last executing test programs: 1m55.340801208s ago: executing program 1 (id=339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7ff7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0x0, 0xfff1}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_usbip_server_init(0x1) 1m52.29506491s ago: executing program 1 (id=337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd01, &(0x7f0000000000)="0400000000000000000000003801000000000000000000ffffffffffffff") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m51.905048258s ago: executing program 1 (id=341): ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f0000000100)=0x54) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@dioread_lock}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a2d481, 0x0, 0x33, 0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000056, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@inlinecrypt}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x20) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x2cf2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0xd8) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00) mkdir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x60) 1m48.247249259s ago: executing program 1 (id=350): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080), 0x4, 0x526, &(0x7f0000000700)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x4, 0x200, &(0x7f0000000880)="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"}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) pwrite64(r2, &(0x7f0000000180)="95", 0xffaf, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x1, 0x3, 0x4, 0x1000000000001}) 1m43.538541858s ago: executing program 1 (id=361): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000200)="952bb3"}) read$FUSE(r2, &(0x7f0000002a80)={0x2020}, 0x2020) write$vhost_msg_v2(r2, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) 1m43.433825623s ago: executing program 1 (id=362): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r4 = socket(0xa, 0x3, 0x87) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000480)={@private2, 0x18, r6}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) 1m42.081244816s ago: executing program 32 (id=362): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r4 = socket(0xa, 0x3, 0x87) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000480)={@private2, 0x18, r6}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) 9.818362573s ago: executing program 4 (id=810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x9900, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 9.262342729s ago: executing program 4 (id=814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000280)={0xdb, 0x0, 0xa62}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000040)='net/snmp\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1000}}, './file0\x00'}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x8000000, 0x5, 0x3}) syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000000000)=""/138) 8.16267791s ago: executing program 0 (id=826): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 8.063308895s ago: executing program 5 (id=828): r0 = syz_io_uring_setup(0x4176, &(0x7f0000000180)={0x0, 0xa416, 0x10000, 0xfffffffe, 0x2ce}, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x2, &(0x7f0000006680)) syz_open_procfs(0x0, 0x0) unshare(0x40200) r1 = semget(0x1, 0x4, 0x39c) semop(r1, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r1, &(0x7f0000000180)=[{0x1, 0xbbdd, 0x1000}], 0x1) userfaultfd(0x801) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) 7.340895998s ago: executing program 5 (id=830): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r0, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000800100000020000180060001000a000000140004"], 0x34}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r2, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r1) socket$nl_generic(0x10, 0x3, 0x10) 6.383721433s ago: executing program 5 (id=837): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r0, 0x0, 0x0, 0x80800) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012) 6.212678761s ago: executing program 3 (id=838): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)="0300000033000000071b000001000000", 0x33) 5.979046332s ago: executing program 3 (id=840): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r4, r0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 5.968780442s ago: executing program 0 (id=841): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f00000001c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000200)=0x2c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000100), 0x4, 0x682001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x80000000, 0x2, 0x10, 0xe, 0x5, 0x79, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfd, 0xfffffffb, 0x9, 0x100003, 0x7fffffff, 0x489, 0x7, 0xfffffffd, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000000c0)=0x200, 0x4) pread64(r2, 0x0, 0x0, 0x2f6) 5.895235676s ago: executing program 4 (id=842): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x148, 0x0, 0x8}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x80000000000, 0x9, 0x7, 0x0, 0x5, 0x20000100000000, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x2, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0xfffffffface6e3cd, 0x40000000001c, 0x9, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.708158831s ago: executing program 3 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r3) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200040c4}, 0x7a712bfc07b8374c) 4.626919744s ago: executing program 0 (id=844): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.626625395s ago: executing program 5 (id=845): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0xc, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x7b6e, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 4.451164963s ago: executing program 4 (id=846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008090}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.7244903s ago: executing program 0 (id=847): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000040), 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000a60000000060a0b16000000000000000002000008400004800c000180080001006f73660030000180080001006f736600240002"], 0x88}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x257, @time={0x65757100, 0x5}, 0x0, {}, 0x67, 0x2}) 1.72393388s ago: executing program 3 (id=848): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x400001}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) ioctl$BINDER_FREEZE(r1, 0x400c620e, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 1.71988994s ago: executing program 2 (id=849): openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x10, 0x0, 0x800087}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.031905983s ago: executing program 2 (id=850): r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000f000000000000000000711234000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f929ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340076dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002fc0)={{{@in6=@private2, @in6=@private1}}, {{@in=@private}, 0x0, @in=@multicast2}}, &(0x7f00000030c0)=0xe8) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x2204803, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}]}}) 1.030124643s ago: executing program 5 (id=851): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x39, 0x7, 0x3, 0x180, 0x100, 0x10, 0xf1, 0xf, 0x10, 0x5, 0x0, 0x26, 0x0, 0xa, 0x0, 0xbd9], 0x4000, 0x43180}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', 0x0}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x0, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x6, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0x0, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xf}, {0xf000, 0x1000, 0xf, 0x3, 0x17, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xffff1000, 0xc, 0xa0, 0xb1, 0x8, 0x3, 0x6, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x10000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x1, 0x40, 0x70}, {0x9000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0xe0040010, 0x0, 0x3000, 0x2024, 0x3, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]}) futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000100), 0xcfff7ff8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 998.177304ms ago: executing program 3 (id=852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7ff, 0x3, 0x6361, 0x7, 0xffffffff, 0xfffffffe}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x404c010) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x4041, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 943.229767ms ago: executing program 2 (id=853): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002, 0x20000, 0x80ffffff}]}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x70000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x4, 0x1, 0x3, 0x1d}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0xf, 0x5, 0xff, 0xc3, 0x6, 0x3, 0x6, 0x1, 0x3}, {0x3000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xb5, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000001, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 942.906456ms ago: executing program 2 (id=854): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005500)={0x2020}, 0x2020) 832.772021ms ago: executing program 2 (id=855): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100060000000000040000000000000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="100002000000000020"], 0x3c, 0x3) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 819.370692ms ago: executing program 5 (id=856): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0x2020) 767.248495ms ago: executing program 3 (id=857): r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0xa0a02) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000200)={"a0453822", 0x0, 0x6, 0x2, 0xbe, 0x8, "3377f877c734c40400", "01d61500", "020100", "d9f25a00", ["c386afeefff8ffffff9eec01", "0080000000000000001000", "000000000000000000c40800", "ffffff8100"]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x10, &(0x7f00000000c0)={0x200, 0x8008, 0x2040, 0xfffb}, &(0x7f0000000140)=0x10) r3 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x6, 0xff, 0x0, '\x00', 0x0, 0x1}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x4) recvmmsg(r1, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x8007}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000004b00)=""/4112, 0x1010}, {&(0x7f0000000040)=""/37, 0x25}, {&(0x7f00000001c0)=""/201, 0xc9}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000a40)=""/103, 0x67}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x6}, 0x19}], 0x3, 0x0, 0x0) 727.440487ms ago: executing program 4 (id=858): r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x43, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x664181bb8510ecc4, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r0, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 712.039647ms ago: executing program 0 (id=859): r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x80, 0x2}]}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) socket(0x1e, 0x5, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0xfffffffffffffffd) ioctl$TCSBRKP(r2, 0x5425, 0x80000000) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000500)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) 603.691452ms ago: executing program 4 (id=860): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 559.234954ms ago: executing program 2 (id=861): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x38, r5, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 0s ago: executing program 0 (id=862): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0xc, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x7b6e, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) kernel console output (not intermixed with test programs): l. Opts: bsddf,,errors=continue. Quota mode: none. [ 83.476951][ T7] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 83.563091][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.721518][ T7] usb 3-1: Product: syz [ 83.796647][ T7] usb 3-1: Manufacturer: syz [ 83.870436][ T7] usb 3-1: SerialNumber: syz [ 83.884716][ T4502] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.81: bg 0: block 465: padding at end of block bitmap is not set [ 84.050317][ T7] r8152-cfgselector 3-1: config 0 descriptor?? [ 84.196484][ T4231] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.397306][ T4473] netlink: 3684 bytes leftover after parsing attributes in process `syz.2.70'. [ 84.593536][ T4512] device bridge_slave_0 left promiscuous mode [ 84.605279][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.526408][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.536419][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.546397][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.556403][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.566396][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.576396][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.586397][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.596395][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.606394][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.616395][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.786386][ C0] sched: RT throttling activated [ 85.794001][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 86.346611][ T7] r8152-cfgselector 3-1: Unknown version 0x0000 [ 86.353926][ T7] r8152-cfgselector 3-1: bad CDC descriptors [ 86.405399][ T7] r8152-cfgselector 3-1: Unknown version 0x0000 [ 86.436796][ T4231] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 86.444457][ T4231] usb 2-1: can't read configurations, error -61 [ 86.470322][ T7] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 86.507001][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 86.560783][ T4531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'. [ 86.646546][ T4231] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.649153][ T4533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'. [ 86.682096][ T1111] cfg80211: failed to load regulatory.db [ 86.735310][ T26] audit: type=1400 audit(1790068984.315:3): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4526 comm="syz.2.89" [ 86.841950][ T4231] usb 2-1: device descriptor read/64, error -71 [ 86.913193][ T4541] process 'syz.3.91' launched './file0' with NULL argv: empty string added [ 86.983504][ T4231] usb usb2-port1: attempt power cycle [ 88.096511][ T4231] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 88.176530][ T4231] usb 2-1: device descriptor read/8, error -71 [ 88.269664][ T26] audit: type=1800 audit(1790068985.855:4): pid=4525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.87" name="bus" dev="ramfs" ino=34111 res=0 errno=0 [ 89.218907][ T4538] Process accounting resumed [ 89.454689][ T4549] event trace: Could not enable event p [ 89.575674][ T4567] overlayfs: overlapping lowerdir path [ 93.047960][ T4602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'. [ 94.867781][ T4618] loop2: detected capacity change from 0 to 32768 [ 94.920041][ T4618] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.117 (4618) [ 95.234347][ T4618] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 95.539587][ T4618] BTRFS info (device loop2): enabling auto defrag [ 96.077144][ T4618] BTRFS info (device loop2): force clearing of disk cache [ 96.101574][ T4618] BTRFS info (device loop2): ignoring data csums [ 96.227361][ T4618] BTRFS info (device loop2): turning on async discard [ 96.255102][ T4656] Cannot find set identified by id 0 to match [ 96.398036][ T4618] BTRFS info (device loop2): setting nodatacow, compression disabled [ 96.548288][ T4618] BTRFS info (device loop2): turning off async discard [ 96.624723][ T4618] BTRFS info (device loop2): disabling free space tree [ 96.665879][ T4618] BTRFS info (device loop2): has skinny extents [ 97.065958][ T4618] BTRFS error (device loop2): open_ctree failed: -12 [ 98.013997][ T4178] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (4178) [ 98.565700][ T4711] using random self ethernet address [ 98.610754][ T4711] using random host ethernet address [ 98.704441][ T26] audit: type=1800 audit(1790068996.285:5): pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.137" name="UDC" dev="configfs" ino=34895 res=0 errno=0 [ 98.716333][ T4711] usb0: HOST MAC e2:c2:c7:6a:29:8c [ 98.798168][ T4711] usb0: MAC 7e:cd:5b:ce:b7:70 [ 98.817916][ T4711] configfs-gadget gadget: afunc_bind:1164 Error! [ 98.866781][ T4711] udc dummy_udc.0: failed to start g1: -19 [ 99.269561][ T4729] tipc: Started in network mode [ 99.274718][ T4729] tipc: Node identity 4, cluster identity 4711 [ 99.386551][ T4729] tipc: Node number set to 4 [ 100.389735][ T4749] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 100.490380][ T4749] kvm: pic: non byte read [ 100.510285][ T4749] kvm: pic: single mode not supported [ 100.510916][ T4749] kvm: pic: non byte read [ 100.552487][ T4749] kvm: pic: level sensitive irq not supported [ 100.553056][ T4749] kvm: pic: non byte read [ 100.861511][ T4770] loop3: detected capacity change from 0 to 512 [ 100.917928][ T4772] binder_alloc: 4766: binder_alloc_buf, no vma [ 101.027587][ T4770] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 101.049381][ T4770] System zones: 1-12 [ 101.098745][ T4770] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.151: missing EA_INODE flag [ 101.192970][ T4770] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.151: error while reading EA inode 12 err=-117 [ 101.264702][ T4770] EXT4-fs (loop3): 1 orphan inode deleted [ 101.283542][ T4770] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 101.531628][ T4791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'. [ 102.786764][ T4816] loop3: detected capacity change from 0 to 256 [ 102.880560][ T4821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 102.932328][ T4816] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 102.938751][ T4822] device macvlan2 entered promiscuous mode [ 103.171613][ T4825] capability: warning: `syz.2.162' uses deprecated v2 capabilities in a way that may be insecure [ 103.451411][ T26] audit: type=1326 audit(1790069001.035:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.2.165" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f747b453159 code=0x0 [ 103.507635][ T4838] kvm: emulating exchange as write [ 103.581303][ T4834] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.899624][ T4845] syz.3.169 sent an empty control message without MSG_MORE. [ 104.147230][ T4834] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.854367][ T4834] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.121561][ T4834] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.192974][ T4860] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.174'. [ 105.401421][ T4866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 105.976484][ T4229] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.070621][ T4871] netlink: 'syz.3.177': attribute type 1 has an invalid length. [ 106.197555][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.236260][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.255708][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.278646][ T4875] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.330645][ T4879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.179'. [ 106.391119][ T4875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.536576][ T4229] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 106.558354][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.585984][ T4229] usb 5-1: Product: syz [ 106.607306][ T4229] usb 5-1: Manufacturer: syz [ 106.623574][ T4229] usb 5-1: SerialNumber: syz [ 106.885786][ T4892] netlink: 'syz.1.181': attribute type 1 has an invalid length. [ 107.116636][ T4229] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 107.340939][ T4907] netlink: 'syz.1.184': attribute type 10 has an invalid length. [ 107.481560][ T4907] team0: Port device dummy0 added [ 107.523499][ T4913] netlink: 'syz.1.184': attribute type 10 has an invalid length. [ 107.621132][ T4913] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 107.773321][ T4913] team0: Failed to send options change via netlink (err -105) [ 107.881327][ T4913] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 107.891232][ T4913] team0: Port device dummy0 removed [ 107.899968][ T4913] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 109.012590][ T4229] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 109.546807][ T4229] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 109.606684][ T4229] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 109.691589][ T4229] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 109.792365][ T4229] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 109.829770][ T4938] loop3: detected capacity change from 0 to 512 [ 109.929338][ T4938] EXT4-fs (loop3): Ignoring removed oldalloc option [ 109.974753][ T4229] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 110.027684][ T4229] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 110.056649][ T4231] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.073768][ T4938] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.189: bg 0: block 5: invalid block bitmap [ 110.147139][ T4229] lan78xx: probe of 5-1:1.0 failed with error -71 [ 110.216612][ T4938] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 110.288341][ T4229] usb 5-1: USB disconnect, device number 2 [ 110.298349][ T4938] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.189: invalid indirect mapped block 3 (level 2) [ 110.312285][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 110.356249][ T4954] netlink: 'syz.0.193': attribute type 1 has an invalid length. [ 110.389665][ T4938] EXT4-fs (loop3): 1 orphan inode deleted [ 110.395442][ T4938] EXT4-fs (loop3): 1 truncate cleaned up [ 110.439610][ T4954] bond1: (slave geneve2): making interface the new active one [ 110.448619][ T4954] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.452483][ T4938] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,,errors=continue. Quota mode: writeback. [ 110.469446][ T4954] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 110.566703][ T4231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 110.584188][ T4954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.193'. [ 110.596473][ T4231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 110.620382][ T4954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.637679][ T4962] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.656258][ T4948] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.191'. [ 110.772611][ T4954] syz.0.193 (4954) used greatest stack depth: 19456 bytes left [ 110.836763][ T4231] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 110.856181][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.898717][ T4231] usb 2-1: Product: syz [ 110.902944][ T4231] usb 2-1: Manufacturer: syz [ 111.152685][ T4231] usb 2-1: SerialNumber: syz [ 111.775275][ T4231] usb 2-1: config 0 descriptor?? [ 111.881851][ T4231] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 112.088127][ T4985] MPTCP: addr_signal error, rm_addr=1 [ 112.097530][ T4988] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709518847) [ 112.240457][ T4988] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 112.417585][ T4233] usb 2-1: USB disconnect, device number 6 [ 113.607152][ T5015] netlink: 'syz.4.205': attribute type 1 has an invalid length. [ 113.858317][ T5015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.990321][ T5024] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.998178][ T5031] VFS: Mount too revealing [ 114.031405][ T5024] bond1: (slave bond2): Enslaving as an active interface with a down link [ 114.222681][ T5027] bond1 (unregistering): (slave bond2): Releasing active interface [ 114.313430][ T5027] bond1 (unregistering): Released all slaves [ 114.356598][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ec6f400: rx timeout, send abort [ 114.857078][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881482d2c00: rx timeout, send abort [ 114.866162][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ec6f400: abort rx timeout. Force session deactivation [ 115.365345][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881482d2c00: abort rx timeout. Force session deactivation [ 116.120767][ T5096] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 116.661193][ T5114] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 116.681692][ T5120] loop4: detected capacity change from 0 to 128 [ 116.713905][ T5114] kvm: pic: non byte read [ 116.746033][ T5114] kvm: pic: non byte read [ 116.777033][ T5114] kvm: pic: non byte read [ 116.792290][ T5114] kvm: pic: non byte read [ 116.816260][ T5114] kvm: pic: non byte read [ 116.842139][ T5114] kvm: pic: non byte read [ 117.207197][ T5131] sctp: [Deprecated]: syz.0.234 (pid 5131) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.207197][ T5131] Use struct sctp_sack_info instead [ 117.295434][ T5134] loop1: detected capacity change from 0 to 1024 [ 117.388003][ T5134] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 117.604667][ T5134] Illegal XDP return value 4294967294, expect packet loss! [ 118.286493][ T4241] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 118.428654][ T5169] tipc: Enabling of bearer rejected, failed to enable media [ 118.757885][ T4241] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 118.768377][ T4241] usb 2-1: config 0 has no interface number 0 [ 118.832842][ T4241] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.116627][ T4241] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 119.176468][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.244063][ T4241] usb 2-1: Product: syz [ 119.284719][ T4241] usb 2-1: Manufacturer: syz [ 119.321608][ T4241] usb 2-1: SerialNumber: syz [ 119.387112][ T4241] usb 2-1: config 0 descriptor?? [ 119.708214][ T4241] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 121.706420][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 122.466184][ T13] usb 2-1: USB disconnect, device number 7 [ 122.524805][ T5224] loop4: detected capacity change from 0 to 1024 [ 122.550722][ T13] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 122.624163][ T26] audit: type=1800 audit(1790069020.205:7): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.251" name="UDC" dev="configfs" ino=35994 res=0 errno=0 [ 122.631787][ T5229] configfs-gadget gadget: afunc_bind:1164 Error! [ 122.670661][ T5224] EXT4-fs (loop4): Ignoring removed bh option [ 123.565804][ T5229] udc dummy_udc.0: failed to start g1: -19 [ 123.601271][ T4229] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.688670][ T5224] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,max_dir_size_kb=0x0000000000000001,nombcache,sysvgroups,noinit_itable,dioread_lock,nogrpid,bh,grpjquota=,,errors=continue. Quota mode: none. [ 124.139416][ T4229] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 124.158980][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.179004][ T4229] usb 4-1: Product: syz [ 124.193551][ T4229] usb 4-1: Manufacturer: syz [ 124.203679][ T4229] usb 4-1: SerialNumber: syz [ 124.349921][ T5242] netlink: 'syz.2.253': attribute type 10 has an invalid length. [ 124.478455][ T5242] team0: Port device dummy0 added [ 124.518759][ T5243] netlink: 'syz.2.253': attribute type 10 has an invalid length. [ 124.707011][ T4229] net_ratelimit: 5 callbacks suppressed [ 124.707033][ T4229] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 124.754947][ T5243] team0: Port device dummy0 removed [ 124.795168][ T5243] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 124.874677][ T5258] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.882155][ T5258] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.094873][ T5260] device bridge_slave_1 left promiscuous mode [ 125.103653][ T5260] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.146062][ T5260] device bridge_slave_0 left promiscuous mode [ 125.182609][ T5260] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.327202][ T4262] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.646715][ T4262] usb 5-1: Using ep0 maxpacket: 32 [ 126.082878][ T4262] usb 5-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 126.115253][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.133946][ T4262] usb 5-1: Product: syz [ 126.141209][ T5277] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 126.149622][ T4262] usb 5-1: Manufacturer: syz [ 126.154246][ T4262] usb 5-1: SerialNumber: syz [ 126.202207][ T5277] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.215234][ T5277] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.226219][ T5277] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.242705][ T5277] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.255612][ T5277] bond1: (slave geneve2): making interface the new active one [ 126.271081][ T5277] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 126.284890][ T5284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.259'. [ 126.344083][ T5284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.456597][ T4229] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 126.461571][ T5258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 127.040999][ T4262] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 127.146131][ T4262] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 127.237771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 127.417440][ T4229] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 127.446833][ T4229] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 127.486588][ T4229] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 127.555600][ T4229] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 127.634246][ T4262] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 127.663708][ T4262] usb 5-1: USB disconnect, device number 3 [ 127.716541][ T4229] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 128.289786][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.445218][ T5318] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 128.526599][ T4229] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 128.556518][ T4229] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 128.606530][ T4229] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 128.656561][ T4229] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 128.695796][ T4229] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 128.767147][ T4229] lan78xx: probe of 4-1:1.0 failed with error -71 [ 128.802220][ T4229] usb 4-1: USB disconnect, device number 2 [ 130.172042][ T5341] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.179677][ T5341] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.245061][ T5345] device bridge_slave_1 left promiscuous mode [ 130.296108][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.359021][ T5345] device bridge_slave_0 left promiscuous mode [ 130.394015][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.488360][ T5349] netlink: 'syz.2.275': attribute type 4 has an invalid length. [ 130.528390][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 130.554452][ T5352] netlink: 'syz.2.275': attribute type 4 has an invalid length. [ 130.959601][ T5364] device syzkaller0 entered promiscuous mode [ 130.964159][ T5339] loop3: detected capacity change from 0 to 32768 [ 131.082924][ T5339] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 131.119143][ T5339] BTRFS info (device loop3): enabling auto defrag [ 131.162770][ T5339] BTRFS info (device loop3): force clearing of disk cache [ 132.090796][ T5339] BTRFS info (device loop3): ignoring data csums [ 132.126203][ T5339] BTRFS info (device loop3): turning on async discard [ 132.172209][ T5339] BTRFS info (device loop3): setting nodatacow, compression disabled [ 132.219578][ T5339] BTRFS info (device loop3): turning off async discard [ 132.269301][ T5339] BTRFS info (device loop3): disabling free space tree [ 132.295863][ T5382] tipc: Enabling of bearer rejected, failed to enable media [ 132.344678][ T5339] BTRFS info (device loop3): has skinny extents [ 133.358605][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.365045][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.659469][ T5396] device syzkaller0 entered promiscuous mode [ 133.769041][ T5408] tipc: Started in network mode [ 133.774062][ T5408] tipc: Node identity 2a10bbf35b1d, cluster identity 4711 [ 133.793572][ T5416] fuse: Unknown parameter '0xffffffffffffffff' [ 133.819513][ T5408] tipc: Enabled bearer , priority 0 [ 133.902284][ T5339] BTRFS error (device loop3): open_ctree failed: -12 [ 133.911037][ T5395] tipc: Resetting bearer [ 133.972312][ T5395] tipc: Disabling bearer [ 134.536815][ T4227] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.039039][ T5471] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 137.336429][ T4227] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 137.344573][ T4227] usb 4-1: config 0 has no interface number 0 [ 137.363383][ T4227] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.606495][ T4227] usb 4-1: string descriptor 0 read error: -71 [ 137.612795][ T4227] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 137.637795][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.658236][ T4227] usb 4-1: config 0 descriptor?? [ 137.674048][ T5493] x_tables: unsorted entry at hook 2 [ 137.686599][ T4227] usb 4-1: can't set config #0, error -71 [ 137.733890][ T4227] usb 4-1: USB disconnect, device number 3 [ 137.800589][ T5496] loop2: detected capacity change from 0 to 512 [ 137.910322][ T5502] loop4: detected capacity change from 0 to 16 [ 138.031375][ T5502] erofs: (device loop4): mounted with root inode @ nid 36. [ 138.060077][ T5497] loop3: detected capacity change from 0 to 40427 [ 138.092509][ T5505] loop1: detected capacity change from 0 to 1024 [ 138.100483][ T5496] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 138.109869][ T5496] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 138.120939][ T5496] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 138.172619][ T5497] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 138.180798][ T5497] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 138.199586][ T5497] F2FS-fs (loop3): invalid crc value [ 138.234883][ T5497] F2FS-fs (loop3): Found nat_bits in checkpoint [ 138.303997][ T5497] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 138.311376][ T5497] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.629850][ T5522] Bluetooth: (null): Too short H5 packet [ 139.653932][ T4396] hfsplus: b-tree write err: -5, ino 25 [ 139.668148][ T4396] hfsplus: b-tree write err: -5, ino 4 [ 139.673930][ T4396] hfsplus: b-tree write err: -5, ino 2 [ 139.703219][ T4396] hfsplus: b-tree write err: -5, ino 26 [ 139.718300][ T4396] hfsplus: b-tree write err: -5, ino 27 [ 139.876542][ T5425] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.006516][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 141.144287][ T26] audit: type=1804 audit(1790069038.725:8): pid=5544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.314" name="/newroot/59/file0" dev="fuse" ino=1 res=1 errno=0 [ 141.269703][ T26] audit: type=1804 audit(1790069038.765:9): pid=5544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.314" name="/newroot/59/file0" dev="fuse" ino=1 res=1 errno=0 [ 141.431847][ T21] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 141.699762][ T21] usb 3-1: config 0 has no interface number 0 [ 141.735698][ T21] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.167123][ T5425] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 142.347295][ T5425] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 142.577786][ T5425] usb 5-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 142.592192][ T5425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.609655][ T5425] usb 5-1: Product: syz [ 142.633984][ T5425] usb 5-1: Manufacturer: syz [ 142.656621][ T5425] usb 5-1: SerialNumber: syz [ 142.706191][ T5425] usb 5-1: can't set config #1, error -71 [ 142.832409][ T5425] usb 5-1: USB disconnect, device number 4 [ 142.907097][ T21] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 142.934168][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.945223][ T5582] jffs2: notice: (5582) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 142.962248][ T21] usb 3-1: Product: syz [ 142.996108][ T21] usb 3-1: Manufacturer: syz [ 143.099116][ T21] usb 3-1: config 0 descriptor?? [ 143.116597][ T21] usb 3-1: can't set config #0, error -71 [ 143.252389][ T5584] loop2: detected capacity change from 0 to 40427 [ 143.327391][ T21] usb 3-1: USB disconnect, device number 3 [ 143.362639][ T5584] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 143.370513][ T5584] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 143.386895][ T5584] F2FS-fs (loop2): invalid crc value [ 144.337574][ T5584] F2FS-fs (loop2): Found nat_bits in checkpoint [ 144.397363][ T5584] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 144.404463][ T5584] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 145.918624][ T5613] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 145.925578][ T5613] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 145.989138][ T5613] vhci_hcd vhci_hcd.0: Device attached [ 146.347457][ T5621] vhci_hcd: connection closed [ 146.351663][ T9] vhci_hcd: stop threads [ 146.392103][ T9] vhci_hcd: release socket [ 146.543400][ T9] vhci_hcd: disconnect device [ 147.026538][ T4227] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 147.747003][ T4227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.949913][ T4227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.010773][ T4227] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.024033][ T4227] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 148.033594][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.096899][ T4227] usb 4-1: config 0 descriptor?? [ 148.249358][ T5656] loop4: detected capacity change from 0 to 512 [ 148.335513][ T5660] loop1: detected capacity change from 0 to 128 [ 148.372085][ T5633] loop3: detected capacity change from 0 to 128 [ 148.414850][ T5660] EXT4-fs (loop1): Test dummy encryption mode enabled [ 148.422203][ T5656] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.340: missing EA_INODE flag [ 148.457360][ T5656] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.340: error while reading EA inode 12 err=-117 [ 148.476192][ T5656] EXT4-fs (loop4): 1 orphan inode deleted [ 148.483573][ T5660] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_lock,,errors=continue. Quota mode: none. [ 148.490649][ T5656] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.497789][ T5660] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.024085][ T4227] wacom 0003:056A:0003.0001: unbalanced collection at end of report description [ 149.828480][ T4227] wacom 0003:056A:0003.0001: parse failed [ 149.854833][ T4227] wacom: probe of 0003:056A:0003.0001 failed with error -22 [ 149.895066][ T4227] usb 4-1: USB disconnect, device number 4 [ 150.182799][ T5660] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 150.900489][ T5696] loop4: detected capacity change from 0 to 40427 [ 151.018001][ T5686] binder: 5685:5686 ioctl c0306201 200000000380 returned -14 [ 151.123103][ T5696] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 151.130990][ T5696] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 151.144748][ T5696] F2FS-fs (loop4): invalid crc value [ 151.189945][ T5660] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 151.229793][ T5696] F2FS-fs (loop4): Found nat_bits in checkpoint [ 151.414367][ T5696] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 151.421799][ T5696] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 152.742932][ T5723] loop1: detected capacity change from 0 to 512 [ 154.082680][ T5723] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.104641][ T5723] ext4 filesystem being mounted at /68/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.757703][ T5745] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 155.549246][ T5746] loop3: detected capacity change from 0 to 1024 [ 155.821059][ T4185] EXT4-fs warning (device loop1): ext4_empty_dir:3149: inode #12: comm syz-executor: directory missing '.' [ 155.843807][ T4185] EXT4-fs warning (device loop1): ext4_empty_dir:3149: inode #12: comm syz-executor: directory missing '.' [ 155.865834][ T5746] hfsplus: request for non-existent node 33423360 in B*Tree [ 155.874403][ T5746] hfsplus: request for non-existent node 33423360 in B*Tree [ 155.889361][ T4185] EXT4-fs warning (device loop1): ext4_empty_dir:3149: inode #12: comm syz-executor: directory missing '.' [ 155.910256][ T5756] hfsplus: request for non-existent node 33423360 in B*Tree [ 155.922134][ T4185] EXT4-fs warning (device loop1): ext4_empty_dir:3149: inode #12: comm syz-executor: directory missing '.' [ 155.942920][ T5756] hfsplus: request for non-existent node 33423360 in B*Tree [ 155.952400][ T4185] EXT4-fs warning (device loop1): ext4_empty_dir:3149: inode #12: comm syz-executor: directory missing '.' [ 155.982706][ T5746] hfsplus: request for non-existent node 33423360 in B*Tree [ 155.996604][ T5746] hfsplus: request for non-existent node 33423360 in B*Tree [ 155.998103][ T4185] EXT4-fs warning (device loop1): ext4_empty_dir:3149: inode #12: comm syz-executor: directory missing '.' [ 156.043436][ T5746] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.048161][ T4185] EXT4-fs warning (device loop1): ext4_empty_dir:3149: inode #12: comm syz-executor: directory missing '.' [ 156.073130][ T4185] EXT4-fs warning (device loop1): ext4_empty_dir:3149: inode #12: comm syz-executor: directory missing '.' [ 156.074834][ T5746] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.134519][ T5762] netlink: 'syz.4.352': attribute type 4 has an invalid length. [ 156.134581][ T4185] EXT4-fs warning (device loop1): ext4_empty_dir:3149: inode #12: comm syz-executor: directory missing '.' [ 156.150891][ T5762] netlink: 'syz.4.352': attribute type 4 has an invalid length. [ 156.161736][ T5763] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.170147][ T4185] EXT4-fs warning (device loop1): ext4_empty_dir:3149: inode #12: comm syz-executor: directory missing '.' [ 156.176037][ T5763] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.347386][ T5756] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.355382][ T5756] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.372591][ T5746] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.437777][ T5746] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.449110][ T5756] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.457858][ T5756] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.511631][ T5763] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.558512][ T5763] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.599817][ T5746] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.620079][ T5746] hfsplus: request for non-existent node 33423360 in B*Tree [ 157.854625][ T151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.539729][ T151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.724748][ T5798] binder_alloc: 5797: pid 5797 spamming oneway? 2 buffers allocated for a total size of 5120 [ 158.849711][ T5798] binder_alloc: 5797: pid 5797 spamming oneway? 3 buffers allocated for a total size of 5128 [ 158.870290][ T151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.068796][ T151] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.529051][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 159.835779][ T151] tipc: Left network mode [ 160.196088][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.217967][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.249486][ T5800] device bridge_slave_0 entered promiscuous mode [ 160.403458][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.421494][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.440345][ T5800] device bridge_slave_1 entered promiscuous mode [ 160.588623][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.638307][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.821181][ T5800] team0: Port device team_slave_0 added [ 160.907709][ T5800] team0: Port device team_slave_1 added [ 160.953062][ T4241] Bluetooth: hci0: command 0x0409 tx timeout [ 161.335959][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.437452][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.788968][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.995593][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.035495][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.073100][ T5867] loop4: detected capacity change from 0 to 128 [ 162.268418][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.557981][ T5800] device hsr_slave_0 entered promiscuous mode [ 162.616745][ T5800] device hsr_slave_1 entered promiscuous mode [ 162.688652][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.712727][ T5800] Cannot create hsr debugfs directory [ 162.986793][ T4241] Bluetooth: hci0: command 0x041b tx timeout [ 163.931627][ T151] device hsr_slave_0 left promiscuous mode [ 163.965151][ T151] device hsr_slave_1 left promiscuous mode [ 163.987017][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.994554][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.039920][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.063088][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.091362][ T151] device veth1_macvtap left promiscuous mode [ 164.101930][ T151] device veth0_macvtap left promiscuous mode [ 164.113545][ T151] device veth1_vlan left promiscuous mode [ 164.125169][ T151] device veth0_vlan left promiscuous mode [ 165.343411][ T4688] Bluetooth: hci0: command 0x040f tx timeout [ 165.590960][ T5908] loop4: detected capacity change from 0 to 1024 [ 165.922183][ T4394] hfsplus: b-tree write err: -5, ino 25 [ 165.928462][ T4394] hfsplus: b-tree write err: -5, ino 4 [ 165.934330][ T4394] hfsplus: b-tree write err: -5, ino 2 [ 165.935242][ T151] team0 (unregistering): Port device team_slave_1 removed [ 165.940524][ T4394] hfsplus: b-tree write err: -5, ino 26 [ 165.954872][ T4394] hfsplus: b-tree write err: -5, ino 27 [ 165.974921][ T151] team0 (unregistering): Port device team_slave_0 removed [ 165.988636][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.002200][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.155178][ T151] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 166.214607][ T151] bond0 (unregistering): Released all slaves [ 166.363290][ T5920] vivid-001: disconnect [ 166.967499][ T5916] vivid-001: reconnect [ 167.162908][ T5922] loop4: detected capacity change from 0 to 1024 [ 167.221668][ T5922] EXT4-fs (loop4): Ignoring removed bh option [ 167.227903][ T5800] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.280835][ T5800] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.326880][ T5800] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.335965][ T5922] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,dioread_lock,stripe=0x0000000000000005,nolazytime,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,barrier=0x0000000000000004,grpquota,bh,init_itable,. Quota mode: writeback. [ 167.386780][ T4688] Bluetooth: hci0: command 0x0419 tx timeout [ 167.404522][ T5800] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.814525][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.851422][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.866214][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.896304][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.939481][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.965432][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.966529][ T5961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'. [ 167.996950][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.004096][ T4280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.040152][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.095831][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.122758][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.129946][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.176952][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.203835][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.225173][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.248046][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.267099][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.291147][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.317155][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.343062][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.378013][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.398692][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.422125][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.441771][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.462287][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.760980][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.776795][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.800120][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.324109][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.343910][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.357231][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.383506][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.407327][ T5800] device veth0_vlan entered promiscuous mode [ 169.427960][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.436775][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.460524][ T5800] device veth1_vlan entered promiscuous mode [ 169.528926][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.557278][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.583654][ T5800] device veth0_macvtap entered promiscuous mode [ 169.605452][ T5800] device veth1_macvtap entered promiscuous mode [ 169.625736][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.645578][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.656189][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.675643][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.685870][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.702775][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.715148][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.732132][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.748189][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.768291][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.787199][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.795425][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.804873][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.817010][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.828745][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.839251][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.850019][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.860150][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.874208][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.884434][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.902054][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.914465][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.925139][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.934636][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.946039][ T5800] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.962865][ T5800] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.972025][ T5800] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.989554][ T5800] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.141686][ T4277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.165900][ T4277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.191421][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.210147][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.218848][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.226523][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.335559][ T6014] loop2: detected capacity change from 0 to 1024 [ 170.877762][ T6028] loop5: detected capacity change from 0 to 40427 [ 170.935091][ T6028] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 170.942975][ T6028] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 170.952927][ T6028] F2FS-fs (loop5): invalid crc value [ 171.015044][ T6028] F2FS-fs (loop5): Found nat_bits in checkpoint [ 171.124566][ T4277] hfsplus: b-tree write err: -5, ino 25 [ 171.163526][ T6028] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 171.169397][ T6043] loop4: detected capacity change from 0 to 512 [ 171.171122][ T6028] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 171.244708][ T6043] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 171.258446][ T4277] hfsplus: b-tree write err: -5, ino 4 [ 171.284607][ T4277] hfsplus: b-tree write err: -5, ino 2 [ 171.316640][ T4277] hfsplus: b-tree write err: -5, ino 26 [ 171.336853][ T4277] hfsplus: b-tree write err: -5, ino 27 [ 171.519270][ T6043] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 171.577508][ T6043] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.406: bad orphan inode 131083 [ 172.391749][ T6043] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000000,dioread_lock,nojournal_checksum,,errors=continue. Quota mode: none. [ 172.812866][ T6073] binder_alloc: 6072: pid 6072 spamming oneway? 2 buffers allocated for a total size of 5120 [ 172.829591][ T6073] binder_alloc: 6072: pid 6072 spamming oneway? 3 buffers allocated for a total size of 5128 [ 173.150977][ T6087] sctp: [Deprecated]: syz.0.418 (pid 6087) Use of int in max_burst socket option. [ 173.150977][ T6087] Use struct sctp_assoc_value instead [ 174.529736][ T6116] device syzkaller0 entered promiscuous mode [ 174.616462][ T6119] tcpci: probe of 0-0002 failed with error -5 [ 175.542015][ T6119] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 175.944437][ T6133] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 177.269934][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.429'. [ 177.298523][ T6141] binder_alloc: 6139: pid 6139 spamming oneway? 2 buffers allocated for a total size of 5120 [ 177.321478][ T6141] binder_alloc: 6139: pid 6139 spamming oneway? 3 buffers allocated for a total size of 5128 [ 177.334335][ T6142] netlink: 'syz.0.428': attribute type 1 has an invalid length. [ 177.437829][ T6142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.447265][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 177.535551][ T6151] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 177.649555][ T6158] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 179.616459][ T4241] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 179.956536][ T4241] usb 4-1: Using ep0 maxpacket: 16 [ 180.096653][ T4241] usb 4-1: unable to get BOS descriptor or descriptor too short [ 180.170104][ T4241] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 180.186378][ T4241] usb 4-1: can't read configurations, error -71 [ 181.424900][ T6212] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.437259][ T6215] loop3: detected capacity change from 0 to 764 [ 181.537791][ T6215] rock: directory entry would overflow storage [ 181.544476][ T6215] rock: sig=0x5245, size=8, remaining=5 [ 181.670555][ T6220] binder: 6218:6220 ioctl c0306201 200000000080 returned -14 [ 181.693579][ T6220] binder: 6218:6220 ioctl c0306201 2000000003c0 returned -14 [ 183.760857][ T6253] netlink: 'syz.2.457': attribute type 8 has an invalid length. [ 183.863004][ T6253] sch_fq: defrate 0 ignored. [ 183.919128][ T6256] dummy0 speed is unknown, defaulting to 1000 [ 183.991196][ T6256] dummy0 speed is unknown, defaulting to 1000 [ 184.003306][ T6256] dummy0 speed is unknown, defaulting to 1000 [ 184.018784][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 184.021555][ T6265] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 184.423142][ T6275] overlayfs: failed to verify origin (15/file1, ino=105, err=-116) [ 184.457205][ T6275] overlayfs: failed to verify origin (15/file1, ino=105, err=-116) [ 184.508089][ T4241] dummy0 speed is unknown, defaulting to 1000 [ 184.506184][ T6256] infiniband syz0: set active [ 184.572077][ T6256] infiniband syz0: added dummy0 [ 184.906123][ T6282] loop5: detected capacity change from 0 to 2048 [ 184.974253][ T6256] RDS/IB: syz0: added [ 184.999637][ T6256] smc: adding ib device syz0 with port count 1 [ 185.014478][ T6282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.060244][ T6256] smc: ib device syz0 port 1 has pnetid [ 185.081623][ T5422] dummy0 speed is unknown, defaulting to 1000 [ 185.140801][ T6256] dummy0 speed is unknown, defaulting to 1000 [ 185.590956][ T6256] dummy0 speed is unknown, defaulting to 1000 [ 186.027246][ T4227] Bluetooth: hci2: command 0x0406 tx timeout [ 186.039598][ T4227] Bluetooth: hci4: command 0x0406 tx timeout [ 186.209553][ T4227] Bluetooth: hci3: command 0x0406 tx timeout [ 186.569122][ T4227] Bluetooth: hci1: command 0x0406 tx timeout [ 188.216984][ T6256] dummy0 speed is unknown, defaulting to 1000 [ 188.602616][ T6333] FAULT_INJECTION: forcing a failure. [ 188.602616][ T6333] name failslab, interval 1, probability 0, space 0, times 0 [ 188.666886][ T6333] CPU: 0 PID: 6333 Comm: syz.4.474 Not tainted syzkaller #0 [ 188.674221][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.684304][ T6333] Call Trace: [ 188.687612][ T6333] [ 188.690569][ T6333] dump_stack_lvl+0x188/0x250 [ 188.695280][ T6333] ? show_regs_print_info+0x20/0x20 [ 188.700512][ T6333] ? load_image+0x410/0x410 [ 188.705056][ T6333] ? __might_sleep+0xf0/0xf0 [ 188.709676][ T6333] ? __lock_acquire+0x7b50/0x7b50 [ 188.714743][ T6333] should_fail+0x383/0x4b0 [ 188.719195][ T6333] should_failslab+0x5/0x20 [ 188.723724][ T6333] slab_pre_alloc_hook+0x51/0xc0 [ 188.728684][ T6333] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 188.734560][ T6333] ? bdi_alloc+0x4b/0x130 [ 188.738923][ T6333] bdi_alloc+0x4b/0x130 [ 188.743118][ T6333] __alloc_disk_node+0x7f/0x4f0 [ 188.748002][ T6333] __blk_alloc_disk+0x2a/0x60 [ 188.752688][ T6333] dm_create+0x57f/0xf90 [ 188.756991][ T6333] dev_create+0x12e/0x2c0 [ 188.761326][ T6333] ? list_devices+0x820/0x820 [ 188.766007][ T6333] ? __might_fault+0xb3/0x110 [ 188.770685][ T6333] ? _copy_from_user+0x111/0x170 [ 188.775626][ T6333] dm_ctl_ioctl+0x947/0xd00 [ 188.780133][ T6333] ? list_devices+0x820/0x820 [ 188.784816][ T6333] ? dm_poll+0x120/0x120 [ 188.789092][ T6333] ? bpf_lsm_file_ioctl+0x5/0x10 [ 188.794029][ T6333] ? security_file_ioctl+0x7c/0xa0 [ 188.799151][ T6333] ? dm_poll+0x120/0x120 [ 188.803400][ T6333] __se_sys_ioctl+0xfa/0x170 [ 188.808000][ T6333] do_syscall_64+0x4c/0xa0 [ 188.812422][ T6333] ? clear_bhb_loop+0x30/0x80 [ 188.817102][ T6333] ? clear_bhb_loop+0x30/0x80 [ 188.821783][ T6333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.827689][ T6333] RIP: 0033:0x7fb82e784159 [ 188.832112][ T6333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.851898][ T6333] RSP: 002b:00007fb82c9dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.860322][ T6333] RAX: ffffffffffffffda RBX: 00007fb82ea0bfa0 RCX: 00007fb82e784159 [ 188.868303][ T6333] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 188.876275][ T6333] RBP: 00007fb82e81b06b R08: 0000000000000000 R09: 0000000000000000 [ 188.884258][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.892249][ T6333] R13: 00007fb82ea0c038 R14: 00007fb82ea0bfa0 R15: 00007fff615c1778 [ 188.900243][ T6333] [ 189.175519][ T6338] loop3: detected capacity change from 0 to 512 [ 189.238339][ T6338] EXT4-fs (loop3): Test dummy encryption mode enabled [ 189.372072][ T6256] dummy0 speed is unknown, defaulting to 1000 [ 189.401290][ T6348] futex_wake_op: syz.0.478 tries to shift op by 144; fix this program [ 189.608695][ T6338] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 189.639726][ T6338] jffs2: notice: (6338) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 189.710817][ T6256] dummy0 speed is unknown, defaulting to 1000 [ 189.734852][ T6353] can: request_module (can-proto-0) failed. [ 189.745186][ T6356] batman_adv: batadv0: Adding interface: dummy0 [ 189.786425][ T6356] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.926738][ T6356] batman_adv: batadv0: Interface activated: dummy0 [ 189.990285][ T6353] net_ratelimit: 1 callbacks suppressed [ 189.990304][ T6353] batadv0: mtu less than device minimum [ 190.039171][ T6353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.052364][ T6353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.064989][ T6353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.077863][ T6353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.090681][ T6353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.103516][ T6353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.116161][ T6353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.128812][ T6353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.141618][ T6353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.370171][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.481'. [ 191.669767][ T6439] loop5: detected capacity change from 0 to 512 [ 191.769190][ T6439] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 191.804275][ T6439] FAT-fs (loop5): Filesystem has been set read-only [ 191.828458][ T6448] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 191.942498][ T6454] batman_adv: batadv0: Adding interface: dummy0 [ 191.978910][ T6454] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.114119][ T6449] can: request_module (can-proto-0) failed. [ 192.128737][ T6454] batman_adv: batadv0: Interface activated: dummy0 [ 192.238088][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 192.260459][ T4394] blk_update_request: I/O error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 192.272447][ T4394] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 100391) [ 192.284390][ T4394] Buffer I/O error on device sda1, logical block 100352 [ 192.292475][ T4394] blk_update_request: I/O error, dev sda, sector 811310 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 192.303862][ T4394] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 101414) [ 192.315904][ T4394] Buffer I/O error on device sda1, logical block 101375 [ 192.322983][ T4394] blk_update_request: I/O error, dev sda, sector 815078 op 0x1:(WRITE) flags 0x0 phys_seg 12 prio class 0 [ 192.334364][ T4394] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 101926) [ 192.346066][ T4394] Buffer I/O error on device sda1, logical block 101846 [ 192.353136][ T4394] Buffer I/O error on device sda1, logical block 101847 [ 192.360187][ T4394] Buffer I/O error on device sda1, logical block 101848 [ 192.367224][ T4394] Buffer I/O error on device sda1, logical block 101849 [ 192.374204][ T4394] Buffer I/O error on device sda1, logical block 101850 [ 192.381240][ T4394] Buffer I/O error on device sda1, logical block 101851 [ 192.388282][ T4394] Buffer I/O error on device sda1, logical block 101852 [ 192.395255][ T4394] Buffer I/O error on device sda1, logical block 101853 [ 192.410143][ T4394] blk_update_request: I/O error, dev sda, sector 790838 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 0 [ 192.421521][ T4394] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2037 starting block 98856) [ 192.433261][ T4394] blk_update_request: I/O error, dev sda, sector 700726 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 192.444563][ T4394] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2027 starting block 87591) [ 192.456258][ T4394] blk_update_request: I/O error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 192.467647][ T4394] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 96295) [ 192.479295][ T4394] blk_update_request: I/O error, dev sda, sector 778542 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 192.490603][ T4394] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 97318) [ 192.502289][ T4394] blk_update_request: I/O error, dev sda, sector 782382 op 0x1:(WRITE) flags 0x0 phys_seg 10 prio class 0 [ 192.513939][ T4394] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 97830) [ 192.538335][ T4394] blk_update_request: I/O error, dev sda, sector 741686 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 192.549698][ T4394] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2031 starting block 92711) [ 192.561380][ T4394] blk_update_request: I/O error, dev sda, sector 745782 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 0 [ 192.572694][ T4394] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2034 starting block 93224) [ 192.649634][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.669145][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.697185][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.733519][ T21] usb 3-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 193.514916][ T6487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.522260][ T6487] IPv6: NLM_F_CREATE should be set when creating new route [ 193.805972][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.816820][ T21] usb 3-1: config 0 descriptor?? [ 193.853814][ T3519] Buffer I/O error on dev sda1, logical block 131350, lost sync page write [ 193.855038][ T6461] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 193.874661][ T6485] EXT4-fs error (device sda1): ext4_check_bdev_write_error:218: comm syz.3.503: Error while async write back metadata [ 193.970371][ T6495] loop4: detected capacity change from 0 to 64 [ 194.030153][ T3519] Aborting journal on device sda1-8. [ 194.079492][ T6456] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.498: Detected aborted journal [ 194.136584][ T264] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 194.167128][ T3519] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 194.195210][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.206244][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.326909][ T264] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 194.336011][ T6456] EXT4-fs (sda1): I/O error while writing superblock [ 194.416599][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 194.417577][ T6456] EXT4-fs (sda1): Remounting filesystem read-only [ 194.445379][ T6456] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.498: Detected aborted journal [ 194.456831][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 194.465079][ T6456] EXT4-fs (sda1): I/O error while writing superblock [ 194.471951][ T6456] EXT4-fs (sda1): Remounting filesystem read-only [ 194.478649][ T6456] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.498: Detected aborted journal [ 194.489830][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 194.498222][ T6456] EXT4-fs (sda1): I/O error while writing superblock [ 194.505033][ T6456] EXT4-fs (sda1): Remounting filesystem read-only [ 194.505426][ T264] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 194.525444][ T6456] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.498: Detected aborted journal [ 194.529570][ T4172] EXT4-fs (sda1): I/O error while writing superblock [ 194.546118][ T26] audit: type=1800 audit(1790069092.125:10): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd-run-hook" name="30-hostname" dev="sda1" ino=271 res=0 errno=0 [ 194.585109][ T6456] EXT4-fs (sda1): previous I/O error to superblock detected [ 194.594528][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 194.595180][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 194.610855][ T4241] EXT4-fs (sda1): previous I/O error to superblock detected [ 194.614086][ T6456] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.498: Detected aborted journal [ 194.630374][ T26] audit: type=1800 audit(1790069092.155:11): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd-run-hook" name="50-timesyncd.conf" dev="sda1" ino=272 res=0 errno=0 [ 194.653240][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 194.658341][ T264] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 194.672675][ T6456] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.498: Detected aborted journal [ 194.676814][ T264] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 194.702443][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 194.723601][ T6457] loop2: detected capacity change from 0 to 128 [ 194.951215][ T6461] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 195.093359][ T21] wacom 0003:056A:0003.0002: unbalanced collection at end of report description [ 195.111196][ T21] wacom 0003:056A:0003.0002: parse failed [ 195.122818][ T21] wacom: probe of 0003:056A:0003.0002 failed with error -22 [ 195.378506][ T21] usb 3-1: USB disconnect, device number 4 [ 196.723562][ T6465] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 196.764319][ T6465] pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc03f] [ 196.785678][ T6465] pci 0000:00:03.0: reg 0x14: [mem 0xfe800000-0xfe80007f] [ 197.487872][ T6465] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 [ 197.603543][ T6465] pci 0000:00:05.0: reg 0x10: [mem 0xfe000000-0xfe7fffff] [ 197.778239][ T6465] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 197.794594][ T6465] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 197.801894][ T6465] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 197.820669][ T6465] pci 0000:00:05.0: BAR 0: assigned [mem 0xc0000000-0xc07fffff] [ 197.842591][ T6465] virtio-pci 0000:00:03.0: can't enable device: BAR 0 [io 0xc000-0xc03f] not claimed [ 197.854374][ T6465] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 198.830880][ T6487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.872919][ T6534] FAULT_INJECTION: forcing a failure. [ 198.872919][ T6534] name failslab, interval 1, probability 0, space 0, times 0 [ 198.889032][ T6534] CPU: 1 PID: 6534 Comm: syz.5.514 Not tainted syzkaller #0 [ 198.892246][ T6487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.896356][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.896407][ T6534] Call Trace: [ 198.896416][ T6534] [ 198.896424][ T6534] dump_stack_lvl+0x188/0x250 [ 198.896473][ T6534] ? show_regs_print_info+0x20/0x20 [ 198.896493][ T6534] ? load_image+0x410/0x410 [ 198.896515][ T6534] ? __lock_acquire+0x7b50/0x7b50 [ 198.896539][ T6534] ? __mutex_lock_common+0x435/0x2400 [ 198.896560][ T6534] should_fail+0x383/0x4b0 [ 198.896587][ T6534] should_failslab+0x5/0x20 [ 198.896605][ T6534] slab_pre_alloc_hook+0x51/0xc0 [ 198.896627][ T6534] __kmalloc+0x6b/0x340 [ 198.896645][ T6534] ? input_ff_create+0x4f/0x2f0 [ 198.896676][ T6534] input_ff_create+0x4f/0x2f0 [ 198.896701][ T6534] uinput_create_device+0x3a8/0x680 [ 198.896730][ T6534] uinput_ioctl_handler+0x7a0/0x13d0 [ 198.923579][ T4172] EXT4-fs error: 93 callbacks suppressed [ 198.923595][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 198.925195][ T6534] ? uinput_release+0x50/0x50 [ 198.925245][ T6534] ? bpf_lsm_file_ioctl+0x5/0x10 [ 198.935726][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 198.939965][ T6534] ? security_file_ioctl+0x7c/0xa0 [ 198.940000][ T6534] ? uinput_poll+0x120/0x120 [ 198.940022][ T6534] __se_sys_ioctl+0xfa/0x170 [ 198.945658][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 198.949813][ T6534] do_syscall_64+0x4c/0xa0 [ 198.949854][ T6534] ? clear_bhb_loop+0x30/0x80 [ 198.949873][ T6534] ? clear_bhb_loop+0x30/0x80 [ 198.949894][ T6534] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.949915][ T6534] RIP: 0033:0x7f5d23e83159 [ 198.949935][ T6534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.949950][ T6534] RSP: 002b:00007f5d220db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.957999][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 198.959461][ T6534] RAX: ffffffffffffffda RBX: 00007f5d2410afa0 RCX: 00007f5d23e83159 [ 199.117720][ T6534] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 199.125704][ T6534] RBP: 00007f5d23f1a06b R08: 0000000000000000 R09: 0000000000000000 [ 199.133667][ T6534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.141628][ T6534] R13: 00007f5d2410b038 R14: 00007f5d2410afa0 R15: 00007fff186fb078 [ 199.149603][ T6534] [ 199.164607][ T6533] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.514: Detected aborted journal [ 199.180360][ T6533] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.514: Detected aborted journal [ 199.213734][ T6533] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.514: Detected aborted journal [ 199.239355][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 199.283583][ T6535] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.515: Detected aborted journal [ 199.302296][ T6535] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.515: Detected aborted journal [ 199.349705][ T4172] EXT4-fs: 106 callbacks suppressed [ 199.349721][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 199.378666][ T6537] EXT4-fs (sda1): Remounting filesystem read-only [ 199.389841][ T6537] EXT4-fs (sda1): Remounting filesystem read-only [ 199.423952][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 199.433603][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 199.451358][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 199.466534][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 199.552438][ T6537] EXT4-fs (sda1): Remounting filesystem read-only [ 199.593219][ T6537] EXT4-fs (sda1): Remounting filesystem read-only [ 199.600548][ T6537] EXT4-fs (sda1): Remounting filesystem read-only [ 201.039268][ T6591] netlink: 32 bytes leftover after parsing attributes in process `syz.2.519'. [ 203.929285][ T4172] EXT4-fs error: 196 callbacks suppressed [ 203.929306][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 203.977710][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 204.002319][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 204.019569][ T6645] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.543: Detected aborted journal [ 204.047516][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 204.090280][ T6647] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.544: Detected aborted journal [ 204.100245][ T6645] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.543: Detected aborted journal [ 204.115811][ T6647] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.544: Detected aborted journal [ 204.131088][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 204.395338][ T6652] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.545: Detected aborted journal [ 204.435732][ T4172] EXT4-fs: 140 callbacks suppressed [ 204.435773][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 204.561089][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 204.658453][ T6652] EXT4-fs (sda1): Remounting filesystem read-only [ 204.742339][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 204.805241][ T6652] EXT4-fs (sda1): Remounting filesystem read-only [ 204.814801][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 204.863181][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 204.871262][ T6652] EXT4-fs (sda1): Remounting filesystem read-only [ 204.888176][ T6656] EXT4-fs (sda1): Remounting filesystem read-only [ 204.920243][ T6657] EXT4-fs (sda1): Remounting filesystem read-only [ 204.961473][ T6658] loop5: detected capacity change from 0 to 512 [ 205.856696][ T6658] EXT4-fs (loop5): Ignoring removed bh option [ 206.147129][ T6658] EXT4-fs (loop5): Test dummy encryption mode enabled [ 206.154014][ T6658] EXT4-fs (loop5): Unrecognized mount option "fscontext=staff_u" or missing value [ 206.442862][ T6686] loop4: detected capacity change from 0 to 512 [ 206.840079][ T6686] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 207.261433][ T6703] device bridge0 entered promiscuous mode [ 207.341313][ T6686] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.553: corrupted in-inode xattr [ 208.258472][ T6714] loop5: detected capacity change from 0 to 128 [ 208.266616][ T6686] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.553: couldn't read orphan inode 15 (err -117) [ 208.343281][ T6686] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 208.378823][ T6714] FAT-fs (loop5): bogus number of FAT structure [ 208.433224][ T6714] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 208.489644][ T6714] FAT-fs (loop5): Can't find a valid FAT filesystem [ 208.947890][ T4172] EXT4-fs error: 106 callbacks suppressed [ 208.947931][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 208.981235][ T6683] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.553: Detected aborted journal [ 208.997716][ T6720] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.562: Detected aborted journal [ 209.075609][ T3557] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #259: comm udevd: reading directory lblock 0 [ 209.092785][ T6710] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.559: Detected aborted journal [ 209.304441][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 209.318127][ T3557] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 209.340665][ T3557] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 209.346403][ T6715] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.561: Detected aborted journal [ 209.363275][ T6710] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.559: Detected aborted journal [ 209.448919][ T6725] EXT4-fs: 104 callbacks suppressed [ 209.448936][ T6725] EXT4-fs (sda1): Remounting filesystem read-only [ 209.464527][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 209.483256][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 209.483391][ T6715] EXT4-fs (sda1): Remounting filesystem read-only [ 209.498150][ T6725] EXT4-fs (sda1): Remounting filesystem read-only [ 209.505153][ T6715] EXT4-fs (sda1): Remounting filesystem read-only [ 209.512668][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 209.535688][ T6727] EXT4-fs (sda1): Remounting filesystem read-only [ 209.536814][ T6725] EXT4-fs (sda1): Remounting filesystem read-only [ 209.554269][ T6715] EXT4-fs (sda1): Remounting filesystem read-only [ 209.638570][ T6732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.566'. [ 209.663500][ T6732] netlink: 6 bytes leftover after parsing attributes in process `syz.4.566'. [ 209.900706][ T4688] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 210.026876][ T4232] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 210.226531][ T4688] usb 6-1: Using ep0 maxpacket: 32 [ 210.357096][ T4688] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 210.410310][ T4688] usb 6-1: config 0 has no interface number 0 [ 210.504990][ T4688] usb 6-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 210.612937][ T4688] usb 6-1: config 0 interface 1 has no altsetting 0 [ 210.929872][ T4688] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 210.939566][ T4688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.954729][ T4688] usb 6-1: Product: syz [ 210.959551][ T4688] usb 6-1: Manufacturer: syz [ 210.964301][ T4688] usb 6-1: SerialNumber: syz [ 210.975145][ T4688] usb 6-1: config 0 descriptor?? [ 211.006470][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 211.111166][ T6760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.576'. [ 211.123552][ T6760] device geneve2 entered promiscuous mode [ 211.129763][ T4232] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 211.138238][ T4232] usb 3-1: config 0 has no interface number 0 [ 211.144356][ T4232] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.156463][ T4232] usb 3-1: config 0 interface 85 has no altsetting 0 [ 211.248676][ T4688] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 211.288347][ T4688] cx231xx 6-1:0.1: Failed to read PCB config [ 211.294829][ T4688] cx231xx: probe of 6-1:0.1 failed with error -71 [ 211.304295][ T4688] usb 6-1: USB disconnect, device number 2 [ 211.316570][ T4232] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 211.331258][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.346434][ T4232] usb 3-1: Product: syz [ 211.356633][ T4232] usb 3-1: Manufacturer: syz [ 211.361274][ T4232] usb 3-1: SerialNumber: syz [ 211.377252][ T4232] usb 3-1: config 0 descriptor?? [ 211.536138][ T6769] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 211.816430][ T4688] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 213.246443][ T4232] appletouch 3-1:0.85: Geyser mode initialized. [ 213.261404][ T4232] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input7 [ 213.378124][ T4232] usb 3-1: USB disconnect, device number 5 [ 213.386425][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 213.459612][ T4232] appletouch 3-1:0.85: input: appletouch disconnected [ 213.518395][ T4688] usb 6-1: device not accepting address 3, error -71 [ 213.857280][ T6818] loop5: detected capacity change from 0 to 40427 [ 213.919989][ T6818] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 213.927982][ T6818] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 213.977414][ T6825] EXT4-fs error: 170 callbacks suppressed [ 213.977435][ T6825] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.599: Detected aborted journal [ 213.998546][ T6818] F2FS-fs (loop5): Found nat_bits in checkpoint [ 214.062441][ T6818] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 214.069705][ T6818] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 214.118718][ T6825] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.599: Detected aborted journal [ 214.141046][ T26] audit: type=1326 audit(1790069111.725:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.3.599" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03e9cbf159 code=0x0 [ 214.166925][ T6825] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.599: Detected aborted journal [ 214.196228][ T6825] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.599: Detected aborted journal [ 214.237215][ T6817] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.595: Detected aborted journal [ 214.249381][ T6825] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.599: Detected aborted journal [ 214.261290][ T6824] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 214.279672][ T6817] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.595: Detected aborted journal [ 214.296698][ T6824] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 214.314925][ T6817] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.595: Detected aborted journal [ 214.342472][ T6817] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.595: Detected aborted journal [ 214.354265][ T6825] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.599: Detected aborted journal [ 214.463314][ T6817] EXT4-fs: 136 callbacks suppressed [ 214.463336][ T6817] EXT4-fs (sda1): Remounting filesystem read-only [ 214.508907][ T6817] EXT4-fs (sda1): Remounting filesystem read-only [ 214.530794][ T6817] EXT4-fs (sda1): Remounting filesystem read-only [ 214.538082][ T6836] EXT4-fs (sda1): Remounting filesystem read-only [ 214.548132][ T6817] EXT4-fs (sda1): Remounting filesystem read-only [ 214.562226][ T6817] EXT4-fs (sda1): Remounting filesystem read-only [ 214.563100][ T6836] EXT4-fs (sda1): Remounting filesystem read-only [ 214.578086][ T6817] EXT4-fs (sda1): Remounting filesystem read-only [ 214.582987][ T6813] EXT4-fs (sda1): Remounting filesystem read-only [ 214.591865][ T6836] EXT4-fs (sda1): Remounting filesystem read-only [ 214.595716][ T6818] attempt to access beyond end of device [ 214.595716][ T6818] loop5: rw=2049, want=45104, limit=40427 [ 214.792361][ T5800] attempt to access beyond end of device [ 214.792361][ T5800] loop5: rw=2049, want=40976, limit=40427 [ 215.896464][ T4688] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 216.845813][ T6884] device syzkaller0 entered promiscuous mode [ 216.875033][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.5.617'. [ 216.894424][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.5.617'. [ 216.944405][ T6890] ODEBUG: Out of memory. ODEBUG disabled [ 217.017776][ T6886] bridge0: port 3(vlan2) entered blocking state [ 217.030607][ T6886] bridge0: port 3(vlan2) entered disabled state [ 217.183682][ T6900] netlink: 20 bytes leftover after parsing attributes in process `syz.3.624'. [ 217.296761][ T4688] usb 3-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 217.310431][ T4688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.346128][ T4688] usb 3-1: Product: syz [ 217.371494][ T4688] usb 3-1: Manufacturer: syz [ 217.376203][ T4688] usb 3-1: SerialNumber: syz [ 217.383264][ T4688] usb 3-1: config 0 descriptor?? [ 217.588521][ T4688] go7007 3-1:0.0: Sensoray 2250 found [ 217.594056][ T4688] go7007: probe of 3-1:0.0 failed with error -12 [ 218.348214][ T6862] udc-core: couldn't find an available UDC or it's busy [ 218.375626][ T6862] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 218.609509][ T6862] udc-core: couldn't find an available UDC or it's busy [ 218.632124][ T6862] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 218.652515][ T6862] udc-core: couldn't find an available UDC or it's busy [ 218.736573][ T6862] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 218.804437][ T4688] usb 3-1: USB disconnect, device number 6 [ 219.243304][ T6920] EXT4-fs error: 157 callbacks suppressed [ 219.243327][ T6920] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.630: Detected aborted journal [ 219.323364][ T6918] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.629: Detected aborted journal [ 219.385411][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 219.402473][ T6861] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.610: Detected aborted journal [ 219.416364][ T6928] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.634: Detected aborted journal [ 219.432716][ T6929] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.633: Detected aborted journal [ 219.455237][ T6861] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.610: Detected aborted journal [ 219.458914][ T6931] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.635: Detected aborted journal [ 219.467338][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 219.486690][ T6930] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.632: Detected aborted journal [ 219.489145][ T6861] EXT4-fs: 130 callbacks suppressed [ 219.489156][ T6861] EXT4-fs (sda1): Remounting filesystem read-only [ 219.499648][ T6928] EXT4-fs (sda1): Remounting filesystem read-only [ 219.510743][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 219.510934][ T6929] EXT4-fs (sda1): Remounting filesystem read-only [ 219.519010][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 219.537275][ T6928] EXT4-fs (sda1): Remounting filesystem read-only [ 219.543113][ T6861] EXT4-fs (sda1): Remounting filesystem read-only [ 219.552133][ T6933] loop4: detected capacity change from 0 to 16 [ 219.558299][ T6931] EXT4-fs (sda1): Remounting filesystem read-only [ 219.563062][ T6861] EXT4-fs (sda1): Remounting filesystem read-only [ 219.565856][ T6930] EXT4-fs (sda1): Remounting filesystem read-only [ 219.596782][ T6933] erofs: (device loop4): mounted with root inode @ nid 36. [ 219.675946][ T6936] loop5: detected capacity change from 0 to 512 [ 220.533215][ T6936] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 220.648852][ T6936] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.482026][ T6963] set match dimension is over the limit! [ 221.569998][ T6965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.644'. [ 221.752389][ T6968] fuse: Bad value for 'fd' [ 222.636984][ T6976] netlink: 132 bytes leftover after parsing attributes in process `syz.3.649'. [ 222.844094][ T6976] netlink: 132 bytes leftover after parsing attributes in process `syz.3.649'. [ 223.029652][ T6983] FAULT_INJECTION: forcing a failure. [ 223.029652][ T6983] name fail_futex, interval 1, probability 0, space 0, times 1 [ 223.099921][ T6983] CPU: 0 PID: 6983 Comm: syz.2.653 Not tainted syzkaller #0 [ 223.107272][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.117363][ T6983] Call Trace: [ 223.120666][ T6983] [ 223.123629][ T6983] dump_stack_lvl+0x188/0x250 [ 223.128338][ T6983] ? show_regs_print_info+0x20/0x20 [ 223.133562][ T6983] ? load_image+0x410/0x410 [ 223.138098][ T6983] ? __lock_acquire+0x13dc/0x7b50 [ 223.143163][ T6983] should_fail+0x383/0x4b0 [ 223.147607][ T6983] get_futex_key+0x1a1/0x12d0 [ 223.152322][ T6983] ? futex_wait_restart+0x250/0x250 [ 223.157542][ T6983] ? __lock_acquire+0x13dc/0x7b50 [ 223.162603][ T6983] futex_wake+0x101/0x540 [ 223.166977][ T6983] ? futex_wait+0x680/0x680 [ 223.171520][ T6983] ? reacquire_held_locks+0x319/0x5c0 [ 223.176922][ T6983] ? verify_lock_unused+0x140/0x140 [ 223.182522][ T6983] ? verify_lock_unused+0x140/0x140 [ 223.187769][ T6983] do_futex+0xd83/0x12b0 [ 223.192075][ T6983] ? futex_exit_release+0x1c0/0x1c0 [ 223.197305][ T6983] ? __context_tracking_exit+0x4c/0x80 [ 223.202800][ T6983] __se_sys_futex+0x389/0x420 [ 223.207515][ T6983] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 223.213531][ T6983] ? __x64_sys_futex+0xf0/0xf0 [ 223.218364][ T6983] ? __x64_sys_futex+0x1d/0xf0 [ 223.223169][ T6983] do_syscall_64+0x4c/0xa0 [ 223.227609][ T6983] ? clear_bhb_loop+0x30/0x80 [ 223.232323][ T6983] ? clear_bhb_loop+0x30/0x80 [ 223.237029][ T6983] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.242952][ T6983] RIP: 0033:0x7f747b453159 [ 223.247396][ T6983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.267027][ T6983] RSP: 002b:00007f74796ab0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 223.275481][ T6983] RAX: ffffffffffffffda RBX: 00007f747b6dafa8 RCX: 00007f747b453159 [ 223.283486][ T6983] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f747b6dafac [ 223.291490][ T6983] RBP: 00007f747b6dafa0 R08: 003a5953a36e3924 R09: 0000000000000000 [ 223.299488][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.307489][ T6983] R13: 00007f747b6db038 R14: 00007ffe96ceffd0 R15: 00007ffe96cf00b8 [ 223.315598][ T6983] [ 224.304122][ T7001] EXT4-fs error: 153 callbacks suppressed [ 224.304165][ T7001] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.659: Detected aborted journal [ 224.321451][ T7001] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.659: Detected aborted journal [ 225.019024][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 225.034703][ T7010] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.662: Detected aborted journal [ 225.096738][ T4172] EXT4-fs: 143 callbacks suppressed [ 225.096757][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 225.116448][ T7010] EXT4-fs (sda1): Remounting filesystem read-only [ 225.168848][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 225.208780][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 225.256210][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 225.322821][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 225.928658][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.937072][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.972688][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 226.014973][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 226.035499][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 226.083206][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 226.103536][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 226.159837][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 226.166526][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 226.177741][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 226.192388][ T7026] EXT4-fs (sda1): Remounting filesystem read-only [ 226.223084][ T7004] batman_adv: batadv0: Interface deactivated: dummy0 [ 226.226679][ T5423] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 226.233382][ T7026] EXT4-fs (sda1): Remounting filesystem read-only [ 226.265627][ T7027] fuse: Bad value for 'fd' [ 226.534716][ T7004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.572965][ T7004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.606579][ T5423] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 226.615656][ T5423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.637468][ T5423] usb 3-1: config 0 descriptor?? [ 226.836590][ T5423] usb 3-1: Cannot read MAC address [ 226.842491][ T5423] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 226.860393][ T5423] usb 3-1: USB disconnect, device number 7 [ 227.000023][ T7004] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.009105][ T7004] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.019742][ T7004] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.028665][ T7004] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.349694][ T26] audit: type=1800 audit(1790069124.935:13): pid=7051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.673" name="attr_allow_any_host" dev="configfs" ino=42027 res=0 errno=0 [ 227.364259][ T7047] loop4: detected capacity change from 0 to 1024 [ 227.414337][ T26] audit: type=1800 audit(1790069124.975:14): pid=7051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.673" name="addr_trtype" dev="configfs" ino=42034 res=0 errno=0 [ 227.422959][ T7045] loop5: detected capacity change from 0 to 8192 [ 227.491158][ T4262] nvmet: creating controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8c9e3beb-44a8-4994-9d35-8897d0adf999. [ 227.527870][ T7047] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 227.558202][ T7051] nvme nvme0: creating 2 I/O queues. [ 227.568810][ T7047] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.586633][ T7051] nvme nvme0: new ctrl: "testsubsys" [ 227.656491][ T7061] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 227.694315][ T7062] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.670: Freeing blocks not in datazone - block = 0, count = 16 [ 228.595503][ T4280] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 228.715011][ T4280] EXT4-fs (loop4): This should not happen!! Data will be lost [ 228.715011][ T4280] [ 228.827939][ T4280] EXT4-fs (loop4): Total free blocks count 0 [ 228.883980][ T4280] EXT4-fs (loop4): Free/Dirty block details [ 228.890096][ T4280] EXT4-fs (loop4): free_blocks=16 [ 228.895426][ T4280] EXT4-fs (loop4): dirty_blocks=16 [ 228.900724][ T4280] EXT4-fs (loop4): Block reservation details [ 228.907211][ T4280] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 229.350904][ T7089] EXT4-fs error: 89 callbacks suppressed [ 229.350921][ T7089] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.685: Detected aborted journal [ 229.413897][ T7089] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.685: Detected aborted journal [ 229.433401][ T7088] ptp ptp0: only physical clock in use now [ 229.445622][ T7094] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.687: Detected aborted journal [ 229.446194][ T7093] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.686: Detected aborted journal [ 229.471915][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 229.480144][ T7089] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.685: Detected aborted journal [ 229.506232][ T7093] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.686: Detected aborted journal [ 229.518927][ T7094] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.687: Detected aborted journal [ 229.530892][ T7093] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.686: Detected aborted journal [ 229.542784][ T7089] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.685: Detected aborted journal [ 229.591579][ T7095] print_req_error: 151 callbacks suppressed [ 229.591599][ T7095] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.623001][ T7096] overlayfs: failed to clone upperpath [ 229.805408][ T7095] device-mapper: table: 248:0: thin-pool: Error creating metadata object [ 229.823120][ T7095] device-mapper: ioctl: error adding target to table [ 230.125889][ T7101] EXT4-fs: 102 callbacks suppressed [ 230.125907][ T7101] EXT4-fs (sda1): Remounting filesystem read-only [ 230.141269][ T7101] EXT4-fs (sda1): Remounting filesystem read-only [ 230.147852][ T7101] EXT4-fs (sda1): Remounting filesystem read-only [ 230.244819][ T7089] EXT4-fs (sda1): Remounting filesystem read-only [ 230.489054][ T7109] EXT4-fs (sda1): Remounting filesystem read-only [ 230.696338][ T7101] EXT4-fs (sda1): Remounting filesystem read-only [ 230.723470][ T7109] EXT4-fs (sda1): Remounting filesystem read-only [ 230.743373][ T7110] EXT4-fs (sda1): Remounting filesystem read-only [ 230.756558][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 230.806975][ T7109] EXT4-fs (sda1): Remounting filesystem read-only [ 231.194057][ T7121] loop4: detected capacity change from 0 to 1024 [ 232.470893][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'. [ 232.683980][ T7121] EXT4-fs error (device loop4): ext4_fill_super:4872: comm syz.4.693: inode #2: comm syz.4.693: iget: illegal inode # [ 232.699497][ T7121] EXT4-fs (loop4): get root inode failed [ 232.705193][ T7121] EXT4-fs (loop4): mount failed [ 233.430492][ T26] audit: type=1804 audit(1790069131.015:15): pid=7148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.703" name="/newroot/50/file0" dev="fuse" ino=1 res=1 errno=0 [ 233.634430][ T7143] net_ratelimit: 30 callbacks suppressed [ 233.634446][ T7143] IPVS: fo: FWM 3 0x00000003 - no destination available [ 233.647655][ C0] IPVS: fo: FWM 3 0x00000003 - no destination available [ 234.385901][ T7153] EXT4-fs error: 99 callbacks suppressed [ 234.385923][ T7153] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.705: Detected aborted journal [ 234.430711][ T7167] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.710: Detected aborted journal [ 234.543851][ T7167] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.710: Detected aborted journal [ 234.630144][ T7167] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.710: Detected aborted journal [ 234.750745][ T7167] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.710: Detected aborted journal [ 234.776105][ T7153] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.705: Detected aborted journal [ 234.812884][ T7167] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.710: Detected aborted journal [ 234.865208][ T7167] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.710: Detected aborted journal [ 234.906732][ T7153] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.705: Detected aborted journal [ 234.913588][ T7167] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.710: Detected aborted journal [ 235.039712][ T7166] loop4: detected capacity change from 0 to 32768 [ 235.101367][ T7166] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.709 (7166) [ 235.163073][ T7166] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 235.192512][ T7166] BTRFS info (device loop4): using free space tree [ 235.227992][ T7166] BTRFS info (device loop4): has skinny extents [ 235.229948][ T7172] EXT4-fs: 72 callbacks suppressed [ 235.229961][ T7172] EXT4-fs (sda1): Remounting filesystem read-only [ 235.279706][ T7176] EXT4-fs (sda1): Remounting filesystem read-only [ 235.285829][ T7172] EXT4-fs (sda1): Remounting filesystem read-only [ 235.306798][ T7153] EXT4-fs (sda1): Remounting filesystem read-only [ 235.316819][ T7153] EXT4-fs (sda1): Remounting filesystem read-only [ 235.325451][ T7172] EXT4-fs (sda1): Remounting filesystem read-only [ 235.335306][ T7172] EXT4-fs (sda1): Remounting filesystem read-only [ 235.343803][ T7172] EXT4-fs (sda1): Remounting filesystem read-only [ 235.346077][ T7182] udevd[7182]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 235.373186][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 235.391796][ T7185] EXT4-fs (sda1): Remounting filesystem read-only [ 235.507962][ T7201] udevd[7201]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 235.513318][ T7166] BTRFS info (device loop4): enabling ssd optimizations [ 235.606464][ T4688] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 235.629888][ T7206] udevd[7206]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 235.875962][ T4688] usb 3-1: Using ep0 maxpacket: 8 [ 235.933934][ T7207] udevd[7207]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 236.006570][ T4688] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 236.022095][ T4688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.080367][ T4688] pvrusb2: Hardware description: Terratec Grabster AV400 [ 236.088170][ T4688] pvrusb2: ********** [ 236.092192][ T4688] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 236.102977][ T4688] pvrusb2: Important functionality might not be entirely working. [ 236.111142][ T4688] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 236.128475][ T4688] pvrusb2: ********** [ 236.300232][ T2424] pvrusb2: Invalid write control endpoint [ 236.613209][ T21] usb 3-1: USB disconnect, device number 8 [ 236.720343][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz.5.717'. [ 236.803734][ T7225] netlink: 76 bytes leftover after parsing attributes in process `syz.3.721'. [ 237.366794][ T2424] pvrusb2: Invalid write control endpoint [ 237.404851][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 237.466813][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 237.522742][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 237.543458][ T2424] pvrusb2: Device being rendered inoperable [ 237.577424][ T7236] fuse: Bad value for 'fd' [ 237.592276][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 237.648756][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 238.617637][ T2424] pvrusb2: Attached sub-driver cx25840 [ 238.722316][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 238.864999][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 239.448340][ T7248] EXT4-fs error: 103 callbacks suppressed [ 239.448363][ T7248] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.726: Detected aborted journal [ 239.465457][ T7248] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.726: Detected aborted journal [ 239.576964][ T7248] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.726: Detected aborted journal [ 239.588072][ T7248] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.726: Detected aborted journal [ 239.975293][ T7248] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.726: Detected aborted journal [ 240.165796][ T7257] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.728: Detected aborted journal [ 240.195737][ T7258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.729: Detected aborted journal [ 240.218744][ T7259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.730: Detected aborted journal [ 240.221904][ T7261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.731: Detected aborted journal [ 240.237570][ T7247] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.727: Detected aborted journal [ 240.240983][ T7258] EXT4-fs: 65 callbacks suppressed [ 240.241001][ T7258] EXT4-fs (sda1): Remounting filesystem read-only [ 240.267652][ T7257] EXT4-fs (sda1): Remounting filesystem read-only [ 240.274307][ T7261] EXT4-fs (sda1): Remounting filesystem read-only [ 240.288396][ T7261] EXT4-fs (sda1): Remounting filesystem read-only [ 240.292495][ T7247] EXT4-fs (sda1): Remounting filesystem read-only [ 240.300007][ T7258] EXT4-fs (sda1): Remounting filesystem read-only [ 240.303465][ T7259] EXT4-fs (sda1): Remounting filesystem read-only [ 240.315011][ T7247] EXT4-fs (sda1): Remounting filesystem read-only [ 240.319868][ T7262] binder: 7261:7262 ioctl c0306201 200000000180 returned -14 [ 240.330400][ T7259] EXT4-fs (sda1): Remounting filesystem read-only [ 240.362585][ T7247] EXT4-fs (sda1): Remounting filesystem read-only [ 240.566161][ T4229] libceph: connect (1)[c::]:6789 error -101 [ 240.582242][ T4229] libceph: mon0 (1)[c::]:6789 connect error [ 240.648487][ T7282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.737649][ T7276] ceph: No mds server is up or the cluster is laggy [ 240.763423][ T7282] bond1: (slave geneve2): making interface the new active one [ 240.829741][ T7282] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 240.877128][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 240.884798][ T4229] libceph: connect (1)[c::]:6789 error -101 [ 240.891356][ T4229] libceph: mon0 (1)[c::]:6789 connect error [ 241.377347][ T4227] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 241.572802][ T7310] 9pnet: Insufficient options for proto=fd [ 241.776657][ T4227] usb 5-1: Using ep0 maxpacket: 8 [ 241.916675][ T4227] usb 5-1: config 1 interface 0 altsetting 12 bulk endpoint 0x1 has invalid maxpacket 520 [ 242.050017][ T4227] usb 5-1: config 1 interface 0 has no altsetting 0 [ 242.573173][ T4227] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 242.645745][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.687987][ T4227] usb 5-1: Product: syz [ 242.692273][ T4227] usb 5-1: Manufacturer: syz [ 242.728129][ T4227] usb 5-1: SerialNumber: syz [ 242.786946][ T7295] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 242.817555][ T7325] netlink: 14 bytes leftover after parsing attributes in process `syz.5.750'. [ 243.339706][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.756'. [ 243.350603][ T7344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.464198][ T4227] usb 5-1: USB disconnect, device number 5 [ 243.489445][ T7344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.077996][ T7365] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 244.108599][ T7365] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 244.143627][ T7365] Invalid option length (1047276) for dns_resolver key [ 244.183277][ T7369] SET target dimension over the limit! [ 244.491541][ T4172] EXT4-fs error: 152 callbacks suppressed [ 244.491560][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 244.493210][ T7394] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.775: Detected aborted journal [ 244.506470][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 244.516888][ T7393] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.774: Detected aborted journal [ 244.535612][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 244.555721][ T7394] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.775: Detected aborted journal [ 244.574669][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 244.614289][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 244.617739][ T7397] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.776: Detected aborted journal [ 244.656715][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 245.548770][ T7405] EXT4-fs: 141 callbacks suppressed [ 245.548789][ T7405] EXT4-fs (sda1): Remounting filesystem read-only [ 245.584408][ T7405] EXT4-fs (sda1): Remounting filesystem read-only [ 245.769099][ T7410] EXT4-fs (sda1): Remounting filesystem read-only [ 246.055610][ T7414] EXT4-fs (sda1): Remounting filesystem read-only [ 246.145149][ T7410] EXT4-fs (sda1): Remounting filesystem read-only [ 246.213879][ T7414] EXT4-fs (sda1): Remounting filesystem read-only [ 246.455721][ T7415] device syzkaller0 entered promiscuous mode [ 246.490798][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 246.603527][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 246.622410][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 246.667381][ T7416] EXT4-fs (sda1): Remounting filesystem read-only [ 246.735404][ T7401] loop5: detected capacity change from 0 to 32768 [ 246.912419][ T7401] XFS (loop5): Mounting V5 Filesystem [ 246.922686][ T7431] netlink: 'syz.3.784': attribute type 4 has an invalid length. [ 246.994884][ T26] audit: type=1326 audit(1790069144.575:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.4.785" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82e784159 code=0x7ffc0000 [ 247.022697][ T7434] netlink: 'syz.3.784': attribute type 4 has an invalid length. [ 247.091509][ T26] audit: type=1326 audit(1790069144.615:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.4.785" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82e784159 code=0x7ffc0000 [ 247.128736][ T7401] XFS (loop5): Ending clean mount [ 247.183411][ T26] audit: type=1326 audit(1790069144.615:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.4.785" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82e784159 code=0x7ffc0000 [ 247.216531][ T26] audit: type=1326 audit(1790069144.615:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.4.785" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb82e784159 code=0x7ffc0000 [ 247.240683][ T26] audit: type=1326 audit(1790069144.615:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.4.785" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82e784159 code=0x7ffc0000 [ 247.323353][ T7441] device syzkaller0 entered promiscuous mode [ 247.347353][ T26] audit: type=1326 audit(1790069144.615:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.4.785" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82e784159 code=0x7ffc0000 [ 247.347824][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.417443][ T26] audit: type=1326 audit(1790069144.615:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.4.785" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82e784159 code=0x7ffc0000 [ 247.448551][ T7443] batman_adv: batadv0: Interface deactivated: dummy0 [ 247.485645][ T7443] batman_adv: batadv0: Removing interface: dummy0 [ 247.503272][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 247.522786][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.532468][ T26] audit: type=1326 audit(1790069144.615:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.4.785" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82e784159 code=0x7ffc0000 [ 247.561842][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.563461][ T26] audit: type=1326 audit(1790069144.615:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.4.785" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb82e784159 code=0x7ffc0000 [ 247.579049][ T7443] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.598548][ T26] audit: type=1326 audit(1790069144.635:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.4.785" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82e784159 code=0x7ffc0000 [ 247.638936][ T7443] device bridge_slave_1 left promiscuous mode [ 247.661803][ T7443] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.673758][ T7443] bond0: (slave bond_slave_0): Releasing backup interface [ 247.693854][ T7443] bond0: (slave bond_slave_1): Releasing backup interface [ 247.733702][ T5800] XFS (loop5): Unmounting Filesystem [ 247.781931][ T7443] team0: Port device team_slave_0 removed [ 247.825167][ T7443] team0: Port device team_slave_1 removed [ 247.855577][ T7443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.873525][ T7443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.887476][ T7443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.920657][ T7443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.997637][ T7444] team0: Mode changed to "random" [ 248.018260][ T7447] device vlan0 entered promiscuous mode [ 248.042643][ T7447] team0: Port device vlan0 added [ 248.225253][ T7460] netlink: 40 bytes leftover after parsing attributes in process `syz.4.795'. [ 248.244751][ T7460] netlink: 40 bytes leftover after parsing attributes in process `syz.4.795'. [ 248.279897][ T7460] netlink: 40 bytes leftover after parsing attributes in process `syz.4.795'. [ 248.296942][ T7460] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 248.556527][ T21] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 248.655215][ T7473] netlink: 'syz.2.799': attribute type 1 has an invalid length. [ 248.663484][ T7473] netlink: 'syz.2.799': attribute type 4 has an invalid length. [ 248.672812][ T7473] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.799'. [ 249.146552][ T21] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 249.477518][ T21] usb 6-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 249.517623][ T4172] EXT4-fs error: 98 callbacks suppressed [ 249.517667][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 249.547390][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 249.659296][ T21] usb 6-1: Product: syz [ 249.723532][ T21] usb 6-1: Manufacturer: syz [ 250.231834][ T7492] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.806: Detected aborted journal [ 250.244790][ T3557] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #259: comm udevd: reading directory lblock 0 [ 250.258574][ T7497] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.807: Detected aborted journal [ 250.279223][ T3557] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 250.312222][ T7497] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.807: Detected aborted journal [ 250.345712][ T7506] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.809: Detected aborted journal [ 250.374390][ T3557] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 250.422315][ T7506] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.809: Detected aborted journal [ 250.442699][ T3557] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 250.512494][ T7462] udc-core: couldn't find an available UDC or it's busy [ 250.550204][ T7462] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 250.578427][ T7509] device syzkaller0 entered promiscuous mode [ 250.701914][ T7512] EXT4-fs: 80 callbacks suppressed [ 250.701932][ T7512] EXT4-fs (sda1): Remounting filesystem read-only [ 250.765933][ T7512] EXT4-fs (sda1): Remounting filesystem read-only [ 250.822199][ T7462] udc-core: couldn't find an available UDC or it's busy [ 250.839674][ T7462] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 250.873911][ T7515] EXT4-fs (sda1): Remounting filesystem read-only [ 250.902451][ T7515] EXT4-fs (sda1): Remounting filesystem read-only [ 250.998681][ T4172] EXT4-fs (sda1): Remounting filesystem read-only [ 251.039039][ T7517] EXT4-fs (sda1): Remounting filesystem read-only [ 251.085722][ T7517] EXT4-fs (sda1): Remounting filesystem read-only [ 251.332941][ T21] input: Samsung SUR40 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input8 [ 251.452060][ T7521] EXT4-fs (sda1): Remounting filesystem read-only [ 251.460363][ T4262] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 251.461505][ T7521] EXT4-fs (sda1): Remounting filesystem read-only [ 251.476461][ T21] usb 6-1: USB disconnect, device number 5 [ 251.480380][ T7523] EXT4-fs (sda1): Remounting filesystem read-only [ 251.509994][ T7524] netlink: 277 bytes leftover after parsing attributes in process `syz.2.816'. [ 251.570439][ T7527] udevd[7527]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/v4l-touch24': Input/output error [ 251.849239][ T7537] device syzkaller0 entered promiscuous mode [ 252.936573][ T4262] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 252.950304][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 252.970175][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 252.980443][ T4262] usb 5-1: Product: syz [ 252.984642][ T4262] usb 5-1: Manufacturer: syz [ 252.997742][ T7562] rdma_rxe: ignoring netdev event = 27 for dummy0 [ 253.005237][ T4262] usb 5-1: SerialNumber: syz [ 253.025561][ T4262] usb 5-1: config 0 descriptor?? [ 253.035736][ T7562] rdma_rxe: ignoring netdev event = 26 for dummy0 [ 253.066699][ T7562] rdma_rxe: ignoring netdev event = 21 for dummy0 [ 253.111732][ T7562] bond0: (slave dummy0): Releasing backup interface [ 253.147072][ T7562] rdma_rxe: ignoring netdev event = 10 for dummy0 [ 253.201596][ T7562] infiniband syz0: set down [ 253.232720][ T7562] rdma_rxe: ignoring netdev event = 9 for dummy0 [ 253.263937][ T7562] rdma_rxe: ignoring netdev event = 8 for dummy0 [ 253.293980][ T21] usb 5-1: USB disconnect, device number 6 [ 253.319806][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.362370][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.382490][ T7562] device bridge_slave_0 left promiscuous mode [ 253.390115][ T7562] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.407582][ T7562] device bridge_slave_1 left promiscuous mode [ 253.414002][ T7562] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.433082][ T7562] bond0: (slave bond_slave_0): Releasing backup interface [ 253.462901][ T7562] bond0: (slave bond_slave_1): Releasing backup interface [ 253.534527][ T7562] team0: Port device team_slave_0 removed [ 253.565790][ T7562] team0: Port device team_slave_1 removed [ 253.582427][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.592690][ T7562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.612762][ T7562] bond1: (slave geneve2): Releasing active interface [ 253.621455][ T7562] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 253.632262][ T7562] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 253.653256][ T7562] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 253.662744][ T7562] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 253.695262][ T4229] dummy0 speed is unknown, defaulting to 1000 [ 253.731813][ T4262] dummy0 speed is unknown, defaulting to 1000 [ 253.741906][ T4262] dummy0 speed is unknown, defaulting to 1000 [ 253.905837][ T7579] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.931078][ T7584] bond2: (slave geneve3): making interface the new active one [ 253.949343][ T7584] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 253.961500][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 254.737847][ T7587] EXT4-fs error: 120 callbacks suppressed [ 254.737891][ T7587] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.839: Detected aborted journal [ 254.755066][ T7587] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.839: Detected aborted journal [ 254.766373][ T7587] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.839: Detected aborted journal [ 255.158424][ T7587] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.839: Detected aborted journal [ 255.618199][ T7605] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.843: Detected aborted journal [ 255.634190][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.640530][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.699648][ T7606] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.845: Detected aborted journal [ 255.731737][ T7607] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.844: Detected aborted journal [ 255.747378][ T7605] EXT4-fs: 83 callbacks suppressed [ 255.747394][ T7605] EXT4-fs (sda1): Remounting filesystem read-only [ 255.785101][ T7606] EXT4-fs (sda1): Remounting filesystem read-only [ 255.803070][ T7607] EXT4-fs (sda1): Remounting filesystem read-only [ 255.819704][ T7606] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.845: Detected aborted journal [ 255.839397][ T7605] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.843: Detected aborted journal [ 255.854022][ T7607] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.844: Detected aborted journal [ 255.886169][ T7608] EXT4-fs (sda1): Remounting filesystem read-only [ 255.902495][ T7608] EXT4-fs (sda1): Remounting filesystem read-only [ 255.911987][ T7606] EXT4-fs (sda1): Remounting filesystem read-only [ 255.922430][ T7605] EXT4-fs (sda1): Remounting filesystem read-only [ 255.931643][ T7607] EXT4-fs (sda1): Remounting filesystem read-only [ 255.944148][ T7606] EXT4-fs (sda1): Remounting filesystem read-only [ 255.953601][ T7608] EXT4-fs (sda1): Remounting filesystem read-only [ 258.010996][ T7612] device syzkaller0 entered promiscuous mode [ 259.471282][ T7648] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (4096) [ 259.514243][ T7648] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 259.782986][ T7660] EXT4-fs error: 77 callbacks suppressed [ 259.783031][ T7660] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.860: Detected aborted journal [ 260.012931][ T4172] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 260.093930][ T7660] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.860: Detected aborted journal [ 260.358237][ T7647] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.857: Detected aborted journal [ 260.394979][ T7664] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.862: Detected aborted journal [ 260.422504][ T7664] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.862: Detected aborted journal [ 260.434079][ C1] [ 260.436427][ C1] ================================ [ 260.441540][ C1] WARNING: inconsistent lock state [ 260.446654][ C1] syzkaller #0 Not tainted [ 260.451074][ C1] -------------------------------- [ 260.456182][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 260.463032][ C1] ksoftirqd/1/20 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 260.469293][ C1] ffff88807f064120 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x109/0x250 [ 260.478881][ C1] {SOFTIRQ-ON-W} state was registered at: [ 260.484610][ C1] lock_acquire+0x19e/0x400 [ 260.489355][ C1] lock_sock_nested+0x44/0x100 [ 260.494308][ C1] x25_bind+0x18a/0x3b0 [ 260.498578][ C1] __sys_bind+0x2e9/0x3e0 [ 260.503073][ C1] __x64_sys_bind+0x76/0x80 [ 260.507763][ C1] do_syscall_64+0x4c/0xa0 [ 260.512331][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 260.518378][ C1] irq event stamp: 724438 [ 260.522701][ C1] hardirqs last enabled at (724438): [] __local_bh_enable_ip+0x136/0x1c0 [ 260.532860][ C1] hardirqs last disabled at (724437): [] __local_bh_enable_ip+0xd7/0x1c0 [ 260.542849][ C1] softirqs last enabled at (724402): [] run_ksoftirqd+0xa4/0x100 [ 260.552215][ C1] softirqs last disabled at (724407): [] run_ksoftirqd+0xa4/0x100 [ 260.561595][ C1] [ 260.561595][ C1] other info that might help us debug this: [ 260.569643][ C1] Possible unsafe locking scenario: [ 260.569643][ C1] [ 260.577081][ C1] CPU0 [ 260.580357][ C1] ---- [ 260.583627][ C1] lock(sk_lock-AF_X25); [ 260.587951][ C1] [ 260.591395][ C1] lock(sk_lock-AF_X25); [ 260.595899][ C1] [ 260.595899][ C1] *** DEADLOCK *** [ 260.595899][ C1] [ 260.604035][ C1] 1 lock held by ksoftirqd/1/20: [ 260.608962][ C1] #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 260.618315][ C1] [ 260.618315][ C1] stack backtrace: [ 260.624197][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 260.631472][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.641539][ C1] Call Trace: [ 260.644814][ C1] [ 260.647742][ C1] dump_stack_lvl+0x188/0x250 [ 260.652430][ C1] ? show_regs_print_info+0x20/0x20 [ 260.657636][ C1] valid_state+0x13b/0x1d0 [ 260.662145][ C1] mark_lock_irq+0xa9/0x900 [ 260.666653][ C1] ? stack_trace_save+0xa6/0xf0 [ 260.671532][ C1] ? save_trace+0xad0/0xad0 [ 260.676031][ C1] ? ret_from_fork+0x1f/0x30 [ 260.680644][ C1] ? save_trace+0x5a/0xad0 [ 260.685053][ C1] ? mark_lock+0x94/0x320 [ 260.689380][ C1] mark_lock+0x208/0x320 [ 260.693616][ C1] __lock_acquire+0xc63/0x7b50 [ 260.698388][ C1] ? ____kasan_slab_free+0xd5/0x110 [ 260.703655][ C1] ? verify_lock_unused+0x140/0x140 [ 260.708849][ C1] ? __napi_poll+0xbb/0x430 [ 260.713351][ C1] ? run_ksoftirqd+0xa4/0x100 [ 260.718022][ C1] ? smpboot_thread_fn+0x520/0x990 [ 260.723183][ C1] ? verify_lock_unused+0x140/0x140 [ 260.728379][ C1] ? verify_lock_unused+0x140/0x140 [ 260.733582][ C1] lock_acquire+0x19e/0x400 [ 260.738080][ C1] ? x25_kill_by_neigh+0x109/0x250 [ 260.743195][ C1] ? lock_chain_count+0x20/0x20 [ 260.748046][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 260.753328][ C1] ? read_lock_is_recursive+0x10/0x10 [ 260.758693][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 260.764057][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 260.769288][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 260.774652][ C1] ? _local_bh_enable+0xa0/0xa0 [ 260.779496][ C1] lock_sock_nested+0x44/0x100 [ 260.784254][ C1] ? x25_kill_by_neigh+0x109/0x250 [ 260.789371][ C1] x25_kill_by_neigh+0x109/0x250 [ 260.794309][ C1] x25_lapb_receive_frame+0x19d/0xf20 [ 260.799678][ C1] ? x25_device_event+0x250/0x250 [ 260.804696][ C1] netif_receive_skb_core+0x149/0x210 [ 260.810068][ C1] lapbeth_napi_poll+0x3e/0x80 [ 260.814899][ C1] __napi_poll+0xbb/0x430 [ 260.819231][ C1] net_rx_action+0x522/0xa80 [ 260.823820][ C1] ? net_tx_action+0x880/0x880 [ 260.828578][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 260.834556][ C1] ? lock_chain_count+0x20/0x20 [ 260.839411][ C1] handle_softirqs+0x336/0x830 [ 260.844175][ C1] ? run_ksoftirqd+0xa4/0x100 [ 260.848851][ C1] ? do_softirq+0x210/0x210 [ 260.853347][ C1] ? run_ksoftirqd+0x81/0x100 [ 260.858018][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 260.863212][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 260.868498][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 260.873691][ C1] run_ksoftirqd+0xa4/0x100 [ 260.878296][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 260.883515][ C1] smpboot_thread_fn+0x520/0x990 [ 260.888461][ C1] kthread+0x42e/0x520 [ 260.892530][ C1] ? cpu_report_death+0x180/0x180 [ 260.897558][ C1] ? kthread_blkcg+0xd0/0xd0 [ 260.902150][ C1] ret_from_fork+0x1f/0x30 [ 260.906568][ C1] [ 260.909644][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3260 [ 260.918465][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 20, name: ksoftirqd/1 [ 260.927428][ C1] INFO: lockdep is turned off. [ 260.932189][ C1] Preemption disabled at: [ 260.932199][ C1] [] handle_softirqs+0xfd/0x830 [ 260.942966][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 260.950252][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.960300][ C1] Call Trace: [ 260.963581][ C1] [ 260.966511][ C1] dump_stack_lvl+0x188/0x250 [ 260.971188][ C1] ? trace_hardirqs_off_finish+0xca/0x1f0 [ 260.976992][ C1] ? show_regs_print_info+0x20/0x20 [ 260.982185][ C1] ? load_image+0x410/0x410 [ 260.986684][ C1] ___might_sleep+0x493/0x610 [ 260.991392][ C1] ? handle_softirqs+0xfd/0x830 [ 260.996238][ C1] ? __might_sleep+0xf0/0xf0 [ 261.000848][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 261.006316][ C1] ? read_lock_is_recursive+0x10/0x10 [ 261.011710][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 261.017088][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 261.022295][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 261.027666][ C1] ? _local_bh_enable+0xa0/0xa0 [ 261.032514][ C1] lock_sock_nested+0x5b/0x100 [ 261.037292][ C1] x25_kill_by_neigh+0x109/0x250 [ 261.042254][ C1] x25_lapb_receive_frame+0x19d/0xf20 [ 261.047658][ C1] ? x25_device_event+0x250/0x250 [ 261.052696][ C1] netif_receive_skb_core+0x149/0x210 [ 261.058075][ C1] lapbeth_napi_poll+0x3e/0x80 [ 261.062846][ C1] __napi_poll+0xbb/0x430 [ 261.067175][ C1] net_rx_action+0x522/0xa80 [ 261.071842][ C1] ? net_tx_action+0x880/0x880 [ 261.076597][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 261.082583][ C1] ? lock_chain_count+0x20/0x20 [ 261.087437][ C1] handle_softirqs+0x336/0x830 [ 261.092199][ C1] ? run_ksoftirqd+0xa4/0x100 [ 261.096869][ C1] ? do_softirq+0x210/0x210 [ 261.101368][ C1] ? run_ksoftirqd+0x81/0x100 [ 261.106041][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 261.111230][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 261.116520][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 261.121713][ C1] run_ksoftirqd+0xa4/0x100 [ 261.126214][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 261.131411][ C1] smpboot_thread_fn+0x520/0x990 [ 261.136364][ C1] kthread+0x42e/0x520 [ 261.140460][ C1] ? cpu_report_death+0x180/0x180 [ 261.145481][ C1] ? kthread_blkcg+0xd0/0xd0 [ 261.150070][ C1] ret_from_fork+0x1f/0x30 [ 261.154502][ C1] [ 261.166456][ T7664] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.862: Detected aborted journal [ 261.185278][ T7664] EXT4-fs: 69 callbacks suppressed [ 261.185295][ T7664] EXT4-fs (sda1): Remounting filesystem read-only [ 261.208039][ T7664] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.862: Detected aborted journal [ 261.220805][ T7664] EXT4-fs (sda1): Remounting filesystem read-only [ 261.228058][ T7664] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.862: Detected aborted journal [ 261.239187][ T7664] EXT4-fs (sda1): Remounting filesystem read-only [ 261.245791][ T7664] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.862: Detected aborted journal [ 261.257668][ T7664] EXT4-fs (sda1): Remounting filesystem read-only [ 261.264373][ T7664] EXT4-fs (sda1): Remounting filesystem read-only [ 261.272141][ T7664] EXT4-fs (sda1): Remounting filesystem read-only [ 261.280183][ T7664] EXT4-fs (sda1): Remounting filesystem read-only [ 261.287096][ T7664] EXT4-fs (sda1): Remounting filesystem read-only