 0 [ 937.161123][T20524] total_rss 0 [ 937.164949][T20524] total_rss_huge 0 [ 937.202971][T20524] total_shmem 0 [ 937.206530][T20524] total_mapped_file 0 [ 937.225148][T20524] total_dirty 0 [ 937.254619][T20524] total_writeback 0 [ 937.264766][T20524] total_workingset_refault_anon 0 [ 937.279803][T20524] total_workingset_refault_file 0 [ 937.297989][T20524] total_swap 0 [ 937.301455][T20524] total_pgpgin 0 [ 937.305084][T20524] total_pgpgout 0 [ 937.323317][T20524] total_pgfault 3 [ 937.327042][T20524] total_pgmajfault 0 [ 937.341407][T20524] total_inactive_anon 0 [ 937.345656][T20524] total_active_anon 0 [ 937.356045][T20524] total_inactive_file 0 [ 937.377896][T20524] total_active_file 0 [ 937.382681][T20524] total_unevictable 0 [ 937.386719][T20524] anon_cost 0 [ 937.402498][T20549] loop9: detected capacity change from 0 to 2048 [ 937.427317][T20524] file_cost 0 [ 937.430724][T20524] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.2994,pid=20523,uid=0 [ 937.479092][T20524] Memory cgroup out of memory: Killed process 20524 (syz.3.2994) total-vm:104328kB, anon-rss:1396kB, file-rss:22784kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 937.517766][T20549] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 937.983175][T20558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3001'. [ 938.048278][T20558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3001'. [ 938.156995][T20562] loop3: detected capacity change from 0 to 512 [ 938.328463][T20565] FAULT_INJECTION: forcing a failure. [ 938.328463][T20565] name failslab, interval 1, probability 0, space 0, times 0 [ 938.368490][T20565] CPU: 0 PID: 20565 Comm: syz.0.3004 Not tainted syzkaller #0 [ 938.376064][T20565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 938.386185][T20565] Call Trace: [ 938.389523][T20565] [ 938.392527][T20565] dump_stack_lvl+0x18c/0x250 [ 938.397371][T20565] ? show_regs_print_info+0x20/0x20 [ 938.402659][T20565] ? load_image+0x420/0x420 [ 938.407300][T20565] ? __lock_acquire+0x7eb0/0x7eb0 [ 938.412390][T20565] should_fail_ex+0x394/0x4c0 [ 938.417146][T20565] should_failslab+0x9/0x20 [ 938.421699][T20565] slab_pre_alloc_hook+0x59/0x300 [ 938.426774][T20565] ? lockdep_softirqs_off+0x440/0x440 [ 938.432277][T20565] ? mqueue_init_fs_context+0x57/0x360 [ 938.437770][T20565] __kmem_cache_alloc_node+0x53/0x260 [ 938.443269][T20565] ? mqueue_init_fs_context+0x57/0x360 [ 938.448763][T20565] kmalloc_trace+0x2a/0xe0 [ 938.453250][T20565] mqueue_init_fs_context+0x57/0x360 [ 938.458573][T20565] alloc_fs_context+0x618/0x7a0 [ 938.463490][T20565] mq_init_ns+0x10a/0x510 [ 938.467868][T20565] copy_ipcs+0x309/0x500 [ 938.472207][T20565] create_new_namespaces+0x212/0x700 [ 938.477748][T20565] unshare_nsproxy_namespaces+0x11a/0x160 [ 938.483515][T20565] ksys_unshare+0x4fa/0x8f0 [ 938.488097][T20565] ? sighand_ctor+0x50/0x50 [ 938.492670][T20565] ? lock_chain_count+0x20/0x20 [ 938.497653][T20565] __x64_sys_unshare+0x38/0x40 [ 938.502456][T20565] do_syscall_64+0x55/0xb0 [ 938.506916][T20565] ? clear_bhb_loop+0x40/0x90 [ 938.511647][T20565] ? clear_bhb_loop+0x40/0x90 [ 938.516380][T20565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 938.522494][T20565] RIP: 0033:0x7fccb5ba8f19 [ 938.526943][T20565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.546580][T20565] RSP: 002b:00007fccb69a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 938.555030][T20565] RAX: ffffffffffffffda RBX: 00007fccb5e25fa0 RCX: 00007fccb5ba8f19 [ 938.563234][T20565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002e000480 [ 938.571247][T20565] RBP: 00007fccb5c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 938.579246][T20565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 938.587247][T20565] R13: 00007fccb5e26038 R14: 00007fccb5e25fa0 R15: 00007ffd15b24898 [ 938.595273][T20565] [ 939.309714][T20593] rxe_eth0 speed is unknown, defaulting to 1000 [ 939.951645][T20596] rxe_eth0 speed is unknown, defaulting to 1000 [ 940.358300][T20624] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3022'. [ 940.394185][T20624] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3022'. [ 940.692010][T20634] loop0: detected capacity change from 0 to 2048 [ 940.790518][T20634] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 940.849788][T20634] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 940.889642][T20634] UDF-fs: Scanning with blocksize 512 failed [ 941.000635][T20634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 941.311504][T20647] netlink: 'syz.9.3027': attribute type 5 has an invalid length. [ 942.004885][T20657] IPv6: addrconf: prefix option has invalid lifetime [ 942.178741][T20660] overlayfs: failed to get index nlink (file0/file2, err=-61) [ 943.727240][ T5780] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 943.954119][ T5780] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 943.974983][ T5780] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.030799][ T5780] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 944.062095][ T5780] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.105394][ T5780] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 944.115323][ T5780] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 944.137166][ T5780] usb 7-1: Product: syz [ 944.145546][ T5780] usb 7-1: Manufacturer: syz [ 944.167492][ T5780] cdc_wdm 7-1:1.0: skipping garbage [ 944.178244][ T5780] cdc_wdm 7-1:1.0: skipping garbage [ 944.201979][ T5780] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 944.213234][T20715] loop0: detected capacity change from 0 to 2048 [ 944.219937][ T5780] cdc_wdm 7-1:1.0: Unknown control protocol [ 944.303229][T20715] Alternate GPT is invalid, using primary GPT. [ 944.317748][T20715] loop0: p1 p2 p3 [ 944.327177][T20715] loop0: partition table partially beyond EOD, truncated [ 944.337519][ T1203] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 944.449320][ T5780] usb 7-1: USB disconnect, device number 14 [ 944.540150][ T1203] usb 4-1: unable to get BOS descriptor or descriptor too short [ 944.559748][ T1203] usb 4-1: not running at top speed; connect to a high speed hub [ 944.627946][ T1203] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 944.682162][ T1203] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 944.703078][ T1203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.740950][ T1203] usb 4-1: Product: syz [ 944.750268][ T1203] usb 4-1: Manufacturer: syz [ 944.767326][ T1203] usb 4-1: SerialNumber: syz [ 944.957296][ T7445] IPVS: starting estimator thread 0... [ 945.021699][ T1203] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 945.057296][ T5780] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 945.071115][T20720] IPVS: using max 17 ests per chain, 40800 per kthread [ 945.219243][ T1203] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 945.238265][ T1203] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 945.280680][ T5780] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 945.298419][ T5780] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 945.317740][ T5780] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 945.326892][ T5780] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.370010][ T5780] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 945.385710][ T5780] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 945.404524][ T5780] usb 7-1: Product: syz [ 945.414676][ T5780] usb 7-1: Manufacturer: syz [ 945.446970][ T5780] cdc_wdm 7-1:1.0: skipping garbage [ 945.478828][ T5780] cdc_wdm 7-1:1.0: skipping garbage [ 945.495432][ T5780] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 945.507141][ T5780] cdc_wdm 7-1:1.0: Unknown control protocol [ 945.623685][ T1203] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 945.634474][ T1203] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 945.835443][ T1203] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 945.920130][ T1203] usb 4-1: USB disconnect, device number 14 [ 946.043925][T20434] udevd[20434]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 946.609749][ T1203] usb 7-1: USB disconnect, device number 15 [ 946.922090][T20750] FAULT_INJECTION: forcing a failure. [ 946.922090][T20750] name failslab, interval 1, probability 0, space 0, times 0 [ 946.935607][T20750] CPU: 0 PID: 20750 Comm: syz.3.3052 Not tainted syzkaller #0 [ 946.943166][T20750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 946.953728][T20750] Call Trace: [ 946.957066][T20750] [ 946.960045][T20750] dump_stack_lvl+0x18c/0x250 [ 946.964789][T20750] ? show_regs_print_info+0x20/0x20 [ 946.970091][T20750] ? load_image+0x420/0x420 [ 946.974669][T20750] ? __might_sleep+0xe0/0xe0 [ 946.979318][T20750] ? __lock_acquire+0x7eb0/0x7eb0 [ 946.984420][T20750] should_fail_ex+0x394/0x4c0 [ 946.989260][T20750] should_failslab+0x9/0x20 [ 946.993824][T20750] slab_pre_alloc_hook+0x59/0x300 [ 946.998906][T20750] ? d_instantiate+0x6f/0x90 [ 947.003554][T20750] kmem_cache_alloc+0x5a/0x2d0 [ 947.008375][T20750] ? alloc_empty_file+0x9e/0x1d0 [ 947.013375][T20750] alloc_empty_file+0x9e/0x1d0 [ 947.018201][T20750] alloc_file+0x5b/0x600 [ 947.022539][T20750] alloc_file_pseudo+0x184/0x210 [ 947.027539][T20750] ? fput+0x1a0/0x1a0 [ 947.031605][T20750] anon_inode_getfile+0xc5/0x1a0 [ 947.036600][T20750] sync_file_ioctl+0x9b3/0xef0 [ 947.041595][T20750] ? sync_file_poll+0x240/0x240 [ 947.046557][T20750] ? __fget_files+0x28/0x460 [ 947.051215][T20750] ? bpf_lsm_file_ioctl+0x9/0x10 [ 947.056193][T20750] ? security_file_ioctl+0x80/0xa0 [ 947.061345][T20750] ? sync_file_poll+0x240/0x240 [ 947.066243][T20750] __se_sys_ioctl+0xfd/0x170 [ 947.070907][T20750] do_syscall_64+0x55/0xb0 [ 947.075384][T20750] ? clear_bhb_loop+0x40/0x90 [ 947.080110][T20750] ? clear_bhb_loop+0x40/0x90 [ 947.084831][T20750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 947.090782][T20750] RIP: 0033:0x7f56f07a8f19 [ 947.095230][T20750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.114982][T20750] RSP: 002b:00007f56f159c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 947.123451][T20750] RAX: ffffffffffffffda RBX: 00007f56f0a25fa0 RCX: 00007f56f07a8f19 [ 947.131472][T20750] RDX: 0000200000000600 RSI: 00000000c0303e03 RDI: 0000000000000005 [ 947.139539][T20750] RBP: 00007f56f0837f6d R08: 0000000000000000 R09: 0000000000000000 [ 947.147592][T20750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.155596][T20750] R13: 00007f56f0a26038 R14: 00007f56f0a25fa0 R15: 00007ffcef856088 [ 947.163626][T20750] [ 947.513776][T20759] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3054'. [ 947.829473][T20771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3057'. [ 947.887772][T20771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 948.011159][ T6936] IPVS: starting estimator thread 0... [ 948.107283][T20775] IPVS: using max 16 ests per chain, 38400 per kthread [ 948.180467][T15803] Bluetooth: hci3: Frame reassembly failed (-84) [ 948.604815][T20795] loop9: detected capacity change from 0 to 512 [ 948.636847][T20795] EXT4-fs: Ignoring removed bh option [ 948.684768][T20795] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 948.703344][T20795] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 948.870662][T19856] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.881753][T20803] loop0: detected capacity change from 0 to 2048 [ 948.960592][T20803] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 948.985762][T20803] loop0: partition table partially beyond EOD, truncated [ 949.001804][T20803] loop0: p1 start 3405774849 is beyond EOD, truncated [ 949.029477][T20803] loop0: p2 start 53543428 is beyond EOD, truncated [ 949.042714][T20803] loop0: p3 start 4284289 is beyond EOD, truncated [ 949.052518][T20803] loop0: p5 start 3405774849 is beyond EOD, truncated [ 949.070069][T20803] loop0: p6 start 53543428 is beyond EOD, truncated [ 949.130779][ T5151] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 949.142339][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3064'. [ 949.152489][ T5151] loop0: partition table partially beyond EOD, truncated [ 949.161006][ T5151] loop0: p1 start 3405774849 is beyond EOD, truncated [ 949.197222][ T5151] loop0: p2 start 53543428 is beyond EOD, truncated [ 949.217827][ T5151] loop0: p3 start 4284289 is beyond EOD, truncated [ 949.242975][ T5151] loop0: p5 start 3405774849 is beyond EOD, truncated [ 949.265189][ T5151] loop0: p6 start 53543428 is beyond EOD, truncated [ 949.413464][T20434] udevd[20434]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 949.454096][T20434] udevd[20434]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 949.657934][T20828] veth0: entered promiscuous mode [ 949.674885][T20828] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3070'. [ 949.949801][T20835] loop0: detected capacity change from 0 to 512 [ 950.247549][T19654] Bluetooth: hci3: command 0x1003 tx timeout [ 950.258200][ T5802] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 950.932367][T20870] loop0: detected capacity change from 0 to 512 [ 950.968153][T20870] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #15: comm syz.0.3082: corrupted inode contents [ 951.025631][T20870] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 951.057896][T20870] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #15: comm syz.0.3082: corrupted inode contents [ 951.089753][T20870] EXT4-fs error (device loop0): ext4_evict_inode:302: inode #15: comm syz.0.3082: mark_inode_dirty error [ 951.114755][ T28] audit: type=1326 audit(1700000589.210:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=20873 comm="syz.6.3083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 951.168256][T20870] EXT4-fs (loop0): 1 orphan inode deleted [ 951.188025][T20870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 951.257480][ T28] audit: type=1326 audit(1700000589.210:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=20873 comm="syz.6.3083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 951.334142][ T28] audit: type=1326 audit(1700000589.210:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=20873 comm="syz.6.3083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 951.399688][ T28] audit: type=1326 audit(1700000589.210:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=20873 comm="syz.6.3083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 951.489045][ T28] audit: type=1326 audit(1700000589.210:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=20873 comm="syz.6.3083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 951.556925][ T28] audit: type=1326 audit(1700000589.240:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=20873 comm="syz.6.3083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 951.621654][ T28] audit: type=1326 audit(1700000589.240:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=20873 comm="syz.6.3083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 951.658084][T19661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.663769][ T28] audit: type=1326 audit(1700000589.240:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=20873 comm="syz.6.3083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 951.698455][ T28] audit: type=1326 audit(1700000589.240:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=20873 comm="syz.6.3083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 951.804923][ T28] audit: type=1326 audit(1700000589.240:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=20873 comm="syz.6.3083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 952.023993][T20892] loop6: detected capacity change from 0 to 512 [ 952.072190][T20892] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 952.098776][T20892] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.3088: bad orphan inode 131083 [ 952.118864][T20892] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 952.295001][T19820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.339789][T20900] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 952.383475][T20900] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 952.634256][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.849754][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.970262][T20911] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 953.117372][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.325679][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.336033][T20918] loop3: detected capacity change from 0 to 2048 [ 953.381222][T20918] loop3: p1 p2 < > p3 p4 < p5 > [ 953.404157][T20918] loop3: partition table partially beyond EOD, truncated [ 953.427881][T20918] loop3: p2 start 4294902784 is beyond EOD, truncated [ 953.459114][T20918] loop3: p3 start 3724543488 is beyond EOD, truncated [ 954.240828][T18463] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 954.259374][T18463] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 954.269463][T18463] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 954.283078][T18463] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 954.291447][T18463] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 954.335232][T18463] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 954.342505][ T52] Bluetooth: hci8: command 0x0406 tx timeout [ 954.357872][ T7445] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 954.514681][T20942] rxe_eth0 speed is unknown, defaulting to 1000 [ 954.607510][ T7445] usb 7-1: Using ep0 maxpacket: 16 [ 954.621674][ T7445] usb 7-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 954.641335][ T7445] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.669965][ T7445] usb 7-1: Product: syz [ 954.677170][ T7445] usb 7-1: Manufacturer: syz [ 954.681859][ T7445] usb 7-1: SerialNumber: syz [ 954.729273][ T7445] usb 7-1: config 0 descriptor?? [ 954.759452][ T7445] usb 7-1: selecting invalid altsetting 1 [ 954.772137][ T7445] technisat-usb2: could not set alternate setting to 0 [ 954.988541][ T7445] technisat-usb2: firmware version: 0.0 [ 954.994951][ T7445] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 955.438840][ T7445] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 955.468270][ T7445] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 955.487889][ T7445] usb 7-1: media controller created [ 955.494812][ T7445] technisat-usb2: i2c-error: out failed 53 = -22 [ 955.522536][ T7445] dvb-usb: MAC address reading failed. [ 955.528259][ T5793] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 955.571278][ T7445] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 955.621653][T20938] technisat-usb2: i2c-error: out failed 02 = -22 [ 955.740808][ T5793] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.771332][ T5793] usb 4-1: config 0 interface 0 has no altsetting 0 [ 955.779294][ T7445] DVB: Unable to find symbol stv090x_attach() [ 955.795671][ T5793] usb 4-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 955.805342][ T7445] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 955.820592][ T5793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.858080][ T5793] usb 4-1: config 0 descriptor?? [ 955.934835][T20942] chnl_net:caif_netlink_parms(): no params data found [ 956.030139][ T7445] rc_core: IR keymap rc-technisat-usb2 not found [ 956.036619][ T7445] Registered IR keymap rc-empty [ 956.061608][ T7445] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 956.104418][ T7445] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input38 [ 956.148055][ T7445] dvb-usb: schedule remote query interval to 100 msecs. [ 956.196405][ T7445] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 956.265778][ T7445] usb 7-1: USB disconnect, device number 16 [ 956.308695][ T5780] dvb-usb: error -19 while querying for an remote control event. [ 956.341413][T20967] loop9: detected capacity change from 0 to 40427 [ 956.361595][T20967] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 956.375403][T20967] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 956.407701][ T5802] Bluetooth: hci0: command tx timeout [ 956.408059][ T5793] input: HID 046d:c211 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:C211.0019/input/input39 [ 956.453107][T20967] F2FS-fs (loop9): Image doesn't support compression [ 956.466963][T20967] F2FS-fs (loop9): Image doesn't support compression [ 956.489363][T20967] F2FS-fs (loop9): invalid crc value [ 956.674776][T20967] F2FS-fs (loop9): Start checkpoint disabled! [ 956.761743][ T5793] logitech 0003:046D:C211.0019: input,hiddev0,hidraw0: USB HID v0.80 Device [HID 046d:c211] on usb-dummy_hcd.3-1/input0 [ 956.822538][ T5793] logitech 0003:046D:C211.0019: missing HID_OUTPUT_REPORT 0 [ 956.846766][T20967] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 956.882706][T20967] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 957.028695][T20942] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.067580][T20942] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.074954][T20942] bridge_slave_0: entered allmulticast mode [ 957.105065][ T7445] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 957.131420][T20942] bridge_slave_0: entered promiscuous mode [ 957.149260][T20967] syz.9.3108: attempt to access beyond end of device [ 957.149260][T20967] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 957.196463][T20942] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.230309][ T5793] usb 4-1: USB disconnect, device number 15 [ 957.245249][T20942] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.295048][T20942] bridge_slave_1: entered allmulticast mode [ 957.339220][T20942] bridge_slave_1: entered promiscuous mode [ 957.358336][T20997] netlink: 'syz.6.3111': attribute type 3 has an invalid length. [ 957.452306][ T12] hsr_slave_0: left promiscuous mode [ 957.483509][T20967] syz.9.3108: attempt to access beyond end of device [ 957.483509][T20967] loop9: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 957.488379][ T12] hsr_slave_1: left promiscuous mode [ 957.526755][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.566541][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.594698][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 957.626489][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.641733][ T8328] kworker/u4:16: attempt to access beyond end of device [ 957.641733][ T8328] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 957.669133][ T12] bridge_slave_1: left allmulticast mode [ 957.674891][ T12] bridge_slave_1: left promiscuous mode [ 957.700049][ T8328] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 957.707373][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.817869][ T12] veth1_macvtap: left promiscuous mode [ 957.823537][ T12] veth0_macvtap: left promiscuous mode [ 957.840765][ T12] veth1_vlan: left promiscuous mode [ 957.846278][ T12] veth0_vlan: left promiscuous mode [ 958.493661][ T5802] Bluetooth: hci0: command tx timeout [ 958.566141][ T12] bond1 (unregistering): (slave macvlan0): Removing an active aggregator [ 958.575644][ T12] bond1 (unregistering): (slave macvlan0): Releasing backup interface [ 958.587316][ T12] bond1 (unregistering): Released all slaves [ 958.936610][T21016] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 959.986550][ T12] team0 (unregistering): Port device team_slave_1 removed [ 960.083997][ T12] team0 (unregistering): Port device team_slave_0 removed [ 960.183830][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.279608][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 960.567476][ T5802] Bluetooth: hci0: command tx timeout [ 960.960622][ T12] bond0 (unregistering): Released all slaves [ 961.187488][T20942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.221516][T20942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.338426][T20942] team0: Port device team_slave_0 added [ 961.415195][T20942] team0: Port device team_slave_1 added [ 961.516636][T20942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.524078][T20942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.570847][T21036] loop3: detected capacity change from 0 to 2048 [ 961.583969][T20942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.643368][T20942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.675625][T20942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.797494][T20942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.816293][T21036] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 961.895018][ T12] IPVS: stop unused estimator thread 0... [ 962.035094][T20942] hsr_slave_0: entered promiscuous mode [ 962.092926][T20942] hsr_slave_1: entered promiscuous mode [ 962.432770][T15801] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 962.462831][T15801] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.647526][ T5802] Bluetooth: hci0: command tx timeout [ 962.748423][T15801] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 962.797896][T15801] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.076284][T15801] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 963.098920][T15801] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.305494][T15801] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 963.356648][T15801] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.908730][T15801] tipc: Left network mode [ 965.272055][T21108] loop9: detected capacity change from 0 to 32768 [ 965.329824][T21108] (syz.9.3135,21108,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 965.382508][T21108] (syz.9.3135,21108,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 965.536079][T21108] JBD2: Ignoring recovery information on journal [ 965.661573][T21108] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 965.869719][T21118] loop6: detected capacity change from 0 to 32768 [ 965.974559][T21118] JBD2: Ignoring recovery information on journal [ 966.071495][T21118] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 966.593524][T15801] bond2: (slave erspan1): Releasing backup interface [ 966.622141][T15801] erspan1 (unregistering): left promiscuous mode [ 966.629868][T19820] ocfs2: Unmounting device (7,6) on (node local) [ 966.778197][T19856] ocfs2: Unmounting device (7,9) on (node local) [ 967.004755][T21151] loop3: detected capacity change from 0 to 512 [ 967.056328][T21151] EXT4-fs: Ignoring removed mblk_io_submit option [ 967.087387][T21151] ext4: Bad value for 'max_batch_time' [ 967.558812][T21166] loop9: detected capacity change from 0 to 256 [ 967.619734][T21166] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x1f3a413c, utbl_chksum : 0xe619d30d) [ 968.140520][T20942] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 968.236050][T20942] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 968.266889][T20942] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 968.291298][T20942] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 968.706428][T20942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.776381][T15801] hsr_slave_0: left promiscuous mode [ 968.793976][T15801] hsr_slave_1: left promiscuous mode [ 968.815160][T15801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 968.837680][T15801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.851348][T15801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.866065][T15801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.889386][T15801] bridge_slave_1: left allmulticast mode [ 968.909231][T15801] bridge_slave_1: left promiscuous mode [ 968.925553][T15801] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.947015][T15801] bridge_slave_0: left allmulticast mode [ 968.961998][T15801] bridge_slave_0: left promiscuous mode [ 968.977823][T15801] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.173537][T15801] veth1_macvtap: left promiscuous mode [ 969.187033][T15801] veth0_macvtap: left promiscuous mode [ 969.201778][T15801] veth1_vlan: left promiscuous mode [ 969.214745][T15801] veth0_vlan: left promiscuous mode [ 970.048432][T21214] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 970.195665][T15801] bond2 (unregistering): Released all slaves [ 970.555869][T15801] bond1 (unregistering): (slave team0): Removing an active aggregator [ 970.565505][T15801] bond1 (unregistering): (slave team0): Releasing backup interface [ 970.575723][T15801] bond1 (unregistering): Released all slaves [ 971.829907][T15801] team0 (unregistering): Port device team_slave_1 removed [ 971.941244][T15801] team0 (unregistering): Port device team_slave_0 removed [ 972.029821][T15801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.130578][T15801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.886315][T15801] bond0 (unregistering): Released all slaves [ 973.046023][T20942] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.265089][T15803] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.272379][T15803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.339224][T15803] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.346492][T15803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.465432][T21236] loop9: detected capacity change from 0 to 2048 [ 973.591216][T21236] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 974.436527][T20942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.271229][T20942] veth0_vlan: entered promiscuous mode [ 975.319109][T20942] veth1_vlan: entered promiscuous mode [ 975.426136][T20942] veth0_macvtap: entered promiscuous mode [ 975.463523][T20942] veth1_macvtap: entered promiscuous mode [ 975.527006][T20942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.562695][T20942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.588589][T20942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.617357][T20942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.647323][T20942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.677180][T20942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.709999][T20942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.772362][T20942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.807556][T20942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.834361][T20942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.857241][T20942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.877530][T20942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.907158][T20942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.939067][T20942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.973126][T20942] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.997361][T20942] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.016903][T20942] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.048245][T20942] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.360276][T17397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.391417][T17397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.546467][ T8328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.587425][ T8328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.065717][T21326] loop6: detected capacity change from 0 to 512 [ 977.100335][T21326] EXT4-fs: Ignoring removed orlov option [ 977.106250][T21326] ext4: Bad value for 'mb_optimize_scan' [ 977.928190][T21343] loop6: detected capacity change from 0 to 16 [ 977.967709][T21343] erofs: (device loop6): mounted with root inode @ nid 36. [ 978.002459][T21328] loop7: detected capacity change from 0 to 32768 [ 978.133891][T21328] JBD2: Ignoring recovery information on journal [ 978.271754][T21328] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 978.887723][ T5802] Bluetooth: hci0: command tx timeout [ 979.555643][T20942] ocfs2: Unmounting device (7,7) on (node local) [ 979.894088][T21386] loop9: detected capacity change from 0 to 2048 [ 979.963050][T21386] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 980.294888][T21395] resource: resource sanity check: requesting [mem 0x00000000fe800000-0x00000000fe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f] [ 980.377297][T21395] caller generic_access_phys+0x33f/0x650 mapping multiple BARs [ 980.663956][T21405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3196'. [ 980.709325][T21405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3196'. [ 980.937288][T11738] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 981.167267][T11738] usb 8-1: Using ep0 maxpacket: 8 [ 981.184915][T11738] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 981.197135][T11738] usb 8-1: config 179 has no interface number 0 [ 981.203527][T11738] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 981.219112][ T5802] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 981.234835][ T5802] Bluetooth: hci1: Injecting HCI hardware error event [ 981.247771][ T5871] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 981.248149][T19654] Bluetooth: hci1: hardware error 0x00 [ 981.273976][T11738] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 981.317376][T11738] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 981.357152][T11738] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 981.397190][T11738] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 981.437276][ T5871] usb 10-1: Using ep0 maxpacket: 16 [ 981.452623][T11738] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 981.464669][ T5871] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.487246][T11738] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.506540][ T5871] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 981.539363][ T5871] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 981.539483][T21407] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 981.577636][ T5871] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 981.614586][ T5871] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 981.670264][ T5871] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 981.691250][ T5871] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 981.717341][ T5871] usb 10-1: Manufacturer: syz [ 981.745620][ T5871] usb 10-1: config 0 descriptor?? [ 981.778475][T21429] ip_tables: iptables: counters copy to user failed while replacing table [ 982.147310][ T5871] rc_core: IR keymap rc-hauppauge not found [ 982.153443][ T5871] Registered IR keymap rc-empty [ 982.184119][ T5871] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 982.241891][ T5871] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 982.299836][ T5871] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 982.315076][ T5793] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input41 [ 982.387736][ T5871] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input40 [ 982.591672][ T5871] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 982.680498][ T5871] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 982.729567][ T5871] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 982.778300][ T5793] usb 8-1: USB disconnect, device number 12 [ 982.778367][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 982.792728][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 982.802718][ T5871] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 982.832876][ T5793] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 982.897658][ T5871] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 982.935401][ T5871] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 982.987339][ T5871] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 983.030617][ T5871] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 983.087804][ T5871] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 983.147369][ T5871] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 983.200941][ T5871] mceusb 10-1:0.0: Registered 42 with mce emulator interface version 1 [ 983.222257][ T5871] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 983.265984][ T5871] usb 10-1: USB disconnect, device number 5 [ 983.447289][T19654] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 983.849169][T21459] bond0: no command found in slaves file - use +ifname or -ifname [ 984.594814][T21482] loop7: detected capacity change from 0 to 512 [ 984.702195][T21482] EXT4-fs error (device loop7): ext4_orphan_get:1408: inode #15: comm syz.7.3210: inode has both inline data and extents flags [ 984.805372][T21482] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.3210: couldn't read orphan inode 15 (err -117) [ 984.873256][T21482] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.157521][T21487] loop7: detected capacity change from 512 to 64 [ 985.211301][T21482] syz.7.3210: attempt to access beyond end of device [ 985.211301][T21482] loop7: rw=14337, sector=84, nr_sectors = 2 limit=64 [ 985.288226][T21482] Buffer I/O error on dev loop7, logical block 42, lost sync page write [ 985.318682][T21482] EXT4-fs error (device loop7): ext4_splice_branch:472: inode #18: block 42: comm syz.7.3210: IO error syncing itable block [ 985.401118][T21482] EXT4-fs error (device loop7): ext4_check_bdev_write_error:225: comm syz.7.3210: Error while async write back metadata [ 985.515740][T21482] syz.7.3210: attempt to access beyond end of device [ 985.515740][T21482] loop7: rw=2051, sector=162, nr_sectors = 2 limit=64 [ 985.577038][T21482] EXT4-fs (loop7): discard request in group:0 block:80 count:1 failed with -5 [ 985.627665][T21482] EXT4-fs error (device loop7): mb_free_blocks:1970: group 0, inode 18: block 81:freeing already freed block (bit 80); block bitmap corrupt. [ 985.648865][T21482] EXT4-fs (loop7): pa ffff88805b9ae488: logic 32, phys. 65, len 32 [ 985.656908][T21482] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5398: group 0, free 16, pa_free 15 [ 985.757576][T21482] syz.7.3210: attempt to access beyond end of device [ 985.757576][T21482] loop7: rw=14337, sector=84, nr_sectors = 2 limit=64 [ 985.797192][T21482] Buffer I/O error on dev loop7, logical block 42, lost sync page write [ 985.829441][T21482] EXT4-fs error (device loop7): ext4_free_data:985: inode #18: block 42: comm syz.7.3210: IO error syncing itable block [ 985.908973][T21482] EXT4-fs error (device loop7): ext4_check_bdev_write_error:225: comm syz.7.3210: Error while async write back metadata [ 985.996255][T21482] syz.7.3210: attempt to access beyond end of device [ 985.996255][T21482] loop7: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 986.049761][T21482] EXT4-fs warning (device loop7): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 255) [ 986.092633][T21482] Buffer I/O error on device loop7, logical block 255 [ 986.137709][T21482] syz.7.3210: attempt to access beyond end of device [ 986.137709][T21482] loop7: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 986.173819][T21482] EXT4-fs warning (device loop7): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 253) [ 986.209124][T21482] Buffer I/O error on device loop7, logical block 253 [ 986.215981][T21482] Buffer I/O error on device loop7, logical block 254 [ 986.255898][T21482] syz.7.3210: attempt to access beyond end of device [ 986.255898][T21482] loop7: rw=2049, sector=74, nr_sectors = 8 limit=64 [ 986.298168][T21482] EXT4-fs warning (device loop7): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 37) [ 986.322981][T21482] Buffer I/O error on device loop7, logical block 37 [ 986.343269][T21482] Buffer I/O error on device loop7, logical block 38 [ 986.350052][T21482] Buffer I/O error on device loop7, logical block 39 [ 986.356784][T21482] Buffer I/O error on device loop7, logical block 40 [ 986.398470][T21482] syz.7.3210: attempt to access beyond end of device [ 986.398470][T21482] loop7: rw=2049, sector=498, nr_sectors = 8 limit=64 [ 986.427349][T21482] EXT4-fs warning (device loop7): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 249) [ 986.452284][T21482] Buffer I/O error on device loop7, logical block 249 [ 986.467403][T21482] Buffer I/O error on device loop7, logical block 250 [ 986.474297][T21482] Buffer I/O error on device loop7, logical block 251 [ 986.501830][T21482] syz.7.3210: attempt to access beyond end of device [ 986.501830][T21482] loop7: rw=2049, sector=82, nr_sectors = 2 limit=64 [ 986.535150][T21482] EXT4-fs warning (device loop7): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 41) [ 986.563128][T21482] syz.7.3210: attempt to access beyond end of device [ 986.563128][T21482] loop7: rw=2049, sector=86, nr_sectors = 8 limit=64 [ 986.606112][T21482] EXT4-fs warning (device loop7): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 43) [ 986.635208][T21482] syz.7.3210: attempt to access beyond end of device [ 986.635208][T21482] loop7: rw=2049, sector=418, nr_sectors = 32 limit=64 [ 986.672892][T21482] EXT4-fs warning (device loop7): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 209) [ 986.696218][T21482] EXT4-fs warning (device loop7): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 65) [ 986.799813][T20942] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 986.961853][T20942] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.595393][ C0] vkms_vblank_simulate: vblank timer overrun [ 987.681510][T15803] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.009834][T15803] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.200401][T15803] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.251379][T21544] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3225'. [ 988.486393][T15803] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.065289][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 989.138955][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 989.150739][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 989.171595][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 989.186278][T21571] loop3: detected capacity change from 0 to 512 [ 989.214630][ T5802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 989.239233][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 989.354020][T21571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 989.377348][T21571] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 989.633675][T21567] rxe_eth0 speed is unknown, defaulting to 1000 [ 989.645724][T19643] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.377482][T11738] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 990.567204][T11738] usb 10-1: Using ep0 maxpacket: 32 [ 990.595928][T11738] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 990.605893][T11738] usb 10-1: config 0 has no interface number 0 [ 990.628735][T11738] usb 10-1: config 0 interface 184 has no altsetting 0 [ 990.651683][T11738] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 990.661344][T11738] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.671494][T11738] usb 10-1: Product: syz [ 990.675836][T11738] usb 10-1: Manufacturer: syz [ 990.690907][T11738] usb 10-1: SerialNumber: syz [ 990.713536][T11738] usb 10-1: config 0 descriptor?? [ 990.735375][T11738] smsc75xx v1.0.0 [ 990.791395][T21603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3236'. [ 990.802453][T21608] loop6: detected capacity change from 0 to 256 [ 990.811346][T21604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 990.818687][T21604] IPv6: NLM_F_CREATE should be set when creating new route [ 990.967370][T21604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3236'. [ 991.377603][T19654] Bluetooth: hci0: command tx timeout [ 991.569199][T21567] chnl_net:caif_netlink_parms(): no params data found [ 991.660143][T21624] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 991.769870][T11738] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 991.970742][T11738] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 992.002302][T11738] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 992.033103][T11738] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 992.053886][T11738] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 992.067721][T21640] loop6: detected capacity change from 0 to 164 [ 992.074800][T11738] smsc75xx: probe of 10-1:0.184 failed with error -71 [ 992.123153][T11738] usb 10-1: USB disconnect, device number 6 [ 992.228871][T21640] rock: directory entry would overflow storage [ 992.235106][T21640] rock: sig=0x4d4e, size=5, remaining=4 [ 992.243813][T21567] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.277277][T21567] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.297516][T21567] bridge_slave_0: entered allmulticast mode [ 992.339083][T21567] bridge_slave_0: entered promiscuous mode [ 992.367619][T21644] isofs: isofs_export_get_parent(): child directory not normalized! [ 992.406486][T21567] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.444187][T21640] isofs: isofs_export_get_parent(): child directory not normalized! [ 992.457288][T21567] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.478944][T21567] bridge_slave_1: entered allmulticast mode [ 992.540736][T21567] bridge_slave_1: entered promiscuous mode [ 992.650990][T15803] hsr_slave_0: left promiscuous mode [ 992.779512][T15803] hsr_slave_1: left promiscuous mode [ 992.877407][T15803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.897242][T15803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.928696][T15803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.949314][T15803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.988374][T15803] bridge_slave_1: left allmulticast mode [ 992.997282][T15803] bridge_slave_1: left promiscuous mode [ 993.003138][T15803] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.065999][T15803] bridge_slave_0: left allmulticast mode [ 993.095535][T15803] bridge_slave_0: left promiscuous mode [ 993.117756][T15803] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.217470][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.227202][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.243183][ T1299] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 993.454660][T15803] veth1_macvtap: left promiscuous mode [ 993.458143][T19654] Bluetooth: hci0: command tx timeout [ 993.471307][T15803] veth0_macvtap: left promiscuous mode [ 993.491263][T15803] veth1_vlan: left promiscuous mode [ 993.497410][T15803] veth0_vlan: left promiscuous mode [ 995.329882][T15803] team0 (unregistering): Port device team_slave_1 removed [ 995.446562][T15803] team0 (unregistering): Port device team_slave_0 removed [ 995.534842][T19654] Bluetooth: hci0: command tx timeout [ 995.561778][T15803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.663132][T15803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.511309][T15803] bond0 (unregistering): Released all slaves [ 996.776062][T21567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.850851][T21567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.041397][T21704] loop6: detected capacity change from 0 to 164 [ 997.082265][T21567] team0: Port device team_slave_0 added [ 997.149036][T21567] team0: Port device team_slave_1 added [ 997.157904][T21704] isofs: Unable to find the ".." directory for NFS. [ 997.268137][T21567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.277349][T21567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.372821][T21567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.414087][T21567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.432247][T21567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.516138][T21715] FAULT_INJECTION: forcing a failure. [ 997.516138][T21715] name failslab, interval 1, probability 0, space 0, times 0 [ 997.540987][T21567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.578245][T21715] CPU: 1 PID: 21715 Comm: syz.9.3262 Not tainted syzkaller #0 [ 997.585806][T21715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 997.595954][T21715] Call Trace: [ 997.599288][T21715] [ 997.602274][T21715] dump_stack_lvl+0x18c/0x250 [ 997.607025][T21715] ? show_regs_print_info+0x20/0x20 [ 997.612300][T21715] ? load_image+0x420/0x420 [ 997.616870][T21715] ? __might_sleep+0xe0/0xe0 [ 997.621528][T21715] ? __lock_acquire+0x7eb0/0x7eb0 [ 997.626628][T21715] ? inode_maybe_inc_iversion+0x142/0x1a0 [ 997.632440][T21715] should_fail_ex+0x394/0x4c0 [ 997.637318][T21715] should_failslab+0x9/0x20 [ 997.638655][T19654] Bluetooth: hci0: command tx timeout [ 997.642112][T21715] slab_pre_alloc_hook+0x59/0x300 [ 997.652597][T21715] ? ovl_encode_real_fh+0xd6/0x360 [ 997.657834][T21715] __kmem_cache_alloc_node+0x53/0x260 [ 997.663268][T21715] ? ovl_encode_real_fh+0xd6/0x360 [ 997.668446][T21715] kmalloc_trace+0x2a/0xe0 [ 997.672935][T21715] ovl_encode_real_fh+0xd6/0x360 [ 997.677948][T21715] ? ovl_set_attr+0x4b0/0x4b0 [ 997.682693][T21715] ? rcu_read_lock_any_held+0xb4/0x140 [ 997.688214][T21715] ? rcu_read_lock_bh_held+0x100/0x100 [ 997.693746][T21715] ovl_verify_set_fh+0x73/0x430 [ 997.698762][T21715] ovl_get_indexdir+0x1a4/0x650 [ 997.703690][T21715] ? ovl_get_lowerstack+0x2040/0x2040 [ 997.709129][T21715] ? ovl_init_uuid_xattr+0x487/0x790 [ 997.714532][T21715] ovl_fill_super+0xa93/0x1280 [ 997.719373][T21715] ? virtio_fs_zero_page_range+0x140/0x140 [ 997.725267][T21715] get_tree_nodev+0xb5/0x140 [ 997.729945][T21715] vfs_get_tree+0x8c/0x280 [ 997.734432][T21715] do_new_mount+0x24a/0xa60 [ 997.739012][T21715] __se_sys_mount+0x2e7/0x3d0 [ 997.743753][T21715] ? __x64_sys_mount+0xc0/0xc0 [ 997.748589][T21715] ? lockdep_hardirqs_on+0x98/0x150 [ 997.753839][T21715] ? __x64_sys_mount+0x20/0xc0 [ 997.758680][T21715] do_syscall_64+0x55/0xb0 [ 997.763166][T21715] ? clear_bhb_loop+0x40/0x90 [ 997.767954][T21715] ? clear_bhb_loop+0x40/0x90 [ 997.772711][T21715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 997.778696][T21715] RIP: 0033:0x7f1ee4da8f19 [ 997.783180][T21715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.802941][T21715] RSP: 002b:00007f1ee5ba2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 997.811445][T21715] RAX: ffffffffffffffda RBX: 00007f1ee5025fa0 RCX: 00007f1ee4da8f19 [ 997.819483][T21715] RDX: 0000200000000000 RSI: 0000200000000700 RDI: 0000000000000000 [ 997.827514][T21715] RBP: 00007f1ee4e37f6d R08: 0000200000000780 R09: 0000000000000000 [ 997.835599][T21715] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 997.843637][T21715] R13: 00007f1ee5026038 R14: 00007f1ee5025fa0 R15: 00007ffcdfe74ce8 [ 997.851693][T21715] [ 997.954622][T21715] overlayfs: failed to verify origin (newroot/105, ino=568, err=-12) [ 997.995484][T21715] overlayfs: failed to verify upper root origin [ 998.046011][T21567] hsr_slave_0: entered promiscuous mode [ 998.217546][T21567] hsr_slave_1: entered promiscuous mode [ 999.433262][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 999.433280][ T28] audit: type=1326 audit(1700000637.530:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=21777 comm="syz.6.3278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 999.475754][ T28] audit: type=1326 audit(1700000637.530:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=21777 comm="syz.6.3278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 999.532818][ T28] audit: type=1326 audit(1700000637.530:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=21777 comm="syz.6.3278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 999.595087][ T28] audit: type=1326 audit(1700000637.530:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=21777 comm="syz.6.3278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 999.666094][ T28] audit: type=1326 audit(1700000637.530:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=21777 comm="syz.6.3278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 999.689826][T21567] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 999.716778][T21567] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 999.740102][ T28] audit: type=1326 audit(1700000637.540:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=21777 comm="syz.6.3278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 999.750361][T21567] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 999.778969][ T28] audit: type=1326 audit(1700000637.540:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=21777 comm="syz.6.3278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 999.816201][ T28] audit: type=1326 audit(1700000637.540:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=21777 comm="syz.6.3278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 999.851346][ T28] audit: type=1326 audit(1700000637.540:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=21777 comm="syz.6.3278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 999.857666][T21567] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 999.914773][ T28] audit: type=1326 audit(1700000637.570:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=21777 comm="syz.6.3278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fb95c9a8f19 code=0x7ffc0000 [ 1000.162969][T21567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.245872][T21567] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.312652][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.319971][ T8328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.343278][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.350602][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.015432][T21567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.189564][T21567] veth0_vlan: entered promiscuous mode [ 1001.223845][T21567] veth1_vlan: entered promiscuous mode [ 1001.344550][T21567] veth0_macvtap: entered promiscuous mode [ 1001.385720][T21567] veth1_macvtap: entered promiscuous mode [ 1001.429976][T21567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.457591][T21567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.479330][T21567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.503377][T21567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.525115][T21567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.547125][T21567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.571794][T21567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.608715][T21567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.641361][T21567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.663163][T21567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.685426][T21567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.708760][T21567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.731113][T21567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.759326][T21567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.792408][T21567] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.811979][T21567] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.831268][T21567] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.850497][T21567] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.105563][T15801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.128017][T15801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.256674][ T8324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.302086][ T8324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.393416][T21886] loop3: detected capacity change from 0 to 764 [ 1003.574628][T21890] loop9: detected capacity change from 0 to 512 [ 1003.584613][T21890] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1003.652438][T21890] EXT4-fs (loop9): 1 truncate cleaned up [ 1003.685732][T21890] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.920907][T19856] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.507543][T11739] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1004.596609][T21915] loop9: detected capacity change from 0 to 2048 [ 1004.679139][T21915] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1004.698346][T11739] usb 7-1: Using ep0 maxpacket: 8 [ 1004.719141][T11739] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.757254][T11739] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1004.789195][T11739] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.824166][T11739] usb 7-1: config 0 descriptor?? [ 1004.831194][T21915] EXT4-fs error (device loop9): ext4_iget_extra_inode:4752: inode #12: comm syz.9.3306: corrupted in-inode xattr: e_value size too large [ 1004.851163][T11739] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1005.069887][T19856] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1005.359940][T21933] loop9: detected capacity change from 0 to 16 [ 1005.378693][T21935] FAULT_INJECTION: forcing a failure. [ 1005.378693][T21935] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.417705][T21933] erofs: (device loop9): mounted with root inode @ nid 36. [ 1005.422530][T21935] CPU: 0 PID: 21935 Comm: syz.1.3311 Not tainted syzkaller #0 [ 1005.432496][T21935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1005.442607][T21935] Call Trace: [ 1005.445932][T21935] [ 1005.449029][T21935] dump_stack_lvl+0x18c/0x250 [ 1005.454060][T21935] ? show_regs_print_info+0x20/0x20 [ 1005.459319][T21935] ? load_image+0x420/0x420 [ 1005.463878][T21935] ? __might_sleep+0xe0/0xe0 [ 1005.468537][T21935] ? __lock_acquire+0x7eb0/0x7eb0 [ 1005.473652][T21935] should_fail_ex+0x394/0x4c0 [ 1005.478394][T21935] should_failslab+0x9/0x20 [ 1005.482957][T21935] slab_pre_alloc_hook+0x59/0x300 [ 1005.488047][T21935] ? sk_prot_alloc+0xe7/0x210 [ 1005.492799][T21935] ? sk_prot_alloc+0xe7/0x210 [ 1005.497539][T21935] __kmem_cache_alloc_node+0x53/0x260 [ 1005.502961][T21935] ? sk_prot_alloc+0xe7/0x210 [ 1005.507680][T21935] __kmalloc+0xa7/0x240 [ 1005.511889][T21935] sk_prot_alloc+0xe7/0x210 [ 1005.516462][T21935] ? sk_alloc+0x24/0x350 [ 1005.520757][T21935] sk_alloc+0x3a/0x350 [ 1005.524864][T21935] __netlink_create+0x6c/0x290 [ 1005.529677][T21935] netlink_create+0x3ee/0x5c0 [ 1005.534386][T21935] ? rtnetlink_rcv+0x20/0x20 [ 1005.539421][T21935] __sock_create+0x49e/0x940 [ 1005.544065][T21935] __sys_socket+0xd7/0x1b0 [ 1005.548524][T21935] __x64_sys_socket+0x7a/0x90 [ 1005.553246][T21935] do_syscall_64+0x55/0xb0 [ 1005.557798][T21935] ? clear_bhb_loop+0x40/0x90 [ 1005.562586][T21935] ? clear_bhb_loop+0x40/0x90 [ 1005.567341][T21935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1005.573295][T21935] RIP: 0033:0x7fd726da8f19 [ 1005.577750][T21935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.597491][T21935] RSP: 002b:00007fd727d35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1005.605949][T21935] RAX: ffffffffffffffda RBX: 00007fd727025fa0 RCX: 00007fd726da8f19 [ 1005.613984][T21935] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1005.622016][T21935] RBP: 00007fd726e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 1005.630021][T21935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.638020][T21935] R13: 00007fd727026038 R14: 00007fd727025fa0 R15: 00007ffce3f99d18 [ 1005.646048][T21935] [ 1006.006224][T21944] loop9: detected capacity change from 0 to 256 [ 1006.070417][T21944] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1006.138999][T21944] exFAT-fs (loop9): start_clu is invalid cluster(0xffffffff) [ 1006.414881][T21952] "syz.3.3317" (21952) uses obsolete ecb(arc4) skcipher [ 1006.548070][T11739] gspca_vc032x: reg_w err -71 [ 1006.553093][T11739] vc032x: probe of 7-1:0.0 failed with error -71 [ 1006.572094][T11739] usb 7-1: USB disconnect, device number 17 [ 1006.875604][T21970] netlink: 'syz.3.3321': attribute type 39 has an invalid length. [ 1006.994674][T21975] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1007.460648][T21991] loop6: detected capacity change from 0 to 128 [ 1007.482756][T21991] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1007.541350][T21991] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1007.649581][ T1112] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1010.322502][T22069] loop6: detected capacity change from 0 to 512 [ 1010.381293][T22069] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #15: comm syz.6.3330: inode has both inline data and extents flags [ 1010.463462][T22069] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.3330: couldn't read orphan inode 15 (err -117) [ 1010.537280][ T6935] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1010.551568][T22069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1010.728505][ T6935] usb 10-1: Using ep0 maxpacket: 8 [ 1010.743379][ T6935] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.771556][ T6935] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1010.792036][ T6935] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.822867][ T6935] usb 10-1: config 0 descriptor?? [ 1010.844434][ T6935] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1010.929877][T22080] loop6: detected capacity change from 512 to 64 [ 1010.977845][T22069] bio_check_eod: 1 callbacks suppressed [ 1010.977904][T22069] syz.6.3330: attempt to access beyond end of device [ 1010.977904][T22069] loop6: rw=14337, sector=84, nr_sectors = 2 limit=64 [ 1011.056900][T22069] Buffer I/O error on dev loop6, logical block 42, lost sync page write [ 1011.083854][T22069] EXT4-fs error (device loop6): ext4_splice_branch:472: inode #18: block 42: comm syz.6.3330: IO error syncing itable block [ 1011.184051][T22069] EXT4-fs error (device loop6): ext4_check_bdev_write_error:225: comm syz.6.3330: Error while async write back metadata [ 1011.234853][T22069] syz.6.3330: attempt to access beyond end of device [ 1011.234853][T22069] loop6: rw=2051, sector=174, nr_sectors = 2 limit=64 [ 1011.290491][T22069] EXT4-fs (loop6): discard request in group:0 block:86 count:1 failed with -5 [ 1011.315338][T22069] EXT4-fs error (device loop6): mb_free_blocks:1970: group 0, inode 18: block 87:freeing already freed block (bit 86); block bitmap corrupt. [ 1011.330056][T22069] EXT4-fs (loop6): pa ffff8880516c01d0: logic 32, phys. 65, len 32 [ 1011.338063][T22069] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5398: group 0, free 10, pa_free 9 [ 1011.441059][T22069] syz.6.3330: attempt to access beyond end of device [ 1011.441059][T22069] loop6: rw=14337, sector=84, nr_sectors = 2 limit=64 [ 1011.497687][T22069] Buffer I/O error on dev loop6, logical block 42, lost sync page write [ 1011.524229][T22069] EXT4-fs error (device loop6): ext4_free_data:985: inode #18: block 42: comm syz.6.3330: IO error syncing itable block [ 1011.605681][T22069] EXT4-fs error (device loop6): ext4_check_bdev_write_error:225: comm syz.6.3330: Error while async write back metadata [ 1011.655793][T22069] syz.6.3330: attempt to access beyond end of device [ 1011.655793][T22069] loop6: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 1011.687579][T22069] EXT4-fs warning (device loop6): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 255) [ 1011.727206][T22069] buffer_io_error: 38 callbacks suppressed [ 1011.727224][T22069] Buffer I/O error on device loop6, logical block 255 [ 1011.773288][T22069] syz.6.3330: attempt to access beyond end of device [ 1011.773288][T22069] loop6: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 1011.821947][T22069] EXT4-fs warning (device loop6): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 253) [ 1011.878388][T22069] Buffer I/O error on device loop6, logical block 253 [ 1011.885273][T22069] Buffer I/O error on device loop6, logical block 254 [ 1011.969242][T22069] syz.6.3330: attempt to access beyond end of device [ 1011.969242][T22069] loop6: rw=2049, sector=74, nr_sectors = 8 limit=64 [ 1012.002935][T22069] EXT4-fs warning (device loop6): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 37) [ 1012.035901][T22069] Buffer I/O error on device loop6, logical block 37 [ 1012.056885][T22069] Buffer I/O error on device loop6, logical block 38 [ 1012.063790][T22069] Buffer I/O error on device loop6, logical block 39 [ 1012.070517][T22069] Buffer I/O error on device loop6, logical block 40 [ 1012.127307][T22069] syz.6.3330: attempt to access beyond end of device [ 1012.127307][T22069] loop6: rw=2049, sector=498, nr_sectors = 8 limit=64 [ 1012.156454][T22069] EXT4-fs warning (device loop6): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 249) [ 1012.170359][T22069] Buffer I/O error on device loop6, logical block 249 [ 1012.178476][T22069] Buffer I/O error on device loop6, logical block 250 [ 1012.185314][T22069] Buffer I/O error on device loop6, logical block 251 [ 1012.201895][T22069] syz.6.3330: attempt to access beyond end of device [ 1012.201895][T22069] loop6: rw=2049, sector=82, nr_sectors = 2 limit=64 [ 1012.227349][T22069] EXT4-fs warning (device loop6): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 41) [ 1012.262846][T22069] syz.6.3330: attempt to access beyond end of device [ 1012.262846][T22069] loop6: rw=2049, sector=86, nr_sectors = 8 limit=64 [ 1012.296769][T22069] EXT4-fs warning (device loop6): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 43) [ 1012.303368][ T6935] gspca_vc032x: reg_w err -71 [ 1012.320151][ T6935] vc032x: probe of 10-1:0.0 failed with error -71 [ 1012.343511][T22069] syz.6.3330: attempt to access beyond end of device [ 1012.343511][T22069] loop6: rw=2049, sector=418, nr_sectors = 32 limit=64 [ 1012.349242][ T6935] usb 10-1: USB disconnect, device number 7 [ 1012.395175][T22069] EXT4-fs warning (device loop6): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 209) [ 1012.428818][T22069] EXT4-fs warning (device loop6): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 65) [ 1012.548759][T19820] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 1012.729133][T19820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.076092][T22117] resource: resource sanity check: requesting [mem 0x00000000fe800000-0x00000000fe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f] [ 1013.126993][T22117] caller generic_access_phys+0x33f/0x650 mapping multiple BARs [ 1014.655621][T22153] rxe_eth0 speed is unknown, defaulting to 1000 [ 1014.885421][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1014.909531][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1014.920571][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1014.930727][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1014.938581][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1014.946047][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1015.180218][T22164] loop3: detected capacity change from 0 to 2048 [ 1015.247591][T22164] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1015.322455][T22164] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1015.389816][T22164] UDF-fs: Scanning with blocksize 512 failed [ 1015.478300][T22156] rxe_eth0 speed is unknown, defaulting to 1000 [ 1015.484730][T22164] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1016.145570][T22159] rxe_eth0 speed is unknown, defaulting to 1000 [ 1016.905702][T22184] IPv6: addrconf: prefix option has invalid lifetime [ 1017.049219][T19654] Bluetooth: hci1: command tx timeout [ 1017.073474][T22159] chnl_net:caif_netlink_parms(): no params data found [ 1017.384138][T22159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.410574][T22159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.445223][T22159] bridge_slave_0: entered allmulticast mode [ 1017.478615][T22159] bridge_slave_0: entered promiscuous mode [ 1017.494214][T22159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.504438][T22159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.527644][T22159] bridge_slave_1: entered allmulticast mode [ 1017.562118][T22159] bridge_slave_1: entered promiscuous mode [ 1017.904061][T22159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.929898][T22159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.074980][T22159] team0: Port device team_slave_0 added [ 1018.092556][T22159] team0: Port device team_slave_1 added [ 1018.150759][T22159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.167493][T22159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.213213][T22159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.244299][T22159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.261454][T22159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.297562][T22159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.297756][ T5780] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1018.443338][T22159] hsr_slave_0: entered promiscuous mode [ 1018.468151][T22159] hsr_slave_1: entered promiscuous mode [ 1018.483927][T22159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1018.492144][T22159] Cannot create hsr debugfs directory [ 1018.507292][ T5780] usb 4-1: Using ep0 maxpacket: 16 [ 1018.541601][ T5780] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.567301][ T5780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1018.591016][ T5780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1018.612339][ T5780] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1018.637194][ T5780] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1018.676046][ T5780] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1018.706224][ T5780] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1018.727940][ T5780] usb 4-1: Manufacturer: syz [ 1018.764289][ T5780] usb 4-1: config 0 descriptor?? [ 1019.127909][T19654] Bluetooth: hci1: command tx timeout [ 1019.201702][ T5780] rc_core: IR keymap rc-hauppauge not found [ 1019.218406][ T5780] Registered IR keymap rc-empty [ 1019.248060][ T5780] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1019.317257][ T5780] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1019.394085][ T5780] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1019.458379][ T5780] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input42 [ 1019.516019][ T5780] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1019.587400][ T5780] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1019.594947][T22236] IPv6: addrconf: prefix option has invalid lifetime [ 1019.663380][ T5780] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1019.717444][ T5780] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1019.762984][ T5780] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1019.817526][ T5780] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1019.897793][ T5780] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1019.938972][ T5780] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1019.995353][ T5780] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1020.077273][ T5780] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1020.122146][ T5780] mceusb 4-1:0.0: Registered 42 with mce emulator interface version 1 [ 1020.153706][ T1203] IPVS: starting estimator thread 0... [ 1020.177152][ T5780] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1020.211277][ T5780] usb 4-1: USB disconnect, device number 16 [ 1020.287641][T22249] IPVS: using max 19 ests per chain, 45600 per kthread [ 1020.800600][T22159] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1020.819812][T22159] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1020.832128][T22159] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1020.854181][T22159] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1021.082933][T22159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.124729][T22264] tipc: Failed to remove unknown binding: 66,1,1/0:1325178979/1325178981 [ 1021.156936][T22267] rxe_eth0 speed is unknown, defaulting to 1000 [ 1021.200318][T22159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.207375][T19654] Bluetooth: hci1: command tx timeout [ 1021.289851][T15813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.297136][T15813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.335180][T15801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.342480][T15801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.780681][T22269] rxe_eth0 speed is unknown, defaulting to 1000 [ 1021.827991][ T1203] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1022.040429][ T1203] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1022.054852][ T1203] usb 2-1: not running at top speed; connect to a high speed hub [ 1022.065996][ T1203] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 1022.089581][ T1203] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1022.099474][ T1203] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.127457][ T1203] usb 2-1: Product: syz [ 1022.131756][ T1203] usb 2-1: Manufacturer: syz [ 1022.136411][ T1203] usb 2-1: SerialNumber: syz [ 1022.151976][T22159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1022.314386][T22159] veth0_vlan: entered promiscuous mode [ 1022.380842][T22159] veth1_vlan: entered promiscuous mode [ 1022.390109][ T1203] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1022.537455][T22159] veth0_macvtap: entered promiscuous mode [ 1022.582692][ T1203] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1022.597939][ T1203] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 1022.610403][T22159] veth1_macvtap: entered promiscuous mode [ 1022.661889][T22159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.674093][T22159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.685683][T22159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.696903][T22159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.708084][T22159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.720925][T22159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.732112][T22159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.744543][T22159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.757902][T22159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.805213][T22159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.825432][T22159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.843710][T22159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.858185][T22159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.868929][T22159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.879904][T22159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.892391][T22159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.903305][T22159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.918909][T22159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.954022][T22159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.965790][T22159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.980150][T22159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.991627][T22159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.002936][ T1203] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1023.035344][ T1203] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 1023.228397][ T1203] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1023.287617][T19654] Bluetooth: hci1: command tx timeout [ 1023.343601][ T8324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.367652][ T8324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.408712][ T1203] usb 2-1: USB disconnect, device number 20 [ 1023.565703][ T8328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.576488][ T8328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.622833][T21709] udevd[21709]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1024.219094][ T5446] veth0_vlan: left promiscuous mode [ 1024.263606][ T5446] veth0_vlan: entered promiscuous mode [ 1024.396108][T22329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3390'. [ 1024.586905][T22333] loop9: detected capacity change from 0 to 2048 [ 1024.654515][T22333] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1024.697343][T22333] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 1024.723346][T22333] UDF-fs: Scanning with blocksize 512 failed [ 1024.789751][T22333] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1025.167418][T11739] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1025.400071][T11739] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1025.437331][T11739] usb 3-1: not running at top speed; connect to a high speed hub [ 1025.480479][T11739] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 1025.524186][T11739] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1025.547332][T11739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.565328][T11739] usb 3-1: Product: syz [ 1025.575457][T11739] usb 3-1: Manufacturer: syz [ 1025.585583][T11739] usb 3-1: SerialNumber: syz [ 1025.833821][T11739] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1025.908235][T22365] veth0: entered promiscuous mode [ 1025.915467][T22365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3393'. [ 1026.039034][T11739] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1026.070585][T11739] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 1026.442601][T11739] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1026.462135][T11739] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 1026.643761][T11739] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1026.731824][T11739] usb 3-1: USB disconnect, device number 13 [ 1026.891855][T21709] udevd[21709]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1027.408283][T22391] loop3: detected capacity change from 0 to 512 [ 1027.981540][T22404] loop9: detected capacity change from 0 to 2048 [ 1028.061518][T22404] loop9: p1 p2 p3 < > p4 < p5 p6 > [ 1028.066906][T22404] loop9: partition table partially beyond EOD, truncated [ 1028.086971][T22404] loop9: p1 start 3405774849 is beyond EOD, truncated [ 1028.109353][T22404] loop9: p2 start 53543428 is beyond EOD, truncated [ 1028.126572][T22404] loop9: p3 start 4284289 is beyond EOD, truncated [ 1028.135750][T22404] loop9: p5 start 3405774849 is beyond EOD, truncated [ 1028.150665][T22404] loop9: p6 start 53543428 is beyond EOD, truncated [ 1028.277226][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1028.285152][T22404] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3404'. [ 1028.524677][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1028.547627][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.584406][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1028.616061][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.632768][T22420] veth0: entered promiscuous mode [ 1028.649806][T22420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3409'. [ 1028.669041][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1028.678643][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1028.686703][ T8] usb 4-1: Product: syz [ 1028.720196][ T8] usb 4-1: Manufacturer: syz [ 1028.780726][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 1028.787566][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 1028.825785][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1028.835354][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 1029.087732][T11739] usb 4-1: USB disconnect, device number 17 [ 1029.677455][T11739] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1029.910273][T11739] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1029.927463][T11739] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.961365][T11739] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1030.003075][T11739] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.062934][T11739] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1030.083847][T11739] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1030.127120][T11739] usb 4-1: Product: syz [ 1030.147321][T11739] usb 4-1: Manufacturer: syz [ 1030.178907][T11739] cdc_wdm 4-1:1.0: skipping garbage [ 1030.204632][T11739] cdc_wdm 4-1:1.0: skipping garbage [ 1030.235525][T11739] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1030.255425][T11739] cdc_wdm 4-1:1.0: Unknown control protocol [ 1030.344821][T22454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3417'. [ 1030.690791][T22466] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1031.375807][ T5793] usb 4-1: USB disconnect, device number 18 [ 1032.129554][T22503] jffs2: notice: (22503) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 4 orphan) and 4 of xref (1 dead, 3 orphan) found. [ 1033.875741][T22539] FAULT_INJECTION: forcing a failure. [ 1033.875741][T22539] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.925681][T22539] CPU: 0 PID: 22539 Comm: syz.3.3442 Not tainted syzkaller #0 [ 1033.933266][T22539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1033.943387][T22539] Call Trace: [ 1033.946735][T22539] [ 1033.949725][T22539] dump_stack_lvl+0x18c/0x250 [ 1033.954489][T22539] ? show_regs_print_info+0x20/0x20 [ 1033.959758][T22539] ? load_image+0x420/0x420 [ 1033.964329][T22539] ? __might_sleep+0xe0/0xe0 [ 1033.968989][T22539] ? __lock_acquire+0x7eb0/0x7eb0 [ 1033.974093][T22539] should_fail_ex+0x394/0x4c0 [ 1033.978817][T22539] should_failslab+0x9/0x20 [ 1033.983360][T22539] slab_pre_alloc_hook+0x59/0x300 [ 1033.988425][T22539] ? kvmalloc_node+0x70/0x180 [ 1033.993147][T22539] ? kvmalloc_node+0x70/0x180 [ 1033.997868][T22539] __kmem_cache_alloc_node+0x53/0x260 [ 1034.003278][T22539] ? __lock_acquire+0x7eb0/0x7eb0 [ 1034.008436][T22539] ? kvmalloc_node+0x70/0x180 [ 1034.013148][T22539] __kmalloc_node+0xa6/0x240 [ 1034.017785][T22539] kvmalloc_node+0x70/0x180 [ 1034.022352][T22539] tun_attach+0x8c8/0x1540 [ 1034.026852][T22539] ? rcu_is_watching+0x15/0xb0 [ 1034.031670][T22539] ? __mod_timer+0x9b0/0xd60 [ 1034.036317][T22539] tun_net_init+0x3f3/0x4e0 [ 1034.040868][T22539] register_netdevice+0x67e/0x1ba0 [ 1034.046037][T22539] ? netif_stacked_transfer_operstate+0x210/0x210 [ 1034.052494][T22539] ? rcu_is_watching+0x15/0xb0 [ 1034.057302][T22539] ? __asan_memset+0x22/0x40 [ 1034.061935][T22539] ? tun_net_initialize+0x1ac/0x480 [ 1034.067175][T22539] ? tun_not_capable+0x1f0/0x1f0 [ 1034.072155][T22539] ? alloc_netdev_mqs+0xc6e/0x1090 [ 1034.077323][T22539] tun_set_iff+0x82b/0xea0 [ 1034.081784][T22539] __tun_chr_ioctl+0x7e0/0x2070 [ 1034.086679][T22539] ? tun_flow_create+0x310/0x310 [ 1034.091710][T22539] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1034.096693][T22539] ? security_file_ioctl+0x80/0xa0 [ 1034.101865][T22539] ? tun_chr_poll+0x630/0x630 [ 1034.106622][T22539] __se_sys_ioctl+0xfd/0x170 [ 1034.111282][T22539] do_syscall_64+0x55/0xb0 [ 1034.115750][T22539] ? clear_bhb_loop+0x40/0x90 [ 1034.120476][T22539] ? clear_bhb_loop+0x40/0x90 [ 1034.125202][T22539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1034.131150][T22539] RIP: 0033:0x7f56f07a8f19 [ 1034.135620][T22539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.155350][T22539] RSP: 002b:00007f56f159c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1034.163822][T22539] RAX: ffffffffffffffda RBX: 00007f56f0a25fa0 RCX: 00007f56f07a8f19 [ 1034.171863][T22539] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1034.179893][T22539] RBP: 00007f56f0837f6d R08: 0000000000000000 R09: 0000000000000000 [ 1034.187924][T22539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1034.195947][T22539] R13: 00007f56f0a26038 R14: 00007f56f0a25fa0 R15: 00007ffcef856088 [ 1034.203985][T22539] [ 1035.981227][T22563] loop9: detected capacity change from 0 to 32768 [ 1036.037831][T22563] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 scanned by syz.9.3441 (22563) [ 1036.100315][T22563] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1036.148470][T22563] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 1036.176097][T22563] BTRFS info (device loop9): using free space tree [ 1036.312941][T22563] BTRFS info (device loop9): enabling ssd optimizations [ 1036.466881][T22563] BTRFS info (device loop9): balance: start -d -m [ 1036.518094][T22563] BTRFS info (device loop9): relocating block group 6881280 flags data|metadata [ 1036.783231][T22563] BTRFS info (device loop9): relocating block group 5242880 flags data|metadata [ 1036.881458][T22563] BTRFS warning (device loop9): Skipping commit of aborted transaction. [ 1036.977309][T22563] ------------[ cut here ]------------ [ 1036.982939][T22563] BTRFS: Transaction aborted (error -28) [ 1037.017667][T22563] WARNING: CPU: 1 PID: 22563 at fs/btrfs/transaction.c:2039 btrfs_commit_transaction+0x2b36/0x33a0 [ 1037.028728][T22563] Modules linked in: [ 1037.032705][T22563] CPU: 1 PID: 22563 Comm: syz.9.3441 Not tainted syzkaller #0 [ 1037.040386][T22563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1037.050783][T22563] RIP: 0010:btrfs_commit_transaction+0x2b36/0x33a0 [ 1037.057426][T22563] Code: 00 00 00 49 8d 7f e8 e8 e8 2c ac 00 e9 45 db ff ff e8 4e ea 04 fe 48 c7 c7 60 a2 2c 8b 44 8b 74 24 30 44 89 f6 e8 ea 8e ce fd <0f> 0b e9 d3 f9 ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 00 d6 [ 1037.077508][T22563] RSP: 0018:ffffc9000476f580 EFLAGS: 00010246 [ 1037.083670][T22563] RAX: 5da16d5ca3a05400 RBX: 0000000000000000 RCX: 0000000000080000 [ 1037.092079][T22563] RDX: ffffc90012077000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1037.100192][T22563] RBP: ffffc9000476f850 R08: ffffc9000476f187 R09: 1ffff920008ede30 [ 1037.108332][T22563] R10: dffffc0000000000 R11: fffff520008ede31 R12: ffff8880596b4000 [ 1037.116553][T22563] R13: dffffc0000000000 R14: 00000000ffffffe4 R15: ffff88801a32b070 [ 1037.125355][T22563] FS: 00007f1ee5ba26c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1037.134937][T22563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1037.142448][T22563] CR2: 0000001b350f9ff8 CR3: 0000000030c1c000 CR4: 00000000003506e0 [ 1037.150915][T22563] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 1037.159414][T22563] DR3: 0000000000000034 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1037.167886][T22563] Call Trace: [ 1037.171318][T22563] [ 1037.174315][T22563] ? btrfs_commit_transaction+0x185/0x33a0 [ 1037.180694][T22563] ? __lock_acquire+0x7eb0/0x7eb0 [ 1037.185900][T22563] ? do_raw_spin_lock+0x11f/0x2b0 [ 1037.191447][T22563] ? btrfs_commit_transaction_async+0x490/0x490 [ 1037.198030][T22563] ? do_raw_spin_unlock+0x121/0x230 [ 1037.203307][T22563] ? join_transaction+0x426/0xcd0 [ 1037.208475][T22563] ? join_transaction+0x464/0xcd0 [ 1037.213581][T22563] ? btrfs_record_root_in_trans+0x90/0x180 [ 1037.219651][T22563] ? start_transaction+0x453/0x1110 [ 1037.225568][T22563] prepare_to_relocate+0x392/0x480 [ 1037.230950][T22563] relocate_block_group+0x14a/0xd00 [ 1037.236224][T22563] ? trace_contention_end+0x39/0xe0 [ 1037.241593][T22563] ? btrfs_wait_ordered_roots+0x639/0x6d0 [ 1037.247484][T22563] ? btrfs_relocate_block_group+0x72c/0xaa0 [ 1037.253452][T22563] ? create_reloc_inode+0x7e0/0x7e0 [ 1037.258778][T22563] ? btrfs_run_ordered_extent_work+0x30/0x30 [ 1037.264837][T22563] ? btrfs_relocate_block_group+0x420/0xaa0 [ 1037.271008][T22563] btrfs_relocate_block_group+0x734/0xaa0 [ 1037.276807][T22563] btrfs_relocate_chunk+0x12a/0x3b0 [ 1037.282151][T22563] __btrfs_balance+0x1865/0x21e0 [ 1037.287566][T22563] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1037.293271][T22563] ? describe_balance_start_or_resume+0x550/0x550 [ 1037.299837][T22563] ? __wait_for_common+0x630/0x6f0 [ 1037.305018][T22563] ? __rwlock_init+0x130/0x150 [ 1037.309927][T22563] ? do_raw_spin_unlock+0x121/0x230 [ 1037.315213][T22563] btrfs_balance+0xc57/0x1130 [ 1037.320078][T22563] btrfs_ioctl_balance+0x48c/0x710 [ 1037.325947][T22563] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 1037.332646][T22563] __se_sys_ioctl+0xfd/0x170 [ 1037.337568][T22563] do_syscall_64+0x55/0xb0 [ 1037.342055][T22563] ? clear_bhb_loop+0x40/0x90 [ 1037.346810][T22563] ? clear_bhb_loop+0x40/0x90 [ 1037.351639][T22563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1037.357657][T22563] RIP: 0033:0x7f1ee4da8f19 [ 1037.362134][T22563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.383668][T22563] RSP: 002b:00007f1ee5ba2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1037.392649][T22563] RAX: ffffffffffffffda RBX: 00007f1ee5025fa0 RCX: 00007f1ee4da8f19 [ 1037.400771][T22563] RDX: 00002000000059c0 RSI: 00000000c4009420 RDI: 0000000000000004 [ 1037.408878][T22563] RBP: 00007f1ee4e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 1037.416914][T22563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.425711][T22563] R13: 00007f1ee5026038 R14: 00007f1ee5025fa0 R15: 00007ffcdfe74ce8 [ 1037.433985][T22563] [ 1037.437144][T22563] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1037.444484][T22563] CPU: 1 PID: 22563 Comm: syz.9.3441 Not tainted syzkaller #0 [ 1037.451999][T22563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1037.462106][T22563] Call Trace: [ 1037.465434][T22563] [ 1037.468417][T22563] dump_stack_lvl+0x18c/0x250 [ 1037.473172][T22563] ? show_regs_print_info+0x20/0x20 [ 1037.478435][T22563] ? load_image+0x420/0x420 [ 1037.483054][T22563] panic+0x2ca/0x720 [ 1037.487014][T22563] ? bpf_jit_dump+0xd0/0xd0 [ 1037.491603][T22563] __warn+0x2e0/0x470 [ 1037.495668][T22563] ? btrfs_commit_transaction+0x2b36/0x33a0 [ 1037.501629][T22563] ? btrfs_commit_transaction+0x2b36/0x33a0 [ 1037.507586][T22563] report_bug+0x2be/0x4f0 [ 1037.512040][T22563] ? btrfs_commit_transaction+0x2b36/0x33a0 [ 1037.518162][T22563] ? btrfs_commit_transaction+0x2b36/0x33a0 [ 1037.524122][T22563] ? btrfs_commit_transaction+0x2b38/0x33a0 [ 1037.530177][T22563] handle_bug+0xcf/0x120 [ 1037.534491][T22563] exc_invalid_op+0x1a/0x50 [ 1037.539059][T22563] asm_exc_invalid_op+0x1a/0x20 [ 1037.543984][T22563] RIP: 0010:btrfs_commit_transaction+0x2b36/0x33a0 [ 1037.550561][T22563] Code: 00 00 00 49 8d 7f e8 e8 e8 2c ac 00 e9 45 db ff ff e8 4e ea 04 fe 48 c7 c7 60 a2 2c 8b 44 8b 74 24 30 44 89 f6 e8 ea 8e ce fd <0f> 0b e9 d3 f9 ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 00 d6 [ 1037.570229][T22563] RSP: 0018:ffffc9000476f580 EFLAGS: 00010246 [ 1037.576359][T22563] RAX: 5da16d5ca3a05400 RBX: 0000000000000000 RCX: 0000000000080000 [ 1037.584403][T22563] RDX: ffffc90012077000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1037.592440][T22563] RBP: ffffc9000476f850 R08: ffffc9000476f187 R09: 1ffff920008ede30 [ 1037.600464][T22563] R10: dffffc0000000000 R11: fffff520008ede31 R12: ffff8880596b4000 [ 1037.608494][T22563] R13: dffffc0000000000 R14: 00000000ffffffe4 R15: ffff88801a32b070 [ 1037.616551][T22563] ? btrfs_commit_transaction+0x185/0x33a0 [ 1037.622454][T22563] ? __lock_acquire+0x7eb0/0x7eb0 [ 1037.627560][T22563] ? do_raw_spin_lock+0x11f/0x2b0 [ 1037.632659][T22563] ? btrfs_commit_transaction_async+0x490/0x490 [ 1037.638983][T22563] ? do_raw_spin_unlock+0x121/0x230 [ 1037.644269][T22563] ? join_transaction+0x426/0xcd0 [ 1037.649355][T22563] ? join_transaction+0x464/0xcd0 [ 1037.654440][T22563] ? btrfs_record_root_in_trans+0x90/0x180 [ 1037.660323][T22563] ? start_transaction+0x453/0x1110 [ 1037.665604][T22563] prepare_to_relocate+0x392/0x480 [ 1037.670789][T22563] relocate_block_group+0x14a/0xd00 [ 1037.676493][T22563] ? trace_contention_end+0x39/0xe0 [ 1037.681758][T22563] ? btrfs_wait_ordered_roots+0x639/0x6d0 [ 1037.687539][T22563] ? btrfs_relocate_block_group+0x72c/0xaa0 [ 1037.693505][T22563] ? create_reloc_inode+0x7e0/0x7e0 [ 1037.698770][T22563] ? btrfs_run_ordered_extent_work+0x30/0x30 [ 1037.704816][T22563] ? btrfs_relocate_block_group+0x420/0xaa0 [ 1037.710794][T22563] btrfs_relocate_block_group+0x734/0xaa0 [ 1037.716604][T22563] btrfs_relocate_chunk+0x12a/0x3b0 [ 1037.721884][T22563] __btrfs_balance+0x1865/0x21e0 [ 1037.726924][T22563] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1037.732640][T22563] ? describe_balance_start_or_resume+0x550/0x550 [ 1037.739126][T22563] ? __wait_for_common+0x630/0x6f0 [ 1037.744305][T22563] ? __rwlock_init+0x130/0x150 [ 1037.749134][T22563] ? do_raw_spin_unlock+0x121/0x230 [ 1037.754401][T22563] btrfs_balance+0xc57/0x1130 [ 1037.759170][T22563] btrfs_ioctl_balance+0x48c/0x710 [ 1037.764347][T22563] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 1037.770826][T22563] __se_sys_ioctl+0xfd/0x170 [ 1037.775484][T22563] do_syscall_64+0x55/0xb0 [ 1037.779956][T22563] ? clear_bhb_loop+0x40/0x90 [ 1037.784695][T22563] ? clear_bhb_loop+0x40/0x90 [ 1037.789438][T22563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1037.795389][T22563] RIP: 0033:0x7f1ee4da8f19 [ 1037.799857][T22563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.819523][T22563] RSP: 002b:00007f1ee5ba2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1037.828005][T22563] RAX: ffffffffffffffda RBX: 00007f1ee5025fa0 RCX: 00007f1ee4da8f19 [ 1037.836057][T22563] RDX: 00002000000059c0 RSI: 00000000c4009420 RDI: 0000000000000004 [ 1037.844087][T22563] RBP: 00007f1ee4e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 1037.852134][T22563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.860163][T22563] R13: 00007f1ee5026038 R14: 00007f1ee5025fa0 R15: 00007ffcdfe74ce8 [ 1037.868211][T22563] [ 1037.871903][T22563] Kernel Offset: disabled [ 1037.876587][T22563] Rebooting in 86400 seconds..