last executing test programs: 34.841773718s ago: executing program 3 (id=225): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x12) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000140)='./file0/file0\x00', 0x66) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r6, 0x1, 0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x78}}}, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31.19102021s ago: executing program 3 (id=228): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, 0x0) 20.561064815s ago: executing program 3 (id=241): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f00000010c0)=ANY=[], 0x8, 0x303, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x40084, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) openat$cgroup(r0, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$eJzs3b+LHFUcAPDv7O3NTrTYLaxEyIAprIKXTmz2kATEqwxbRAs9TAJyuwg5OIiKaypbGwsL/wJBsPG/SON/INgKdkYIjMzszO3s3uZ+RPckd59Pc9977/ud997sY2+3mHcfvzbZu5vH/Udf/hZZlkRnGMN4ksQgOtH4OhYMvw0A4EX2pCjiz2KmakhOV1emZeudGgCwJkf+/q/UnYc/n8u0AIA1un3ng/e2d3Zuvp9FFrcm3xyMym/25c9Z//b9+DTGcS/ejH48jag+J9Rf/Mv4VlEU025eGsS1yfRgVFZOPnpcX3/7j4iqfiv6MTgsqz5tVPXv7tzcqsrzXqt+Ws7jpXr8YVl/I/rxymHxQv2NWX3ero9RGm+83pr/9ejHr5/EZzGOu9Uk5vVfbeX5O8V3f33xYTm9sj6ZHox6Vd5csXGerwsAAAAAAAAAAAAAAAAAAAAAABfb9bw5fCe/GtcmZVN9/s7G07TOqVMG86qyfxYdHhfcOh+oNC3ih9mRgpsL483P9+nGq932wYIAAAAAAAAAAAAAAAAAAABwee0//Hxvdzy+9+A/CZKIK82V/74d8bzXGbZarsbxyb16vN3xuFOHCzmP03ZLbDQ5ScSx04huxELL8y/npOBKtjTnJvjxp3KBZ7lg1mp5a/UCN5fWdSS40/u3e6PZA3u7yeqxetG0ZPVd/T6NmOekccqx0md1FdF+vU5acrqyq3/mtacvV8H0mTlFsmKLtoK3f5/11y1JLO26tLqrK0ffrINW+dLeOOEm1OXZrPzoe0VSndbRW8O7EAAAAAAAAAAAAAAAAAAAENXTvM3Tv+Vvvyx2Pjq2tFN4FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC2L/YfP//88QTOviUySn8WD/f14iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl8A/AQAA//+0t0sX") fdatasync(r0) 18.147121886s ago: executing program 3 (id=244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x1, 0xffe2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x10001, 0xd, 0x2, 0x6, 0x7, 0x3f5, 0x200, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.79907984s ago: executing program 1 (id=246): getpid() r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(0xffffffffffffffff, 0xc008644e, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) shmctl$IPC_RMID(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) listen(r0, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 15.299908667s ago: executing program 2 (id=248): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0}) io_uring_setup(0x62d2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) setsockopt$inet_mtu(r5, 0x111, 0xa, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) 14.022141297s ago: executing program 3 (id=250): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x8000000003c) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) 13.276008745s ago: executing program 0 (id=251): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f00000010c0)=ANY=[], 0x8, 0x303, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1}, {0x4, 0x8, 0x1}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x40084, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) openat$cgroup(r0, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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") fdatasync(r0) 13.275521745s ago: executing program 1 (id=252): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f00000010c0)=ANY=[], 0x8, 0x303, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1}, {0x4, 0x8, 0x1}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x40084, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) openat$cgroup(r0, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$eJzs3b+LHFUcAPDv7O3NTrTYLaxEyIAprIKXTmz2kATEqwxbRAs9TAJyuwg5OIiKaypbGwsL/wJBsPG/SON/INgKdkYIjMzszO3s3uZ+RPckd59Pc9977/ud997sY2+3mHcfvzbZu5vH/Udf/hZZlkRnGMN4ksQgOtH4OhYMvw0A4EX2pCjiz2KmakhOV1emZeudGgCwJkf+/q/UnYc/n8u0AIA1un3ng/e2d3Zuvp9FFrcm3xyMym/25c9Z//b9+DTGcS/ejH48jag+J9Rf/Mv4VlEU025eGsS1yfRgVFZOPnpcX3/7j4iqfiv6MTgsqz5tVPXv7tzcqsrzXqt+Ws7jpXr8YVl/I/rxymHxQv2NWX3ero9RGm+83pr/9ejHr5/EZzGOu9Uk5vVfbeX5O8V3f33xYTm9sj6ZHox6Vd5csXGerwsAAAAAAAAAAAAAAAAAAAAAABfb9bw5fCe/GtcmZVN9/s7G07TOqVMG86qyfxYdHhfcOh+oNC3ih9mRgpsL483P9+nGq932wYIAAAAAAAAAAAAAAAAAAABwee0//Hxvdzy+9+A/CZKIK82V/74d8bzXGbZarsbxyb16vN3xuFOHCzmP03ZLbDQ5ScSx04huxELL8y/npOBKtjTnJvjxp3KBZ7lg1mp5a/UCN5fWdSS40/u3e6PZA3u7yeqxetG0ZPVd/T6NmOekccqx0md1FdF+vU5acrqyq3/mtacvV8H0mTlFsmKLtoK3f5/11y1JLO26tLqrK0ffrINW+dLeOOEm1OXZrPzoe0VSndbRW8O7EAAAAAAAAAAAAAAAAAAAENXTvM3Tv+Vvvyx2Pjq2tFN4FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC2L/YfP//88QTOviUySn8WD/f14iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl8A/AQAA//+0t0sX") fdatasync(r0) 12.332468564s ago: executing program 2 (id=253): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x3a, 0x2, 0x0, 0x0, 0x0, 0x7e, 0x8, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x8, 0x0, 0x80000065, [0x2, 0x89ff]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r3) sendmsg$IEEE802154_SET_MACPARAMS(r3, 0x0, 0x800c014) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000030a010800000000000000000a0000070900010073797a31000000000c00024000000000000000020400048018000480140003006772653a0000000000000000000000000a00"], 0x84}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") 11.758876745s ago: executing program 3 (id=254): pipe2(0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000140)={{0x0, 0xea60}, 0x15, 0x8}, 0x18) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) sendto$inet(r2, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) 10.441936184s ago: executing program 2 (id=255): syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x8, 0x0, 0x81, 0x1ff, 0x1}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/82, 0x52}], 0x1}, 0x81}], 0x61, 0x2100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) fsopen(&(0x7f0000000080)='binder\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x7d4105cf, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000040) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000000"], 0x48) 9.172048802s ago: executing program 1 (id=256): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000140)={[{@rodir}, {@uni_xlate}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@rodir}, {@utf8}, {@fat=@tz_utc}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@utf8no}, {@numtail}, {@utf8no}, {@utf8no}]}, 0x3, 0x29e, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000300)={0x0, 0x0, 0x10000, 0x3, 0x55}, 0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, 0x0, r0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote, {[@hopopts={0x2f, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @jumbo={0xc2, 0x4, 0xc}]}]}}}}}, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0xc0686611, 0x20000081) close(r4) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 9.170737662s ago: executing program 0 (id=257): pipe2(0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000140)={{0x0, 0xea60}, 0x15, 0x8}, 0x18) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) sendto$inet(r2, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001, 0x3}, 0x8) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) 9.03639327s ago: executing program 2 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xe69, 0x0, 0x0, 0x1000, 0x86, r0, 0x0, 0x30}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x420, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727f, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 6.650735415s ago: executing program 0 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r4, &(0x7f0000000000)='7', 0x1) getsockopt$inet6_int(r3, 0x29, 0x4c, 0x0, 0x0) 6.469642513s ago: executing program 2 (id=260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000300)={0x0, 0x0, 0x10000, 0x3, 0x55}, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd", 0x5dc) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0xc0686611, 0x20000081) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r6) 4.851988944s ago: executing program 0 (id=261): pipe2(0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000140)={{0x0, 0xea60}, 0x15, 0x8}, 0x18) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) sendto$inet(r2, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) 4.808521454s ago: executing program 1 (id=262): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x800, 0x0, 0x3e, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002680)="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", 0x11f, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x8010, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbmon(&(0x7f0000000340), 0x7fffffffffffffff, 0x800) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0x3}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={0x0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd2(0x2000003, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000240)={r5, 0x7fc, 0x2, r5}) ioctl$KVM_SET_IRQCHIP(r4, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r4, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xffffffff, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x10, 0xc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x21, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]}) 3.715927955s ago: executing program 0 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$tipc(0x1e, 0x5, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 2.416984149s ago: executing program 0 (id=264): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) prlimit64(0x0, 0x5, 0x0, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) 2.17578928s ago: executing program 1 (id=265): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x140f, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x20000000) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x8, 0x0) r1 = memfd_create(&(0x7f00000004c0)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2x%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\xa7\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\xa2\xefi$\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1!\xf8\xf9_\xb3\x98\x92\xa9\xdel\xfb\x94\xc0\xb5\x9eY\xb7\vT\x95\x9b\xad\x85\xb5\xd6\x1d\xbdF\xccp\xd8\xcf\x1e=\x9cD\xab\xfa/\xfe\x8el\xb5s\x11\xc3\xaf\xee{\x10\x89.Y\xf5!*0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$binfmt_script(r1, &(0x7f0000001440)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000000b40)={0x2020}, 0x2020) write$binfmt_script(r5, &(0x7f0000000480)={'#! ', './proc'}, 0xa) 1.159251435s ago: executing program 1 (id=266): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f00000010c0)=ANY=[], 0x8, 0x303, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1}, {0x4, 0x8, 0x1}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x40084, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) openat$cgroup(r0, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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") fdatasync(r0) 0s ago: executing program 2 (id=267): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. [ 66.020913][ T5762] cgroup: Unknown subsys name 'net' [ 66.157479][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.469490][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.953737][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.961867][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.966691][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.970830][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.983121][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.984246][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.991666][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.999633][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.005922][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.021282][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.028674][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.029204][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.037612][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.050930][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.059449][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.067008][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.072252][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.074506][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.086344][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.096336][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.104079][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.111485][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.120083][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.127854][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.412102][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 69.592741][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.601696][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.608982][ T5776] bridge_slave_0: entered allmulticast mode [ 69.617029][ T5776] bridge_slave_0: entered promiscuous mode [ 69.629358][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.636635][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.644023][ T5776] bridge_slave_1: entered allmulticast mode [ 69.651143][ T5776] bridge_slave_1: entered promiscuous mode [ 69.685383][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 69.723690][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 69.742521][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.758315][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.785311][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 69.867434][ T5776] team0: Port device team_slave_0 added [ 69.897489][ T5776] team0: Port device team_slave_1 added [ 69.968371][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.975644][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.983601][ T5774] bridge_slave_0: entered allmulticast mode [ 69.991699][ T5774] bridge_slave_0: entered promiscuous mode [ 70.007561][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.015018][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.022556][ T5774] bridge_slave_1: entered allmulticast mode [ 70.029247][ T5774] bridge_slave_1: entered promiscuous mode [ 70.035984][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.043576][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.051031][ T5775] bridge_slave_0: entered allmulticast mode [ 70.057678][ T5775] bridge_slave_0: entered promiscuous mode [ 70.075829][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.083192][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.109266][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.129005][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.137135][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.144409][ T5775] bridge_slave_1: entered allmulticast mode [ 70.151728][ T5775] bridge_slave_1: entered promiscuous mode [ 70.158585][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.166180][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.173695][ T5777] bridge_slave_0: entered allmulticast mode [ 70.181321][ T5777] bridge_slave_0: entered promiscuous mode [ 70.188949][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.197843][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.224140][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.253254][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.260639][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.267789][ T5777] bridge_slave_1: entered allmulticast mode [ 70.275008][ T5777] bridge_slave_1: entered promiscuous mode [ 70.293136][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.334406][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.345858][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.376544][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.412806][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.426048][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.439596][ T5776] hsr_slave_0: entered promiscuous mode [ 70.446896][ T5776] hsr_slave_1: entered promiscuous mode [ 70.466897][ T5774] team0: Port device team_slave_0 added [ 70.504934][ T5775] team0: Port device team_slave_0 added [ 70.512835][ T5774] team0: Port device team_slave_1 added [ 70.520610][ T5775] team0: Port device team_slave_1 added [ 70.537009][ T5777] team0: Port device team_slave_0 added [ 70.547159][ T5777] team0: Port device team_slave_1 added [ 70.604484][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.611654][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.637962][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.651496][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.658517][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.684705][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.712852][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.719832][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.745902][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.757660][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.765582][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.791864][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.803966][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.813582][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.842081][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.876228][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.884223][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.911013][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.994755][ T5774] hsr_slave_0: entered promiscuous mode [ 71.003626][ T5774] hsr_slave_1: entered promiscuous mode [ 71.010067][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.017903][ T5774] Cannot create hsr debugfs directory [ 71.037826][ T5775] hsr_slave_0: entered promiscuous mode [ 71.046429][ T5775] hsr_slave_1: entered promiscuous mode [ 71.052706][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.060988][ T5775] Cannot create hsr debugfs directory [ 71.087277][ T5777] hsr_slave_0: entered promiscuous mode [ 71.093634][ T5777] hsr_slave_1: entered promiscuous mode [ 71.099747][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.107433][ T5777] Cannot create hsr debugfs directory [ 71.121127][ T5090] Bluetooth: hci2: command tx timeout [ 71.200251][ T5781] Bluetooth: hci1: command tx timeout [ 71.203808][ T5787] Bluetooth: hci3: command tx timeout [ 71.205969][ T5090] Bluetooth: hci0: command tx timeout [ 71.460706][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.475150][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.485065][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.496635][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.570985][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.583072][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.594945][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.614967][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.622918][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.630896][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.702970][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.714472][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.724120][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.733737][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.848851][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.871055][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.879843][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.905877][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.915987][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.949467][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.988615][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.995975][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.016847][ T2115] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.024031][ T2115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.044275][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.076310][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.091142][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.098235][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.131346][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.138443][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.176298][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.186996][ T5776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.202884][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.248091][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.284517][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.291739][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.315007][ T2892] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.322221][ T2892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.432420][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.523071][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.546261][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.593729][ T2892] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.600909][ T2892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.633574][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.640755][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.734285][ T5776] veth0_vlan: entered promiscuous mode [ 72.749146][ T5776] veth1_vlan: entered promiscuous mode [ 72.825827][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.836569][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.897880][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.915253][ T5776] veth0_macvtap: entered promiscuous mode [ 72.938865][ T5776] veth1_macvtap: entered promiscuous mode [ 73.013916][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.045125][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.059639][ T5774] veth0_vlan: entered promiscuous mode [ 73.077024][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.087775][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.099375][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.108234][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.156942][ T5777] veth0_vlan: entered promiscuous mode [ 73.166609][ T5774] veth1_vlan: entered promiscuous mode [ 73.201813][ T5090] Bluetooth: hci2: command tx timeout [ 73.209417][ T5777] veth1_vlan: entered promiscuous mode [ 73.252404][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.280822][ T5090] Bluetooth: hci3: command tx timeout [ 73.280974][ T5787] Bluetooth: hci0: command tx timeout [ 73.286245][ T5781] Bluetooth: hci1: command tx timeout [ 73.309619][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.337427][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.370284][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.378156][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.389784][ T5774] veth0_macvtap: entered promiscuous mode [ 73.413731][ T5774] veth1_macvtap: entered promiscuous mode [ 73.433402][ T5777] veth0_macvtap: entered promiscuous mode [ 73.476713][ T5777] veth1_macvtap: entered promiscuous mode [ 73.501475][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.513286][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.526903][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.537880][ T5775] veth0_vlan: entered promiscuous mode [ 73.548878][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.560692][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.572217][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.609044][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.637826][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.646987][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.656442][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.692238][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.706853][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.719726][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.735735][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.774033][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.225148][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.285030][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.337921][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.353861][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.366428][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.376184][ T5775] veth1_vlan: entered promiscuous mode [ 74.391648][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.400700][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.409547][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.420537][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.019801][ T5781] Bluetooth: hci2: command tx timeout [ 76.019867][ T5090] Bluetooth: hci3: command tx timeout [ 76.025302][ T5781] Bluetooth: hci1: command tx timeout [ 76.030713][ T5787] Bluetooth: hci0: command tx timeout [ 76.060252][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.068621][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.139032][ T2115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.147943][ T5775] veth0_macvtap: entered promiscuous mode [ 76.161029][ T2115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.192165][ T5775] veth1_macvtap: entered promiscuous mode [ 76.200056][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.218521][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.231298][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.242818][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.253211][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.266525][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.282270][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.294085][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.306380][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.335960][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.347203][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.359644][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.371914][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.384109][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.397126][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.412828][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.428683][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.437726][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.451220][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.462776][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.546690][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.581084][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.882347][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.906953][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.667900][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.684931][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.738888][ T5859] syz.1.2[5859]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.759714][ T5859] loop1: detected capacity change from 0 to 1024 [ 78.214409][ T5090] Bluetooth: hci0: command tx timeout [ 78.220201][ T5090] Bluetooth: hci3: command tx timeout [ 78.225635][ T5090] Bluetooth: hci2: command tx timeout [ 78.232559][ T5787] Bluetooth: hci1: command tx timeout [ 78.703524][ T5867] loop2: detected capacity change from 0 to 512 [ 78.964230][ T5867] EXT4-fs (loop2): Test dummy encryption mode enabled [ 78.972983][ T5867] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.986114][ T5867] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.017144][ T5867] EXT4-fs (loop2): 1 truncate cleaned up [ 79.024518][ T5867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.911638][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.233751][ T5897] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10'. [ 83.922722][ T5907] loop0: detected capacity change from 0 to 1024 [ 84.030189][ T5907] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.181455][ T5907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.351404][ T5834] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.604547][ T5834] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.633960][ T5834] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 84.658450][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.684030][ T5834] usb 2-1: Product: syz [ 84.688262][ T5834] usb 2-1: Manufacturer: syz [ 84.704041][ T5834] usb 2-1: SerialNumber: syz [ 86.278553][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.348601][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.677692][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.751220][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.962678][ T790] cfg80211: failed to load regulatory.db [ 87.175208][ T5834] usb 2-1: selecting invalid altsetting 1 [ 87.184344][ T5834] speedtch 2-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 87.193223][ T5834] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -22! [ 87.200478][ T5834] speedtch: probe of 2-1:1.0 failed with error -22 [ 87.213709][ T5834] usb 2-1: selecting invalid altsetting 1 [ 87.220445][ T5834] speedtch 2-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 87.231065][ T5834] speedtch 2-1:1.1: usbatm_usb_probe: bind failed: -22! [ 87.238093][ T5834] speedtch: probe of 2-1:1.1 failed with error -22 [ 87.251444][ T5834] usb 2-1: USB disconnect, device number 2 [ 87.293438][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.440162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 95.174254][ T5955] loop2: detected capacity change from 0 to 1024 [ 97.338740][ T5981] ======================================================= [ 97.338740][ T5981] WARNING: The mand mount option has been deprecated and [ 97.338740][ T5981] and is ignored by this kernel. Remove the mand [ 97.338740][ T5981] option from the mount to silence this warning. [ 97.338740][ T5981] ======================================================= [ 97.499805][ T5981] FAT-fs (nullb0): bogus number of reserved sectors [ 97.506860][ T5981] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 97.568109][ T5981] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 98.390593][ T5986] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 100.320302][ T5998] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 103.050626][ T6008] netlink: 36 bytes leftover after parsing attributes in process `syz.3.36'. [ 104.747925][ T6013] loop2: detected capacity change from 0 to 1024 [ 104.763137][ T6013] EXT4-fs (loop2): filesystem is read-only [ 104.769060][ T6013] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 1280 [ 108.127004][ T6040] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 108.420435][ T6033] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 108.982699][ T6046] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6047] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6046] [ 111.770240][ T5090] Bluetooth: hci0: command tx timeout [ 114.950541][ T6075] loop3: detected capacity change from 0 to 1024 [ 117.126986][ T6085] device-mapper: ioctl: Invalid ioctl structure: name c, dev f800 [ 117.144278][ T28] audit: type=1326 audit(1790280289.914:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6082 comm="syz.3.54" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd29799e159 code=0x0 [ 117.855712][ T6088] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.522149][ T6100] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6101] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6100] [ 121.890106][ T6103] loop1: detected capacity change from 0 to 32768 [ 121.969169][ T6103] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 122.179694][ T6103] XFS (loop1): Ending clean mount [ 122.223056][ T6103] XFS (loop1): Quotacheck needed: Please wait. [ 123.560082][ T5090] Bluetooth: hci0: command tx timeout [ 123.733086][ T6103] XFS (loop1): Quotacheck: Done. [ 124.550950][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 124.797558][ T6123] loop0: detected capacity change from 0 to 1024 [ 124.869430][ T6123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.768937][ T28] audit: type=1800 audit(1790280298.524:3): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.58" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 125.815101][ T28] audit: type=1800 audit(1790280298.524:4): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.58" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 126.105141][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.280194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 130.516069][ T6152] loop1: detected capacity change from 0 to 256 [ 130.963273][ T6152] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 131.245602][ T6152] syz.1.67: attempt to access beyond end of device [ 131.245602][ T6152] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 131.263054][ T6152] syz.1.67: attempt to access beyond end of device [ 131.263054][ T6152] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 131.289197][ T28] audit: type=1800 audit(1790280304.054:5): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.67" name="file1" dev="loop1" ino=1048605 res=0 errno=0 [ 131.832214][ T6157] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6158] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6157] [ 133.400090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 133.908168][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.930004][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.086716][ T6165] warning: `syz.0.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.641124][ T5787] Bluetooth: hci0: command tx timeout [ 142.057292][ T6193] loop0: detected capacity change from 0 to 32768 [ 142.091639][ T6193] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 142.133805][ T6193] XFS (loop0): Ending clean mount [ 142.143317][ T6193] XFS (loop0): Quotacheck needed: Please wait. [ 142.188695][ T6193] XFS (loop0): Quotacheck: Done. [ 142.834427][ T6210] loop1: detected capacity change from 0 to 256 [ 142.940589][ T6210] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 143.014231][ T5776] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 143.043836][ T6210] syz.1.82: attempt to access beyond end of device [ 143.043836][ T6210] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 143.092353][ T6210] syz.1.82: attempt to access beyond end of device [ 143.092353][ T6210] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 143.124899][ T28] audit: type=1800 audit(1790280315.874:6): pid=6210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.82" name="file1" dev="loop1" ino=1048606 res=0 errno=0 [ 143.283981][ T6212] syz.1.82: attempt to access beyond end of device [ 143.283981][ T6212] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 143.391034][ T6209] syz.1.82: attempt to access beyond end of device [ 143.391034][ T6209] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 143.443798][ T6209] syz.1.82: attempt to access beyond end of device [ 143.443798][ T6209] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 143.491524][ T6209] syz.1.82: attempt to access beyond end of device [ 143.491524][ T6209] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 143.530124][ T6212] syz.1.82: attempt to access beyond end of device [ 143.530124][ T6212] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 144.830305][ T6212] syz.1.82: attempt to access beyond end of device [ 144.830305][ T6212] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 144.890739][ T6209] syz.1.82: attempt to access beyond end of device [ 144.890739][ T6209] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 144.923007][ T6212] syz.1.82: attempt to access beyond end of device [ 144.923007][ T6212] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 146.620418][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 146.843091][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 147.012806][ T9] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 147.189953][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.209905][ T9] usb 2-1: Product: syz [ 147.214127][ T9] usb 2-1: Manufacturer: syz [ 147.229317][ T9] usb 2-1: SerialNumber: syz [ 147.251648][ T9] usb 2-1: config 0 descriptor?? [ 147.283146][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 148.429878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 148.589884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 148.760083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 148.849880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 148.901251][ T9] gspca_ov534_9: reg_w failed -110 [ 149.153429][ T6239] FAT-fs (nullb0): bogus number of reserved sectors [ 149.160193][ T6239] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 149.190426][ T6239] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 150.620153][ T9] gspca_ov534_9: Unknown sensor 0000 [ 150.620257][ T9] ov534_9: probe of 2-1:0.0 failed with error -22 [ 150.774711][ T9] usb 2-1: USB disconnect, device number 3 [ 151.320128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 151.792165][ T6252] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6253] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6252] [ 153.360102][ T6264] loop0: detected capacity change from 0 to 512 [ 153.563690][ T6264] EXT4-fs (loop0): Test dummy encryption mode enabled [ 153.570563][ T6264] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.630335][ T6264] EXT4-fs (loop0): 1 truncate cleaned up [ 153.637327][ T6264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.905602][ T5090] Bluetooth: hci0: command tx timeout [ 155.093309][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.227692][ T6275] loop0: detected capacity change from 0 to 256 [ 155.302688][ T6275] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 155.369100][ T6275] syz.0.97: attempt to access beyond end of device [ 155.369100][ T6275] loop0: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 155.403783][ T6275] syz.0.97: attempt to access beyond end of device [ 155.403783][ T6275] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 155.433909][ T28] audit: type=1800 audit(1790280328.204:7): pid=6275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.97" name="file1" dev="loop0" ino=1048608 res=0 errno=0 [ 155.549237][ T6277] loop1: detected capacity change from 0 to 256 [ 155.607816][ T6280] syz.0.97: attempt to access beyond end of device [ 155.607816][ T6280] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 155.624894][ T6279] loop2: detected capacity change from 0 to 1024 [ 155.650677][ T6274] syz.0.97: attempt to access beyond end of device [ 155.650677][ T6274] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 155.675263][ T6274] syz.0.97: attempt to access beyond end of device [ 155.675263][ T6274] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 155.700551][ T6277] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 155.717360][ T6274] syz.0.97: attempt to access beyond end of device [ 155.717360][ T6274] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 155.743063][ T6277] syz.1.94: attempt to access beyond end of device [ 155.743063][ T6277] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 155.744836][ T6279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.758432][ T6274] syz.0.97: attempt to access beyond end of device [ 155.758432][ T6274] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 155.784784][ T6277] syz.1.94: attempt to access beyond end of device [ 155.784784][ T6277] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 155.865128][ T6280] syz.0.97: attempt to access beyond end of device [ 155.865128][ T6280] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 155.886082][ T28] audit: type=1800 audit(1790280328.654:8): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.94" name="file1" dev="loop1" ino=1048610 res=0 errno=0 [ 156.290901][ T28] audit: type=1800 audit(1790280329.024:9): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.99" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 156.577720][ T28] audit: type=1800 audit(1790280329.034:10): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.99" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 156.714141][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.716116][ T6288] loop0: detected capacity change from 0 to 256 [ 156.778992][ T6288] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 156.869651][ T6290] loop1: detected capacity change from 0 to 256 [ 156.879926][ T28] audit: type=1800 audit(1790280329.634:11): pid=6288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.108" name="file1" dev="loop0" ino=1048611 res=0 errno=0 [ 156.965024][ T6290] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 157.022679][ T28] audit: type=1800 audit(1790280329.794:12): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.101" name="file1" dev="loop1" ino=1048613 res=0 errno=0 [ 157.206376][ T6298] overlayfs: overlapping lowerdir path [ 157.238860][ T6298] FAT-fs (nullb0): bogus number of reserved sectors [ 157.245733][ T6298] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 157.257662][ T6298] overlayfs: overlapping lowerdir path [ 158.469307][ T6307] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6308] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6307] [ 159.000121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 159.383480][ T6310] loop0: detected capacity change from 0 to 1024 [ 160.826157][ T6312] sched: RT throttling activated [ 160.954240][ T6314] can0: slcan on ttyS3. [ 161.211780][ T6315] can0 (unregistered): slcan off ttyS3. [ 161.320062][ T5787] Bluetooth: hci0: command tx timeout [ 161.851897][ T6320] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6321] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6320] [ 165.081226][ T5090] Bluetooth: hci0: command tx timeout [ 165.665289][ T6332] loop3: detected capacity change from 0 to 512 [ 165.708014][ T6332] EXT4-fs (loop3): Test dummy encryption mode enabled [ 165.714963][ T6332] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 165.769462][ T6332] EXT4-fs (loop3): 1 truncate cleaned up [ 165.784666][ T6332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.420952][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.557123][ T6336] loop3: detected capacity change from 0 to 256 [ 166.597876][ T6336] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 166.683493][ T6336] bio_check_eod: 6224 callbacks suppressed [ 166.683508][ T6336] syz.3.113: attempt to access beyond end of device [ 166.683508][ T6336] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 166.730489][ T6336] syz.3.113: attempt to access beyond end of device [ 166.730489][ T6336] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 166.771234][ T28] audit: type=1800 audit(1790280339.544:13): pid=6336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.113" name="file1" dev="loop3" ino=1048615 res=0 errno=0 [ 166.945524][ T6336] syz.3.113: attempt to access beyond end of device [ 166.945524][ T6336] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 166.980539][ T6336] syz.3.113: attempt to access beyond end of device [ 166.980539][ T6336] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 168.225180][ T6336] syz.3.113: attempt to access beyond end of device [ 168.225180][ T6336] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 168.240360][ T6336] syz.3.113: attempt to access beyond end of device [ 168.240360][ T6336] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 168.243665][ T6347] loop2: detected capacity change from 0 to 256 [ 168.274667][ T6335] syz.3.113: attempt to access beyond end of device [ 168.274667][ T6335] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 168.276989][ T6347] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 168.354906][ T6335] syz.3.113: attempt to access beyond end of device [ 168.354906][ T6335] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 168.369125][ T6336] syz.3.113: attempt to access beyond end of device [ 168.369125][ T6336] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 168.387785][ T6336] syz.3.113: attempt to access beyond end of device [ 168.387785][ T6336] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 168.419971][ T28] audit: type=1800 audit(1790280341.174:14): pid=6347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.110" name="file1" dev="loop2" ino=1048617 res=0 errno=0 [ 168.450463][ T6338] nvme nvme0: failed to connect socket: -512 [ 168.661942][ T6351] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 168.825941][ T6354] loop3: detected capacity change from 0 to 1024 [ 174.360068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 179.828631][ T6406] loop0: detected capacity change from 0 to 256 [ 179.884392][ T6406] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 179.936036][ T6406] bio_check_eod: 1641 callbacks suppressed [ 179.936051][ T6406] syz.0.125: attempt to access beyond end of device [ 179.936051][ T6406] loop0: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 179.970126][ T6406] syz.0.125: attempt to access beyond end of device [ 179.970126][ T6406] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 180.049262][ T28] audit: type=1800 audit(1790280352.814:15): pid=6406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.125" name="file1" dev="loop0" ino=1048619 res=0 errno=0 [ 180.136657][ T6409] loop1: detected capacity change from 0 to 256 [ 180.146847][ T6406] syz.0.125: attempt to access beyond end of device [ 180.146847][ T6406] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 180.167015][ T6406] syz.0.125: attempt to access beyond end of device [ 180.167015][ T6406] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 180.182411][ T6406] syz.0.125: attempt to access beyond end of device [ 180.182411][ T6406] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 180.188245][ T6409] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 180.223807][ T6409] syz.1.127: attempt to access beyond end of device [ 180.223807][ T6409] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 180.230719][ T6406] syz.0.125: attempt to access beyond end of device [ 180.230719][ T6406] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 180.262010][ T6409] syz.1.127: attempt to access beyond end of device [ 180.262010][ T6409] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 180.269145][ T6406] syz.0.125: attempt to access beyond end of device [ 180.269145][ T6406] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 180.289901][ T28] audit: type=1800 audit(1790280353.054:16): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.127" name="file1" dev="loop1" ino=1048621 res=0 errno=0 [ 180.297144][ T6409] syz.1.127: attempt to access beyond end of device [ 180.297144][ T6409] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 181.045478][ T6418] overlayfs: overlapping lowerdir path [ 181.099946][ T6419] overlayfs: overlapping lowerdir path [ 184.016234][ T6437] overlayfs: overlapping lowerdir path [ 184.070071][ T6438] overlayfs: overlapping lowerdir path [ 184.518902][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 184.803188][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 184.870348][ T6445] loop0: detected capacity change from 0 to 256 [ 184.908859][ T6445] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 184.971477][ T6445] bio_check_eod: 11816 callbacks suppressed [ 184.971493][ T6445] syz.0.136: attempt to access beyond end of device [ 184.971493][ T6445] loop0: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 184.991110][ T27] usb 4-1: config 0 has no interfaces? [ 184.997746][ T27] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 185.006950][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.019090][ T27] usb 4-1: config 0 descriptor?? [ 185.060133][ T6445] syz.0.136: attempt to access beyond end of device [ 185.060133][ T6445] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 185.173390][ T6447] loop1: detected capacity change from 0 to 512 [ 185.224109][ T6447] EXT4-fs (loop1): Test dummy encryption mode enabled [ 185.231046][ T6447] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.290685][ T6447] EXT4-fs (loop1): 1 truncate cleaned up [ 185.302271][ T6447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.691872][ T28] audit: type=1800 audit(1790280358.454:17): pid=6445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.136" name="file1" dev="loop0" ino=1048623 res=0 errno=0 [ 185.711804][ T6433] loop3: detected capacity change from 0 to 2048 [ 185.725618][ T6433] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.755791][ T6445] syz.0.136: attempt to access beyond end of device [ 185.755791][ T6445] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 185.800045][ T6445] syz.0.136: attempt to access beyond end of device [ 185.800045][ T6445] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 185.870202][ T6445] syz.0.136: attempt to access beyond end of device [ 185.870202][ T6445] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 185.888707][ T6444] syz.0.136: attempt to access beyond end of device [ 185.888707][ T6444] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 185.915465][ T6445] syz.0.136: attempt to access beyond end of device [ 185.915465][ T6445] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 185.932622][ T6433] netlink: 'syz.3.133': attribute type 49 has an invalid length. [ 185.951410][ T6445] syz.0.136: attempt to access beyond end of device [ 185.951410][ T6445] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 185.955831][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.968915][ T6445] syz.0.136: attempt to access beyond end of device [ 185.968915][ T6445] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 185.992749][ T6445] syz.0.136: attempt to access beyond end of device [ 185.992749][ T6445] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 188.462075][ T5815] usb 4-1: USB disconnect, device number 2 [ 188.573177][ T6466] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 188.661327][ T6466] rtrs_client L2075: : Failed to resolve address, err: -19 [ 188.694159][ T6466] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 192.347780][ T6492] overlayfs: overlapping lowerdir path [ 192.400219][ T6493] overlayfs: overlapping lowerdir path [ 192.563432][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 192.570231][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 192.576429][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 192.585279][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 194.487598][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.497367][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.662819][ T6539] loop0: detected capacity change from 0 to 256 [ 201.849354][ T6539] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 201.986194][ T6539] bio_check_eod: 973 callbacks suppressed [ 201.986210][ T6539] syz.0.147: attempt to access beyond end of device [ 201.986210][ T6539] loop0: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 202.040033][ T6539] syz.0.147: attempt to access beyond end of device [ 202.040033][ T6539] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 202.082014][ T28] audit: type=1800 audit(1790280374.854:18): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.147" name="file1" dev="loop0" ino=1048625 res=0 errno=0 [ 202.821586][ T6552] loop2: detected capacity change from 0 to 1024 [ 202.834807][ T6552] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.920013][ T6545] syz.0.147: attempt to access beyond end of device [ 202.920013][ T6545] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 202.944135][ T6552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.003151][ T6550] ip_tables: iptables: counters copy to user failed while replacing table [ 203.008204][ T6545] syz.0.147: attempt to access beyond end of device [ 203.008204][ T6545] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 203.037164][ T6545] syz.0.147: attempt to access beyond end of device [ 203.037164][ T6545] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 203.140100][ T6545] syz.0.147: attempt to access beyond end of device [ 203.140100][ T6545] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 203.234334][ T6545] syz.0.147: attempt to access beyond end of device [ 203.234334][ T6545] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 204.409503][ T6545] syz.0.147: attempt to access beyond end of device [ 204.409503][ T6545] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 204.426432][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.057241][ T6605] loop3: detected capacity change from 0 to 256 [ 213.180672][ T6605] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 213.285182][ T6605] syz.3.166: attempt to access beyond end of device [ 213.285182][ T6605] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 213.300136][ T6605] syz.3.166: attempt to access beyond end of device [ 213.300136][ T6605] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 213.322247][ T28] audit: type=1800 audit(1790280386.094:19): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.166" name="file1" dev="loop3" ino=1048627 res=0 errno=0 [ 213.524585][ T6610] syz.3.166: attempt to access beyond end of device [ 213.524585][ T6610] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 213.772150][ T6604] syz.3.166: attempt to access beyond end of device [ 213.772150][ T6604] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 213.959559][ T6604] syz.3.166: attempt to access beyond end of device [ 213.959559][ T6604] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 213.984472][ T6604] syz.3.166: attempt to access beyond end of device [ 213.984472][ T6604] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 214.054118][ T6610] syz.3.166: attempt to access beyond end of device [ 214.054118][ T6610] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 214.138193][ T6610] syz.3.166: attempt to access beyond end of device [ 214.138193][ T6610] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 214.164097][ T6610] syz.3.166: attempt to access beyond end of device [ 214.164097][ T6610] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 214.184564][ T6604] syz.3.166: attempt to access beyond end of device [ 214.184564][ T6604] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 221.654380][ T6652] loop2: detected capacity change from 0 to 8 [ 221.776918][ T6652] SQUASHFS error: Failed to read block 0x8f: -5 [ 221.791164][ T28] audit: type=1800 audit(1790280394.564:20): pid=6652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.170" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 222.146192][ T6657] SQUASHFS error: Failed to read block 0x285: -5 [ 222.155252][ T6657] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.155275][ T6655] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.162708][ T6657] SQUASHFS error: read_indexes: reading block [283:0] [ 222.162765][ T6657] SQUASHFS error: Failed to read block 0x0: -5 [ 222.162824][ T6657] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.170153][ T6655] SQUASHFS error: read_indexes: reading block [283:0] [ 222.170227][ T6655] SQUASHFS error: Failed to read block 0x0: -5 [ 222.176963][ T6657] SQUASHFS error: read_indexes: reading block [283:0] [ 222.183860][ T6655] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.183874][ T6655] SQUASHFS error: read_indexes: reading block [283:0] [ 222.191219][ T6657] SQUASHFS error: Failed to read block 0x0: -5 [ 222.197946][ T6655] SQUASHFS error: Failed to read block 0x0: -5 [ 222.204161][ T6657] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.210975][ T6655] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.218229][ T6657] SQUASHFS error: read_indexes: reading block [283:0] [ 222.225027][ T6655] SQUASHFS error: read_indexes: reading block [283:0] [ 222.225079][ T6655] SQUASHFS error: Failed to read block 0x0: -5 [ 222.231409][ T6657] SQUASHFS error: Failed to read block 0x0: -5 [ 222.237460][ T6655] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.244805][ T6657] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.252093][ T6655] SQUASHFS error: read_indexes: reading block [283:0] [ 222.252138][ T6655] SQUASHFS error: Failed to read block 0x0: -5 [ 222.252218][ T6655] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.252228][ T6655] SQUASHFS error: read_indexes: reading block [283:0] [ 222.252268][ T6655] SQUASHFS error: Failed to read block 0x0: -5 [ 222.252320][ T6655] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.252330][ T6655] SQUASHFS error: read_indexes: reading block [283:0] [ 222.252370][ T6655] SQUASHFS error: Failed to read block 0x0: -5 [ 222.252417][ T6655] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.252428][ T6655] SQUASHFS error: read_indexes: reading block [283:0] [ 222.252470][ T6655] SQUASHFS error: Failed to read block 0x0: -5 [ 222.252528][ T6655] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.252537][ T6655] SQUASHFS error: read_indexes: reading block [283:0] [ 222.252569][ T6655] SQUASHFS error: Failed to read block 0x0: -5 [ 222.252643][ T6655] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.252652][ T6655] SQUASHFS error: read_indexes: reading block [283:0] [ 222.252687][ T6655] SQUASHFS error: Failed to read block 0x0: -5 [ 222.253510][ T6655] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.260354][ T6657] SQUASHFS error: read_indexes: reading block [283:0] [ 222.267051][ T6655] SQUASHFS error: read_indexes: reading block [283:0] [ 222.273322][ T6657] SQUASHFS error: Failed to read block 0x0: -5 [ 222.280082][ T6655] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.287465][ T6657] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.294772][ T6655] SQUASHFS error: read_indexes: reading block [283:0] [ 222.301567][ T6657] SQUASHFS error: read_indexes: reading block [283:0] [ 222.308186][ T6655] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.315338][ T6657] SQUASHFS error: Failed to read block 0x0: -5 [ 222.322109][ T6655] SQUASHFS error: read_indexes: reading block [283:0] [ 222.328240][ T6657] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.336049][ T6655] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.342416][ T6657] SQUASHFS error: read_indexes: reading block [283:0] [ 222.348460][ T6655] SQUASHFS error: read_indexes: reading block [283:0] [ 222.383658][ T28] audit: type=1800 audit(1790280394.904:21): pid=6657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.170" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 222.390324][ T6657] SQUASHFS error: Failed to read block 0x0: -5 [ 222.541678][ T6657] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.548982][ T6657] SQUASHFS error: read_indexes: reading block [283:0] [ 222.555978][ T6657] SQUASHFS error: Failed to read block 0x0: -5 [ 222.563122][ T6657] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.570546][ T6657] SQUASHFS error: read_indexes: reading block [283:0] [ 222.577382][ T6657] SQUASHFS error: Failed to read block 0x0: -5 [ 222.583679][ T6657] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.591949][ T6657] SQUASHFS error: read_indexes: reading block [283:0] [ 222.599463][ T6657] SQUASHFS error: Failed to read block 0x0: -5 [ 222.605803][ T6657] SQUASHFS error: Unable to read metadata cache entry [283] [ 222.613166][ T6657] SQUASHFS error: read_indexes: reading block [283:0] [ 229.782557][ T6705] loop0: detected capacity change from 0 to 1024 [ 231.167006][ T6712] loop1: detected capacity change from 0 to 512 [ 231.193061][ T6712] EXT4-fs (loop1): Test dummy encryption mode enabled [ 231.200095][ T6712] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 231.238758][ T6712] EXT4-fs (loop1): 1 truncate cleaned up [ 231.251278][ T6712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.988445][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.970393][ T6735] loop1: detected capacity change from 0 to 1024 [ 237.994694][ T6746] netlink: 32 bytes leftover after parsing attributes in process `syz.3.189'. [ 238.574319][ T6758] Zero length message leads to an empty skb [ 240.938763][ T6770] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 240.947546][ T6770] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 240.956377][ T6770] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 241.096016][ T6774] Cannot find set identified by id 0 to match [ 244.882857][ T6791] loop0: detected capacity change from 0 to 32768 [ 247.221721][ T6790] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong [ 247.221721][ T6790] [ 247.241052][ T6790] ERROR: (device loop0): remounting filesystem as read-only [ 247.248449][ T6790] ialloc: diAlloc returned -5! [ 248.281545][ T6801] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 251.295312][ T6819] netlink: 32 bytes leftover after parsing attributes in process `syz.1.203'. [ 251.544970][ T6819] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 252.387722][ T2930] rtrs_client L2018: : CM error (CM event: address error, err: -19) [ 252.413667][ T6819] rtrs_client L2618: : init_conns() failed: err=-113 path=@ip:27.0.0.1 [:0] [ 255.760532][ T6845] loop0: detected capacity change from 0 to 512 [ 255.803928][ T6845] EXT4-fs (loop0): Test dummy encryption mode enabled [ 255.810936][ T6845] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 255.940627][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.947014][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.052643][ T6845] EXT4-fs (loop0): 1 truncate cleaned up [ 256.064366][ T6845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.641178][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.440861][ T6884] netlink: 36 bytes leftover after parsing attributes in process `syz.0.219'. [ 266.338223][ T6901] loop1: detected capacity change from 0 to 256 [ 266.455459][ T6901] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 267.737103][ T6901] bio_check_eod: 1515 callbacks suppressed [ 267.737118][ T6901] syz.1.226: attempt to access beyond end of device [ 267.737118][ T6901] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 267.810834][ T6901] syz.1.226: attempt to access beyond end of device [ 267.810834][ T6901] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 267.900221][ T28] audit: type=1800 audit(1790280440.674:22): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.226" name="file1" dev="loop1" ino=1048642 res=0 errno=0 [ 268.131061][ T6901] syz.1.226: attempt to access beyond end of device [ 268.131061][ T6901] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 268.162566][ T6901] syz.1.226: attempt to access beyond end of device [ 268.162566][ T6901] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 268.193751][ T6901] syz.1.226: attempt to access beyond end of device [ 268.193751][ T6901] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 268.225109][ T6900] syz.1.226: attempt to access beyond end of device [ 268.225109][ T6900] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 268.253001][ T6901] syz.1.226: attempt to access beyond end of device [ 268.253001][ T6901] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 268.273351][ T6900] syz.1.226: attempt to access beyond end of device [ 268.273351][ T6900] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 269.524228][ T6900] syz.1.226: attempt to access beyond end of device [ 269.524228][ T6900] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 272.851411][ T6928] syzkaller0: entered promiscuous mode [ 272.909490][ T6928] syzkaller0: entered allmulticast mode [ 273.217570][ T6930] tipc: Started in network mode [ 273.305598][ T6930] tipc: Node identity b69cc1628d43, cluster identity 4711 [ 273.365109][ T6930] tipc: Enabled bearer , priority 0 [ 273.428138][ T6928] tipc: Resetting bearer [ 273.496970][ T6927] tipc: Resetting bearer [ 273.561159][ T6927] tipc: Disabling bearer [ 273.945871][ T6938] loop2: detected capacity change from 0 to 512 [ 276.118179][ T6938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.080344][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.292698][ T6956] loop2: detected capacity change from 0 to 128 [ 278.024940][ T6962] loop1: detected capacity change from 0 to 512 [ 278.241693][ T6962] EXT4-fs (loop1): Test dummy encryption mode enabled [ 278.248622][ T6962] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 278.285586][ T6962] EXT4-fs (loop1): 1 truncate cleaned up [ 278.292726][ T6962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.554422][ T6968] loop2: detected capacity change from 0 to 256 [ 278.663237][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.687318][ T6968] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 278.730859][ T6968] syz.2.237: attempt to access beyond end of device [ 278.730859][ T6968] loop2: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 279.985009][ T6968] syz.2.237: attempt to access beyond end of device [ 279.985009][ T6968] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 280.031742][ T28] audit: type=1800 audit(1790280452.804:23): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.237" name="file1" dev="loop2" ino=1048645 res=0 errno=0 [ 280.167527][ T6968] syz.2.237: attempt to access beyond end of device [ 280.167527][ T6968] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 280.212989][ T6968] syz.2.237: attempt to access beyond end of device [ 280.212989][ T6968] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 280.240620][ T6967] syz.2.237: attempt to access beyond end of device [ 280.240620][ T6967] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 280.262572][ T6975] loop3: detected capacity change from 0 to 256 [ 280.298910][ T6968] syz.2.237: attempt to access beyond end of device [ 280.298910][ T6968] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 280.349229][ T6975] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 280.383828][ T6968] syz.2.237: attempt to access beyond end of device [ 280.383828][ T6968] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 280.432651][ T6977] syz.1.238: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 280.448538][ T6977] CPU: 0 PID: 6977 Comm: syz.1.238 Not tainted syzkaller #0 [ 280.455865][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.465960][ T6977] Call Trace: [ 280.469345][ T6977] [ 280.472307][ T6977] dump_stack_lvl+0x18c/0x250 [ 280.477021][ T6977] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 280.482692][ T6977] ? show_regs_print_info+0x20/0x20 [ 280.487934][ T6977] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 280.493604][ T6977] ? dump_stack+0x9/0x20 [ 280.497875][ T6977] warn_alloc+0x246/0x340 [ 280.502230][ T6977] ? zone_watermark_ok_safe+0x230/0x230 [ 280.507822][ T6977] __vmalloc_node_range+0x129/0x1320 [ 280.513141][ T6977] ? __mutex_trylock_common+0x160/0x270 [ 280.518711][ T6977] ? trace_raw_output_contention_end+0xd0/0xd0 [ 280.524896][ T6977] ? rcu_is_watching+0x15/0xb0 [ 280.529778][ T6977] ? trace_contention_end+0x39/0xe0 [ 280.534999][ T6977] ? __mutex_lock+0x30d/0xc80 [ 280.539709][ T6977] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 280.545376][ T6977] ? free_vm_area+0x50/0x50 [ 280.549908][ T6977] ? dvb_demux_do_ioctl+0x317/0x530 [ 280.555134][ T6977] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 280.560633][ T6977] ? mutex_lock_nested+0x20/0x20 [ 280.565591][ T6977] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 280.571437][ T6977] vmalloc+0x79/0x90 [ 280.575365][ T6977] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 280.581294][ T6977] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 280.586974][ T6977] dvb_demux_do_ioctl+0x454/0x530 [ 280.592030][ T6977] dvb_usercopy+0x195/0x2b0 [ 280.596600][ T6977] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 280.602228][ T6977] ? dvb_generic_ioctl+0xb0/0xb0 [ 280.607211][ T6977] ? tomoyo_file_ioctl+0x11/0x30 [ 280.612186][ T6977] ? dvb_demux_poll+0x210/0x210 [ 280.617068][ T6977] dvb_demux_ioctl+0x29/0x30 [ 280.621699][ T6977] __se_sys_ioctl+0xfd/0x170 [ 280.626321][ T6977] do_syscall_64+0x55/0xb0 [ 280.630760][ T6977] ? clear_bhb_loop+0x40/0x90 [ 280.635457][ T6977] ? clear_bhb_loop+0x40/0x90 [ 280.640156][ T6977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.646090][ T6977] RIP: 0033:0x7f2a18f9e159 [ 280.650530][ T6977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.670160][ T6977] RSP: 002b:00007f2a19f34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.678596][ T6977] RAX: ffffffffffffffda RBX: 00007f2a19226090 RCX: 00007f2a18f9e159 [ 280.686593][ T6977] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 280.694590][ T6977] RBP: 00007f2a1903506b R08: 0000000000000000 R09: 0000000000000000 [ 280.702610][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.710598][ T6977] R13: 00007f2a19226128 R14: 00007f2a19226090 R15: 00007fffe8111158 [ 280.718608][ T6977] [ 280.736562][ T6977] Mem-Info: [ 280.740179][ T6977] active_anon:31728 inactive_anon:0 isolated_anon:0 [ 280.740179][ T6977] active_file:18164 inactive_file:40388 isolated_file:0 [ 280.740179][ T6977] unevictable:777 dirty:306 writeback:0 [ 280.740179][ T6977] slab_reclaimable:11111 slab_unreclaimable:90609 [ 280.740179][ T6977] mapped:25723 shmem:27107 pagetables:628 [ 280.740179][ T6977] sec_pagetables:0 bounce:0 [ 280.740179][ T6977] kernel_misc_reclaimable:0 [ 280.740179][ T6977] free:1316159 free_pcp:13814 free_cma:0 [ 280.786369][ T6977] Node 0 active_anon:126912kB inactive_anon:0kB active_file:72656kB inactive_file:161348kB unevictable:1572kB isolated(anon):0kB isolated(file):0kB mapped:102892kB dirty:1220kB writeback:0kB shmem:106892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11044kB pagetables:2512kB sec_pagetables:0kB all_unreclaimable? no [ 280.819525][ T6977] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 280.850515][ T6977] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 280.878345][ T6977] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 280.884753][ T6977] Node 0 DMA32 free:1358116kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:126872kB inactive_anon:0kB active_file:72656kB inactive_file:160516kB unevictable:1572kB writepending:1220kB present:3129332kB managed:2586800kB mlocked:36kB bounce:0kB free_pcp:34328kB local_pcp:13596kB free_cma:0kB [ 280.915986][ T6977] lowmem_reserve[]: 0 0 0 0 0 [ 280.921091][ T6977] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 280.948118][ T6977] lowmem_reserve[]: 0 0 0 0 0 [ 280.953232][ T6977] Node 1 Normal free:3891160kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20928kB local_pcp:13824kB free_cma:0kB [ 280.983473][ T6977] lowmem_reserve[]: 0 0 0 0 0 [ 280.988530][ T6977] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 281.002010][ T6977] Node 0 DMA32: 1264*4kB (UME) 859*8kB (UME) 552*16kB (UME) 617*32kB (UME) 152*64kB (UME) 182*128kB (UME) 168*256kB (UME) 87*512kB (UM) 21*1024kB (UM) 10*2048kB (M) 282*4096kB (UM) = 1358136kB [ 281.022378][ T6977] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 281.034444][ T6977] Node 1 Normal: 260*4kB (UME) 47*8kB (UME) 43*16kB (UME) 95*32kB (UME) 31*64kB (UME) 6*128kB (UE) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 1*2048kB (U) 947*4096kB (M) = 3891160kB [ 281.053094][ T6977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.068481][ T6977] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 281.078080][ T6977] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.087880][ T6977] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 281.097429][ T6977] 85371 total pagecache pages [ 281.102291][ T6977] 0 pages in swap cache [ 281.106653][ T6977] Free swap = 124704kB [ 281.111004][ T6977] Total swap = 124996kB [ 281.149992][ T6967] syz.2.237: attempt to access beyond end of device [ 281.149992][ T6967] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 281.219122][ T6968] syz.2.237: attempt to access beyond end of device [ 281.219122][ T6968] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 281.251800][ T6967] syz.2.237: attempt to access beyond end of device [ 281.251800][ T6967] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 281.388473][ T6977] 2097051 pages RAM [ 281.395688][ T28] audit: type=1800 audit(1790280454.154:24): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.241" name="file1" dev="loop3" ino=1048647 res=0 errno=0 [ 281.437786][ T6977] 0 pages HighMem/MovableOnly [ 281.450172][ T6977] 416965 pages reserved [ 281.516067][ T6977] 0 pages cma reserved [ 285.383313][ T6998] loop0: detected capacity change from 0 to 512 [ 285.441758][ T6998] EXT4-fs (loop0): Test dummy encryption mode enabled [ 285.448587][ T6998] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 285.508671][ T6991] syzkaller0: entered promiscuous mode [ 285.540972][ T6991] syzkaller0: entered allmulticast mode [ 285.615388][ T6998] EXT4-fs (loop0): 1 truncate cleaned up [ 285.629160][ T6991] tipc: Started in network mode [ 285.641099][ T6998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.669350][ T6991] tipc: Node identity 3ac0b97d1cd4, cluster identity 4711 [ 285.797169][ T5781] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 285.807329][ T5781] CPU: 0 PID: 5781 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 285.814908][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.825176][ T5781] Workqueue: hci3 hci_rx_work [ 285.829890][ T5781] Call Trace: [ 285.833185][ T5781] [ 285.836221][ T5781] dump_stack_lvl+0x18c/0x250 [ 285.840935][ T5781] ? show_regs_print_info+0x20/0x20 [ 285.846169][ T5781] ? load_image+0x420/0x420 [ 285.850717][ T5781] sysfs_create_dir_ns+0x26e/0x2a0 [ 285.855850][ T5781] ? __lock_acquire+0x7d80/0x7d80 [ 285.860896][ T5781] ? sysfs_warn_dup+0xa0/0xa0 [ 285.865596][ T5781] ? do_raw_spin_unlock+0x121/0x230 [ 285.870908][ T5781] kobject_add_internal+0x617/0xc90 [ 285.876138][ T5781] kobject_add+0x164/0x240 [ 285.880581][ T5781] ? preempt_schedule_thunk+0x1a/0x30 [ 285.885984][ T5781] ? kobject_init+0x1d0/0x1d0 [ 285.890693][ T5781] ? get_device_parent+0x366/0x390 [ 285.895851][ T5781] device_add+0x3fa/0xc40 [ 285.900216][ T5781] hci_conn_add_sysfs+0xd5/0x1e0 [ 285.905218][ T5781] le_conn_complete_evt+0xe9a/0x1480 [ 285.910539][ T5781] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 285.916813][ T5781] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 285.922556][ T5781] ? mutex_unlock+0x10/0x10 [ 285.927071][ T5781] ? skb_pull_data+0xf0/0x1f0 [ 285.931793][ T5781] hci_le_conn_complete_evt+0x187/0x440 [ 285.937384][ T5781] ? hci_remote_host_features_evt+0x150/0x150 [ 285.943480][ T5781] hci_event_packet+0x7b4/0x1280 [ 285.948443][ T5781] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 285.954104][ T5781] ? bis_list+0x290/0x290 [ 285.958464][ T5781] ? kcov_remote_start+0x1b7/0x810 [ 285.963607][ T5781] ? hci_send_to_monitor+0xd7/0x4f0 [ 285.968861][ T5781] hci_rx_work+0x43a/0xd60 [ 285.973319][ T5781] ? process_scheduled_works+0x975/0x1600 [ 285.979083][ T5781] process_scheduled_works+0xa60/0x1600 [ 285.984687][ T5781] ? worker_attach_to_pool+0x370/0x370 [ 285.990185][ T5781] ? assign_work+0x3cc/0x5d0 [ 285.994808][ T5781] worker_thread+0xa5e/0xfe0 [ 285.999456][ T5781] kthread+0x2fa/0x390 [ 286.003539][ T5781] ? pr_cont_work+0x550/0x550 [ 286.008244][ T5781] ? kthread_blkcg+0xd0/0xd0 [ 286.012854][ T5781] ret_from_fork+0x48/0x80 [ 286.017291][ T5781] ? kthread_blkcg+0xd0/0xd0 [ 286.021903][ T5781] ret_from_fork_asm+0x11/0x20 [ 286.026706][ T5781] [ 286.036195][ T5781] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 286.050710][ T5781] Bluetooth: hci3: failed to register connection device [ 286.162103][ T6991] tipc: Enabled bearer , priority 0 [ 286.216638][ T6991] tipc: Resetting bearer [ 286.263453][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.278184][ T6990] tipc: Resetting bearer [ 286.367475][ T6990] tipc: Disabling bearer [ 286.737913][ T7011] sctp: [Deprecated]: syz.0.249 (pid 7011) Use of int in max_burst socket option deprecated. [ 286.737913][ T7011] Use struct sctp_assoc_value instead [ 288.176498][ T7020] loop0: detected capacity change from 0 to 256 [ 288.506997][ T7020] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 288.625433][ T7024] gadgetfs: bound to dummy_udc driver [ 288.948527][ T7020] bio_check_eod: 3291 callbacks suppressed [ 288.948543][ T7020] syz.0.251: attempt to access beyond end of device [ 288.948543][ T7020] loop0: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 288.991923][ T7022] loop1: detected capacity change from 0 to 256 [ 288.994588][ T7020] syz.0.251: attempt to access beyond end of device [ 288.994588][ T7020] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 289.011661][ T7022] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 289.118964][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 289.140133][ T5815] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 289.931394][ T7028] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:1": -EINTR [ 289.950139][ T28] audit: type=1800 audit(1790280462.724:25): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.251" name="file1" dev="loop0" ino=1048649 res=0 errno=0 [ 289.986302][ C0] gadgetfs: connected [ 289.990208][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 290.004737][ T7020] syz.0.251: attempt to access beyond end of device [ 290.004737][ T7020] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 290.050011][ T7020] syz.0.251: attempt to access beyond end of device [ 290.050011][ T7020] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 290.075815][ T7022] syz.1.252: attempt to access beyond end of device [ 290.075815][ T7022] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 290.084225][ T5815] gadgetfs: disconnected [ 290.091614][ T7022] syz.1.252: attempt to access beyond end of device [ 290.091614][ T7022] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 290.116770][ T28] audit: type=1800 audit(1790280462.874:26): pid=7022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.252" name="file1" dev="loop1" ino=1048651 res=0 errno=0 [ 290.121855][ T7020] syz.0.251: attempt to access beyond end of device [ 290.121855][ T7020] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 290.202003][ T7031] syz.1.252: attempt to access beyond end of device [ 290.202003][ T7031] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 290.223770][ T7019] syz.0.251: attempt to access beyond end of device [ 290.223770][ T7019] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 290.280018][ T7019] syz.0.251: attempt to access beyond end of device [ 290.280018][ T7019] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 290.340114][ C0] gadgetfs: connected [ 290.347912][ T5815] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 290.402308][ T5815] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 291.346858][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.355194][ T9] libceph: connect (1)[c::]:6789 error -101 [ 291.385638][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 291.411393][ C0] gadgetfs: configuration #1 [ 291.494387][ T7034] ceph: No mds server is up or the cluster is laggy [ 291.510198][ T9] libceph: connect (1)[c::]:6789 error -101 [ 291.542199][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 291.779115][ T7041] loop1: detected capacity change from 0 to 256 [ 292.159971][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 294.680102][ T7050] FAULT_INJECTION: forcing a failure. [ 294.680102][ T7050] name failslab, interval 1, probability 0, space 0, times 1 [ 294.693509][ T7050] CPU: 0 PID: 7050 Comm: syz.0.259 Not tainted syzkaller #0 [ 294.700817][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.710880][ T7050] Call Trace: [ 294.714165][ T7050] [ 294.717102][ T7050] dump_stack_lvl+0x18c/0x250 [ 294.721798][ T7050] ? show_regs_print_info+0x20/0x20 [ 294.727009][ T7050] ? load_image+0x420/0x420 [ 294.731518][ T7050] ? __might_sleep+0xe0/0xe0 [ 294.736117][ T7050] ? __lock_acquire+0x7d80/0x7d80 [ 294.741148][ T7050] should_fail_ex+0x394/0x4c0 [ 294.745838][ T7050] should_failslab+0x9/0x20 [ 294.750360][ T7050] slab_pre_alloc_hook+0x59/0x300 [ 294.755494][ T7050] kmem_cache_alloc+0x5a/0x2c0 [ 294.760266][ T7050] ? ptlock_alloc+0x20/0x70 [ 294.764776][ T7050] ptlock_alloc+0x20/0x70 [ 294.769150][ T7050] pte_alloc_one+0xcc/0x540 [ 294.773834][ T7050] ? pfn_modify_allowed+0x560/0x560 [ 294.779043][ T7050] ? __pud_alloc+0x200/0x200 [ 294.783644][ T7050] __pte_alloc+0x22/0x2a0 [ 294.787993][ T7050] handle_mm_fault+0x3dc6/0x4a50 [ 294.793022][ T7050] ? handle_mm_fault+0xe6/0x4a50 [ 294.797970][ T7050] ? numa_migrate_prep+0x350/0x350 [ 294.803111][ T7050] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 294.808437][ T7050] do_user_addr_fault+0x736/0x12d0 [ 294.813578][ T7050] exc_page_fault+0x64/0x100 [ 294.818173][ T7050] asm_exc_page_fault+0x26/0x30 [ 294.823053][ T7050] RIP: 0010:rep_movs_alternative+0x13/0x90 [ 294.828871][ T7050] Code: b6 48 8b 1c 24 4c 8b 64 24 08 48 83 c4 10 c3 cc cc cc cc cc cc cc cc f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 [ 294.848487][ T7050] RSP: 0018:ffffc90003437d90 EFLAGS: 00050202 [ 294.854562][ T7050] RAX: ffffffff84342b01 RBX: 0000000000000004 RCX: 0000000000000004 [ 294.862538][ T7050] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90003437e20 [ 294.870553][ T7050] RBP: ffffc90003437ea0 R08: 0000000000000003 R09: 0000000000000004 [ 294.878532][ T7050] R10: dffffc0000000000 R11: fffff52000686fc4 R12: 0000000000000004 [ 294.886513][ T7050] R13: ffffc90003437e20 R14: ffffc90003437e20 R15: 0000000000000000 [ 294.894497][ T7050] ? rcuref_put_slowpath+0x101/0x150 [ 294.899796][ T7050] _copy_from_user+0x8b/0xe0 [ 294.904399][ T7050] do_sock_getsockopt+0x188/0x450 [ 294.909432][ T7050] ? __ia32_sys_setsockopt+0x200/0x200 [ 294.914980][ T7050] ? warn_bogus_irq_restore+0x20/0x30 [ 294.920379][ T7050] __x64_sys_getsockopt+0x1d6/0x280 [ 294.925625][ T7050] ? warn_bogus_irq_restore+0x20/0x30 [ 294.931032][ T7050] ? warn_bogus_irq_restore+0x20/0x30 [ 294.936408][ T7050] do_syscall_64+0x55/0xb0 [ 294.940829][ T7050] ? clear_bhb_loop+0x40/0x90 [ 294.945514][ T7050] ? clear_bhb_loop+0x40/0x90 [ 294.950214][ T7050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.956122][ T7050] RIP: 0033:0x7fe77e79e159 [ 294.960539][ T7050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.980160][ T7050] RSP: 002b:00007fe77f65c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 294.988593][ T7050] RAX: ffffffffffffffda RBX: 00007fe77ea26090 RCX: 00007fe77e79e159 [ 294.996572][ T7050] RDX: 000000000000004c RSI: 0000000000000029 RDI: 0000000000000005 [ 295.004553][ T7050] RBP: 00007fe77e83506b R08: 0000000000000000 R09: 0000000000000000 [ 295.012612][ T7050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.020588][ T7050] R13: 00007fe77ea26128 R14: 00007fe77ea26090 R15: 00007ffdf115e698 [ 295.028575][ T7050] [ 298.888131][ T7066] process 'syz.1.265' launched '/dev/fd/4' with NULL argv: empty string added [ 299.634074][ T7068] loop1: detected capacity change from 0 to 256 [ 299.714197][ T7068] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 299.792860][ T7068] bio_check_eod: 830 callbacks suppressed [ 299.792875][ T7068] syz.1.266: attempt to access beyond end of device [ 299.792875][ T7068] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 299.870331][ T7068] syz.1.266: attempt to access beyond end of device [ 299.870331][ T7068] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 299.976237][ T28] audit: type=1800 audit(1790280472.734:27): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.266" name="file1" dev="loop1" ino=1048654 res=0 errno=0 [ 300.604322][ T7072] syz.1.266: attempt to access beyond end of device [ 300.604322][ T7072] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 300.676088][ T7067] syz.1.266: attempt to access beyond end of device [ 300.676088][ T7067] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 300.698415][ T7072] syz.1.266: attempt to access beyond end of device [ 300.698415][ T7072] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 300.753220][ T7067] syz.1.266: attempt to access beyond end of device [ 300.753220][ T7067] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 300.777443][ T7072] syz.1.266: attempt to access beyond end of device [ 300.777443][ T7072] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 302.030770][ T7067] syz.1.266: attempt to access beyond end of device [ 302.030770][ T7067] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 302.094661][ T7067] syz.1.266: attempt to access beyond end of device [ 302.094661][ T7067] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 302.170085][ T7067] syz.1.266: attempt to access beyond end of device [ 302.170085][ T7067] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 303.758430][ T7023] gadgetfs: suspended from state 3 [ 303.782417][ T5817] usb 1-1: USB disconnect, device number 2 [ 303.802042][ T7023] gadgetfs: disconnected [ 303.811011][ T5774] ================================================================== [ 303.819106][ T5774] BUG: KASAN: slab-use-after-free in __mutex_lock+0xfc/0xc80 [ 303.826503][ T5774] Read of size 8 at addr ffff88801f3ae460 by task syz-executor/5774 [ 303.834493][ T5774] [ 303.836806][ T5774] CPU: 0 PID: 5774 Comm: syz-executor Not tainted syzkaller #0 [ 303.844333][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.854394][ T5774] Call Trace: [ 303.857671][ T5774] [ 303.860593][ T5774] dump_stack_lvl+0x18c/0x250 [ 303.865272][ T5774] ? __lock_acquire+0x7d80/0x7d80 [ 303.870314][ T5774] ? show_regs_print_info+0x20/0x20 [ 303.875538][ T5774] ? load_image+0x420/0x420 [ 303.880028][ T5774] ? __virt_addr_valid+0x10c/0x380 [ 303.885129][ T5774] ? __virt_addr_valid+0x10c/0x380 [ 303.890223][ T5774] ? __virt_addr_valid+0x10c/0x380 [ 303.895314][ T5774] print_report+0xa8/0x210 [ 303.899718][ T5774] ? __mutex_lock+0xfc/0xc80 [ 303.904299][ T5774] kasan_report+0x117/0x150 [ 303.908785][ T5774] ? tomoyo_check_open_permission+0x384/0x460 [ 303.914839][ T5774] ? __mutex_lock+0xfc/0xc80 [ 303.919408][ T5774] __mutex_lock+0xfc/0xc80 [ 303.923823][ T5774] ? end_current_label_crit_section+0x170/0x170 [ 303.930052][ T5774] ? ep_open+0x4e/0x270 [ 303.934220][ T5774] ? mutex_lock_nested+0x20/0x20 [ 303.939167][ T5774] ? apparmor_file_open+0x5ab/0x760 [ 303.944378][ T5774] ? apparmor_inode_getattr+0x2c0/0x2c0 [ 303.949928][ T5774] ? __rwlock_init+0x150/0x150 [ 303.954700][ T5774] ep_open+0x4e/0x270 [ 303.958683][ T5774] ? do_dentry_open+0x86f/0x14b0 [ 303.963618][ T5774] do_dentry_open+0x880/0x14b0 [ 303.968364][ T5774] ? ep_ioctl+0x1c0/0x1c0 [ 303.972684][ T5774] path_openat+0x284f/0x3270 [ 303.977286][ T5774] ? do_sys_openat2+0xda/0x1d0 [ 303.982056][ T5774] ? __x64_sys_openat+0x139/0x160 [ 303.987101][ T5774] ? verify_lock_unused+0x140/0x140 [ 303.992307][ T5774] ? do_filp_open+0x430/0x430 [ 303.996996][ T5774] do_filp_open+0x1f2/0x430 [ 304.001509][ T5774] ? vfs_tmpfile+0x620/0x620 [ 304.006117][ T5774] ? _raw_spin_unlock+0x28/0x40 [ 304.010975][ T5774] ? alloc_fd+0x590/0x640 [ 304.015322][ T5774] do_sys_openat2+0x134/0x1d0 [ 304.020008][ T5774] ? do_sys_open+0xe0/0xe0 [ 304.024433][ T5774] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 304.030416][ T5774] ? fsnotify_link_count+0xf0/0xf0 [ 304.035534][ T5774] ? lock_chain_count+0x20/0x20 [ 304.040394][ T5774] __x64_sys_openat+0x139/0x160 [ 304.045254][ T5774] do_syscall_64+0x55/0xb0 [ 304.049675][ T5774] ? clear_bhb_loop+0x40/0x90 [ 304.054365][ T5774] ? clear_bhb_loop+0x40/0x90 [ 304.059047][ T5774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.064957][ T5774] RIP: 0033:0x7fd29795e98e [ 304.069374][ T5774] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 304.089000][ T5774] RSP: 002b:00007ffc16b90448 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 304.097435][ T5774] RAX: ffffffffffffffda RBX: 000055557901d500 RCX: 00007fd29795e98e [ 304.105423][ T5774] RDX: 0000000000000000 RSI: 00007ffc16b905b0 RDI: ffffffffffffff9c [ 304.113406][ T5774] RBP: 00007ffc16b905b0 R08: 0000000000000000 R09: 0000000000000000 [ 304.121382][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc16b916a0 [ 304.129359][ T5774] R13: 00007fd297a344bb R14: 000055557901d4e8 R15: 0000000000000006 [ 304.137345][ T5774] [ 304.140368][ T5774] [ 304.142684][ T5774] Allocated by task 7024: [ 304.147005][ T5774] kasan_set_track+0x4e/0x70 [ 304.151603][ T5774] __kasan_kmalloc+0x8f/0xa0 [ 304.156197][ T5774] gadgetfs_bind+0x25f/0x830 [ 304.160788][ T5774] gadget_bind_driver+0x2b3/0x770 [ 304.165833][ T5774] really_probe+0x247/0xae0 [ 304.170353][ T5774] __driver_probe_device+0x1f5/0x390 [ 304.175639][ T5774] driver_probe_device+0x4f/0x420 [ 304.180661][ T5774] __driver_attach+0x444/0x6d0 [ 304.185426][ T5774] bus_for_each_dev+0x235/0x2b0 [ 304.190284][ T5774] bus_add_driver+0x340/0x630 [ 304.194967][ T5774] driver_register+0x23a/0x310 [ 304.199728][ T5774] usb_gadget_register_driver_owner+0xf9/0x270 [ 304.205890][ T5774] dev_config+0xe49/0x1260 [ 304.210320][ T5774] vfs_write+0x299/0x9a0 [ 304.214574][ T5774] ksys_write+0x151/0x260 [ 304.218908][ T5774] do_syscall_64+0x55/0xb0 [ 304.223324][ T5774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.229203][ T5774] [ 304.231520][ T5774] Freed by task 7023: [ 304.235493][ T5774] kasan_set_track+0x4e/0x70 [ 304.240093][ T5774] kasan_save_free_info+0x28/0x40 [ 304.245119][ T5774] ____kasan_slab_free+0x126/0x1f0 [ 304.250233][ T5774] slab_free_freelist_hook+0x130/0x1a0 [ 304.255690][ T5774] __kmem_cache_free+0xba/0x1f0 [ 304.260532][ T5774] destroy_ep_files+0x280/0x340 [ 304.265390][ T5774] gadgetfs_unbind+0x109/0x2b0 [ 304.270143][ T5774] gadget_unbind_driver+0x1bf/0x3e0 [ 304.275343][ T5774] device_release_driver_internal+0x408/0x6f0 [ 304.281398][ T5774] driver_detach+0x1f3/0x2d0 [ 304.285978][ T5774] bus_remove_driver+0x221/0x2f0 [ 304.290899][ T5774] usb_gadget_unregister_driver+0x4e/0x70 [ 304.296615][ T5774] dev_release+0x86/0x200 [ 304.301015][ T5774] __fput+0x221/0x940 [ 304.304986][ T5774] task_work_run+0x1d4/0x260 [ 304.309565][ T5774] do_exit+0x986/0x2530 [ 304.313726][ T5774] do_group_exit+0x22d/0x2f0 [ 304.318312][ T5774] get_signal+0x12a6/0x1390 [ 304.322824][ T5774] arch_do_signal_or_restart+0xc2/0x7b0 [ 304.328354][ T5774] exit_to_user_mode_loop+0x70/0x110 [ 304.333623][ T5774] exit_to_user_mode_prepare+0xee/0x180 [ 304.339164][ T5774] irqentry_exit_to_user_mode+0x9/0x30 [ 304.344619][ T5774] exc_page_fault+0x8c/0x100 [ 304.349196][ T5774] asm_exc_page_fault+0x26/0x30 [ 304.354040][ T5774] [ 304.356343][ T5774] Last potentially related work creation: [ 304.362050][ T5774] kasan_save_stack+0x3e/0x60 [ 304.366707][ T5774] __kasan_record_aux_stack+0xaf/0xc0 [ 304.372078][ T5774] insert_work+0x3d/0x310 [ 304.376395][ T5774] __queue_work+0xcf4/0xfd0 [ 304.380877][ T5774] call_timer_fn+0x189/0x540 [ 304.385446][ T5774] __run_timers+0x59c/0x810 [ 304.389929][ T5774] run_timer_softirq+0x67/0xf0 [ 304.394684][ T5774] handle_softirqs+0x27d/0x820 [ 304.399452][ T5774] __irq_exit_rcu+0xd3/0x190 [ 304.404022][ T5774] irq_exit_rcu+0x9/0x20 [ 304.408246][ T5774] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 304.413858][ T5774] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 304.419826][ T5774] [ 304.422137][ T5774] The buggy address belongs to the object at ffff88801f3ae400 [ 304.422137][ T5774] which belongs to the cache kmalloc-512 of size 512 [ 304.436167][ T5774] The buggy address is located 96 bytes inside of [ 304.436167][ T5774] freed 512-byte region [ffff88801f3ae400, ffff88801f3ae600) [ 304.449865][ T5774] [ 304.452178][ T5774] The buggy address belongs to the physical page: [ 304.458573][ T5774] page:ffffea00007ceb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f3ac [ 304.468702][ T5774] head:ffffea00007ceb00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 304.477612][ T5774] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 304.486000][ T5774] page_type: 0xffffffff() [ 304.490319][ T5774] raw: 00fff00000000840 ffff888017c41c80 0000000000000000 dead000000000001 [ 304.498887][ T5774] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 304.507470][ T5774] page dumped because: kasan: bad access detected [ 304.513874][ T5774] page_owner tracks the page as allocated [ 304.519585][ T5774] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 648, tgid 648 (kworker/u4:4), ts 6139776035, free_ts 0 [ 304.539800][ T5774] post_alloc_hook+0x1c1/0x200 [ 304.544579][ T5774] get_page_from_freelist+0x2181/0x22a0 [ 304.550116][ T5774] __alloc_pages+0x1f0/0x460 [ 304.554694][ T5774] alloc_slab_page+0x5d/0x180 [ 304.559373][ T5774] new_slab+0x87/0x2d0 [ 304.563430][ T5774] ___slab_alloc+0xc5c/0x12f0 [ 304.568085][ T5774] __kmem_cache_alloc_node+0x11f/0x250 [ 304.573530][ T5774] kmalloc_trace+0x2a/0xe0 [ 304.577932][ T5774] alloc_bprm+0x56/0x9a0 [ 304.582181][ T5774] kernel_execve+0x98/0x980 [ 304.586686][ T5774] call_usermodehelper_exec_async+0x20b/0x350 [ 304.592745][ T5774] ret_from_fork+0x48/0x80 [ 304.597176][ T5774] ret_from_fork_asm+0x11/0x20 [ 304.601928][ T5774] page_owner free stack trace missing [ 304.607288][ T5774] [ 304.609589][ T5774] Memory state around the buggy address: [ 304.615226][ T5774] ffff88801f3ae300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 304.623274][ T5774] ffff88801f3ae380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 304.631324][ T5774] >ffff88801f3ae400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 304.639367][ T5774] ^ [ 304.646544][ T5774] ffff88801f3ae480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 304.654592][ T5774] ffff88801f3ae500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 304.662648][ T5774] ================================================================== [ 304.690503][ T5774] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 304.697747][ T5774] CPU: 0 PID: 5774 Comm: syz-executor Not tainted syzkaller #0 [ 304.705302][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.715369][ T5774] Call Trace: [ 304.718642][ T5774] [ 304.721572][ T5774] dump_stack_lvl+0x18c/0x250 [ 304.726521][ T5774] ? show_regs_print_info+0x20/0x20 [ 304.731707][ T5774] ? load_image+0x420/0x420 [ 304.736194][ T5774] panic+0x2ca/0x720 [ 304.740080][ T5774] ? bpf_jit_dump+0xd0/0xd0 [ 304.744590][ T5774] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 304.750578][ T5774] ? _raw_spin_unlock+0x40/0x40 [ 304.755433][ T5774] ? print_memory_metadata+0x314/0x400 [ 304.760907][ T5774] ? __mutex_lock+0xfc/0xc80 [ 304.765496][ T5774] check_panic_on_warn+0x84/0xa0 [ 304.770437][ T5774] ? __mutex_lock+0xfc/0xc80 [ 304.775011][ T5774] end_report+0x6f/0x130 [ 304.779235][ T5774] kasan_report+0x128/0x150 [ 304.783731][ T5774] ? tomoyo_check_open_permission+0x384/0x460 [ 304.789808][ T5774] ? __mutex_lock+0xfc/0xc80 [ 304.794397][ T5774] __mutex_lock+0xfc/0xc80 [ 304.798801][ T5774] ? end_current_label_crit_section+0x170/0x170 [ 304.805051][ T5774] ? ep_open+0x4e/0x270 [ 304.809194][ T5774] ? mutex_lock_nested+0x20/0x20 [ 304.814115][ T5774] ? apparmor_file_open+0x5ab/0x760 [ 304.819304][ T5774] ? apparmor_inode_getattr+0x2c0/0x2c0 [ 304.824836][ T5774] ? __rwlock_init+0x150/0x150 [ 304.829592][ T5774] ep_open+0x4e/0x270 [ 304.833560][ T5774] ? do_dentry_open+0x86f/0x14b0 [ 304.838485][ T5774] do_dentry_open+0x880/0x14b0 [ 304.843239][ T5774] ? ep_ioctl+0x1c0/0x1c0 [ 304.847554][ T5774] path_openat+0x284f/0x3270 [ 304.852138][ T5774] ? do_sys_openat2+0xda/0x1d0 [ 304.857071][ T5774] ? __x64_sys_openat+0x139/0x160 [ 304.862082][ T5774] ? verify_lock_unused+0x140/0x140 [ 304.867269][ T5774] ? do_filp_open+0x430/0x430 [ 304.871939][ T5774] do_filp_open+0x1f2/0x430 [ 304.876426][ T5774] ? vfs_tmpfile+0x620/0x620 [ 304.881010][ T5774] ? _raw_spin_unlock+0x28/0x40 [ 304.885864][ T5774] ? alloc_fd+0x590/0x640 [ 304.890183][ T5774] do_sys_openat2+0x134/0x1d0 [ 304.894846][ T5774] ? do_sys_open+0xe0/0xe0 [ 304.899251][ T5774] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 304.905222][ T5774] ? fsnotify_link_count+0xf0/0xf0 [ 304.910320][ T5774] ? lock_chain_count+0x20/0x20 [ 304.915159][ T5774] __x64_sys_openat+0x139/0x160 [ 304.920028][ T5774] do_syscall_64+0x55/0xb0 [ 304.924437][ T5774] ? clear_bhb_loop+0x40/0x90 [ 304.929105][ T5774] ? clear_bhb_loop+0x40/0x90 [ 304.933771][ T5774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.939651][ T5774] RIP: 0033:0x7fd29795e98e [ 304.944053][ T5774] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 304.963651][ T5774] RSP: 002b:00007ffc16b90448 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 304.972055][ T5774] RAX: ffffffffffffffda RBX: 000055557901d500 RCX: 00007fd29795e98e [ 304.980015][ T5774] RDX: 0000000000000000 RSI: 00007ffc16b905b0 RDI: ffffffffffffff9c [ 304.987976][ T5774] RBP: 00007ffc16b905b0 R08: 0000000000000000 R09: 0000000000000000 [ 304.995933][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc16b916a0 [ 305.003888][ T5774] R13: 00007fd297a344bb R14: 000055557901d4e8 R15: 0000000000000006 [ 305.011856][ T5774] [ 305.015105][ T5774] Kernel Offset: disabled [ 305.019445][ T5774] Rebooting in 86400 seconds..