last executing test programs: 2m39.084935989s ago: executing program 0 (id=329): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000007000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 2m38.142203752s ago: executing program 0 (id=336): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m38.140479412s ago: executing program 0 (id=337): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/io_uring_mock\x00', 0x2, 0x0) dup2(r0, 0x0) r1 = io_uring_setup(0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x10000000) pipe2(&(0x7f0000003000)={0x0, 0x0}, 0x0) write(r3, &(0x7f0000004000)="2e00000000000000010000000000000000010020000000008000"/64, 0x40) read(r2, &(0x7f0000020000)=""/64, 0x40) write(r3, &(0x7f0000004040)="01000000", 0x4) read(r2, &(0x7f0000010040)=""/4, 0x4) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 2m37.985074406s ago: executing program 0 (id=339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xf809, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540), 0x0}, 0x20) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x4c}}, 0x0) 2m36.831686283s ago: executing program 0 (id=340): syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000004082054c0040000102030109028e000301053009080b00010107208c0904000000010120000924010040041500070c2403020703000400070081090401000001022000090401010101022000090501090002030b04082501000040040009040200000102200009040201010102200009240201000f0e07011024010201"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x3c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2m35.422548778s ago: executing program 0 (id=348): syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000079102800000000007b0000ff0000000095007400000000005d"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 2m35.278912281s ago: executing program 32 (id=348): syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000079102800000000007b0000ff0000000095007400000000005d"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 23.440871356s ago: executing program 2 (id=921): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() close(0x3) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r0, &(0x7f0000001140), 0x700, 0x2, 0x0) 21.763868076s ago: executing program 2 (id=924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newroute={0x34, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x1, 0xfd, 0x9}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG_NAME={0x5, 0x2, '\x00'}}}, @RTA_PREF={0x5, 0x14, 0x4}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1fb69, 0x51227}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00, 0x10d}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040) r2 = syz_create_resource$binfmt(0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000004280)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) 20.33986859s ago: executing program 2 (id=931): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) 19.224540087s ago: executing program 2 (id=938): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) writev(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 18.753827659s ago: executing program 2 (id=940): write$tun(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) read$FUSE(r0, &(0x7f00000030c0)={0x2020}, 0x2020) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000200)={0x11, 0x1, 0x1, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) sendfile(r1, r0, 0x0, 0x80) 10.933041047s ago: executing program 1 (id=961): syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000a00)={[{@grpquota}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$eJzs3c1vVFUbAPDn3k6/3/edQt6ouJBGYyBRWlrAEGMC3bgiBD92riotBBkooTVaJLFNcGNi3LgwceVC/C+UxK0Lty7cuDIkxBgWYlDG3Jk7ZTrt9Hs6pf39kmnvmTNzzrlNnzlnzpxzJ4A9azD7kUYciIhrSUSxLq8QeeZg9XH3/7h5PrslUS6/9XsSNz9O5urLSvLf/fmT/ylG8lMasb9jab3Tszcuj5dKk9fz9PDMlWvD07M3jly6Mn5x8uLk1dFXRk+eOH7i5MjRTZ1fXvXf2Y8zt977oPjp2Xe++ephMvLtL2eTOB2P8gdk59X43O5N1Zz9zQajXPVgUUYacXKTZe8UfxZr/ycV3dk/RFJoZ4tYjzQiTkVEZ0Q8HcXoiMfBWoxP3mhr44CWKidR6aMGy8Dek0TTrEs9+YvEUj0tbROwHWrjgNp7++XeBy+VtnJIAmyTe2PVubpq7HdGRC3+C9W5weipzA303U/q53kqc32bm5mryur48Yezt7JbNJmHA1pjbr42y93Y/yeV2ByI6nuAvvvpovgfy0cBaf45wZuNBa9x8nywIS3+YfvMzUfEM3n/3xVrjv80j91a/L+7wfrFPwAAAAAAAGydO2MR8fJy6//ShfU/Xcus/+mPiNNbUP/qn/+ld/ODZAuqA+rcG4t4bdn1vwtrfAc68tR/K+sBOpMLl0qTRyPifxFxODq7s/RIQ7n1K4SPfLb/y2b116//y25Z/bW1gHlJdwsNa4kmxmfGN3veQMS9+YhnK+t/D+b3LF7/k/X/yTL9fxbf19ZYx/4Xb59rlrd6/AOtUv464tCy/f/j4Xay8vU5hivjgeHaqGCp5z76/Ltm9Yt/aJ+s/+9bOf67k/rr9Uyvr/yuiDg2Wyg3y9/o+L8rebujVn7mw/GZmesjEV3JmaX3j66vzbBb1eKhFi9Z/B9+YeX5v4Xxf10c9kbE3BrrfOpR/6/N8vT/0D5Z/E+s3P8XF/f/6z8YvT3wfbP6z62p/z9e6dMP5/eY/4N6S6/HsdYAbUtzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAJl0bEfyJJhxaO03RoKKI/Iv4ffWlpanrmpQtT71+dyPIq3/+f1r7pt1hNJ7Xv/x+oS482pI9FxL6I+KKjt5IeOj9Vmmj3yQMAAAAAAAAAAAAAAAAAAMAO0V/Z81/ubtz/n/mto92tA1qukP8W77D3FDb8zHL3ljYE2HYbj3/gSTa/rvjvbGlbgO3XPP4fPCxXNNz9+vMtbxOwPYz/Ye/aYPz7uAB2Af0/7FVrnNPraXU7gHbQ/wMAAAAAwK6y7+Cdn5OImHu1t3LLdOV5vW1tGdBqabsbALSNNbywdxWm2t0CoF1s6AeShaO/Gjf7VzRf/Z+0pkEAAAAAAAAAAAAAwBKHDjTf/29vAOxuK+//t7YfdrMV9v8vF/wuFwC7SPOv/tD3w27nPT6wWm9v/z8AAAAAAAAAAAAA7AA9Ny6Pl0qT16dnn7yDUzujGes7mBvfXDnl7p1wFosPHrWm5M6I2BknuAUHWbCVSpPlcsTqD65dgqONbW7vyxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDYvwEAAP//9HcgKQ==") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_setup(0x3ff, 0x0) io_submit(0x0, 0x0, 0x0) io_destroy(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x8940, 0x1cd) 10.83593221s ago: executing program 5 (id=962): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x7e) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r3, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) 10.527955177s ago: executing program 4 (id=965): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r3, 0x40246f4c, 0x0) 10.523437147s ago: executing program 1 (id=966): futex(0x0, 0x5, 0x4, 0x0, 0x0, 0xffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) sendfile(r0, r0, 0x0, 0x7) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 9.698043207s ago: executing program 5 (id=968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 8.917956846s ago: executing program 3 (id=969): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) 8.916141766s ago: executing program 4 (id=970): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x18, r4}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000, 0x1b4e2c}) 8.887077757s ago: executing program 1 (id=971): fsopen(&(0x7f0000000080)='autofs\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000003000000000000000000000203000000000000000000000105000000080000000100000000000008000000000000000000000003000000000100000002000000000000000061"], 0x0, 0x5b}, 0x28) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x11000a0, 0x0, 0xfe, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x3e2}, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07b0cf"], 0x0) 8.704010721s ago: executing program 5 (id=972): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) 8.645707742s ago: executing program 2 (id=973): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20004080) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x4, 0x9, '\x00', 0x6}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x80, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x41000, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x8, 0x1, 0x0, 0x4, 0x9, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0xfc, 0x7, 0x20, 0x0, 0x3}, {0x2, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x9000, [0xb04, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.848436551s ago: executing program 3 (id=974): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x9, @empty, 0x8}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, @in6={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8}, @in6={0xa, 0x4e21, 0x3ff, @mcast1, 0xf8be}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x94) sendmsg$inet_sctp(r0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="2c00000084020000010000000600ff030400000002000000ff000000000000000700000008000000", @ANYRES32=0x0, @ANYBLOB="2c000000840000000100000009000300008200000101000007000000000000000700000007000000", @ANYRES32=0x0], 0x58, 0x850}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe80, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x41, 0x0, 0x0, 0xad, 0x0, &(0x7f0000000540)="6237ea76a99f1cb66ebd252b7b95139a94ebaf9c9d887302c9056f019edc758989770610205b52a3ecf567d8950f2f726f2e02720c214208051ceefb1c5b94a0570e433db8eb9e59a3fdfdda5e611e51941acde5c4c42d413e0610052faf0badb97669a60e8b9d47c6051c8b30208e6c28e5547e08049b499378594ce8b56e3c8286b5482947abd880cbe18fef47a013da68534cb2286a768c3e88f13fc7c72cc947a465f21c84a807aab2f497", 0x0, 0x0, 0x10}, 0x3a) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x1c) r4 = add_key$keyring(&(0x7f0000000b40), &(0x7f0000000b80)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$unlink(0x9, r4, r2) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$BTRFS_IOC_SEND(r5, 0x40449426, &(0x7f0000000140)={{r0}, 0x2, &(0x7f0000000000)=[0x8d1, 0xac], 0x1ff, 0x8, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f0000000200)={0x1, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{0x0, 0xdce8}]}}) 7.303319644s ago: executing program 4 (id=975): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0x10208, 0x3, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x2, 0x107ffe}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r1, r4, 0x6700000000000000) syz_fuse_handle_req(r1, &(0x7f0000008340)="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", 0x2000, &(0x7f000000aec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a580)={0x18, 0x0, 0x9, {0x41}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.301945464s ago: executing program 1 (id=985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) r6 = fsopen(0x0, 0x1) fsmount(r6, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r4, &(0x7f0000001e80)={0x2020}, 0x2020) 7.298260645s ago: executing program 3 (id=986): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) semop(0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x2000}], 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000780)='^\x8a\x983be\fe1i\x1b\x05Q\x886\xa7\x12f\x14L\x9b\xe0\xdc^\x8e\xa5\x84\xden\xef\x8e\xb0sr\xcb\x9e\xb5ko\xf8\xfb\xc7`Ei\xdc\xb2\x1a\x06\xc0\xeb\x1fg\xf2\x05\xae\xa2y.\x7fAY\xac~|\x19\xf0\x90\xcc\x1d\xe6\xc5\xcc\xeaJ\xfdi\xdf\x8fD\xc3%\x1a]\xa5\xa9,\x9f\xd6\xaf\x8a\"\x9bu\xf4\x00iK\x10%E\x11|\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x80iz\x9bA\x9c\x19\xa1\xba,G\xd2\x0f\xe5\\b\xfe\x84H\xd5\x03y\xaeq\xaeL\xacBX<\xeb\a\'a\xcc\xf4#R\xafj??\xae\t\x1e\xfa\xb7l\xf8\x88\xde\xc0\x1a-\x84\xac\x18\x05\xb1k\x8f\xab>c\xe6\x04\xafr*\xd1yD\x12p\xd0\xfdg\xb7\xa3<\x15F\x10\xe5\xfae7\xbc\xdb\x93:\x84\xe7\xf2\x1c\xed*\xd1{\xaf\xd1\xed\r\xda\xe8\xd5\x0e\x97\xbb\x7f\xdeDO\x16\xca\xb8\x05\x82T!\xa9)\xed\xb4\x97\xae\xd4\xaaPH\x94\x99-)\x1a', 0x0, r1) 7.143217488s ago: executing program 33 (id=973): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20004080) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x4, 0x9, '\x00', 0x6}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x80, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x41000, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x8, 0x1, 0x0, 0x4, 0x9, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0xfc, 0x7, 0x20, 0x0, 0x3}, {0x2, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x9000, [0xb04, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.117123359s ago: executing program 5 (id=977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000350e000085000000970000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r4}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000880000000500000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000008001"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="02000000900800000500000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000080"], 0x80}, 0x1, 0x0, 0x0, 0x20080810}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000380)) 7.112511609s ago: executing program 4 (id=978): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 6.870780935s ago: executing program 5 (id=979): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 6.542730343s ago: executing program 3 (id=980): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1ea7, 0x907, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x20, "", [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x9001, 0x75, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7f, 0x1, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x20, 0x30, 0x6, {0x6, 0x11, "e540b187"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1fe) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc00) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 1.743752269s ago: executing program 6 (id=976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) recvmsg(r1, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x600000000000000) 1.740756678s ago: executing program 5 (id=992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000540)=ANY=[], 0x81, 0x14fc, &(0x7f0000002a80)="$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") r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400fb0c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000040008"], 0x98}, 0x1, 0x7}, 0x14) 1.739212968s ago: executing program 1 (id=993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x3c0d, 0x5, 0xe4, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0xfffffffffffffed5, 0x2, {0x401, 0xa733, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0xc, 0xb, 0x5, 0x5, 0x1, 0xd, 0x1, 0x8, 0xa, 0x4, 0xb, 0xa, 0x10, 0x6, 0x2], 0x9, [0x78ec, 0x400, 0x3c09, 0x8733, 0x4, 0x4054, 0x4, 0x24, 0x1, 0xbe7, 0x9, 0x8, 0x1, 0x6, 0x1, 0xfffa], [0x1, 0x3, 0x8000, 0x6, 0x7, 0x4692, 0x7, 0x7fff, 0x2, 0x6, 0x9a, 0x3, 0x8, 0x7f, 0x6, 0x4]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24048881}, 0x4000080) 1.734929429s ago: executing program 3 (id=994): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x8) connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept$inet(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r3}, 0x20) sendto(r3, &(0x7f0000000700)='ab', 0xfffffcf4, 0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.727071909s ago: executing program 4 (id=995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x80045518, 0xffffffffffffffff) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lseek(r3, 0xfffffffffffffffc, 0x2) 9.75694ms ago: executing program 6 (id=981): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r3, 0x40246f4c, 0x0) 5.21687ms ago: executing program 1 (id=997): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000075c1070000005239ac0745c4636ebea700100000000000", @ANYRES64=r0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010"], 0x68}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500000000000000000002000006"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 1.40878ms ago: executing program 3 (id=998): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x17, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 0s ago: executing program 4 (id=999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) recvmsg(r1, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x600000000000000) kernel console output (not intermixed with test programs): F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 86.686816][ T4581] F2FS-fs (loop0): invalid crc value [ 86.737292][ T4581] F2FS-fs (loop0): Found nat_bits in checkpoint [ 86.787851][ T4557] XFS (loop2): Quotacheck: Done. [ 86.834557][ T4184] XFS (loop2): Unmounting Filesystem [ 86.846263][ T4581] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 86.853741][ T4581] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 87.267488][ T4607] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_batadv, syncid = 3, id = 0 [ 87.432227][ T4605] loop3: detected capacity change from 0 to 512 [ 87.757191][ T4605] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 87.856515][ T4605] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.956503][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 89.017031][ T4629] net_ratelimit: 10 callbacks suppressed [ 89.017089][ T4629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.989004][ T4195] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.378213][ T4661] loop3: detected capacity change from 0 to 1024 [ 91.569068][ T4195] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.647443][ T4661] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 92.249025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.463270][ T4195] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.497492][ T4195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.548866][ T4195] usb 3-1: Product: syz [ 92.568501][ T4195] usb 3-1: Manufacturer: syz [ 92.604343][ T4195] usb 3-1: SerialNumber: syz [ 93.254063][ T4683] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 93.771650][ T4195] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 93.772957][ T4687] loop4: detected capacity change from 0 to 512 [ 93.777855][ T4195] cdc_ncm 3-1:1.0: bind() failure [ 93.783507][ T4195] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 93.796660][ T4195] cdc_ncm 3-1:1.1: bind() failure [ 93.810765][ T4195] usb 3-1: USB disconnect, device number 2 [ 94.326817][ T4687] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.118: inode has both inline data and extents flags [ 94.460135][ T4687] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.118: couldn't read orphan inode 15 (err -117) [ 94.593773][ T4687] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 95.900987][ T4713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.132'. [ 95.921806][ T4721] loop4: detected capacity change from 0 to 512 [ 95.985593][ T4713] device bond_slave_0 entered promiscuous mode [ 95.992118][ T4713] device bond_slave_1 entered promiscuous mode [ 96.003983][ T4713] device bond_slave_0 left promiscuous mode [ 96.010000][ T4713] device bond_slave_1 left promiscuous mode [ 96.021433][ T4713] bond1: (slave vlan2): making interface the new active one [ 96.029470][ T4713] device bond_slave_0 entered promiscuous mode [ 96.035920][ T4713] device bond_slave_1 entered promiscuous mode [ 96.067324][ T4721] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 96.097518][ T4713] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 96.119092][ T4721] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.245147][ T4753] input: syz0 as /devices/virtual/input/input5 [ 99.032127][ T4777] tipc: Resetting bearer [ 99.810299][ T4777] tipc: Resetting bearer [ 99.871414][ T4777] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 99.884883][ T4789] loop3: detected capacity change from 0 to 512 [ 100.092608][ T4789] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 100.135202][ T4789] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.245310][ T4799] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.150'. [ 101.652737][ T4815] bridge0: port 3(macvlan2) entered blocking state [ 101.686088][ T4815] bridge0: port 3(macvlan2) entered disabled state [ 101.709643][ T4815] device macvlan2 entered promiscuous mode [ 101.733270][ T4815] bridge0: port 3(macvlan2) entered blocking state [ 101.740142][ T4815] bridge0: port 3(macvlan2) entered forwarding state [ 101.782943][ T4819] tipc: Enabling of bearer rejected, failed to enable media [ 101.953827][ T4818] loop3: detected capacity change from 0 to 4096 [ 103.442243][ T4868] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 104.049832][ T4843] syz.0.163 (4843) used greatest stack depth: 19600 bytes left [ 105.595451][ T2297] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 105.627767][ T4897] set match dimension is over the limit! [ 106.149484][ T2297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.161130][ T2297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.176319][ T2297] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 106.189155][ T2297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.587731][ T2297] usb 3-1: config 0 descriptor?? [ 106.988352][ T4926] syz.3.184[4926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.988581][ T4926] syz.3.184[4926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.017737][ T4926] capability: warning: `syz.3.184' uses 32-bit capabilities (legacy support in use) [ 107.219106][ T2297] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 107.418847][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 108.084747][ T2297] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 108.092687][ T2297] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 108.099775][ T2297] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 108.106554][ T2297] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 108.115219][ T2297] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 108.131197][ T2297] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 108.150096][ T2297] usb 3-1: USB disconnect, device number 3 [ 108.309802][ T4945] fuse: Bad value for 'fd' [ 108.491795][ T4949] set match dimension is over the limit! [ 108.538840][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 109.768839][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 109.808838][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 110.046845][ T4948] fido_id[4948]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 110.097214][ T4956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.194'. [ 110.112441][ T4956] netlink: 17 bytes leftover after parsing attributes in process `syz.1.194'. [ 110.125288][ T4956] tipc: Invalid UDP bearer configuration [ 110.125328][ T4956] tipc: Enabling of bearer rejected, failed to enable media [ 111.033117][ T4989] UBIFS error (pid: 4989): cannot open "./file0", error -22 [ 111.121645][ T4993] device syzkaller0 entered promiscuous mode [ 111.238199][ T5000] loop3: detected capacity change from 0 to 164 [ 112.248645][ T5009] Cannot find set identified by id 0 to match [ 112.810944][ T5018] device syzkaller0 entered promiscuous mode [ 113.050877][ T5027] device syzkaller0 entered promiscuous mode [ 113.124734][ T25] kauditd_printk_skb: 50 callbacks suppressed [ 113.124744][ T25] audit: type=1804 audit(1788987825.772:62): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.215" name="/newroot/39/file0" dev="fuse" ino=1 res=1 errno=0 [ 113.257421][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 113.798063][ T5048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'. [ 113.899574][ T5051] Cannot find set identified by id 0 to match [ 113.927284][ T5048] netlink: 32 bytes leftover after parsing attributes in process `syz.2.225'. [ 114.758506][ T5057] netlink: 'syz.2.228': attribute type 3 has an invalid length. [ 114.766316][ T5057] netlink: 666 bytes leftover after parsing attributes in process `syz.2.228'. [ 114.827220][ T5054] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.836243][ T5054] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.845160][ T5054] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.854464][ T5054] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.518854][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 117.583254][ T5088] loop4: detected capacity change from 0 to 1024 [ 117.656459][ T5088] EXT4-fs (loop4): Ignoring removed bh option [ 117.688045][ T5088] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.799469][ T5088] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000008,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 118.159404][ T4195] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.452106][ T5086] netlink: 68 bytes leftover after parsing attributes in process `syz.0.236'. [ 120.409314][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.616441][ T5112] device syzkaller0 entered promiscuous mode [ 120.686793][ T5114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.388986][ T4195] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.681156][ T4195] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 121.689003][ T4195] usb 3-1: can't read configurations, error -71 [ 122.335060][ T5133] loop2: detected capacity change from 0 to 8 [ 122.407673][ T5139] netlink: 'syz.1.252': attribute type 10 has an invalid length. [ 122.579082][ T5141] device syzkaller0 entered promiscuous mode [ 124.153248][ T5177] cgroup: No subsys list or none specified [ 124.788873][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.947989][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 125.244205][ T5179] team0: Port device team_slave_0 removed [ 126.004907][ T5185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.111964][ T5187] device bond_slave_0 entered promiscuous mode [ 126.118176][ T5187] device bond_slave_1 entered promiscuous mode [ 126.124396][ T5187] device syz_tun entered promiscuous mode [ 126.200237][ T5187] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 126.207635][ T5187] bond1: (slave macvlan2): unknown ethtool speed (20010) for port 1 (set it to 0) [ 126.269195][ T5187] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 126.290405][ T5187] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 126.399240][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 126.548594][ T5202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.270'. [ 126.589488][ T5202] netlink: 'syz.2.270': attribute type 7 has an invalid length. [ 126.624175][ T5202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 126.712601][ T5202] device ip6gretap0 entered promiscuous mode [ 126.750144][ T5202] device syz_tun entered promiscuous mode [ 126.794630][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 127.149041][ T26] usb 5-1: unable to get BOS descriptor or descriptor too short [ 127.280300][ T26] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 127.383782][ T26] usb 5-1: can't read configurations, error -71 [ 127.912857][ T5226] loop2: detected capacity change from 0 to 128 [ 127.993926][ T5226] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 128.011868][ T5226] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.289089][ T5250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.282'. [ 130.382507][ T5250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.282'. [ 130.864007][ T5277] netlink: 'syz.1.291': attribute type 2 has an invalid length. [ 133.327582][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.333920][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.344874][ T5302] fuse: Bad value for 'fd' [ 134.346536][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 134.428173][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 134.437578][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 134.442998][ T5322] trusted_key: encrypted_key: master key parameter is missing [ 134.446676][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 134.464214][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 134.508259][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 134.554557][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 134.581843][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 135.812189][ T5388] netlink: 'syz.3.310': attribute type 1 has an invalid length. [ 136.351540][ T5390] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.370889][ T5390] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.395196][ T5390] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.408957][ T5390] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.454086][ T5390] bond1: (slave geneve2): making interface the new active one [ 136.507385][ T5390] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 136.801578][ T5419] __nla_validate_parse: 3 callbacks suppressed [ 136.801594][ T5419] netlink: 44 bytes leftover after parsing attributes in process `syz.1.319'. [ 136.819712][ T5419] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.826882][ T5419] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.236539][ T5429] blk_update_request: I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.123265][ T5437] device syzkaller0 entered promiscuous mode [ 138.183836][ T5439] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 138.443990][ T5449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'. [ 138.767946][ T5449] bridge2: port 1(erspan0) entered blocking state [ 139.001154][ T5449] bridge2: port 1(erspan0) entered disabled state [ 139.129971][ T5449] device erspan0 entered promiscuous mode [ 139.181290][ T5449] bridge2: port 1(erspan0) entered blocking state [ 139.187793][ T5449] bridge2: port 1(erspan0) entered forwarding state [ 139.235372][ T5460] loop3: detected capacity change from 0 to 512 [ 139.258206][ T5461] loop2: detected capacity change from 0 to 512 [ 139.316052][ T5460] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.343896][ T5461] EXT4-fs: Invalid sb specification: sb=0x000000000000000eJdebug,jqfmt=vfsold,nobh,barrier,usrjquota="block_validity,errors=remount-ro,, [ 139.362158][ T5460] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.420181][ T5461] EXT4-fs (loop2): Unrecognized mount option "sb=0x000000000000000eJdebug" or missing value [ 139.460824][ T5460] EXT4-fs (loop3): 1 truncate cleaned up [ 139.468638][ T5460] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,journal_ioprio=0x0000000000000006,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 140.741235][ T5461] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 141.826376][ T5504] binder: 5502:5504 ioctl c0306201 200000000080 returned -14 [ 141.894500][ T5504] loop2: detected capacity change from 0 to 512 [ 141.905523][ T5509] loop3: detected capacity change from 0 to 256 [ 141.971842][ T5504] EXT4-fs (loop2): Mount option "commit=0x0000000000000f2a" incompatible with ext2 [ 141.993163][ T5509] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 142.223976][ T5510] binder: 5502:5510 ioctl c0306201 2000000003c0 returned -14 [ 142.837092][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan1: link becomes ready [ 143.031538][ T5535] futex_wake_op: syz.1.354 tries to shift op by 144; fix this program [ 143.405663][ T5546] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 143.503347][ T5551] netlink: 36 bytes leftover after parsing attributes in process `syz.1.358'. [ 143.907767][ T5564] bridge0: port 3(vxlan0) entered blocking state [ 143.916803][ T5564] bridge0: port 3(vxlan0) entered disabled state [ 143.931277][ T5564] device vxlan0 entered promiscuous mode [ 144.827236][ T5577] tipc: Failed to remove unknown binding: 66,0,0/0:2459409215/2459409216 [ 144.857961][ T5582] tipc: Failed to remove unknown binding: 66,0,0/0:951745591/951745593 [ 144.887007][ T5577] tipc: Failed to remove unknown binding: 66,0,0/0:2459409215/2459409216 [ 144.952602][ T5572] loop2: detected capacity change from 0 to 32768 [ 145.019507][ T5572] XFS: noikeep mount option is deprecated. [ 145.184030][ T5593] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 145.223058][ T5587] loop3: detected capacity change from 0 to 40427 [ 145.230337][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.283906][ T5587] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 145.285607][ T5572] XFS (loop2): Mounting V5 Filesystem [ 145.290387][ T5587] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 145.296098][ T5593] CIFS mount error: No usable UNC path provided in device string! [ 145.296098][ T5593] [ 145.317462][ T5587] F2FS-fs (loop3): invalid crc value [ 145.360889][ T5547] chnl_net:caif_netlink_parms(): no params data found [ 145.367953][ T5593] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 145.413789][ T5587] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 145.475386][ T5587] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 145.476243][ T5607] loop4: detected capacity change from 0 to 128 [ 145.482594][ T5587] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 145.502526][ T5572] XFS (loop2): Ending clean mount [ 145.517222][ T5572] XFS (loop2): Quotacheck needed: Please wait. [ 145.579779][ T5607] FAT-fs (loop4): Unrecognized mount option "tz=U*ÏGŽÀ¶uþì+Ó'TC" or missing value [ 145.636078][ T5572] XFS (loop2): Quotacheck: Done. [ 145.688668][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 145.744924][ T5547] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.944116][ T5617] attempt to access beyond end of device [ 145.944116][ T5617] loop3: rw=10241, want=53256, limit=40427 [ 146.395977][ T5547] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.411831][ T5547] device bridge_slave_0 entered promiscuous mode [ 146.511326][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.523624][ T5547] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.544299][ T5547] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.556017][ T4197] attempt to access beyond end of device [ 146.556017][ T4197] loop3: rw=2049, want=45104, limit=40427 [ 146.612002][ T5547] device bridge_slave_1 entered promiscuous mode [ 146.667574][ T4184] XFS (loop2): Unmounting Filesystem [ 146.705609][ T5547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.727362][ T5547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.761193][ T5547] team0: Port device team_slave_0 added [ 146.799042][ T4226] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 146.817282][ T5547] team0: Port device team_slave_1 added [ 146.906422][ T5547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.933583][ T5547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.937510][ T5628] netlink: 44 bytes leftover after parsing attributes in process `syz.3.370'. [ 146.966024][ T5547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.973110][ T5628] netlink: 43 bytes leftover after parsing attributes in process `syz.3.370'. [ 146.993721][ T5547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.001233][ T5547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.027393][ T5547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.062315][ T5547] device hsr_slave_0 entered promiscuous mode [ 147.069307][ T5547] device hsr_slave_1 entered promiscuous mode [ 147.075870][ T5547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.085418][ T5628] netlink: 'syz.3.370': attribute type 5 has an invalid length. [ 147.128337][ T5547] Cannot create hsr debugfs directory [ 147.184642][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.193621][ T5628] netlink: 43 bytes leftover after parsing attributes in process `syz.3.370'. [ 147.898671][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.907433][ T26] Bluetooth: hci4: command 0x041b tx timeout [ 147.929082][ T4226] usb 5-1: config 1 has an invalid interface number: 139 but max is 0 [ 147.958706][ T4226] usb 5-1: config 1 has no interface number 0 [ 147.968619][ T4226] usb 5-1: config 1 interface 139 altsetting 5 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 148.027205][ T4226] usb 5-1: config 1 interface 139 altsetting 5 endpoint 0x6 has invalid wMaxPacketSize 0 [ 148.559338][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.043951][ T4226] usb 5-1: config 1 interface 139 has no altsetting 0 [ 149.063863][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.080444][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.087472][ T5648] netlink: 'syz.4.377': attribute type 1 has an invalid length. [ 149.090065][ T4226] usb 5-1: string descriptor 0 read error: -71 [ 149.096765][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.106472][ T4226] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=ee.02 [ 149.125373][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.125974][ T4470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.159720][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.164442][ T4226] usb 5-1: can't set config #1, error -71 [ 149.212508][ T4226] usb 5-1: USB disconnect, device number 6 [ 149.237093][ T5547] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.257299][ T5659] loop4: detected capacity change from 0 to 2048 [ 149.271070][ T5547] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 149.309644][ T5547] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 149.325938][ T5547] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.359815][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.362170][ T5659] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,user_xattr,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 149.397930][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 149.432599][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.552472][ T5547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.566424][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.575784][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.737566][ T5659] mmap: syz.4.380 (5659) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 149.769414][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.836747][ T21] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 149.877362][ T5547] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.057327][ T21] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.187343][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.217960][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.239115][ T21] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 150.264632][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.269713][ T4468] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.279724][ T4468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.282509][ T5672] binder: BINDER_SET_CONTEXT_MGR already set [ 150.314230][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 150.315035][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.329144][ T2297] net_ratelimit: 1 callbacks suppressed [ 150.329156][ T2297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.343840][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.369573][ T5672] binder: 5671:5672 ioctl 4018620d 200000000040 returned -16 [ 150.378460][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.385626][ T4468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.477619][ T5547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.517752][ T5547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.549910][ T21] usb 4-1: can't set config #1, error -71 [ 150.557142][ T21] usb 4-1: USB disconnect, device number 2 [ 150.574545][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.592955][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.617862][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.647307][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.672526][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.693580][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.853128][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.871960][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.883397][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.893235][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.902911][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.915056][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.926179][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.712488][ T2297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.395090][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.405669][ T2297] Bluetooth: hci4: command 0x0419 tx timeout [ 152.438824][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 152.829105][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.905781][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.929513][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.948308][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.958366][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.980240][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.009388][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.395499][ T5707] loop2: detected capacity change from 0 to 512 [ 154.450784][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.496935][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.513900][ T5707] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 154.528214][ T5707] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.664746][ T5547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.240314][ T5707] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.394: Invalid inode bitmap blk 4 in block_group 0 [ 155.289715][ T5723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 155.300981][ T5707] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,norecovery,mblk_io_submit,quota,nobarrier,grpquota,nombcache,barrier=0x000000000000000c,dioread_nolock,noblock_validity,data_err=ignore,norecovery,,errors=continue. Quota mode: writeback. [ 155.363994][ T4229] net_ratelimit: 11 callbacks suppressed [ 155.364008][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.491853][ T5726] device bond2 entered promiscuous mode [ 156.039203][ T5730] netlink: 'syz.4.400': attribute type 10 has an invalid length. [ 156.062430][ T5730] device geneve0 entered promiscuous mode [ 156.082366][ T5736] loop2: detected capacity change from 0 to 512 [ 156.102228][ T5730] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 156.105746][ T5736] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.126091][ T5740] device pim6reg1 entered promiscuous mode [ 156.307584][ T2297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.396826][ T5748] FAULT_INJECTION: forcing a failure. [ 156.396826][ T5748] name failslab, interval 1, probability 0, space 0, times 1 [ 156.414296][ T5748] CPU: 1 PID: 5748 Comm: syz.3.403 Not tainted syzkaller #0 [ 156.421601][ T5748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.431658][ T5748] Call Trace: [ 156.434925][ T5748] [ 156.437843][ T5748] dump_stack_lvl+0x188/0x250 [ 156.442527][ T5748] ? show_regs_print_info+0x20/0x20 [ 156.447721][ T5748] ? load_image+0x410/0x410 [ 156.452214][ T5748] ? mark_lock+0x94/0x320 [ 156.456528][ T5748] ? __lock_acquire+0x1305/0x7b50 [ 156.461540][ T5748] should_fail+0x383/0x4b0 [ 156.465953][ T5748] should_failslab+0x5/0x20 [ 156.470443][ T5748] slab_pre_alloc_hook+0x51/0xc0 [ 156.475368][ T5748] __kmalloc+0x6b/0x340 [ 156.479508][ T5748] ? skcipher_next_slow+0xfe/0x410 [ 156.484609][ T5748] skcipher_next_slow+0xfe/0x410 [ 156.489535][ T5748] skcipher_walk_next+0x611/0xb90 [ 156.494561][ T5748] crypto_cbc_encrypt+0x2dd/0x3c0 [ 156.499574][ T5748] ? aes_set_key+0xb0/0xb0 [ 156.503982][ T5748] ? crypto_cbc_create+0x190/0x190 [ 156.509091][ T5748] ? encrypted_read+0x761/0xf60 [ 156.513934][ T5748] encrypted_read+0x7fb/0xf60 [ 156.518603][ T5748] ? encrypted_destroy+0x40/0x40 [ 156.523543][ T5748] ? __might_sleep+0xf0/0xf0 [ 156.528154][ T5748] ? read_lock_is_recursive+0x10/0x10 [ 156.533517][ T5748] ? rcu_is_watching+0x11/0xa0 [ 156.538282][ T5748] ? trace_kmalloc_node+0x1f/0xa0 [ 156.543292][ T5748] ? __kmalloc_node+0x261/0x3a0 [ 156.548250][ T5748] ? down_read+0x1aa/0x2e0 [ 156.552675][ T5748] keyctl_read_key+0x292/0x460 [ 156.557438][ T5748] __se_sys_keyctl+0x17f/0xa20 [ 156.562195][ T5748] ? __x64_sys_keyctl+0xc0/0xc0 [ 156.567036][ T5748] ? __context_tracking_exit+0x4c/0x80 [ 156.572485][ T5748] ? __lock_acquire+0x7b50/0x7b50 [ 156.577496][ T5748] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 156.583464][ T5748] ? lock_chain_count+0x20/0x20 [ 156.588307][ T5748] ? lockdep_hardirqs_on+0x94/0x140 [ 156.593492][ T5748] ? __x64_sys_keyctl+0x1c/0xc0 [ 156.598336][ T5748] do_syscall_64+0x4c/0xa0 [ 156.602741][ T5748] ? clear_bhb_loop+0x30/0x80 [ 156.607407][ T5748] ? clear_bhb_loop+0x30/0x80 [ 156.612073][ T5748] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.617961][ T5748] RIP: 0033:0x7f0dbe99b159 [ 156.622402][ T5748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.641995][ T5748] RSP: 002b:00007f0dbcbf3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 156.650396][ T5748] RAX: ffffffffffffffda RBX: 00007f0dbec22fa0 RCX: 00007f0dbe99b159 [ 156.658386][ T5748] RDX: 0000200000000240 RSI: 00000000076ae9b4 RDI: 000000000000000b [ 156.666341][ T5748] RBP: 00007f0dbea3203b R08: 0000000000000000 R09: 0000000000000000 [ 156.674303][ T5748] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 156.682259][ T5748] R13: 00007f0dbec23038 R14: 00007f0dbec22fa0 R15: 00007ffe23421e08 [ 156.690225][ T5748] [ 156.705366][ T5748] trusted_key: encrypted_key: failed to encrypt (-12) [ 156.747554][ T5749] set match dimension is over the limit! [ 157.261504][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.271678][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.349641][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.388068][ T2297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.395980][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.497731][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.518999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.527787][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.575122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.583845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.616109][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.630196][ T5547] device veth0_vlan entered promiscuous mode [ 157.643978][ T5547] device veth1_vlan entered promiscuous mode [ 157.730089][ T5547] device veth0_macvtap entered promiscuous mode [ 157.755229][ T5547] device veth1_macvtap entered promiscuous mode [ 157.799907][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.824867][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.839507][ T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 157.887996][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.936694][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.990774][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.082436][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.099006][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 158.144308][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.197037][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.200721][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.213571][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.235371][ T26] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 158.258894][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.278936][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.323506][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.353989][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.361252][ T26] pvrusb2: Hardware description: Terratec Grabster AV400 [ 158.389025][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.414989][ T26] pvrusb2: ********** [ 158.428982][ T26] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 158.439580][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.450195][ T26] pvrusb2: Important functionality might not be entirely working. [ 158.458207][ T26] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 158.471130][ T5547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.483710][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.495152][ T26] pvrusb2: ********** [ 158.495615][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.527192][ T2297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.528831][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.546414][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.551313][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.565157][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.579482][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.593645][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.595337][ T2424] pvrusb2: Invalid write control endpoint [ 158.605340][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.648890][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.665185][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.702854][ T2424] pvrusb2: Invalid write control endpoint [ 158.711614][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 158.717890][ T5547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.724190][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 158.737437][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 158.747829][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.758189][ T2424] pvrusb2: Device being rendered inoperable [ 158.767072][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.768024][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 158.777815][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.811816][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.812253][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 158.848216][ T5547] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.858453][ T2424] pvrusb2: Attached sub-driver cx25840 [ 158.882811][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 158.894967][ T5547] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.904364][ T5547] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.907194][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 158.915918][ T5547] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.933721][ T5757] netlink: 'syz.3.407': attribute type 21 has an invalid length. [ 158.949146][ T5757] netlink: 156 bytes leftover after parsing attributes in process `syz.3.407'. [ 158.967894][ T7] usb 4-1: USB disconnect, device number 3 [ 159.903297][ T5790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 159.918996][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 159.958339][ T5790] device bond_slave_0 left promiscuous mode [ 159.991484][ T5790] device bond_slave_1 left promiscuous mode [ 159.997483][ T5790] device syz_tun left promiscuous mode [ 160.128208][ T5796] set match dimension is over the limit! [ 160.539065][ C1] net_ratelimit: 21 callbacks suppressed [ 160.539083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.799369][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.885674][ T5789] bond1: option mode: unable to set because the bond device has slaves [ 160.894201][ T5792] netlink: 52 bytes leftover after parsing attributes in process `syz.2.413'. [ 160.907737][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.916259][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.923958][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.942646][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan1: link becomes ready [ 160.983407][ T4470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.022781][ T4470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.034482][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.228765][ T4441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.237036][ T4441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.246025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.438966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.640794][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.991378][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.293490][ T5829] loop5: detected capacity change from 0 to 512 [ 162.320947][ T5829] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 162.338841][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 163.098843][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 163.108840][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 163.118836][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 163.198251][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.206979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.208558][ T5829] System zones: 1-12 [ 163.238544][ T5829] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.349: missing EA_INODE flag [ 163.260715][ T5829] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.349: error while reading EA inode 12 err=-117 [ 163.273437][ T5829] EXT4-fs (loop5): 1 orphan inode deleted [ 163.280726][ T5829] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 163.388568][ T5841] loop2: detected capacity change from 0 to 512 [ 164.302881][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.346072][ T5841] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.440868][ T5841] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.520604][ T5857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.432'. [ 164.550959][ T5857] netlink: 12 bytes leftover after parsing attributes in process `syz.5.432'. [ 164.681841][ T5865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.436'. [ 164.695326][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.730165][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.769881][ T5874] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 164.877409][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.936833][ T5879] netlink: 32 bytes leftover after parsing attributes in process `syz.4.441'. [ 165.744237][ T5888] loop2: detected capacity change from 0 to 512 [ 165.994241][ T5888] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 166.013414][ T5888] System zones: 0-2, 18-18, 34-35 [ 166.038402][ T5888] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.068548][ T5888] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.639015][ C1] net_ratelimit: 1 callbacks suppressed [ 166.639033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.077438][ T25] audit: type=1326 audit(1700006400.359:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.4.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4af8b159 code=0x7ffc0000 [ 167.210300][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.219597][ T25] audit: type=1326 audit(1700006400.399:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.4.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4af8b159 code=0x7ffc0000 [ 167.252090][ T25] audit: type=1326 audit(1700006400.399:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.4.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4af8b159 code=0x7ffc0000 [ 167.346963][ T25] audit: type=1326 audit(1700006400.409:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.4.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf4af8b159 code=0x7ffc0000 [ 167.407554][ T25] audit: type=1326 audit(1700006400.409:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.4.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4af8b159 code=0x7ffc0000 [ 167.438837][ T25] audit: type=1326 audit(1700006400.409:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.4.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4af8b159 code=0x7ffc0000 [ 167.487423][ T25] audit: type=1326 audit(1700006400.409:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.4.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4af8b159 code=0x7ffc0000 [ 167.526408][ T25] audit: type=1326 audit(1700006400.409:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.4.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4af8b159 code=0x7ffc0000 [ 167.586105][ T25] audit: type=1326 audit(1700006400.409:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.4.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf4af8b159 code=0x7ffc0000 [ 167.665494][ T25] audit: type=1326 audit(1700006400.419:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.4.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4af8b159 code=0x7ffc0000 [ 167.754411][ T5926] xt_TCPMSS: Only works on TCP SYN packets [ 168.460780][ T4195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.469373][ T4304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.591589][ T5929] IPVS: dh: FWM 3 0x00000003 - no destination available [ 168.719160][ T5933] device syzkaller0 entered promiscuous mode [ 168.739322][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.775669][ T5938] usb usb8: usbfs: process 5938 (syz.2.460) did not claim interface 0 before use [ 168.788391][ T5938] loop2: detected capacity change from 0 to 256 [ 168.798280][ T5933] tipc: Started in network mode [ 168.805025][ T5933] tipc: Node identity 1eb52c6b8832, cluster identity 4711 [ 168.817579][ T5933] tipc: Enabled bearer , priority 0 [ 168.845091][ T5932] tipc: Resetting bearer [ 168.859992][ T5938] FAT-fs (loop2): Unrecognized mount option "uQask=00000000000000000000264" or missing value [ 168.888053][ T5932] tipc: Disabling bearer [ 169.037156][ T5947] device macsec1 entered promiscuous mode [ 169.071351][ T5947] device virt_wifi0 entered promiscuous mode [ 169.784097][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.348925][ T5966] xt_limit: Overflow, try lower: 1207959552/384 [ 170.706631][ T5971] netlink: 32 bytes leftover after parsing attributes in process `syz.1.470'. [ 170.724219][ T5971] netlink: 32 bytes leftover after parsing attributes in process `syz.1.470'. [ 170.836722][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.892607][ T5976] netlink: 'syz.4.472': attribute type 8 has an invalid length. [ 170.932792][ T5979] xt_connbytes: Forcing CT accounting to be enabled [ 171.134667][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'. [ 171.693140][ T4304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.730316][ T5979] xt_CT: No such helper "netbios-ns" [ 171.761116][ T5988] device bond1 entered promiscuous mode [ 172.049540][ T6002] netlink: 'syz.4.480': attribute type 3 has an invalid length. [ 172.555775][ T5994] loop3: detected capacity change from 0 to 131072 [ 173.270523][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.317926][ T6019] loop5: detected capacity change from 0 to 512 [ 173.329312][ T5994] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 173.337882][ T5994] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 173.348357][ T5994] F2FS-fs (loop3): invalid crc value [ 173.364950][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.487'. [ 173.415024][ T5994] F2FS-fs (loop3): Found nat_bits in checkpoint [ 173.456356][ T6018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.468885][ T6019] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 173.487382][ T5994] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 173.495000][ T5994] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 173.520568][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.531750][ T6018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.568061][ T6018] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 173.577744][ T6019] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.484: corrupted in-inode xattr [ 173.606485][ T6018] bond0 (unregistering): Released all slaves [ 173.729078][ T6019] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.484: couldn't read orphan inode 15 (err -117) [ 173.773082][ T6019] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 173.894882][ T6030] F2FS-fs (loop3): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 174.327369][ T2297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.056179][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.073218][ T4195] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.327974][ T6045] device syzkaller0 entered promiscuous mode [ 175.379775][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.492420][ T6057] netlink: 204 bytes leftover after parsing attributes in process `syz.1.494'. [ 175.581025][ T6059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.527884][ T6070] loop2: detected capacity change from 0 to 256 [ 176.725476][ T2297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.913911][ T6070] FAT-fs (loop2): Directory bread(block 64) failed [ 176.938986][ T6070] FAT-fs (loop2): Directory bread(block 65) failed [ 176.945606][ T6070] FAT-fs (loop2): Directory bread(block 66) failed [ 176.962609][ T6080] using random self ethernet address [ 176.974849][ T6070] FAT-fs (loop2): Directory bread(block 67) failed [ 176.981797][ T6080] using random host ethernet address [ 176.998957][ T6070] FAT-fs (loop2): Directory bread(block 68) failed [ 177.013806][ T6070] FAT-fs (loop2): Directory bread(block 69) failed [ 177.022287][ T6080] using random self ethernet address [ 177.027738][ T6070] FAT-fs (loop2): Directory bread(block 70) failed [ 177.034852][ T6080] using random host ethernet address [ 177.040520][ T6070] FAT-fs (loop2): Directory bread(block 71) failed [ 177.052942][ T6070] FAT-fs (loop2): Directory bread(block 72) failed [ 177.067553][ T6070] FAT-fs (loop2): Directory bread(block 73) failed [ 178.323029][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.331794][ T4195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.340036][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.639416][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.714105][ T4233] attempt to access beyond end of device [ 178.714105][ T4233] loop2: rw=1, want=1292, limit=256 [ 179.128928][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.423778][ T6103] netlink: 'syz.5.512': attribute type 2 has an invalid length. [ 179.431748][ T6110] tipc: Failed to remove unknown binding: 66,0,0/0:3236685792/3236685794 [ 179.497322][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.499345][ T6110] tipc: Failed to remove unknown binding: 66,0,0/0:3236685792/3236685793 [ 179.529218][ T6110] tipc: Failed to remove unknown binding: 66,0,0/0:3236685792/3236685794 [ 179.556051][ T6110] tipc: Failed to remove unknown binding: 66,0,0/0:3236685792/3236685793 [ 179.600950][ C0] bridge0: received packet on macvlan2 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 179.613295][ T6121] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 179.677167][ T6124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.515'. [ 179.829723][ T6129] loop2: detected capacity change from 0 to 1024 [ 180.509430][ T6129] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.611692][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.625290][ T6142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.634244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.777626][ T4229] net_ratelimit: 5 callbacks suppressed [ 181.777641][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.791879][ T2297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.926405][ T2297] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 182.947048][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.125617][ T6179] syz.5.532 uses obsolete (PF_INET,SOCK_PACKET) [ 183.782018][ T4195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.864091][ T2297] usb 4-1: Using ep0 maxpacket: 16 [ 183.989061][ T2297] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.033733][ T2297] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.066853][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.101871][ T6196] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 184.160887][ T6198] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 184.301653][ T2297] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.317415][ T2297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.327552][ T2297] usb 4-1: Product: syz [ 184.337682][ T2297] usb 4-1: Manufacturer: syz [ 184.347794][ T2297] usb 4-1: SerialNumber: syz [ 184.798627][ T6204] loop2: detected capacity change from 0 to 512 [ 184.851867][ T2297] usb 4-1: 0:2 : does not exist [ 184.971327][ T4195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.053151][ T2297] usb 4-1: USB disconnect, device number 4 [ 185.059475][ T6204] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 185.125086][ T6204] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.540: corrupted in-inode xattr [ 185.160572][ T6204] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.540: couldn't read orphan inode 15 (err -117) [ 185.188523][ T6204] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 185.264445][ T6208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.276759][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.319045][ T6208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.351835][ T6208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.369922][ T6209] device syzkaller0 entered promiscuous mode [ 185.682094][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.545'. [ 185.838895][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 185.853381][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 185.884725][ T1108] Bluetooth: hci2: command 0x0406 tx timeout [ 186.169078][ T1108] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 186.390254][ T6234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.551'. [ 186.418877][ T1108] usb 6-1: Using ep0 maxpacket: 32 [ 186.539227][ T1108] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.555047][ T1108] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 186.615781][ T6237] loop3: detected capacity change from 0 to 256 [ 186.665156][ T6237] FAT-fs (loop3): Directory bread(block 64) failed [ 186.678727][ T6237] FAT-fs (loop3): Directory bread(block 65) failed [ 186.690686][ T6237] FAT-fs (loop3): Directory bread(block 66) failed [ 186.697471][ T6237] FAT-fs (loop3): Directory bread(block 67) failed [ 186.708894][ T6237] FAT-fs (loop3): Directory bread(block 68) failed [ 186.715515][ T6237] FAT-fs (loop3): Directory bread(block 69) failed [ 186.729225][ T6237] FAT-fs (loop3): Directory bread(block 70) failed [ 186.739122][ T1108] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 186.760574][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.788936][ T6237] FAT-fs (loop3): Directory bread(block 71) failed [ 186.795727][ T6237] FAT-fs (loop3): Directory bread(block 72) failed [ 186.805757][ T1108] usb 6-1: Product: syz [ 186.810122][ T6237] FAT-fs (loop3): Directory bread(block 73) failed [ 186.817001][ T1108] usb 6-1: Manufacturer: syz [ 186.821723][ T1108] usb 6-1: SerialNumber: syz [ 186.857718][ T1108] usb 6-1: config 0 descriptor?? [ 186.958947][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.016301][ T6248] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 7 (only 8 groups) [ 187.113397][ T1108] usb 6-1: USB disconnect, device number 2 [ 188.124575][ T6265] netlink: 'syz.1.560': attribute type 8 has an invalid length. [ 189.708579][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.566'. [ 189.722051][ T6286] netlink: 44 bytes leftover after parsing attributes in process `syz.4.566'. [ 189.939327][ T4229] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 190.349943][ T4229] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 190.383634][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.669113][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.5.572'. [ 191.260318][ T6313] binder: 6309:6313 ioctl c0306201 200000000080 returned -14 [ 191.739444][ T6287] udc-core: couldn't find an available UDC or it's busy [ 191.753165][ T6287] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 192.709114][ T4229] cxacru_cm: 65 callbacks suppressed [ 192.709134][ T4229] cxacru 4-1:1.0: wrong cm 0xa0 in response to cm 0x91 [ 192.721709][ T4229] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 192.729394][ T4229] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 192.736995][ T4229] cxacru: probe of 4-1:1.0 failed with error -5 [ 192.750313][ T4229] usb 4-1: USB disconnect, device number 5 [ 192.868345][ T6328] bond1: (slave veth3): Enslaving as an active interface with a down link [ 192.880229][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.581'. [ 192.889887][ T6328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.946210][ T6332] loop3: detected capacity change from 0 to 512 [ 193.084243][ T6332] EXT4-fs (loop3): Ignoring removed oldalloc option [ 193.150140][ T6332] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,oldalloc,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 193.337448][ T25] audit: type=1800 audit(1700006426.619:138): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.584" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 193.513680][ T6354] loop2: detected capacity change from 0 to 256 [ 193.538264][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.586'. [ 193.583104][ T6357] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 193.627418][ T6354] FAT-fs (loop2): bogus logical sector size 0 [ 193.633937][ T6357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.662244][ T6354] FAT-fs (loop2): Can't find a valid FAT filesystem [ 194.009227][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.015541][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.313354][ T6372] xt_ipcomp: unknown flags 1D [ 195.894661][ T6378] loop3: detected capacity change from 0 to 2048 [ 196.149284][ T6390] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.452681][ T6375] loop2: detected capacity change from 0 to 512 [ 196.553150][ T6375] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 198.374815][ T6430] loop3: detected capacity change from 0 to 512 [ 198.447632][ T6430] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 198.781119][ T6430] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.609: corrupted in-inode xattr [ 199.031365][ T6430] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.609: couldn't read orphan inode 15 (err -117) [ 199.059453][ T6430] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 201.789636][ T6470] loop2: detected capacity change from 0 to 4096 [ 201.972479][ T6479] device syzkaller0 entered promiscuous mode [ 202.318942][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 204.679817][ T6511] syz.4.639[6511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.680022][ T6511] syz.4.639[6511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.575709][ T6525] loop2: detected capacity change from 0 to 512 [ 205.633361][ T6527] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.638582][ T6529] loop5: detected capacity change from 0 to 164 [ 205.642184][ T6527] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.642245][ T6527] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.665859][ T6527] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.722683][ T6525] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 205.854291][ T6525] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.641: corrupted in-inode xattr [ 205.869816][ T6525] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.641: couldn't read orphan inode 15 (err -117) [ 205.946390][ T6525] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 206.522300][ T6542] loop5: detected capacity change from 0 to 512 [ 207.047860][ T6548] UBIFS error (pid: 6548): cannot open "./file0", error -22 [ 207.059045][ T6542] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 207.079021][ T6542] System zones: 1-12 [ 207.096990][ T6542] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.648: missing EA_INODE flag [ 207.146525][ T6542] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.648: error while reading EA inode 12 err=-117 [ 207.159942][ T6542] EXT4-fs (loop5): 1 orphan inode deleted [ 207.172485][ T6542] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 207.436003][ T25] audit: type=1804 audit(1700006440.719:139): pid=6554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.651" name="/newroot/119/file0" dev="fuse" ino=1 res=1 errno=0 [ 209.816899][ T6586] netlink: 'syz.3.663': attribute type 10 has an invalid length. [ 209.841156][ T6591] netlink: 'syz.1.665': attribute type 3 has an invalid length. [ 209.875672][ T6591] netlink: 666 bytes leftover after parsing attributes in process `syz.1.665'. [ 210.690142][ T6604] loop3: detected capacity change from 0 to 256 [ 211.830950][ T6613] device veth1_macvtap left promiscuous mode [ 212.869542][ T6622] overlayfs: failed to clone upperpath [ 212.922223][ T6624] 9pnet: p9_fd_create_tcp (6624): problem connecting socket to 127.0.0.1 [ 213.240527][ T6629] device syzkaller0 entered promiscuous mode [ 214.476998][ T6630] netlink: 68 bytes leftover after parsing attributes in process `syz.4.674'. [ 215.409091][ T4225] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 217.152072][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.687'. [ 217.329863][ T4225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.397818][ T4225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.518041][ T4225] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.649567][ T4225] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.744518][ T4225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.916679][ T4225] usb 4-1: config 0 descriptor?? [ 217.999690][ T4225] usb 4-1: can't set config #0, error -71 [ 218.039011][ T4225] usb 4-1: USB disconnect, device number 6 [ 218.228178][ T6688] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 218.276308][ T6688] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 218.285523][ T6688] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 218.294405][ T6688] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 218.305037][ T6688] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 218.331214][ T6688] bond3: (slave geneve2): making interface the new active one [ 218.342499][ T6688] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 219.014303][ T6695] kvm: emulating exchange as write [ 219.084978][ T6688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.691'. [ 219.150997][ T4195] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 219.388963][ T4304] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 219.559748][ T4195] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 219.581184][ T4195] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.678028][ T4195] usb 6-1: config 0 descriptor?? [ 219.770776][ T4304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.799105][ T4195] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 219.832269][ T4304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.881353][ T4304] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.895331][ T4304] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.904643][ T4304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.922361][ T4304] usb 3-1: config 0 descriptor?? [ 220.068987][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 220.077959][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 220.089078][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.096942][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.453111][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.529438][ T4304] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 220.609779][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.764830][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.800956][ T4304] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 220.853790][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.185271][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.196183][ T4195] gspca_sunplus: reg_w_riv err -71 [ 221.206291][ T4195] sunplus: probe of 6-1:0.0 failed with error -71 [ 221.213026][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.231825][ T4195] usb 6-1: USB disconnect, device number 3 [ 221.235426][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.254554][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.282324][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.304086][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.317514][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.334666][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.355963][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.366534][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.384781][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.395492][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.451480][ T4304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.478850][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 222.515940][ T4304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.553954][ T4304] usb 3-1: USB disconnect, device number 6 [ 222.701089][ T6727] futex_wake_op: syz.2.702 tries to shift op by 144; fix this program [ 225.025243][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.047843][ T4554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.289279][ T6761] loop3: detected capacity change from 0 to 2048 [ 225.740713][ T6761] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,user_xattr,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 225.999138][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.037905][ T4468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.090854][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.584463][ T6784] loop5: detected capacity change from 0 to 256 [ 226.686077][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.143343][ T4554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.661737][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.763618][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.721'. [ 229.116855][ T6800] device bond_slave_0 entered promiscuous mode [ 229.123101][ T6800] device bond_slave_1 entered promiscuous mode [ 229.130308][ T6800] device bond_slave_0 left promiscuous mode [ 229.136243][ T6800] device bond_slave_1 left promiscuous mode [ 229.517958][ T6806] loop3: detected capacity change from 0 to 512 [ 229.596997][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.608550][ T6800] bond1: (slave vlan0): making interface the new active one [ 229.649219][ T6800] device bond_slave_0 entered promiscuous mode [ 229.655420][ T6800] device bond_slave_1 entered promiscuous mode [ 229.674596][ T6800] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 229.698144][ T6806] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 229.776741][ T6806] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.923954][ T6813] loop5: detected capacity change from 0 to 512 [ 229.947638][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.047586][ T6806] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.724: Invalid inode bitmap blk 4 in block_group 0 [ 230.082567][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 230.647681][ T4471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.682093][ T6806] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,norecovery,mblk_io_submit,quota,nobarrier,grpquota,nombcache,barrier=0x000000000000000c,dioread_nolock,noblock_validity,data_err=ignore,norecovery,,errors=continue. Quota mode: writeback. [ 230.727840][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.766404][ T6813] EXT4-fs warning (device loop5): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 230.844401][ T6813] tipc: New replicast peer: 127.0.0.1 [ 230.855155][ T6813] tipc: Enabled bearer , priority 10 [ 231.759030][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.850501][ T4195] tipc: Node number set to 2525441131 [ 231.904470][ T6839] netlink: 40 bytes leftover after parsing attributes in process `syz.1.736'. [ 232.149164][ T6851] batman_adv: batadv0: Adding interface: dummy0 [ 232.159506][ T6851] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.198398][ T6851] batman_adv: batadv0: Interface activated: dummy0 [ 232.212524][ T6854] netlink: 32 bytes leftover after parsing attributes in process `syz.1.742'. [ 232.316315][ T6859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.753'. [ 232.367042][ T6859] netlink: 'syz.1.753': attribute type 7 has an invalid length. [ 232.583225][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'. [ 232.608405][ T6857] netlink: 36 bytes leftover after parsing attributes in process `syz.4.743'. [ 233.647281][ T25] audit: type=1800 audit(1700006466.929:140): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.756" name=8006 dev="sda1" ino=2050 res=0 errno=0 [ 233.687272][ T6890] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 1701279080 (only 8 groups) [ 233.833327][ T6887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.509276][ T6908] netlink: 36 bytes leftover after parsing attributes in process `syz.5.759'. [ 236.255211][ T6966] device syzkaller0 entered promiscuous mode [ 236.447992][ T6980] FAULT_INJECTION: forcing a failure. [ 236.447992][ T6980] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 236.489455][ T6980] CPU: 0 PID: 6980 Comm: syz.3.773 Not tainted syzkaller #0 [ 236.496774][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.506831][ T6980] Call Trace: [ 236.510149][ T6980] [ 236.513079][ T6980] dump_stack_lvl+0x188/0x250 [ 236.517783][ T6980] ? show_regs_print_info+0x20/0x20 [ 236.522990][ T6980] ? load_image+0x410/0x410 [ 236.527512][ T6980] ? __lock_acquire+0x7b50/0x7b50 [ 236.532544][ T6980] ? __vmalloc_node_range+0x2dd/0x8b0 [ 236.537920][ T6980] ? bpf_jit_binary_alloc+0x120/0x240 [ 236.543334][ T6980] ? bpf_int_jit_compile+0xb2f5/0xc4d0 [ 236.548794][ T6980] ? bpf_prog_select_runtime+0x46f/0x7b0 [ 236.554435][ T6980] should_fail+0x383/0x4b0 [ 236.558866][ T6980] prepare_alloc_pages+0x1e3/0x5b0 [ 236.563986][ T6980] __alloc_pages+0x11b/0x480 [ 236.568587][ T6980] ? zone_statistics+0x170/0x170 [ 236.573542][ T6980] ? alloc_pages+0x452/0x560 [ 236.578147][ T6980] __vmalloc_node_range+0x4b1/0x8b0 [ 236.583382][ T6980] module_alloc+0x81/0x90 [ 236.587718][ T6980] ? bpf_jit_binary_alloc+0x120/0x240 [ 236.593095][ T6980] bpf_jit_binary_alloc+0x120/0x240 [ 236.598319][ T6980] ? bpf_int_jit_compile+0xc4d0/0xc4d0 [ 236.603784][ T6980] bpf_int_jit_compile+0xb2f5/0xc4d0 [ 236.609078][ T6980] ? kfree+0xef/0x2a0 [ 236.613078][ T6980] ? stack_trace_snprint+0xe0/0xe0 [ 236.618214][ T6980] ? emit_bpf_dispatcher+0x1050/0x1050 [ 236.623708][ T6980] bpf_prog_select_runtime+0x46f/0x7b0 [ 236.629174][ T6980] ? bpf_prog_realloc+0x142/0x1c0 [ 236.634208][ T6980] bpf_prepare_filter+0x100e/0x11b0 [ 236.639421][ T6980] ? seccomp_attach_filter+0xbb0/0xbb0 [ 236.644887][ T6980] ? bpf_prog_create+0x1f0/0x1f0 [ 236.649832][ T6980] ? kmemdup+0x3d/0x50 [ 236.653904][ T6980] ? memcpy+0x3c/0x60 [ 236.657904][ T6980] bpf_prog_create_from_user+0x2cc/0x420 [ 236.663547][ T6980] ? seccomp_attach_filter+0xbb0/0xbb0 [ 236.669018][ T6980] do_seccomp+0x808/0x16a0 [ 236.673443][ T6980] ? __lock_acquire+0x7b50/0x7b50 [ 236.678479][ T6980] ? prctl_set_seccomp+0x60/0x60 [ 236.683441][ T6980] ? __secure_computing+0x10d/0x2f0 [ 236.688652][ T6980] do_syscall_64+0x4c/0xa0 [ 236.693071][ T6980] ? clear_bhb_loop+0x30/0x80 [ 236.697754][ T6980] ? clear_bhb_loop+0x30/0x80 [ 236.702438][ T6980] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 236.708337][ T6980] RIP: 0033:0x7f0dbe99b159 [ 236.712760][ T6980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.732366][ T6980] RSP: 002b:00007f0dbcbf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 236.740783][ T6980] RAX: ffffffffffffffda RBX: 00007f0dbec22fa0 RCX: 00007f0dbe99b159 [ 236.748770][ T6980] RDX: 0000200000000240 RSI: 0000000000000008 RDI: 0000000000000001 [ 236.756790][ T6980] RBP: 00007f0dbea3203b R08: 0000000000000000 R09: 0000000000000000 [ 236.764765][ T6980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.772745][ T6980] R13: 00007f0dbec23038 R14: 00007f0dbec22fa0 R15: 00007ffe23421e08 [ 236.780742][ T6980] [ 237.006406][ T6968] Process accounting resumed [ 237.718564][ T7001] netlink: 36 bytes leftover after parsing attributes in process `syz.2.778'. [ 240.013642][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'. [ 240.035175][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.663350][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.057350][ T7039] netlink: 'syz.5.786': attribute type 3 has an invalid length. [ 241.081328][ T7043] tipc: Failed to remove unknown binding: 66,0,0/0:1125129114/1125129116 [ 241.101177][ T7043] tipc: Failed to remove unknown binding: 66,0,0/0:1125129114/1125129115 [ 241.120667][ T7042] xt_connbytes: Forcing CT accounting to be enabled [ 241.136823][ T7043] tipc: Failed to remove unknown binding: 66,0,0/0:1125129114/1125129116 [ 241.165597][ T7043] tipc: Failed to remove unknown binding: 66,0,0/0:1125129114/1125129115 [ 241.241245][ T7042] xt_CT: No such helper "netbios-ns" [ 241.300673][ T7050] FAULT_INJECTION: forcing a failure. [ 241.300673][ T7050] name failslab, interval 1, probability 0, space 0, times 0 [ 241.356218][ T7056] netlink: 'syz.1.795': attribute type 2 has an invalid length. [ 241.383697][ T7050] CPU: 0 PID: 7050 Comm: syz.5.791 Not tainted syzkaller #0 [ 241.391019][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.401084][ T7050] Call Trace: [ 241.404366][ T7050] [ 241.407293][ T7050] dump_stack_lvl+0x188/0x250 [ 241.411981][ T7050] ? show_regs_print_info+0x20/0x20 [ 241.417187][ T7050] ? load_image+0x410/0x410 [ 241.421706][ T7050] ? __lock_acquire+0x7b50/0x7b50 [ 241.426738][ T7050] ? unwind_next_frame+0x11ec/0x1cf0 [ 241.432030][ T7050] should_fail+0x383/0x4b0 [ 241.436463][ T7050] should_failslab+0x5/0x20 [ 241.440966][ T7050] slab_pre_alloc_hook+0x51/0xc0 [ 241.445914][ T7050] __kmalloc+0x6b/0x340 [ 241.450083][ T7050] ? bpf_convert_filter+0x10e/0x51e0 [ 241.455382][ T7050] bpf_convert_filter+0x10e/0x51e0 [ 241.460510][ T7050] ? stack_trace_snprint+0xe0/0xe0 [ 241.465647][ T7050] ? sk_filter_release_rcu+0x110/0x110 [ 241.471137][ T7050] ? kmemdup+0x3d/0x50 [ 241.475213][ T7050] ? memcpy+0x3c/0x60 [ 241.479194][ T7050] ? bpf_prog_realloc+0x142/0x1c0 [ 241.484223][ T7050] bpf_prepare_filter+0xe73/0x11b0 [ 241.489347][ T7050] ? seccomp_attach_filter+0xbb0/0xbb0 [ 241.494820][ T7050] ? bpf_prog_create+0x1f0/0x1f0 [ 241.499768][ T7050] ? kmemdup+0x3d/0x50 [ 241.503844][ T7050] ? memcpy+0x3c/0x60 [ 241.507834][ T7050] bpf_prog_create_from_user+0x2cc/0x420 [ 241.513479][ T7050] ? seccomp_attach_filter+0xbb0/0xbb0 [ 241.518951][ T7050] do_seccomp+0x808/0x16a0 [ 241.523379][ T7050] ? __lock_acquire+0x7b50/0x7b50 [ 241.528417][ T7050] ? prctl_set_seccomp+0x60/0x60 [ 241.533368][ T7050] ? __secure_computing+0x10d/0x2f0 [ 241.538580][ T7050] do_syscall_64+0x4c/0xa0 [ 241.543008][ T7050] ? clear_bhb_loop+0x30/0x80 [ 241.547691][ T7050] ? clear_bhb_loop+0x30/0x80 [ 241.552378][ T7050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.558276][ T7050] RIP: 0033:0x7fad41597159 [ 241.562696][ T7050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.582310][ T7050] RSP: 002b:00007fad3f7ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 241.590732][ T7050] RAX: ffffffffffffffda RBX: 00007fad4181efa0 RCX: 00007fad41597159 [ 241.598706][ T7050] RDX: 0000200000000240 RSI: 0000000000000008 RDI: 0000000000000001 [ 241.606680][ T7050] RBP: 00007fad4162e03b R08: 0000000000000000 R09: 0000000000000000 [ 241.614654][ T7050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.622634][ T7050] R13: 00007fad4181f038 R14: 00007fad4181efa0 R15: 00007fff7e4db6b8 [ 241.630633][ T7050] [ 242.222038][ T7063] xt_CT: No such helper "pptp" [ 242.508847][ T25] audit: type=1326 audit(1700006475.779:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7069 comm="syz.3.799" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dbe99b159 code=0x0 [ 243.399635][ T7079] loop9: detected capacity change from 0 to 7 [ 243.505119][ T7079] Dev loop9: unable to read RDB block 7 [ 243.692333][ T7085] loop_set_status: loop9 (úù) has still dirty pages (nrpages=1) [ 243.728907][ T7079] loop9: unable to read partition table [ 243.734713][ T7079] loop9: partition table beyond EOD, truncated [ 243.961308][ T7079] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 247.197031][ T7132] FAULT_INJECTION: forcing a failure. [ 247.197031][ T7132] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 247.202781][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.814'. [ 247.221985][ T7129] binder: 7127:7129 ioctl 540f 0 returned -22 [ 247.261061][ T7140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.377701][ T7132] CPU: 1 PID: 7132 Comm: syz.2.811 Not tainted syzkaller #0 [ 247.385026][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.395085][ T7132] Call Trace: [ 247.398372][ T7132] [ 247.401314][ T7132] dump_stack_lvl+0x188/0x250 [ 247.406009][ T7132] ? show_regs_print_info+0x20/0x20 [ 247.411221][ T7132] ? load_image+0x410/0x410 [ 247.415734][ T7132] ? __lock_acquire+0x7b50/0x7b50 [ 247.420764][ T7132] ? __vmalloc_node_range+0x2dd/0x8b0 [ 247.426136][ T7132] ? bpf_jit_binary_alloc+0x120/0x240 [ 247.431494][ T7132] ? bpf_int_jit_compile+0xb2f5/0xc4d0 [ 247.436962][ T7132] ? bpf_prog_select_runtime+0x46f/0x7b0 [ 247.442586][ T7132] should_fail+0x383/0x4b0 [ 247.446986][ T7132] prepare_alloc_pages+0x1e3/0x5b0 [ 247.452080][ T7132] __alloc_pages+0x11b/0x480 [ 247.456650][ T7132] ? zone_statistics+0x170/0x170 [ 247.461572][ T7132] ? alloc_pages+0x452/0x560 [ 247.466143][ T7132] __vmalloc_node_range+0x4b1/0x8b0 [ 247.471324][ T7132] module_alloc+0x81/0x90 [ 247.475645][ T7132] ? bpf_jit_binary_alloc+0x120/0x240 [ 247.481003][ T7132] bpf_jit_binary_alloc+0x120/0x240 [ 247.486199][ T7132] ? bpf_int_jit_compile+0xc4d0/0xc4d0 [ 247.491666][ T7132] bpf_int_jit_compile+0xb2f5/0xc4d0 [ 247.496935][ T7132] ? kfree+0xef/0x2a0 [ 247.500907][ T7132] ? stack_trace_snprint+0xe0/0xe0 [ 247.506006][ T7132] ? emit_bpf_dispatcher+0x1050/0x1050 [ 247.511472][ T7132] bpf_prog_select_runtime+0x46f/0x7b0 [ 247.516909][ T7132] ? bpf_prog_realloc+0x142/0x1c0 [ 247.521913][ T7132] bpf_prepare_filter+0x100e/0x11b0 [ 247.527112][ T7132] ? seccomp_attach_filter+0xbb0/0xbb0 [ 247.532551][ T7132] ? bpf_prog_create+0x1f0/0x1f0 [ 247.537471][ T7132] ? kmemdup+0x3d/0x50 [ 247.541519][ T7132] ? memcpy+0x3c/0x60 [ 247.545484][ T7132] bpf_prog_create_from_user+0x2cc/0x420 [ 247.551098][ T7132] ? seccomp_attach_filter+0xbb0/0xbb0 [ 247.556543][ T7132] do_seccomp+0x808/0x16a0 [ 247.560942][ T7132] ? __lock_acquire+0x7b50/0x7b50 [ 247.565949][ T7132] ? prctl_set_seccomp+0x60/0x60 [ 247.570868][ T7132] ? __secure_computing+0x10d/0x2f0 [ 247.576045][ T7132] do_syscall_64+0x4c/0xa0 [ 247.580441][ T7132] ? clear_bhb_loop+0x30/0x80 [ 247.585100][ T7132] ? clear_bhb_loop+0x30/0x80 [ 247.589758][ T7132] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.595629][ T7132] RIP: 0033:0x7f8a3b3db159 [ 247.600024][ T7132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.619632][ T7132] RSP: 002b:00007f8a39633028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 247.628025][ T7132] RAX: ffffffffffffffda RBX: 00007f8a3b662fa0 RCX: 00007f8a3b3db159 [ 247.635975][ T7132] RDX: 0000200000000240 RSI: 0000000000000008 RDI: 0000000000000001 [ 247.643925][ T7132] RBP: 00007f8a3b47203b R08: 0000000000000000 R09: 0000000000000000 [ 247.651891][ T7132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.659861][ T7132] R13: 00007f8a3b663038 R14: 00007f8a3b662fa0 R15: 00007fff000eed78 [ 247.667827][ T7132] [ 248.488915][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.068956][ T4225] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 250.116299][ T7167] ODEBUG: Out of memory. ODEBUG disabled [ 250.358925][ T4225] usb 3-1: Using ep0 maxpacket: 32 [ 250.499497][ T4225] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 250.536951][ T7184] batman_adv: batadv0: Adding interface: ip6gretap1 [ 250.543692][ T7184] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.569781][ T7184] batman_adv: batadv0: Interface activated: ip6gretap1 [ 250.576994][ T7184] batadv0: mtu less than device minimum [ 250.584784][ T7184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.597233][ T7184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.609681][ T7184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.622111][ T7184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.634974][ T7184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.647446][ T7184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.659897][ T7184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.672324][ T7184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.684742][ T7184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.111571][ T4225] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 251.151295][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 251.775969][ T4225] usb 3-1: Product: syz [ 251.793827][ T4225] usb 3-1: Manufacturer: syz [ 251.801227][ T4225] usb 3-1: SerialNumber: syz [ 251.845462][ T7193] loop3: detected capacity change from 0 to 256 [ 251.852491][ T4225] usb 3-1: config 0 descriptor?? [ 251.929383][ T7162] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 251.954650][ T7193] exfat: Deprecated parameter 'namecase' [ 251.979627][ T4225] hub 3-1:0.0: bad descriptor, ignoring hub [ 251.985556][ T4225] hub: probe of 3-1:0.0 failed with error -5 [ 251.998533][ T7193] exfat: Deprecated parameter 'namecase' [ 252.231148][ T7193] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 252.259959][ T13] usb 3-1: USB disconnect, device number 7 [ 252.902198][ T7205] loop2: detected capacity change from 0 to 256 [ 252.942523][ T7193] netlink: 'syz.3.825': attribute type 4 has an invalid length. [ 253.001311][ T7210] 9pnet_virtio: no channels available for device syz [ 253.012041][ T7193] attempt to access beyond end of device [ 253.012041][ T7193] loop3: rw=524288, want=34225520825, limit=256 [ 253.052287][ T7205] tipc: Started in network mode [ 253.057190][ T7205] tipc: Node identity ac14140f, cluster identity 4711 [ 253.084930][ T7193] attempt to access beyond end of device [ 253.084930][ T7193] loop3: rw=0, want=34225520825, limit=256 [ 253.107367][ T25] audit: type=1800 audit(1700006486.389:142): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.825" name="file1" dev="loop3" ino=1048619 res=0 errno=0 [ 253.129346][ T7205] tipc: Enabled bearer , priority 10 [ 253.294230][ T25] audit: type=1804 audit(1700006486.579:143): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.825" name="/newroot/154/file0/file1" dev="loop3" ino=1048619 res=1 errno=0 [ 253.369468][ T7193] exFAT-fs (loop3): hint_cluster is invalid (4278190089) [ 253.377734][ T7193] exFAT-fs (loop3): error, failed to bmap (inode : ffff888054de07e0 iblock : 8, err : -5) [ 253.408731][ T7193] exFAT-fs (loop3): error, invalid access to FAT (entry 0xff000008) [ 253.427796][ T7193] attempt to access beyond end of device [ 253.427796][ T7193] loop3: rw=2049, want=34225520826, limit=256 [ 253.480973][ T7193] Buffer I/O error on dev loop3, logical block 34225520825, lost async page write [ 253.558992][ T7193] attempt to access beyond end of device [ 253.558992][ T7193] loop3: rw=2049, want=34225520827, limit=256 [ 253.597283][ T7193] Buffer I/O error on dev loop3, logical block 34225520826, lost async page write [ 253.637877][ T7193] attempt to access beyond end of device [ 253.637877][ T7193] loop3: rw=2049, want=34225520828, limit=256 [ 253.660457][ T7193] Buffer I/O error on dev loop3, logical block 34225520827, lost async page write [ 253.669811][ T7193] attempt to access beyond end of device [ 253.669811][ T7193] loop3: rw=2049, want=34225520829, limit=256 [ 253.681785][ T7193] Buffer I/O error on dev loop3, logical block 34225520828, lost async page write [ 253.691093][ T7193] attempt to access beyond end of device [ 253.691093][ T7193] loop3: rw=2049, want=34225520830, limit=256 [ 253.704232][ T7193] Buffer I/O error on dev loop3, logical block 34225520829, lost async page write [ 253.719114][ T7193] attempt to access beyond end of device [ 253.719114][ T7193] loop3: rw=2049, want=34225520831, limit=256 [ 253.830360][ T7193] Buffer I/O error on dev loop3, logical block 34225520830, lost async page write [ 254.028591][ T7193] attempt to access beyond end of device [ 254.028591][ T7193] loop3: rw=2049, want=34225520832, limit=256 [ 254.264034][ T7193] Buffer I/O error on dev loop3, logical block 34225520831, lost async page write [ 254.345371][ T26] tipc: Node number set to 2886997007 [ 254.493444][ T7237] FAULT_INJECTION: forcing a failure. [ 254.493444][ T7237] name failslab, interval 1, probability 0, space 0, times 0 [ 254.522604][ T7237] CPU: 1 PID: 7237 Comm: syz.2.839 Not tainted syzkaller #0 [ 254.529918][ T7237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.539977][ T7237] Call Trace: [ 254.543255][ T7237] [ 254.546193][ T7237] dump_stack_lvl+0x188/0x250 [ 254.550883][ T7237] ? show_regs_print_info+0x20/0x20 [ 254.556091][ T7237] ? load_image+0x410/0x410 [ 254.560602][ T7237] ? __lock_acquire+0x7b50/0x7b50 [ 254.565637][ T7237] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 254.571628][ T7237] should_fail+0x383/0x4b0 [ 254.576063][ T7237] should_failslab+0x5/0x20 [ 254.580573][ T7237] slab_pre_alloc_hook+0x51/0xc0 [ 254.585516][ T7237] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 254.591849][ T7237] ? proc_alloc_inode+0x19/0xa0 [ 254.596706][ T7237] kmem_cache_alloc+0x3d/0x280 [ 254.601475][ T7237] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 254.607811][ T7237] proc_alloc_inode+0x19/0xa0 [ 254.612495][ T7237] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 254.618829][ T7237] new_inode_pseudo+0x5f/0x210 [ 254.623609][ T7237] new_inode+0x25/0x1d0 [ 254.627777][ T7237] proc_pid_make_inode+0x20/0x1a0 [ 254.632814][ T7237] proc_pident_instantiate+0x69/0x2a0 [ 254.638202][ T7237] proc_pident_lookup+0x1cb/0x270 [ 254.643244][ T7237] __lookup_slow+0x29d/0x410 [ 254.647844][ T7237] ? lookup_one_len+0x2d0/0x2d0 [ 254.652713][ T7237] ? down_read+0x1aa/0x2e0 [ 254.657140][ T7237] lookup_slow+0x53/0x70 [ 254.661392][ T7237] walk_component+0x314/0x460 [ 254.666083][ T7237] link_path_walk+0x688/0xde0 [ 254.670780][ T7237] ? handle_lookup_down+0x130/0x130 [ 254.675994][ T7237] path_openat+0x28e/0x2fb0 [ 254.680532][ T7237] ? __kasan_slab_alloc+0xa9/0xc0 [ 254.685641][ T7237] ? do_filp_open+0x400/0x400 [ 254.690349][ T7237] do_filp_open+0x1df/0x400 [ 254.694866][ T7237] ? vfs_tmpfile+0x300/0x300 [ 254.699472][ T7237] ? noop_direct_IO+0x10/0x10 [ 254.704166][ T7237] ? _raw_spin_unlock+0x24/0x40 [ 254.709021][ T7237] ? alloc_fd+0x59e/0x650 [ 254.713368][ T7237] do_sys_openat2+0x14b/0x500 [ 254.718047][ T7237] ? __lock_acquire+0x7b50/0x7b50 [ 254.723082][ T7237] ? do_sys_open+0xe0/0xe0 [ 254.727503][ T7237] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 254.733496][ T7237] ? lock_chain_count+0x20/0x20 [ 254.738359][ T7237] __x64_sys_openat+0x135/0x160 [ 254.743219][ T7237] do_syscall_64+0x4c/0xa0 [ 254.747637][ T7237] ? clear_bhb_loop+0x30/0x80 [ 254.752317][ T7237] ? clear_bhb_loop+0x30/0x80 [ 254.757001][ T7237] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.762899][ T7237] RIP: 0033:0x7f8a3b39b98e [ 254.767318][ T7237] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 254.786928][ T7237] RSP: 002b:00007f8a39632f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 254.795350][ T7237] RAX: ffffffffffffffda RBX: 00007f8a396336c0 RCX: 00007f8a3b39b98e [ 254.803331][ T7237] RDX: 0000000000000000 RSI: 00007f8a3b471776 RDI: ffffffffffffff9c [ 254.811317][ T7237] RBP: 00007f8a3b47203b R08: 0000000000000000 R09: 0000000000000000 [ 254.819290][ T7237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.827262][ T7237] R13: 00007f8a3b663038 R14: 00007f8a3b662fa0 R15: 00007fff000eed78 [ 254.835258][ T7237] [ 254.915777][ T7245] loop5: detected capacity change from 0 to 64 [ 255.441624][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.447998][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.658273][ T7257] loop5: detected capacity change from 0 to 2048 [ 255.790391][ T7257] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,block_validity,nobarrier,,errors=continue. Quota mode: writeback. [ 255.845362][ T7257] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.974786][ T7273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.852'. [ 255.993961][ T7273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.852'. [ 256.171346][ T7279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.921604][ T7279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.978919][ T1108] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 258.022047][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.058558][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.091690][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.112991][ T1108] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.122443][ T7306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.861'. [ 258.125260][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.157104][ T1108] usb 4-1: config 0 descriptor?? [ 258.204566][ T7308] device bond2 entered promiscuous mode [ 258.321883][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.865'. [ 258.661322][ T1108] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 258.686874][ T1108] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 259.483744][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 259.557499][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 259.565301][ T7326] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 259.614881][ T7326] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 259.884032][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'. [ 260.004561][ T25] audit: type=1800 audit(1700006749.295:144): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.883" name="UDC" dev="configfs" ino=42943 res=0 errno=0 [ 260.019801][ T7335] configfs-gadget gadget: afunc_bind:1164 Error! [ 260.024956][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'. [ 260.649639][ T7335] udc dummy_udc.0: failed to start g1: -19 [ 260.810597][ T26] usb 4-1: USB disconnect, device number 7 [ 264.491489][ T7371] overlayfs: failed to clone upperpath [ 264.539916][ T7376] netlink: 24 bytes leftover after parsing attributes in process `syz.5.888'. [ 266.593415][ T7396] loop5: detected capacity change from 0 to 256 [ 266.613399][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'. [ 266.741613][ T7400] bridge1: port 1(erspan0) entered blocking state [ 266.808568][ T7400] bridge1: port 1(erspan0) entered disabled state [ 266.894111][ T7400] device erspan0 entered promiscuous mode [ 266.906190][ T7400] bridge1: port 1(erspan0) entered blocking state [ 266.912724][ T7400] bridge1: port 1(erspan0) entered forwarding state [ 268.850324][ T7437] loop3: detected capacity change from 0 to 512 [ 269.582259][ T7429] bond0: (slave veth5): Enslaving as an active interface with a down link [ 269.597767][ T7437] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 269.618928][ T7437] System zones: 1-12 [ 269.646582][ T7437] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.904: missing EA_INODE flag [ 269.648142][ T7442] loop5: detected capacity change from 0 to 128 [ 269.679841][ T7437] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.904: error while reading EA inode 12 err=-117 [ 269.749707][ T7437] EXT4-fs (loop3): 1 orphan inode deleted [ 269.775838][ T7437] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 269.921393][ T7442] FAT-fs (loop5): Unrecognized mount option "tz=U*ÏGŽÀ¶uþì+Ó'TC" or missing value [ 271.471326][ T4227] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 271.496381][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.903'. [ 273.075090][ T4227] usb 6-1: device descriptor read/all, error -71 [ 273.177700][ T7475] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.196526][ T7507] 9pnet_virtio: no channels available for device syz [ 276.112538][ T4195] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.145017][ T7520] UBIFS error (pid: 7520): cannot open "./file0", error -22 [ 276.148076][ T7520] loop3: detected capacity change from 0 to 256 [ 277.421409][ T7541] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 278.331126][ T7556] loop2: detected capacity change from 0 to 1024 [ 278.369576][ T7556] EXT4-fs (loop2): Ignoring removed bh option [ 278.390713][ T7558] loop5: detected capacity change from 0 to 512 [ 278.457176][ T7558] EXT4-fs (loop5): Ignoring removed oldalloc option [ 278.492285][ T7556] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 278.521084][ T7558] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,oldalloc,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 278.689193][ T25] audit: type=1800 audit(1700006767.985:145): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.939" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 278.710525][ T4184] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2812: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 278.892983][ T4184] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /174/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 278.958314][ T4184] EXT4-fs (loop2): Remounting filesystem read-only [ 278.974047][ T4184] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /174/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 279.553113][ T4184] EXT4-fs (loop2): Remounting filesystem read-only [ 279.630131][ T4184] EXT4-fs error (device loop2): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 279.688092][ T4184] EXT4-fs (loop2): Remounting filesystem read-only [ 279.715101][ T7573] loop3: detected capacity change from 0 to 512 [ 279.728845][ T4184] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 279.759713][ T4184] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /174/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 279.796612][ T4184] EXT4-fs (loop2): Remounting filesystem read-only [ 279.815205][ T4184] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /174/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 279.831230][ T7573] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.943: inode has both inline data and extents flags [ 279.850424][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 279.866221][ T4184] EXT4-fs (loop2): Remounting filesystem read-only [ 279.880064][ T7573] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.943: couldn't read orphan inode 15 (err -117) [ 279.889409][ T4184] EXT4-fs error (device loop2): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 279.916420][ T4184] EXT4-fs (loop2): Remounting filesystem read-only [ 279.923021][ T4184] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 279.937774][ T4184] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /174/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 279.960325][ T7573] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 279.961486][ T4184] EXT4-fs (loop2): Remounting filesystem read-only [ 279.980215][ T4184] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /174/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 280.014199][ T4184] EXT4-fs (loop2): Remounting filesystem read-only [ 280.023825][ T4184] EXT4-fs error (device loop2): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 280.044312][ T4184] EXT4-fs (loop2): Remounting filesystem read-only [ 280.050916][ T4184] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 280.065468][ T4184] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /174/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 280.109017][ T4184] EXT4-fs (loop2): Remounting filesystem read-only [ 280.117535][ T4184] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 280.141840][ T4184] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 280.168912][ T4184] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 280.184850][ T4184] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 280.442893][ T4184] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 280.974284][ T4184] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 283.262388][ T7608] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 284.401426][ T7618] pit: kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 284.500851][ T7618] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 284.631990][ T7618] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 284.635736][ T7630] loop3: detected capacity change from 0 to 256 [ 284.640610][ T4184] device syz_tun left promiscuous mode [ 284.667024][ T7618] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 285.133556][ T7630] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 285.288975][ T7630] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 285.369987][ T7630] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 285.385733][ T7618] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 285.397347][ T7618] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 285.406742][ T7618] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 285.419358][ T7618] pit: kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 285.432131][ T7618] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 285.481206][ T7618] pit: kvm: requested 38552 ns i8254 timer period limited to 200000 ns [ 285.508371][ T4471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.671443][ T4471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.806996][ T4471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.978688][ T4471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.448904][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 287.833337][ T7656] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 288.459019][ T7656] tipc: Resetting bearer [ 288.593350][ T7667] xt_CT: No such helper "pptp" [ 288.805558][ T4471] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.070492][ T4471] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.153368][ T4471] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.211158][ T4471] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.313080][ T7688] ceph: No mds server is up or the cluster is laggy [ 290.377987][ T7702] bond0: option mode: unable to set because the bond device has slaves [ 290.438514][ T4471] tipc: Disabling bearer [ 290.468901][ T4471] tipc: Left network mode [ 290.477667][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'. [ 290.525162][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.978'. [ 290.617143][ T7705] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 291.278884][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 291.512820][ T4471] device ip6gretap0 left promiscuous mode [ 291.859046][ T1108] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 292.222612][ T7706] chnl_net:caif_netlink_parms(): no params data found [ 292.239412][ T1108] usb 4-1: config 0 interface 0 has no altsetting 0 [ 292.246419][ T1108] usb 4-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 292.263642][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.289155][ T1108] usb 4-1: config 0 descriptor?? [ 292.297097][ T7706] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.315209][ T7706] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.343844][ T7706] device bridge_slave_0 entered promiscuous mode [ 292.362779][ T7706] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.374276][ T7706] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.386044][ T7706] device bridge_slave_1 entered promiscuous mode [ 292.431326][ T7706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.442636][ T7706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.476031][ T7706] team0: Port device team_slave_0 added [ 292.484465][ T7706] team0: Port device team_slave_1 added [ 292.510984][ T7706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.517933][ T7706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.544538][ T7706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.557064][ T7706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.559141][ T4227] Bluetooth: hci1: command 0x0409 tx timeout [ 292.564566][ T7706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.597267][ T7706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.636541][ T7706] device hsr_slave_0 entered promiscuous mode [ 292.643538][ T7706] device hsr_slave_1 entered promiscuous mode [ 292.650882][ T7706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.658444][ T7706] Cannot create hsr debugfs directory [ 292.773619][ T1108] semitek 0003:1EA7:0907.0004: unknown main item tag 0x4 [ 292.791564][ T1108] semitek 0003:1EA7:0907.0004: hidraw0: USB HID v90.01 Device [HID 1ea7:0907] on usb-dummy_hcd.3-1/input0 [ 292.853592][ T7706] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 292.871430][ T7706] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 292.908533][ T7706] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 292.956456][ T7706] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 292.978133][ T4225] usb 4-1: USB disconnect, device number 8 [ 293.020349][ T4471] device hsr_slave_0 left promiscuous mode [ 293.035157][ T4471] device hsr_slave_1 left promiscuous mode [ 293.043082][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.057475][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.066777][ T4471] device vxlan0 left promiscuous mode [ 293.078170][ T4471] bridge0: port 3(vxlan0) entered disabled state [ 293.092678][ T4471] device bridge_slave_1 left promiscuous mode [ 293.100097][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.117531][ T4471] device bridge_slave_0 left promiscuous mode [ 293.126437][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.323362][ T4471] device bond_slave_0 left promiscuous mode [ 293.329592][ T4471] device bond_slave_1 left promiscuous mode [ 293.351653][ T4471] device veth1_macvtap left promiscuous mode [ 293.358062][ T4471] device veth0_macvtap left promiscuous mode [ 293.418351][ T4471] bond1 (unregistering): (slave vlan0): Releasing active interface [ 293.434011][ T4471] bond1 (unregistering): Released all slaves [ 293.495212][ T4471] team0 (unregistering): Port device team_slave_1 removed [ 293.517390][ T4471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.535160][ T4471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.544981][ T4304] infiniband syz1: ib_query_port failed (-19) [ 293.595573][ T4471] bond0 (unregistering): Released all slaves [ 293.730369][ T4225] bond0 speed is unknown, defaulting to 1000 [ 293.834438][ T7706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.847357][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.861066][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.883256][ T7706] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.922676][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.931590][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.940422][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.947487][ T4441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.955882][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 293.968083][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.976933][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.984025][ T4441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.993601][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.009341][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.038893][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.048248][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.058109][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.071785][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.094691][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.109757][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.132958][ T7706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 294.150994][ T7706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.168910][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.177706][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.193077][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.203911][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.215302][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.422282][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.430543][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.444723][ T7706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.639164][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 294.772317][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 294.787826][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.823784][ T7706] device veth0_vlan entered promiscuous mode [ 294.836855][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.845289][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.855622][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.872056][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.890521][ T7706] device veth1_vlan entered promiscuous mode [ 294.914287][ T7706] device veth0_macvtap entered promiscuous mode [ 294.923483][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 294.935984][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 294.946583][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.962454][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.975729][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 294.998308][ T7706] device veth1_macvtap entered promiscuous mode [ 295.014364][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.036414][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.047138][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.057451][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.068152][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.101004][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.119543][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.129742][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.140439][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.151719][ T7706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.163536][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.178111][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.211113][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.228851][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.238662][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.262980][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.285738][ T7706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.298477][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.322168][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.356167][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.364873][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.385217][ T7706] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.412008][ T7706] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.426298][ T7706] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.454917][ T7706] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.564268][ T4441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.577859][ T4441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.605564][ T5353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 295.624295][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.632208][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.649985][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 295.867643][ T7831] loop5: detected capacity change from 0 to 256 [ 295.893335][ T25] audit: type=1326 audit(1700006785.185:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.6.976" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe606550159 code=0x0 [ 296.595023][ C0] net_ratelimit: 10 callbacks suppressed [ 296.595041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.634739][ T7831] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 296.720035][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 297.494662][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.998'. [ 297.726567][ T7865] netlink: 'syz.3.998': attribute type 5 has an invalid length. [ 297.753735][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.998'. [ 297.829367][ T7877] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 297.841113][ T7877] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 297.849527][ T7877] CPU: 1 PID: 7877 Comm: syz.6.981 Not tainted syzkaller #0 [ 297.856807][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.866852][ T7877] RIP: 0010:dvb_device_open+0xd9/0x360 [ 297.872311][ T7877] Code: 4c 89 e5 48 c1 ed 03 80 7c 1d 00 00 74 08 4c 89 e7 e8 bb 0c 40 fb 4d 8b 2c 24 4d 85 ed 0f 84 08 01 00 00 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 99 0c 40 fb 49 8b 7d 00 e8 b0 d1 ef [ 297.891909][ T7877] RSP: 0018:ffffc900039ff7f0 EFLAGS: 00010202 [ 297.897973][ T7877] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 297.905939][ T7877] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 00000000ffffffff [ 297.913904][ T7877] RBP: 1ffff11005297a43 R08: ffffffff8cfd1cef R09: 1ffffffff19fa39d [ 297.921874][ T7877] R10: dffffc0000000000 R11: fffffbfff19fa39e R12: ffff8880294bd218 [ 297.929845][ T7877] R13: 000000000000000a R14: ffff888029febf58 R15: ffff8880294bd200 [ 297.937814][ T7877] FS: 00007fe6047666c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 297.946739][ T7877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.953321][ T7877] CR2: 00007fe6065392c0 CR3: 000000001fc17000 CR4: 00000000003506e0 [ 297.961293][ T7877] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 297.969255][ T7877] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 297.977225][ T7877] Call Trace: [ 297.980504][ T7877] [ 297.983434][ T7877] chrdev_open+0x585/0x5f0 [ 297.987869][ T7877] ? cd_forget+0x160/0x160 [ 297.992322][ T7877] ? fsnotify_perm+0x3a7/0x560 [ 297.997079][ T7877] ? cd_forget+0x160/0x160 [ 298.001488][ T7877] do_dentry_open+0x7f7/0xf90 [ 298.006179][ T7877] ? vfs_open+0x2b/0x80 [ 298.010324][ T7877] path_openat+0x2718/0x2fb0 [ 298.014896][ T7877] ? finish_lock_switch+0x12d/0x290 [ 298.020082][ T7877] ? __schedule+0x11cb/0x4350 [ 298.024750][ T7877] ? do_filp_open+0x400/0x400 [ 298.029410][ T7877] ? mark_lock+0x94/0x320 [ 298.033719][ T7877] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 298.039688][ T7877] do_filp_open+0x1df/0x400 [ 298.044180][ T7877] ? vfs_tmpfile+0x300/0x300 [ 298.048751][ T7877] ? preempt_schedule_common+0xa5/0xd0 [ 298.054209][ T7877] ? _raw_spin_unlock+0x36/0x40 [ 298.059043][ T7877] ? alloc_fd+0x59e/0x650 [ 298.063358][ T7877] do_sys_openat2+0x14b/0x500 [ 298.068014][ T7877] ? __lock_acquire+0x7b50/0x7b50 [ 298.073025][ T7877] ? do_sys_open+0xe0/0xe0 [ 298.077423][ T7877] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 298.083385][ T7877] ? lock_chain_count+0x20/0x20 [ 298.088223][ T7877] __x64_sys_openat+0x135/0x160 [ 298.093057][ T7877] do_syscall_64+0x4c/0xa0 [ 298.097457][ T7877] ? clear_bhb_loop+0x30/0x80 [ 298.102117][ T7877] ? clear_bhb_loop+0x30/0x80 [ 298.106775][ T7877] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.112649][ T7877] RIP: 0033:0x7fe60651098e [ 298.117048][ T7877] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 298.136636][ T7877] RSP: 002b:00007fe604765b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 298.145031][ T7877] RAX: ffffffffffffffda RBX: 00007fe6047666c0 RCX: 00007fe60651098e [ 298.152987][ T7877] RDX: 0000000000040002 RSI: 00007fe604765c00 RDI: ffffffffffffff9c [ 298.160943][ T7877] RBP: 00007fe604765c00 R08: 0000000000000000 R09: 0000000000000000 [ 298.168894][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 298.176844][ T7877] R13: 00007fe6067d8218 R14: 00007fe6067d8180 R15: 00007ffcf41e93a8 [ 298.184803][ T7877] [ 298.187815][ T7877] Modules linked in: [ 298.192985][ T7877] ---[ end trace 09e17447159aed7d ]--- [ 298.198448][ T7877] RIP: 0010:dvb_device_open+0xd9/0x360 [ 298.204726][ T7877] Code: 4c 89 e5 48 c1 ed 03 80 7c 1d 00 00 74 08 4c 89 e7 e8 bb 0c 40 fb 4d 8b 2c 24 4d 85 ed 0f 84 08 01 00 00 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 99 0c 40 fb 49 8b 7d 00 e8 b0 d1 ef [ 298.224911][ T7877] RSP: 0018:ffffc900039ff7f0 EFLAGS: 00010202 [ 298.231009][ T7877] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 298.231741][ T7865] netlink: 'syz.3.998': attribute type 5 has an invalid length. [ 298.239007][ T7877] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 00000000ffffffff [ 298.239023][ T7877] RBP: 1ffff11005297a43 R08: ffffffff8cfd1cef R09: 1ffffffff19fa39d [ 298.239036][ T7877] R10: dffffc0000000000 R11: fffffbfff19fa39e R12: ffff8880294bd218 [ 298.239049][ T7877] R13: 000000000000000a R14: ffff888029febf58 R15: ffff8880294bd200 [ 298.278555][ T7877] FS: 00007fe6047666c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 298.283104][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.998'. [ 298.287520][ T7877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.287536][ T7877] CR2: 00007fe6065392c0 CR3: 000000001fc17000 CR4: 00000000003506e0 [ 298.287550][ T7877] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 298.287561][ T7877] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 298.287587][ T7877] Kernel panic - not syncing: Fatal exception [ 298.287796][ T7877] Kernel Offset: disabled [ 298.337214][ T7877] Rebooting in 86400 seconds..