last executing test programs: 15m50.532831791s ago: executing program 2 (id=333): userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x798, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) 15m49.27715447s ago: executing program 2 (id=336): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x290e, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x5d, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0xfeffffff) syz_clone(0x4000400, &(0x7f0000000140), 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)="0f0b6f8bb338f483b19a3d82af96a329e51cc735304ac47b171dc3091e1f5ae0b2c1321cecb78b1cf95c2b4c582a9aaa1a539470801c0055a293636ea4a826febd4bd0aa3afdc21bbe8e356b9efd3e06de2b013aea0cdc905198c3f4bff8dddc6b0c17ea4f6fd81244630a77a08df69946b44ec0020517229fdbd22647fff09c8c584a77f1284d7334221cc9a4d968725a4bd81089c0ae80a30ce8491ea792c719f0854e0f6bc18aba8546d2a9a9f0fa7bbe143b334df519db6b999cf9e8") 15m48.947193798s ago: executing program 2 (id=340): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20004004) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000000c0)={0x0, 0xffff8001, {0x55, 0x7, 0x9, {0x4004, 0x7}, {0x2, 0x7}, @period={0xf9fc70437e3b04f2, 0x401, 0x6, 0x2, 0x7, {0x2, 0x9, 0x2, 0x1}, 0x0, 0x0}}, {0x4b03daad564f6c7e, 0x1, 0xce0, {0x9, 0x20}, {0x1000}, @const={0x8, {0x0, 0x7, 0x600, 0x5}}}}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="20c81e0000004d61501d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f00000001c0)={0x4, "77fc2c97826ac7d02b2b72570543afc5311870f59a7f035856c6868212356d1e000bbef1f4653eb973954355161c508b8e293b6ef9216de2b95d2a20cb95aabf", {0x6c5f, 0x7}}) 15m39.251854606s ago: executing program 2 (id=359): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 15m37.180416655s ago: executing program 2 (id=371): r0 = syz_open_dev$loop(&(0x7f0000000380), 0x5, 0x400) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb635773f06ebbeed, 0x11, r0, 0x1529d000) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x4, 0x2d}, 0x18) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 15m36.815873584s ago: executing program 2 (id=365): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x64}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) 15m21.392040337s ago: executing program 32 (id=365): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x64}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) 1m35.193108019s ago: executing program 3 (id=2096): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000500), &(0x7f0000000440)=0x8) syz_open_procfs(0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x182, 0x20010000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x6) socket$netlink(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2002) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1m34.772706939s ago: executing program 3 (id=2101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./myconfig/usb_gadget/g1\x00', 0x1ff) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./myconfig/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='super-speed', 0xb) 1m30.666633898s ago: executing program 3 (id=2107): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000340), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000380), 0x0, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r6) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="000089142460", @ANYRES64=r4], 0xb2) 1m29.392840189s ago: executing program 3 (id=2109): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_generic(0x11, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) ptrace(0x10, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0x4dd49c4f, 0x1}, &(0x7f0000000400)) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) dup(0xffffffffffffffff) 1m27.465174435s ago: executing program 3 (id=2114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000161000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x5b, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x1fc, @loopback, 0x3}, 0x1c) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x200006}, 0x1c) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x30) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000000240)) creat(0x0, 0x0) mkdir(0x0, 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r6, &(0x7f0000000240)='6', 0x1) 1m27.173370893s ago: executing program 3 (id=2116): write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185648, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) r2 = dup2(r1, r1) read$FUSE(r2, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) write$vhost_msg_v2(r2, &(0x7f0000000380)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, 0x0) syz_io_uring_submit(r6, r7, 0x0, 0x0) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 1m11.743196476s ago: executing program 33 (id=2116): write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185648, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) r2 = dup2(r1, r1) read$FUSE(r2, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) write$vhost_msg_v2(r2, &(0x7f0000000380)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, 0x0) syz_io_uring_submit(r6, r7, 0x0, 0x0) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 30.1875274s ago: executing program 0 (id=2227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "58090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}]}]}}}}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x7, 0x7) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 25.493899364s ago: executing program 0 (id=2232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x64eb2000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) iopl(0x3) setgroups(0x0, 0x0) getgroups(0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 21.560132468s ago: executing program 4 (id=2239): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) r0 = gettid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) fdatasync(r2) ftruncate(r2, 0x5) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) 20.093108204s ago: executing program 0 (id=2241): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, 0x0, 0x80) r6 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000059c0)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005780), 0x0, &(0x7f0000005940)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50, 0xe20294614ad50b4}, 0x40091) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{0x1002, 0x8, 0xfffd, 0x3037}, 'syz1\x00', 0x22}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x35, {0x9, 0xd, 0x2040000, 0x7fff, 0x14b, 0xfffffffe}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000d40)={[{@usrquota}, {@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@errors_remount}, {@init_itable, 0x0}, {@nodiscard}, {@journal_dev={'journal_dev', 0x3d, 0x10}}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@debug}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_ignore}], [], 0x2c}, 0x1, 0x524, &(0x7f00000011c0)="$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") 16.900055621s ago: executing program 5 (id=2243): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000500), &(0x7f0000000440)=0x8) syz_open_procfs(0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x182, 0x20010000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) socket$inet(0x2, 0x1, 0x6) socket$netlink(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 16.761199604s ago: executing program 4 (id=2244): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@init_itable}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") r0 = syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000080)={[0x2]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r1, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5352, 0x8000, 0x2000, 0x99}, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8bcd5ffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x6a, &(0x7f0000000400)=""/106, 0x41000}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, 0x0, 0xfe) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 15.601681123s ago: executing program 4 (id=2245): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0xc) r3 = fsopen(&(0x7f00000006c0)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 14.133214888s ago: executing program 0 (id=2247): mkdir(&(0x7f0000000000)='./trace\x00', 0x16c) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x40, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) write(r0, &(0x7f0000000680)='1', 0x1) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffffeff06e1648ae40868586272365ffffffffffff50503b50505000000000000000ad4900640001000002"], 0x5d) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './trace/file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000014) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x8002, 0x8, 0x5}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x4004800) 12.802934831s ago: executing program 4 (id=2249): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x103902) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 11.425547433s ago: executing program 5 (id=2251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) process_madvise(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) r4 = socket$inet6(0xa, 0x1, 0x100) listen(r4, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x3, &(0x7f0000000bc0)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000100)="e0", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 9.181871588s ago: executing program 5 (id=2253): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@init_itable}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") r0 = syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000080)={[0x2]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r1, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5352, 0x8000, 0x2000, 0x99}, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8bcd5ffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x6a, &(0x7f0000000400)=""/106, 0x41000}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, 0x0, 0xfe) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 7.656965384s ago: executing program 1 (id=2255): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e23, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x2800, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$eJzKKC4s5mdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//wHCY0w==") chdir(&(0x7f0000000ac0)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 6.590853291s ago: executing program 1 (id=2256): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, 0xffffffffffffffff, 0x8001}}, 0x48) syz_io_uring_setup(0x3bd4, &(0x7f00000003c0)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), 0x0, 0x0) dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x38, &(0x7f0000000440)=[@in6={0xa, 0x4e20, 0xfffffff9, @private0, 0x7}, @in6={0xa, 0x4e20, 0x7953, @mcast2, 0x10}]}, &(0x7f0000000240)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0xf7fffff9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000600)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6.530909462s ago: executing program 4 (id=2257): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0xc) r3 = fsopen(&(0x7f00000006c0)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 6.246928929s ago: executing program 1 (id=2258): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x2b, 0x0, @private1={0xfc, 0x1, '\x00', 0xff}, @local, {[@routing={0x3b, 0x0, 0x2, 0x0, 0x700}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) fremovexattr(0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000380)=0x6) sched_setscheduler(r1, 0x3, &(0x7f0000000000)=0x3) r4 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, 0x0, &(0x7f0000000780)) setns(0xc9, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, 0x0, 0x44014) listen(r0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) shutdown(r6, 0x0) 4.930940161s ago: executing program 0 (id=2259): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000500), &(0x7f0000000440)=0x8) syz_open_procfs(0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x182, 0x20010000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x6) socket$netlink(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 3.833087337s ago: executing program 1 (id=2260): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21", 0x25}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 3.218488612s ago: executing program 5 (id=2261): r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000200)={0x200000000000000, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000480)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x100}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0x0, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.86793954s ago: executing program 4 (id=2262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0) read(r3, &(0x7f0000000100), 0x1000) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000001c0)={0x0, 0xfffffd10, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000000000000081000000030b47026c26236925000400ff7f0000bd2dca8a9848a3c728f1c4fdffffffdc1338d5e801e0b009000000000100005ae5e8458f58acbb0051a9098383de0dd7d8", 0x55}], 0x1}, 0x20000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) 2.613713987s ago: executing program 0 (id=2263): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='dummy_udc.0\n', 0xc) write(r5, &(0x7f00000004c0)='\n', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) 2.612239187s ago: executing program 1 (id=2264): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x844) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$squashfs(&(0x7f0000000480), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1c0, &(0x7f00000009c0)="$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") sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x48045) 1.616336101s ago: executing program 5 (id=2265): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x942) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x14, r3, 0x1, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000696000/0x1000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f000068d000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$evdev(r1, &(0x7f0000000000)=[{{0x0, 0xea60}, 0x0, 0x1, 0x2}], 0xfe72) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xffffffff, 0x0, 0x3231564e, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x400000}], 0x0, 0x0, 0x0, 0x0, 0x4}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x48, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.34608ms ago: executing program 1 (id=2266): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000500), &(0x7f0000000440)=0x8) syz_open_procfs(0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x182, 0x20010000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x6) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 0s ago: executing program 5 (id=2267): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x80000) r5 = fcntl$dupfd(r3, 0x0, r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x10000014}) r6 = gettid() kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r5, &(0x7f0000000840)={r4, r5, 0x8}) setpgid(r0, r6) kernel console output (not intermixed with test programs): ed to 255 [ 179.525991][ T6807] hfsplus: invalid length 32517 has been corrected to 255 [ 179.640718][ T6831] hfsplus: invalid length 32517 has been corrected to 255 [ 181.186480][ T6831] hfsplus: invalid length 32517 has been corrected to 255 [ 181.194884][ T6831] hfsplus: b-tree write err: -5, ino 2 [ 182.042405][ T1322] hfsplus: b-tree write err: -5, ino 25 [ 182.097641][ T1322] hfsplus: b-tree write err: -5, ino 4 [ 182.135651][ T1322] hfsplus: b-tree write err: -5, ino 2 [ 182.192512][ T6848] loop0: detected capacity change from 0 to 128 [ 182.312996][ T5761] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 182.352918][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 182.680989][ T6857] syz.0.244 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 183.632047][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'. [ 185.251514][ T6879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.259346][ T6879] IPv6: NLM_F_CREATE should be set when creating new route [ 185.336496][ T6879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.253'. [ 185.611646][ T6879] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 185.959292][ T6879] bridge1: entered promiscuous mode [ 186.302403][ T6890] loop0: detected capacity change from 0 to 1024 [ 186.336636][ T6890] EXT4-fs: Ignoring removed bh option [ 186.366571][ T6890] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 186.414868][ T6890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.532137][ T6890] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.446888][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 187.536036][ T6909] bridge0: port 3(team0) entered disabled state [ 187.543073][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.550693][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.147681][ T6921] syz.1.263 uses obsolete (PF_INET,SOCK_PACKET) [ 189.503750][ T6929] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by " [ 190.530638][ T6933] netlink: 'syz.1.266': attribute type 1 has an invalid length. [ 190.989085][ T6944] process 'syz.3.267' launched '/dev/fd/3' with NULL argv: empty string added [ 191.972318][ T6933] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.050467][ T6933] bond2: (slave bond3): making interface the new active one [ 192.077050][ T6933] bond2: (slave bond3): Enslaving as an active interface with an up link [ 192.095319][ T6947] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 193.100647][ T6958] input: syz1 as /devices/virtual/input/input5 [ 194.185545][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 194.405795][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 194.417384][ T8] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 194.456198][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.474237][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.480976][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.504192][ T8] usb 1-1: config 0 has no interface number 0 [ 194.515857][ T8] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 194.535886][ T8] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 194.552526][ T8] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 194.570872][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.600958][ T8] usb 1-1: config 0 descriptor?? [ 194.620994][ T8] ldusb 1-1:0.55: Interrupt in endpoint not found [ 194.663352][ T6977] syz_tun: entered promiscuous mode [ 194.706184][ T6977] vlan2: entered promiscuous mode [ 195.628915][ T8] usb 1-1: USB disconnect, device number 6 [ 196.575068][ T5085] Bluetooth: hci2: command 0x0406 tx timeout [ 196.595768][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 196.603609][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 198.658969][ T6995] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 198.671779][ T6995] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 199.726604][ T5778] Bluetooth: hci1: unexpected event for opcode 0x0023 [ 202.397267][ T7021] unsupported nlmsg_type 40 [ 204.315779][ T5778] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 204.325133][ T5778] Bluetooth: hci1: Injecting HCI hardware error event [ 204.338141][ T5778] Bluetooth: hci1: hardware error 0x00 [ 206.119946][ T7045] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.526066][ T5778] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 206.906600][ T7047] netlink: 'syz.1.296': attribute type 1 has an invalid length. [ 206.983968][ T7033] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 208.363956][ T7047] bridge1: entered promiscuous mode [ 208.399347][ T7047] bond4: (slave bridge1): making interface the new active one [ 208.443228][ T7047] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 208.537819][ T7050] bridge2: entered promiscuous mode [ 208.566068][ T7050] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 209.475629][ T2183] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 209.550454][ T7081] 0: reclassify loop, rule prio 0, protocol 03 [ 209.675550][ T2183] usb 1-1: Using ep0 maxpacket: 8 [ 209.704257][ T2183] usb 1-1: config 0 has no interfaces? [ 209.725581][ T2183] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 209.734693][ T2183] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.766889][ T2183] usb 1-1: config 0 descriptor?? [ 212.459438][ T2183] usb 1-1: USB disconnect, device number 7 [ 216.290823][ T7133] loop3: detected capacity change from 0 to 512 [ 216.306323][ T7133] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 216.332578][ T7133] EXT4-fs (loop3): 1 truncate cleaned up [ 216.557026][ T7133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.331611][ T7143] syzkaller0: entered promiscuous mode [ 217.388152][ T7143] syzkaller0: entered allmulticast mode [ 217.885282][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.135667][ T28] audit: type=1800 audit(1789052904.301:7): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.329" name="bus" dev="ramfs" ino=11475 res=0 errno=0 [ 221.212227][ T7183] loop0: detected capacity change from 0 to 2048 [ 221.384369][ T7183] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.731155][ T7189] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 222.313896][ T28] audit: type=1800 audit(1789052906.391:8): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.332" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 222.540911][ T7196] tipc: Started in network mode [ 222.546411][ T7196] tipc: Node identity ca3443dc65d5, cluster identity 4711 [ 222.554153][ T7196] tipc: Enabled bearer , priority 0 [ 222.568398][ T7196] syzkaller0: entered promiscuous mode [ 222.573910][ T7196] syzkaller0: entered allmulticast mode [ 222.623958][ T7196] tipc: Resetting bearer [ 222.644391][ T7195] tipc: Resetting bearer [ 222.709197][ T7195] tipc: Disabling bearer [ 222.870411][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.341'. [ 222.919201][ T7209] bridge2: port 1(veth3) entered blocking state [ 222.926152][ T7209] bridge2: port 1(veth3) entered disabled state [ 222.932677][ T7209] veth3: entered allmulticast mode [ 222.939832][ T7209] veth3: entered promiscuous mode [ 222.999053][ T7209] bridge2: port 2(veth0_to_bond) entered blocking state [ 223.013628][ T7209] bridge2: port 2(veth0_to_bond) entered disabled state [ 223.021202][ T7209] veth0_to_bond: entered allmulticast mode [ 223.028842][ T7209] veth0_to_bond: entered promiscuous mode [ 223.055700][ T2183] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 223.109710][ T7210] bridge2: port 3(veth5) entered blocking state [ 223.120232][ T7210] bridge2: port 3(veth5) entered disabled state [ 223.128406][ T7210] veth5: entered allmulticast mode [ 223.140589][ T7210] veth5: entered promiscuous mode [ 223.270043][ T2183] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.285574][ T2183] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 223.320564][ T2183] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 223.382225][ T2183] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.398515][ T2183] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 223.410112][ T2183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.307214][ T7222] loop3: detected capacity change from 0 to 2048 [ 224.333506][ T7222] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.643933][ T7230] ip_tables: iptables: counters copy to user failed while replacing table [ 227.067878][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 232.089654][ T7267] xt_CT: You must specify a L4 protocol and not use inversions on it [ 232.297844][ T2183] usb 3-1: USB disconnect, device number 3 [ 238.425725][ T7322] netlink: 184 bytes leftover after parsing attributes in process `syz.0.367'. [ 238.471199][ T7322] bond0: entered allmulticast mode [ 238.489663][ T7322] bond_slave_0: entered allmulticast mode [ 238.505647][ T7322] bond_slave_1: entered allmulticast mode [ 240.775718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 241.356506][ T7353] tipc: Enabled bearer , priority 0 [ 241.366573][ T7353] syzkaller0: entered promiscuous mode [ 241.372081][ T7353] syzkaller0: entered allmulticast mode [ 241.426208][ T7353] tipc: Resetting bearer [ 241.446285][ T7352] tipc: Resetting bearer [ 241.487901][ T7352] tipc: Disabling bearer [ 245.110829][ T7371] bond1: option use_carrier: invalid value (5) [ 245.140089][ T7371] bond1 (unregistering): Released all slaves [ 245.192490][ T7378] bridge0: port 3(ip6gretap0) entered blocking state [ 245.199442][ T7378] bridge0: port 3(ip6gretap0) entered disabled state [ 245.206371][ T7378] ip6gretap0: entered allmulticast mode [ 245.212769][ T7378] ip6gretap0: entered promiscuous mode [ 245.219505][ T7378] bridge0: port 3(ip6gretap0) entered blocking state [ 245.226279][ T7378] bridge0: port 3(ip6gretap0) entered forwarding state [ 248.271376][ T7394] loop3: detected capacity change from 0 to 32768 [ 248.318558][ T7394] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 248.466100][ T7394] XFS (loop3): Ending clean mount [ 250.006113][ T7411] ip_tables: iptables: counters copy to user failed while replacing table [ 250.304119][ T5770] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 251.252198][ T7422] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 252.246152][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.255958][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.264330][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.397707][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.408661][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 252.418081][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 252.871009][ T7432] loop0: detected capacity change from 0 to 512 [ 252.967446][ T7432] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 253.012300][ T7432] System zones: 1-12 [ 253.045057][ T7432] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.404: missing EA_INODE flag [ 253.062141][ T7432] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.404: error while reading EA inode 12 err=-117 [ 253.082662][ T7432] EXT4-fs (loop0): 1 orphan inode deleted [ 253.096957][ T7432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.391729][ T7427] chnl_net:caif_netlink_parms(): no params data found [ 254.080944][ T7427] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.099298][ T7427] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.130679][ T7427] bridge_slave_0: entered allmulticast mode [ 254.161821][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.175678][ T7427] bridge_slave_0: entered promiscuous mode [ 254.208618][ T7427] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.220696][ T7427] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.244231][ T7427] bridge_slave_1: entered allmulticast mode [ 254.427101][ T7427] bridge_slave_1: entered promiscuous mode [ 254.445785][ T7453] tipc: Started in network mode [ 254.451473][ T7453] tipc: Node identity 4, cluster identity 4711 [ 254.503376][ T7453] tipc: Node number set to 4 [ 254.535880][ T5780] Bluetooth: hci3: command tx timeout [ 254.542193][ T7427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.656903][ T7427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.211811][ T7427] team0: Port device team_slave_0 added [ 255.257365][ T7427] team0: Port device team_slave_1 added [ 255.300668][ T7427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.307819][ T7427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.360921][ T7427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.375315][ T7427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.389209][ T7427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.446404][ T7427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.675984][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.682302][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.693104][ T5778] Bluetooth: hci3: command tx timeout [ 256.776874][ T7427] hsr_slave_0: entered promiscuous mode [ 256.797394][ T7427] hsr_slave_1: entered promiscuous mode [ 256.822393][ T7427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.845880][ T7427] Cannot create hsr debugfs directory [ 257.270660][ T7474] netlink: 32 bytes leftover after parsing attributes in process `syz.3.414'. [ 258.181180][ T7427] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 258.212374][ T7427] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 258.266172][ T7427] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 258.300417][ T7427] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 259.055572][ T5780] Bluetooth: hci3: command tx timeout [ 259.074235][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.419'. [ 259.327476][ T7427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.383344][ T7495] bond1: entered promiscuous mode [ 259.435699][ T7495] bond1: entered allmulticast mode [ 259.491934][ T7427] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.587268][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.594440][ T5869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.687309][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.694503][ T5869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.829350][ T7498] x86/PAT: syz.0.422:7498 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 260.363113][ T28] audit: type=1800 audit(1789052944.531:9): pid=7507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.424" name="ipv4_port" dev="configfs" ino=12197 res=0 errno=0 [ 261.013439][ T7427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.085913][ T5780] Bluetooth: hci3: command tx timeout [ 261.399292][ T7524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.420814][ T7524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.469478][ T7427] veth0_vlan: entered promiscuous mode [ 262.492620][ T7427] veth1_vlan: entered promiscuous mode [ 262.558196][ T7427] veth0_macvtap: entered promiscuous mode [ 262.586077][ T7427] veth1_macvtap: entered promiscuous mode [ 262.605051][ T7427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.615619][ T7427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.625684][ T7427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.636197][ T7427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.646395][ T7427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.675684][ T7427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.709941][ T7427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.731538][ T7427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.747309][ T7427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.388759][ T7427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.425619][ T7427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.451692][ T7427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.495554][ T7427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.525535][ T7427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.545579][ T7427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.565625][ T7427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.585674][ T7427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.617037][ T7427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.657289][ T7427] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.681120][ T7427] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.708970][ T7427] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.753241][ T7427] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.049246][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.099199][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.255350][ T5879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.296226][ T5879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.935502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 266.549200][ T7566] tipc: Enabled bearer , priority 0 [ 266.569826][ T7566] syzkaller0: entered promiscuous mode [ 266.585798][ T7566] syzkaller0: entered allmulticast mode [ 266.717823][ T7566] tipc: Resetting bearer [ 266.767180][ T7565] tipc: Resetting bearer [ 266.876456][ T7565] tipc: Disabling bearer [ 267.184845][ T7570] loop0: detected capacity change from 0 to 512 [ 267.216915][ T7570] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 267.318812][ T7573] loop3: detected capacity change from 0 to 2048 [ 267.521921][ T7573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.935520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 270.696121][ T7590] Bluetooth: MGMT ver 1.22 [ 271.905509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 272.249378][ T7595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.652666][ T7595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.448'. [ 272.667410][ T7595] bond2: entered promiscuous mode [ 272.704641][ T7595] dummy0: entered promiscuous mode [ 272.732726][ T7595] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 273.998008][ T7619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.886459][ T7637] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 277.077494][ T6190] IPVS: starting estimator thread 0... [ 277.205575][ T7657] IPVS: using max 23 ests per chain, 55200 per kthread [ 277.221891][ T7665] syzkaller0: entered promiscuous mode [ 277.228096][ T7665] syzkaller0: entered allmulticast mode [ 277.332876][ T7662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.265384][ T7689] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 281.199447][ T7671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.500535][ T7697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.499308][ T7706] loop3: detected capacity change from 0 to 512 [ 282.550731][ T7706] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 282.617513][ T7709] Cannot find add_set index 0 as target [ 283.243424][ T7706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.306679][ T7706] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.052741][ T7718] netlink: 32 bytes leftover after parsing attributes in process `syz.0.474'. [ 284.062195][ T7718] bond0: left allmulticast mode [ 284.067174][ T7718] bond_slave_0: left allmulticast mode [ 284.072661][ T7718] bond_slave_1: left allmulticast mode [ 284.095222][ T1128] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 284.337780][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.772241][ T7726] loop3: detected capacity change from 0 to 4096 [ 284.782971][ T7726] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 284.841122][ T7726] ntfs3: loop3: Failed to load $Extend (-22). [ 284.847326][ T7726] ntfs3: loop3: Failed to initialize $Extend. [ 284.987865][ T7727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.895650][ T7739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.614112][ T7751] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 288.749191][ T5809] IPVS: starting estimator thread 0... [ 288.846004][ T7752] IPVS: using max 18 ests per chain, 43200 per kthread [ 292.486257][ T7778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.655482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 297.095665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 299.215532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 302.097501][ T7829] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7427] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7829] [ 303.235417][ T7839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.335651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 307.981314][ T28] audit: type=1800 audit(1789052992.151:10): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.523" name="bus" dev="ramfs" ino=13757 res=0 errno=0 [ 308.331601][ T7896] netlink: 596 bytes leftover after parsing attributes in process `syz.3.528'. [ 309.760131][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 309.800258][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.209493][ T7906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.576063][ T7911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.812250][ T7962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.884287][ T7966] netdevsim netdevsim0: loading /lib/firmware// failed with error -22 [ 315.893076][ T7966] netdevsim netdevsim0: Direct firmware load for / failed with error -22 [ 315.901696][ T7966] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 317.789700][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.806160][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.042484][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.551'. [ 318.142443][ T7980] vlan2: entered allmulticast mode [ 318.162180][ T7980] bridge2: entered allmulticast mode [ 318.178802][ T7983] bridge2: port 1(erspan0) entered blocking state [ 318.198770][ T7983] bridge2: port 1(erspan0) entered disabled state [ 318.205403][ T7983] erspan0: entered allmulticast mode [ 318.270548][ T7983] erspan0: entered promiscuous mode [ 318.296833][ T7983] bridge2: port 1(erspan0) entered blocking state [ 318.303454][ T7983] bridge2: port 1(erspan0) entered forwarding state [ 318.836006][ T5843] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 319.077896][ T5843] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 319.126634][ T5843] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 319.141944][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.160961][ T5843] usb 1-1: Product: syz [ 319.165170][ T5843] usb 1-1: Manufacturer: syz [ 319.175878][ T5843] usb 1-1: SerialNumber: syz [ 320.509003][ T7995] netlink: 'syz.3.554': attribute type 11 has an invalid length. [ 322.900604][ T5843] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 322.911360][ T5843] usb 1-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 322.938479][ T5843] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 322.979236][ T5843] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 323.038511][ T5843] usb 1-1: USB disconnect, device number 8 [ 323.200992][ T8010] udevd[8010]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.215866][ T8030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.018941][ T8068] netlink: 'syz.1.577': attribute type 4 has an invalid length. [ 331.118130][ T8072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.208359][ T8074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.687185][ T8135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.021612][ T8146] loop0: detected capacity change from 0 to 1024 [ 339.061454][ T8146] hfsplus: unable to find HFS+ superblock [ 339.600777][ T8010] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 346.856350][ T8196] netlink: 80 bytes leftover after parsing attributes in process `syz.1.617'. [ 347.549150][ T5808] IPVS: starting estimator thread 0... [ 347.645595][ T8201] IPVS: using max 19 ests per chain, 45600 per kthread [ 348.603752][ T8214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.599053][ T8286] netlink: 80 bytes leftover after parsing attributes in process `syz.0.635'. [ 360.435806][ T8306] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.727942][ T8339] netlink: 80 bytes leftover after parsing attributes in process `syz.4.646'. [ 364.903967][ T8351] fuse: Bad value for 'fd' [ 364.979542][ T8354] bond_slave_0: entered promiscuous mode [ 364.985692][ T8354] bond_slave_1: entered promiscuous mode [ 365.015406][ T8354] vlan2: entered promiscuous mode [ 365.024200][ T8354] bond0: entered promiscuous mode [ 368.882399][ T8386] bridge0: port 3(ip6gretap0) entered blocking state [ 368.889493][ T8386] bridge0: port 3(ip6gretap0) entered disabled state [ 368.896505][ T8386] ip6gretap0: entered allmulticast mode [ 368.902811][ T8386] ip6gretap0: entered promiscuous mode [ 368.908674][ T8386] bridge0: port 3(ip6gretap0) entered blocking state [ 368.915412][ T8386] bridge0: port 3(ip6gretap0) entered forwarding state [ 374.025900][ T8421] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8432] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8421] [ 376.489210][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 378.204349][ T8487] syzkaller0: entered promiscuous mode [ 378.213359][ T8487] syzkaller0: entered allmulticast mode [ 379.286301][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.292764][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.287467][ T8519] netlink: 'syz.1.694': attribute type 11 has an invalid length. [ 384.174385][ T8523] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 384.293679][ T8506] syz.0.691 (8506): drop_caches: 2 [ 384.321075][ T8523] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 387.553121][ T8556] loop0: detected capacity change from 0 to 1024 [ 387.883404][ T8556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.165423][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.800261][ T8599] tipc: Enabling of bearer rejected, failed to enable media [ 392.064915][ T8607] overlayfs: failed to clone upperpath [ 394.748983][ T8601] input: syz0 as /devices/virtual/input/input7 [ 395.532994][ T8625] jffs2: notice: (8625) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 397.745805][ T8641] overlayfs: missing 'lowerdir' [ 397.767011][ T8641] overlayfs: failed to clone lowerpath [ 400.308333][ T8658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.708929][ T8661] loop0: detected capacity change from 0 to 512 [ 403.276991][ T8682] overlayfs: failed to clone lowerpath [ 403.317687][ T28] audit: type=1326 audit(1789053087.481:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.0.741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37339e159 code=0x7ffc0000 [ 403.384351][ T28] audit: type=1326 audit(1789053087.481:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.0.741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37339e159 code=0x7ffc0000 [ 403.515595][ T28] audit: type=1326 audit(1789053087.511:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.0.741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37339e159 code=0x7ffc0000 [ 403.560963][ T28] audit: type=1326 audit(1789053087.511:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.0.741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37339e159 code=0x7ffc0000 [ 404.335595][ T28] audit: type=1326 audit(1789053087.511:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.0.741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa37339e159 code=0x7ffc0000 [ 404.366939][ T28] audit: type=1326 audit(1789053087.511:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.0.741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37339e159 code=0x7ffc0000 [ 404.392181][ T28] audit: type=1326 audit(1789053087.511:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.0.741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fa37339e159 code=0x7ffc0000 [ 404.424718][ T28] audit: type=1326 audit(1789053087.511:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.0.741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37339e159 code=0x7ffc0000 [ 405.425762][ T28] audit: type=1326 audit(1789053087.511:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.0.741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37339e159 code=0x7ffc0000 [ 405.451296][ T28] audit: type=1326 audit(1789053087.511:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.0.741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fa37339e159 code=0x7ffc0000 [ 407.542537][ T8712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.478020][ T8731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.259258][ T8733] xt_nfacct: accounting object `' does not exist [ 413.341826][ T8752] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 414.169290][ T8751] tipc: Enabling of bearer rejected, failed to enable media [ 416.295319][ T8770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.753'. [ 416.787029][ T8770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.753'. [ 417.569323][ T8782] netlink: 36 bytes leftover after parsing attributes in process `syz.1.770'. [ 417.578413][ T8782] netlink: 36 bytes leftover after parsing attributes in process `syz.1.770'. [ 417.587495][ T8782] netlink: 31 bytes leftover after parsing attributes in process `syz.1.770'. [ 420.070381][ T8809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.103876][ T8840] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 423.138179][ T8840] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 423.809663][ T8842] loop0: detected capacity change from 0 to 4096 [ 423.843554][ T8842] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 426.760323][ T8842] ntfs3: loop0: Failed to read $UpCase (-4). [ 427.262222][ T8860] syzkaller0: entered promiscuous mode [ 427.268395][ T8860] syzkaller0: entered allmulticast mode [ 427.647952][ T8861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.043558][ T8870] netlink: 'syz.1.789': attribute type 2 has an invalid length. [ 431.729840][ T8905] syzkaller0: entered promiscuous mode [ 431.735375][ T8905] syzkaller0: entered allmulticast mode [ 431.983638][ T8910] overlayfs: missing 'lowerdir' [ 437.276031][ T8978] loop0: detected capacity change from 0 to 256 [ 437.380086][ T8978] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 437.492345][ T8978] syz.0.815: attempt to access beyond end of device [ 437.492345][ T8978] loop0: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 437.526250][ T8978] syz.0.815: attempt to access beyond end of device [ 437.526250][ T8978] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 437.579257][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 437.579271][ T28] audit: type=1800 audit(1789053121.741:32): pid=8978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.815" name="file1" dev="loop0" ino=1048610 res=0 errno=0 [ 437.937517][ T8986] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7427] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8986] [ 438.615027][ T8978] syz.0.815: attempt to access beyond end of device [ 438.615027][ T8978] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 438.662156][ T8994] tipc: Started in network mode [ 438.671132][ T8977] syz.0.815: attempt to access beyond end of device [ 438.671132][ T8977] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 438.681160][ T8994] tipc: Node identity ac1414aa, cluster identity 4711 [ 438.700361][ T8978] syz.0.815: attempt to access beyond end of device [ 438.700361][ T8978] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 438.730214][ T8978] syz.0.815: attempt to access beyond end of device [ 438.730214][ T8978] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 438.731944][ T8994] tipc: New replicast peer: 172.20.20.187 [ 438.762631][ T8977] syz.0.815: attempt to access beyond end of device [ 438.762631][ T8977] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 438.774719][ T8994] tipc: Enabled bearer , priority 10 [ 438.824248][ T8977] syz.0.815: attempt to access beyond end of device [ 438.824248][ T8977] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 439.000014][ T8977] syz.0.815: attempt to access beyond end of device [ 439.000014][ T8977] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 439.054669][ T8977] syz.0.815: attempt to access beyond end of device [ 439.054669][ T8977] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 439.073364][ T8987] exFAT-fs (loop0): hint_cluster is invalid (1), rewind to the first cluster [ 439.115310][ T8987] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 439.194733][ T9000] xt_policy: output policy not valid in PREROUTING and INPUT [ 439.322495][ T8987] exFAT-fs (loop0): Filesystem has been set read-only [ 439.593108][ T8987] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805bad07e0 iblock : 9, err : -5) [ 439.609110][ T8978] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 439.621769][ T8978] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805bad07e0 iblock : 0, err : -5) [ 439.647791][ T8978] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 439.711662][ T9002] netlink: set zone limit has 8 unknown bytes [ 440.096093][ T6190] tipc: Node number set to 2886997162 [ 440.148264][ T8978] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805bad07e0 iblock : 0, err : -5) [ 440.185572][ T8987] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 440.213082][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.234770][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.238344][ T8987] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805bad07e0 iblock : 8, err : -5) [ 440.355745][ T8978] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 440.378106][ T8978] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805bad07e0 iblock : 1, err : -5) [ 440.418389][ T8978] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 440.476724][ T8978] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805bad07e0 iblock : 2, err : -5) [ 440.505670][ T8978] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 440.673447][ T8978] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805bad07e0 iblock : 3, err : -5) [ 440.819732][ T8978] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 440.942126][ T8978] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805bad07e0 iblock : 4, err : -5) [ 441.135591][ T8978] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 441.175687][ T8978] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805bad07e0 iblock : 5, err : -5) [ 441.211757][ T8978] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 441.245976][ T8978] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805bad07e0 iblock : 6, err : -5) [ 441.261204][ T8978] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 442.778747][ T6190] Process accounting resumed [ 444.502874][ T9058] tipc: Enabling of bearer rejected, failed to enable media [ 445.329239][ T9050] ima: policy update failed [ 445.689896][ T28] audit: type=1802 audit(1789053129.501:33): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.836" res=0 errno=0 [ 447.682136][ T9098] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 447.691262][ T9098] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 447.734107][ T9094] futex_wake_op: syz.3.844 tries to shift op by 144; fix this program [ 450.326603][ T9111] overlayfs: failed to clone lowerpath [ 453.467005][ T9127] overlayfs: failed to clone lowerpath [ 456.355934][ T9146] syzkaller0: entered promiscuous mode [ 456.371753][ T9146] syzkaller0: entered allmulticast mode [ 456.957247][ T9152] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 456.966303][ T9152] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 457.859133][ T9165] netlink: 72 bytes leftover after parsing attributes in process `syz.0.860'. [ 458.534275][ T9166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.018292][ T9177] sctp: [Deprecated]: syz.4.865 (pid 9177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.018292][ T9177] Use struct sctp_sack_info instead [ 460.613102][ T9189] jffs2: notice: (9189) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 461.134555][ T9189] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 461.631545][ T9201] netlink: 2 bytes leftover after parsing attributes in process `syz.3.871'. [ 461.819657][ T9205] __vm_enough_memory: pid: 9205, comm: syz.1.869, not enough memory for the allocation [ 462.077559][ T9208] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 468.261781][ T9266] SET target dimension over the limit! [ 469.652674][ T9285] syz_tun: entered allmulticast mode [ 469.681429][ T9285] dvmrp6: entered allmulticast mode [ 469.687898][ T9287] loop0: detected capacity change from 0 to 512 [ 469.746675][ T9287] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.890: corrupted in-inode xattr: invalid ea_ino [ 469.795033][ T9287] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.890: couldn't read orphan inode 15 (err -117) [ 469.812151][ T9283] syz_tun: left allmulticast mode [ 469.813788][ T9287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.905275][ T9295] tipc: Enabling of bearer rejected, failed to enable media [ 470.272319][ T9303] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 470.281587][ T9303] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 470.875087][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.475682][ T9320] netlink: set zone limit has 8 unknown bytes [ 472.804204][ T28] audit: type=1800 audit(1789053156.591:34): pid=9319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.899" name="addr_trtype" dev="configfs" ino=16329 res=0 errno=0 [ 472.825008][ T28] audit: type=1800 audit(1789053156.971:35): pid=9319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.899" name="addr_traddr" dev="configfs" ino=17053 res=0 errno=0 [ 472.891761][ T9319] nvmet_tcp: address family 255 not supported [ 474.160621][ T9336] warning: `syz.1.905' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 475.516281][ T9356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 477.696083][ T9370] overlayfs: failed to clone lowerpath [ 477.743495][ T9370] overlayfs: failed to clone lowerpath [ 479.341006][ T9378] lo: entered allmulticast mode [ 479.396695][ T9378] dvmrp6: entered allmulticast mode [ 479.469302][ T9377] lo: left allmulticast mode [ 481.233961][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.241768][ T9385] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.256204][ T9385] bridge0: entered allmulticast mode [ 481.357564][ T9385] bridge_slave_1: left allmulticast mode [ 481.363346][ T9385] bridge_slave_1: left promiscuous mode [ 481.375839][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.950209][ T9385] bridge_slave_0: left allmulticast mode [ 482.145586][ T9385] bridge_slave_0: left promiscuous mode [ 482.171817][ T9385] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.606677][ T9397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 484.646639][ T9416] jffs2: notice: (9416) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 485.595937][ T9416] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 486.713547][ T9423] loop0: detected capacity change from 0 to 1024 [ 486.741276][ T9423] EXT4-fs: Ignoring removed nomblk_io_submit option [ 486.783274][ T9423] EXT4-fs (loop0): unsupported descriptor size 0 [ 486.846762][ T9428] netlink: 'syz.1.930': attribute type 1 has an invalid length. [ 488.167947][ T9442] syzkaller0: entered promiscuous mode [ 488.199564][ T9442] syzkaller0: entered allmulticast mode [ 490.018126][ T9460] jffs2: notice: (9460) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 492.315634][ T9474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.033336][ T9489] tipc: Started in network mode [ 494.039385][ T9489] tipc: Node identity 76657468115f, cluster identity 4711 [ 494.105682][ T9489] tipc: Enabled bearer , priority 0 [ 495.138080][ T23] tipc: Node number set to 1731884136 [ 495.158161][ T9499] MTRR 1 not used [ 496.229326][ T9506] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 496.975736][ T9511] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 498.625869][ T9522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 500.691920][ T9538] ip6gretap0: left allmulticast mode [ 500.710208][ T9538] ip6gretap0: left promiscuous mode [ 500.717807][ T9538] bridge0: port 3(ip6gretap0) entered disabled state [ 500.749507][ T9538] bridge_slave_0: left allmulticast mode [ 500.795789][ T9538] bridge_slave_0: left promiscuous mode [ 500.810540][ T9538] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.660713][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.675635][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.802998][ T9538] bridge_slave_1: left allmulticast mode [ 501.810451][ T9538] bridge_slave_1: left promiscuous mode [ 501.822091][ T9538] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.912572][ T9538] bond0: (slave bond_slave_0): Releasing backup interface [ 502.125030][ T9538] bond0: (slave bond_slave_1): Releasing backup interface [ 502.409602][ T9538] team0: Port device team_slave_0 removed [ 502.516958][ T9538] team0: Port device team_slave_1 removed [ 502.540864][ T9538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.566768][ T9538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.589296][ T9538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.600785][ T9538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.713125][ T9541] team0: Port device xfrm0 added [ 502.724436][ T9543] tipc: Enabled bearer , priority 0 [ 503.701575][ T9567] overlayfs: failed to clone lowerpath [ 504.296886][ T9568] overlayfs: failed to clone lowerpath [ 506.714477][ T9586] CIFS: Attempting to mount //127.0.0.1/share [ 507.257956][ T9591] syzkaller0: entered promiscuous mode [ 507.276960][ T9591] syzkaller0: entered allmulticast mode [ 507.437467][ T9586] CIFS: VFS: Error connecting to socket. Aborting operation. [ 507.445249][ T9586] CIFS: VFS: cifs_mount failed w/return code = -4 [ 511.900903][ T9] libceph: connect (1)127.0.0.1:6789 error -101 [ 511.926693][ T9648] ceph: No mds server is up or the cluster is laggy [ 511.994677][ T9] libceph: mon0 (1)127.0.0.1:6789 connect error [ 516.515705][ T28] audit: type=1326 audit(1789053200.661:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.4.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 516.979650][ T28] audit: type=1326 audit(1789053200.661:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.4.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 517.003655][ T28] audit: type=1326 audit(1789053200.771:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.4.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 517.047967][ T28] audit: type=1326 audit(1789053200.771:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.4.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 517.177229][ T28] audit: type=1326 audit(1789053200.771:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.4.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 517.395870][ T28] audit: type=1326 audit(1789053200.801:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.4.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 517.440550][ T28] audit: type=1326 audit(1789053200.801:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.4.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 518.138813][ T9703] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 518.444565][ T28] audit: type=1326 audit(1789053200.871:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.4.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 518.627193][ T28] audit: type=1326 audit(1789053200.871:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.4.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 518.692219][ T28] audit: type=1326 audit(1789053200.871:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.4.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 518.743421][ T9706] loop0: detected capacity change from 0 to 4096 [ 518.765181][ T9708] tipc: Enabling of bearer rejected, already enabled [ 520.288749][ T9728] bridge0: entered allmulticast mode [ 521.196060][ T9738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1006'. [ 522.168134][ T9738] vlan3: entered allmulticast mode [ 522.173876][ T9738] bridge3: entered allmulticast mode [ 522.230541][ T9747] erspan0: left allmulticast mode [ 522.260565][ T9747] erspan0: left promiscuous mode [ 522.270899][ T9747] bridge2: port 1(erspan0) entered disabled state [ 522.341017][ T9747] bridge3: port 1(erspan0) entered blocking state [ 522.361132][ T9747] bridge3: port 1(erspan0) entered disabled state [ 522.376977][ T9747] erspan0: entered allmulticast mode [ 522.406330][ T9747] erspan0: entered promiscuous mode [ 522.413451][ T9747] bridge3: port 1(erspan0) entered blocking state [ 522.420058][ T9747] bridge3: port 1(erspan0) entered forwarding state [ 522.463957][ T9738] bridge3: port 1(erspan0) entered disabled state [ 522.562509][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.607515][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.986352][ T9772] bridge0: entered allmulticast mode [ 525.016524][ T9776] bridge_slave_1: left allmulticast mode [ 525.022226][ T9776] bridge_slave_1: left promiscuous mode [ 525.281141][ T9776] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.291894][ T9776] bridge_slave_0: left allmulticast mode [ 525.297879][ T9776] bridge_slave_0: left promiscuous mode [ 525.309743][ T9776] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.193151][ T9814] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1030'. [ 529.727740][ T9841] overlayfs: failed to clone upperpath [ 532.062856][ T9864] tipc: Enabling of bearer rejected, already enabled [ 532.259090][ T9876] nfs: Unknown parameter 'axé­§^zóRè¡J§ÌüP“jcbjý~@æ!ïû̼o^žw ³wýÙýRÁÖ FMÂq%!‘}‘”„¥!Ã^“vkò÷؇7¿_½qór&›™Wj6³ðOZ)51ùòÁ£DÐm{TvS·÷Þ§ßíþ¼ûëÞç…{E[mU®Ô”¡+okÆ¢eª|Ñ.éJÍY¦a›ªX¶ÍªßX¦*X•ååº2ÊùñärÕ´me”ëªdÖU­¢jÕº2îŲÒu]'ÇÉmÌÏ™“—ú< Hµš1FD$q¤%·1”' [ 532.809515][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 532.809549][ T28] audit: type=1326 audit(1789053216.971:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9875 comm="syz.1.1046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 533.464387][ T28] audit: type=1326 audit(1789053216.971:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9875 comm="syz.1.1046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 533.574643][ T28] audit: type=1326 audit(1789053216.971:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9875 comm="syz.1.1046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 533.603924][ T28] audit: type=1326 audit(1789053216.971:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9875 comm="syz.1.1046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 533.638513][ T28] audit: type=1326 audit(1789053216.971:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9875 comm="syz.1.1046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 533.678626][ T28] audit: type=1326 audit(1789053216.971:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9875 comm="syz.1.1046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 533.710309][ T28] audit: type=1326 audit(1789053216.971:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9875 comm="syz.1.1046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 533.814104][ T28] audit: type=1326 audit(1789053216.971:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9875 comm="syz.1.1046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 533.877176][ T28] audit: type=1326 audit(1789053216.971:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9875 comm="syz.1.1046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 533.911959][ T28] audit: type=1326 audit(1789053216.981:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9875 comm="syz.1.1046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 534.704947][ T9896] No source specified [ 536.449757][ T9909] jffs2: notice: (9909) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 540.869754][ T9934] macsec1: entered allmulticast mode [ 540.875120][ T9934] veth1_macvtap: entered allmulticast mode [ 540.915058][ T9934] veth1_macvtap: left allmulticast mode [ 547.020929][ T9994] erspan0: left allmulticast mode [ 547.044191][ T9994] erspan0: left promiscuous mode [ 547.125812][ T9995] Console: switching to colour VGA+ 80x25 [ 547.330796][ T9995] Console: switching to colour frame buffer device 128x48 [ 547.433064][ T9994] bridge3: port 1(erspan0) entered disabled state [ 547.843453][ T9994] bond2: (slave dummy0): Releasing backup interface [ 547.907163][ T9994] dummy0: left promiscuous mode [ 547.947893][ T9994] bond0: (slave bond_slave_0): Releasing backup interface [ 548.002040][ T9994] bond0: (slave bond_slave_1): Releasing backup interface [ 548.154009][ T9994] team0: Port device team_slave_0 removed [ 548.773679][ T9994] team0: Port device team_slave_1 removed [ 549.066925][ T9994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.085443][ T9994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.181865][ T9997] tipc: Enabled bearer , priority 0 [ 549.347983][T10010] veth0_to_bond: left allmulticast mode [ 549.385659][T10010] veth0_to_bond: left promiscuous mode [ 549.391469][T10010] bridge2: port 2(veth0_to_bond) entered disabled state [ 549.448902][T10010] bond0: (slave bond_slave_0): Releasing backup interface [ 549.464191][T10010] bond_slave_0: left promiscuous mode [ 549.483501][T10010] bond0: (slave bond_slave_1): Releasing backup interface [ 549.509793][T10010] bond_slave_1: left promiscuous mode [ 549.588411][T10010] team0: Port device team_slave_0 removed [ 549.619475][T10010] team0: Port device team_slave_1 removed [ 549.636827][T10010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.668131][T10010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.702391][T10010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.805605][T10010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.914750][T10010] bond1: (slave geneve2): Releasing active interface [ 549.985678][T10024] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 550.694739][T10010] veth3: left allmulticast mode [ 550.709532][T10010] veth3: left promiscuous mode [ 550.735453][T10010] bridge2: port 1(veth3) entered disabled state [ 550.756418][T10010] veth5: left allmulticast mode [ 550.761334][T10010] veth5: left promiscuous mode [ 550.796590][T10010] bridge2: port 3(veth5) entered disabled state [ 552.020926][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'. [ 552.721428][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'. [ 552.730733][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'. [ 552.740348][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'. [ 556.832068][T10061] vlan0: entered allmulticast mode [ 556.844018][T10061] bond0: entered allmulticast mode [ 558.193703][T10071] nfs: Unknown parameter 'axé­§^zóRè¡J§ÌüP“jcbjý~@æ!ïû̼o^žw ³wýÙýRÁÖ FMÂq%!‘}‘”„¥!Ã^“vkò÷؇7¿_½qór&›™Wj6³ðOZ)51ùòÁ£DÐm{TvS·÷Þ§ßíþ¼ûëÞç…{E[mU®Ô”¡+okÆ¢eª|Ñ.éJÍY¦a›ªX¶ÍªßX¦*X•ååº2ÊùñärÕ´me”ëªdÖU­¢jÕº2îŲÒu]'ÇÉmÌÏ™“—ú< Hµš1FD$q¤%·1”' [ 559.285608][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 559.285624][ T28] audit: type=1326 audit(1789053243.011:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10070 comm="syz.4.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 559.318429][ T28] audit: type=1326 audit(1789053243.011:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10070 comm="syz.4.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 559.583359][ T28] audit: type=1326 audit(1789053243.011:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10070 comm="syz.4.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 560.387506][ T28] audit: type=1326 audit(1789053243.011:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10070 comm="syz.4.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 560.668213][ T28] audit: type=1326 audit(1789053243.011:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10070 comm="syz.4.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 560.814292][ T28] audit: type=1326 audit(1789053243.011:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10070 comm="syz.4.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 561.031507][ T28] audit: type=1326 audit(1789053243.011:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10070 comm="syz.4.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 561.056257][ T28] audit: type=1326 audit(1789053243.011:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10070 comm="syz.4.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 561.121871][ T28] audit: type=1326 audit(1789053243.011:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10070 comm="syz.4.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 561.146727][ T28] audit: type=1326 audit(1789053243.011:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10070 comm="syz.4.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 561.495681][ T8] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 561.695155][T10107] ceph: No mds server is up or the cluster is laggy [ 561.760545][T10106] program syz.0.1104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 562.704339][T10124] loop0: detected capacity change from 0 to 1024 [ 562.714734][T10124] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 562.752883][T10124] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.1108: lblock 2 mapped to illegal pblock 2 (length 1) [ 562.770268][T10124] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.1108: lblock 0 mapped to illegal pblock 48 (length 1) [ 562.785938][T10124] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1108: Failed to acquire dquot type 0 [ 562.798982][T10124] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 562.810635][T10124] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1108: mark_inode_dirty error [ 562.828708][T10124] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 562.839043][T10124] EXT4-fs (loop0): 1 orphan inode deleted [ 562.846196][T10124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.860262][ T1002] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 563.083526][ T1002] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 0 [ 563.097536][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.105071][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.189837][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.206650][ T1150] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 563.245205][ T1150] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 563.263638][ T5768] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 563.291400][ T5768] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 563.326629][ T5768] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 564.687056][T10169] tipc: Enabling of bearer rejected, failed to enable media [ 565.343480][T10173] ceph: No mds server is up or the cluster is laggy [ 565.736213][T10187] loop6: detected capacity change from 0 to 6 [ 566.283148][T10187] Dev loop6: unable to read RDB block 6 [ 566.289184][T10187] loop6: unable to read partition table [ 566.295049][T10187] loop6: partition table beyond EOD, truncated [ 566.301398][T10187] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 570.613440][T10224] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1137'. [ 574.671027][T10253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1136'. [ 576.024386][T10262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 586.605531][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 586.605548][ T28] audit: type=1326 audit(1789053270.761:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="syz.0.1163" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37339e159 code=0x7fc00000 [ 604.987098][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 25 (since boot) is 1038 jiffies old. [ 607.513907][T10511] ip6gretap1: entered allmulticast mode [ 607.528645][T10511] batman_adv: batadv0: Adding interface: ip6gretap1 [ 607.535347][T10511] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.561235][T10511] batman_adv: batadv0: Interface activated: ip6gretap1 [ 608.229660][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 609.607121][T10522] kvm: kvm [10517]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 610.121779][T10544] overlayfs: failed to clone upperpath [ 611.250898][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1210'. [ 624.515794][T10622] No source specified [ 624.717096][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 29 (since boot) is 1066 jiffies old. [ 624.728183][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.734517][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.502073][T10691] "syz.3.1242" (10691) uses obsolete ecb(arc4) skcipher [ 632.176231][T10693] No source specified [ 636.095771][T10725] No source specified [ 638.183125][T10754] team_slave_0: mtu less than device minimum [ 638.965824][T10756] No source specified [ 639.300042][T10761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1265'. [ 640.781702][T10779] netlink: 'syz.1.1269': attribute type 39 has an invalid length. [ 642.960150][T10792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 647.951090][T10818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 648.214486][T10822] xt_policy: output policy not valid in PREROUTING and INPUT [ 651.908913][T10844] IPVS: rr: TCP 172.20.20.170:20000 - no destination available [ 659.520758][T10883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1299'. [ 661.731828][T10900] team_slave_0: mtu less than device minimum [ 662.312776][T10904] syzkaller0: entered promiscuous mode [ 662.325072][T10904] syzkaller0: entered allmulticast mode [ 667.085686][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'. [ 667.095125][T10943] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1311'. [ 667.241097][T10943] geneve3: entered promiscuous mode [ 667.247279][T10943] geneve3: entered allmulticast mode [ 674.747184][T10981] netlink: 'syz.1.1324': attribute type 24 has an invalid length. [ 680.523041][T11026] xt_policy: output policy not valid in PREROUTING and INPUT [ 681.251755][T11034] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 683.659145][T11061] 9pnet_virtio: no channels available for device syz [ 683.674430][T11061] overlayfs: failed to clone upperpath [ 685.971581][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.978055][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.843003][T11114] lo: Caught tx_queue_len zero misconfig [ 689.015816][T11114] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 693.059083][T11142] "syz.3.1366" (11142) uses obsolete ecb(arc4) skcipher [ 699.167250][T11180] No source specified [ 700.157754][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'. [ 700.168264][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1382'. [ 700.177289][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1382'. [ 700.186953][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'. [ 701.003107][T11213] loop0: detected capacity change from 0 to 512 [ 701.014791][T11213] EXT4-fs: inline encryption not supported [ 701.027116][T11213] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 701.056924][T11213] EXT4-fs (loop0): Invalid default hash set in the superblock [ 702.157233][T11217] lo: Caught tx_queue_len zero misconfig [ 702.171367][T11217] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 704.211840][T11226] No source specified [ 704.669489][T11237] loop0: detected capacity change from 0 to 512 [ 704.716736][T11237] ext4: Unknown parameter 'permit_directio' [ 706.885094][T11245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1395'. [ 709.305966][T11255] No source specified [ 715.868346][T11303] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1411'. [ 717.508574][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'. [ 717.520939][T11321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1414'. [ 717.530043][T11321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1414'. [ 717.539093][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'. [ 718.870786][T11325] kAFS: No cell specified [ 723.549731][T11346] overlayfs: failed to resolve './file2': -2 [ 726.559344][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 726.576882][T11352] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1424'. [ 726.585997][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1424'. [ 726.594996][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 737.444803][T11444] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 737.492152][T11444] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 737.513968][T11450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1454'. [ 737.607407][T11452] overlayfs: failed to clone lowerpath [ 737.675236][T11453] overlayfs: failed to clone lowerpath [ 738.368343][T11444] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 738.398607][T11455] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 738.425300][T11455] CIFS: Attempting to mount //127.0.0.1/share [ 738.580215][T11458] tipc: Resetting bearer [ 738.613414][T11455] CIFS: VFS: Error connecting to socket. Aborting operation. [ 738.621148][T11455] CIFS: VFS: cifs_mount failed w/return code = -4 [ 739.612051][T11458] tipc: Enabling of bearer rejected, already enabled [ 739.649067][T11468] loop0: detected capacity change from 0 to 128 [ 739.938951][T11473] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5768] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11473] [ 744.465157][T11497] cgroup: noprefix used incorrectly [ 747.141744][T11507] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 747.447642][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.466824][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.571876][T11520] dummy0: Caught tx_queue_len zero misconfig [ 751.433192][T11527] overlayfs: failed to resolve './file2': -2 [ 751.758147][T11532] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 751.766974][T11532] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 751.775401][T11532] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 754.342845][T11553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 754.860204][T11573] loop0: detected capacity change from 0 to 128 [ 758.725859][T11583] No source specified [ 761.774904][T11624] loop0: detected capacity change from 0 to 16 [ 763.356218][T11624] erofs: (device loop0): mounted with root inode @ nid 36. [ 766.511497][T11649] loop0: detected capacity change from 0 to 512 [ 766.566347][T11649] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 766.618480][T11649] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.1504: Allocating blocks 41-42 which overlap fs metadata [ 766.665445][T11649] EXT4-fs (loop0): Remounting filesystem read-only [ 766.684238][T11649] Quota error (device loop0): write_blk: dquota write failed [ 766.695852][T11649] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 766.705414][T11649] Quota error (device loop0): write_blk: dquota write failed [ 766.729754][T11649] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 766.745955][T11649] EXT4-fs (loop0): 1 truncate cleaned up [ 766.767847][T11649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.517845][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.067320][ T6191] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 769.334545][ T6191] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 769.860822][ T6191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.902713][ T6191] usb 1-1: Product: syz [ 769.913814][ T6191] usb 1-1: Manufacturer: syz [ 769.923197][ T6191] usb 1-1: SerialNumber: syz [ 769.941944][ T6191] usb 1-1: config 0 descriptor?? [ 769.977176][ T6191] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 769.992457][ T6191] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 770.005738][ T6191] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 771.777563][ T2183] usb 1-1: USB disconnect, device number 9 [ 781.853826][T11754] ALSA: mixer_oss: invalid OSS volume '' [ 781.870919][T11754] SET target dimension over the limit! [ 788.247620][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1541'. [ 789.420503][T11789] loop0: detected capacity change from 0 to 512 [ 789.494522][T11789] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.1538: corrupted in-inode xattr: invalid ea_ino [ 789.531662][T11789] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1538: couldn't read orphan inode 15 (err -117) [ 789.554459][T11789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.514120][T11803] : renamed from bond_slave_0 (while UP) [ 790.865452][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.102296][T11818] syz.0.1549: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 793.118915][T11818] CPU: 0 PID: 11818 Comm: syz.0.1549 Not tainted syzkaller #0 [ 793.126413][T11818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 793.136488][T11818] Call Trace: [ 793.139755][T11818] [ 793.142675][T11818] dump_stack_lvl+0x18c/0x250 [ 793.147451][T11818] ? show_regs_print_info+0x20/0x20 [ 793.152642][T11818] ? load_image+0x420/0x420 [ 793.157148][T11818] ? __rcu_read_unlock+0x7c/0xd0 [ 793.162069][T11818] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 793.168469][T11818] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 793.174960][T11818] warn_alloc+0x246/0x340 [ 793.179314][T11818] ? zone_watermark_ok_safe+0x230/0x230 [ 793.184869][T11818] ? asan.module_dtor+0x20/0x20 [ 793.189791][T11818] ? mark_lock+0x94/0x320 [ 793.194122][T11818] __vmalloc_node_range+0x129/0x1320 [ 793.199419][T11818] ? mark_lock+0x94/0x320 [ 793.203753][T11818] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 793.209730][T11818] ? preempt_schedule_notrace+0x110/0x110 [ 793.215449][T11818] ? lock_chain_count+0x20/0x20 [ 793.220303][T11818] ? free_vm_area+0x50/0x50 [ 793.224809][T11818] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 793.230524][T11818] ? lockdep_hardirqs_on+0x98/0x150 [ 793.235731][T11818] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 793.241367][T11818] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 793.247277][T11818] vmalloc+0x79/0x90 [ 793.251171][T11818] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 793.256979][T11818] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 793.262615][T11818] dvb_demux_do_ioctl+0x454/0x530 [ 793.267642][T11818] dvb_usercopy+0x195/0x2b0 [ 793.272141][T11818] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 793.277684][T11818] ? dvb_generic_ioctl+0xb0/0xb0 [ 793.282635][T11818] ? dvb_demux_ioctl+0x15/0x30 [ 793.287397][T11818] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 793.292941][T11818] ? dvb_demux_poll+0x210/0x210 [ 793.297793][T11818] dvb_demux_ioctl+0x29/0x30 [ 793.302383][T11818] __se_sys_ioctl+0xfd/0x170 [ 793.307013][T11818] do_syscall_64+0x55/0xb0 [ 793.311429][T11818] ? clear_bhb_loop+0x40/0x90 [ 793.316103][T11818] ? clear_bhb_loop+0x40/0x90 [ 793.320777][T11818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 793.326692][T11818] RIP: 0033:0x7fa37339e159 [ 793.331112][T11818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.350718][T11818] RSP: 002b:00007fa374220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 793.359133][T11818] RAX: ffffffffffffffda RBX: 00007fa373626090 RCX: 00007fa37339e159 [ 793.367105][T11818] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 793.375068][T11818] RBP: 00007fa37343503b R08: 0000000000000000 R09: 0000000000000000 [ 793.383052][T11818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.391015][T11818] R13: 00007fa373626128 R14: 00007fa373626090 R15: 00007ffc2e951a28 [ 793.398996][T11818] [ 793.529625][T11818] Mem-Info: [ 793.533318][T11818] active_anon:31598 inactive_anon:7529 isolated_anon:0 [ 793.533318][T11818] active_file:20638 inactive_file:38151 isolated_file:0 [ 793.533318][T11818] unevictable:17220 dirty:206 writeback:0 [ 793.533318][T11818] slab_reclaimable:11573 slab_unreclaimable:99180 [ 793.533318][T11818] mapped:27366 shmem:34771 pagetables:608 [ 793.533318][T11818] sec_pagetables:0 bounce:0 [ 793.533318][T11818] kernel_misc_reclaimable:0 [ 793.533318][T11818] free:1285425 free_pcp:8363 free_cma:0 [ 794.128821][T11818] Node 0 active_anon:126392kB inactive_anon:18424kB active_file:82548kB inactive_file:152416kB unevictable:67344kB isolated(anon):0kB isolated(file):0kB mapped:97944kB dirty:856kB writeback:0kB shmem:126072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10892kB pagetables:2320kB sec_pagetables:0kB all_unreclaimable? no [ 794.162503][T11818] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 794.193214][T11818] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 794.221159][T11818] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 794.227394][T11818] Node 0 DMA32 free:1228776kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:126352kB inactive_anon:18424kB active_file:81924kB inactive_file:152220kB unevictable:67344kB writepending:856kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:29616kB local_pcp:12456kB free_cma:0kB [ 794.502528][T11818] lowmem_reserve[]: 0 0 0 0 0 [ 794.509936][T11818] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:624kB inactive_file:196kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 794.684600][T11818] lowmem_reserve[]: 0 0 0 0 0 [ 794.709871][T11818] Node 1 Normal free:3897340kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:188kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15552kB local_pcp:8256kB free_cma:0kB [ 795.367786][T11818] lowmem_reserve[]: 0 0 0 0 0 [ 795.465676][T11818] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 795.643816][T11818] Node 0 DMA32: 3505*4kB (ME) 2703*8kB (UME) 2006*16kB (UME) 1795*32kB (UME) 1031*64kB (UME) 494*128kB (UME) 239*256kB (UME) 111*512kB (UME) 36*1024kB (M) 6*2048kB (UM) 196*4096kB (UM) = 1224380kB [ 795.666320][T11818] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 795.693261][T11818] Node 1 [ 796.930297][T11837] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1555'. [ 796.948162][T11818] Normal: 253*4kB (UME) 63*8kB (UME) 35*16kB (UME) 83*32kB (UME) 22*64kB (UME) 8*128kB (UME) 2*256kB (UM) 1*512kB (E) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3897340kB [ 797.052581][T11818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 797.071078][T11818] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 797.097497][T11818] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 797.120285][T11818] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 797.137108][T11818] 124920 total pagecache pages [ 797.145728][T11818] 0 pages in swap cache [ 797.151192][T11818] Free swap = 124548kB [ 797.155344][T11818] Total swap = 124996kB [ 797.177583][T11818] 2097051 pages RAM [ 797.181411][T11818] 0 pages HighMem/MovableOnly [ 797.221796][T11818] 416960 pages reserved [ 797.231403][T11818] 0 pages cma reserved [ 797.394766][T11847] tipc: Enabling of bearer rejected, already enabled [ 803.089934][T11893] ip6gretap0: left allmulticast mode [ 803.095291][T11893] ip6gretap0: left promiscuous mode [ 803.101164][T11893] bridge0: port 3(ip6gretap0) entered disabled state [ 803.122475][T11893] bridge_slave_0: left allmulticast mode [ 803.128528][T11893] bridge_slave_0: left promiscuous mode [ 803.134287][T11893] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.150973][T11893] bridge_slave_1: left allmulticast mode [ 803.157201][T11893] bridge_slave_1: left promiscuous mode [ 803.162966][T11893] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.180397][T11893] bond0: (slave 30): Releasing backup interface [ 803.204202][T11893] bond0: (slave bond_slave_1): Releasing backup interface [ 803.307456][T11893] team0: Port device team_slave_0 removed [ 803.342573][T11893] team0: Port device team_slave_1 removed [ 803.349448][T11893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.357473][T11893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.393734][T11893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.401272][T11893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.418856][T11893] bond1: (slave geneve2): Releasing active interface [ 803.427976][T11893] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 803.437413][T11893] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 803.446512][T11893] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 803.455528][T11893] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 803.496470][T11893] bond2: (slave bond3): Releasing backup interface [ 803.503030][T11893] bond2: (slave bond3): the permanent HWaddr of slave - 12:57:fa:94:aa:ef - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 803.519950][T11893] bond2: (slave gretap1): making interface the new active one [ 803.549891][T11893] bond2: (slave gretap1): Releasing backup interface [ 803.581168][T11893] bond4: (slave bridge1): Releasing backup interface [ 803.588028][T11893] bond4: (slave bridge1): the permanent HWaddr of slave - ea:18:ac:7d:fa:b0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 803.605087][T11893] bond4: (slave bridge2): making interface the new active one [ 803.684074][T11893] bond4: (slave bridge2): Releasing backup interface [ 803.694919][T11893] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 803.702246][T11893] batman_adv: batadv0: Removing interface: ip6gretap1 [ 804.951278][T11902] loop0: detected capacity change from 0 to 16 [ 804.979140][T11902] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 808.993063][T11921] loop0: detected capacity change from 0 to 1024 [ 809.416068][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.422503][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.477875][T11921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 809.490086][T11921] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 809.742134][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 811.037248][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1575'. [ 812.323595][T11956] CIFS: Attempting to mount //127.0.0.1/share [ 814.126020][T11956] CIFS: VFS: Error connecting to socket. Aborting operation. [ 814.155966][T11956] CIFS: VFS: cifs_mount failed w/return code = -4 [ 816.538549][T11986] loop0: detected capacity change from 0 to 16 [ 817.490774][T11986] erofs: (device loop0): mounted with root inode @ nid 36. [ 822.309937][ T28] audit: type=1326 audit(1789053506.461:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12014 comm="syz.4.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 822.622561][ T28] audit: type=1326 audit(1789053506.461:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12014 comm="syz.4.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 822.908647][ T28] audit: type=1326 audit(1789053506.461:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12014 comm="syz.4.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 823.033687][ T28] audit: type=1326 audit(1789053506.471:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12014 comm="syz.4.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f162455e98e code=0x7ffc0000 [ 823.115615][ T28] audit: type=1326 audit(1789053506.471:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12014 comm="syz.4.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 823.175607][ T28] audit: type=1326 audit(1789053506.471:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12014 comm="syz.4.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 823.235396][ T28] audit: type=1326 audit(1789053506.471:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12014 comm="syz.4.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 823.317940][ T28] audit: type=1326 audit(1789053506.471:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12014 comm="syz.4.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 823.381001][ T28] audit: type=1326 audit(1789053506.471:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12014 comm="syz.4.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 823.465576][ T28] audit: type=1326 audit(1789053506.471:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12014 comm="syz.4.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f162459e159 code=0x7ffc0000 [ 824.418778][T12051] loop0: detected capacity change from 0 to 256 [ 824.430498][T12051] exfat: Deprecated parameter 'namecase' [ 824.436621][T12051] exfat: Deprecated parameter 'namecase' [ 824.520595][T12051] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 827.770790][T12072] loop0: detected capacity change from 0 to 512 [ 827.787336][T12072] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 828.007753][T12072] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.1622: Allocating blocks 41-42 which overlap fs metadata [ 828.106432][T12072] EXT4-fs (loop0): Remounting filesystem read-only [ 828.597075][T12072] __quota_error: 4 callbacks suppressed [ 828.597094][T12072] Quota error (device loop0): write_blk: dquota write failed [ 828.617418][T12079] CIFS: Attempting to mount //127.0.0.1/share [ 828.625275][T12079] CIFS: VFS: Error connecting to socket. Aborting operation. [ 828.632712][T12079] CIFS: VFS: cifs_mount failed w/return code = -101 [ 828.645163][T12072] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 828.729988][T12072] Quota error (device loop0): write_blk: dquota write failed [ 828.755354][T12072] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 828.775669][T12072] EXT4-fs (loop0): 1 truncate cleaned up [ 828.783548][T12072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.925220][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.960477][T12090] tipc: Enabling of bearer rejected, failed to enable media [ 832.046788][T12112] overlayfs: failed to clone upperpath [ 841.565168][ T28] audit: type=1326 audit(1789053525.721:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.1.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 842.109203][ T28] audit: type=1326 audit(1789053525.721:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.1.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 842.134061][ T28] audit: type=1326 audit(1789053525.721:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.1.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 842.239212][ T28] audit: type=1326 audit(1789053525.721:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.1.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91d7b5e98e code=0x7ffc0000 [ 842.296004][ T28] audit: type=1326 audit(1789053525.721:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.1.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 842.335671][ T28] audit: type=1326 audit(1789053525.721:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.1.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 842.385556][ T28] audit: type=1326 audit(1789053525.731:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.1.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 842.435994][ T28] audit: type=1326 audit(1789053525.731:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.1.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 842.541483][ T28] audit: type=1326 audit(1789053525.731:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.1.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 842.605226][ T28] audit: type=1326 audit(1789053525.731:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.1.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f91d7b9e159 code=0x7ffc0000 [ 843.813584][T12197] kAFS: Can only specify source 'none' with -o dyn [ 846.995668][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 846.995684][ T28] audit: type=1326 audit(1789053530.641:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.0.1652" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37339e159 code=0x7ffc0000 [ 847.056361][ T28] audit: type=1326 audit(1789053530.641:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.0.1652" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa37339e159 code=0x7ffc0000 [ 847.087662][ T28] audit: type=1326 audit(1789053530.641:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.0.1652" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37339e159 code=0x7ffc0000 [ 847.111962][ T28] audit: type=1326 audit(1789053530.651:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.0.1652" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa37335e98e code=0x7ffc0000 [ 848.285892][ T28] audit: type=1326 audit(1789053530.651:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.0.1652" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa37339f457 code=0x7ffc0000 [ 848.475645][ T28] audit: type=1326 audit(1789053530.651:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.0.1652" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa37339e159 code=0x7ffc0000 [ 848.518993][ T28] audit: type=1326 audit(1789053530.661:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.0.1652" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa37339f457 code=0x7ffc0000 [ 848.805791][ T28] audit: type=1326 audit(1789053530.661:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.0.1652" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa37335e98e code=0x7ffc0000 [ 849.635798][ T28] audit: type=1326 audit(1789053530.661:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.0.1652" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37339e159 code=0x7ffc0000 [ 850.383268][ T28] audit: type=1326 audit(1789053530.671:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.0.1652" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa37339e159 code=0x7ffc0000 [ 851.649037][T12259] autofs4:pid:12259:autofs_fill_super: called with bogus options [ 853.935084][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 853.935120][ T28] audit: type=1326 audit(1789053538.091:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.3.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c39e159 code=0x7ffc0000 [ 854.475882][ T28] audit: type=1326 audit(1789053538.091:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.3.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa30c39e159 code=0x7ffc0000 [ 854.625648][ T28] audit: type=1326 audit(1789053538.091:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.3.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c39e159 code=0x7ffc0000 [ 855.060976][T12279] xt_hashlimit: size too large, truncated to 1048576 [ 855.068047][T12279] xt_hashlimit: max too large, truncated to 1048576 [ 855.075428][T12279] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 855.233411][T12281] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12281] [ 855.604471][ T28] audit: type=1326 audit(1789053538.091:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.3.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa30c35e98e code=0x7ffc0000 [ 855.629106][ T5809] IPVS: starting estimator thread 0... [ 855.665651][ T28] audit: type=1326 audit(1789053538.091:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.3.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c39e159 code=0x7ffc0000 [ 855.855229][ T28] audit: type=1326 audit(1789053538.091:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.3.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa30c39e159 code=0x7ffc0000 [ 857.183300][T12282] IPVS: using max 34 ests per chain, 81600 per kthread [ 857.281898][ T28] audit: type=1326 audit(1789053538.091:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.3.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c39e159 code=0x7ffc0000 [ 858.250396][ T28] audit: type=1326 audit(1789053538.101:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.3.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa30c39e159 code=0x7ffc0000 [ 858.385652][ T28] audit: type=1326 audit(1789053538.101:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.3.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30c39e159 code=0x7ffc0000 [ 858.453458][ T28] audit: type=1326 audit(1789053538.101:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.3.1663" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fa30c39e159 code=0x7ffc0000 [ 859.033728][T12296] netlink: 'syz.4.1656': attribute type 1 has an invalid length. [ 859.155606][T12296] netlink: 'syz.4.1656': attribute type 2 has an invalid length. [ 861.328495][T12313] batadv_slave_1: entered promiscuous mode [ 861.877433][T12308] batadv_slave_1: left promiscuous mode [ 863.252450][T12324] veth6: entered allmulticast mode [ 864.163088][T12327] binder: BINDER_SET_CONTEXT_MGR already set [ 864.225600][T12327] binder: 12323:12327 ioctl 4018620d 200000000040 returned -16 [ 866.236457][T12339] overlayfs: failed to clone upperpath [ 870.306196][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.312540][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.334670][T12386] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 882.510618][T12448] No source specified [ 889.357753][T12494] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1722'. [ 896.019998][T12546] Bluetooth: MGMT ver 1.22 [ 904.196665][T12599] loop0: detected capacity change from 0 to 1024 [ 904.381539][T12599] hfsplus: invalid length 1280 has been corrected to 255 [ 904.482636][T12599] hfsplus: invalid length 1280 has been corrected to 255 [ 907.463103][T12622] pim6reg: entered allmulticast mode [ 908.244125][T12636] xt_hashlimit: size too large, truncated to 1048576 [ 908.251307][T12636] xt_hashlimit: max too large, truncated to 1048576 [ 908.258242][T12636] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 914.542263][T12667] tipc: Resetting bearer [ 914.655734][T12672] netlink: 'syz.0.1765': attribute type 1 has an invalid length. [ 914.664055][T12672] netlink: 'syz.0.1765': attribute type 2 has an invalid length. [ 916.376864][T12686] netlink: 'syz.0.1769': attribute type 4 has an invalid length. [ 916.384735][T12686] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1769'. [ 916.767940][T12692] loop0: detected capacity change from 0 to 512 [ 916.786840][T12692] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 916.814172][T12692] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.1772: Allocating blocks 41-42 which overlap fs metadata [ 916.861271][T12692] EXT4-fs (loop0): Remounting filesystem read-only [ 916.881770][T12692] __quota_error: 4 callbacks suppressed [ 916.881786][T12692] Quota error (device loop0): write_blk: dquota write failed [ 916.906510][T12692] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 916.921277][T12692] Quota error (device loop0): write_blk: dquota write failed [ 916.940867][T12692] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 916.969107][T12692] EXT4-fs (loop0): 1 truncate cleaned up [ 916.983051][T12692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 917.804770][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.964374][T12710] loop0: detected capacity change from 0 to 512 [ 917.972864][T12710] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 918.897883][T12710] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.1781: Allocating blocks 41-42 which overlap fs metadata [ 919.161004][T12710] EXT4-fs (loop0): Remounting filesystem read-only [ 919.168086][T12710] Quota error (device loop0): write_blk: dquota write failed [ 919.180214][T12710] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 919.257459][T12710] Quota error (device loop0): write_blk: dquota write failed [ 919.305751][T12710] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 919.335100][T12710] EXT4-fs (loop0): 1 truncate cleaned up [ 919.351688][T12710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.499660][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.632716][T12756] IPVS: length: 170 != 24 [ 922.707218][T12769] loop0: detected capacity change from 0 to 512 [ 922.722254][T12769] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 922.781296][T12769] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.1790: Allocating blocks 41-42 which overlap fs metadata [ 922.806065][T12769] EXT4-fs (loop0): Remounting filesystem read-only [ 922.812908][T12769] Quota error (device loop0): write_blk: dquota write failed [ 922.825323][T12769] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 922.835458][T12769] Quota error (device loop0): write_blk: dquota write failed [ 922.843628][T12769] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 922.854106][T12769] EXT4-fs (loop0): 1 truncate cleaned up [ 922.861412][T12769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.125971][T12777] xt_policy: output policy not valid in PREROUTING and INPUT [ 923.688809][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.093010][T12794] Invalid ELF header magic: != ELF [ 931.357926][T12833] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 931.368806][T12833] ip6gretap1: entered allmulticast mode [ 931.729462][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.735946][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.039613][T12870] xt_hashlimit: size too large, truncated to 1048576 [ 935.046643][T12870] xt_hashlimit: max too large, truncated to 1048576 [ 935.053340][T12870] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 938.444098][T12889] overlayfs: failed to clone upperpath [ 938.852804][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1825'. [ 953.743193][T13025] udc dummy_udc.0: failed to start g1: -4 [ 953.749444][T13025] configfs-gadget.g1: probe of gadget.0 failed with error -4 [ 953.760086][T13025] UDC core: g1: couldn't find an available UDC or it's busy [ 957.084031][T13044] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 957.106401][ T5778] block nbd0: Receive control failed (result -32) [ 957.145803][T13050] block nbd0: shutting down sockets [ 957.803735][T13053] tipc: Enabling of bearer rejected, already enabled [ 958.868825][T13062] xt_TCPMSS: Only works on TCP SYN packets [ 961.135826][T13082] xt_policy: output policy not valid in PREROUTING and INPUT [ 976.485163][T13189] block nbd0: shutting down sockets [ 978.494166][T13205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1904'. [ 980.946086][T13224] xt_hashlimit: size too large, truncated to 1048576 [ 980.953049][T13224] xt_hashlimit: max too large, truncated to 1048576 [ 980.959847][T13224] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 984.098669][T13234] block nbd0: shutting down sockets [ 987.509460][ T5778] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 990.864011][T13285] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1926'. [ 993.288410][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.294724][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.121333][T13300] trusted_key: syz.3.1928 sent an empty control message without MSG_MORE. [ 995.768753][T13309] 9pnet_virtio: no channels available for device syz [ 996.490943][T13308] netlink: 'syz.0.1939': attribute type 2 has an invalid length. [ 996.498799][T13308] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1939'. [ 997.870497][T13320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1933'. [ 998.953056][T13341] sctp: [Deprecated]: syz.3.1937 (pid 13341) Use of struct sctp_assoc_value in delayed_ack socket option. [ 998.953056][T13341] Use struct sctp_sack_info instead [ 1014.705140][T13429] ip6gretap2: entered allmulticast mode [ 1025.216113][T13523] overlayfs: failed to clone lowerpath [ 1025.275410][T13524] overlayfs: failed to clone lowerpath [ 1030.109359][T13554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1997'. [ 1031.288136][T13561] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1032.553835][T13572] No source specified [ 1039.367632][T13604] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1039.686807][T13610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2013'. [ 1045.937256][T13657] sctp: [Deprecated]: syz.0.2031 (pid 13657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1045.937256][T13657] Use struct sctp_sack_info instead [ 1047.351853][T13670] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 1050.347554][T13684] block nbd0: shutting down sockets [ 1054.998310][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.004716][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1063.562070][T13778] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1072.454405][T13835] trusted_key: encrypted_key: insufficient parameters specified [ 1075.416568][ T5778] Bluetooth: hci2: ACL packet for unknown connection handle 1737 [ 1079.190171][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 41 (since boot) is 1126 jiffies old. [ 1080.770043][T13907] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1082.497734][T13924] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2110'. [ 1084.634340][T13928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2111'. [ 1088.437363][T13986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2126'. [ 1089.051555][T13986] syz.1.2126 (13986) used greatest stack depth: 17288 bytes left [ 1089.213795][T13978] kvm: kvm [13977]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1092.077081][T14006] fuse: Bad value for 'fd' [ 1094.434051][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 45 (since boot) is 1015 jiffies old. [ 1096.302083][T14026] block nbd0: shutting down sockets [ 1100.949537][T14057] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1100.960563][T14057] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1100.969162][T14057] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1100.985037][T14057] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1100.992663][T14057] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1101.000937][T14057] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1102.409143][T14054] chnl_net:caif_netlink_parms(): no params data found [ 1103.422721][ T5778] Bluetooth: hci4: command tx timeout [ 1103.510072][T14054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.602592][T14054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.609871][T14054] bridge_slave_0: entered allmulticast mode [ 1103.626741][T14054] bridge_slave_0: entered promiscuous mode [ 1103.645424][T14054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.662546][T14054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.674327][T14054] bridge_slave_1: entered allmulticast mode [ 1103.703087][T14054] bridge_slave_1: entered promiscuous mode [ 1103.819723][T14054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.865770][T14054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.056760][T14054] team0: Port device team_slave_0 added [ 1104.091654][T14054] team0: Port device team_slave_1 added [ 1104.195189][T14054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.222773][T14054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.332702][T14054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.381261][T14054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.419518][T14054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.542442][T14054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.838127][T14054] hsr_slave_0: entered promiscuous mode [ 1104.922733][T14054] hsr_slave_1: entered promiscuous mode [ 1104.993213][T14054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1105.000838][T14054] Cannot create hsr debugfs directory [ 1105.482499][ T5778] Bluetooth: hci4: command tx timeout [ 1106.662510][T14096] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2156'. [ 1107.312084][T14102] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2156'. [ 1107.368430][T14054] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1107.541989][ T5778] Bluetooth: hci4: command tx timeout [ 1108.152250][T14054] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1108.345328][T14054] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1108.423956][T14054] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1108.850045][T14054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.924136][T14054] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.938686][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.945815][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.033539][T12404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.040699][T12404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.931644][ T5778] Bluetooth: hci4: command tx timeout [ 1111.529079][T13948] Set syz1 is full, maxelem 65536 reached [ 1111.631024][T14054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.160810][T14167] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1114.338281][T14054] veth0_vlan: entered promiscuous mode [ 1114.432428][T14054] veth1_vlan: entered promiscuous mode [ 1114.471652][T14178] binder: 14177:14178 ioctl c0306201 200000000080 returned -14 [ 1114.486722][T14054] veth0_macvtap: entered promiscuous mode [ 1114.519460][T14054] veth1_macvtap: entered promiscuous mode [ 1114.615443][T14054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.688595][T14054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.701084][T14054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.716519][T14054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.727901][T14054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.740276][T14054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.814437][T14181] binder: 14177:14181 ioctl c0306201 2000000003c0 returned -14 [ 1115.231769][T14054] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.336720][T14054] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.392317][T14054] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.450227][T14054] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.026591][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.033166][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.985835][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.020698][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.125871][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.143521][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.309123][T12398] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.630144][T14218] xt_policy: output policy not valid in PREROUTING and INPUT [ 1120.899948][T12398] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.211682][T12398] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.381656][T12398] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.900937][T12398] tipc: Disabling bearer [ 1122.036920][T12398] tipc: Left network mode [ 1122.169337][T14238] loop5: detected capacity change from 0 to 512 [ 1122.299718][T14238] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1122.302571][T14239] sctp: [Deprecated]: syz.4.2191 (pid 14239) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1122.302571][T14239] Use struct sctp_sack_info instead [ 1122.395974][T14238] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4059: comm syz.5.2192: Allocating blocks 41-42 which overlap fs metadata [ 1122.434897][T14238] EXT4-fs (loop5): Remounting filesystem read-only [ 1122.444711][T14238] Quota error (device loop5): write_blk: dquota write failed [ 1122.452556][T14238] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 1122.469542][T14238] Quota error (device loop5): write_blk: dquota write failed [ 1122.479500][T14238] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1122.491547][T14238] EXT4-fs (loop5): 1 truncate cleaned up [ 1122.498544][T14238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1127.081091][T14297] IPVS: rr: TCP 172.20.20.170:20000 - no destination available [ 1129.162555][T14054] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.949092][T14314] program syz.5.2206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1131.606893][T12398] dvmrp6 (unregistering): left allmulticast mode [ 1131.660256][T12398] IPVS: stopping master sync thread 9511 ... [ 1134.251230][T14357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1134.418286][T12398] hsr_slave_0: left promiscuous mode [ 1134.471766][T12398] hsr_slave_1: left promiscuous mode [ 1134.590976][T12398] veth1_macvtap: left promiscuous mode [ 1134.598157][T12398] veth0_macvtap: left promiscuous mode [ 1134.624149][T12398] veth1_vlan: left promiscuous mode [ 1134.653942][T12398] veth0_vlan: left promiscuous mode [ 1136.310829][T12398] pim6reg (unregistering): left allmulticast mode [ 1137.408036][T12398] bond2 (unregistering): Released all slaves [ 1137.475304][T14391] loop5: detected capacity change from 0 to 1024 [ 1137.723087][T12398] bond1 (unregistering): Released all slaves [ 1139.344696][T14399] loop5: detected capacity change from 0 to 512 [ 1139.362166][T14399] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1139.428927][T14399] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4059: comm syz.5.2224: Allocating blocks 41-42 which overlap fs metadata [ 1139.502569][T14399] EXT4-fs (loop5): Remounting filesystem read-only [ 1139.514383][T14399] Quota error (device loop5): write_blk: dquota write failed [ 1139.542175][T14399] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 1139.573994][T14399] Quota error (device loop5): write_blk: dquota write failed [ 1139.587759][T14399] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1139.615674][T14399] EXT4-fs (loop5): 1 truncate cleaned up [ 1139.635421][T14399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1140.366737][T14054] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.327898][T14117] IPVS: starting estimator thread 0... [ 1141.430128][T14413] IPVS: using max 34 ests per chain, 81600 per kthread [ 1145.915101][T12398] bond0 (unregistering): Released all slaves [ 1146.977283][T14439] loop5: detected capacity change from 0 to 512 [ 1147.118795][T14439] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1147.219485][T14439] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4059: comm syz.5.2233: Allocating blocks 41-42 which overlap fs metadata [ 1147.285746][T14439] EXT4-fs (loop5): Remounting filesystem read-only [ 1147.292621][T14439] Quota error (device loop5): write_blk: dquota write failed [ 1147.318975][T14439] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 1147.337915][T14439] Quota error (device loop5): write_blk: dquota write failed [ 1147.371746][T14439] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1147.411514][T14439] EXT4-fs (loop5): 1 truncate cleaned up [ 1147.463635][T14439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.178576][T14054] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.466275][T12398] IPVS: stop unused estimator thread 0... [ 1149.928384][T14475] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 1157.745576][T14523] capability: warning: `syz.1.2246' uses 32-bit capabilities (legacy support in use) [ 1159.297271][T14542] block nbd5: shutting down sockets [ 1163.983481][T14573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1165.400742][T14594] loop5: detected capacity change from 0 to 512 [ 1165.443748][T14594] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1165.484943][T14594] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4059: comm syz.5.2253: Allocating blocks 41-42 which overlap fs metadata [ 1165.621857][T14594] EXT4-fs (loop5): Remounting filesystem read-only [ 1166.634224][T14594] Quota error (device loop5): write_blk: dquota write failed [ 1166.744258][T14594] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 1166.998327][T14594] Quota error (device loop5): write_blk: dquota write failed [ 1167.006831][T14594] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1167.705410][T14594] EXT4-fs (loop5): 1 truncate cleaned up [ 1167.712324][T14594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1168.737294][T14054] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.804104][T14613] block nbd0: shutting down sockets [ 1171.526423][T14630] ------------[ cut here ]------------ [ 1171.532338][T14630] kernel BUG at net/core/dev.c:10248! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1171.605649][T14630] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1171.611773][T14630] CPU: 1 PID: 14630 Comm: syz.0.2263 Not tainted syzkaller #0 [ 1171.619245][T14630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1171.629309][T14630] RIP: 0010:register_netdevice+0x1b80/0x1ba0 [ 1171.635405][T14630] Code: ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c d0 fb ff ff 4c 89 f7 e8 01 ec 5a f9 e9 c3 fb ff ff e8 b7 6a 02 f9 0f 0b e8 b0 6a 02 f9 <0f> 0b e8 a9 6a 02 f9 0f 0b e8 a2 6a 02 f9 41 be 42 00 00 00 e9 09 [ 1171.655026][T14630] RSP: 0018:ffffc90005467620 EFLAGS: 00010283 [ 1171.661111][T14630] RAX: ffffffff888517c0 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1171.669102][T14630] RDX: ffffc9000db8d000 RSI: 000000000000290f RDI: 0000000000002910 [ 1171.677101][T14630] RBP: ffffc900054677b8 R08: ffffffff8e3d74e7 R09: 1ffffffff1c7ae9c [ 1171.685090][T14630] R10: dffffc0000000000 R11: fffffbfff1c7ae9d R12: 1ffff92000a8ced8 [ 1171.693077][T14630] R13: ffff88807f46a000 R14: ffff88807e481dc0 R15: 0000000000000001 [ 1171.701058][T14630] FS: 00007fa3742206c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1171.709987][T14630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1171.716566][T14630] CR2: 00007f632175da08 CR3: 000000001eb71000 CR4: 00000000003506e0 [ 1171.724548][T14630] Call Trace: [ 1171.727826][T14630] [ 1171.730752][T14630] ? trace_contention_end+0x39/0xe0 [ 1171.735960][T14630] ? __mutex_lock+0x30d/0xc80 [ 1171.740658][T14630] ? netif_stacked_transfer_operstate+0x210/0x210 [ 1171.747088][T14630] ? mutex_lock_nested+0x20/0x20 [ 1171.752035][T14630] ? __kmem_cache_alloc_node+0x194/0x250 [ 1171.757698][T14630] ? usb_gstrings_attach+0xe8/0xd80 [ 1171.762919][T14630] register_netdev+0x3b/0x50 [ 1171.767515][T14630] pn_bind+0x115/0xb10 [ 1171.771682][T14630] usb_add_function+0x2dd/0x980 [ 1171.776545][T14630] configfs_composite_bind+0xde4/0x13f0 [ 1171.782106][T14630] ? webusb_landingPage_store+0x1c0/0x1c0 [ 1171.787821][T14630] gadget_bind_driver+0x2b3/0x770 [ 1171.792848][T14630] ? gadget_match_driver+0x130/0x130 [ 1171.798129][T14630] really_probe+0x247/0xae0 [ 1171.802654][T14630] ? pm_runtime_barrier+0x14b/0x1c0 [ 1171.807855][T14630] __driver_probe_device+0x1f5/0x390 [ 1171.813143][T14630] driver_probe_device+0x4f/0x420 [ 1171.818158][T14630] __driver_attach+0x444/0x6d0 [ 1171.822921][T14630] bus_for_each_dev+0x235/0x2b0 [ 1171.827773][T14630] ? driver_attach+0x50/0x50 [ 1171.832362][T14630] ? bus_remove_file+0x140/0x140 [ 1171.837298][T14630] ? do_raw_spin_unlock+0x121/0x230 [ 1171.842493][T14630] bus_add_driver+0x340/0x630 [ 1171.847187][T14630] driver_register+0x23a/0x310 [ 1171.851956][T14630] usb_gadget_register_driver_owner+0xf9/0x270 [ 1171.858123][T14630] gadget_dev_desc_UDC_store+0x1c7/0x2e0 [ 1171.863758][T14630] configfs_write_iter+0x312/0x400 [ 1171.868912][T14630] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 1171.874469][T14630] vfs_write+0x474/0x9a0 [ 1171.878718][T14630] ? file_end_write+0x250/0x250 [ 1171.883573][T14630] ? __fget_files+0x3fc/0x460 [ 1171.888255][T14630] ? __fdget_pos+0x2a3/0x330 [ 1171.892849][T14630] ? ksys_write+0x74/0x260 [ 1171.897267][T14630] ksys_write+0x151/0x260 [ 1171.901600][T14630] ? __ia32_sys_read+0x90/0x90 [ 1171.906363][T14630] ? lockdep_hardirqs_on+0x98/0x150 [ 1171.911581][T14630] do_syscall_64+0x55/0xb0 [ 1171.916008][T14630] ? clear_bhb_loop+0x40/0x90 [ 1171.920698][T14630] ? clear_bhb_loop+0x40/0x90 [ 1171.925385][T14630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1171.931279][T14630] RIP: 0033:0x7fa37339e159 [ 1171.935692][T14630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.955298][T14630] RSP: 002b:00007fa374220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1171.963706][T14630] RAX: ffffffffffffffda RBX: 00007fa373626090 RCX: 00007fa37339e159 [ 1171.971673][T14630] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000008 [ 1171.979639][T14630] RBP: 00007fa37343503b R08: 0000000000000000 R09: 0000000000000000 [ 1171.987606][T14630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1171.995567][T14630] R13: 00007fa373626128 R14: 00007fa373626090 R15: 00007ffc2e951a28 [ 1172.003536][T14630] [ 1172.006552][T14630] Modules linked in: [ 1172.019657][T14630] ---[ end trace 0000000000000000 ]--- [ 1172.049902][T14630] RIP: 0010:register_netdevice+0x1b80/0x1ba0 [ 1172.056262][T14630] Code: ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c d0 fb ff ff 4c 89 f7 e8 01 ec 5a f9 e9 c3 fb ff ff e8 b7 6a 02 f9 0f 0b e8 b0 6a 02 f9 <0f> 0b e8 a9 6a 02 f9 0f 0b e8 a2 6a 02 f9 41 be 42 00 00 00 e9 09 [ 1172.076762][T14630] RSP: 0018:ffffc90005467620 EFLAGS: 00010283 [ 1172.083425][T14630] RAX: ffffffff888517c0 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1172.091736][T14630] RDX: ffffc9000db8d000 RSI: 000000000000290f RDI: 0000000000002910 [ 1172.099965][T14630] RBP: ffffc900054677b8 R08: ffffffff8e3d74e7 R09: 1ffffffff1c7ae9c [ 1172.174858][T14630] R10: dffffc0000000000 R11: fffffbfff1c7ae9d R12: 1ffff92000a8ced8 [ 1172.182892][T14630] R13: ffff88807f46a000 R14: ffff88807e481dc0 R15: 0000000000000001 [ 1172.192222][T14630] FS: 00007fa3742206c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1172.201285][T14630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1172.207928][T14630] CR2: 00007f632175da08 CR3: 000000001eb71000 CR4: 00000000003506e0 [ 1172.215953][T14630] Kernel panic - not syncing: Fatal exception [ 1172.222261][T14630] Kernel Offset: disabled [ 1172.226571][T14630] Rebooting in 86400 seconds..