last executing test programs: 6m37.49316953s ago: executing program 1 (id=225): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r1, &(0x7f000000d080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r1, &(0x7f0000009040)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b4d7f12a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575558badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d5c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727a964658f6d60aa18bd474ce1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a643505b8ca50bddc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a7106277302fabf3a512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147333d30f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240ce389a0fb0920073b8d3de611e54d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c2b70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b66a0042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8eacf1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c23687c6e279bab469a3e0881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b049561e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f48f2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d1300", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0x0, {0x8000, 0x0, 0x0, 0x0, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, r5, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r2, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) syz_fuse_handle_req(r1, &(0x7f0000006c40)="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", 0x2000, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)={0x90, 0x0, 0xff, {0x2, 0x2, 0x742, 0x0, 0xad, 0x4, {0x5, 0x9bd, 0x7fffffffffffffff, 0x0, 0x4, 0x8, 0xa, 0x2c06, 0x2, 0x8000, 0xcef0, r5, 0x0, 0x20, 0x9465}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) faccessat2(r2, &(0x7f0000002200)='./file0\x00', 0x0, 0x200) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m37.111458079s ago: executing program 1 (id=229): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) read$FUSE(r1, &(0x7f0000001380)={0x2020}, 0x2020) socket$packet(0x11, 0x3, 0x300) close(r3) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x9004, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xcbf, 0x10efe}, 0x14) splice(r1, 0x0, r4, 0x0, 0xcc0, 0x0) 6m36.826125526s ago: executing program 1 (id=231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m35.747523872s ago: executing program 1 (id=234): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052"], 0x1c}, 0x1, 0x0, 0x0, 0x5001}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x4804) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48814}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m34.684013128s ago: executing program 1 (id=241): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) kcmp(r2, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, 0x0, 0x2000800) 6m33.524699796s ago: executing program 1 (id=247): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x98}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4090, 0xffa}], 0x1, 0xa, 0x203) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 6m17.760921585s ago: executing program 32 (id=247): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x98}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4090, 0xffa}], 0x1, 0xa, 0x203) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 17.815042012s ago: executing program 2 (id=1717): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x14, 0x1a, 0x1, 0x1, 0x4, {0x1c, 0x0, 0x6e80}}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x24040004) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 14.17393517s ago: executing program 2 (id=1729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/84, 0x54}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 13.488646896s ago: executing program 2 (id=1734): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000f70000/0x1000)=nil, 0x1000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x880) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f0000000000)={r3, r1, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf2513000000180001801400020073797a5f74756e000000000000feffff366a1001fbea00e58e97d9c9a60aa7d3133c4633bd0dec1abf805a2848432616b27afc795a1643d98dea82ea2711"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x90) ioctl$XFS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000100)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0xf0, 0x2b8, 0x25c, 0x0, 0x7, 0x1b8, 0x3a8, 0x3a8, 0x1b8, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0xa8, 0xf0, 0xa010000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8000000, 0xfffffffb}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff, 0x7f000000], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'veth0_virt_wifi\x00', 'wlan1\x00', {0xff}, {0xff}, 0x88, 0xa, 0x5, 0x40}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) 12.692845095s ago: executing program 0 (id=1737): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x80000400, 0x7, 0xc, 0x3800000, 0x6, "ea717423cf0fc7011504005800", 0x802, 0x8007ef}) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000001050527776987738dda430a000005300002802c00018014000300ff400400ff02"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_getoverrun(r6) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 11.917275045s ago: executing program 0 (id=1742): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r4) keyctl$search(0xa, r4, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x11) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x2b05287, 0x2, 0x1ff, 0x0, 0x0, "3aa8fc9b3e430cb400bb11e7334c38d70f4d28"}) 8.685503572s ago: executing program 2 (id=1755): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x80000400, 0x7, 0xc, 0x3800000, 0x6, "ea717423cf0fc7011504005800", 0x802, 0x8007ef}) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000001050527776987738dda430a000005300002802c00018014000300ff400400ff02"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_getoverrun(r6) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 7.545584799s ago: executing program 2 (id=1760): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee", 0xf3}, {&(0x7f0000000cc0)="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", 0x12f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736", 0xc3}, {&(0x7f0000000200)="223aa707c08a7eca577ac4e5fca75231526b9876be28f3dbb88da63d4e66b62cbc49eca97a5d5eb03c02208ffb60524cf64217e75311bb3ccc8750c92a1e4ed86591a855fff7e828e7d0f62832d58a820635fade", 0x54}, {&(0x7f0000000700)="411d563bfa82a6d201088c9001", 0xd}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287", 0x5a}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000340)="173e40b50f904c5c5e53df1d5cf6a1d6d6e0bb7a6775e8461674c0770cd1769088a30100592e30ca3a4eee209097adacd40c9600f98cab0e9d6e02cd6b662c49f7413e289704ae11928a9541497af5b34aa8c93f78c14bd488ccc0a89531", 0x5e, 0x34000005, 0x0, 0x0) 7.364739004s ago: executing program 2 (id=1761): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r4) keyctl$search(0xa, r4, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x11) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x2b05287, 0x2, 0x1ff, 0x0, 0x0, "3aa8fc9b3e430cb400bb11e7334c38d70f4d28"}) 6.930536154s ago: executing program 0 (id=1765): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000f70000/0x1000)=nil, 0x1000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs$pagemap(r1, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x880) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000000)={r4, r2, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf2513000000180001801400020073797a5f74756e000000000000feffff366a1001fbea00e58e97d9c9a60aa7d3133c4633bd0dec1abf805a2848432616b27afc795a1643d98dea82ea2711"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x90) ioctl$XFS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000100)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0xf0, 0x2b8, 0x25c, 0x0, 0x7, 0x1b8, 0x3a8, 0x3a8, 0x1b8, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0xa8, 0xf0, 0xa010000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8000000, 0xfffffffb}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff, 0x7f000000], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'veth0_virt_wifi\x00', 'wlan1\x00', {0xff}, {0xff}, 0x88, 0xa, 0x5, 0x40}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) 5.668535534s ago: executing program 5 (id=1771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000000500050000000500050007"], 0x4a) 5.463554479s ago: executing program 3 (id=1772): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14) syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 4.882620073s ago: executing program 5 (id=1773): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x80000400, 0x7, 0xc, 0x3800000, 0x6, "ea717423cf0fc7011504005800", 0x802, 0x8007ef}) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_getoverrun(r6) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 4.575013921s ago: executing program 3 (id=1775): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x3, &(0x7f0000000600)=0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x1a) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r0, 0x0, 0x0, 0x100000000, 0x0, 0x2, r0}]) 3.664753952s ago: executing program 5 (id=1776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r3) keyctl$search(0xa, r3, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000400)=0x11) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x2b05287, 0x2, 0x1ff, 0x0, 0x0, "3aa8fc9b3e430cb400bb11e7334c38d70f4d28"}) 3.573954014s ago: executing program 4 (id=1777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) 3.573740514s ago: executing program 3 (id=1778): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0xb99046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x28e7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) 3.424927549s ago: executing program 3 (id=1779): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280)={[{@nogrpid}, {@noload}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x2cf2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) sendfile(r2, r2, 0x0, 0x7a680000) mount(0x0, &(0x7f00000009c0)='.\x00', 0x0, 0x22be836, 0x0) 3.384796409s ago: executing program 4 (id=1780): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x49010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r4, 0x701, 0x2070bd24, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40850}, 0x4000) 2.243358847s ago: executing program 5 (id=1781): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x80000400, 0x7, 0xc, 0x3800000, 0x6, "ea717423cf0fc7011504005800", 0x802, 0x8007ef}) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000001050527776987738dda430a000005300002802c00018014000300ff400400ff02"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_getoverrun(r6) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 2.048053561s ago: executing program 4 (id=1782): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000180)=""/220, 0x4a, 0xdc, 0x1}, 0x20) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000180)=ANY=[@ANYBLOB='utf8=1,iocharset=cp1255,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,utf8=0,codepage=850,check=relaxed,shortname=winnt\x00\x00hortname=lower,shortname=win95,shortname=win95,nonumtail=0,shortname=mixed,uni_xlate=1,allow_utime=00000000000000000000777,\x00'], 0xff, 0x371, &(0x7f0000000280)="$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") 1.967271743s ago: executing program 3 (id=1783): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/17, 0x11}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f00000001c0)={0x3, {"3ada7c5c68c529135960daeb7925ff28", "6ed067463537f9ea0b798faf3a83a56e", "2c5a3e26b8daf9c50906bbb2f61fd172"}, 0x5ed, 0x7}) 1.905094225s ago: executing program 0 (id=1784): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x80000400, 0x7, 0xc, 0x3800000, 0x6, "ea717423cf0fc7011504005800", 0x802, 0x8007ef}) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000001050527776987738dda430a000005300002802c00018014000300ff400400ff02"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_getoverrun(r6) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 1.904768885s ago: executing program 4 (id=1785): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = fanotify_init(0xf00, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) 1.095381544s ago: executing program 5 (id=1786): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x80000400, 0x7, 0xc, 0x3800000, 0x6, "ea717423cf0fc7011504005800", 0x802, 0x8007ef}) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_getoverrun(r6) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 1.034770995s ago: executing program 3 (id=1787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003500)=@newtfilter={0x40, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0xe}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x40) 744.918513ms ago: executing program 0 (id=1788): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000380)="$eJzs289rHFUcAPDv7CZt06YmlvqjaavRKgZ/JE1aaw9eFAUPCoIe6jEm2xK7baSJYEvQKFKPUhCv4lHwL/CkF1FPglc9K4UiubQKwsrszia729383GRr9/OBSd6beZv3vjvzdt+blwmgaw2nP5KI/oj4LSIGKtn6AsOVX7eWFqb+XlqYSqJUeuOvpFzu5tLCVLVo9XX7qpmeiNwnSRxuUu/c5SvnJ4vFwqUsPzZ/4d2xuctXnpm5MHmucK5wceL06ZMnxp87NfFsW+JM47o59MHskUOvvHXttakz197+6ZusvXuiIY42GV7t4OOlUpur66z9Nemkp4MNYUPylW4aveX+PxD5WDl5A/Hyxx1tHLCtSqVS6f7WhxdLwF0siU63AOiM6hd9Ov+tbjs09Lgj3HihMgFK476VbZUjPZHLyvQ2zG/baTgiziz+82W6xfbchwAAqPNdOv55utn4Lxe194XuydZQBiPi3og4EBGnIuJgRNwXUS77QEQ8uMH6GxdJbh//5K5vKrB1Ssd/z2drW/Xjv+roLwbzWW5/Of7e5OxMsXA8e09Gond3mh9fpY7vX/r1s1bHasd/6ZbWXx0LZu243rO7/jXTk/OTW4m51o2PIoZ6msWfLK8EJBFxKCKGNlnHzJNfH2l1bO34V9GGdabSVxFPVM7/YjTEX5Wsvj45tieKheNj1avidj//cvX1VvVvKf42SM//3qbX/3L8g0nteu3cxuu4+vunLec0m73+dyVv1u17f3J+/tJ4xK7k1Uqja/dPNJSbWCmfxj9yrHn/PxAr78ThiEgv4qMR8VBEPJy1/ZGIeDQijq0S/48vPvZO/Z4/+tcf//ZK45/e0PlfSeyKxj3NE/nzP3xbV+ngSnJ95/9kOTWS7VnP59962lUs7N7q2wcAAAD/C7mI6I8kN7qczuVGRyv/w38w9uaKs3PzT52dfe/idOUZgcHozVXvdA3U3A8dz6b11fxEQ/5Edt/483xfOT86NVuc7nTw0OX2tej/qT/znW4dsO08rwXdS/+H7rVW//93h9oB7Dzf/9C9mvT/vk60A9h5zb7/P+xAO4Cd19D/LftBFzH/h+6l/0P30v+hK831xVoPyUvcJYkvjlbOeXv+YOTulLgktiPR6U8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9vgvAAD//+F55Qw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@block_validity}, {}, {@dioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c65) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) 744.686853ms ago: executing program 4 (id=1789): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x4bfa, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.32754ms ago: executing program 4 (id=1790): socket$kcm(0x2d, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b8002944291189"], 0xfdef) 4.0144ms ago: executing program 0 (id=1791): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x2, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x9700) 0s ago: executing program 5 (id=1792): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='1\x00', 0x2) rmdir(&(0x7f0000000800)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00') rmdir(&(0x7f0000000900)='./myconfig/usb_gadget/g1\x00') syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058da203002a000009050502000000000009058b", @ANYRES64], 0x0) kernel console output (not intermixed with test programs): ists on: batadv_slave_1 [ 74.408762][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.418745][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.429602][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.441534][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.478045][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.500663][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.554008][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.562758][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.582439][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.591379][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.658699][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.687415][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.701540][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.710948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.717594][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.451384][ T4189] Bluetooth: hci2: command 0x0419 tx timeout [ 75.465964][ T4189] Bluetooth: hci3: command 0x0419 tx timeout [ 75.595877][ T4189] Bluetooth: hci0: command 0x0419 tx timeout [ 75.632236][ T4189] Bluetooth: hci1: command 0x0419 tx timeout [ 75.632898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.638515][ T4189] Bluetooth: hci4: command 0x0419 tx timeout [ 75.689608][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.719572][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.787439][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.869545][ T4283] device syzkaller0 entered promiscuous mode [ 75.905364][ T4288] cgroup: Invalid name [ 75.992787][ T4288] ODEBUG: Out of memory. ODEBUG disabled [ 76.034783][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.239520][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.559964][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.570830][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.685562][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.720881][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.754952][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.813633][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.823217][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.885403][ T4296] device syzkaller0 entered promiscuous mode [ 77.066246][ T4300] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.216118][ T4307] netlink: 'syz.0.10': attribute type 12 has an invalid length. [ 77.237995][ T4307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 79.109149][ T4319] loop2: detected capacity change from 0 to 1024 [ 80.623546][ C0] sched: RT throttling activated [ 81.772510][ T4350] device syzkaller0 entered promiscuous mode [ 81.817904][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.826393][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.900104][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 82.175862][ T4358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 82.741143][ T4358] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.750288][ T4358] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.759133][ T4358] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.768762][ T4358] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.848501][ T4350] tipc: Started in network mode [ 82.855128][ T4370] af_packet: tpacket_rcv: packet too big, clamped from 5687 to 3956. macoff=92 [ 82.879354][ T4350] tipc: Node identity 2e1751616a4a, cluster identity 4711 [ 82.908758][ T4350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.917410][ T4350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.928184][ T4350] tipc: Enabled bearer , priority 0 [ 82.935823][ T4348] tipc: Resetting bearer [ 82.981602][ T4348] tipc: Disabling bearer [ 83.021919][ T4367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'. [ 83.071512][ T4368] device syzkaller0 entered promiscuous mode [ 83.092917][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 83.108700][ T4358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 83.142268][ T4358] Zero length message leads to an empty skb [ 83.306169][ T4385] device syzkaller0 entered promiscuous mode [ 83.317662][ T26] audit: type=1800 audit(1785450456.612:2): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.28" name="alua_tg_pt_offline" dev="configfs" ino=33083 res=0 errno=0 [ 83.531134][ T4389] device syzkaller0 entered promiscuous mode [ 83.618384][ T4403] loop1: detected capacity change from 0 to 512 [ 84.481867][ T4403] EXT4-fs error (device loop1): ext4_quota_enable:6440: comm syz.1.31: Bad quota inum: 9, type: 2 [ 84.538196][ T4403] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 84.560778][ T4403] EXT4-fs (loop1): mount failed [ 86.487230][ T4426] capability: warning: `syz.4.36' uses deprecated v2 capabilities in a way that may be insecure [ 86.556604][ T4406] loop2: detected capacity change from 0 to 40427 [ 86.771018][ T1110] cfg80211: failed to load regulatory.db [ 88.236554][ T4449] device syzkaller0 entered promiscuous mode [ 88.274698][ T4451] process 'syz.0.41' launched './file1' with NULL argv: empty string added [ 90.299331][ T26] audit: type=1326 audit(1785450463.582:3): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.2.49" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4f1616019 code=0x0 [ 90.534738][ T4491] device syzkaller0 entered promiscuous mode [ 90.549032][ T4491] tipc: Started in network mode [ 90.554076][ T4491] tipc: Node identity f2ada93ad392, cluster identity 4711 [ 90.561403][ T4491] tipc: Enabled bearer , priority 0 [ 90.656559][ T4491] tipc: Resetting bearer [ 91.045208][ T4490] tipc: Resetting bearer [ 91.274575][ T4490] tipc: Disabling bearer [ 91.292670][ T4488] loop0: detected capacity change from 0 to 4096 [ 91.403307][ T4488] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 91.506284][ T4488] EXT4-fs (loop0): Test dummy encryption mode enabled [ 91.550261][ T4488] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 91.710406][ T4500] netlink: 'syz.2.55': attribute type 1 has an invalid length. [ 91.725082][ T4514] loop3: detected capacity change from 0 to 512 [ 91.813746][ T4500] qfq: no options [ 91.945276][ T4517] device syzkaller0 entered promiscuous mode [ 92.022179][ T4517] tipc: Enabled bearer , priority 0 [ 92.119045][ T4517] tipc: Resetting bearer [ 92.177378][ T4516] tipc: Resetting bearer [ 92.230968][ T4516] tipc: Disabling bearer [ 93.352912][ T4536] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.408331][ T4538] device syzkaller0 entered promiscuous mode [ 93.420378][ T4539] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 93.568210][ T4541] tc action pedit unable to extract header offset for header type (0x4) [ 93.576905][ T4541] tc action pedit unable to extract header offset for header type (0x4) [ 93.585343][ T4541] tc action pedit unable to extract header offset for header type (0x4) [ 93.593750][ T4541] tc action pedit unable to extract header offset for header type (0x4) [ 93.602115][ T4541] tc action pedit unable to extract header offset for header type (0x4) [ 93.610520][ T4541] tc action pedit unable to extract header offset for header type (0x4) [ 93.618959][ T4541] tc action pedit unable to extract header offset for header type (0x4) [ 93.627377][ T4541] tc action pedit unable to extract header offset for header type (0x4) [ 93.635793][ T4541] tc action pedit unable to extract header offset for header type (0x4) [ 93.644198][ T4541] tc action pedit unable to extract header offset for header type (0x4) [ 93.652678][ T4541] 0: reclassify loop, rule prio 0, protocol 800 [ 95.633638][ T26] audit: type=1800 audit(1785450468.922:4): pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.73" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 95.717652][ T4568] device syzkaller0 entered promiscuous mode [ 96.234439][ T4579] device syzkaller0 entered promiscuous mode [ 96.258184][ T4575] loop4: detected capacity change from 0 to 8192 [ 96.389709][ T4577] loop2: detected capacity change from 0 to 32768 [ 96.430013][ T4575] ======================================================= [ 96.430013][ T4575] WARNING: The mand mount option has been deprecated and [ 96.430013][ T4575] and is ignored by this kernel. Remove the mand [ 96.430013][ T4575] option from the mount to silence this warning. [ 96.430013][ T4575] ======================================================= [ 97.143700][ T4590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.78'. [ 97.154785][ T4590] lo speed is unknown, defaulting to 1000 [ 97.160913][ T4590] lo speed is unknown, defaulting to 1000 [ 97.168960][ T4590] lo speed is unknown, defaulting to 1000 [ 97.178882][ T4590] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.191603][ T4590] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 97.291734][ T4590] lo speed is unknown, defaulting to 1000 [ 97.304219][ T4590] lo speed is unknown, defaulting to 1000 [ 97.315331][ T4590] lo speed is unknown, defaulting to 1000 [ 97.327018][ T4590] lo speed is unknown, defaulting to 1000 [ 97.338372][ T4590] lo speed is unknown, defaulting to 1000 [ 97.779136][ T4577] XFS (loop2): Mounting V5 Filesystem [ 97.972138][ T4187] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 98.001407][ T4187] FAT-fs (loop4): Filesystem has been set read-only [ 98.089676][ T4577] XFS (loop2): Ending clean mount [ 98.131870][ T4577] XFS (loop2): Quotacheck needed: Please wait. [ 98.712522][ T4577] XFS (loop2): Quotacheck: Done. [ 98.976640][ T4617] device syzkaller0 entered promiscuous mode [ 98.999927][ T4191] XFS (loop2): Unmounting Filesystem [ 99.465815][ T4630] Cannot find del_set index 0 as target [ 99.562894][ T4629] loop1: detected capacity change from 0 to 2048 [ 100.041665][ T4629] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 101.153593][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 101.163614][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 101.173578][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 101.183569][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 101.193574][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 101.203578][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 101.213577][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 101.223569][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 101.233569][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 101.243576][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 103.477555][ T4643] device syzkaller0 entered promiscuous mode [ 105.070068][ T4641] Set syz1 is full, maxelem 65536 reached [ 106.894511][ T4662] device syzkaller0 entered promiscuous mode [ 108.122305][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 108.131512][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 108.140521][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 108.149413][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 108.158780][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 108.167737][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 108.176634][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 108.185541][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 108.194439][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 108.203259][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 109.300175][ T4698] loop1: detected capacity change from 0 to 128 [ 109.364689][ T4698] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.400016][ T4698] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.292435][ T4707] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 110.295744][ T4706] device syzkaller0 entered promiscuous mode [ 111.446534][ T4712] loop3: detected capacity change from 0 to 256 [ 111.617773][ T4712] FAT-fs (loop3): bogus sectors per cluster 0 [ 111.675016][ T4712] FAT-fs (loop3): Can't find a valid FAT filesystem [ 113.485119][ T4266] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 115.111146][ T4748] loop0: detected capacity change from 0 to 512 [ 115.156857][ T4748] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 116.863660][ T4266] usb 2-1: device descriptor read/all, error -71 [ 117.046048][ T4750] syz.2.125 (4750): drop_caches: 2 [ 117.108178][ T4761] device syzkaller0 entered promiscuous mode [ 117.251108][ T4766] device syzkaller0 entered promiscuous mode [ 117.281362][ T4769] loop3: detected capacity change from 0 to 1024 [ 117.301995][ T4769] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 117.377048][ T4769] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c018, mo2=0102] [ 117.386507][ T4771] __nla_validate_parse: 45 callbacks suppressed [ 117.386526][ T4771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 117.406098][ T4769] System zones: 0-1, 3-12 [ 117.417247][ T4769] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,debug,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 117.453934][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 117.602225][ T4777] loop2: detected capacity change from 0 to 512 [ 117.657363][ T4777] EXT4-fs (loop2): Ignoring removed oldalloc option [ 117.688030][ T4777] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 117.923264][ T4788] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.931543][ T4788] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.778993][ T4793] device syzkaller0 entered promiscuous mode [ 118.842774][ T4788] syz.3.135 (4788) used greatest stack depth: 21072 bytes left [ 118.938669][ T4801] loop2: detected capacity change from 0 to 16 [ 119.050301][ T4805] device syzkaller0 entered promiscuous mode [ 119.062823][ T4801] erofs: (device loop2): mounted with root inode @ nid 36. [ 119.143225][ T4801] attempt to access beyond end of device [ 119.143225][ T4801] loop2: rw=0, want=24, limit=16 [ 119.199954][ T4811] attempt to access beyond end of device [ 119.199954][ T4811] loop2: rw=0, want=24, limit=16 [ 119.219735][ T4812] fuse: Bad value for 'fd' [ 119.238274][ T4801] attempt to access beyond end of device [ 119.238274][ T4801] loop2: rw=0, want=24, limit=16 [ 119.415531][ T4819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 119.463758][ T4819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.602497][ T4819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.662650][ T4827] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.739819][ T4803] netlink: 68 bytes leftover after parsing attributes in process `syz.0.141'. [ 122.181638][ T4865] device syzkaller0 entered promiscuous mode [ 122.238539][ T4266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.246858][ T4266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.269203][ T4865] tipc: Started in network mode [ 122.277563][ T4865] tipc: Node identity 5ef66a0a286c, cluster identity 4711 [ 122.291722][ T4865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.300080][ T4865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.356064][ T4865] tipc: Enabled bearer , priority 0 [ 122.369147][ T4867] device syzkaller0 entered promiscuous mode [ 122.779273][ T4864] tipc: Resetting bearer [ 122.840691][ T4864] tipc: Disabling bearer [ 122.991105][ T4883] device wlan0 entered promiscuous mode [ 123.033879][ T4884] bridge0: port 3(macvlan2) entered blocking state [ 123.048840][ T4883] syz.4.168 (4883) used greatest stack depth: 20400 bytes left [ 123.057787][ T4884] bridge0: port 3(macvlan2) entered disabled state [ 123.102926][ T4884] device macvlan2 entered promiscuous mode [ 123.327647][ T4884] bridge0: port 3(macvlan2) entered blocking state [ 123.334335][ T4884] bridge0: port 3(macvlan2) entered forwarding state [ 123.385724][ T4890] device syzkaller0 entered promiscuous mode [ 126.910165][ T4919] overlayfs: failed to clone lowerpath [ 128.215973][ T4927] loop0: detected capacity change from 0 to 16 [ 128.267574][ T4927] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 146300) [ 128.361665][ T4931] fuse: Bad value for 'fd' [ 128.394005][ T4927] loop0: detected capacity change from 0 to 128 [ 128.566800][ T4927] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 128.678259][ T26] audit: type=1800 audit(1785450501.972:5): pid=4927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.180" name="file1" dev="loop0" ino=1048600 res=0 errno=0 [ 129.496914][ T4940] device syzkaller0 entered promiscuous mode [ 130.261039][ T4941] tipc: Started in network mode [ 130.266305][ T4941] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 130.274194][ T4941] tipc: Enabled bearer , priority 4 [ 130.289503][ T4277] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 130.385711][ T4947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.186'. [ 131.653427][ T26] audit: type=1107 audit(1785450504.332:6): pid=4949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 131.838339][ T4266] tipc: Node number set to 8432298 [ 133.259350][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.265710][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.936250][ T5020] loop4: detected capacity change from 0 to 16 [ 137.204399][ T5020] erofs: (device loop4): erofs_read_superblock: blkszbits 10 isn't supported on this platform [ 138.978316][ T5025] loop1: detected capacity change from 0 to 164 [ 139.036572][ T5025] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 139.286803][ T5036] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.719566][ T5056] device syzkaller0 entered promiscuous mode [ 142.647470][ T5073] loop2: detected capacity change from 0 to 256 [ 142.690931][ T5075] device syzkaller0 entered promiscuous mode [ 142.806342][ T5081] device syzkaller0 entered promiscuous mode [ 142.939189][ T5087] loop2: detected capacity change from 0 to 512 [ 142.993744][ T5087] EXT4-fs (loop2): Ignoring removed nobh option [ 143.000067][ T5087] EXT4-fs (loop2): Ignoring removed nobh option [ 143.042828][ T5087] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 143.101884][ T5087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 143.110391][ T5087] System zones: 1-12 [ 143.115837][ T5087] EXT4-fs (loop2): orphan cleanup on readonly fs [ 143.122440][ T5087] EXT4-fs error (device loop2): __ext4_iget:4919: inode #11: block 1042: comm syz.2.226: invalid block [ 143.136444][ T5087] EXT4-fs (loop2): Remounting filesystem read-only [ 143.146642][ T5087] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.226: couldn't read orphan inode 11 (err -117) [ 143.165538][ T5087] EXT4-fs (loop2): Remounting filesystem read-only [ 143.172271][ T5087] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nobh,nobh,errors=remount-ro,data=writeback. Quota mode: none. [ 143.492447][ T5101] device syzkaller0 entered promiscuous mode [ 144.511900][ T5118] loop0: detected capacity change from 0 to 128 [ 146.665157][ T26] audit: type=1326 audit(1785450519.962:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd833c52019 code=0x7ffc0000 [ 146.749492][ T26] audit: type=1326 audit(1785450519.962:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd833c52019 code=0x7ffc0000 [ 146.773639][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 146.853071][ T26] audit: type=1326 audit(1785450519.962:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd833c52019 code=0x7ffc0000 [ 146.874079][ T5168] device syzkaller0 entered promiscuous mode [ 146.933637][ T26] audit: type=1326 audit(1785450519.962:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd833c52019 code=0x7ffc0000 [ 147.000781][ T26] audit: type=1326 audit(1785450519.962:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd833c52019 code=0x7ffc0000 [ 147.153992][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 147.185623][ T26] audit: type=1326 audit(1785450519.962:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fd833c52019 code=0x7ffc0000 [ 147.210156][ T7] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 148.691427][ C1] Unknown status report in ack skb [ 148.731520][ T26] audit: type=1326 audit(1785450519.962:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd833c52019 code=0x7ffc0000 [ 148.818570][ T26] audit: type=1326 audit(1785450519.992:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd833c52019 code=0x7ffc0000 [ 148.843025][ T7] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 148.859725][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.868389][ T7] usb 1-1: Product: syz [ 148.872593][ T7] usb 1-1: Manufacturer: syz [ 148.969390][ T26] audit: type=1326 audit(1785450519.992:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd833c52019 code=0x7ffc0000 [ 149.794866][ T7] usb 1-1: SerialNumber: syz [ 149.805817][ T7] usb 1-1: config 0 descriptor?? [ 149.913920][ T7] usb 1-1: can't set config #0, error -71 [ 149.926143][ T7] usb 1-1: USB disconnect, device number 2 [ 149.986365][ T26] audit: type=1326 audit(1785450519.992:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd833c52019 code=0x7ffc0000 [ 153.053302][ T5215] loop4: detected capacity change from 0 to 1024 [ 153.185447][ T5215] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 153.285631][ T5215] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c018, mo2=0102] [ 153.309233][ T5215] System zones: 0-1, 3-12 [ 153.390334][ T5215] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,debug,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 153.713819][ T1335] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 155.513802][ T1335] usb 3-1: config 0 has no interfaces? [ 155.519507][ T1335] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 155.547506][ T1335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.585704][ T1335] usb 3-1: config 0 descriptor?? [ 156.024974][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 156.033967][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 156.042998][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 156.051922][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 156.060793][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 156.069725][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 156.079225][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 156.088123][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 156.097017][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 156.105941][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 156.122218][ T4234] usb 3-1: USB disconnect, device number 2 [ 157.782306][ T5273] xt_cgroup: path and classid specified [ 160.006457][ T5283] usb usb8: usbfs: process 5283 (syz.2.275) did not claim interface 0 before use [ 162.973978][ T4277] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.402739][ T4277] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.916854][ T5316] lo speed is unknown, defaulting to 1000 [ 164.060357][ T4277] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.322035][ T4277] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.333294][ T4234] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 165.615970][ T4266] Bluetooth: hci0: command 0x0409 tx timeout [ 166.004351][ T4234] usb 3-1: config 1 has an invalid interface number: 242 but max is 0 [ 166.037334][ T4234] usb 3-1: config 1 has no interface number 0 [ 166.192187][ T4234] usb 3-1: config 1 interface 242 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 166.495921][ T4234] usb 3-1: config 1 interface 242 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 166.509848][ T4234] usb 3-1: config 1 interface 242 has no altsetting 0 [ 166.561224][ T5316] chnl_net:caif_netlink_parms(): no params data found [ 166.703806][ T4234] usb 3-1: string descriptor 0 read error: -71 [ 166.710060][ T4234] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.731372][ T4277] tipc: Left network mode [ 166.741449][ T5362] loop2: detected capacity change from 0 to 512 [ 166.868479][ T5362] EXT4-fs (loop2): Ignoring removed bh option [ 166.970106][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 167.000712][ T4234] usb 3-1: can't set config #1, error -71 [ 167.607901][ T5362] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.293: corrupted in-inode xattr [ 167.632608][ T5362] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.293: couldn't read orphan inode 15 (err -117) [ 167.659216][ T5362] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 167.687487][ T4234] usb 3-1: USB disconnect, device number 3 [ 167.699555][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 169.615206][ T5316] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.640703][ T5316] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.651092][ T5316] device bridge_slave_0 entered promiscuous mode [ 169.804571][ T5381] syz.3.297 (5381) used greatest stack depth: 17376 bytes left [ 169.879875][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 169.900144][ T5316] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.929614][ T5316] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.978111][ T5316] device bridge_slave_1 entered promiscuous mode [ 170.055954][ T5409] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 170.131005][ T5316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.775629][ T5316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.881385][ T5316] team0: Port device team_slave_0 added [ 171.004409][ T5316] team0: Port device team_slave_1 added [ 171.217118][ T5425] loop0: detected capacity change from 0 to 1024 [ 171.828561][ T5316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.873770][ T5316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.920167][ T5316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.931104][ T1335] Bluetooth: hci0: command 0x0419 tx timeout [ 172.021276][ T5316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.059699][ T5316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.284023][ T5316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.319494][ T5316] device hsr_slave_0 entered promiscuous mode [ 172.326545][ T5316] device hsr_slave_1 entered promiscuous mode [ 172.338286][ T5316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.353609][ T5316] Cannot create hsr debugfs directory [ 172.438719][ T5442] syz.0.308 sent an empty control message without MSG_MORE. [ 173.415339][ T5316] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.493845][ T5316] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.522447][ T5316] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 173.640841][ T5316] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.716248][ T5457] loop0: detected capacity change from 0 to 512 [ 173.794494][ T5457] EXT4-fs (loop0): Ignoring removed bh option [ 173.854854][ T5457] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.311: corrupted in-inode xattr [ 173.885583][ T4277] device hsr_slave_0 left promiscuous mode [ 173.893187][ T4277] device hsr_slave_1 left promiscuous mode [ 173.931830][ T5457] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.311: couldn't read orphan inode 15 (err -117) [ 173.948831][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.983341][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.009162][ T5457] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 174.048539][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.062435][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.070362][ T4277] device bridge_slave_1 left promiscuous mode [ 174.085039][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.442343][ T4277] device bridge_slave_0 left promiscuous mode [ 174.628455][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.077632][ T4277] device veth1_macvtap left promiscuous mode [ 175.213681][ T4277] device veth0_macvtap left promiscuous mode [ 175.320046][ T4277] device veth1_vlan left promiscuous mode [ 175.361803][ T4277] device veth0_vlan left promiscuous mode [ 176.156814][ T5482] loop2: detected capacity change from 0 to 512 [ 176.579712][ T5482] EXT4-fs (loop2): inodes count not valid: 40 vs 32 [ 177.232952][ T4277] team0 (unregistering): Port device team_slave_1 removed [ 177.287881][ T4277] team0 (unregistering): Port device team_slave_0 removed [ 177.350006][ T4277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.408860][ T4277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.508562][ T4277] bond0 (unregistering): Released all slaves [ 177.720683][ T5491] __nla_validate_parse: 44 callbacks suppressed [ 177.720703][ T5491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 177.765483][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.319'. [ 177.839256][ T5497] netlink: 'syz.3.319': attribute type 4 has an invalid length. [ 177.877953][ T5497] netlink: 152 bytes leftover after parsing attributes in process `syz.3.319'. [ 177.917953][ T5502] loop0: detected capacity change from 0 to 16 [ 177.944472][ T5497] .`: renamed from bond0 [ 178.122853][ T5502] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0xea26c732, 0x02d6543f expected [ 178.340447][ T5507] udevd[5507]: incorrect erofs checksum on /dev/loop0 [ 178.752886][ T5316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.781791][ T5316] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.795232][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.904566][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.740243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.845830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.854954][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.862281][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.871647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.886697][ T5520] netlink: 'syz.3.322': attribute type 21 has an invalid length. [ 179.901127][ T5520] netlink: 156 bytes leftover after parsing attributes in process `syz.3.322'. [ 179.948724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.986037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.154249][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.161433][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.200044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.230252][ T5533] Invalid ELF header magic: != ELF [ 180.462593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.687508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.951962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.984626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.021809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.062169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.079993][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.088608][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.144603][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.157228][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.176575][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.546817][ T5546] bridge0: port 3(syz_tun) entered blocking state [ 181.560949][ T5546] bridge0: port 3(syz_tun) entered disabled state [ 182.363371][ T5546] device syz_tun entered promiscuous mode [ 182.421509][ T5560] autofs4:pid:5560:autofs_fill_super: called with bogus options [ 183.246634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.274581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.225966][ T5316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.668552][ T5608] tipc: Enabled bearer , priority 10 [ 188.165688][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.230148][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.634776][ T5316] device veth0_vlan entered promiscuous mode [ 188.891848][ T5316] device veth1_vlan entered promiscuous mode [ 188.930991][ T5316] device veth0_macvtap entered promiscuous mode [ 188.947588][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.965448][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.998948][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.018900][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.061002][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.081462][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.124462][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.280667][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.288889][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.330070][ T5316] device veth1_macvtap entered promiscuous mode [ 189.350053][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.133923][ T5643] loop0: detected capacity change from 0 to 512 [ 190.274911][ T5650] program syz.2.347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.438687][ T5650] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 190.474567][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.663948][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.802909][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.944701][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.972498][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.983234][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.995169][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.006302][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.031457][ T5316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.040432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.084666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.124784][ T1335] Bluetooth: hci2: command 0x0406 tx timeout [ 191.131186][ T1335] Bluetooth: hci4: command 0x0406 tx timeout [ 191.246288][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 191.252546][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 191.269679][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.284478][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.294382][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.306900][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.874403][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.917412][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.950678][ T5316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.906229][ T5659] tipc: Enabling of bearer rejected, failed to enable media [ 192.916386][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.937583][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.970431][ T5316] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.996730][ T5316] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.023885][ T5316] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.032751][ T5316] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.796079][ T5689] device syzkaller0 entered promiscuous mode [ 193.853961][ T5688] Invalid ELF header magic: != ELF [ 193.952593][ T5689] tipc: Enabled bearer , priority 0 [ 193.986345][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.029488][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.074814][ T5691] tipc: Resetting bearer [ 194.121347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.159814][ T5685] tipc: Resetting bearer [ 194.176890][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.183263][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.234746][ T5685] tipc: Disabling bearer [ 195.040270][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.072420][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.108249][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.517453][ T5720] fuse: root generation should be zero [ 198.169364][ T5737] input: syz0 as /devices/virtual/input/input5 [ 200.542913][ T5766] loop0: detected capacity change from 0 to 128 [ 200.630319][ T5766] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 205.637514][ T5800] loop0: detected capacity change from 0 to 256 [ 206.129505][ T5800] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 207.786334][ T5821] device syzkaller0 entered promiscuous mode [ 210.955362][ T5866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.393'. [ 211.765667][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 212.071758][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 212.154067][ T5870] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.162897][ T5870] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.171840][ T5870] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.180604][ T5870] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.308727][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 212.308742][ T26] audit: type=1326 audit(1785450585.602:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.5.396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205047a019 code=0x7ffc0000 [ 212.361620][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 212.370510][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 212.499937][ T26] audit: type=1326 audit(1785450585.602:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.5.396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205047a019 code=0x7ffc0000 [ 212.599801][ T26] audit: type=1326 audit(1785450585.632:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.5.396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f205047a019 code=0x7ffc0000 [ 213.515350][ T5885] tipc: Started in network mode [ 213.520299][ T5885] tipc: Node identity fa4f57dd1753, cluster identity 4711 [ 213.605670][ T5885] tipc: Enabled bearer , priority 0 [ 213.624943][ T26] audit: type=1326 audit(1785450585.632:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.5.396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205047a019 code=0x7ffc0000 [ 213.656926][ T5894] device syzkaller0 entered promiscuous mode [ 213.718917][ T5885] tipc: Resetting bearer [ 213.790179][ T26] audit: type=1326 audit(1785450585.632:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.5.396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205047a019 code=0x7ffc0000 [ 213.829625][ T5882] tipc: Resetting bearer [ 213.892022][ T5882] tipc: Disabling bearer [ 213.908890][ T5891] loop5: detected capacity change from 0 to 8192 [ 213.920110][ T26] audit: type=1326 audit(1785450585.652:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.5.396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f205047a019 code=0x7ffc0000 [ 214.002295][ T26] audit: type=1326 audit(1785450585.652:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.5.396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205047a019 code=0x7ffc0000 [ 214.072136][ T5891] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 214.099697][ T5891] REISERFS (device loop5): using ordered data mode [ 214.113555][ T5891] reiserfs: using flush barriers [ 214.135116][ T5891] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 214.234500][ T26] audit: type=1326 audit(1785450585.652:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.5.396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205047a019 code=0x7ffc0000 [ 214.278438][ T5891] REISERFS (device loop5): checking transaction log (loop5) [ 214.360619][ T26] audit: type=1326 audit(1785450585.652:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.5.396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f205047a019 code=0x7ffc0000 [ 214.395930][ T5891] REISERFS (device loop5): Using r5 hash to sort names [ 214.409478][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 214.422125][ T5891] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 214.521444][ T4189] Process accounting resumed [ 214.628736][ T26] audit: type=1326 audit(1785450585.652:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.5.396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205047a019 code=0x7ffc0000 [ 216.045554][ T5924] tipc: Enabling of bearer rejected, failed to enable media [ 216.232006][ T5907] Process accounting resumed [ 216.350891][ T5930] loop0: detected capacity change from 0 to 128 [ 219.009426][ T5963] ipt_REJECT: ECHOREPLY no longer supported. [ 219.018701][ T5963] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.766417][ T5980] input: syz0 as /devices/virtual/input/input6 [ 219.876443][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.902617][ T5985] loop0: detected capacity change from 0 to 128 [ 219.912926][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.989343][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.025255][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.091906][ T5985] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 220.324560][ T5985] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 221.243195][ T5998] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 225.052788][ T6026] loop0: detected capacity change from 0 to 512 [ 225.118229][ T6026] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 225.159331][ T6026] EXT4-fs (loop0): Ignoring removed orlov option [ 225.189590][ T6026] EXT4-fs (loop0): DAX unsupported by block device. [ 227.452245][ T6071] loop2: detected capacity change from 0 to 256 [ 227.474818][ T6072] loop0: detected capacity change from 0 to 8 [ 228.227912][ T6085] xt_hashlimit: max too large, truncated to 1048576 [ 228.236312][ T6085] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 228.435126][ T6071] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 228.471002][ T6071] attempt to access beyond end of device [ 228.471002][ T6071] loop2: rw=16777216, want=2239, limit=256 [ 228.492218][ T6071] attempt to access beyond end of device [ 228.492218][ T6071] loop2: rw=16777216, want=4295, limit=256 [ 228.512402][ T6071] attempt to access beyond end of device [ 228.512402][ T6071] loop2: rw=16777216, want=6751, limit=256 [ 228.538961][ T6071] attempt to access beyond end of device [ 228.538961][ T6071] loop2: rw=16777216, want=10375, limit=256 [ 228.573635][ T6071] attempt to access beyond end of device [ 228.573635][ T6071] loop2: rw=16777216, want=15663, limit=256 [ 228.602175][ T6071] attempt to access beyond end of device [ 228.602175][ T6071] loop2: rw=16777216, want=19655, limit=256 [ 228.622926][ T6071] attempt to access beyond end of device [ 228.622926][ T6071] loop2: rw=16777216, want=21983, limit=256 [ 228.642999][ T6071] attempt to access beyond end of device [ 228.642999][ T6071] loop2: rw=16777216, want=24031, limit=256 [ 228.664191][ T6071] attempt to access beyond end of device [ 228.664191][ T6071] loop2: rw=16777216, want=26087, limit=256 [ 228.684203][ T6071] attempt to access beyond end of device [ 228.684203][ T6071] loop2: rw=16777216, want=28151, limit=256 [ 228.984015][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 228.984032][ T26] audit: type=1800 audit(1785450601.752:38): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.431" name="file1" dev="loop2" ino=1048644 res=0 errno=0 [ 229.061125][ T6087] loop5: detected capacity change from 0 to 40427 [ 230.931887][ T6087] F2FS-fs (loop5): invalid crc value [ 231.103453][ T6087] F2FS-fs (loop5): Found nat_bits in checkpoint [ 231.167782][ T6100] xt_hashlimit: max too large, truncated to 1048576 [ 232.233541][ T6102] syz.2.437 uses obsolete (PF_INET,SOCK_PACKET) [ 232.637583][ T6087] F2FS-fs (loop5): Start checkpoint disabled! [ 232.968675][ T263] block nbd2: Attempted send on invalid socket [ 232.975634][ T263] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 233.262957][ T6110] 9pnet: Insufficient options for proto=fd [ 236.619802][ T6133] loop2: detected capacity change from 0 to 128 [ 238.134773][ T6133] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 238.292430][ T6133] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 239.836574][ T6154] ip6t_srh: unknown srh match flags FF3F [ 243.469277][ T6182] loop2: detected capacity change from 0 to 4096 [ 244.687652][ T6182] ntfs3: Unknown parameter 'Ÿ6ä‡SËvj' [ 247.070164][ T26] audit: type=1326 audit(1785450620.362:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.2.462" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f1616019 code=0x7ffc0000 [ 247.242739][ T26] audit: type=1326 audit(1785450620.362:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.2.462" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f1616019 code=0x7ffc0000 [ 247.274452][ T26] audit: type=1326 audit(1785450620.362:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.2.462" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fb4f1616019 code=0x7ffc0000 [ 248.484971][ T26] audit: type=1326 audit(1785450620.362:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.2.462" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f1616019 code=0x7ffc0000 [ 248.509089][ T26] audit: type=1326 audit(1785450620.362:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.2.462" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f1616019 code=0x7ffc0000 [ 248.722613][ T26] audit: type=1326 audit(1785450621.012:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.2.462" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4f1616019 code=0x7ffc0000 [ 249.229234][ T6233] loop2: detected capacity change from 0 to 32768 [ 249.321017][ T26] audit: type=1326 audit(1785450621.012:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.2.462" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f1616019 code=0x7ffc0000 [ 249.395705][ T6233] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 250.100981][ T26] audit: type=1326 audit(1785450621.012:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.2.462" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f1616019 code=0x7ffc0000 [ 250.154802][ T26] audit: type=1326 audit(1785450621.022:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.2.462" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb4f1616019 code=0x7ffc0000 [ 250.180617][ T26] audit: type=1326 audit(1785450621.022:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.2.462" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f1616019 code=0x7ffc0000 [ 252.834476][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 256.140291][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.146708][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.857750][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 260.776217][ T6333] syz.5.485 (6333): drop_caches: 2 [ 261.676107][ T6380] fuse: Bad value for 'fd' [ 261.743837][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 261.743922][ T26] audit: type=1326 audit(1785450634.962:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.491" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4313ec0019 code=0x7ffc0000 [ 262.618605][ T26] audit: type=1326 audit(1785450634.962:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.491" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4313ec0019 code=0x7ffc0000 [ 262.783635][ T26] audit: type=1326 audit(1785450634.962:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.491" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4313ec0019 code=0x7ffc0000 [ 262.813538][ T26] audit: type=1326 audit(1785450634.962:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.491" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4313ec0019 code=0x7ffc0000 [ 263.240173][ T6397] ipt_REJECT: ECHOREPLY no longer supported. [ 263.261723][ T6397] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.785958][ T26] audit: type=1326 audit(1785450634.962:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.491" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4313ec0019 code=0x7ffc0000 [ 263.903064][ T26] audit: type=1326 audit(1785450634.962:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.491" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4313ec0019 code=0x7ffc0000 [ 263.927935][ T26] audit: type=1326 audit(1785450634.962:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.491" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4313ec0019 code=0x7ffc0000 [ 264.005217][ T26] audit: type=1326 audit(1785450634.972:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.491" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4313ec0019 code=0x7ffc0000 [ 264.222037][ T26] audit: type=1326 audit(1785450634.972:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.491" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4313ec0019 code=0x7ffc0000 [ 264.659264][ T26] audit: type=1326 audit(1785450634.972:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.491" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4313ec0019 code=0x7ffc0000 [ 267.278138][ T6409] Set syz1 is full, maxelem 65536 reached [ 269.865317][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 269.874365][ T6456] netlink: 'syz.0.508': attribute type 10 has an invalid length. [ 269.882116][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'. [ 269.894645][ T6456] device geneve2 entered promiscuous mode [ 270.528434][ T6463] netlink: 132 bytes leftover after parsing attributes in process `syz.5.509'. [ 275.624823][ T6511] tipc: Cannot configure node identity twice [ 277.859632][ T6528] loop5: detected capacity change from 0 to 128 [ 278.364644][ T6528] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 278.773320][ T6538] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 281.949451][ T6573] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 281.975831][ T6573] netlink: 'syz.4.528': attribute type 1 has an invalid length. [ 282.021733][ T6573] netlink: 'syz.4.528': attribute type 2 has an invalid length. [ 282.997759][ T6582] loop2: detected capacity change from 0 to 512 [ 285.670998][ T6582] EXT4-fs: error -4 creating inode table initialization thread [ 286.633790][ T6582] EXT4-fs (loop2): mount failed [ 290.786362][ T6647] loop5: detected capacity change from 0 to 4096 [ 290.967013][ T6647] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 292.146324][ T6662] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 292.856679][ T6668] xt_hashlimit: max too large, truncated to 1048576 [ 292.869227][ T6668] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 293.812567][ T5316] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 294.946064][ T6687] syz.0.549 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 295.597799][ T6691] loop2: detected capacity change from 0 to 256 [ 295.715586][ T6691] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 297.801344][ T6701] syz.0.553 (6701): drop_caches: 2 [ 297.809964][ T6709] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 297.821719][ T6709] hfsplus: unable to find HFS+ superblock [ 300.859846][ T6747] kvm [6744]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x800100000080 [ 300.951724][ T6747] kvm [6744]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 300.965459][ T6747] kvm [6744]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x800000000000 [ 302.081438][ T6779] netlink: 'syz.4.569': attribute type 21 has an invalid length. [ 302.143523][ T6782] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 302.811363][ T6779] netlink: 156 bytes leftover after parsing attributes in process `syz.4.569'. [ 303.997908][ T6796] Invalid ELF header magic: != ELF [ 312.472492][ T6878] device syzkaller0 entered promiscuous mode [ 314.098207][ T6890] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 314.107312][ T6890] overlayfs: missing 'lowerdir' [ 314.150389][ T6890] mmap: syz.5.596 (6890) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 317.523185][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.539171][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.719254][ T21] Process accounting resumed [ 317.844796][ T6921] device bridge1 entered promiscuous mode [ 317.853198][ T6921] team0: Port device bridge1 added [ 318.498912][ T6941] overlayfs: failed to clone upperpath [ 318.925117][ T6920] Process accounting resumed [ 319.326650][ T6960] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 321.265097][ T6973] loop2: detected capacity change from 0 to 512 [ 325.330122][ T7005] futex_wake_op: syz.5.620 tries to shift op by 144; fix this program [ 326.074403][ T21] Process accounting resumed [ 326.372211][ T7010] futex_wake_op: syz.0.622 tries to shift op by 144; fix this program [ 328.619315][ T6985] Process accounting resumed [ 330.615952][ T7036] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 330.624421][ T7036] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 330.633009][ T7036] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 334.634834][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 335.142535][ T7071] device batadv0 entered promiscuous mode [ 335.975029][ T7072] loop2: detected capacity change from 0 to 256 [ 336.013943][ T7071] device macsec1 entered promiscuous mode [ 336.165713][ T7072] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 336.580247][ T23] Process accounting resumed [ 336.592220][ T7071] device batadv0 left promiscuous mode [ 336.696574][ T7080] Process accounting resumed [ 337.131066][ T7098] block device autoloading is deprecated and will be removed. [ 342.117160][ T7159] loop2: detected capacity change from 0 to 256 [ 342.248183][ T7159] exFAT-fs (loop2): bogus number of FAT structure [ 342.262185][ T7159] exFAT-fs (loop2): failed to read boot sector [ 342.288634][ T7159] exFAT-fs (loop2): failed to recognize exfat type [ 344.051775][ T7205] loop2: detected capacity change from 0 to 64 [ 344.196059][ T7209] loop5: detected capacity change from 0 to 512 [ 344.260494][ T7209] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 344.429040][ T7209] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #3: comm syz.5.675: corrupted inode contents [ 344.533188][ T7209] EXT4-fs (loop5): Remounting filesystem read-only [ 344.560678][ T7209] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #3: comm syz.5.675: mark_inode_dirty error [ 344.628507][ T7209] EXT4-fs (loop5): Remounting filesystem read-only [ 344.650033][ T7217] loop2: detected capacity change from 0 to 4096 [ 344.659731][ T7209] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #3: comm syz.5.675: corrupted inode contents [ 344.686367][ T7217] __ntfs_error: 28 callbacks suppressed [ 344.686382][ T7217] ntfs: (device loop2): parse_options(): Unrecognized mount option errorz. [ 344.749437][ T7209] EXT4-fs (loop5): Remounting filesystem read-only [ 344.764797][ T7209] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #3: comm syz.5.675: mark_inode_dirty error [ 344.814176][ T7209] EXT4-fs (loop5): Remounting filesystem read-only [ 344.861952][ T7209] Quota error (device loop5): write_blk: dquota write failed [ 344.898594][ T7209] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 344.940035][ T7209] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.675: Failed to acquire dquot type 0 [ 345.123814][ T7209] EXT4-fs (loop5): Remounting filesystem read-only [ 345.162835][ T7209] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #16: comm syz.5.675: corrupted inode contents [ 345.216374][ T7209] EXT4-fs (loop5): Remounting filesystem read-only [ 345.222958][ T7209] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #16: comm syz.5.675: mark_inode_dirty error [ 345.239113][ T7209] EXT4-fs (loop5): Remounting filesystem read-only [ 345.255087][ T7209] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #16: comm syz.5.675: corrupted inode contents [ 345.283901][ T7209] EXT4-fs (loop5): Remounting filesystem read-only [ 345.290479][ T7209] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.675: mark_inode_dirty error [ 345.307315][ T7209] EXT4-fs (loop5): Remounting filesystem read-only [ 345.316233][ T7209] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #16: comm syz.5.675: corrupted inode contents [ 345.332410][ T7209] EXT4-fs (loop5): Remounting filesystem read-only [ 345.353598][ T7209] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 345.363762][ T7209] EXT4-fs (loop5): Remounting filesystem read-only [ 345.370338][ T7209] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #16: comm syz.5.675: corrupted inode contents [ 345.416918][ T7209] EXT4-fs (loop5): Remounting filesystem read-only [ 345.453483][ T7209] EXT4-fs error (device loop5): ext4_truncate:4286: inode #16: comm syz.5.675: mark_inode_dirty error [ 345.485590][ T7209] EXT4-fs (loop5): Remounting filesystem read-only [ 345.499619][ T7209] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 345.519727][ T7209] EXT4-fs (loop5): Remounting filesystem read-only [ 345.536989][ T7209] EXT4-fs (loop5): 1 truncate cleaned up [ 345.549108][ T7209] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,errors=remount-ro,. Quota mode: writeback. [ 345.592448][ T7209] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.998218][ T7245] loop2: detected capacity change from 0 to 128 [ 346.056723][ T7244] loop5: detected capacity change from 0 to 2048 [ 347.617072][ T7283] loop2: detected capacity change from 0 to 512 [ 349.411542][ T7322] loop2: detected capacity change from 0 to 8192 [ 349.991009][ T7334] loop2: detected capacity change from 0 to 4096 [ 350.029200][ T7334] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 350.120773][ T7334] ntfs: volume version 3.1. [ 350.177457][ T7334] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $INDEX_ALLOCATION attribute has non zero lowest_vcn. [ 350.200177][ T7334] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 350.248462][ T7334] ntfs: (device loop2): load_system_files(): Failed to load root directory. [ 350.458530][ T7334] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files. [ 350.787283][ T7362] loop2: detected capacity change from 0 to 512 [ 350.827459][ T7349] loop5: detected capacity change from 0 to 4096 [ 350.955976][ T7349] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 350.988196][ T7349] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 351.035044][ T7349] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 351.075201][ T7349] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 351.209412][ T7349] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 351.312632][ T7349] ntfs: volume version 3.1. [ 351.714992][ T7377] loop5: detected capacity change from 0 to 256 [ 351.834710][ T7377] FAT-fs (loop5): bogus sectors per cluster 30 [ 351.867991][ T7377] FAT-fs (loop5): Can't find a valid FAT filesystem [ 352.194725][ T7385] loop5: detected capacity change from 0 to 8192 [ 353.080097][ T7404] loop2: detected capacity change from 0 to 512 [ 353.100146][ T7399] loop5: detected capacity change from 0 to 4096 [ 353.269070][ T7399] ntfs: volume version 3.1. [ 353.976431][ T7413] loop5: detected capacity change from 0 to 32768 [ 354.085852][ T7413] JBD2: Ignoring recovery information on journal [ 354.284909][ T7413] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 354.417501][ T5316] ocfs2: Unmounting device (7,5) on (node local) [ 355.209278][ T7429] loop2: detected capacity change from 0 to 1024 [ 355.567914][ T7424] loop5: detected capacity change from 0 to 32768 [ 355.583083][ T7443] loop2: detected capacity change from 0 to 64 [ 355.707188][ T7424] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.750 (7424) [ 355.921877][ T7449] loop2: detected capacity change from 0 to 1024 [ 355.940287][ T7424] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 355.968891][ T7424] BTRFS info (device loop5): setting nodatacow, compression disabled [ 355.997025][ T7424] BTRFS info (device loop5): using free space tree [ 356.044758][ T7424] BTRFS info (device loop5): has skinny extents [ 356.080977][ T7449] __quota_error: 9 callbacks suppressed [ 356.080996][ T7449] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=1 [ 356.110364][ T7449] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 356.131815][ T7449] EXT4-fs (loop2): mount failed [ 356.542491][ T4461] BTRFS warning (device loop5): checksum verify failed on 5332992 wanted 0x7b2525bb found 0xd2dcb6b6 level 0 [ 356.618024][ T7424] BTRFS warning (device loop5): couldn't read tree root [ 357.957264][ T7424] BTRFS error (device loop5): open_ctree failed: -22 [ 357.957760][ T7100] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by udevd (7100) [ 358.460668][ T7476] loop2: detected capacity change from 0 to 40427 [ 358.565693][ T7476] F2FS-fs (loop2): build fault injection attr: rate: 5, type: 0x1ffff [ 358.651455][ T7476] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x3 [ 359.752439][ T7476] F2FS-fs (loop2): invalid crc value [ 359.796452][ T7476] F2FS-fs (loop2) : inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x89/0x6870 [ 359.868190][ T7476] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12) [ 362.252377][ T7572] qrtr: Invalid version 0 [ 362.320921][ T7576] loop2: detected capacity change from 0 to 64 [ 363.088964][ T7587] loop5: detected capacity change from 0 to 2048 [ 363.299822][ T7592] loop2: detected capacity change from 0 to 64 [ 363.413524][ T7594] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 363.490593][ T7587] handle_bad_sector: 1 callbacks suppressed [ 363.490612][ T7587] attempt to access beyond end of device [ 363.490612][ T7587] loop5: rw=0, want=18441677524128759846, limit=2048 [ 363.713959][ T7603] loop2: detected capacity change from 0 to 16 [ 363.762955][ T7603] erofs: (device loop2): mounted with root inode @ nid 36. [ 363.830361][ T7603] attempt to access beyond end of device [ 363.830361][ T7603] loop2: rw=0, want=15300821032, limit=16 [ 363.878274][ T7603] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 364.003191][ T7610] loop5: detected capacity change from 0 to 4096 [ 364.299022][ T7622] loop2: detected capacity change from 0 to 164 [ 364.376243][ T7622] rock: directory entry would overflow storage [ 364.409969][ T7622] rock: sig=0x5252, size=5, remaining=3 [ 364.515504][ T7610] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 366.955419][ T7665] netlink: 'syz.2.826': attribute type 22 has an invalid length. [ 366.963334][ T7665] netlink: 76 bytes leftover after parsing attributes in process `syz.2.826'. [ 369.924465][ T7716] loop5: detected capacity change from 0 to 512 [ 369.968664][ T7716] EXT4-fs (loop5): Ignoring removed nobh option [ 370.031151][ T7716] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 370.062191][ T7716] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.478434][ T7504] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 370.894442][ T7504] usb 6-1: unable to get BOS descriptor or descriptor too short [ 371.054317][ T7504] usb 6-1: config 0 has an invalid interface number: 86 but max is 0 [ 371.224617][ T7504] usb 6-1: config 0 has no interface number 0 [ 371.230817][ T7504] usb 6-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 371.378173][ T7504] usb 6-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 371.481571][ T7504] usb 6-1: config 0 interface 86 has no altsetting 0 [ 371.714226][ T7504] usb 6-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 371.737955][ T7504] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.746706][ T7504] usb 6-1: Product: syz [ 371.770794][ T7504] usb 6-1: Manufacturer: syz [ 371.775618][ T7504] usb 6-1: SerialNumber: syz [ 371.786769][ T7504] usb 6-1: config 0 descriptor?? [ 371.803814][ T7729] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 371.811549][ T7729] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 372.985864][ T7504] omninet 6-1:0.86: ZyXEL - omni.net usb converter detected [ 373.031111][ T7504] usb 6-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 373.084233][ T7504] usb 6-1: USB disconnect, device number 2 [ 373.157157][ T7504] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 373.185263][ T7504] omninet 6-1:0.86: device disconnected [ 373.198982][ T7747] loop2: detected capacity change from 0 to 32768 [ 373.261574][ T7747] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.854 (7747) [ 373.503109][ T7747] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 373.528195][ T7747] BTRFS info (device loop2): force zlib compression, level 3 [ 373.861705][ T7747] BTRFS info (device loop2): force clearing of disk cache [ 374.357266][ T7747] BTRFS info (device loop2): setting nodatasum [ 374.373480][ T7747] BTRFS info (device loop2): allowing degraded mounts [ 374.421294][ T7747] BTRFS info (device loop2): enabling disk space caching [ 374.478535][ T7747] BTRFS info (device loop2): disk space caching is enabled [ 374.488918][ T7747] BTRFS info (device loop2): has skinny extents [ 376.041446][ T7747] BTRFS error (device loop2): open_ctree failed: -12 [ 376.966424][ T7831] netlink: 36 bytes leftover after parsing attributes in process `syz.5.876'. [ 377.288471][ T7834] loop5: detected capacity change from 0 to 4096 [ 377.481276][ T7834] ntfs3: loop5: Failed to load $Extend. [ 378.574538][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.581542][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.155072][ T7876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.895'. [ 379.192526][ T7878] loop2: detected capacity change from 0 to 512 [ 379.270264][ T7878] EXT4-fs (loop2): Ignoring removed orlov option [ 379.445759][ T7878] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,orlov,inode_readahead_blks=0x0000000000000100,,errors=continue. Quota mode: writeback. [ 379.496700][ T7878] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.652095][ T7891] tipc: Cannot configure node identity twice [ 380.546447][ T7894] xt_hashlimit: size too large, truncated to 1048576 [ 380.553202][ T7894] xt_hashlimit: max too large, truncated to 1048576 [ 380.794060][ T7905] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 380.810586][ T7905] netlink: 'syz.5.903': attribute type 1 has an invalid length. [ 380.818666][ T7905] netlink: 'syz.5.903': attribute type 2 has an invalid length. [ 380.938451][ T7903] netlink: 'syz.4.915': attribute type 1 has an invalid length. [ 381.615852][ T7912] loop2: detected capacity change from 0 to 128 [ 382.769674][ T7929] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 384.503491][ T7500] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 385.131833][ T7957] netlink: 'syz.5.919': attribute type 4 has an invalid length. [ 385.563656][ T7500] usb 3-1: Using ep0 maxpacket: 32 [ 385.684014][ T7500] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 385.722445][ T7500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.805070][ T7500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.898972][ T7500] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 386.346197][ T7500] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice=10.00 [ 386.753616][ T7500] usb 3-1: New USB device strings: Mfr=0, Product=31, SerialNumber=0 [ 386.793523][ T7500] usb 3-1: Product: syz [ 386.810044][ T7978] autofs4:pid:7978:autofs_fill_super: called with bogus options [ 386.839764][ T7500] usb 3-1: config 0 descriptor?? [ 387.039533][ T26] audit: type=1800 audit(1785451016.333:102): pid=7986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.929" name="idProduct" dev="configfs" ino=44576 res=0 errno=0 [ 387.318067][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.338759][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.366717][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.400674][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.428484][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.468418][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.497298][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.526700][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.544758][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.564681][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.571941][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.599874][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.625789][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.657357][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.681788][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.692342][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.709945][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.727701][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.743246][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.756162][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.768530][ T7500] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 387.800356][ T7500] monterey 0003:0566:3004.0001: hidraw0: USB HID v5.40 Device [syz] on usb-dummy_hcd.2-1/input0 [ 387.859505][ T7500] usb 3-1: USB disconnect, device number 4 [ 388.170170][ T8006] fido_id[8006]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 388.826408][ T8015] netlink: 'syz.3.933': attribute type 4 has an invalid length. [ 389.170044][ T8017] sp0: Synchronizing with TNC [ 389.241254][ T8016] [U] è [ 389.324030][ T23] lo speed is unknown, defaulting to 1000 [ 390.390811][ T8033] autofs4:pid:8033:autofs_fill_super: called with bogus options [ 390.599165][ T8045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.617210][ T8045] device batadv_slave_0 entered promiscuous mode [ 390.640150][ T8045] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 390.771257][ T8055] netlink: 'syz.2.949': attribute type 8 has an invalid length. [ 391.273649][ T8079] loop2: detected capacity change from 0 to 512 [ 392.689138][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 394.640543][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.985'. [ 394.649886][ T8163] netlink: 'syz.0.985': attribute type 10 has an invalid length. [ 394.657826][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 395.729898][ T8177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.991'. [ 396.682421][ T8171] loop2: detected capacity change from 0 to 32768 [ 396.875582][ T8171] XFS (loop2): Mounting V5 Filesystem [ 397.148131][ T8171] XFS (loop2): Ending clean mount [ 397.212694][ T8171] XFS (loop2): Quotacheck needed: Please wait. [ 397.346802][ T8202] futex_wake_op: syz.4.996 tries to shift op by 144; fix this program [ 398.403905][ T8171] XFS (loop2): Quotacheck: Done. [ 398.513576][ T4191] XFS (loop2): Unmounting Filesystem [ 398.606085][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 398.615177][ T8214] netlink: 'syz.0.1001': attribute type 10 has an invalid length. [ 398.623072][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'. [ 400.467945][ T8255] futex_wake_op: syz.0.1015 tries to shift op by 144; fix this program [ 403.698837][ T8285] autofs4:pid:8285:autofs_fill_super: called with bogus options [ 408.267299][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 408.276451][ T8341] netlink: 'syz.4.1046': attribute type 10 has an invalid length. [ 408.284939][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1046'. [ 408.297790][ T8341] device geneve2 entered promiscuous mode [ 411.946791][ T8385] netlink: 'syz.4.1057': attribute type 4 has an invalid length. [ 412.610634][ T8388] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 412.618283][ T8388] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 412.626265][ T8388] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 412.633037][ T8388] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 412.640032][ T8388] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 412.648405][ T8388] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 412.656519][ T8388] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 412.696653][ T8389] device bridge2 entered promiscuous mode [ 412.717161][ T8389] team0: Port device bridge2 added [ 412.850302][ T8388] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 412.858570][ T8388] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 412.865562][ T8388] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 412.890925][ T8388] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 412.898658][ T8388] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 412.949583][ T8388] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 412.973848][ T8388] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 412.988539][ T8397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1062'. [ 413.023641][ T8388] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 413.044006][ T8397] device macvlan0 entered promiscuous mode [ 413.200094][ T8388] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 413.218535][ T8388] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 413.225829][ T8388] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 413.241539][ T8388] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 413.248394][ T8388] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 413.256426][ T8388] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 413.277801][ T8405] netlink: 'syz.4.1064': attribute type 15 has an invalid length. [ 413.287063][ T8388] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 413.296451][ T8388] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 413.303136][ T8388] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 413.316515][ T8388] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 416.076266][ T8452] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 417.985197][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1083'. [ 419.356114][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1088'. [ 419.365243][ T8493] netlink: 'syz.2.1088': attribute type 10 has an invalid length. [ 419.373086][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1088'. [ 419.385513][ T8493] device geneve2 entered promiscuous mode [ 421.728192][ T7498] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 421.753621][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 421.956169][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1100'. [ 421.966006][ T8535] netlink: 'syz.4.1100': attribute type 10 has an invalid length. [ 421.973966][ T8535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1100'. [ 422.743802][ T7498] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 422.768318][ T7498] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 422.888105][ T7498] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 422.943629][ T7498] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 422.956015][ T7498] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 423.122696][ T8556] capability: warning: `syz.3.1108' uses 32-bit capabilities (legacy support in use) [ 423.810838][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'. [ 423.820196][ T8564] netlink: 'syz.0.1111': attribute type 10 has an invalid length. [ 423.828131][ T8564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1111'. [ 423.970633][ T7498] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 424.003500][ T7498] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 424.038813][ T7498] usb 3-1: Product: syz [ 424.043261][ T7498] usb 3-1: Manufacturer: syz [ 424.114893][ T7498] cdc_wdm 3-1:1.0: skipping garbage [ 424.120253][ T7498] cdc_wdm 3-1:1.0: skipping garbage [ 424.282009][ T7498] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 424.323887][ T7498] cdc_wdm 3-1:1.0: Unknown control protocol [ 424.575024][ T7498] usb 3-1: USB disconnect, device number 5 [ 426.124722][ T8591] netlink: 'syz.5.1120': attribute type 29 has an invalid length. [ 426.224068][ T8591] netlink: 'syz.5.1120': attribute type 29 has an invalid length. [ 426.535672][ T8596] netlink: 'syz.5.1120': attribute type 29 has an invalid length. [ 426.544251][ T8597] netlink: 'syz.5.1120': attribute type 29 has an invalid length. [ 426.935609][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 426.944636][ T8607] netlink: 'syz.3.1125': attribute type 10 has an invalid length. [ 426.952575][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1125'. [ 426.965415][ T8607] device geneve2 entered promiscuous mode [ 428.040665][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 428.050788][ T8619] netlink: 'syz.3.1129': attribute type 10 has an invalid length. [ 428.059121][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1129'. [ 428.255402][ T8598] loop2: detected capacity change from 0 to 40427 [ 428.283211][ T8598] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 428.290522][ T8598] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 428.329319][ T8598] F2FS-fs (loop2): invalid crc value [ 428.560672][ T8598] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 429.839469][ T5760] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 430.867918][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 430.877035][ T8650] netlink: 'syz.3.1136': attribute type 10 has an invalid length. [ 430.884995][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1136'. [ 431.554192][ T5760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.655158][ T5760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.809247][ T5760] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 431.839815][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.909292][ T5760] usb 1-1: config 0 descriptor?? [ 432.366296][ T5760] usb 1-1: can't set config #0, error -71 [ 432.440572][ T5760] usb 1-1: USB disconnect, device number 3 [ 432.697403][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 432.706549][ T8664] netlink: 'syz.2.1137': attribute type 10 has an invalid length. [ 432.714539][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1137'. [ 432.881071][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 432.890712][ T8667] netlink: 'syz.0.1142': attribute type 10 has an invalid length. [ 432.899073][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1142'. [ 434.955435][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 434.964583][ T8699] netlink: 'syz.2.1150': attribute type 10 has an invalid length. [ 434.972468][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'. [ 435.910840][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'. [ 435.919991][ T8720] netlink: 'syz.2.1156': attribute type 10 has an invalid length. [ 435.928038][ T8720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1156'. [ 436.108054][ T7498] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 437.224119][ T7498] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 437.249773][ T7498] usb 1-1: config 0 has no interface number 0 [ 437.329177][ T8744] netlink: 'syz.4.1161': attribute type 1 has an invalid length. [ 437.383256][ T7498] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 437.918175][ T7498] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 437.954863][ T7498] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.187988][ T7498] usb 1-1: Product: syz [ 438.193167][ T7498] usb 1-1: Manufacturer: syz [ 438.200300][ T7498] usb 1-1: SerialNumber: syz [ 438.220540][ T7498] usb 1-1: config 0 descriptor?? [ 438.267229][ T7498] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 438.723446][ C0] usb 1-1: yurex_control_callback - control failed: -2 [ 438.746487][ T5760] usb 1-1: USB disconnect, device number 4 [ 438.770699][ T5760] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 439.925792][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.932641][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.106172][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 440.115807][ T8789] netlink: 'syz.2.1169': attribute type 10 has an invalid length. [ 440.123724][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1169'. [ 440.513738][ T5760] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 441.063913][ T5760] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 441.100629][ T5760] usb 1-1: config 0 interface 0 has no altsetting 0 [ 441.297802][ T5760] usb 1-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 441.307891][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.318743][ T5760] usb 1-1: config 0 descriptor?? [ 442.268188][ T5760] ntrig 0003:1B96:000F.0002: ignoring exceeding usage max [ 442.277380][ T5760] ntrig 0003:1B96:000F.0002: unbalanced collection at end of report description [ 442.304018][ T5760] ntrig 0003:1B96:000F.0002: parse failed [ 442.360776][ T5760] ntrig: probe of 0003:1B96:000F.0002 failed with error -22 [ 442.420701][ T5760] usb 1-1: USB disconnect, device number 5 [ 442.432979][ T8828] netlink: 'syz.2.1184': attribute type 29 has an invalid length. [ 442.484803][ T8828] netlink: 'syz.2.1184': attribute type 29 has an invalid length. [ 442.513178][ T8832] netlink: 'syz.2.1184': attribute type 29 has an invalid length. [ 442.525030][ T8828] netlink: 'syz.2.1184': attribute type 29 has an invalid length. [ 442.773203][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 442.782229][ T8846] netlink: 'syz.2.1188': attribute type 10 has an invalid length. [ 442.790159][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1188'. [ 443.003634][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 443.012668][ T8856] netlink: 'syz.3.1191': attribute type 10 has an invalid length. [ 443.020709][ T8856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1191'. [ 445.449381][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1205'. [ 445.458452][ T8913] netlink: 'syz.0.1205': attribute type 10 has an invalid length. [ 445.467004][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1205'. [ 445.512794][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1206'. [ 445.521899][ T8915] netlink: 'syz.3.1206': attribute type 10 has an invalid length. [ 445.529895][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1206'. [ 446.277321][ T8923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.804680][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'. [ 447.813989][ T8947] netlink: 'syz.2.1214': attribute type 10 has an invalid length. [ 447.822499][ T8947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1214'. [ 448.805127][ T8967] lo speed is unknown, defaulting to 1000 [ 448.831086][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'. [ 448.840543][ T8969] netlink: 'syz.2.1220': attribute type 10 has an invalid length. [ 448.848588][ T8969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'. [ 449.019315][ T8968] device syzkaller1 entered promiscuous mode [ 449.263847][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 449.583753][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 449.743706][ T23] usb 1-1: config 0 has no interfaces? [ 449.924305][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 449.942559][ T8993] loop2: detected capacity change from 0 to 1024 [ 449.965325][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.035917][ T8993] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 450.037102][ T23] usb 1-1: Product: syz [ 450.107979][ T23] usb 1-1: Manufacturer: syz [ 450.129355][ T23] usb 1-1: SerialNumber: syz [ 450.144165][ T23] usb 1-1: config 0 descriptor?? [ 450.561694][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'. [ 450.570936][ T9015] netlink: 'syz.3.1233': attribute type 10 has an invalid length. [ 450.578980][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1233'. [ 450.718183][ T7498] usb 1-1: USB disconnect, device number 6 [ 450.815860][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 450.824994][ T9021] netlink: 'syz.4.1235': attribute type 10 has an invalid length. [ 450.832884][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1235'. [ 451.766896][ T9030] netlink: 'syz.3.1238': attribute type 1 has an invalid length. [ 451.779178][ T9030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 451.787285][ T9030] IPv6: NLM_F_CREATE should be set when creating new route [ 451.990605][ T9045] netlink: 83 bytes leftover after parsing attributes in process `syz.0.1244'. [ 452.276892][ T9056] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1249'. [ 452.367299][ T9058] netlink: 'syz.3.1250': attribute type 10 has an invalid length. [ 452.444449][ T9038] loop2: detected capacity change from 0 to 32768 [ 452.575047][ T9038] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1241 (9038) [ 453.365796][ T9038] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 453.416056][ T9038] BTRFS info (device loop2): force clearing of disk cache [ 453.423332][ T9038] BTRFS info (device loop2): enabling ssd optimizations [ 453.568109][ T9038] BTRFS info (device loop2): using spread ssd allocation scheme [ 453.593447][ T9038] BTRFS info (device loop2): using free space tree [ 453.620362][ T9038] BTRFS info (device loop2): has skinny extents [ 454.103092][ T9038] BTRFS info (device loop2): clearing free space tree [ 454.115803][ T9105] 9pnet: Insufficient options for proto=fd [ 454.147223][ T9038] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 454.210162][ T9038] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 454.358989][ T9038] BTRFS info (device loop2): creating free space tree [ 454.390438][ T9038] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 454.441260][ T9038] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 455.653462][ T7503] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 455.903489][ T7503] usb 6-1: Using ep0 maxpacket: 8 [ 456.024170][ T7503] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.050902][ T7503] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 456.085432][ T7503] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 456.213432][ T7503] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.242053][ T7503] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 456.303533][ T7503] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.594106][ T7503] usb 6-1: GET_CAPABILITIES returned 0 [ 456.600162][ T7503] usbtmc 6-1:16.0: can't read capabilities [ 457.242672][ T7503] usb 6-1: USB disconnect, device number 3 [ 457.532956][ T9178] input: syz0 as /devices/virtual/input/input7 [ 457.600532][ T9179] autofs4:pid:9179:autofs_fill_super: called with bogus options [ 458.127267][ T9192] netlink: 'syz.3.1281': attribute type 2 has an invalid length. [ 458.591779][ T9204] loop2: detected capacity change from 0 to 256 [ 458.652757][ T9204] FAT-fs (loop2): Directory bread(block 64) failed [ 458.659548][ T9204] FAT-fs (loop2): Directory bread(block 65) failed [ 458.666304][ T9204] FAT-fs (loop2): Directory bread(block 66) failed [ 458.673634][ T9204] FAT-fs (loop2): Directory bread(block 67) failed [ 458.681002][ T9204] FAT-fs (loop2): Directory bread(block 68) failed [ 458.687634][ T9204] FAT-fs (loop2): Directory bread(block 69) failed [ 458.694309][ T9204] FAT-fs (loop2): Directory bread(block 70) failed [ 458.700883][ T9204] FAT-fs (loop2): Directory bread(block 71) failed [ 458.707654][ T9204] FAT-fs (loop2): Directory bread(block 72) failed [ 458.714259][ T9204] FAT-fs (loop2): Directory bread(block 73) failed [ 459.868075][ T9238] __nla_validate_parse: 2 callbacks suppressed [ 459.868095][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1296'. [ 459.883542][ T9238] netlink: 'syz.0.1296': attribute type 10 has an invalid length. [ 459.891389][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1296'. [ 461.112349][ T9265] fuse: Bad value for 'fd' [ 461.163928][ T9268] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 462.428348][ T9311] netlink: 'syz.2.1316': attribute type 4 has an invalid length. [ 462.623639][ T23] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 462.805112][ T9325] loop2: detected capacity change from 0 to 256 [ 463.011642][ T9325] FAT-fs (loop2): Directory bread(block 64) failed [ 463.018660][ T9325] FAT-fs (loop2): Directory bread(block 65) failed [ 463.025850][ T9325] FAT-fs (loop2): Directory bread(block 66) failed [ 463.032539][ T9325] FAT-fs (loop2): Directory bread(block 67) failed [ 463.039503][ T9325] FAT-fs (loop2): Directory bread(block 68) failed [ 463.046262][ T9325] FAT-fs (loop2): Directory bread(block 69) failed [ 463.053222][ T9325] FAT-fs (loop2): Directory bread(block 70) failed [ 463.060091][ T9325] FAT-fs (loop2): Directory bread(block 71) failed [ 463.067262][ T9325] FAT-fs (loop2): Directory bread(block 72) failed [ 463.074623][ T9325] FAT-fs (loop2): Directory bread(block 73) failed [ 463.118630][ T23] usb 6-1: not running at top speed; connect to a high speed hub [ 463.414560][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 463.642088][ T23] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 463.932966][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 463.942082][ T9331] netlink: 'syz.0.1324': attribute type 10 has an invalid length. [ 463.950053][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1324'. [ 464.193440][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.291731][ T9338] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3100176750 (24801414000 ns) > initial count (20745489616 ns). Using initial count to start timer. [ 464.313835][ T23] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 464.345648][ T23] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 464.696332][ T21] usb 6-1: USB disconnect, device number 4 [ 464.756615][ T21] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 464.833866][ T21] garmin_gps 6-1:1.0: device disconnected [ 464.903315][ T9351] device ip6tnl1 entered promiscuous mode [ 465.004943][ T9360] bridge0: port 3(syz_tun) entered blocking state [ 465.012036][ T9360] bridge0: port 3(syz_tun) entered disabled state [ 465.029889][ T9360] device syz_tun entered promiscuous mode [ 465.036855][ T9360] bridge0: port 3(syz_tun) entered blocking state [ 465.043922][ T9360] bridge0: port 3(syz_tun) entered forwarding state [ 465.541131][ T9373] overlayfs: failed to resolve './file0': -2 [ 465.636364][ T9376] loop2: detected capacity change from 0 to 2048 [ 465.777046][ T9376] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 465.918851][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1344'. [ 465.928500][ T9387] netlink: 'syz.0.1344': attribute type 10 has an invalid length. [ 465.936452][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1344'. [ 466.197518][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1345'. [ 466.583579][ T7505] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 466.993742][ T7505] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 467.017669][ T7505] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.057731][ T7505] usb 3-1: config 0 descriptor?? [ 467.104743][ T7505] cp210x 3-1:0.0: cp210x converter detected [ 467.157877][ T9423] overlayfs: failed to clone upperpath [ 467.994152][ T7505] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 468.013140][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1358'. [ 468.022427][ T9440] netlink: 'syz.0.1358': attribute type 10 has an invalid length. [ 468.030330][ T9440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1358'. [ 468.208533][ T7505] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 468.222479][ T7505] usb 3-1: cp210x converter now attached to ttyUSB0 [ 468.265856][ T7505] usb 3-1: USB disconnect, device number 6 [ 468.306740][ T7505] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 468.332891][ T9450] netlink: 'syz.4.1357': attribute type 1 has an invalid length. [ 468.342292][ T7505] cp210x 3-1:0.0: device disconnected [ 468.432716][ T9450] device bond1 entered promiscuous mode [ 468.451876][ T9450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.488513][ T9453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.524071][ T9453] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 468.553133][ T9453] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 468.640123][ T9453] bond1: (slave xfrm1): making interface the new active one [ 468.658027][ T9453] device xfrm1 entered promiscuous mode [ 468.674832][ T9453] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 468.704758][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 469.407488][ T9487] netlink: 'syz.0.1369': attribute type 2 has an invalid length. [ 469.534579][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'. [ 469.543625][ T9494] netlink: 'syz.0.1370': attribute type 10 has an invalid length. [ 469.551482][ T9494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1370'. [ 469.752151][ T9498] device pim6reg1 entered promiscuous mode [ 470.485866][ T21] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 471.389801][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.423448][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 471.433349][ T21] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 471.467731][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.515609][ T21] usb 3-1: config 0 descriptor?? [ 471.559478][ T21] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 471.570992][ T21] dvb-usb: bulk message failed: -22 (3/0) [ 471.649576][ T21] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 471.689500][ T21] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 471.711753][ T21] usb 3-1: media controller created [ 471.742783][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 471.761724][ T9509] dvb-usb: bulk message failed: -22 (2/0) [ 471.822538][ T21] dvb-usb: bulk message failed: -22 (6/0) [ 471.838211][ T21] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 471.913416][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 471.960638][ T21] dvb-usb: schedule remote query interval to 150 msecs. [ 471.980238][ T21] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 472.009837][ T21] usb 3-1: USB disconnect, device number 7 [ 472.127112][ T21] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 472.536451][ T9596] using random self ethernet address [ 472.549190][ T9596] using random host ethernet address [ 472.576451][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 472.585623][ T9591] netlink: 'syz.3.1394': attribute type 10 has an invalid length. [ 472.593564][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1394'. [ 474.821154][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'. [ 474.960968][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1411'. [ 474.970111][ T9643] netlink: 'syz.3.1411': attribute type 10 has an invalid length. [ 474.978032][ T9643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1411'. [ 477.736419][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1429'. [ 477.746074][ T9719] netlink: 'syz.3.1429': attribute type 10 has an invalid length. [ 477.754098][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1429'. [ 477.985982][ T9723] netlink: 'syz.2.1430': attribute type 4 has an invalid length. [ 478.410904][ T9740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1437'. [ 478.449729][ T9744] bridge0: port 3(gretap0) entered blocking state [ 478.515523][ T9744] bridge0: port 3(gretap0) entered disabled state [ 478.652744][ T9744] device gretap0 entered promiscuous mode [ 478.726573][ T9744] bridge0: port 3(gretap0) entered blocking state [ 478.733149][ T9744] bridge0: port 3(gretap0) entered forwarding state [ 478.801931][ T9747] bridge0: port 4(erspan0) entered blocking state [ 478.810885][ T9747] bridge0: port 4(erspan0) entered disabled state [ 478.847309][ T9747] device erspan0 entered promiscuous mode [ 478.872445][ T9747] bridge0: port 4(erspan0) entered blocking state [ 478.879019][ T9747] bridge0: port 4(erspan0) entered forwarding state [ 480.117997][ T9807] overlayfs: failed to clone upperpath [ 481.485820][ T9824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1454'. [ 482.012169][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1463'. [ 482.021572][ T9850] netlink: 'syz.3.1463': attribute type 10 has an invalid length. [ 482.030225][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1463'. [ 482.633162][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'. [ 482.642346][ T9867] netlink: 'syz.0.1468': attribute type 10 has an invalid length. [ 482.650331][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1468'. [ 484.743300][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1478'. [ 484.752472][ T9903] netlink: 'syz.0.1478': attribute type 10 has an invalid length. [ 484.760427][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1478'. [ 485.362218][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1482'. [ 485.371672][ T9917] netlink: 'syz.2.1482': attribute type 10 has an invalid length. [ 485.379876][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1482'. [ 487.684650][ T9937] device syzkaller1 entered promiscuous mode [ 488.576417][ T9983] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 488.613880][ T9983] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 488.873947][T10003] overlayfs: failed to resolve './file0': -2 [ 491.189240][T10061] APIC base relocation is unsupported by KVM [ 491.340693][T10069] loop2: detected capacity change from 0 to 512 [ 491.410645][T10069] EXT4-fs (loop2): invalid journal inode [ 491.434563][T10069] EXT4-fs (loop2): can't get journal size [ 491.507720][T10069] EXT4-fs (loop2): 1 truncate cleaned up [ 491.525237][T10069] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 491.603537][T10069] loop_set_status: loop2 () has still dirty pages (nrpages=1) [ 492.269772][T10093] overlayfs: failed to clone upperpath [ 492.295091][T10093] overlayfs: failed to clone upperpath [ 492.312214][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 492.321297][T10094] netlink: 'syz.2.1541': attribute type 10 has an invalid length. [ 492.329213][T10094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1541'. [ 494.570710][T10136] bridge0: port 5(syz_tun) entered blocking state [ 494.584777][T10136] bridge0: port 5(syz_tun) entered disabled state [ 494.618236][T10136] device syz_tun entered promiscuous mode [ 494.643866][T10136] bridge0: port 5(syz_tun) entered blocking state [ 494.650375][T10136] bridge0: port 5(syz_tun) entered forwarding state [ 494.675141][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1552'. [ 494.824286][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1554'. [ 494.833388][T10142] netlink: 'syz.0.1554': attribute type 10 has an invalid length. [ 494.841456][T10142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1554'. [ 496.359456][T10162] vcan0: tx drop: invalid da for name 0x0000000000008000 [ 496.496485][T10166] netlink: 14846 bytes leftover after parsing attributes in process `syz.3.1561'. [ 497.083739][T10129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.235302][T10171] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1563'. [ 497.263321][T10171] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1563'. [ 499.221663][T10179] loop2: detected capacity change from 0 to 32768 [ 499.512248][T10179] XFS (loop2): Mounting V5 Filesystem [ 499.597687][T10216] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 499.647070][T10216] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 499.671693][T10179] XFS (loop2): Ending clean mount [ 499.829447][T10233] fuse: Bad value for 'fd' [ 499.842749][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'. [ 499.914249][T10232] netlink: 'syz.0.1581': attribute type 1 has an invalid length. [ 499.964694][ T4191] XFS (loop2): Unmounting Filesystem [ 500.256006][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'. [ 500.265468][T10244] netlink: 'syz.2.1585': attribute type 10 has an invalid length. [ 500.273299][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1585'. [ 501.412322][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.423313][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.752193][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1593'. [ 501.761250][T10266] netlink: 'syz.2.1593': attribute type 10 has an invalid length. [ 501.769211][T10266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1593'. [ 502.974543][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1600'. [ 504.969139][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1615'. [ 507.097023][T10366] loop2: detected capacity change from 0 to 256 [ 507.182445][T10366] FAT-fs (loop2): Directory bread(block 64) failed [ 507.189397][T10366] FAT-fs (loop2): Directory bread(block 65) failed [ 507.196406][T10366] FAT-fs (loop2): Directory bread(block 66) failed [ 507.202962][T10366] FAT-fs (loop2): Directory bread(block 67) failed [ 507.210240][T10366] FAT-fs (loop2): Directory bread(block 68) failed [ 507.216857][T10366] FAT-fs (loop2): Directory bread(block 69) failed [ 507.223493][T10366] FAT-fs (loop2): Directory bread(block 70) failed [ 507.230051][T10366] FAT-fs (loop2): Directory bread(block 71) failed [ 507.236672][T10366] FAT-fs (loop2): Directory bread(block 72) failed [ 507.243227][T10366] FAT-fs (loop2): Directory bread(block 73) failed [ 507.828659][T10327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 508.165907][T10382] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1629'. [ 508.188442][T10382] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1629'. [ 508.244595][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1631'. [ 508.254356][T10385] netlink: 'syz.2.1631': attribute type 10 has an invalid length. [ 508.262203][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1631'. [ 508.373806][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1632'. [ 508.382780][T10390] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1632'. [ 510.416590][T10422] kvm: pic: non byte read [ 510.431488][T10422] kvm: pic: non byte read [ 510.449109][T10422] kvm: pic: non byte read [ 510.465592][T10422] kvm: pic: non byte read [ 510.485181][T10422] kvm: pic: non byte read [ 510.510903][T10422] kvm: pic: non byte read [ 510.599938][T10422] kvm: pic: non byte read [ 510.659704][T10422] kvm: pic: non byte read [ 510.683167][T10422] kvm: pic: non byte read [ 510.713037][T10422] kvm: pic: non byte read [ 510.865359][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1645'. [ 510.874500][T10433] netlink: 'syz.4.1645': attribute type 10 has an invalid length. [ 510.882351][T10433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1645'. [ 510.921006][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 510.930297][T10438] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1647'. [ 511.668111][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1649'. [ 512.217101][T10463] overlayfs: failed to resolve './file0': -2 [ 512.570827][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1661'. [ 512.580031][T10479] netlink: 'syz.0.1661': attribute type 10 has an invalid length. [ 512.587953][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1661'. [ 513.004250][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 513.192834][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1664'. [ 513.201911][T10489] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1664'. [ 514.131400][T10500] overlayfs: failed to resolve './file0': -2 [ 515.776166][T10534] device syzkaller1 entered promiscuous mode [ 516.479377][T10541] __nla_validate_parse: 1 callbacks suppressed [ 516.479420][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1680'. [ 516.494717][T10541] netlink: 'syz.3.1680': attribute type 10 has an invalid length. [ 516.502561][T10541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1680'. [ 517.712338][T10567] fuse: Bad value for 'fd' [ 517.816342][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1691'. [ 517.825791][T10572] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1691'. [ 518.613371][ C0] hrtimer: interrupt took 69276 ns [ 518.906641][T10587] netlink: 'syz.5.1695': attribute type 2 has an invalid length. [ 522.066818][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1714'. [ 522.206691][T10651] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1716'. [ 522.691204][T10661] Illegal XDP return value 1194639416, expect packet loss! [ 522.893448][ T7499] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 523.153456][ T7499] usb 3-1: Using ep0 maxpacket: 8 [ 524.159433][ T7499] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 524.177995][ T9592] udevd[9592]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.193762][ T7499] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 524.204825][ T7499] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 524.215685][ T7499] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.255473][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1723'. [ 524.264734][T10674] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1723'. [ 524.268653][ T7499] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 524.313520][ T7499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.664014][ T7499] usb 3-1: GET_CAPABILITIES returned 0 [ 524.670510][ T7499] usbtmc 3-1:16.0: can't read capabilities [ 525.098057][ T7499] usb 3-1: USB disconnect, device number 8 [ 526.306333][T10697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.427173][T10697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.570278][T10702] tipc: Enabling of bearer rejected, failed to enable media [ 527.467855][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1737'. [ 527.476902][T10718] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1737'. [ 528.240381][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 528.249551][T10734] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1741'. [ 531.406599][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1753'. [ 531.415879][T10788] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1753'. [ 531.615934][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'. [ 531.625005][T10792] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1755'. [ 533.189459][T10835] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 533.548638][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1768'. [ 533.557838][T10846] netlink: 'syz.4.1768': attribute type 10 has an invalid length. [ 533.565911][T10846] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1768'. [ 534.462790][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 534.471984][T10856] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1770'. [ 535.403091][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1773'. [ 535.412318][T10869] netlink: 'syz.5.1773': attribute type 10 has an invalid length. [ 535.420298][T10869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1773'. [ 535.432776][T10869] device geneve2 entered promiscuous mode [ 535.665549][T10875] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.1774'. [ 536.426027][T10878] overlayfs: failed to resolve './file0': -2 [ 538.015515][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1781'. [ 538.024543][T10898] netlink: 'syz.5.1781': attribute type 10 has an invalid length. [ 538.033060][T10898] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1781'. [ 538.548071][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1784'. [ 538.557140][T10904] netlink: 'syz.0.1784': attribute type 10 has an invalid length. [ 538.565098][T10904] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1784'. [ 539.081227][T10909] overlayfs: failed to clone upperpath [ 539.171108][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1786'. [ 539.180120][T10914] netlink: 'syz.5.1786': attribute type 10 has an invalid length. [ 539.188136][T10914] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1786'. [ 540.229593][T10939] [ 540.232081][T10939] ====================================================== [ 540.239128][T10939] WARNING: possible circular locking dependency detected [ 540.246183][T10939] syzkaller #0 Not tainted [ 540.250624][T10939] ------------------------------------------------------ [ 540.257665][T10939] syz.5.1792/10939 is trying to acquire lock: [ 540.263753][T10939] ffffffff8ceceff0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x638/0x980 [ 540.273754][T10939] [ 540.273754][T10939] but task is already holding lock: [ 540.281142][T10939] ffff8880787b0150 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: vfs_rmdir+0xe1/0x410 [ 540.290889][T10939] [ 540.290889][T10939] which lock already depends on the new lock. [ 540.290889][T10939] [ 540.301335][T10939] [ 540.301335][T10939] the existing dependency chain (in reverse order) is: [ 540.310373][T10939] [ 540.310373][T10939] -> #2 (&sb->s_type->i_mutex_key#21){++++}-{3:3}: [ 540.319213][T10939] down_write+0x38/0x60 [ 540.324088][T10939] configfs_depend_item_unlocked+0x14f/0x430 [ 540.330621][T10939] usbg_make_tpg+0x1f3/0x580 [ 540.335913][T10939] target_fabric_make_tpg+0xa0/0x6d0 [ 540.341847][T10939] configfs_mkdir+0x511/0x9e0 [ 540.347079][T10939] vfs_mkdir+0x386/0x570 [ 540.351879][T10939] do_mkdirat+0x1dd/0x5c0 [ 540.356759][T10939] __x64_sys_mkdir+0x6a/0x80 [ 540.361902][T10939] do_syscall_64+0x4c/0xa0 [ 540.366914][T10939] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 540.373362][T10939] [ 540.373362][T10939] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 540.381041][T10939] __mutex_lock_common+0x1e5/0x2400 [ 540.386808][T10939] mutex_lock_nested+0x17/0x20 [ 540.392128][T10939] tcm_set_name+0x26/0x90 [ 540.397008][T10939] function_make+0x195/0x350 [ 540.402262][T10939] configfs_mkdir+0x511/0x9e0 [ 540.407520][T10939] vfs_mkdir+0x386/0x570 [ 540.412328][T10939] do_mkdirat+0x1dd/0x5c0 [ 540.417207][T10939] __x64_sys_mkdir+0x6a/0x80 [ 540.422348][T10939] do_syscall_64+0x4c/0xa0 [ 540.427324][T10939] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 540.433856][T10939] [ 540.433856][T10939] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 540.442139][T10939] __lock_acquire+0x2c66/0x7b50 [ 540.447660][T10939] lock_acquire+0x19e/0x400 [ 540.452715][T10939] __mutex_lock_common+0x1e5/0x2400 [ 540.458471][T10939] mutex_lock_nested+0x17/0x20 [ 540.463790][T10939] configfs_rmdir+0x638/0x980 [ 540.469032][T10939] vfs_rmdir+0x19d/0x410 [ 540.473837][T10939] do_rmdir+0x27f/0x710 [ 540.478553][T10939] __x64_sys_rmdir+0x45/0x50 [ 540.483715][T10939] do_syscall_64+0x4c/0xa0 [ 540.489521][T10939] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 540.495970][T10939] [ 540.495970][T10939] other info that might help us debug this: [ 540.495970][T10939] [ 540.506218][T10939] Chain exists of: [ 540.506218][T10939] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#21 [ 540.506218][T10939] [ 540.521040][T10939] Possible unsafe locking scenario: [ 540.521040][T10939] [ 540.528518][T10939] CPU0 CPU1 [ 540.533910][T10939] ---- ---- [ 540.539294][T10939] lock(&sb->s_type->i_mutex_key#21); [ 540.544789][T10939] lock(&opts->dep_lock); [ 540.551760][T10939] lock(&sb->s_type->i_mutex_key#21); [ 540.559775][T10939] lock(gadget_subsys.su_mutex); [ 540.564833][T10939] [ 540.564833][T10939] *** DEADLOCK *** [ 540.564833][T10939] [ 540.573083][T10939] 3 locks held by syz.5.1792/10939: [ 540.578307][T10939] #0: ffff8881464f4460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 540.587685][T10939] #1: ffff88805fa85590 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1b0/0x710 [ 540.598629][T10939] #2: ffff8880787b0150 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: vfs_rmdir+0xe1/0x410 [ 540.608782][T10939] [ 540.608782][T10939] stack backtrace: [ 540.614692][T10939] CPU: 1 PID: 10939 Comm: syz.5.1792 Not tainted syzkaller #0 [ 540.622178][T10939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 540.632282][T10939] Call Trace: [ 540.635669][T10939] [ 540.638704][T10939] dump_stack_lvl+0x188/0x250 [ 540.643498][T10939] ? load_image+0x410/0x410 [ 540.648151][T10939] ? show_regs_print_info+0x20/0x20 [ 540.653398][T10939] ? print_circular_bug+0x12b/0x1a0 [ 540.658666][T10939] check_noncircular+0x296/0x330 [ 540.663641][T10939] ? lockdep_lock+0x1f0/0x1f0 [ 540.668359][T10939] ? add_chain_block+0x9b0/0x9b0 [ 540.673330][T10939] ? lockdep_lock+0xf1/0x1f0 [ 540.677950][T10939] ? __lock_acquire+0x13dc/0x7b50 [ 540.683016][T10939] ? mark_lock+0x94/0x320 [ 540.687383][T10939] ? _find_first_zero_bit+0xd1/0xf0 [ 540.692743][T10939] __lock_acquire+0x2c66/0x7b50 [ 540.697650][T10939] ? __lock_acquire+0x13dc/0x7b50 [ 540.702713][T10939] ? verify_lock_unused+0x140/0x140 [ 540.707950][T10939] ? __lock_acquire+0x1305/0x7b50 [ 540.713022][T10939] lock_acquire+0x19e/0x400 [ 540.717562][T10939] ? configfs_rmdir+0x638/0x980 [ 540.722540][T10939] ? __might_sleep+0xf0/0xf0 [ 540.727275][T10939] ? read_lock_is_recursive+0x10/0x10 [ 540.732698][T10939] __mutex_lock_common+0x1e5/0x2400 [ 540.737934][T10939] ? configfs_rmdir+0x638/0x980 [ 540.742821][T10939] ? configfs_rmdir+0x638/0x980 [ 540.747706][T10939] ? __rwlock_init+0x140/0x140 [ 540.752593][T10939] ? rcu_lock_release+0x5/0x20 [ 540.757399][T10939] ? mutex_lock_io_nested+0x60/0x60 [ 540.762645][T10939] ? _raw_spin_unlock+0x24/0x40 [ 540.767619][T10939] mutex_lock_nested+0x17/0x20 [ 540.772415][T10939] configfs_rmdir+0x638/0x980 [ 540.777135][T10939] vfs_rmdir+0x19d/0x410 [ 540.781413][T10939] do_rmdir+0x27f/0x710 [ 540.785602][T10939] ? d_delete_notify+0x150/0x150 [ 540.790575][T10939] ? getname_flags+0x1f9/0x4f0 [ 540.795377][T10939] __x64_sys_rmdir+0x45/0x50 [ 540.799995][T10939] do_syscall_64+0x4c/0xa0 [ 540.804443][T10939] ? clear_bhb_loop+0x30/0x80 [ 540.809154][T10939] ? clear_bhb_loop+0x30/0x80 [ 540.813863][T10939] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 540.819807][T10939] RIP: 0033:0x7f205047a019 [ 540.824352][T10939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.844038][T10939] RSP: 002b:00007f204e6d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 540.852566][T10939] RAX: ffffffffffffffda RBX: 00007f2050701fa0 RCX: 00007f205047a019 [ 540.860564][T10939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000800 [ 540.868564][T10939] RBP: 00007f205051100c R08: 0000000000000000 R09: 0000000000000000 [ 540.876583][T10939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.884585][T10939] R13: 00007f2050702038 R14: 00007f2050701fa0 R15: 00007ffebc6b0e08 [ 540.892593][T10939] [ 541.313408][ T23] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 541.673552][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 541.683467][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 541.694547][ T23] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 541.703649][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.713117][ T23] usb 6-1: config 0 descriptor?? [ 541.733650][T10939] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 541.740806][T10939] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 541.962293][ T23] usb 6-1: USB disconnect, device number 5