last executing test programs: 14.923967931s ago: executing program 0 (id=1285): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2ad735d9ec409711851badf7e170fc50", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7", 0x73}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f0", 0x82}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356", 0x21}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c14", 0xdd}, {&(0x7f00000010c0)}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {0x0}], 0x7, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0c", 0x46}, {0x0}, {0x0}, {0x0}], 0x5}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.683431413s ago: executing program 3 (id=1288): timer_create(0x0, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x80) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x793, &(0x7f0000001040)="$eJzs3F+IVGUbAPDnnN31288dHVcDIRSFrIxoXN0kg4gNAlmvAiEChdxyVrcdXdvZqN280AKpm4gFM5BEbyLoRrqJ7qSLUBLCi7qJjKKiAiusi+hmY2b2X+usTq7b0fX3gzPzvs/ZOc/7zB5ezgtzTgC3rbWVlyQiFxG7IiI/Hk8jYlG11RpxqPZ3o52n91a2JMbGtv+aVD4WBztP7504VjL+3hbVj8SWiPi4K4k1S67MWx4e6e8plYqD4/0NQ/sObCgPjzzQt69nT3FPcf9DD27e3NnZ0bHlxtX61sqdKz5/tHvz0ZWfrlr711fHk+iq1h0z6riRklmC3fORLEPT60yaMxwIDVva+sy8nPMAwM2tcp3fFBHN1ev9fDRF7eLtw1d2Xs7HI7Nepi5//MRP/+U4AQAAgOs31jQGAAAALHhJZD0CAAAAYH5N/A7gYOfpvRPbfPzOYFmd2OodEZceq+08OH5v8ehk/ubqPcQRrdESEYt/T2L6baXJLMf8N1Y/PccDzFF5W7b5LzyZbf7297PNf/LLiEOHI+JMV53zPxk//65fx4z+zHvB714xxwRz9N232eZftybb/EcHIs5U5p+uevNfOjn/RJ35p3ni2Qlz8HL71Pw32rko/jn/TeVvmmX+67rG8e9bXnt/491z79Tbf/aziEuHI+5snnq2w+gV539rNVe9/E80WGd707r19eJPvRcxdirinqiff3qu2Z8PsaG3r1TsqL3Wz//JN68X68W7W2r1L54tfxJX/f53NVh/2w8Xzh+oEx/rruVff1e9/OlVv/+m8WdsNOLU8NeD9eKF52r5d89S/7X+/282mP+LHQ+frRc/9kGDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC2k0ZELpK0MNlO00Ihoi0i7ojFaWmgPHR/78AL+3dX9kUsi5a0t69U7IiIfK2fVPobq+2p/qYZ/c6IaI+I1/L/r/YLzw6UdmddPAAAACxwuYiLO179aGXW4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NbQFhG5SNJCRKQR8WM+TQuFrEcFAAAA3Ai5iIurTp44Xmn/kc96NAAAAMB8qKz/Lx/55VxY/wMAAMCCZf0PAAAAC9/09T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDNIFfdkrQQEWm1naaFQsSSiFgWLUlvX6nYERFLI+J8vuV/lf7GrAcNAAAANCQXcXFr69bvsx4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC3hvLwSH9PqVQc1NDQ0JhsZD0zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQhfLwSH9PqVQcLGc9EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALKV/pxERGW7N78u9/ylI9um712U/JmvvkfEi8e3H3upZ2hocGMl/ttkfOjt8fimrGoAAAAApptYp0+s4wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABpVHh7p7ymVioPz2Mi6RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK7f3wEAAP//6TK2yA==") r3 = syz_open_dev$radio(&(0x7f0000019140), 0x1, 0x2) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000019180)) r4 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x20, @tick, {0x40, 0xfe}, {0x10, 0x9}, @raw8}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$dsp(r6, &(0x7f0000019080)="9db979496f5ccb4ae3b658f8783b26d7700be59910d4ae2ccd6e39a9cf1a478e176963b3bfa78d9a12a9b66c7f5a0635d37e6eec0d825d2b802d96e9d38b5786b5dae8707c9ebded0773ef9c9f867f4400009f34cda35d7e8e86f2da463a2f3b912e6d9b2ab23ab86c7b8a0de766d671e05bf83ee91c0e602e6b695c0078", 0x7e) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x5) read$FUSE(r6, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0x7, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x9, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x863, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0xc2, 0x0, 0x546c, 0x981, 0x5aa, 0x22cc, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x80000001, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x3, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0xffffffc8, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x4, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x109, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x0, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x3, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x1, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0x1, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x9, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x5, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x5, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x1000, 0x101, 0x200, 0x8, 0x7ff, 0x5, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) 12.805357877s ago: executing program 0 (id=1289): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0c", 0x46}, {0x0}, {0x0}, {0x0}], 0x5}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.289020572s ago: executing program 3 (id=1291): add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020a050117180002811d00e787717e4c05b2dcd4b63c38d6b5aeb55d0b8ccc18fc1872323ae257ea000000030006003300000002004e22ffffffff000000000000000005001a0064010102000000000000000000000000ac1414aa0000000000000000000000001e001414040004000b00707e306d157a406fe12f000000000000000000000700000000000000fc000000000000000400040004000000020000000000000004000000000000000100010000000000"], 0xb8}}, 0x8000) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x2) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000200)={0x4000000, 0x1, 0xfffffffffffffffd}) close(r1) syz_open_dev$evdev(0x0, 0x200, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e20, @multicast2}}, [0xde, 0x7f, 0x6, 0xb2, 0x5, 0x9, 0x2, 0x0, 0x5, 0x3, 0xe, 0x5, 0x4, 0x59d4, 0x39bf]}, &(0x7f00000001c0)=0x100) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) 12.283925922s ago: executing program 0 (id=1292): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x6048085) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x6c7e, 0x100000002, 0xe, 0x4}) 8.536469778s ago: executing program 3 (id=1296): syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000300)="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", 0xfc) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') preadv(r4, &(0x7f0000000200)=[{0x0}], 0x1, 0x4002c2, 0xc8) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 7.387926254s ago: executing program 3 (id=1298): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7", 0x73}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f0", 0x82}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356", 0x21}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c14", 0xdd}, {&(0x7f00000010c0)}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {0x0}, {0x0}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0c", 0x46}, {0x0}, {0x0}, {0x0}], 0x5}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.27720905s ago: executing program 2 (id=1300): timer_create(0x0, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x80) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x793, &(0x7f0000001040)="$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") r3 = syz_open_dev$radio(&(0x7f0000019140), 0x1, 0x2) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000019180)) r4 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x20, @tick, {0x40, 0xfe}, {0x10, 0x9}, @raw8}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$dsp(r6, &(0x7f0000019080)="9db979496f5ccb4ae3b658f8783b26d7700be59910d4ae2ccd6e39a9cf1a478e176963b3bfa78d9a12a9b66c7f5a0635d37e6eec0d825d2b802d96e9d38b5786b5dae8707c9ebded0773ef9c9f867f4400009f34cda35d7e8e86f2da463a2f3b912e6d9b2ab23ab86c7b8a0de766d671e05bf83ee91c0e602e6b695c0078", 0x7e) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x5) read$FUSE(r6, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0x7, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x9, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x863, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0xc2, 0x0, 0x546c, 0x981, 0x5aa, 0x22cc, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x80000001, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x3, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0xffffffc8, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x4, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x109, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x0, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x3, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x1, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0x1, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x9, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x5, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x5, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x1000, 0x101, 0x200, 0x8, 0x7ff, 0x5, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) 7.149889306s ago: executing program 0 (id=1301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x1, 0x0, {0x7}}, 0x18) syz_emit_ethernet(0x1e, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000004000)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, 0x0, &(0x7f0000001540)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) 5.566016775s ago: executing program 2 (id=1302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f0000000400)={r4, @in={{0x2, 0x4e23, @empty}}, 0x4000}, 0x90) syz_open_dev$usbfs(&(0x7f00000013c0), 0x8f, 0x101201) syz_emit_ethernet(0x32, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x0) socket$kcm(0x29, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f00000002c0)=[{0xb48, 0x9, 0x9, 0x4}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000001200)=""/222, 0x0, 0x1e}, 0x94) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 5.480205699s ago: executing program 3 (id=1303): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x8ace0a3f86283e7d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f0000000ac0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer], 0x0, 0x0, 0x0}) 5.175318014s ago: executing program 1 (id=1304): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$sg(0x0, 0x200000000a2, 0xa0104) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000000c0)={0x2000}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5.112083677s ago: executing program 2 (id=1305): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) 4.982134643s ago: executing program 2 (id=1306): syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000300)="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", 0xfc) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') preadv(r4, &(0x7f0000000200)=[{0x0}], 0x1, 0x4002c2, 0xc8) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.587573312s ago: executing program 2 (id=1307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}], 0x4, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}], 0x1, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) 3.259930158s ago: executing program 1 (id=1308): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f0", 0x82}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356", 0x21}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d", 0xd7}, {&(0x7f00000010c0)}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {0x0}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded03bf8a0c2da5168461dafc53f865fab513453ed3d95bd82ab0bb24a32", 0xc7}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d19", 0xab}], 0x9, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0c", 0x46}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.42349119s ago: executing program 0 (id=1309): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x6c7e, 0x100000002, 0xe, 0x4}) 1.794374571s ago: executing program 1 (id=1310): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.550626623s ago: executing program 1 (id=1311): timer_create(0x0, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x80) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x793, &(0x7f0000001040)="$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") r3 = syz_open_dev$radio(&(0x7f0000019140), 0x1, 0x2) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000019180)) r4 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x20, @tick, {0x40, 0xfe}, {0x10, 0x9}, @raw8}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$dsp(r6, &(0x7f0000019080)="9db979496f5ccb4ae3b658f8783b26d7700be59910d4ae2ccd6e39a9cf1a478e176963b3bfa78d9a12a9b66c7f5a0635d37e6eec0d825d2b802d96e9d38b5786b5dae8707c9ebded0773ef9c9f867f4400009f34cda35d7e8e86f2da463a2f3b912e6d9b2ab23ab86c7b8a0de766d671e05bf83ee91c0e602e6b695c00787feb", 0x80) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x5) read$FUSE(r6, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0x7, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x9, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x863, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0xc2, 0x0, 0x546c, 0x981, 0x5aa, 0x22cc, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x80000001, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x3, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0xffffffc8, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x4, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x109, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x0, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x3, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x1, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0x1, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x9, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x5, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x5, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x1000, 0x101, 0x200, 0x8, 0x7ff, 0x5, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) 1.283275357s ago: executing program 0 (id=1312): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7", 0x73}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f0", 0x82}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356", 0x21}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c14", 0xdd}, {&(0x7f00000010c0)}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {0x0}, {0x0}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0c", 0x46}, {0x0}, {0x0}, {0x0}], 0x5}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 835.020669ms ago: executing program 3 (id=1313): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf60", 0x93}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe87", 0x14}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded03bf8a0c2da5168461dafc53f", 0xb7}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d", 0xaa}], 0x8}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 574.702931ms ago: executing program 1 (id=1314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f0000000400)={r4, @in={{0x2, 0x4e23, @empty}}, 0x4000}, 0x90) syz_open_dev$usbfs(&(0x7f00000013c0), 0x8f, 0x101201) syz_emit_ethernet(0x32, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x0) socket$kcm(0x29, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f00000002c0)=[{0xb48, 0x9, 0x9, 0x4}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000001200)=""/222, 0x0, 0x1e}, 0x94) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 287.676646ms ago: executing program 2 (id=1315): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 1 (id=1316): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) kernel console output (not intermixed with test programs): T23] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 220.593050][ T23] usb 3-1: setting power OFF [ 220.608977][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 220.682460][ T7075] loop3: detected capacity change from 0 to 2048 [ 220.688964][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 220.708919][ T23] (NULL device *): no alternate interface [ 220.807739][ T7075] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 220.839652][ T7075] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 220.891097][ T7067] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 220.921182][ T5765] udevd[5765]: incorrect ext4 checksum on /dev/loop3 [ 220.979988][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 221.019867][ T23] usb 3-1: USB disconnect, device number 5 [ 221.427444][ T7083] fuse: Unknown parameter 'user_id00000000000000000000' [ 221.716834][ T7078] loop2: detected capacity change from 0 to 32768 [ 221.750828][ T7078] (syz.2.321,7078,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 221.808159][ T7078] (syz.2.321,7078,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 221.889799][ T7078] JBD2: Ignoring recovery information on journal [ 222.045900][ T7078] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 222.167341][ T7078] (syz.2.321,7078,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 222.183209][ T7078] (syz.2.321,7078,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 222.238396][ T7078] (syz.2.321,7078,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 222.247396][ T7078] (syz.2.321,7078,1):ocfs2_quota_read:201 ERROR: status = -5 [ 222.256724][ T7078] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 4 [ 222.281426][ T7078] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 222.292551][ T7078] (syz.2.321,7078,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 222.293827][ T7094] (syz.2.321,7094,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 222.342529][ T7078] (syz.2.321,7078,0):ocfs2_mknod:314 ERROR: status = -5 [ 222.363323][ T7094] (syz.2.321,7094,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 222.365732][ T7078] (syz.2.321,7078,1):ocfs2_mknod:502 ERROR: status = -5 [ 222.382460][ T7078] (syz.2.321,7078,1):ocfs2_create:676 ERROR: status = -5 [ 222.382484][ T7094] (syz.2.321,7094,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 222.405188][ T7094] (syz.2.321,7094,0):ocfs2_quota_read:201 ERROR: status = -5 [ 222.422563][ T7094] Quota error (device loop2): find_next_id: Can't read quota tree block 4 [ 222.433134][ T7094] (syz.2.321,7094,0):ocfs2_get_next_id:909 ERROR: status = -5 [ 222.570999][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 222.593064][ T7085] loop0: detected capacity change from 0 to 32768 [ 222.651117][ T7085] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.324 (7085) [ 222.712533][ T7085] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.759419][ T7085] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 222.794273][ T7085] BTRFS info (device loop0): setting nodatasum [ 222.806740][ T7085] BTRFS info (device loop0): force zlib compression, level 3 [ 222.831117][ T7085] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 222.857716][ T7085] BTRFS info (device loop0): use lzo compression, level 0 [ 222.874205][ T7085] BTRFS info (device loop0): turning on flush-on-commit [ 222.901259][ T7085] BTRFS info (device loop0): enabling auto defrag [ 222.948345][ T7085] BTRFS info (device loop0): max_inline at 4096 [ 223.014131][ T7085] BTRFS info (device loop0): using free space tree [ 223.693176][ T7085] BTRFS info (device loop0): enabling ssd optimizations [ 224.054155][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 224.534213][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 224.614472][ T23] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 224.713167][ T23] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 224.907486][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.919705][ T23] usb 2-1: Product: syz [ 224.930227][ T7126] loop2: detected capacity change from 0 to 2048 [ 224.934130][ T23] usb 2-1: Manufacturer: syz [ 224.953923][ T23] usb 2-1: SerialNumber: syz [ 225.020640][ T7126] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 225.035312][ T23] usb 2-1: config 0 descriptor?? [ 225.061682][ T23] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 225.079967][ T7126] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 225.113294][ T23] usb 2-1: setting power ON [ 225.118835][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 225.129204][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 225.139783][ T23] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 225.146174][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop2 [ 225.148869][ T23] usb 2-1: media controller created [ 225.190908][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.271399][ T5763] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 225.321682][ T23] usb 2-1: selecting invalid altsetting 6 [ 225.327633][ T23] usb 2-1: digital interface selection failed (-22) [ 225.334464][ T23] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 225.344866][ T23] usb 2-1: setting power OFF [ 225.349942][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 225.356077][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 225.365596][ T23] (NULL device *): no alternate interface [ 225.395324][ T5773] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.490417][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 225.539512][ T23] usb 2-1: USB disconnect, device number 5 [ 225.625412][ T7137] loop2: detected capacity change from 0 to 16 [ 225.704293][ T7137] erofs: (device loop2): mounted with root inode @ nid 36. [ 227.568020][ T7155] loop0: detected capacity change from 0 to 128 [ 227.579030][ T7155] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.796186][ T7155] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.030813][ T4992] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 230.342668][ T7174] loop1: detected capacity change from 0 to 16 [ 230.364781][ T7174] erofs: (device loop1): mounted with root inode @ nid 36. [ 231.374272][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 231.657321][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 231.719084][ T8] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 231.759632][ T8] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 231.792651][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.990122][ T7184] loop2: detected capacity change from 0 to 128 [ 231.998701][ T7184] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 232.032832][ T8] usb 4-1: Product: syz [ 232.037317][ T7184] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 233.035703][ T8] usb 4-1: Manufacturer: syz [ 233.040525][ T8] usb 4-1: SerialNumber: syz [ 233.065246][ T8] usb 4-1: config 0 descriptor?? [ 233.114430][ T8] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 233.132396][ T8] usb 4-1: setting power ON [ 233.159241][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 233.206133][ T49] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 233.262642][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 233.286444][ T8] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 233.340746][ T8] usb 4-1: media controller created [ 233.421488][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.460279][ T8] usb 4-1: selecting invalid altsetting 6 [ 233.466404][ T8] usb 4-1: digital interface selection failed (-22) [ 233.473251][ T8] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 233.488375][ T8] usb 4-1: setting power OFF [ 233.498246][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 233.504618][ T8] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 233.514530][ T8] (NULL device *): no alternate interface [ 233.990702][ T5085] Bluetooth: hci2: ACL packet for unknown connection handle 205 [ 234.048341][ T8] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 234.062197][ T7190] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 234.068755][ T7190] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 234.080051][ T8] usb 4-1: USB disconnect, device number 4 [ 234.129206][ T7190] vhci_hcd vhci_hcd.0: Device attached [ 234.139681][ T7192] vhci_hcd: connection closed [ 234.148918][ T5973] vhci_hcd: stop threads [ 234.159339][ T5973] vhci_hcd: release socket [ 234.164053][ T5973] vhci_hcd: disconnect device [ 236.817918][ T7205] loop2: detected capacity change from 0 to 32768 [ 236.851834][ T7205] (syz.2.354,7205,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 236.929581][ T7205] (syz.2.354,7205,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 237.045864][ T7215] loop1: detected capacity change from 0 to 16 [ 237.060580][ T7205] JBD2: Ignoring recovery information on journal [ 237.067961][ T7215] erofs: (device loop1): mounted with root inode @ nid 36. [ 238.213752][ T7205] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 238.345448][ T7225] loop3: detected capacity change from 0 to 128 [ 238.358277][ T7225] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 238.548125][ T7225] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 239.225531][ T4992] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 239.593285][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 242.288077][ T7253] loop1: detected capacity change from 0 to 256 [ 242.341128][ T5763] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 243.487470][ T7260] loop0: detected capacity change from 0 to 16 [ 243.553287][ T7260] erofs: (device loop0): mounted with root inode @ nid 36. [ 244.974089][ T7268] loop0: detected capacity change from 0 to 128 [ 244.981858][ T7268] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 245.034968][ T7268] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 245.914944][ T1326] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 246.699540][ T7279] Cannot find add_set index 0 as target [ 247.770990][ T7285] loop3: detected capacity change from 0 to 4096 [ 247.801334][ T7270] loop1: detected capacity change from 0 to 32768 [ 247.814521][ T7285] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.907106][ T7270] (syz.1.371,7270,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 247.928347][ T7270] (syz.1.371,7270,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 247.969851][ T7270] JBD2: Ignoring recovery information on journal [ 248.128608][ T7270] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 248.213767][ T7285] EXT4-fs (loop3): Test dummy encryption mode enabled [ 248.257446][ T7270] (syz.1.371,7270,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 248.298984][ T7270] (syz.1.371,7270,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 248.311639][ T7270] (syz.1.371,7270,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 248.350790][ T7285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.359979][ T7270] (syz.1.371,7270,1):ocfs2_quota_read:201 ERROR: status = -5 [ 248.373625][ T7270] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 4 [ 248.415865][ T7270] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 248.457669][ T7270] (syz.1.371,7270,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 248.474312][ T7270] (syz.1.371,7270,0):ocfs2_mknod:314 ERROR: status = -5 [ 248.484125][ T7270] (syz.1.371,7270,0):ocfs2_mknod:502 ERROR: status = -5 [ 248.491484][ T7272] (syz.1.371,7272,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 248.491533][ T7270] (syz.1.371,7270,0):ocfs2_create:676 ERROR: status = -5 [ 248.518517][ T7272] (syz.1.371,7272,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 248.530955][ T7272] (syz.1.371,7272,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 248.546729][ T7272] (syz.1.371,7272,1):ocfs2_quota_read:201 ERROR: status = -5 [ 248.554985][ T7272] Quota error (device loop1): find_next_id: Can't read quota tree block 4 [ 248.573244][ T7272] (syz.1.371,7272,1):ocfs2_get_next_id:909 ERROR: status = -5 [ 248.963380][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 249.283817][ T7296] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 249.495682][ T7285] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 249.505946][ T7285] overlayfs: upper fs does not support tmpfile. [ 249.514538][ T7285] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 250.108362][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.528424][ T7317] loop1: detected capacity change from 0 to 256 [ 251.124497][ T5763] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.395353][ T5805] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 254.553424][ T7339] syzkaller0: entered promiscuous mode [ 254.564125][ T7339] syzkaller0: entered allmulticast mode [ 254.613400][ T5805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.634055][ T5805] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 254.677084][ T5805] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 254.702075][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.727840][ T5805] usb 3-1: Product: syz [ 254.738540][ T5805] usb 3-1: Manufacturer: syz [ 254.754059][ T5805] usb 3-1: SerialNumber: syz [ 254.827556][ T5805] usb 3-1: config 0 descriptor?? [ 255.085138][ T7345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.270798][ T7345] loop1: detected capacity change from 0 to 2368 [ 255.325554][ T7343] ceph: No mds server is up or the cluster is laggy [ 255.467327][ T27] libceph: connect (1)[c::]:6789 error -101 [ 255.519713][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 255.943326][ T5085] Bluetooth: hci3: ACL packet for unknown connection handle 205 [ 255.982486][ T7349] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 255.989249][ T7349] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 256.001051][ T7349] vhci_hcd vhci_hcd.0: Device attached [ 256.020133][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.034123][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.125067][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 256.209194][ T7355] vhci_hcd: connection closed [ 256.210451][ T1022] vhci_hcd: stop threads [ 256.219789][ T1022] vhci_hcd: release socket [ 256.225170][ T1022] vhci_hcd: disconnect device [ 256.274201][ T5806] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 256.289608][ T5806] usb 39-1: enqueue for inactive port 0 [ 256.376493][ T27] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 256.391493][ T5806] vhci_hcd: vhci_device speed not set [ 256.410839][ T27] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 256.424032][ T27] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.444064][ T27] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 256.453299][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.523625][ T27] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 256.545907][ T27] usb 1-1: invalid MIDI out EP 0 [ 256.787398][ T27] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 256.854263][ T27] usb 1-1: USB disconnect, device number 5 [ 257.033136][ T7362] loop3: detected capacity change from 0 to 2368 [ 257.564178][ T27] usb 3-1: USB disconnect, device number 6 [ 258.577637][ T7373] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 259.459878][ T7378] syzkaller0: entered promiscuous mode [ 259.478068][ T7378] syzkaller0: entered allmulticast mode [ 259.480013][ T7380] loop3: detected capacity change from 0 to 128 [ 262.250308][ T7406] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 263.030525][ T7410] loop0: detected capacity change from 0 to 4096 [ 265.118657][ T7416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.404'. [ 265.159468][ T7416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.404'. [ 265.209851][ T7416] bond0: entered promiscuous mode [ 265.239812][ T7416] bond_slave_0: entered promiscuous mode [ 265.255902][ T7416] bond_slave_1: entered promiscuous mode [ 265.279025][ T7416] bond0: left promiscuous mode [ 265.283827][ T7416] bond_slave_0: left promiscuous mode [ 265.289876][ T7416] bond_slave_1: left promiscuous mode [ 265.345870][ T7419] syzkaller0: entered promiscuous mode [ 265.351376][ T7419] syzkaller0: entered allmulticast mode [ 265.639181][ T7425] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 265.667639][ T7425] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 266.647400][ T7440] random: crng reseeded on system resumption [ 267.436649][ T7444] loop3: detected capacity change from 0 to 512 [ 267.524668][ T7444] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802c028, mo2=0002] [ 267.605743][ T7444] System zones: 1-12 [ 267.859188][ T7444] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.413: bg 0: block 288: padding at end of block bitmap is not set [ 267.921346][ T7444] EXT4-fs (loop3): Remounting filesystem read-only [ 267.943782][ T7444] EXT4-fs (loop3): 1 truncate cleaned up [ 267.952472][ T7444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.237653][ T7455] syzkaller0: entered promiscuous mode [ 268.274047][ T7455] syzkaller0: entered allmulticast mode [ 268.308462][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.306986][ T7486] syzkaller0: entered promiscuous mode [ 271.322901][ T7486] syzkaller0: entered allmulticast mode [ 274.103475][ T7518] loop1: detected capacity change from 0 to 256 [ 274.454105][ T5763] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 275.376954][ T7532] syzkaller0: entered promiscuous mode [ 275.385132][ T7532] syzkaller0: entered allmulticast mode [ 275.434389][ T969] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 275.614304][ T969] usb 1-1: device descriptor read/64, error -71 [ 275.934052][ T969] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 276.114168][ T969] usb 1-1: device descriptor read/64, error -71 [ 276.251179][ T969] usb usb1-port1: attempt power cycle [ 276.664063][ T969] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 276.694840][ T969] usb 1-1: device descriptor read/8, error -71 [ 276.967479][ T969] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 277.039135][ T969] usb 1-1: device descriptor read/8, error -71 [ 277.176810][ T969] usb usb1-port1: unable to enumerate USB device [ 277.530615][ T7553] loop1: detected capacity change from 0 to 512 [ 277.596207][ T7553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.610037][ T7553] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.725406][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.449524][ T7564] loop0: detected capacity change from 0 to 256 [ 279.498126][ T5763] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 281.961559][ T7588] syz.1.456 (7588): drop_caches: 2 [ 282.938858][ T7590] loop0: detected capacity change from 0 to 32768 [ 282.952247][ T7590] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.457 (7590) [ 282.972445][ T7590] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 282.982865][ T7590] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 282.991701][ T7590] BTRFS info (device loop0): enabling disk space caching [ 282.998802][ T7590] BTRFS info (device loop0): force clearing of disk cache [ 283.005970][ T7590] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 283.015566][ T7590] BTRFS info (device loop0): use zstd compression, level 3 [ 283.022766][ T7590] BTRFS info (device loop0): disk space caching is enabled [ 283.094159][ T5807] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 283.131884][ T7590] BTRFS info (device loop0): enabling ssd optimizations [ 283.138947][ T7590] BTRFS info (device loop0): auto enabling async discard [ 283.148921][ T7590] BTRFS info (device loop0): rebuilding free space tree [ 283.170956][ T7590] BTRFS info (device loop0): disabling free space tree [ 283.178180][ T7590] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 283.187981][ T7590] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 283.359391][ T5807] usb 2-1: device descriptor read/64, error -71 [ 283.636263][ T5807] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 283.824067][ T5807] usb 2-1: device descriptor read/64, error -71 [ 284.135109][ T5807] usb usb2-port1: attempt power cycle [ 285.289658][ T5807] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 285.355272][ T5807] usb 2-1: device descriptor read/8, error -71 [ 285.634083][ T5807] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 285.898275][ T5773] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 285.905558][ T5807] usb 2-1: device descriptor read/8, error -71 [ 285.978490][ T7631] loop1: detected capacity change from 0 to 256 [ 286.362921][ T5807] usb usb2-port1: unable to enumerate USB device [ 289.731837][ T7658] loop0: detected capacity change from 0 to 32768 [ 289.762024][ T7658] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.471 (7658) [ 289.790558][ T7658] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 289.801696][ T7658] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 289.810520][ T7658] BTRFS info (device loop0): enabling disk space caching [ 289.818249][ T7658] BTRFS info (device loop0): force clearing of disk cache [ 289.825493][ T7658] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 289.835094][ T7658] BTRFS info (device loop0): use zstd compression, level 3 [ 289.842294][ T7658] BTRFS info (device loop0): disk space caching is enabled [ 289.987654][ T7658] BTRFS info (device loop0): enabling ssd optimizations [ 289.995236][ T7658] BTRFS info (device loop0): auto enabling async discard [ 290.004044][ T7658] BTRFS info (device loop0): rebuilding free space tree [ 290.011930][ T7662] loop1: detected capacity change from 0 to 512 [ 290.060308][ T7658] BTRFS info (device loop0): disabling free space tree [ 290.067532][ T7658] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 290.077330][ T7658] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 290.096654][ T7662] ext3: Unknown parameter 'func' [ 291.294554][ T5807] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 291.464129][ T5807] usb 4-1: device descriptor read/64, error -71 [ 291.744033][ T5807] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 292.060339][ T5773] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 292.181434][ T5807] usb 4-1: device descriptor read/64, error -71 [ 292.314912][ T5807] usb usb4-port1: attempt power cycle [ 292.353593][ T7688] random: crng reseeded on system resumption [ 292.754878][ T5807] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 292.816271][ T5807] usb 4-1: device descriptor read/8, error -71 [ 293.104555][ T5807] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 293.126387][ T7697] loop0: detected capacity change from 0 to 256 [ 293.144889][ T5807] usb 4-1: device descriptor read/8, error -71 [ 293.175529][ T5763] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 293.314798][ T5807] usb usb4-port1: unable to enumerate USB device [ 294.886454][ T7712] loop0: detected capacity change from 0 to 32768 [ 294.903129][ T7712] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.482 (7712) [ 294.925325][ T7712] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 294.935562][ T7712] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 294.945163][ T7712] BTRFS info (device loop0): enabling disk space caching [ 294.952235][ T7712] BTRFS info (device loop0): force clearing of disk cache [ 294.959509][ T7712] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 294.969094][ T7712] BTRFS info (device loop0): use zstd compression, level 3 [ 294.976412][ T7712] BTRFS info (device loop0): disk space caching is enabled [ 295.036969][ T7712] BTRFS info (device loop0): enabling ssd optimizations [ 295.044776][ T7712] BTRFS info (device loop0): auto enabling async discard [ 295.052965][ T7712] BTRFS info (device loop0): rebuilding free space tree [ 295.069005][ T7712] BTRFS info (device loop0): disabling free space tree [ 295.075988][ T7712] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 295.085742][ T7712] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 296.097115][ T7736] loop2: detected capacity change from 0 to 512 [ 296.130465][ T7736] ext3: Unknown parameter 'func' [ 297.270142][ T5773] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 297.869771][ T7745] random: crng reseeded on system resumption [ 298.589477][ T7754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.645099][ T7754] loop2: detected capacity change from 0 to 2368 [ 298.815520][ T7753] ceph: No mds server is up or the cluster is laggy [ 298.822863][ T8] libceph: connect (1)[c::]:6789 error -101 [ 298.916186][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 301.020695][ T7773] loop1: detected capacity change from 0 to 32768 [ 301.067592][ T7773] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.494 (7773) [ 301.085574][ T7773] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 301.095817][ T7773] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 301.104960][ T7773] BTRFS info (device loop1): enabling disk space caching [ 301.111995][ T7773] BTRFS info (device loop1): force clearing of disk cache [ 301.119208][ T7773] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 301.128637][ T7773] BTRFS info (device loop1): use zstd compression, level 3 [ 301.135966][ T7773] BTRFS info (device loop1): disk space caching is enabled [ 301.244145][ T7773] BTRFS info (device loop1): enabling ssd optimizations [ 301.251318][ T7773] BTRFS info (device loop1): auto enabling async discard [ 301.269595][ T7773] BTRFS info (device loop1): rebuilding free space tree [ 301.380436][ T7773] BTRFS info (device loop1): disabling free space tree [ 301.387549][ T7773] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 301.398187][ T7773] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 302.817577][ T7799] loop3: detected capacity change from 0 to 512 [ 302.890165][ T7799] ext3: Unknown parameter 'func' [ 302.942318][ T7800] loop2: detected capacity change from 0 to 4096 [ 303.326513][ T7805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.496'. [ 303.336005][ T7805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.496'. [ 303.957156][ T5770] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 304.670702][ T7815] loop0: detected capacity change from 0 to 1024 [ 304.702089][ T7815] EXT4-fs: Ignoring removed nomblk_io_submit option [ 304.768011][ T7815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.895725][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.303619][ T7834] loop1: detected capacity change from 0 to 4096 [ 305.816678][ T7843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.506'. [ 305.825825][ T7843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.506'. [ 306.185399][ T7843] team0: entered promiscuous mode [ 306.190856][ T7843] team_slave_0: entered promiscuous mode [ 306.197640][ T7843] team_slave_1: entered promiscuous mode [ 306.625746][ T7843] bond0: entered promiscuous mode [ 306.648795][ T7843] bond_slave_0: entered promiscuous mode [ 306.661607][ T7843] bond_slave_1: entered promiscuous mode [ 306.741897][ T7843] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 306.783114][ T7843] Cannot create hsr debugfs directory [ 306.864641][ T7843] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 307.495874][ T7847] loop1: detected capacity change from 0 to 32768 [ 307.527755][ T7847] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.507 (7847) [ 307.555536][ T7847] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 307.565760][ T7847] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 307.574778][ T7847] BTRFS info (device loop1): enabling disk space caching [ 307.581831][ T7847] BTRFS info (device loop1): force clearing of disk cache [ 307.589028][ T7847] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 307.598757][ T7847] BTRFS info (device loop1): use zstd compression, level 3 [ 307.606012][ T7847] BTRFS info (device loop1): disk space caching is enabled [ 307.695199][ T7847] BTRFS info (device loop1): enabling ssd optimizations [ 307.702285][ T7847] BTRFS info (device loop1): auto enabling async discard [ 307.711959][ T7847] BTRFS info (device loop1): rebuilding free space tree [ 307.746600][ T7847] BTRFS info (device loop1): disabling free space tree [ 307.753861][ T7847] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 307.763847][ T7847] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 308.483235][ T7871] loop2: detected capacity change from 0 to 2048 [ 308.545472][ T7871] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 308.594085][ T7871] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 308.622954][ T5765] udevd[5765]: incorrect ext4 checksum on /dev/loop2 [ 309.353605][ T7880] loop3: detected capacity change from 0 to 256 [ 309.732691][ T7882] loop0: detected capacity change from 0 to 512 [ 309.795557][ T7884] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 310.596616][ T7882] ext3: Unknown parameter 'func' [ 310.726184][ T5770] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 311.076946][ T7890] loop2: detected capacity change from 0 to 4096 [ 311.341449][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.2.515'. [ 311.350809][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.2.515'. [ 313.101007][ T7911] loop0: detected capacity change from 0 to 2048 [ 313.834640][ T7911] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 314.444118][ T7911] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 314.484855][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop0 [ 315.251015][ T7919] syzkaller0: entered promiscuous mode [ 315.258874][ T7919] syzkaller0: entered allmulticast mode [ 317.194566][ T7929] loop1: detected capacity change from 0 to 131072 [ 317.202233][ T7929] XFS: ikeep mount option is deprecated. [ 317.284811][ T7934] ceph: No mds server is up or the cluster is laggy [ 317.300813][ T5805] libceph: connect (1)[c::]:6789 error -101 [ 317.308396][ T5805] libceph: mon0 (1)[c::]:6789 connect error [ 317.468999][ T7940] loop3: detected capacity change from 0 to 2368 [ 317.484569][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.491099][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.700959][ T1197] libceph: connect (1)[c::]:6789 error -101 [ 317.744213][ T7935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.760643][ T1197] libceph: mon0 (1)[c::]:6789 connect error [ 317.772609][ T7929] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 318.065450][ T7929] XFS (loop1): Starting recovery (logdev: internal) [ 318.153616][ T7929] XFS (loop1): Ending recovery (logdev: internal) [ 318.348734][ T7949] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 319.080824][ T7954] loop0: detected capacity change from 0 to 512 [ 319.088430][ T7954] EXT4-fs: Ignoring removed orlov option [ 320.237135][ T7954] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 320.534517][ T5770] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 320.578123][ T7954] EXT4-fs (loop0): 1 truncate cleaned up [ 320.590963][ T7954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.120511][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.426134][ T7967] syzkaller0: entered promiscuous mode [ 321.445736][ T7967] syzkaller0: entered allmulticast mode [ 321.527648][ T7963] loop3: detected capacity change from 0 to 4096 [ 321.543802][ T7963] EXT4-fs: Ignoring removed mblk_io_submit option [ 321.592807][ T7963] EXT4-fs (loop3): Test dummy encryption mode enabled [ 321.615030][ T7963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.698119][ T7972] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 322.709156][ T7972] overlayfs: upper fs does not support tmpfile. [ 322.716074][ T7972] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 323.064099][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.824303][ T7997] loop3: detected capacity change from 0 to 2368 [ 325.014809][ T7996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.032415][ T7994] ceph: No mds server is up or the cluster is laggy [ 325.039709][ T6706] libceph: connect (1)[c::]:6789 error -101 [ 325.071797][ T6706] libceph: mon0 (1)[c::]:6789 connect error [ 326.692540][ T8015] loop1: detected capacity change from 0 to 512 [ 326.755608][ T8015] ext3: Unknown parameter 'func' [ 327.200404][ T8020] syzkaller0: entered promiscuous mode [ 327.209880][ T8020] syzkaller0: entered allmulticast mode [ 327.496939][ T8023] loop0: detected capacity change from 0 to 16 [ 327.520930][ T8023] erofs: (device loop0): mounted with root inode @ nid 36. [ 329.755556][ T8040] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 330.244692][ T8047] loop0: detected capacity change from 0 to 2048 [ 330.301421][ T8047] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 330.394780][ T8047] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 330.426550][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop0 [ 332.366269][ T8081] loop2: detected capacity change from 0 to 512 [ 332.373763][ T8081] ext3: Unknown parameter 'func' [ 333.033714][ T8085] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 333.125792][ T8085] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 333.877929][ T8087] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 334.220286][ T8095] loop3: detected capacity change from 0 to 2048 [ 334.262922][ T8095] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 334.292752][ T8095] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 334.337213][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop3 [ 335.674930][ T8104] syzkaller0: entered promiscuous mode [ 335.680641][ T8104] syzkaller0: entered allmulticast mode [ 335.842580][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 335.854136][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 335.930449][ T8108] ceph: No mds server is up or the cluster is laggy [ 335.989639][ T8111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.125993][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 336.132145][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 336.249659][ T8111] loop1: detected capacity change from 0 to 2368 [ 337.081696][ T8117] loop2: detected capacity change from 0 to 256 [ 337.176360][ T5763] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 338.438242][ T8122] loop2: detected capacity change from 0 to 4096 [ 338.449666][ T8122] EXT4-fs: Ignoring removed mblk_io_submit option [ 338.499126][ T8122] EXT4-fs (loop2): Test dummy encryption mode enabled [ 338.679577][ T8122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.227667][ T8136] Zero length message leads to an empty skb [ 340.307483][ T8133] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 340.317488][ T8133] overlayfs: upper fs does not support tmpfile. [ 340.325899][ T8133] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 340.932952][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.604701][ T8164] loop1: detected capacity change from 0 to 256 [ 341.655068][ T5763] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 343.314282][ T28] audit: type=1326 audit(1774595963.303:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33b39c799 code=0x7ffc0000 [ 343.904152][ T28] audit: type=1326 audit(1774595963.303:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33b39c799 code=0x7ffc0000 [ 343.969088][ T28] audit: type=1326 audit(1774595963.303:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb33b39c799 code=0x7ffc0000 [ 344.014330][ T28] audit: type=1326 audit(1774595963.303:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33b39c799 code=0x7ffc0000 [ 344.092842][ T28] audit: type=1326 audit(1774595963.303:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33b39c799 code=0x7ffc0000 [ 344.727280][ T28] audit: type=1326 audit(1774595963.303:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb33b39c799 code=0x7ffc0000 [ 344.824048][ T28] audit: type=1326 audit(1774595963.303:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33b39c799 code=0x7ffc0000 [ 344.914271][ T28] audit: type=1326 audit(1774595963.303:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33b39c799 code=0x7ffc0000 [ 345.002296][ T28] audit: type=1326 audit(1774595963.303:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb33b39c799 code=0x7ffc0000 [ 345.024491][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.037095][ T28] audit: type=1326 audit(1774595963.303:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33b39c799 code=0x7ffc0000 [ 345.060998][ T5807] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 345.138210][ T8180] loop2: detected capacity change from 0 to 4096 [ 345.158370][ T8180] EXT4-fs: Ignoring removed mblk_io_submit option [ 345.226514][ T8180] EXT4-fs (loop2): Test dummy encryption mode enabled [ 345.244004][ T5807] usb 1-1: Using ep0 maxpacket: 8 [ 345.305656][ T8180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.379674][ T5807] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 345.387917][ T5807] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.398135][ T5807] usb 1-1: config 0 has no interfaces? [ 345.495903][ T5807] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 345.747007][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.764161][ T5807] usb 1-1: Product: syz [ 345.768476][ T5807] usb 1-1: Manufacturer: syz [ 345.773745][ T5807] usb 1-1: SerialNumber: syz [ 345.784858][ T8192] loop3: detected capacity change from 0 to 256 [ 345.785273][ T5807] usb 1-1: config 0 descriptor?? [ 345.826122][ T5765] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 345.966943][ T8190] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 345.976619][ T8190] overlayfs: upper fs does not support tmpfile. [ 345.983590][ T8190] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 346.250004][ T8] usb 1-1: USB disconnect, device number 10 [ 346.265180][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.132834][ T8236] loop1: detected capacity change from 0 to 4096 [ 349.142708][ T8236] EXT4-fs: Ignoring removed mblk_io_submit option [ 349.302677][ T8236] EXT4-fs (loop1): Test dummy encryption mode enabled [ 349.328030][ T8236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.919774][ T8240] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 349.930528][ T8240] overlayfs: upper fs does not support tmpfile. [ 349.936949][ T5807] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 349.940044][ T8240] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 350.254600][ T5807] usb 3-1: Using ep0 maxpacket: 8 [ 350.348160][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.469887][ T5807] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 350.504028][ T5807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.584223][ T5807] usb 3-1: config 0 has no interfaces? [ 350.601779][ T5807] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 350.638040][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.676796][ T5807] usb 3-1: Product: syz [ 350.691954][ T5807] usb 3-1: Manufacturer: syz [ 350.717687][ T5807] usb 3-1: SerialNumber: syz [ 350.740257][ T5807] usb 3-1: config 0 descriptor?? [ 351.095446][ T5807] usb 3-1: USB disconnect, device number 7 [ 352.950045][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 353.008520][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 353.022787][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 353.029893][ T8281] ceph: No mds server is up or the cluster is laggy [ 353.040940][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 353.171452][ T8285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.242188][ T8288] loop1: detected capacity change from 0 to 4096 [ 353.307746][ T8288] EXT4-fs: Ignoring removed mblk_io_submit option [ 353.342989][ T8288] EXT4-fs (loop1): Test dummy encryption mode enabled [ 353.383491][ T8288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.539758][ T8289] loop0: detected capacity change from 0 to 2368 [ 353.916318][ T8291] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 353.926520][ T8291] overlayfs: upper fs does not support tmpfile. [ 353.933409][ T8291] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 354.037836][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.666156][ T5085] Bluetooth: hci2: ACL packet for unknown connection handle 205 [ 354.915322][ T8306] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 354.921891][ T8306] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 354.935414][ T8306] vhci_hcd vhci_hcd.0: Device attached [ 355.550369][ T8308] vhci_hcd: connection closed [ 355.558092][ T11] vhci_hcd: stop threads [ 355.567557][ T11] vhci_hcd: release socket [ 355.572264][ T11] vhci_hcd: disconnect device [ 355.596232][ T8] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 355.603809][ T8] usb 37-1: enqueue for inactive port 0 [ 355.684243][ T8] vhci_hcd: vhci_device speed not set [ 356.386680][ T8320] loop3: detected capacity change from 0 to 256 [ 356.451010][ T5763] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 356.704227][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 356.894107][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 356.921509][ T23] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 356.955969][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.984440][ T23] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 357.013858][ T23] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 357.023100][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.067021][ T23] usb 2-1: Product: syz [ 357.079007][ T23] usb 2-1: Manufacturer: syz [ 357.103875][ T23] usb 2-1: SerialNumber: syz [ 357.145682][ T23] usb 2-1: config 0 descriptor?? [ 359.892479][ T969] usb 2-1: USB disconnect, device number 10 [ 362.027263][ T8359] loop1: detected capacity change from 0 to 256 [ 362.660772][ T5763] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 364.333997][ T5085] Bluetooth: hci1: ACL packet for unknown connection handle 205 [ 364.523341][ T8376] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 364.529922][ T8376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 364.639710][ T8376] vhci_hcd vhci_hcd.0: Device attached [ 365.056087][ T5807] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 365.559625][ T8382] kvm: kvm [8381]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffe800001009 [ 365.647611][ T8382] kvm: kvm [8381]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff75000020f0 [ 365.731506][ T8382] kvm_intel: kvm [8381]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xffaa0000802a [ 366.045294][ T8378] vhci_hcd: connection reset by peer [ 366.194415][ T11] vhci_hcd: stop threads [ 366.224100][ T11] vhci_hcd: release socket [ 366.256731][ T8399] loop2: detected capacity change from 0 to 256 [ 366.266218][ T11] vhci_hcd: disconnect device [ 366.305810][ T5763] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 368.064645][ T8412] syzkaller0: entered promiscuous mode [ 368.104156][ T8412] syzkaller0: entered allmulticast mode [ 368.481644][ T1197] libceph: connect (1)[c::]:6789 error -101 [ 368.525514][ T1197] libceph: mon0 (1)[c::]:6789 connect error [ 368.531624][ T8421] ceph: No mds server is up or the cluster is laggy [ 368.554908][ T8422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 368.592511][ T8422] loop2: detected capacity change from 0 to 2368 [ 370.314725][ T5807] vhci_hcd: vhci_device speed not set [ 371.800058][ T8450] loop2: detected capacity change from 0 to 256 [ 371.868837][ T5765] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 375.491785][ T8480] loop1: detected capacity change from 0 to 1024 [ 375.525139][ T8480] EXT4-fs: inline encryption not supported [ 375.536851][ T8480] EXT4-fs: Ignoring removed i_version option [ 375.580221][ T8480] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 375.646555][ T8480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.781231][ T8480] futex_wake_op: syz.1.665 tries to shift op by -1; fix this program [ 376.361818][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.570081][ T8496] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 376.867103][ T8502] loop2: detected capacity change from 0 to 256 [ 377.206687][ T5763] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 378.887350][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.893841][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.933079][ T8518] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 379.414110][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 379.640326][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 379.667224][ T8] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 379.682884][ T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 379.698998][ T8] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 379.739168][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.763965][ T8] usb 1-1: Product: syz [ 379.780933][ T8] usb 1-1: Manufacturer: syz [ 379.785963][ T8] usb 1-1: SerialNumber: syz [ 379.807856][ T8] usb 1-1: config 0 descriptor?? [ 380.052636][ T8] usb 1-1: USB disconnect, device number 11 [ 381.814296][ T8538] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 381.837524][ T8538] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 382.816346][ T8550] random: crng reseeded on system resumption [ 382.873770][ T5085] Bluetooth: hci3: ACL packet for unknown connection handle 205 [ 382.895274][ T8551] loop2: detected capacity change from 0 to 512 [ 382.946270][ T8552] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 382.952860][ T8552] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 382.989180][ T8551] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802c028, mo2=0002] [ 383.019350][ T8551] System zones: 1-12 [ 383.138287][ T8552] vhci_hcd vhci_hcd.0: Device attached [ 383.329621][ T8551] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.686: bg 0: block 288: padding at end of block bitmap is not set [ 383.613124][ T8553] vhci_hcd: connection closed [ 383.614358][ T49] vhci_hcd: stop threads [ 383.622504][ T8551] EXT4-fs (loop2): Remounting filesystem read-only [ 383.639528][ T49] vhci_hcd: release socket [ 383.666724][ T49] vhci_hcd: disconnect device [ 383.670742][ T8551] EXT4-fs (loop2): 1 truncate cleaned up [ 383.696688][ T8551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.841625][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.014532][ T5827] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 384.264287][ T5827] usb 2-1: Using ep0 maxpacket: 8 [ 384.402183][ T5827] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 384.848689][ T5827] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 384.865223][ T5827] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 384.874788][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.882963][ T5827] usb 2-1: Product: syz [ 384.888624][ T5827] usb 2-1: Manufacturer: syz [ 384.893424][ T5827] usb 2-1: SerialNumber: syz [ 384.915157][ T5827] usb 2-1: config 0 descriptor?? [ 385.133832][ T5827] usb 2-1: USB disconnect, device number 11 [ 387.303085][ T8580] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 387.411223][ T8580] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 388.845327][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 388.873258][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 388.881177][ T8595] ceph: No mds server is up or the cluster is laggy [ 388.896023][ T8588] loop1: detected capacity change from 0 to 40427 [ 388.979780][ T8599] loop3: detected capacity change from 0 to 2368 [ 389.057224][ T8588] F2FS-fs (loop1): Found nat_bits in checkpoint [ 389.112952][ T5805] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 389.138915][ T8598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.157839][ T8588] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 389.185308][ T8594] loop0: detected capacity change from 0 to 512 [ 389.192792][ T8594] ext3: Unknown parameter 'func' [ 389.504135][ T5805] usb 3-1: Using ep0 maxpacket: 8 [ 389.538825][ T5805] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 389.690298][ T5805] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 389.699870][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.713955][ T5805] usb 3-1: Product: syz [ 389.718214][ T5805] usb 3-1: Manufacturer: syz [ 389.733070][ T5805] usb 3-1: SerialNumber: syz [ 389.978976][ T5805] usb 3-1: config 0 descriptor?? [ 390.006900][ T5805] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 390.024083][ T5805] usb 3-1: setting power ON [ 390.033199][ T5805] dvb-usb: bulk message failed: -22 (2/0) [ 391.014574][ T5805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 391.068874][ T5805] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 391.132621][ T5805] usb 3-1: media controller created [ 391.498666][ T5805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 391.804522][ T5805] usb 3-1: selecting invalid altsetting 6 [ 391.811491][ T5805] usb 3-1: digital interface selection failed (-22) [ 391.850368][ T5805] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 391.894467][ T5805] usb 3-1: setting power OFF [ 391.913060][ T5805] dvb-usb: bulk message failed: -22 (2/0) [ 391.932469][ T5805] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 391.964310][ T5805] (NULL device *): no alternate interface [ 392.068499][ T5805] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 392.121634][ T8620] random: crng reseeded on system resumption [ 392.127837][ T5805] usb 3-1: USB disconnect, device number 8 [ 392.224291][ T8622] loop1: detected capacity change from 0 to 512 [ 392.341580][ T8622] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802c028, mo2=0002] [ 392.409163][ T8622] System zones: 1-12 [ 392.470244][ T8622] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.702: bg 0: block 288: padding at end of block bitmap is not set [ 392.495730][ T8622] EXT4-fs (loop1): Remounting filesystem read-only [ 392.518808][ T8622] EXT4-fs (loop1): 1 truncate cleaned up [ 392.556738][ T8622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.846451][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.769047][ T8634] syz.0.708 uses obsolete (PF_INET,SOCK_PACKET) [ 394.716720][ T8647] loop2: detected capacity change from 0 to 512 [ 394.723699][ T8647] ext3: Unknown parameter 'func' [ 394.770423][ T8649] random: crng reseeded on system resumption [ 394.919397][ T8649] loop1: detected capacity change from 0 to 512 [ 394.959521][ T8649] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802c028, mo2=0002] [ 394.968546][ T8649] System zones: 1-12 [ 394.975727][ T8649] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.713: bg 0: block 288: padding at end of block bitmap is not set [ 395.045302][ T8649] EXT4-fs (loop1): Remounting filesystem read-only [ 395.060423][ T8649] EXT4-fs (loop1): 1 truncate cleaned up [ 395.067779][ T8649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.776976][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.997791][ T8686] random: crng reseeded on system resumption [ 398.262915][ T8686] loop1: detected capacity change from 0 to 512 [ 398.338219][ T8688] loop2: detected capacity change from 0 to 512 [ 398.346151][ T8688] ext3: Unknown parameter 'func' [ 398.689740][ T8686] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802c028, mo2=0002] [ 398.697950][ T8686] System zones: 1-12 [ 398.707789][ T8686] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.723: bg 0: block 288: padding at end of block bitmap is not set [ 398.732616][ T8686] EXT4-fs (loop1): Remounting filesystem read-only [ 398.741061][ T8686] EXT4-fs (loop1): 1 truncate cleaned up [ 398.748275][ T8686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.945714][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.457772][ T8681] loop3: detected capacity change from 0 to 65536 [ 400.349101][ T8705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.725'. [ 400.642852][ T8681] NILFS (loop3): error -4 creating segctord thread [ 400.737134][ T8712] loop2: detected capacity change from 0 to 2048 [ 400.875545][ T8712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.895197][ T8712] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.687814][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.817318][ T8735] random: crng reseeded on system resumption [ 403.950492][ T8738] loop1: detected capacity change from 0 to 512 [ 404.070478][ T8738] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802c028, mo2=0002] [ 404.079229][ T8738] System zones: 1-12 [ 404.087808][ T8738] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.736: bg 0: block 288: padding at end of block bitmap is not set [ 404.363977][ T8738] EXT4-fs (loop1): Remounting filesystem read-only [ 404.445583][ T8738] EXT4-fs (loop1): 1 truncate cleaned up [ 404.557429][ T8738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.186397][ T5827] libceph: connect (1)[c::]:6789 error -101 [ 405.192427][ T5827] libceph: mon0 (1)[c::]:6789 connect error [ 405.219626][ T8753] ceph: No mds server is up or the cluster is laggy [ 405.294960][ T8760] loop0: detected capacity change from 0 to 2368 [ 405.302866][ T8758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.418603][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.472331][ T8757] loop2: detected capacity change from 0 to 2048 [ 405.545564][ T8757] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 405.561408][ T8757] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 405.773606][ T5765] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 405.790133][ T5085] Bluetooth: hci0: ACL packet for unknown connection handle 205 [ 405.834067][ T8764] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 405.840624][ T8764] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 405.848813][ T8764] vhci_hcd vhci_hcd.0: Device attached [ 405.864013][ T787] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 406.181462][ T8] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 406.183204][ T787] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 406.219069][ T787] usb 4-1: config 0 has no interface number 0 [ 406.227554][ T787] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 406.248679][ T787] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 406.263170][ T787] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 406.277326][ T787] usb 4-1: Manufacturer: syz [ 406.285256][ T787] usb 4-1: SerialNumber: syz [ 406.293472][ T8771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.743'. [ 406.304100][ T787] usb 4-1: config 0 descriptor?? [ 406.498785][ T8766] vhci_hcd: connection reset by peer [ 406.524216][ T7643] vhci_hcd: stop threads [ 406.540005][ T787] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 406.572019][ T787] usbtouchscreen: probe of 4-1:0.214 failed with error -71 [ 406.595439][ T787] usb 4-1: USB disconnect, device number 9 [ 406.607307][ T7643] vhci_hcd: release socket [ 406.628042][ T7643] vhci_hcd: disconnect device [ 409.779060][ T8795] loop3: detected capacity change from 0 to 4096 [ 409.787810][ T8795] EXT4-fs: Ignoring removed mblk_io_submit option [ 409.810876][ T8795] EXT4-fs (loop3): Test dummy encryption mode enabled [ 409.867120][ T8795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.743128][ T8809] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 410.794446][ T8809] overlayfs: upper fs does not support tmpfile. [ 410.809366][ T8809] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 411.309030][ T8] vhci_hcd: vhci_device speed not set [ 413.147116][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.455725][ T8853] loop1: detected capacity change from 0 to 512 [ 413.513311][ T8853] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802c028, mo2=0002] [ 413.523367][ T8853] System zones: 1-12 [ 413.555564][ T8853] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.763: bg 0: block 288: padding at end of block bitmap is not set [ 413.572869][ T8853] EXT4-fs (loop1): Remounting filesystem read-only [ 413.585461][ T8853] EXT4-fs (loop1): 1 truncate cleaned up [ 413.592603][ T8853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.750010][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.010524][ T5085] Bluetooth: hci0: ACL packet for unknown connection handle 205 [ 414.019383][ T8862] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 414.025911][ T8862] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 414.036263][ T8862] vhci_hcd vhci_hcd.0: Device attached [ 414.513262][ T8863] vhci_hcd: connection closed [ 414.513508][ T11] vhci_hcd: stop threads [ 414.523202][ T11] vhci_hcd: release socket [ 414.527866][ T11] vhci_hcd: disconnect device [ 415.091848][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 415.101881][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 415.138429][ T8870] ceph: No mds server is up or the cluster is laggy [ 415.152120][ T8873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.197341][ T8870] loop2: detected capacity change from 0 to 2368 [ 415.446458][ T8875] netlink: 52 bytes leftover after parsing attributes in process `syz.3.768'. [ 416.023446][ T8880] loop0: detected capacity change from 0 to 512 [ 416.040617][ T8882] loop1: detected capacity change from 0 to 4096 [ 416.049170][ T8880] EXT4-fs: Ignoring removed nobh option [ 416.094308][ T8880] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e118, mo2=0002] [ 416.130208][ T8880] System zones: 1-12 [ 416.146700][ T8880] EXT4-fs (loop0): orphan cleanup on readonly fs [ 416.177953][ T8880] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 416.393714][ T8893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.770'. [ 416.402765][ T8893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.770'. [ 417.268897][ T8880] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #15: comm syz.0.771: corrupted inode contents [ 417.322424][ T8880] EXT4-fs error (device loop0): ext4_dirty_inode:6124: inode #15: comm syz.0.771: mark_inode_dirty error [ 417.334496][ T8880] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #15: comm syz.0.771: corrupted inode contents [ 417.347213][ T8880] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2998: inode #15: comm syz.0.771: mark_inode_dirty error [ 417.360095][ T8880] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.771: mark inode dirty (error -117) [ 417.416174][ T8880] EXT4-fs warning (device loop0): ext4_evict_inode:272: xattr delete (err -117) [ 417.436766][ T8880] EXT4-fs (loop0): 1 orphan inode deleted [ 417.498830][ T8880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 417.815301][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.914108][ T969] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 418.134045][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 418.150561][ T969] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.208807][ T969] usb 3-1: config 0 has no interfaces? [ 418.269692][ T969] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 418.304075][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.334067][ T969] usb 3-1: Product: syz [ 418.341084][ T969] usb 3-1: Manufacturer: syz [ 418.349043][ T969] usb 3-1: SerialNumber: syz [ 418.404573][ T969] usb 3-1: config 0 descriptor?? [ 418.690680][ T5085] Bluetooth: hci1: ACL packet for unknown connection handle 205 [ 418.962134][ T8] usb 3-1: USB disconnect, device number 9 [ 419.102820][ T8909] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 419.109416][ T8909] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 419.121037][ T8909] vhci_hcd vhci_hcd.0: Device attached [ 419.150594][ T8911] vhci_hcd: connection closed [ 419.157976][ T5973] vhci_hcd: stop threads [ 419.167783][ T5973] vhci_hcd: release socket [ 419.172257][ T5973] vhci_hcd: disconnect device [ 419.469981][ T8916] loop1: detected capacity change from 0 to 2048 [ 419.572155][ T8916] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 419.588411][ T8916] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 419.784069][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop1 [ 421.011850][ T8919] loop2: detected capacity change from 0 to 32768 [ 421.061424][ T8919] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 421.102340][ T8919] JBD2: Ignoring recovery information on journal [ 421.227215][ T8919] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 422.055470][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 423.638938][ T8951] loop0: detected capacity change from 0 to 256 [ 423.816114][ T5763] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 426.154659][ T8966] loop2: detected capacity change from 0 to 2048 [ 426.823612][ T8966] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 426.860511][ T8966] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 426.990360][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop2 [ 427.001337][ T8975] team0: Device gtp0 is of different type [ 428.780332][ T8990] loop1: detected capacity change from 0 to 16 [ 428.825588][ T8990] erofs: (device loop1): mounted with root inode @ nid 36. [ 431.913592][ T9016] loop0: detected capacity change from 0 to 2048 [ 432.177496][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop0 [ 432.196172][ T9016] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 432.214130][ T9016] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 432.543225][ T9021] syz.3.805 (9021): drop_caches: 2 [ 435.075960][ T9047] syz.3.807 (9047): drop_caches: 2 [ 435.822194][ T5085] Bluetooth: hci0: ACL packet for unknown connection handle 205 [ 435.845529][ T9048] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 435.852119][ T9048] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 435.864147][ T9048] vhci_hcd vhci_hcd.0: Device attached [ 436.052997][ T9041] loop2: detected capacity change from 0 to 32768 [ 436.197343][ T9049] vhci_hcd: connection closed [ 436.214030][ T12] vhci_hcd: stop threads [ 436.227503][ T12] vhci_hcd: release socket [ 436.232242][ T12] vhci_hcd: disconnect device [ 436.242433][ T9041] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 436.255036][ T969] usb 35-1: new low-speed USB device number 6 using vhci_hcd [ 436.262837][ T969] usb 35-1: enqueue for inactive port 0 [ 436.319501][ T9041] JBD2: Ignoring recovery information on journal [ 436.354782][ T969] vhci_hcd: vhci_device speed not set [ 436.598756][ T9041] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 436.794889][ T9041] (syz.2.811,9041,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 437.028292][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 437.803016][ T9064] loop0: detected capacity change from 0 to 16 [ 437.831909][ T9064] erofs: (device loop0): mounted with root inode @ nid 36. [ 439.351416][ T9069] syz.2.817 (9069): drop_caches: 2 [ 440.356110][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.362465][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.679649][ T9083] loop1: detected capacity change from 0 to 256 [ 441.974022][ T5763] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 446.956279][ T9125] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 447.013623][ T9125] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 449.033284][ T9129] loop3: detected capacity change from 0 to 32768 [ 449.267276][ T9129] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 449.332841][ T9129] JBD2: Ignoring recovery information on journal [ 449.420204][ T9129] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 449.463791][ T9129] (syz.3.834,9129,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 449.541503][ T5779] ocfs2: Unmounting device (7,3) on (node local) [ 449.978667][ T9157] loop0: detected capacity change from 0 to 1024 [ 450.008450][ T9157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.132650][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.487857][ T9171] netlink: 'syz.2.846': attribute type 39 has an invalid length. [ 453.444082][ T787] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 453.646184][ T787] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 453.656152][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.689511][ T787] usb 3-1: config 0 descriptor?? [ 453.709129][ T787] cp210x 3-1:0.0: cp210x converter detected [ 454.316710][ T787] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 454.369711][ T787] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 454.435323][ T787] usb 3-1: cp210x converter now attached to ttyUSB0 [ 454.454417][ T9190] loop1: detected capacity change from 0 to 256 [ 454.497428][ T5765] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 455.075692][ T787] usb 3-1: USB disconnect, device number 10 [ 455.129220][ T787] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 455.222627][ T787] cp210x 3-1:0.0: device disconnected [ 457.651168][ T9213] loop3: detected capacity change from 0 to 8 [ 462.414357][ T9252] loop3: detected capacity change from 0 to 2048 [ 462.478818][ T9252] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 462.574094][ T9252] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 462.930207][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop3 [ 463.938170][ T9267] random: crng reseeded on system resumption [ 464.073267][ T9267] loop1: detected capacity change from 0 to 512 [ 464.103375][ T9267] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802c028, mo2=0002] [ 464.112125][ T9267] System zones: 1-12 [ 464.124559][ T9267] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.874: bg 0: block 288: padding at end of block bitmap is not set [ 464.139860][ T9267] EXT4-fs (loop1): Remounting filesystem read-only [ 464.151938][ T9267] EXT4-fs (loop1): 1 truncate cleaned up [ 464.158914][ T9267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.265697][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.580134][ T5085] Bluetooth: hci0: ACL packet for unknown connection handle 205 [ 464.603575][ T9274] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 464.610123][ T9274] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 464.695910][ T9274] vhci_hcd vhci_hcd.0: Device attached [ 464.984008][ T5807] usb 35-1: new low-speed USB device number 7 using vhci_hcd [ 465.408216][ T9275] vhci_hcd: connection reset by peer [ 465.418320][ T1022] vhci_hcd: stop threads [ 465.422589][ T1022] vhci_hcd: release socket [ 465.428070][ T1022] vhci_hcd: disconnect device [ 467.144448][ T9294] loop1: detected capacity change from 0 to 2048 [ 467.283147][ T9294] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 467.329999][ T9294] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 467.371693][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop1 [ 467.713533][ T9303] random: crng reseeded on system resumption [ 467.855105][ T9305] loop1: detected capacity change from 0 to 512 [ 467.886309][ T9305] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802c028, mo2=0002] [ 467.903689][ T9305] System zones: 1-12 [ 468.951500][ T9305] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.884: bg 0: block 288: padding at end of block bitmap is not set [ 469.038136][ T9305] EXT4-fs (loop1): Remounting filesystem read-only [ 469.047042][ T9305] EXT4-fs (loop1): 1 truncate cleaned up [ 469.056144][ T9305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.203549][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.169853][ T5807] vhci_hcd: vhci_device speed not set [ 470.735600][ T5085] Bluetooth: hci3: ACL packet for unknown connection handle 205 [ 470.833664][ T9325] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 470.840253][ T9325] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 470.856791][ T9325] vhci_hcd vhci_hcd.0: Device attached [ 471.965749][ T9326] vhci_hcd: connection closed [ 471.984376][ T5805] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 472.026288][ T1326] vhci_hcd: stop threads [ 472.043359][ T1326] vhci_hcd: release socket [ 472.113738][ T1326] vhci_hcd: disconnect device [ 472.402609][ T9339] loop2: detected capacity change from 0 to 2048 [ 472.500010][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop2 [ 472.508249][ T9339] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 472.526073][ T9339] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 473.139729][ T9344] random: crng reseeded on system resumption [ 473.199517][ T9345] loop2: detected capacity change from 0 to 512 [ 473.238140][ T9345] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802c028, mo2=0002] [ 473.248095][ T9345] System zones: 1-12 [ 473.253701][ T9345] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.894: bg 0: block 288: padding at end of block bitmap is not set [ 473.308916][ T9345] EXT4-fs (loop2): Remounting filesystem read-only [ 473.350303][ T9345] EXT4-fs (loop2): 1 truncate cleaned up [ 473.371589][ T9345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.939792][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.099203][ T9366] loop1: detected capacity change from 0 to 256 [ 476.131221][ T9366] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7b82335c, utbl_chksum : 0xe619d30d) [ 476.766775][ T9349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 477.195060][ T5805] vhci_hcd: vhci_device speed not set [ 480.462122][ T9404] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 480.492515][ T9404] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 480.563203][ T9404] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 480.575095][ T9404] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 480.612452][ T9404] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 482.098070][ T9439] loop0: detected capacity change from 0 to 256 [ 482.444334][ T5763] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 484.389528][ T9487] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 484.416857][ T9487] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 485.137848][ T9496] loop2: detected capacity change from 0 to 256 [ 485.219410][ T5763] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 489.267094][ T9532] syz.0.935 (9532): drop_caches: 2 [ 490.328274][ T9535] loop1: detected capacity change from 0 to 40427 [ 490.380867][ T9535] F2FS-fs (loop1): invalid crc value [ 490.430230][ T9535] F2FS-fs (loop1): Found nat_bits in checkpoint [ 490.637779][ T9535] F2FS-fs (loop1): Start checkpoint disabled! [ 490.659366][ T9535] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 490.823310][ T9549] IPVS: rr: FWM 3 0x00000003 - no destination available [ 490.843186][ T5805] IPVS: starting estimator thread 0... [ 490.975709][ T9550] IPVS: using max 15 ests per chain, 36000 per kthread [ 492.407365][ T4992] kworker/u4:10: attempt to access beyond end of device [ 492.407365][ T4992] loop1: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 492.459920][ T4992] kworker/u4:10: attempt to access beyond end of device [ 492.459920][ T4992] loop1: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 492.582436][ T4992] kworker/u4:10: attempt to access beyond end of device [ 492.582436][ T4992] loop1: rw=1, sector=57344, nr_sectors = 7064 limit=40427 [ 492.712221][ T4992] kworker/u4:10: attempt to access beyond end of device [ 492.712221][ T4992] loop1: rw=1, sector=64408, nr_sectors = 1128 limit=40427 [ 492.791456][ T4992] kworker/u4:10: attempt to access beyond end of device [ 492.791456][ T4992] loop1: rw=1, sector=69632, nr_sectors = 8 limit=40427 [ 492.856744][ T4992] kworker/u4:10: attempt to access beyond end of device [ 492.856744][ T4992] loop1: rw=1, sector=69640, nr_sectors = 8 limit=40427 [ 492.904196][ T4992] kworker/u4:10: attempt to access beyond end of device [ 492.904196][ T4992] loop1: rw=1, sector=69648, nr_sectors = 8 limit=40427 [ 492.959216][ T4992] kworker/u4:10: attempt to access beyond end of device [ 492.959216][ T4992] loop1: rw=1, sector=69656, nr_sectors = 8 limit=40427 [ 493.014229][ T4992] kworker/u4:10: attempt to access beyond end of device [ 493.014229][ T4992] loop1: rw=1, sector=69664, nr_sectors = 8 limit=40427 [ 493.072263][ T4992] kworker/u4:10: attempt to access beyond end of device [ 493.072263][ T4992] loop1: rw=1, sector=69672, nr_sectors = 8 limit=40427 [ 493.407642][ T4992] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 493.439316][ T9581] loop0: detected capacity change from 0 to 256 [ 493.483238][ T5763] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 497.055153][ T9615] loop2: detected capacity change from 0 to 16 [ 497.089682][ T9615] erofs: (device loop2): mounted with root inode @ nid 36. [ 497.782929][ T9623] loop0: detected capacity change from 0 to 256 [ 497.827244][ T5763] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 501.803243][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.810187][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.354187][ T9657] random: crng reseeded on system resumption [ 502.440150][ T9658] loop1: detected capacity change from 0 to 512 [ 502.483301][ T9658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802c028, mo2=0002] [ 502.496718][ T9658] System zones: 1-12 [ 502.546809][ T9658] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.961: bg 0: block 288: padding at end of block bitmap is not set [ 502.641427][ T9658] EXT4-fs (loop1): Remounting filesystem read-only [ 502.682871][ T9658] EXT4-fs (loop1): 1 truncate cleaned up [ 502.690359][ T9658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.860249][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.458949][ T9675] loop3: detected capacity change from 0 to 256 [ 505.775868][ T9685] loop0: detected capacity change from 0 to 32768 [ 505.792325][ T9685] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.968 (9685) [ 505.824230][ T9685] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 505.844116][ T9685] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 505.853058][ T9685] BTRFS info (device loop0): using free space tree [ 505.903525][ T9685] BTRFS info (device loop0): enabling ssd optimizations [ 505.911744][ T9685] BTRFS info (device loop0): auto enabling async discard [ 506.063339][ T5773] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 506.444308][ T9705] random: crng reseeded on system resumption [ 506.625310][ T9709] loop1: detected capacity change from 0 to 512 [ 506.686479][ T9709] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802c028, mo2=0002] [ 507.092616][ T9709] System zones: 1-12 [ 507.567855][ T9709] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.971: bg 0: block 288: padding at end of block bitmap is not set [ 507.723733][ T9709] EXT4-fs (loop1): Remounting filesystem read-only [ 507.781174][ T9709] EXT4-fs (loop1): 1 truncate cleaned up [ 507.821126][ T9709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.364484][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.194014][ T27] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 509.216538][ T9734] loop3: detected capacity change from 0 to 256 [ 509.384164][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 509.391845][ T27] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 509.405842][ T27] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 509.417339][ T27] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 509.427903][ T27] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 509.437204][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.527309][ T27] hub 2-1:32.0: Invalid hub with more than one config or interface [ 509.543977][ T27] hub: probe of 2-1:32.0 failed with error -22 [ 509.866076][ T8] usb 2-1: USB disconnect, device number 12 [ 512.864063][ T5807] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 513.093966][ T5807] usb 1-1: Using ep0 maxpacket: 8 [ 513.104553][ T5807] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 513.126219][ T5807] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 513.149634][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.188353][ T5807] usb 1-1: Product: syz [ 513.192596][ T5807] usb 1-1: Manufacturer: syz [ 513.239541][ T5807] usb 1-1: SerialNumber: syz [ 513.267398][ T5807] usb 1-1: config 0 descriptor?? [ 513.547330][ T6706] libceph: connect (1)[c::]:6789 error -101 [ 513.554640][ T6706] libceph: mon0 (1)[c::]:6789 connect error [ 514.522671][ T9760] ceph: No mds server is up or the cluster is laggy [ 514.533716][ T6706] libceph: connect (1)[c::]:6789 error -101 [ 514.763619][ T9767] loop3: detected capacity change from 0 to 2368 [ 514.870919][ T6706] libceph: mon0 (1)[c::]:6789 connect error [ 515.081587][ T5807] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 515.090360][ T5807] usb 1-1: setting power ON [ 515.095250][ T9766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 515.111458][ T5807] dvb-usb: bulk message failed: -22 (2/0) [ 515.145225][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 515.223251][ T5807] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 515.256207][ T5807] usb 1-1: media controller created [ 515.284964][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 515.377670][ T5807] usb 1-1: selecting invalid altsetting 6 [ 515.431098][ T5807] usb 1-1: digital interface selection failed (-22) [ 515.448167][ T5807] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 515.479483][ T5807] usb 1-1: setting power OFF [ 515.502703][ T5807] dvb-usb: bulk message failed: -22 (2/0) [ 515.696284][ T5807] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 516.253907][ T5807] (NULL device *): no alternate interface [ 516.490220][ T5807] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 516.527329][ T9777] loop3: detected capacity change from 0 to 2048 [ 516.538019][ T5807] usb 1-1: USB disconnect, device number 12 [ 516.580552][ T9777] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 516.598917][ T9777] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 516.785682][ T9776] sg_write: data in/out 1254841419/90 bytes for SCSI command 0xbf-- guessing data in; [ 516.785682][ T9776] program syz.3.988 not setting count and/or reply_len properly [ 519.257217][ T9796] loop1: detected capacity change from 0 to 16 [ 519.303551][ T9796] erofs: (device loop1): mounted with root inode @ nid 36. [ 521.358286][ T9811] loop0: detected capacity change from 0 to 512 [ 521.369914][ T9811] ext3: Unknown parameter 'func' [ 521.973465][ T9815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.155200][ T9815] loop2: detected capacity change from 0 to 2368 [ 522.385649][ T9813] ceph: No mds server is up or the cluster is laggy [ 522.393187][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 522.434330][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 524.089881][ T9831] loop2: detected capacity change from 0 to 2048 [ 524.153612][ T9831] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 524.211720][ T9831] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 524.308907][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop2 [ 524.368193][ T9830] sg_write: data in/out 1254841419/90 bytes for SCSI command 0xbf-- guessing data in; [ 524.368193][ T9830] program syz.2.1000 not setting count and/or reply_len properly [ 526.994068][ T9849] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 527.000656][ T9849] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 527.015015][ T9849] vhci_hcd vhci_hcd.0: Device attached [ 527.580363][ T9857] loop2: detected capacity change from 0 to 512 [ 527.587770][ T9857] ext3: Unknown parameter 'func' [ 528.405328][ T5807] usb 35-1: new low-speed USB device number 8 using vhci_hcd [ 528.544483][ T9850] vhci_hcd: connection reset by peer [ 528.584416][ T7643] vhci_hcd: stop threads [ 528.588840][ T7643] vhci_hcd: release socket [ 528.600252][ T7643] vhci_hcd: disconnect device [ 529.709819][ T9873] loop3: detected capacity change from 0 to 16 [ 529.741748][ T9873] erofs: (device loop3): mounted with root inode @ nid 36. [ 531.827467][ T9888] loop2: detected capacity change from 0 to 2048 [ 531.917401][ T9888] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 531.932416][ T9888] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 532.012644][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop2 [ 532.191592][ T9885] sg_write: data in/out 1254841419/90 bytes for SCSI command 0xbf-- guessing data in; [ 532.191592][ T9885] program syz.2.1013 not setting count and/or reply_len properly [ 533.745876][ T5807] vhci_hcd: vhci_device speed not set [ 534.426287][ T9894] loop2: detected capacity change from 0 to 4096 [ 534.459716][ T9903] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 534.466463][ T9903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 534.481405][ T9903] vhci_hcd vhci_hcd.0: Device attached [ 534.496087][ T9905] vhci_hcd: connection closed [ 534.504872][ T7643] vhci_hcd: stop threads [ 534.519491][ T7643] vhci_hcd: release socket [ 534.524617][ T7643] vhci_hcd: disconnect device [ 534.631315][ T9894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1016'. [ 534.640598][ T9894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1016'. [ 537.034611][ T9927] loop2: detected capacity change from 0 to 16 [ 537.053970][ T9927] erofs: (device loop2): mounted with root inode @ nid 36. [ 537.358100][ T9931] loop0: detected capacity change from 0 to 2048 [ 537.400184][ T9931] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 537.444112][ T9931] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 537.562868][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop0 [ 538.182360][ T9942] loop0: detected capacity change from 0 to 4096 [ 538.398354][ T9942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1028'. [ 538.407574][ T9942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1028'. [ 538.419866][ T9942] bond0: entered promiscuous mode [ 538.424960][ T9942] bond_slave_0: entered promiscuous mode [ 538.430734][ T9942] bond_slave_1: entered promiscuous mode [ 538.437892][ T9942] bond0: left promiscuous mode [ 538.442670][ T9942] bond_slave_0: left promiscuous mode [ 538.448172][ T9942] bond_slave_1: left promiscuous mode [ 544.039375][ T9976] loop2: detected capacity change from 0 to 2048 [ 544.100607][ T9975] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 544.242751][ T9976] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 544.277597][ T9979] random: crng reseeded on system resumption [ 544.404780][ T9979] loop0: detected capacity change from 0 to 512 [ 544.434344][ T9979] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802c028, mo2=0002] [ 544.442488][ T9979] System zones: 1-12 [ 544.447640][ T9976] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 544.456443][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop2 [ 544.601258][ T9979] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1038: bg 0: block 288: padding at end of block bitmap is not set [ 544.633654][ T9979] EXT4-fs (loop0): Remounting filesystem read-only [ 544.659776][ T9979] EXT4-fs (loop0): 1 truncate cleaned up [ 544.666331][ T9979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.718014][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.101971][ T9990] loop0: detected capacity change from 0 to 16 [ 545.139228][ T9990] erofs: (device loop0): mounted with root inode @ nid 36. [ 549.145810][T10014] random: crng reseeded on system resumption [ 549.286903][T10017] loop0: detected capacity change from 0 to 512 [ 549.449818][T10017] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802c028, mo2=0002] [ 549.483998][T10017] System zones: 1-12 [ 549.490901][T10017] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1049: bg 0: block 288: padding at end of block bitmap is not set [ 549.514059][T10017] EXT4-fs (loop0): Remounting filesystem read-only [ 549.555939][T10017] EXT4-fs (loop0): 1 truncate cleaned up [ 549.574896][T10017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.626048][T10024] loop1: detected capacity change from 0 to 16 [ 549.649731][T10025] loop2: detected capacity change from 0 to 2048 [ 549.727357][T10025] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 549.743706][T10025] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 549.805915][T10024] erofs: (device loop1): mounted with root inode @ nid 36. [ 549.930937][ T6909] udevd[6909]: incorrect ext4 checksum on /dev/loop2 [ 550.178493][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.401212][T10043] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 552.203279][T10052] binder: 10049:10052 ioctl c0306201 0 returned -14 [ 555.167983][T10078] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 555.174562][T10078] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 555.193933][T10078] vhci_hcd vhci_hcd.0: Device attached [ 555.197087][T10069] loop0: detected capacity change from 0 to 32768 [ 555.268851][T10069] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1064 (10069) [ 555.644256][ T5807] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 555.667943][T10079] vhci_hcd: connection closed [ 555.671957][ T7643] vhci_hcd: stop threads [ 555.722090][T10085] loop2: detected capacity change from 0 to 2048 [ 555.743111][T10069] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 555.791453][T10069] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 555.803968][T10069] BTRFS info (device loop0): setting nodatasum [ 555.815180][ T7643] vhci_hcd: release socket [ 555.825863][T10085] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 555.842139][T10085] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 555.848754][T10069] BTRFS info (device loop0): force zlib compression, level 3 [ 555.864295][ T7643] vhci_hcd: disconnect device [ 555.919248][ T5765] udevd[5765]: incorrect ext4 checksum on /dev/loop2 [ 555.936704][T10069] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 555.985011][T10069] BTRFS info (device loop0): use lzo compression, level 0 [ 556.023232][T10069] BTRFS info (device loop0): turning on flush-on-commit [ 556.044008][T10069] BTRFS info (device loop0): enabling auto defrag [ 556.050825][T10069] BTRFS info (device loop0): max_inline at 4096 [ 556.057369][T10069] BTRFS info (device loop0): using free space tree [ 556.069272][ T5765] udevd[5765]: incorrect ext4 checksum on /dev/loop2 [ 556.143465][T10069] BTRFS info (device loop0): enabling ssd optimizations [ 556.420433][T10110] syzkaller0: entered promiscuous mode [ 556.427977][T10110] syzkaller0: entered allmulticast mode [ 556.438996][ T5773] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 557.014783][T10118] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 557.051614][T10118] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 557.540692][T10124] binder: 10107:10124 ioctl c0306201 0 returned -14 [ 559.373522][T10144] loop0: detected capacity change from 0 to 2048 [ 559.466482][T10144] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 559.485332][T10144] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 559.493116][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop0 [ 560.069910][T10151] syzkaller0: entered promiscuous mode [ 560.094176][T10151] syzkaller0: entered allmulticast mode [ 560.808719][ T5807] vhci_hcd: vhci_device speed not set [ 561.636688][T10170] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 561.718487][T10170] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 561.874500][T10173] binder: 10163:10173 ioctl c0306201 0 returned -14 [ 563.206305][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.212671][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.472482][T10191] loop2: detected capacity change from 0 to 2048 [ 563.533270][T10191] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 563.548259][T10191] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 563.591125][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop2 [ 564.310080][T10198] loop2: detected capacity change from 0 to 4096 [ 564.327245][T10200] syzkaller0: entered promiscuous mode [ 564.336172][T10198] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 564.370993][T10200] syzkaller0: entered allmulticast mode [ 564.591370][T10204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1096'. [ 564.601926][T10204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1096'. [ 564.658642][T10209] loop1: detected capacity change from 0 to 16 [ 564.699249][T10209] erofs: (device loop1): mounted with root inode @ nid 36. [ 567.509109][T10233] loop2: detected capacity change from 0 to 2048 [ 567.622597][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop2 [ 567.723913][T10233] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 567.759294][T10233] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 568.016436][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop2 [ 568.527016][T10240] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 569.996239][T10253] loop3: detected capacity change from 0 to 16 [ 570.054993][T10253] erofs: (device loop3): mounted with root inode @ nid 36. [ 571.261989][T10262] loop3: detected capacity change from 0 to 40427 [ 571.302693][T10262] F2FS-fs (loop3): invalid crc value [ 571.311407][T10262] F2FS-fs (loop3): Found nat_bits in checkpoint [ 571.343382][T10262] F2FS-fs (loop3): Start checkpoint disabled! [ 571.351624][T10262] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 571.687382][ T3541] bio_check_eod: 2021 callbacks suppressed [ 571.687401][ T3541] kworker/u4:8: attempt to access beyond end of device [ 571.687401][ T3541] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 571.739493][ T3541] kworker/u4:8: attempt to access beyond end of device [ 571.739493][ T3541] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 571.760711][ T3541] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 571.772579][ T3541] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 571.790662][ T3541] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 571.798494][ T3541] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 572.995131][T10271] loop3: detected capacity change from 0 to 512 [ 573.053362][T10271] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c119, mo2=0002] [ 573.104082][T10271] System zones: 0-2, 18-18, 34-35 [ 573.120050][T10271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.134158][T10271] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 573.344458][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.434244][T10315] loop3: detected capacity change from 0 to 256 [ 576.444055][T10315] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff‰" or missing value [ 576.654189][T10321] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 576.715862][T10321] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 577.593535][T10331] loop1: detected capacity change from 0 to 512 [ 577.989899][T10331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 578.081602][T10331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.102016][T10331] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.698753][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.632356][T10344] capability: warning: `syz.0.1130' uses 32-bit capabilities (legacy support in use) [ 579.914191][ T5805] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 580.023923][ T5807] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 580.127692][ T5805] usb 1-1: Using ep0 maxpacket: 32 [ 580.153543][ T5805] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 580.224129][ T5805] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 580.233243][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.257306][ T5807] usb 4-1: config index 0 descriptor too short (expected 61796, got 100) [ 580.295411][ T5805] usb 1-1: config 0 descriptor?? [ 580.301679][ T5807] usb 4-1: config 1 has an invalid interface number: 1 but max is 0 [ 580.350827][ T5805] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 580.424815][ T5807] usb 4-1: config 1 has an invalid interface number: 1 but max is 0 [ 580.571780][ T5807] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.718396][ T5807] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 580.893512][ T5807] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.921652][ T5807] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x2F, skipping [ 580.950470][ T5807] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 581.009748][ T5807] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 581.050145][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.059012][ T5807] usb 4-1: Product: syz [ 581.063393][ T5807] usb 4-1: Manufacturer: syz [ 581.069336][ T5807] usb 4-1: SerialNumber: syz [ 581.795638][T10366] loop2: detected capacity change from 0 to 40427 [ 581.831525][T10366] F2FS-fs (loop2): invalid crc value [ 581.903534][ T5827] usb 1-1: USB disconnect, device number 13 [ 581.906770][T10366] F2FS-fs (loop2): Found nat_bits in checkpoint [ 581.954336][T10366] F2FS-fs (loop2): Start checkpoint disabled! [ 581.980113][T10366] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 582.219412][ T5807] cdc_ncm 4-1:1.0: bind() failure [ 582.264129][ T5807] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 582.290883][ T5807] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 582.318258][ T5807] usbtest: probe of 4-1:1.1 failed with error -71 [ 582.326522][ T1022] kworker/u4:5: attempt to access beyond end of device [ 582.326522][ T1022] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 582.364973][ T5807] usb 4-1: USB disconnect, device number 10 [ 582.365695][ T1022] kworker/u4:5: attempt to access beyond end of device [ 582.365695][ T1022] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 582.418459][ T1022] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 582.435793][ T1022] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 582.501658][ T1022] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 582.510408][ T1022] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 584.959413][T10403] loop3: detected capacity change from 0 to 40427 [ 585.070918][T10403] F2FS-fs (loop3): invalid crc value [ 585.101591][T10403] F2FS-fs (loop3): Found nat_bits in checkpoint [ 585.159321][T10403] F2FS-fs (loop3): Start checkpoint disabled! [ 585.254703][T10403] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 586.227878][ T5973] kworker/u4:11: attempt to access beyond end of device [ 586.227878][ T5973] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 586.307031][ T7643] kworker/u4:12: attempt to access beyond end of device [ 586.307031][ T7643] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 586.335243][ T7643] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 586.343416][ T7643] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 586.353676][ T7643] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 586.362819][ T7643] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 589.757619][T10453] loop0: detected capacity change from 0 to 40427 [ 589.785136][T10453] F2FS-fs (loop0): invalid crc value [ 589.820731][T10453] F2FS-fs (loop0): Found nat_bits in checkpoint [ 589.874828][T10453] F2FS-fs (loop0): Start checkpoint disabled! [ 589.891628][T10453] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 590.232054][ T4992] kworker/u4:10: attempt to access beyond end of device [ 590.232054][ T4992] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 590.255484][ T4992] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 590.272869][ T4992] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 591.042843][T10468] loop1: detected capacity change from 0 to 2368 [ 591.468497][T10467] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 592.737711][T10481] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1167'. [ 593.670403][T10484] loop1: detected capacity change from 0 to 40427 [ 593.733363][T10484] F2FS-fs (loop1): invalid crc value [ 593.775390][T10484] F2FS-fs (loop1): Found nat_bits in checkpoint [ 593.815528][T10484] F2FS-fs (loop1): Start checkpoint disabled! [ 593.824707][T10484] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 594.161716][ T5973] kworker/u4:11: attempt to access beyond end of device [ 594.161716][ T5973] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 594.186658][ T5973] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 594.194938][ T5973] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 594.770905][T10502] loop0: detected capacity change from 0 to 512 [ 594.840871][T10504] loop2: detected capacity change from 0 to 1024 [ 594.876593][T10502] EXT4-fs (loop0): 1 orphan inode deleted [ 594.889155][T10504] EXT4-fs: Ignoring removed bh option [ 594.895148][T10502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.922618][T10504] EXT4-fs: Ignoring removed oldalloc option [ 594.925723][ T1326] __quota_error: 14 callbacks suppressed [ 594.925737][ T1326] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 594.944858][T10504] EXT4-fs: Ignoring removed nobh option [ 594.951290][T10502] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.992404][ T1326] EXT4-fs error (device loop0): ext4_release_dquot:6985: comm kworker/u4:7: Failed to release dquot type 1 [ 595.035184][T10504] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 595.217953][T10504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.448971][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.430376][T10523] loop3: detected capacity change from 0 to 128 [ 597.446864][T10523] EXT4-fs (loop3): Test dummy encryption mode enabled [ 597.462231][T10523] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 597.496577][T10523] ext4 filesystem being mounted at /290/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 597.902167][T10532] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 598.258441][T10523] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 598.466014][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.520760][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 598.895650][T10547] random: crng reseeded on system resumption [ 598.961311][T10548] loop0: detected capacity change from 0 to 512 [ 599.023183][T10548] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802c028, mo2=0002] [ 599.074015][T10548] System zones: 1-12 [ 599.124026][T10548] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1180: bg 0: block 288: padding at end of block bitmap is not set [ 599.205776][T10548] EXT4-fs (loop0): Remounting filesystem read-only [ 599.297111][T10553] loop3: detected capacity change from 0 to 2048 [ 599.333703][T10548] EXT4-fs (loop0): 1 truncate cleaned up [ 599.342751][T10548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.389813][T10553] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 599.489874][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop3 [ 599.499651][T10553] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 599.792494][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.912247][T10555] loop1: detected capacity change from 0 to 4096 [ 600.077014][T10556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1182'. [ 600.086239][T10556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1182'. [ 602.141361][T10561] loop3: detected capacity change from 0 to 16 [ 602.185125][T10561] erofs: (device loop3): mounted with root inode @ nid 36. [ 602.823892][T10575] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 602.845096][T10575] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 603.391348][T10577] loop1: detected capacity change from 0 to 4096 [ 603.413570][T10577] EXT4-fs: Ignoring removed mblk_io_submit option [ 603.430692][T10577] EXT4-fs (loop1): Test dummy encryption mode enabled [ 604.219280][T10588] loop0: detected capacity change from 0 to 2368 [ 604.610378][T10584] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 604.653574][T10583] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 604.669276][T10583] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 604.683842][T10583] vhci_hcd vhci_hcd.0: Device attached [ 604.713608][T10587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.039299][T10577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.122485][ T8] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 605.344477][T10585] vhci_hcd: connection reset by peer [ 605.361458][ T1326] vhci_hcd: stop threads [ 605.408970][ T1326] vhci_hcd: release socket [ 605.416829][ T1326] vhci_hcd: disconnect device [ 606.192424][T10601] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 606.202151][T10601] overlayfs: upper fs does not support tmpfile. [ 606.210686][T10601] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 606.353276][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.785685][T10600] loop2: detected capacity change from 0 to 4096 [ 608.806743][T10600] ntfs3: loop2: Failed to read $AttrDef (-4). [ 608.980181][T10625] loop0: detected capacity change from 0 to 16 [ 609.011688][T10625] erofs: (device loop0): mounted with root inode @ nid 36. [ 609.773116][T10633] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 610.238408][ T8] vhci_hcd: vhci_device speed not set [ 610.823980][T10640] loop2: detected capacity change from 0 to 40427 [ 610.927173][T10640] F2FS-fs (loop2): invalid crc value [ 611.194441][T10641] ceph: No mds server is up or the cluster is laggy [ 611.202087][T10646] loop0: detected capacity change from 0 to 2368 [ 611.219955][ T5805] libceph: connect (1)[c::]:6789 error -101 [ 611.226536][T10640] F2FS-fs (loop2): Found nat_bits in checkpoint [ 611.346102][T10640] F2FS-fs (loop2): Start checkpoint disabled! [ 611.496419][T10640] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 611.549942][T10643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 611.552430][ T5805] libceph: mon0 (1)[c::]:6789 connect error [ 612.835607][ T1022] kworker/u4:5: attempt to access beyond end of device [ 612.835607][ T1022] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 612.850550][ T1022] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 612.864824][ T1022] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 612.929554][T10659] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 612.936139][T10659] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 613.101396][T10659] vhci_hcd vhci_hcd.0: Device attached [ 613.209238][T10656] loop1: detected capacity change from 0 to 4096 [ 613.276703][T10660] vhci_hcd: connection closed [ 613.280705][ T4590] vhci_hcd: stop threads [ 613.295534][ T4590] vhci_hcd: release socket [ 613.302693][ T4590] vhci_hcd: disconnect device [ 613.314569][ T8] vhci_hcd: vhci_device speed not set [ 613.522060][T10666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1207'. [ 613.571183][T10666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1207'. [ 615.961275][T10688] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1213'. [ 617.069692][T10693] loop3: detected capacity change from 0 to 512 [ 617.080438][T10693] ext3: Unknown parameter 'func' [ 617.988742][T10698] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 618.102589][T10698] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 618.634319][T10704] loop0: detected capacity change from 0 to 4096 [ 618.658186][T10704] EXT4-fs: Ignoring removed mblk_io_submit option [ 618.727946][T10702] loop3: detected capacity change from 0 to 4096 [ 618.788678][T10704] EXT4-fs (loop0): Test dummy encryption mode enabled [ 618.885629][T10704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.600969][T10707] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 620.610817][T10707] overlayfs: upper fs does not support tmpfile. [ 620.617837][T10707] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 621.108913][T10711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1217'. [ 621.158581][T10711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1217'. [ 621.185079][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.364145][T10724] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 621.370695][T10724] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 621.413993][T10724] vhci_hcd vhci_hcd.0: Device attached [ 621.757047][ T6706] usb 35-1: new low-speed USB device number 9 using vhci_hcd [ 622.660983][T10725] vhci_hcd: connection reset by peer [ 622.717017][ T11] vhci_hcd: stop threads [ 622.721480][ T11] vhci_hcd: release socket [ 622.726378][ T11] vhci_hcd: disconnect device [ 623.313575][T10739] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1222'. [ 624.631411][T10748] loop2: detected capacity change from 0 to 512 [ 624.644156][T10748] ext3: Unknown parameter 'func' [ 624.650436][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.661685][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.390942][T10764] loop1: detected capacity change from 0 to 4096 [ 626.838497][T10765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1229'. [ 626.853965][T10765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1229'. [ 627.610409][T10771] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 627.682234][T10776] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1231'. [ 628.371262][ T6706] vhci_hcd: vhci_device speed not set [ 628.720221][T10780] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 628.726768][T10780] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 628.751621][T10780] vhci_hcd vhci_hcd.0: Device attached [ 629.194058][ T6706] usb 35-1: device descriptor read/64, error -110 [ 629.649441][T10782] vhci_hcd: connection closed [ 629.653998][ T1326] vhci_hcd: stop threads [ 629.673487][ T1326] vhci_hcd: release socket [ 629.684088][ T6706] usb 35-1: new low-speed USB device number 10 using vhci_hcd [ 629.685486][ T1326] vhci_hcd: disconnect device [ 632.501638][T10808] loop2: detected capacity change from 0 to 16 [ 632.522011][T10808] erofs: (device loop2): mounted with root inode @ nid 36. [ 633.747535][T10814] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1240'. [ 635.067091][ T6706] vhci_hcd: vhci_device speed not set [ 636.078754][T10827] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 637.276510][T10837] loop0: detected capacity change from 0 to 4096 [ 637.833751][T10841] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 638.012426][ T28] audit: type=1800 audit(1774596258.223:26): pid=10837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1247" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 639.358365][T10847] loop2: detected capacity change from 0 to 4096 [ 639.899761][T10859] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1253'. [ 640.694724][T10850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1251'. [ 640.704472][T10850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1251'. [ 643.265093][T10880] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 644.831614][T10893] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1262'. [ 648.339742][T10921] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 648.446250][T10921] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 648.974947][T10929] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1272'. [ 655.849268][T10972] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1284'. [ 657.683116][T10984] loop3: detected capacity change from 0 to 2048 [ 657.825128][T10984] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 657.852244][T10984] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 657.911159][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop3 [ 662.240379][T11012] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1296'. [ 663.361414][T11025] loop2: detected capacity change from 0 to 2048 [ 663.385178][T11025] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 663.413001][T11025] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 664.641384][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop2 [ 666.161015][T11046] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1306'. [ 668.463394][T11054] loop0: detected capacity change from 0 to 40427 [ 668.480658][T11054] F2FS-fs (loop0): invalid crc value [ 668.489549][T11054] F2FS-fs (loop0): Found nat_bits in checkpoint [ 668.538420][T11054] F2FS-fs (loop0): Start checkpoint disabled! [ 668.548807][T11054] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 669.201083][ T1326] kworker/u4:7: attempt to access beyond end of device [ 669.201083][ T1326] loop0: rw=1, sector=45096, nr_sectors = 56 limit=40427 [ 669.227495][ T1326] kworker/u4:7: attempt to access beyond end of device [ 669.227495][ T1326] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 669.245782][T11067] loop1: detected capacity change from 0 to 2048 [ 669.291107][T11067] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 669.333452][T11067] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 669.351018][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop1 [ 669.366771][ T1326] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 669.392435][ T1326] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 669.409973][ T1326] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 669.425797][ T1326] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 670.479587][T11078] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1315'. [ 670.495463][T11078] ------------[ cut here ]------------ [ 670.500970][T11078] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 670.521129][T11078] WARNING: CPU: 1 PID: 11078 at net/sched/cls_u32.c:855 u32_change+0x1c5a/0x24f0 [ 670.530846][T11078] Modules linked in: [ 670.535075][T11078] CPU: 1 PID: 11078 Comm: syz.2.1315 Not tainted syzkaller #0 [ 670.542574][T11078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 670.552743][T11078] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 670.558109][T11078] Code: f8 eb 59 e8 58 b0 d8 f8 c6 05 35 39 c7 05 01 b9 10 00 00 00 48 c7 c7 80 5c c7 8b 4c 89 f6 48 c7 c2 00 5d c7 8b e8 66 68 a2 f8 <0f> 0b e9 86 f0 ff ff e8 2a b0 d8 f8 eb 24 e8 23 b0 d8 f8 c6 05 d7 [ 670.577954][T11078] RSP: 0018:ffffc900032a6d40 EFLAGS: 00010246 [ 670.584103][T11078] RAX: b8249562bb2f6b00 RBX: ffff88802b989400 RCX: 0000000000080000 [ 670.592136][T11078] RDX: ffffc9000d97b000 RSI: 0000000000006c65 RDI: 0000000000006c66 [ 670.600214][T11078] RBP: ffffc900032a6ef8 R08: ffffc900032a6947 R09: 1ffff92000654d28 [ 670.608269][T11078] R10: dffffc0000000000 R11: fffff52000654d29 R12: ffff888022762800 [ 670.616347][T11078] R13: ffff8880227628e8 R14: 0000000000000020 R15: ffff88807a113b80 [ 670.624529][T11078] FS: 00007fb33c2d76c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 670.633498][T11078] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 670.640167][T11078] CR2: 000000110c3eb7de CR3: 000000001c7fe000 CR4: 00000000003526e0 [ 670.648240][T11078] Call Trace: [ 670.651567][T11078] [ 670.654636][T11078] ? tc_new_tfilter+0x8f7/0x17c0 [ 670.659641][T11078] ? u32_get+0x370/0x370 [ 670.664033][T11078] ? u32_get+0x370/0x370 [ 670.668319][T11078] tc_new_tfilter+0x11f9/0x17c0 [ 670.673264][T11078] ? tcf_proto_signal_destroying+0x240/0x240 [ 670.679401][T11078] ? rcu_read_unlock+0x8c/0xa0 [ 670.684272][T11078] ? tcf_proto_signal_destroying+0x240/0x240 [ 670.690304][T11078] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 670.695519][T11078] ? tcf_proto_signal_destroying+0x240/0x240 [ 670.701554][T11078] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 670.706589][T11078] ? lockdep_hardirqs_on+0x98/0x150 [ 670.711825][T11078] ? rtnetlink_bind+0x80/0x80 [ 670.716622][T11078] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 670.722652][T11078] ? lock_chain_count+0x20/0x20 [ 670.727595][T11078] ? __local_bh_enable_ip+0x13a/0x1c0 [ 670.733014][T11078] ? lockdep_hardirqs_on+0x98/0x150 [ 670.738323][T11078] ? __local_bh_enable_ip+0x13a/0x1c0 [ 670.743733][T11078] ? _local_bh_enable+0xa0/0xa0 [ 670.748697][T11078] ? __dev_queue_xmit+0x265/0x3660 [ 670.753958][T11078] ? __dev_queue_xmit+0x265/0x3660 [ 670.759121][T11078] ? __dev_queue_xmit+0x1b2c/0x3660 [ 670.764421][T11078] ? __dev_queue_xmit+0x265/0x3660 [ 670.769597][T11078] ? ref_tracker_free+0x690/0x840 [ 670.774748][T11078] netlink_rcv_skb+0x241/0x4d0 [ 670.779571][T11078] ? rtnetlink_bind+0x80/0x80 [ 670.784326][T11078] ? netlink_ack+0x1180/0x1180 [ 670.789158][T11078] ? __lock_acquire+0x7d40/0x7d40 [ 670.794338][T11078] ? netlink_deliver_tap+0x2e/0x1b0 [ 670.799593][T11078] netlink_unicast+0x751/0x8d0 [ 670.804470][T11078] netlink_sendmsg+0x8d0/0xbf0 [ 670.809295][T11078] ? netlink_getsockopt+0x590/0x590 [ 670.814598][T11078] ? aa_sock_msg_perm+0x94/0x150 [ 670.819587][T11078] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 670.824947][T11078] ? security_socket_sendmsg+0x80/0xa0 [ 670.830443][T11078] ? netlink_getsockopt+0x590/0x590 [ 670.836358][T11078] ____sys_sendmsg+0x5ba/0x960 [ 670.841166][T11078] ? __asan_memset+0x22/0x40 [ 670.845831][T11078] ? __sys_sendmsg_sock+0x30/0x30 [ 670.850892][T11078] ? __import_iovec+0x5f2/0x850 [ 670.855844][T11078] ? import_iovec+0x73/0xa0 [ 670.860395][T11078] ___sys_sendmsg+0x2a6/0x360 [ 670.865182][T11078] ? __sys_sendmsg+0x2a0/0x2a0 [ 670.870136][T11078] __sys_sendmmsg+0x2ca/0x510 [ 670.874928][T11078] ? __ia32_sys_sendmsg+0x90/0x90 [ 670.880002][T11078] ? __ia32_sys_get_robust_list+0x110/0x110 [ 670.885981][T11078] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 670.892010][T11078] ? lock_chain_count+0x20/0x20 [ 670.896966][T11078] __x64_sys_sendmmsg+0xa0/0xb0 [ 670.901871][T11078] do_syscall_64+0x55/0xa0 [ 670.906370][T11078] ? clear_bhb_loop+0x40/0x90 [ 670.911088][T11078] ? clear_bhb_loop+0x40/0x90 [ 670.915854][T11078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 670.921788][T11078] RIP: 0033:0x7fb33b39c799 [ 670.926289][T11078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.945999][T11078] RSP: 002b:00007fb33c2d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 670.954605][T11078] RAX: ffffffffffffffda RBX: 00007fb33b615fa0 RCX: 00007fb33b39c799 [ 670.962619][T11078] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 670.970686][T11078] RBP: 00007fb33b432c99 R08: 0000000000000000 R09: 0000000000000000 [ 670.978743][T11078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.986817][T11078] R13: 00007fb33b616038 R14: 00007fb33b615fa0 R15: 00007ffe5c07c258 [ 670.994896][T11078] [ 670.997954][T11078] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 671.005274][T11078] CPU: 1 PID: 11078 Comm: syz.2.1315 Not tainted syzkaller #0 [ 671.012764][T11078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 671.022844][T11078] Call Trace: [ 671.026130][T11078] [ 671.029067][T11078] dump_stack_lvl+0x18c/0x250 [ 671.033772][T11078] ? show_regs_print_info+0x20/0x20 [ 671.039000][T11078] ? load_image+0x400/0x400 [ 671.043525][T11078] panic+0x2dc/0x730 [ 671.047432][T11078] ? bpf_jit_dump+0xd0/0xd0 [ 671.051958][T11078] __warn+0x2e0/0x470 [ 671.055950][T11078] ? u32_change+0x1c5a/0x24f0 [ 671.060641][T11078] ? u32_change+0x1c5a/0x24f0 [ 671.065326][T11078] report_bug+0x2be/0x4f0 [ 671.069661][T11078] ? u32_change+0x1c5a/0x24f0 [ 671.074351][T11078] ? u32_change+0x1c5a/0x24f0 [ 671.079035][T11078] ? u32_change+0x1c5c/0x24f0 [ 671.083723][T11078] handle_bug+0xcf/0x120 [ 671.087975][T11078] exc_invalid_op+0x1a/0x50 [ 671.092483][T11078] asm_exc_invalid_op+0x1a/0x20 [ 671.097347][T11078] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 671.102642][T11078] Code: f8 eb 59 e8 58 b0 d8 f8 c6 05 35 39 c7 05 01 b9 10 00 00 00 48 c7 c7 80 5c c7 8b 4c 89 f6 48 c7 c2 00 5d c7 8b e8 66 68 a2 f8 <0f> 0b e9 86 f0 ff ff e8 2a b0 d8 f8 eb 24 e8 23 b0 d8 f8 c6 05 d7 [ 671.122263][T11078] RSP: 0018:ffffc900032a6d40 EFLAGS: 00010246 [ 671.128342][T11078] RAX: b8249562bb2f6b00 RBX: ffff88802b989400 RCX: 0000000000080000 [ 671.136322][T11078] RDX: ffffc9000d97b000 RSI: 0000000000006c65 RDI: 0000000000006c66 [ 671.144298][T11078] RBP: ffffc900032a6ef8 R08: ffffc900032a6947 R09: 1ffff92000654d28 [ 671.152277][T11078] R10: dffffc0000000000 R11: fffff52000654d29 R12: ffff888022762800 [ 671.160263][T11078] R13: ffff8880227628e8 R14: 0000000000000020 R15: ffff88807a113b80 [ 671.168264][T11078] ? tc_new_tfilter+0x8f7/0x17c0 [ 671.173225][T11078] ? u32_get+0x370/0x370 [ 671.177499][T11078] ? u32_get+0x370/0x370 [ 671.181749][T11078] tc_new_tfilter+0x11f9/0x17c0 [ 671.186638][T11078] ? tcf_proto_signal_destroying+0x240/0x240 [ 671.192643][T11078] ? rcu_read_unlock+0x8c/0xa0 [ 671.197426][T11078] ? tcf_proto_signal_destroying+0x240/0x240 [ 671.203419][T11078] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 671.208535][T11078] ? tcf_proto_signal_destroying+0x240/0x240 [ 671.214526][T11078] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 671.219472][T11078] ? lockdep_hardirqs_on+0x98/0x150 [ 671.224682][T11078] ? rtnetlink_bind+0x80/0x80 [ 671.229372][T11078] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 671.235372][T11078] ? lock_chain_count+0x20/0x20 [ 671.240235][T11078] ? __local_bh_enable_ip+0x13a/0x1c0 [ 671.245621][T11078] ? lockdep_hardirqs_on+0x98/0x150 [ 671.250827][T11078] ? __local_bh_enable_ip+0x13a/0x1c0 [ 671.256204][T11078] ? _local_bh_enable+0xa0/0xa0 [ 671.261066][T11078] ? __dev_queue_xmit+0x265/0x3660 [ 671.266185][T11078] ? __dev_queue_xmit+0x265/0x3660 [ 671.271305][T11078] ? __dev_queue_xmit+0x1b2c/0x3660 [ 671.276523][T11078] ? __dev_queue_xmit+0x265/0x3660 [ 671.281654][T11078] ? ref_tracker_free+0x690/0x840 [ 671.286698][T11078] netlink_rcv_skb+0x241/0x4d0 [ 671.291483][T11078] ? rtnetlink_bind+0x80/0x80 [ 671.296176][T11078] ? netlink_ack+0x1180/0x1180 [ 671.300962][T11078] ? __lock_acquire+0x7d40/0x7d40 [ 671.305997][T11078] ? netlink_deliver_tap+0x2e/0x1b0 [ 671.311237][T11078] netlink_unicast+0x751/0x8d0 [ 671.316031][T11078] netlink_sendmsg+0x8d0/0xbf0 [ 671.320815][T11078] ? netlink_getsockopt+0x590/0x590 [ 671.326029][T11078] ? aa_sock_msg_perm+0x94/0x150 [ 671.330978][T11078] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 671.336277][T11078] ? security_socket_sendmsg+0x80/0xa0 [ 671.341741][T11078] ? netlink_getsockopt+0x590/0x590 [ 671.346955][T11078] ____sys_sendmsg+0x5ba/0x960 [ 671.351731][T11078] ? __asan_memset+0x22/0x40 [ 671.356332][T11078] ? __sys_sendmsg_sock+0x30/0x30 [ 671.361358][T11078] ? __import_iovec+0x5f2/0x850 [ 671.366221][T11078] ? import_iovec+0x73/0xa0 [ 671.370739][T11078] ___sys_sendmsg+0x2a6/0x360 [ 671.375427][T11078] ? __sys_sendmsg+0x2a0/0x2a0 [ 671.380238][T11078] __sys_sendmmsg+0x2ca/0x510 [ 671.384936][T11078] ? __ia32_sys_sendmsg+0x90/0x90 [ 671.389983][T11078] ? __ia32_sys_get_robust_list+0x110/0x110 [ 671.395897][T11078] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 671.401889][T11078] ? lock_chain_count+0x20/0x20 [ 671.406756][T11078] __x64_sys_sendmmsg+0xa0/0xb0 [ 671.411614][T11078] do_syscall_64+0x55/0xa0 [ 671.416048][T11078] ? clear_bhb_loop+0x40/0x90 [ 671.420749][T11078] ? clear_bhb_loop+0x40/0x90 [ 671.425452][T11078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 671.431361][T11078] RIP: 0033:0x7fb33b39c799 [ 671.435802][T11078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.455427][T11078] RSP: 002b:00007fb33c2d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 671.463856][T11078] RAX: ffffffffffffffda RBX: 00007fb33b615fa0 RCX: 00007fb33b39c799 [ 671.471836][T11078] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 671.479835][T11078] RBP: 00007fb33b432c99 R08: 0000000000000000 R09: 0000000000000000 [ 671.487809][T11078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.495784][T11078] R13: 00007fb33b616038 R14: 00007fb33b615fa0 R15: 00007ffe5c07c258 [ 671.503781][T11078] [ 671.507148][T11078] Kernel Offset: disabled [ 671.511468][T11078] Rebooting in 86400 seconds..