last executing test programs: 9.888381006s ago: executing program 1 (id=345): recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) sendto$inet6(r2, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={r5, 0xfffffffd, 0x6, 0x0, 0x2, [0x0], [0x0, 0x2, 0x400, 0x9], [0x0, 0x0, 0xfffffffc, 0x3], [0x1, 0xfffffffffffffffd, 0x8000000000000001]}) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x2c, r7, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc75}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8088, &(0x7f00000001c0), 0x2, 0x1108, &(0x7f0000001a40)="$eJzs2b+LE0EUB/DvbOKPbmWvXwQtLOS4I/aSQiGtrRaKXOVVl0qx8I/xz9Gr7I/rtTjQemW9bBIkIpioHHw+EGby9r2ZnfLNBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrj5HNJ9qqkGWJVkpK07ensPEk7xG99GFUpeXI0mz86mTye593iQXmalCqXZWkO79xsJs2kOWwe7E3vfpy/fvPqxfHx0cmQnTZnF7s/Sr/3aPfLAgAAwJXXba3+z/sDAAAAv7OziwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9TVq3kzTKqkJGnb09l5P26ou/aP3g8AAADYXkmVZ/Wm+I9rgDX386kuKbmxjHwtfc5B3m+oBwAAAH6pG7rr9e/r5fqqH79XjZd9eR+7nXH29y//L4Z8mSajJAc/LX528fbl8Ctdn5Fvz6cP//KRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDv7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAADgqwAAAP//chDZJQ==") 8.615544487s ago: executing program 1 (id=348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff1}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 7.316704949s ago: executing program 2 (id=353): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000040), 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[0x0], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r1, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 7.274084451s ago: executing program 1 (id=355): r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) fstat(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000e80)) r2 = getpid() prlimit64(r2, 0xe, &(0x7f0000000380)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000580), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="28000000130a0103000000000000"], 0x28}}, 0x0) 7.177078133s ago: executing program 2 (id=357): recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) sendto$inet6(r4, &(0x7f0000000080)="800037bb", 0x4, 0x0, 0x0, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000780)={r6, 0xfffffffd, 0x6, 0x0, 0x2, [0x0], [0x0, 0x2, 0x400, 0x9], [0x0, 0x0, 0xfffffffc, 0x3], [0x1, 0xfffffffffffffffd, 0x8000000000000001]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x0, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc75}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7}) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8088, &(0x7f00000001c0), 0x2, 0x1108, &(0x7f0000001a40)="$eJzs2b+LE0EUB/DvbOKPbmWvXwQtLOS4I/aSQiGtrRaKXOVVl0qx8I/xz9Gr7I/rtTjQemW9bBIkIpioHHw+EGby9r2ZnfLNBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrj5HNJ9qqkGWJVkpK07ensPEk7xG99GFUpeXI0mz86mTye593iQXmalCqXZWkO79xsJs2kOWwe7E3vfpy/fvPqxfHx0cmQnTZnF7s/Sr/3aPfLAgAAwJXXba3+z/sDAAAAv7OziwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9TVq3kzTKqkJGnb09l5P26ou/aP3g8AAADYXkmVZ/Wm+I9rgDX386kuKbmxjHwtfc5B3m+oBwAAAH6pG7rr9e/r5fqqH79XjZd9eR+7nXH29y//L4Z8mSajJAc/LX528fbl8Ctdn5Fvz6cP//KRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDv7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAADgqwAAAP//chDZJQ==") 6.007074601s ago: executing program 1 (id=361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000cc0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto$packet(r2, &(0x7f0000000d40)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.960313413s ago: executing program 2 (id=362): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdb7d, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c004}, 0x4000000) 5.935901503s ago: executing program 2 (id=363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff1}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 3.935472243s ago: executing program 3 (id=373): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x7}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e", 0x9}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 3.844277715s ago: executing program 3 (id=374): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x11, &(0x7f0000000580)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@auto_da_alloc}, {@noblock_validity}, {@noload}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x0, 0x634, &(0x7f0000000a80)="$eJzs3c1vVFUbAPDn3k6/3/edQt6ouJBGYyBRWlrAEGMC3bgiBD92riotBBkooTVaJLFNcGNi3LgwceVC/C+UxK0Lty7cuDIkxBgWYlDG3Jk7ZTrt9Hs6pf39kmnvnTtzzrlNn3nOnDnnTgB71mD2I404EBHXkohi3bFC5AcHq4+7/8fN89ktiXL5rd+TuPlxMldfVpL/7s+f/E8xkp/SiP0dS+udnr1xebxUmrye7w/PXLk2PD1748ilK+MXJy9OXh19ZfTkieMnTo4c3dT55VX/nf04c+u9D4qfnn3nm68eJiPf/nI2idPxKH9Adl6Nz+3eVM3Z32wwylUPFh1II05usuyd4s9i7f+kojv7h0gK7WwR65FGxKmI6IyIp6MYHfE4WIvxyRttbRzQUuUkKjlqsAzsPUk0PXSpJ3+RWKqnpW0CtkOtH1B7b7/c++Cl0lZ2SYBtcm+sOlZXjf3OiKjFf6E6Nhg9lbGBvvtJ/ThPZaxvcyNzVVkdP/5w9lZ2iybjcEBrzM3XRrkb839Sic2BqL4H6LufLvpsYCzvBaT55wRvNha8xsHzwYZ98Q/bZ24+Ip7J839XrBj/9fk/zWO3Fv/vbrB+8Q8AAAAAAABb585YRLy83Py/dGH+T9cy83/6I+L0FtS/+ud/6d18I9mC6oA698YiXlt2/u/CHN+Bjnzvv5X5AJ3JhUulyaMR8b+IOByd3dn+SEO59TOEj3y2/8tm9dfP/8tuWf21uYB5SXcLDXOJJsZnxjd73kDEvfmIZyvzfw/m9yye/5Pl/2SZ/J/F97U11rH/xdvnmh1bPf6BVil/HXFo2fz/uLudrHx9juFKf2C41itY6rmPPv+uWf3iH9ony/99K8d/d1J/vZ7p9ZXfFRHHZgvlZsc32v/vSt7uqJWf+XB8Zub6SERXcmbp/aPrazPsVrV4qMVLFv+HX1h5/G+h/18Xh70RMbfGOp961P9rs2PyP7RPFv8TK+f/4uL8v/6N0dsD3zer/9ya8v/xSk4/nN9j/A/qLb0ex1oDtC3NBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnXBoR/4kkHVrYTtOhoYj+iPh/9KWlqemZly5MvX91IjtW+f7/tPZNv8XqflL7/v+Buv3Rhv1jEbEvIr7o6K3sD52fKk20++QBAAAAAAAAAAAAAAAAAABgh+ivrPkvdzeu/8/81tHu1gEtV8h/i3fYewobfma5e0sbAmy7jcc/8CSbX1f8d7a0LcD2ax7/Dx6WKxrufv35lrcJ2B76/7B3bTD+fVwAu4D8D3vVGsf0elrdDqAd5H8AAAAAANhV9h2883MSEXOv9lZuma78WG9bWwa0WtruBgBtYw4v7F2FqXa3AGgXC/qBZGHrr8bF/hXNZ/8nrWkQAAAAAAAAAAAAALDEoQPN1/9bGwC728rr/83th91shfX/ywW/ywXALtL8qz/kftjtvMcHVsv21v8DAAAAAAAAAAAAwA7Qc+PyeKk0eX169snbOLUzmrG+jbnxzZVT7t4JZ7F441FrSu6MiJ1xgluwkQVbqTRZLkes/uDaJTja2Ob2viwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACP/RsAAP//w6wgNA==") ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000010c0)=0x6) 3.607161381s ago: executing program 3 (id=375): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000680)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[{0x9e, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0x5}], @ipv4=@igmp={{0x5, 0x4, 0x3, 0x9, 0x7e4, 0x68, 0x0, 0x6, 0x2, 0x0, @broadcast, @multicast1}, {0x22, 0x1, 0x0, @multicast2, "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"}}}}, 0x806) 2.945982037s ago: executing program 0 (id=376): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 2.860994039s ago: executing program 0 (id=377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 2.780162031s ago: executing program 0 (id=378): recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) sendto$inet6(r2, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={r5, 0xfffffffd, 0x6, 0x0, 0x2, [0x0], [0x0, 0x2, 0x400, 0x9], [0x0, 0x0, 0xfffffffc, 0x3], [0x1, 0xfffffffffffffffd, 0x8000000000000001]}) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x2c, r7, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc75}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8088, &(0x7f00000001c0), 0x2, 0x1108, &(0x7f0000001a40)="$eJzs2b+LE0EUB/DvbOKPbmWvXwQtLOS4I/aSQiGtrRaKXOVVl0qx8I/xz9Gr7I/rtTjQemW9bBIkIpioHHw+EGby9r2ZnfLNBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrj5HNJ9qqkGWJVkpK07ensPEk7xG99GFUpeXI0mz86mTye593iQXmalCqXZWkO79xsJs2kOWwe7E3vfpy/fvPqxfHx0cmQnTZnF7s/Sr/3aPfLAgAAwJXXba3+z/sDAAAAv7OziwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9TVq3kzTKqkJGnb09l5P26ou/aP3g8AAADYXkmVZ/Wm+I9rgDX386kuKbmxjHwtfc5B3m+oBwAAAH6pG7rr9e/r5fqqH79XjZd9eR+7nXH29y//L4Z8mSajJAc/LX528fbl8Ctdn5Fvz6cP//KRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDv7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAADgqwAAAP//chDZJQ==") 2.534941277s ago: executing program 0 (id=379): r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) fstat(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000e80)) r2 = getpid() prlimit64(r2, 0xe, &(0x7f0000000380)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000580), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323900080003400000000720000480060001000002000005000200110000000c000300080001000000001e14000000110001"], 0xcd0}}, 0x0) 2.188217026s ago: executing program 3 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1', 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r5, 0x84, 0x7d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f0000000180)={0xea, 0xfffffff8}) sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) 2.158744266s ago: executing program 1 (id=381): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="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", 0x116}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000009c0)="b826c4139a86353cbda69434b1660c9490c1dce0068251193a8d0bbe9ef1d234afe76884532fc1418ff5250c917485f0ff345b39a90da2123a68e59c81b4e1291b7fa7c753d100d8ac26326a5828673dbb1f284799a2655eb91a1d1d35f4adc7c85920b40ba4c90bcbe564bad4422f2c1df8aab220851f24feb537bc74c14c70c096f4f82676b8", 0x87}, {&(0x7f0000000a80)="85def750bf0f970d18673f7a66da039282c9e8bad703922b4bb30ba92ee6e4a38cc1e681f094c48eacc04a75eee5d9bafa37c0339df18615d43673a757", 0x3d}, {&(0x7f0000000ac0)="99ddc8b5582b558a3c0366c34c19fb5e63050b060f8c573ef4b40a4f91e798498320af4f9deefe54ab0e05ec5cea2f08e75b313b5aa4e36ce2b7361e133ec162079509e078fd813296ca83514d6f96c7b8e130291ed9bb423b7dde7dfcb055473d6088413d2ff2b0942db70a0f31444096ec76be0773ac66b01fd3d618c85ade1bb12bc8532408191d931ff30ced3061cc9d51", 0x93}, {&(0x7f0000000140)="26c8ecde257dacbca7d704d4b8db3c70d1d6e753f0bdbe967eef6d7eee43170578acd2e2ff269ff17144a90f0f00823a2d74803be1ed7d3780ed97c5e40ee2e5a6102a489d9732dfd00e6959b82128da99641dac68a39b74eaa00e299aaf2d7d5465242853483bd6a2ccea22247de61a65e43cddb0044d92ea490074c2fb83d3139f83478b890fac6435389ba3d0f449774a4b0b1ba1a3d1febe87eadd5459e61546fae26190776c8213b61461b13638e020ad586dd38d5ed69a23", 0xbb}, {&(0x7f0000000c80)="500b4acd2cb77d0300000000000000", 0xf}], 0x5}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000040)="065621ffc5c4e0f2068447411588cb9042b073e6a3f579102f01868c766e7991ac5a920309a0", 0x26}], 0x1}}], 0x3, 0x0) 2.060008079s ago: executing program 2 (id=382): recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000780)={r7, 0xfffffffd, 0x6, 0x0, 0x2, [0x0], [0x0, 0x2, 0x400, 0x9], [0x0, 0x0, 0xfffffffc, 0x3], [0x1, 0xfffffffffffffffd, 0x8000000000000001]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r9, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) 1.386071345s ago: executing program 0 (id=383): r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) fstat(r0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000e80)) r1 = openat(0xffffffffffffff9c, 0x0, 0x2141, 0x59) r2 = getpid() prlimit64(r2, 0xe, &(0x7f0000000380)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r4, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, 0x0, 0x8000) sendmsg$NFT_BATCH(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323900080003400000000720000480060001000002000005000200110000000c000300080001000000001e14000000110001"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="28000000130a0103000000000000"], 0x28}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000f40)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.275043738s ago: executing program 3 (id=384): syz_mount_image$ext4(&(0x7f0000000940)='ext2\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000dc0)={[{@inlinecrypt}, {@auto_da_alloc}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@uid_lt}, {@context={'context', 0x3d, 'unconfined_u'}}, {@euid_eq}, {@smackfsroot={'smackfsroot', 0x3d, '):*^\\'}}]}, 0x0, 0x246, &(0x7f0000000ac0)="$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") r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8090) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) add_key(0x0, 0x0, &(0x7f0000000340)="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", 0x356, 0x0) unshare(0x20000400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001000100100020900000000000000", @ANYRES32=0x0, @ANYBLOB="1010000000800700050021000b000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) 1.20435864s ago: executing program 1 (id=385): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002"], 0x0) setns(0xc9, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000580)="900100"/64) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x40106184, 0x0) 55.941258ms ago: executing program 2 (id=386): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='/proc/self/cwd/t', 0x10) 23.988259ms ago: executing program 3 (id=387): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) 0s ago: executing program 0 (id=388): r0 = syz_io_uring_setup(0x3fa3, &(0x7f0000000780)={0x0, 0x5d64, 0x10000, 0x0, 0x51}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0) epoll_create1(0x0) syz_io_uring_submit(r1, r2, r3, 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 73.665556][ T5759] cgroup: Unknown subsys name 'net' [ 73.802782][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.133898][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.569747][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.578181][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.586409][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.594325][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.602849][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.611012][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.618423][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.626655][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.634267][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.641955][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.649720][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.654254][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.677807][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.685291][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.692835][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.701139][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.709243][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.709681][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.720135][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.727320][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.730894][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.741870][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.745442][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.765825][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.194124][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 77.212281][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 77.274285][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 77.323917][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 77.424983][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.432758][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.440150][ T5774] bridge_slave_0: entered allmulticast mode [ 77.447922][ T5774] bridge_slave_0: entered promiscuous mode [ 77.482570][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.489852][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.497085][ T5774] bridge_slave_1: entered allmulticast mode [ 77.503857][ T5774] bridge_slave_1: entered promiscuous mode [ 77.540229][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.547487][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.554610][ T5773] bridge_slave_0: entered allmulticast mode [ 77.561576][ T5773] bridge_slave_0: entered promiscuous mode [ 77.576455][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.583584][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.590952][ T5772] bridge_slave_0: entered allmulticast mode [ 77.598364][ T5772] bridge_slave_0: entered promiscuous mode [ 77.605808][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.613011][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.620424][ T5772] bridge_slave_1: entered allmulticast mode [ 77.627686][ T5772] bridge_slave_1: entered promiscuous mode [ 77.641396][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.650876][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.658459][ T5773] bridge_slave_1: entered allmulticast mode [ 77.665116][ T5773] bridge_slave_1: entered promiscuous mode [ 77.700425][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.731732][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.742819][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.770151][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.777635][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.784944][ T5771] bridge_slave_0: entered allmulticast mode [ 77.792073][ T5771] bridge_slave_0: entered promiscuous mode [ 77.801112][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.834115][ T5774] team0: Port device team_slave_0 added [ 77.842684][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.857841][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.867386][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.874532][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.881770][ T5771] bridge_slave_1: entered allmulticast mode [ 77.888798][ T5771] bridge_slave_1: entered promiscuous mode [ 77.904087][ T5774] team0: Port device team_slave_1 added [ 77.945707][ T5773] team0: Port device team_slave_0 added [ 77.954684][ T5773] team0: Port device team_slave_1 added [ 77.972794][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.004029][ T5772] team0: Port device team_slave_0 added [ 78.014539][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.024506][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.034200][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.061128][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.083861][ T5772] team0: Port device team_slave_1 added [ 78.108691][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.115670][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.147151][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.165719][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.173765][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.200189][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.221424][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.228480][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.254540][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.269776][ T5771] team0: Port device team_slave_0 added [ 78.310843][ T5771] team0: Port device team_slave_1 added [ 78.329236][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.336436][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.362362][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.411176][ T5774] hsr_slave_0: entered promiscuous mode [ 78.417574][ T5774] hsr_slave_1: entered promiscuous mode [ 78.424754][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.434524][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.462862][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.478370][ T5773] hsr_slave_0: entered promiscuous mode [ 78.484652][ T5773] hsr_slave_1: entered promiscuous mode [ 78.491536][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.499336][ T5773] Cannot create hsr debugfs directory [ 78.541458][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.548623][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.575095][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.588648][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.595618][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.622098][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.693502][ T5772] hsr_slave_0: entered promiscuous mode [ 78.697133][ T5778] Bluetooth: hci3: command tx timeout [ 78.704955][ T5772] hsr_slave_1: entered promiscuous mode [ 78.711205][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.719515][ T5772] Cannot create hsr debugfs directory [ 78.765987][ T5771] hsr_slave_0: entered promiscuous mode [ 78.772490][ T5771] hsr_slave_1: entered promiscuous mode [ 78.778292][ T5778] Bluetooth: hci2: command tx timeout [ 78.784559][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.792789][ T5771] Cannot create hsr debugfs directory [ 78.857316][ T5778] Bluetooth: hci1: command tx timeout [ 78.862958][ T5778] Bluetooth: hci0: command tx timeout [ 79.140235][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.158197][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.169947][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.179575][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.258713][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.273969][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.286727][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.307300][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.387525][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.408934][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.425606][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.452331][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.509652][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.527903][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.539345][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.550863][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.584894][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.648323][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.659976][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.694497][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.720138][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.727507][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.754487][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.761609][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.770996][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.778105][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.807986][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.815116][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.927474][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.955400][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.014561][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.044846][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.068613][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.075748][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.098114][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.105304][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.153622][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.160831][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.182168][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.189370][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.230924][ T5772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.242822][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.383328][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.450414][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.524095][ T5774] veth0_vlan: entered promiscuous mode [ 80.575582][ T5773] veth0_vlan: entered promiscuous mode [ 80.600057][ T5774] veth1_vlan: entered promiscuous mode [ 80.663520][ T5773] veth1_vlan: entered promiscuous mode [ 80.709559][ T5774] veth0_macvtap: entered promiscuous mode [ 80.725439][ T5774] veth1_macvtap: entered promiscuous mode [ 80.774446][ T5773] veth0_macvtap: entered promiscuous mode [ 80.776890][ T5778] Bluetooth: hci3: command tx timeout [ 80.787105][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.798150][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.815798][ T5773] veth1_macvtap: entered promiscuous mode [ 80.831207][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.857195][ T5778] Bluetooth: hci2: command tx timeout [ 80.861014][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.887411][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.896961][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.905675][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.914568][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.935515][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.947399][ T5776] Bluetooth: hci1: command tx timeout [ 80.952848][ T5778] Bluetooth: hci0: command tx timeout [ 80.961184][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.974773][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.988567][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.001885][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.012945][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.045610][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.054890][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.067410][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.076300][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.139962][ T5772] veth0_vlan: entered promiscuous mode [ 81.181839][ T5772] veth1_vlan: entered promiscuous mode [ 81.205076][ T5771] veth0_vlan: entered promiscuous mode [ 81.261930][ T5771] veth1_vlan: entered promiscuous mode [ 81.273532][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.299229][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.325852][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.334265][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.374017][ T5772] veth0_macvtap: entered promiscuous mode [ 81.391155][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.404192][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.433969][ T5772] veth1_macvtap: entered promiscuous mode [ 81.443884][ T5771] veth0_macvtap: entered promiscuous mode [ 81.485194][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.500850][ T5771] veth1_macvtap: entered promiscuous mode [ 81.509141][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.534991][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.555002][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.565283][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.575989][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.588800][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.599042][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.609831][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.622518][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.633707][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.643642][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.654249][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.667125][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.681088][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.692206][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.702398][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.713085][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.724358][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.754803][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.793432][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.827356][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.846385][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.870250][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.892365][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.908515][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.924005][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.935553][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.945871][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.955319][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.993560][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.030583][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.055753][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.086523][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.189478][ T5847] syz.3.5[5847]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.238043][ T5847] loop3: detected capacity change from 0 to 1024 [ 82.250691][ T5847] EXT4-fs: Ignoring removed bh option [ 82.297040][ T5847] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 82.313816][ T5847] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 82.358805][ T5847] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 82.404030][ T5847] EXT4-fs error (device loop3): ext4_get_journal_inode:5820: inode #5: comm syz.3.5: unexpected bad inode w/o EXT4_IGET_BAD [ 82.528779][ T5852] loop0: detected capacity change from 0 to 2048 [ 82.659190][ T5847] EXT4-fs (loop3): no journal found [ 82.665125][ T5847] EXT4-fs (loop3): can't get journal size [ 82.835888][ T5847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.861183][ T5778] Bluetooth: hci3: command tx timeout [ 82.937413][ T5778] Bluetooth: hci2: command tx timeout [ 83.022740][ T5776] Bluetooth: hci1: command tx timeout [ 83.032502][ T5778] Bluetooth: hci0: command tx timeout [ 83.117128][ T5852] loop0: p1 < > [ 83.311116][ T5855] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #16: comm syz.3.5: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 83.440359][ T5855] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.912341][ T5860] loop0: detected capacity change from 0 to 2048 [ 84.054572][ T5762] udevd[5762]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 84.536053][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.552876][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.597936][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.718819][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.732902][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.734886][ T5863] loop0: detected capacity change from 0 to 1024 [ 84.766671][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.776042][ T5863] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 84.778450][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.794769][ T5863] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 84.828398][ T5863] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 84.862267][ T5863] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #3: comm syz.0.9: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 84.903138][ T5863] EXT4-fs (loop0): no journal found [ 84.908269][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.914266][ T5864] syzkaller0: entered promiscuous mode [ 84.921800][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.921953][ T5864] syzkaller0: entered allmulticast mode [ 84.937686][ T5863] EXT4-fs (loop0): can't get journal size [ 84.943473][ T5778] Bluetooth: hci3: command tx timeout [ 84.992370][ T5863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.016879][ T5778] Bluetooth: hci2: command tx timeout [ 85.097518][ T5778] Bluetooth: hci0: command tx timeout [ 85.103509][ T5776] Bluetooth: hci1: command tx timeout [ 85.121425][ T5863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.229551][ T5868] loop5: detected capacity change from 0 to 7 [ 85.232929][ T5870] loop2: detected capacity change from 0 to 512 [ 85.288614][ T5868] Dev loop5: unable to read RDB block 7 [ 85.308227][ T5870] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.3: iget: bad i_size value: 38620345925642 [ 85.326977][ T5874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 85.361816][ T5868] loop5: AHDI p1 p2 p3 [ 85.388419][ T5868] loop5: partition table partially beyond EOD, truncated [ 85.398396][ T5870] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.3: couldn't read orphan inode 15 (err -117) [ 85.407449][ T5868] loop5: p1 start 1818582900 is beyond EOD, truncated [ 85.422503][ T5870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.437339][ T5868] loop5: p3 start 335544320 is beyond EOD, truncated [ 85.451946][ T5876] loop3: detected capacity change from 0 to 1024 [ 85.467848][ T5876] EXT4-fs: Ignoring removed bh option [ 85.506254][ T5876] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 85.548823][ T5876] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 85.587045][ T5876] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 85.638437][ T5876] EXT4-fs error (device loop3): ext4_get_journal_inode:5820: inode #5: comm syz.3.11: unexpected bad inode w/o EXT4_IGET_BAD [ 85.699810][ T5876] EXT4-fs (loop3): no journal found [ 85.713872][ T5876] EXT4-fs (loop3): can't get journal size [ 85.725535][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.758396][ T5876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.922392][ T5887] loop2: detected capacity change from 0 to 128 [ 85.947678][ T5887] EXT4-fs: inline encryption not supported [ 85.953666][ T5887] ext2: Unknown parameter 'func' [ 86.062124][ T5888] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #16: comm syz.3.11: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 86.097549][ T5887] Zero length message leads to an empty skb [ 86.366592][ T5891] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 86.909260][ T172] cfg80211: failed to load regulatory.db [ 87.122524][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.248186][ T5896] loop1: detected capacity change from 0 to 128 [ 87.268544][ T5843] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 87.289948][ T5896] EXT4-fs: inline encryption not supported [ 87.295912][ T5896] ext2: Unknown parameter 'func' [ 87.332494][ T5881] digital: digital_start_poll: Unknown protocol [ 87.572298][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'. [ 88.134578][ T5904] loop0: detected capacity change from 0 to 1024 [ 88.178594][ T5904] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 88.215080][ T5904] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 88.224997][ T5904] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 88.235562][ T5904] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #3: comm syz.0.18: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 88.256635][ T5904] EXT4-fs (loop0): no journal found [ 88.261911][ T5904] EXT4-fs (loop0): can't get journal size [ 88.270866][ T5904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.344297][ T5904] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.497004][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.505670][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.847815][ T5915] loop0: detected capacity change from 0 to 2048 [ 88.973849][ T5915] loop0: p1 < > [ 89.752567][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.798696][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.151983][ T5930] FAULT_INJECTION: forcing a failure. [ 90.151983][ T5930] name failslab, interval 1, probability 0, space 0, times 1 [ 90.165697][ T5930] CPU: 1 PID: 5930 Comm: syz.0.24 Not tainted syzkaller #0 [ 90.172944][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 90.183030][ T5930] Call Trace: [ 90.186313][ T5930] [ 90.189236][ T5930] dump_stack_lvl+0x18c/0x250 [ 90.193935][ T5930] ? show_regs_print_info+0x20/0x20 [ 90.199125][ T5930] ? load_image+0x420/0x420 [ 90.203628][ T5930] ? __might_sleep+0xe0/0xe0 [ 90.208219][ T5930] ? __lock_acquire+0x7eb0/0x7eb0 [ 90.213234][ T5930] ? lock_chain_count+0x20/0x20 [ 90.218095][ T5930] should_fail_ex+0x394/0x4c0 [ 90.222798][ T5930] should_failslab+0x9/0x20 [ 90.227319][ T5930] slab_pre_alloc_hook+0x59/0x300 [ 90.232335][ T5930] ? _raw_spin_unlock+0x40/0x40 [ 90.237193][ T5930] ? string+0x257/0x290 [ 90.241380][ T5930] ? __request_module+0x2d1/0x600 [ 90.246419][ T5930] __kmem_cache_alloc_node+0x53/0x250 [ 90.251813][ T5930] ? __request_module+0x2d1/0x600 [ 90.256843][ T5930] kmalloc_trace+0x2a/0xe0 [ 90.261282][ T5930] __request_module+0x2d1/0x600 [ 90.266163][ T5930] ? module_enforce_rwx_sections+0x150/0x150 [ 90.272517][ T5930] ? __up_read+0x2b8/0x6b0 [ 90.276940][ T5930] ? vsnprintf+0x1ac7/0x1ba0 [ 90.281542][ T5930] ? __crypto_alg_lookup+0x48a/0x4c0 [ 90.286843][ T5930] crypto_alg_mod_lookup+0x9a/0x570 [ 90.292049][ T5930] crypto_alloc_tfm_node+0x152/0x360 [ 90.297345][ T5930] cryptd_alloc_skcipher+0x106/0x220 [ 90.302647][ T5930] ? pcrypt_init_padata+0x100/0x100 [ 90.307880][ T5930] ? __kmem_cache_alloc_node+0x194/0x250 [ 90.313518][ T5930] ? crypto_create_tfm_node+0x77/0x380 [ 90.319006][ T5930] ? rcu_is_watching+0x15/0xb0 [ 90.323776][ T5930] simd_skcipher_init+0x67/0x140 [ 90.328722][ T5930] crypto_create_tfm_node+0x155/0x380 [ 90.334121][ T5930] crypto_spawn_tfm2+0x5c/0x90 [ 90.338908][ T5930] xts_init_tfm+0x48/0x150 [ 90.343339][ T5930] crypto_create_tfm_node+0x155/0x380 [ 90.348726][ T5930] ? crypto_alg_mod_lookup+0x4cd/0x570 [ 90.354189][ T5930] crypto_alloc_tfm_node+0x17b/0x360 [ 90.359484][ T5930] ? hash_check_key+0x1d0/0x1d0 [ 90.364342][ T5930] alg_bind+0x2f5/0x550 [ 90.368539][ T5930] __sys_bind+0x2f0/0x3f0 [ 90.372885][ T5930] ? __ia32_sys_socketpair+0xb0/0xb0 [ 90.378208][ T5930] __x64_sys_bind+0x7a/0x90 [ 90.382721][ T5930] do_syscall_64+0x55/0xb0 [ 90.387136][ T5930] ? clear_bhb_loop+0x40/0x90 [ 90.391836][ T5930] ? clear_bhb_loop+0x40/0x90 [ 90.396531][ T5930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.402444][ T5930] RIP: 0033:0x7fc1b019e2d9 [ 90.406859][ T5930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.426476][ T5930] RSP: 002b:00007fc1b0fcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 90.434895][ T5930] RAX: ffffffffffffffda RBX: 00007fc1b0426090 RCX: 00007fc1b019e2d9 [ 90.442865][ T5930] RDX: 0000000000000058 RSI: 0000200000001600 RDI: 0000000000000009 [ 90.450837][ T5930] RBP: 00007fc1b0235888 R08: 0000000000000000 R09: 0000000000000000 [ 90.458810][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.467247][ T5930] R13: 00007fc1b0426128 R14: 00007fc1b0426090 R15: 00007fff5906b408 [ 90.475252][ T5930] [ 90.555497][ T5901] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.567024][ T5901] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.576036][ T5901] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.591063][ T5901] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.762980][ T5941] loop3: detected capacity change from 0 to 512 [ 90.827465][ T5941] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.25: iget: bad i_size value: 38620345925642 [ 90.863776][ T5941] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.25: couldn't read orphan inode 15 (err -117) [ 91.098435][ T5941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.049398][ T5943] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 92.317679][ T5960] loop2: detected capacity change from 0 to 1024 [ 92.334896][ T5958] loop5: detected capacity change from 0 to 7 [ 92.364791][ T5960] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 92.393828][ T5960] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 92.397158][ T5958] Dev loop5: unable to read RDB block 7 [ 92.414877][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 19 with error 28 [ 92.421226][ T5958] loop5: unable to read partition table [ 92.433774][ T5958] loop5: partition table beyond EOD, truncated [ 92.438477][ T5960] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 92.440366][ T5958] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 92.460616][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 92.460616][ T11] [ 92.473673][ T5960] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #3: comm syz.2.31: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 92.494793][ T11] EXT4-fs (loop3): Total free blocks count 0 [ 92.501129][ T11] EXT4-fs (loop3): Free/Dirty block details [ 92.508055][ T11] EXT4-fs (loop3): free_blocks=0 [ 92.513779][ T11] EXT4-fs (loop3): dirty_blocks=19 [ 92.519056][ T11] EXT4-fs (loop3): Block reservation details [ 92.525191][ T11] EXT4-fs (loop3): i_reserved_data_blocks=19 [ 92.537185][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.566751][ T5963] FAULT_INJECTION: forcing a failure. [ 92.566751][ T5963] name failslab, interval 1, probability 0, space 0, times 0 [ 92.584659][ T5960] EXT4-fs (loop2): no journal found [ 92.590379][ T5960] EXT4-fs (loop2): can't get journal size [ 92.608372][ T5963] CPU: 0 PID: 5963 Comm: syz.0.32 Not tainted syzkaller #0 [ 92.615638][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.625720][ T5963] Call Trace: [ 92.629025][ T5963] [ 92.631977][ T5963] dump_stack_lvl+0x18c/0x250 [ 92.633419][ T5965] loop1: detected capacity change from 0 to 1024 [ 92.636668][ T5963] ? show_regs_print_info+0x20/0x20 [ 92.644147][ T5965] EXT4-fs: Ignoring removed bh option [ 92.648228][ T5963] ? load_image+0x420/0x420 [ 92.648261][ T5963] ? __might_sleep+0xe0/0xe0 [ 92.648286][ T5963] ? __lock_acquire+0x7eb0/0x7eb0 [ 92.648308][ T5963] ? verify_lock_unused+0x140/0x140 [ 92.648333][ T5963] should_fail_ex+0x394/0x4c0 [ 92.664257][ T5965] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 92.667791][ T5963] should_failslab+0x9/0x20 [ 92.667825][ T5963] slab_pre_alloc_hook+0x59/0x300 [ 92.667850][ T5963] kmem_cache_alloc+0x5a/0x2c0 [ 92.683319][ T5965] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 92.687413][ T5963] ? mas_alloc_nodes+0x2f8/0x8c0 [ 92.687453][ T5963] mas_alloc_nodes+0x2f8/0x8c0 [ 92.687486][ T5963] mas_preallocate+0xa1f/0x1170 [ 92.687516][ T5963] ? lockdep_softirqs_off+0x440/0x440 [ 92.687540][ T5963] ? mas_destroy+0x20a0/0x20a0 [ 92.687565][ T5963] ? percpu_ref_put+0x12/0x100 [ 92.687593][ T5963] ? __raw_spin_lock_init+0x45/0x100 [ 92.687621][ T5963] ? vma_iter_config+0xe6/0x270 [ 92.694094][ T5965] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 92.697115][ T5963] mmap_region+0xe28/0x2090 [ 92.697162][ T5963] ? file_mmap_ok+0x170/0x170 [ 92.713797][ T5965] EXT4-fs error (device loop1): ext4_get_journal_inode:5820: inode #5: comm syz.1.34: unexpected bad inode w/o EXT4_IGET_BAD [ 92.716369][ T5963] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 92.716401][ T5963] ? cap_mmap_addr+0x213/0x2b0 [ 92.716439][ T5963] do_mmap+0x98f/0x10a0 [ 92.716475][ T5963] ? mlock_future_ok+0xf0/0xf0 [ 92.716501][ T5963] ? down_write+0x200/0x200 [ 92.716534][ T5963] vm_mmap_pgoff+0x1c4/0x3f0 [ 92.716567][ T5963] ? account_locked_vm+0x200/0x200 [ 92.716602][ T5963] ? ksys_mmap_pgoff+0xf3/0x720 [ 92.716626][ T5963] ? __x64_sys_mmap+0x7a/0x130 [ 92.716650][ T5963] do_syscall_64+0x55/0xb0 [ 92.716669][ T5963] ? clear_bhb_loop+0x40/0x90 [ 92.716687][ T5963] ? clear_bhb_loop+0x40/0x90 [ 92.716708][ T5963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.716737][ T5963] RIP: 0033:0x7fc1b019e2d9 [ 92.716757][ T5963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.716774][ T5963] RSP: 002b:00007fc1b0fcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 92.716797][ T5963] RAX: ffffffffffffffda RBX: 00007fc1b0426090 RCX: 00007fc1b019e2d9 [ 92.716811][ T5963] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 92.716825][ T5963] RBP: 00007fc1b0235888 R08: ffffffffffffffff R09: 0000000000000000 [ 92.716840][ T5963] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 92.716853][ T5963] R13: 00007fc1b0426128 R14: 00007fc1b0426090 R15: 00007fff5906b408 [ 92.716882][ T5963] [ 92.876743][ T5968] syzkaller0: entered promiscuous mode [ 92.887575][ T5960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.920882][ T5968] syzkaller0: entered allmulticast mode [ 92.983585][ T5965] EXT4-fs (loop1): no journal found [ 92.989085][ T5965] EXT4-fs (loop1): can't get journal size [ 93.008274][ T5965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.049195][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.077013][ T5962] syz.0.32 (5962) used greatest stack depth: 17896 bytes left [ 93.143378][ T5972] syzkaller0: entered promiscuous mode [ 93.149153][ T5972] syzkaller0: entered allmulticast mode [ 93.379951][ T5975] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #16: comm syz.1.34: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 93.494645][ T5978] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 94.196826][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.421228][ T5981] loop0: detected capacity change from 0 to 2048 [ 94.527446][ T5981] loop0: p1 < > [ 94.919278][ T5983] loop2: detected capacity change from 0 to 1024 [ 95.014588][ T5983] EXT4-fs: Ignoring removed bh option [ 95.044292][ T5983] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 95.059085][ T5983] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 95.068860][ T5983] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 95.082098][ T5983] EXT4-fs error (device loop2): ext4_get_journal_inode:5820: inode #5: comm syz.2.39: unexpected bad inode w/o EXT4_IGET_BAD [ 95.097390][ T5983] EXT4-fs (loop2): no journal found [ 95.102630][ T5983] EXT4-fs (loop2): can't get journal size [ 95.112981][ T5983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.461903][ T6002] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #16: comm syz.2.39: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 95.549910][ T6006] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 96.191057][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.419235][ T6015] loop1: detected capacity change from 0 to 2048 [ 96.581460][ T6015] loop1: p1 < > [ 97.239957][ T5762] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.339636][ T5762] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.350429][ T5762] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.353091][ T5772] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 97.359833][ T5762] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 97.360502][ T5762] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.397793][ T5762] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 97.493741][ T6029] netlink: 20 bytes leftover after parsing attributes in process `syz.3.48'. [ 98.088474][ T5762] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.176110][ T5762] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 98.240497][ T5762] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.282124][ T6031] FAULT_INJECTION: forcing a failure. [ 98.282124][ T6031] name failslab, interval 1, probability 0, space 0, times 0 [ 98.295077][ T6031] CPU: 0 PID: 6031 Comm: syz.1.49 Not tainted syzkaller #0 [ 98.302313][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.312391][ T6031] Call Trace: [ 98.315692][ T6031] [ 98.318645][ T6031] dump_stack_lvl+0x18c/0x250 [ 98.323348][ T6031] ? show_regs_print_info+0x20/0x20 [ 98.328573][ T6031] ? load_image+0x420/0x420 [ 98.333123][ T6031] ? __lock_acquire+0x7eb0/0x7eb0 [ 98.338198][ T6031] should_fail_ex+0x394/0x4c0 [ 98.342929][ T6031] should_failslab+0x9/0x20 [ 98.347481][ T6031] slab_pre_alloc_hook+0x59/0x300 [ 98.352529][ T6031] kmem_cache_alloc+0x5a/0x2c0 [ 98.357303][ T6031] ? security_inode_alloc+0x34/0x110 [ 98.362606][ T6031] security_inode_alloc+0x34/0x110 [ 98.367733][ T6031] inode_init_always+0x914/0xc90 [ 98.372677][ T6031] new_inode_pseudo+0x95/0x1d0 [ 98.377467][ T6031] new_inode+0x22/0x1d0 [ 98.381652][ T6031] shmem_get_inode+0x34d/0xcd0 [ 98.386435][ T6031] ? mas_destroy+0x20a0/0x20a0 [ 98.391221][ T6031] __shmem_file_setup+0x167/0x2c0 [ 98.396258][ T6031] shmem_zero_setup+0x8d/0x130 [ 98.401026][ T6031] mmap_region+0x1225/0x2090 [ 98.405633][ T6031] ? file_mmap_ok+0x170/0x170 [ 98.410319][ T6031] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 98.415861][ T6031] ? cap_mmap_addr+0x213/0x2b0 [ 98.420644][ T6031] do_mmap+0x98f/0x10a0 [ 98.424816][ T6031] ? mlock_future_ok+0xf0/0xf0 [ 98.429583][ T6031] ? down_write+0x200/0x200 [ 98.434094][ T6031] vm_mmap_pgoff+0x1c4/0x3f0 [ 98.438696][ T6031] ? account_locked_vm+0x200/0x200 [ 98.443815][ T6031] ? ksys_mmap_pgoff+0xf3/0x720 [ 98.448672][ T6031] ? __x64_sys_mmap+0x7a/0x130 [ 98.453450][ T6031] do_syscall_64+0x55/0xb0 [ 98.457872][ T6031] ? clear_bhb_loop+0x40/0x90 [ 98.462548][ T6031] ? clear_bhb_loop+0x40/0x90 [ 98.467279][ T6031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.473178][ T6031] RIP: 0033:0x7f69e319e2d9 [ 98.477592][ T6031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.497208][ T6031] RSP: 002b:00007f69e4091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 98.505627][ T6031] RAX: ffffffffffffffda RBX: 00007f69e3425fa0 RCX: 00007f69e319e2d9 [ 98.513601][ T6031] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 98.521571][ T6031] RBP: 00007f69e3235888 R08: ffffffffffffffff R09: 0000000000000000 [ 98.529538][ T6031] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 98.537506][ T6031] R13: 00007f69e3426038 R14: 00007f69e3425fa0 R15: 00007ffca4f2a1c8 [ 98.545491][ T6031] [ 98.560823][ T5762] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 98.594097][ T5762] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.650690][ T5762] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 98.699000][ T6036] loop2: detected capacity change from 0 to 2048 [ 98.923641][ T6036] loop2: p1 < > [ 99.498703][ T5762] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.538435][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 99.560184][ T5762] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.641252][ T6045] loop0: detected capacity change from 0 to 2048 [ 99.694969][ T5762] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 99.826576][ T5762] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.348707][ T6049] loop2: detected capacity change from 0 to 2048 [ 100.494449][ T5762] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 101.048502][ T5762] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 101.097440][ T5762] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 101.159834][ T5762] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 101.323636][ T6064] FAULT_INJECTION: forcing a failure. [ 101.323636][ T6064] name failslab, interval 1, probability 0, space 0, times 0 [ 101.353296][ T6055] digital: digital_start_poll: Unknown protocol [ 101.490501][ T6067] loop2: detected capacity change from 0 to 2048 [ 101.570227][ T6064] CPU: 1 PID: 6064 Comm: syz.1.58 Not tainted syzkaller #0 [ 101.577483][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.587576][ T6064] Call Trace: [ 101.590873][ T6064] [ 101.593824][ T6064] dump_stack_lvl+0x18c/0x250 [ 101.598529][ T6064] ? show_regs_print_info+0x20/0x20 [ 101.603744][ T6064] ? load_image+0x420/0x420 [ 101.608281][ T6064] ? __might_sleep+0xe0/0xe0 [ 101.612893][ T6064] ? __lock_acquire+0x7eb0/0x7eb0 [ 101.617948][ T6064] should_fail_ex+0x394/0x4c0 [ 101.622659][ T6064] should_failslab+0x9/0x20 [ 101.627188][ T6064] slab_pre_alloc_hook+0x59/0x300 [ 101.632243][ T6064] kmem_cache_alloc_lru+0x4d/0x2b0 [ 101.637390][ T6064] ? __d_alloc+0x31/0x710 [ 101.641742][ T6064] __d_alloc+0x31/0x710 [ 101.645939][ T6064] d_alloc_pseudo+0x1d/0x70 [ 101.650459][ T6064] alloc_file_pseudo+0xe4/0x210 [ 101.655335][ T6064] ? fput+0x1a0/0x1a0 [ 101.659334][ T6064] ? shmem_get_inode+0xa7a/0xcd0 [ 101.664292][ T6064] ? mas_destroy+0x20a0/0x20a0 [ 101.669091][ T6064] __shmem_file_setup+0x23c/0x2c0 [ 101.674147][ T6064] shmem_zero_setup+0x8d/0x130 [ 101.678938][ T6064] mmap_region+0x1225/0x2090 [ 101.683571][ T6064] ? file_mmap_ok+0x170/0x170 [ 101.688277][ T6064] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 101.693846][ T6064] ? cap_mmap_addr+0x213/0x2b0 [ 101.698651][ T6064] do_mmap+0x98f/0x10a0 [ 101.702845][ T6064] ? mlock_future_ok+0xf0/0xf0 [ 101.707633][ T6064] ? down_write+0x200/0x200 [ 101.712165][ T6064] vm_mmap_pgoff+0x1c4/0x3f0 [ 101.716796][ T6064] ? account_locked_vm+0x200/0x200 [ 101.721939][ T6064] ? ksys_mmap_pgoff+0xf3/0x720 [ 101.726819][ T6064] ? __x64_sys_mmap+0x7a/0x130 [ 101.731608][ T6064] do_syscall_64+0x55/0xb0 [ 101.736038][ T6064] ? clear_bhb_loop+0x40/0x90 [ 101.740731][ T6064] ? clear_bhb_loop+0x40/0x90 [ 101.745449][ T6064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.751375][ T6064] RIP: 0033:0x7f69e319e2d9 [ 101.755807][ T6064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.775434][ T6064] RSP: 002b:00007f69e4091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 101.783881][ T6064] RAX: ffffffffffffffda RBX: 00007f69e3425fa0 RCX: 00007f69e319e2d9 [ 101.791881][ T6064] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 101.799871][ T6064] RBP: 00007f69e3235888 R08: ffffffffffffffff R09: 0000000000000000 [ 101.807868][ T6064] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 101.815856][ T6064] R13: 00007f69e3426038 R14: 00007f69e3425fa0 R15: 00007ffca4f2a1c8 [ 101.823869][ T6064] [ 101.908573][ T6067] loop2: p1 < > [ 102.046506][ T6070] FAULT_INJECTION: forcing a failure. [ 102.046506][ T6070] name failslab, interval 1, probability 0, space 0, times 0 [ 102.076183][ T6070] CPU: 1 PID: 6070 Comm: syz.1.60 Not tainted syzkaller #0 [ 102.083453][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.093539][ T6070] Call Trace: [ 102.096845][ T6070] [ 102.099796][ T6070] dump_stack_lvl+0x18c/0x250 [ 102.104512][ T6070] ? show_regs_print_info+0x20/0x20 [ 102.109749][ T6070] ? load_image+0x420/0x420 [ 102.114289][ T6070] ? __lock_acquire+0x7eb0/0x7eb0 [ 102.119357][ T6070] should_fail_ex+0x394/0x4c0 [ 102.124076][ T6070] should_failslab+0x9/0x20 [ 102.128619][ T6070] slab_pre_alloc_hook+0x59/0x300 [ 102.133676][ T6070] kmem_cache_alloc+0x5a/0x2c0 [ 102.138484][ T6070] ? security_inode_alloc+0x34/0x110 [ 102.143804][ T6070] security_inode_alloc+0x34/0x110 [ 102.148952][ T6070] inode_init_always+0x914/0xc90 [ 102.153919][ T6070] new_inode_pseudo+0x95/0x1d0 [ 102.158716][ T6070] new_inode+0x22/0x1d0 [ 102.162903][ T6070] shmem_get_inode+0x34d/0xcd0 [ 102.167782][ T6070] ? mas_destroy+0x20a0/0x20a0 [ 102.172581][ T6070] __shmem_file_setup+0x167/0x2c0 [ 102.177634][ T6070] shmem_zero_setup+0x8d/0x130 [ 102.182422][ T6070] mmap_region+0x1225/0x2090 [ 102.187057][ T6070] ? file_mmap_ok+0x170/0x170 [ 102.191764][ T6070] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 102.197360][ T6070] ? cap_mmap_addr+0x213/0x2b0 [ 102.202167][ T6070] do_mmap+0x98f/0x10a0 [ 102.206386][ T6070] ? mlock_future_ok+0xf0/0xf0 [ 102.211180][ T6070] ? down_write+0x200/0x200 [ 102.215720][ T6070] vm_mmap_pgoff+0x1c4/0x3f0 [ 102.220346][ T6070] ? account_locked_vm+0x200/0x200 [ 102.225487][ T6070] ? ksys_mmap_pgoff+0xf3/0x720 [ 102.230366][ T6070] ? __x64_sys_mmap+0x7a/0x130 [ 102.235155][ T6070] do_syscall_64+0x55/0xb0 [ 102.239594][ T6070] ? clear_bhb_loop+0x40/0x90 [ 102.244296][ T6070] ? clear_bhb_loop+0x40/0x90 [ 102.249001][ T6070] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.254922][ T6070] RIP: 0033:0x7f69e319e2d9 [ 102.259444][ T6070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.279076][ T6070] RSP: 002b:00007f69e4091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 102.287525][ T6070] RAX: ffffffffffffffda RBX: 00007f69e3425fa0 RCX: 00007f69e319e2d9 [ 102.295517][ T6070] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 102.303519][ T6070] RBP: 00007f69e3235888 R08: ffffffffffffffff R09: 0000000000000000 [ 102.311525][ T6070] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 102.319537][ T6070] R13: 00007f69e3426038 R14: 00007f69e3425fa0 R15: 00007ffca4f2a1c8 [ 102.327563][ T6070] [ 102.330634][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.482490][ T6076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.62'. [ 103.398012][ T6085] loop2: detected capacity change from 0 to 128 [ 103.411433][ T5761] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.439984][ T6087] syzkaller0: entered promiscuous mode [ 103.445506][ T6087] syzkaller0: entered allmulticast mode [ 103.495236][ T6085] EXT4-fs: inline encryption not supported [ 103.524027][ T6085] ext2: Unknown parameter 'func' [ 103.610532][ T5762] blk_print_req_error: 3 callbacks suppressed [ 103.610546][ T5762] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.661639][ T5761] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.619766][ T6096] fido_id[6096]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 104.748698][ T6108] loop1: detected capacity change from 0 to 2048 [ 104.893537][ T6108] loop1: p1 < > [ 105.188580][ T6105] loop5: detected capacity change from 0 to 7 [ 105.338118][ T6105] Dev loop5: unable to read RDB block 7 [ 105.346362][ T6105] loop5: unable to read partition table [ 105.362250][ T6105] loop5: partition table beyond EOD, truncated [ 105.381985][ T6105] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 105.538538][ T5916] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.660110][ T6120] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.786282][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 105.810546][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 105.921654][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.73'. [ 106.487636][ T5916] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 106.652422][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.661034][ T5916] usb 1-1: Product: syz [ 106.665262][ T5916] usb 1-1: Manufacturer: syz [ 106.670324][ T5916] usb 1-1: SerialNumber: syz [ 106.688037][ T5916] usb 1-1: config 0 descriptor?? [ 106.717501][ T5916] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 106.766243][ T5916] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 107.116913][ T6129] loop2: detected capacity change from 0 to 2048 [ 107.207090][ T5918] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.275473][ T6129] loop2: p1 < > [ 107.399794][ T5916] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 107.429001][ T6098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.484154][ T5918] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.724366][ T5918] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 107.757784][ T5916] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 107.778870][ T5918] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 107.796772][ T5916] em28xx 1-1:0.0: board has no eeprom [ 107.818794][ T5918] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 107.843804][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.858819][ T6131] loop3: detected capacity change from 0 to 128 [ 107.870250][ T6131] EXT4-fs: inline encryption not supported [ 107.879012][ T6131] ext2: Unknown parameter 'func' [ 107.906282][ T5916] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 107.926266][ T5916] em28xx 1-1:0.0: dvb set to bulk mode. [ 107.933168][ T23] em28xx 1-1:0.0: Binding DVB extension [ 107.988627][ T5916] usb 1-1: USB disconnect, device number 2 [ 107.998541][ T5916] em28xx 1-1:0.0: Disconnecting em28xx [ 108.179385][ T23] em28xx 1-1:0.0: Registering input extension [ 108.189380][ T5918] cxacru 2-1:1.0: invalid response length to cm 0x90: 0 [ 108.199568][ T5916] em28xx 1-1:0.0: Closing input extension [ 108.519296][ T6137] cxacru 2-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 108.588370][ T5916] em28xx 1-1:0.0: Freeing device [ 108.742162][ T6137] cxacru 2-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 109.065219][ T6143] loop2: detected capacity change from 0 to 2048 [ 109.200576][ T6143] loop2: p1 < > [ 109.731281][ T9] usb 2-1: USB disconnect, device number 2 [ 110.032443][ T6157] loop2: detected capacity change from 0 to 2048 [ 110.181735][ T6157] loop2: p1 < > [ 110.766591][ T5761] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.976235][ T5761] usb 4-1: Using ep0 maxpacket: 16 [ 110.983574][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 110.995692][ T5761] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 111.004858][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.013019][ T5761] usb 4-1: Product: syz [ 111.017629][ T5761] usb 4-1: Manufacturer: syz [ 111.022250][ T5761] usb 4-1: SerialNumber: syz [ 111.034975][ T5761] usb 4-1: config 0 descriptor?? [ 111.052752][ T5761] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 111.062494][ T5761] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 111.677424][ T5761] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 111.751802][ T5761] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 111.759939][ T5761] em28xx 4-1:0.0: board has no eeprom [ 111.838512][ T5761] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 111.846840][ T5761] em28xx 4-1:0.0: dvb set to bulk mode. [ 111.852885][ T5894] em28xx 4-1:0.0: Binding DVB extension [ 111.865889][ T5761] usb 4-1: USB disconnect, device number 2 [ 111.899452][ T5761] em28xx 4-1:0.0: Disconnecting em28xx [ 111.931297][ T5894] em28xx 4-1:0.0: Registering input extension [ 111.942830][ T5761] em28xx 4-1:0.0: Closing input extension [ 111.953752][ T5761] em28xx 4-1:0.0: Freeing device [ 112.346290][ T6182] FAULT_INJECTION: forcing a failure. [ 112.346290][ T6182] name failslab, interval 1, probability 0, space 0, times 0 [ 112.359130][ T6182] CPU: 1 PID: 6182 Comm: syz.3.84 Not tainted syzkaller #0 [ 112.366387][ T6182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 112.376446][ T6182] Call Trace: [ 112.379752][ T6182] [ 112.382677][ T6182] dump_stack_lvl+0x18c/0x250 [ 112.387377][ T6182] ? show_regs_print_info+0x20/0x20 [ 112.392572][ T6182] ? load_image+0x420/0x420 [ 112.397083][ T6182] ? __lock_acquire+0x7eb0/0x7eb0 [ 112.402122][ T6182] should_fail_ex+0x394/0x4c0 [ 112.406821][ T6182] should_failslab+0x9/0x20 [ 112.411367][ T6182] slab_pre_alloc_hook+0x59/0x300 [ 112.416509][ T6182] kmem_cache_alloc+0x5a/0x2c0 [ 112.421323][ T6182] ? security_inode_alloc+0x34/0x110 [ 112.426666][ T6182] security_inode_alloc+0x34/0x110 [ 112.431797][ T6182] inode_init_always+0x914/0xc90 [ 112.436747][ T6182] new_inode_pseudo+0x95/0x1d0 [ 112.441520][ T6182] new_inode+0x22/0x1d0 [ 112.445683][ T6182] shmem_get_inode+0x34d/0xcd0 [ 112.450465][ T6182] ? mas_destroy+0x20a0/0x20a0 [ 112.455243][ T6182] __shmem_file_setup+0x167/0x2c0 [ 112.460273][ T6182] shmem_zero_setup+0x8d/0x130 [ 112.465039][ T6182] mmap_region+0x1225/0x2090 [ 112.469665][ T6182] ? file_mmap_ok+0x170/0x170 [ 112.474359][ T6182] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 112.479913][ T6182] ? cap_mmap_addr+0x213/0x2b0 [ 112.484780][ T6182] do_mmap+0x98f/0x10a0 [ 112.488955][ T6182] ? mlock_future_ok+0xf0/0xf0 [ 112.493730][ T6182] ? down_write+0x200/0x200 [ 112.498257][ T6182] vm_mmap_pgoff+0x1c4/0x3f0 [ 112.502860][ T6182] ? account_locked_vm+0x200/0x200 [ 112.507978][ T6182] ? ksys_mmap_pgoff+0xf3/0x720 [ 112.512836][ T6182] ? __x64_sys_mmap+0x7a/0x130 [ 112.517605][ T6182] do_syscall_64+0x55/0xb0 [ 112.522023][ T6182] ? clear_bhb_loop+0x40/0x90 [ 112.526701][ T6182] ? clear_bhb_loop+0x40/0x90 [ 112.531388][ T6182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.537290][ T6182] RIP: 0033:0x7f56e659e2d9 [ 112.541710][ T6182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.561320][ T6182] RSP: 002b:00007f56e739b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 112.569743][ T6182] RAX: ffffffffffffffda RBX: 00007f56e6826090 RCX: 00007f56e659e2d9 [ 112.577717][ T6182] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 112.585692][ T6182] RBP: 00007f56e6635888 R08: ffffffffffffffff R09: 0000000000000000 [ 112.593684][ T6182] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 112.601661][ T6182] R13: 00007f56e6826128 R14: 00007f56e6826090 R15: 00007ffe6c161ee8 [ 112.609669][ T6182] [ 112.790592][ T6148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.959496][ T6189] loop2: detected capacity change from 0 to 128 [ 112.967174][ T6189] EXT4-fs: inline encryption not supported [ 112.976594][ T6189] ext2: Unknown parameter 'func' [ 112.991297][ T6191] loop0: detected capacity change from 0 to 128 [ 113.017404][ T6191] EXT4-fs: inline encryption not supported [ 113.024303][ T6191] ext2: Unknown parameter 'func' [ 113.246287][ T6196] loop3: detected capacity change from 0 to 2048 [ 113.986134][ C0] sched: RT throttling activated [ 114.759362][ T6202] digital: digital_start_poll: Unknown protocol [ 114.948672][ T6216] loop5: detected capacity change from 0 to 7 [ 114.957484][ T6216] Dev loop5: unable to read RDB block 7 [ 114.963129][ T6216] loop5: AHDI p1 p2 p3 [ 114.967491][ T6216] loop5: partition table partially beyond EOD, truncated [ 114.974752][ T6216] loop5: p1 start 1818582900 is beyond EOD, truncated [ 114.982746][ T6216] loop5: p3 start 335544320 is beyond EOD, truncated [ 115.018634][ T5761] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.055990][ T6218] loop0: detected capacity change from 0 to 128 [ 115.064527][ T6218] EXT4-fs: inline encryption not supported [ 115.070530][ T6218] ext2: Unknown parameter 'func' [ 115.239961][ T5894] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.057291][ T5761] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.076490][ T5761] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 116.090181][ T5761] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 116.103110][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.117579][ T5761] cxacru 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 116.150462][ T5894] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.176223][ T5894] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 116.189615][ T5894] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 116.199010][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.214018][ T5894] cxacru 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 116.232496][ T6227] FAULT_INJECTION: forcing a failure. [ 116.232496][ T6227] name failslab, interval 1, probability 0, space 0, times 0 [ 116.245353][ T6227] CPU: 0 PID: 6227 Comm: syz.0.95 Not tainted syzkaller #0 [ 116.252578][ T6227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 116.262655][ T6227] Call Trace: [ 116.265940][ T6227] [ 116.268883][ T6227] dump_stack_lvl+0x18c/0x250 [ 116.273582][ T6227] ? show_regs_print_info+0x20/0x20 [ 116.278809][ T6227] ? load_image+0x420/0x420 [ 116.283338][ T6227] ? __lock_acquire+0x7eb0/0x7eb0 [ 116.288369][ T6227] should_fail_ex+0x394/0x4c0 [ 116.293060][ T6227] should_failslab+0x9/0x20 [ 116.297576][ T6227] slab_pre_alloc_hook+0x59/0x300 [ 116.302610][ T6227] kmem_cache_alloc+0x5a/0x2c0 [ 116.307412][ T6227] ? security_inode_alloc+0x34/0x110 [ 116.312724][ T6227] security_inode_alloc+0x34/0x110 [ 116.317855][ T6227] inode_init_always+0x914/0xc90 [ 116.322841][ T6227] new_inode_pseudo+0x95/0x1d0 [ 116.327621][ T6227] new_inode+0x22/0x1d0 [ 116.331814][ T6227] shmem_get_inode+0x34d/0xcd0 [ 116.336602][ T6227] ? mas_destroy+0x20a0/0x20a0 [ 116.341386][ T6227] __shmem_file_setup+0x167/0x2c0 [ 116.346516][ T6227] shmem_zero_setup+0x8d/0x130 [ 116.351297][ T6227] mmap_region+0x1225/0x2090 [ 116.355913][ T6227] ? file_mmap_ok+0x170/0x170 [ 116.360605][ T6227] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 116.366173][ T6227] ? cap_mmap_addr+0x213/0x2b0 [ 116.370957][ T6227] do_mmap+0x98f/0x10a0 [ 116.375125][ T6227] ? mlock_future_ok+0xf0/0xf0 [ 116.379893][ T6227] ? down_write+0x200/0x200 [ 116.384408][ T6227] vm_mmap_pgoff+0x1c4/0x3f0 [ 116.389019][ T6227] ? account_locked_vm+0x200/0x200 [ 116.394138][ T6227] ? ksys_mmap_pgoff+0xf3/0x720 [ 116.398996][ T6227] ? __x64_sys_mmap+0x7a/0x130 [ 116.403762][ T6227] do_syscall_64+0x55/0xb0 [ 116.408182][ T6227] ? clear_bhb_loop+0x40/0x90 [ 116.412862][ T6227] ? clear_bhb_loop+0x40/0x90 [ 116.417538][ T6227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.423453][ T6227] RIP: 0033:0x7fc1b019e2d9 [ 116.427882][ T6227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.447510][ T6227] RSP: 002b:00007fc1b0fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 116.455959][ T6227] RAX: ffffffffffffffda RBX: 00007fc1b0425fa0 RCX: 00007fc1b019e2d9 [ 116.463937][ T6227] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 116.471913][ T6227] RBP: 00007fc1b0235888 R08: ffffffffffffffff R09: 0000000000000000 [ 116.479890][ T6227] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 116.487867][ T6227] R13: 00007fc1b0426038 R14: 00007fc1b0425fa0 R15: 00007fff5906b408 [ 116.495881][ T6227] [ 116.803408][ T6231] loop0: detected capacity change from 0 to 2048 [ 116.929549][ T6231] loop0: p1 < > [ 117.647313][ T6237] digital: digital_start_poll: Unknown protocol [ 117.894689][ T6245] loop0: detected capacity change from 0 to 2048 [ 117.970228][ T6245] loop0: p1 < > [ 118.538026][ T5894] usb 3-1: USB disconnect, device number 2 [ 118.577652][ T5918] usb 4-1: USB disconnect, device number 3 [ 118.712104][ T5762] udevd[5762]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 118.716580][ T6249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.889000][ T6253] loop3: detected capacity change from 0 to 2048 [ 118.984588][ T6253] loop3: p1 < > [ 119.530260][ T5762] udevd[5762]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 119.667925][ T6249] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 119.724813][ T5762] udevd[5762]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 120.065532][ T6262] Cannot find map_set index 32 as target [ 120.368927][ T6264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.102'. [ 120.598187][ T5894] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.688851][ T6266] loop0: detected capacity change from 0 to 128 [ 120.727407][ T6266] EXT4-fs: inline encryption not supported [ 120.733420][ T6266] ext2: Unknown parameter 'func' [ 121.256352][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 121.351329][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 121.563799][ T5894] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 121.592382][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.626291][ T5894] usb 3-1: Product: syz [ 121.630512][ T5894] usb 3-1: Manufacturer: syz [ 121.658595][ T5894] usb 3-1: SerialNumber: syz [ 121.699733][ T5894] usb 3-1: config 0 descriptor?? [ 121.714109][ T5894] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 121.756326][ T5894] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 121.859738][ T5894] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 121.985838][ T5894] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 121.998942][ T5894] em28xx 3-1:0.0: board has no eeprom [ 122.017730][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.124289][ T6282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.107'. [ 122.137214][ T5894] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 122.149528][ T5894] em28xx 3-1:0.0: dvb set to bulk mode. [ 122.246415][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 122.299902][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 122.363473][ T5894] usb 3-1: USB disconnect, device number 3 [ 122.491394][ T5894] em28xx 3-1:0.0: Disconnecting em28xx [ 122.581605][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 122.621738][ T6284] loop2: detected capacity change from 0 to 128 [ 122.637412][ T6284] EXT4-fs: inline encryption not supported [ 122.669087][ T6284] ext2: Unknown parameter 'func' [ 122.669911][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.690541][ T8] usb 4-1: Product: syz [ 122.695399][ T8] usb 4-1: Manufacturer: syz [ 122.704913][ T5761] em28xx 3-1:0.0: Binding DVB extension [ 122.711257][ T8] usb 4-1: SerialNumber: syz [ 122.736389][ T8] usb 4-1: config 0 descriptor?? [ 122.963932][ T8] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 123.563461][ T5761] em28xx 3-1:0.0: Registering input extension [ 123.569691][ T8] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 123.573300][ T6290] loop0: detected capacity change from 0 to 128 [ 123.578405][ T5894] em28xx 3-1:0.0: Closing input extension [ 123.604515][ T6290] EXT4-fs: inline encryption not supported [ 123.609829][ T5894] em28xx 3-1:0.0: Freeing device [ 123.625587][ T6290] ext2: Unknown parameter 'func' [ 123.864493][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.872261][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.059363][ T8] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 124.591469][ T8] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 124.635166][ T8] em28xx 4-1:0.0: board has no eeprom [ 124.724656][ T6297] loop5: detected capacity change from 0 to 7 [ 124.746730][ T6297] Dev loop5: unable to read RDB block 7 [ 124.760187][ T6297] loop5: AHDI p1 p2 p3 [ 124.771180][ T6297] loop5: partition table partially beyond EOD, truncated [ 124.789683][ T6297] loop5: p1 start 1818582900 is beyond EOD, truncated [ 124.805742][ T6297] loop5: p3 start 335544320 is beyond EOD, truncated [ 125.000001][ T6299] loop0: detected capacity change from 0 to 128 [ 125.028011][ T6299] EXT4-fs: inline encryption not supported [ 125.037629][ T6299] ext2: Unknown parameter 'func' [ 125.195061][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.300047][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.336480][ T8] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 125.344601][ T8] em28xx 4-1:0.0: dvb set to bulk mode. [ 125.918555][ T172] em28xx 4-1:0.0: Binding DVB extension [ 125.946565][ T8] usb 4-1: USB disconnect, device number 4 [ 125.953412][ T8] em28xx 4-1:0.0: Disconnecting em28xx [ 126.032042][ T172] em28xx 4-1:0.0: Registering input extension [ 126.041283][ T8] em28xx 4-1:0.0: Closing input extension [ 126.075188][ T8] em28xx 4-1:0.0: Freeing device [ 126.286993][ T6277] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.295884][ T6277] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.306080][ T6277] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.315211][ T6277] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.805029][ T6327] loop5: detected capacity change from 0 to 7 [ 126.822627][ T6327] Dev loop5: unable to read RDB block 7 [ 126.830715][ T6327] loop5: unable to read partition table [ 126.838771][ T6327] loop5: partition table beyond EOD, truncated [ 126.845192][ T6327] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 126.865275][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.873087][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.896366][ T6322] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.087144][ T6322] usb 3-1: Using ep0 maxpacket: 8 [ 127.097300][ T6322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.122023][ T6322] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.148596][ T6322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.198734][ T6322] usb 3-1: config 0 descriptor?? [ 127.460061][ T6322] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 127.518919][ T6322] usb 3-1: USB disconnect, device number 4 [ 127.693221][ T6310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.739693][ T6337] loop1: detected capacity change from 0 to 128 [ 127.771062][ T6337] EXT4-fs: inline encryption not supported [ 127.788389][ T6337] ext2: Unknown parameter 'func' [ 127.793385][ T6310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.157495][ T6310] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.170698][ T6310] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.190147][ T6310] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.206432][ T6310] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.689026][ T6361] loop1: detected capacity change from 0 to 2048 [ 129.770587][ T6361] loop1: p1 < > [ 130.168003][ T5922] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.608462][ T6368] loop2: detected capacity change from 0 to 2048 [ 130.651215][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 130.684583][ T6368] loop2: p1 < > [ 130.808489][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 131.028835][ T5922] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 131.271597][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.286184][ T5922] usb 1-1: Product: syz [ 131.290402][ T5922] usb 1-1: Manufacturer: syz [ 131.295030][ T5922] usb 1-1: SerialNumber: syz [ 131.318298][ T5922] usb 1-1: config 0 descriptor?? [ 131.337016][ T5922] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 131.346405][ T5922] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 131.454693][ T6370] loop5: detected capacity change from 0 to 7 [ 131.479789][ T6370] Dev loop5: unable to read RDB block 7 [ 131.498544][ T6370] loop5: unable to read partition table [ 131.517933][ T6370] loop5: partition table beyond EOD, truncated [ 131.524440][ T6370] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 131.573162][ T6329] syz.3.118 (6329): drop_caches: 2 [ 131.735836][ T6331] syz.3.118 (6331): drop_caches: 2 [ 131.788737][ T6377] digital: digital_start_poll: Unknown protocol [ 132.000720][ T5922] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 132.218170][ T6397] loop5: detected capacity change from 0 to 7 [ 132.244819][ T6397] Dev loop5: unable to read RDB block 7 [ 132.259923][ T6397] loop5: unable to read partition table [ 132.266070][ T6397] loop5: partition table beyond EOD, truncated [ 132.275743][ T6397] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 132.306202][ T5922] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 132.327407][ T5922] em28xx 1-1:0.0: board has no eeprom [ 132.336078][ T6401] digital: digital_start_poll: Unknown protocol [ 132.416195][ T5922] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 132.433928][ T5922] em28xx 1-1:0.0: dvb set to bulk mode. [ 132.446202][ T6344] em28xx 1-1:0.0: Binding DVB extension [ 132.462427][ T5922] usb 1-1: USB disconnect, device number 3 [ 132.477592][ T5922] em28xx 1-1:0.0: Disconnecting em28xx [ 132.587155][ T6409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.139'. [ 132.660277][ T6344] em28xx 1-1:0.0: Registering input extension [ 132.669672][ T5922] em28xx 1-1:0.0: Closing input extension [ 132.691159][ T5922] em28xx 1-1:0.0: Freeing device [ 132.791229][ T6413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.141'. [ 132.941837][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.971729][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.036029][ T6433] loop5: detected capacity change from 0 to 7 [ 134.052024][ T6433] Dev loop5: unable to read RDB block 7 [ 134.068446][ T6433] loop5: unable to read partition table [ 134.074348][ T6433] loop5: partition table beyond EOD, truncated [ 134.097423][ T6433] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 135.071457][ T6455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.156'. [ 136.481571][ T6470] loop5: detected capacity change from 0 to 7 [ 136.499282][ T6470] Dev loop5: unable to read RDB block 7 [ 136.504952][ T6470] loop5: unable to read partition table [ 136.523357][ T6470] loop5: partition table beyond EOD, truncated [ 136.536683][ T6470] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 136.781687][ T6489] loop2: detected capacity change from 0 to 128 [ 136.789209][ T6489] EXT4-fs: inline encryption not supported [ 136.805882][ T6489] ext2: Unknown parameter 'func' [ 137.016401][ T5922] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 138.121639][ T5922] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.139636][ T5922] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 138.154253][ T5922] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 138.168245][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.217559][ T5922] cxacru 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 138.309979][ T6513] loop5: detected capacity change from 0 to 7 [ 138.321729][ T6513] Dev loop5: unable to read RDB block 7 [ 138.327570][ T6513] loop5: unable to read partition table [ 138.335072][ T6513] loop5: partition table beyond EOD, truncated [ 138.341511][ T6513] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 138.939504][ T6531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.180'. [ 139.608510][ T6533] loop1: detected capacity change from 0 to 128 [ 139.616832][ T6533] EXT4-fs: inline encryption not supported [ 139.622705][ T6533] ext2: Unknown parameter 'func' [ 139.916040][ T5922] usb 4-1: USB disconnect, device number 5 [ 140.691371][ T6547] loop5: detected capacity change from 0 to 7 [ 140.706367][ T6547] Dev loop5: unable to read RDB block 7 [ 140.726545][ T6547] loop5: unable to read partition table [ 140.732435][ T6547] loop5: partition table beyond EOD, truncated [ 140.766270][ T6547] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 141.177547][ T6568] loop1: detected capacity change from 0 to 128 [ 141.195083][ T6568] EXT4-fs: inline encryption not supported [ 141.210486][ T6568] ext2: Unknown parameter 'func' [ 142.175505][ T5921] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 142.203356][ T6583] loop5: detected capacity change from 0 to 7 [ 142.266020][ T6583] Dev loop5: unable to read RDB block 7 [ 142.274861][ T6583] loop5: unable to read partition table [ 142.286557][ T6583] loop5: partition table beyond EOD, truncated [ 142.302685][ T6583] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 142.367930][ T5921] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.386191][ T5921] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 142.416318][ T5921] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 142.425409][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.473009][ T5921] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 142.682483][ T5921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.714408][ T5921] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.644296][ T6601] loop5: detected capacity change from 0 to 7 [ 143.671406][ T6601] Dev loop5: unable to read RDB block 7 [ 143.689625][ T6601] loop5: unable to read partition table [ 143.706617][ T6601] loop5: partition table beyond EOD, truncated [ 143.716534][ T6601] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 143.903222][ T6607] loop3: detected capacity change from 0 to 128 [ 143.915782][ T6607] EXT4-fs: inline encryption not supported [ 143.933834][ T6607] ext2: Unknown parameter 'func' [ 144.162552][ T5921] usb 1-1: USB disconnect, device number 4 [ 144.568652][ T6617] loop5: detected capacity change from 0 to 7 [ 144.688282][ T6617] Dev loop5: unable to read RDB block 7 [ 144.766464][ T6617] loop5: unable to read partition table [ 144.777150][ T6617] loop5: partition table beyond EOD, truncated [ 144.803844][ T6617] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 145.130247][ T6624] loop3: detected capacity change from 0 to 1024 [ 145.152562][ T6624] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 145.197471][ T6624] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 145.236311][ T6624] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 145.275017][ T6626] loop0: detected capacity change from 0 to 2048 [ 145.285516][ T6624] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #3: comm syz.3.214: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 145.348850][ T6624] EXT4-fs (loop3): no journal found [ 145.357636][ T6626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.384943][ T6624] EXT4-fs (loop3): can't get journal size [ 145.391586][ T6626] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.441249][ T6624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.548725][ T6626] fs-verity: sha512 using implementation "sha512-avx2" [ 145.602229][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.828595][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.984571][ T6637] loop5: detected capacity change from 0 to 7 [ 146.033489][ T6637] Dev loop5: unable to read RDB block 7 [ 146.048532][ T6637] loop5: unable to read partition table [ 146.064795][ T6637] loop5: partition table beyond EOD, truncated [ 146.076913][ T6637] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 146.419886][ T6647] syzkaller0: entered promiscuous mode [ 146.431508][ T6647] syzkaller0: entered allmulticast mode [ 146.546381][ T6321] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 146.616836][ T6649] loop2: detected capacity change from 0 to 128 [ 146.653175][ T6649] EXT4-fs: inline encryption not supported [ 146.669627][ T6649] ext2: Unknown parameter 'func' [ 146.837900][ T6321] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.860468][ T6321] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 147.516314][ T6321] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 147.525496][ T6321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.543227][ T6321] cxacru 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 148.362200][ T6668] loop2: detected capacity change from 0 to 8192 [ 148.399638][ T6668] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 148.413640][ T6668] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 148.423213][ T6668] REISERFS (device loop2): using ordered data mode [ 148.429755][ T6668] reiserfs: using flush barriers [ 148.437448][ T6668] REISERFS warning (device loop2): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 148.616981][ T6676] loop5: detected capacity change from 0 to 7 [ 148.675135][ T6676] Dev loop5: unable to read RDB block 7 [ 148.712977][ T6676] loop5: unable to read partition table [ 148.877173][ T6676] loop5: partition table beyond EOD, truncated [ 148.884591][ T6676] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 149.424705][ T6684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.233'. [ 150.162683][ T6344] usb 4-1: USB disconnect, device number 6 [ 150.336823][ T6690] loop0: detected capacity change from 0 to 128 [ 150.344680][ T6690] EXT4-fs: inline encryption not supported [ 150.366344][ T6690] ext2: Unknown parameter 'func' [ 152.847209][ T6712] loop0: detected capacity change from 0 to 8192 [ 152.911597][ T6712] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 152.924660][ T6712] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 152.934357][ T6712] REISERFS (device loop0): using ordered data mode [ 152.940979][ T6712] reiserfs: using flush barriers [ 152.956665][ T6712] REISERFS warning (device loop0): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 153.456224][ T5921] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 154.557603][ T5921] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.567949][ T5921] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 154.586364][ T5921] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 154.588073][ T6728] loop2: detected capacity change from 0 to 128 [ 154.595452][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.647380][ T6728] EXT4-fs: inline encryption not supported [ 154.653272][ T6728] ext2: Unknown parameter 'func' [ 154.729141][ T5921] cxacru 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 157.233813][ T6750] loop5: detected capacity change from 0 to 7 [ 157.313089][ T6750] Dev loop5: unable to read RDB block 7 [ 157.330941][ T6316] usb 4-1: USB disconnect, device number 7 [ 157.365584][ T6750] loop5: unable to read partition table [ 157.386728][ T6750] loop5: partition table beyond EOD, truncated [ 157.506355][ T6750] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 157.664805][ T6753] loop2: detected capacity change from 0 to 8192 [ 157.695864][ T6753] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 157.708951][ T6753] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 157.718271][ T6753] REISERFS (device loop2): using ordered data mode [ 157.724806][ T6753] reiserfs: using flush barriers [ 157.734988][ T6753] REISERFS warning (device loop2): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 158.185299][ T6764] Cannot find add_set index 0 as target [ 159.473134][ T6775] loop2: detected capacity change from 0 to 8192 [ 159.774431][ T6775] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 159.787762][ T6775] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 159.797092][ T6775] REISERFS (device loop2): using ordered data mode [ 159.803622][ T6775] reiserfs: using flush barriers [ 159.810267][ T6775] REISERFS warning (device loop2): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 160.059946][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.264'. [ 160.232168][ T6789] loop5: detected capacity change from 0 to 7 [ 160.254877][ T6789] Dev loop5: unable to read RDB block 7 [ 160.263081][ T6789] loop5: AHDI p1 p2 p3 [ 160.272996][ T6789] loop5: partition table partially beyond EOD, truncated [ 160.284863][ T6787] syzkaller0: entered promiscuous mode [ 160.297816][ T6789] loop5: p1 start 1818582900 is beyond EOD, truncated [ 160.308257][ T6787] syzkaller0: entered allmulticast mode [ 160.321562][ T6789] loop5: p3 start 335544320 is beyond EOD, truncated [ 160.881547][ T6796] loop1: detected capacity change from 0 to 8192 [ 160.924927][ T6800] loop2: detected capacity change from 0 to 128 [ 160.931954][ T6796] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 160.945320][ T6796] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 160.946051][ T6800] EXT4-fs: inline encryption not supported [ 160.954617][ T6796] REISERFS (device loop1): using ordered data mode [ 160.967346][ T6796] reiserfs: using flush barriers [ 160.974853][ T6796] REISERFS warning (device loop1): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 161.026421][ T6800] ext2: Unknown parameter 'func' [ 161.476228][ T5764] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.299263][ T6810] loop0: detected capacity change from 0 to 8192 [ 162.320783][ T6810] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 162.334283][ T6810] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 162.343623][ T6810] REISERFS (device loop0): using ordered data mode [ 162.350425][ T6810] reiserfs: using flush barriers [ 162.361620][ T6810] REISERFS warning (device loop0): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 163.534922][ T6824] loop5: detected capacity change from 0 to 7 [ 163.575476][ T6824] Dev loop5: unable to read RDB block 7 [ 163.606224][ T6824] loop5: unable to read partition table [ 163.612175][ T6824] loop5: partition table beyond EOD, truncated [ 163.636833][ T6824] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 164.017328][ T6834] loop3: detected capacity change from 0 to 8192 [ 164.742109][ T6834] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 164.755751][ T6834] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 164.766537][ T6834] REISERFS (device loop3): using ordered data mode [ 164.773462][ T6834] reiserfs: using flush barriers [ 164.780374][ T6834] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 165.474372][ T6841] loop1: detected capacity change from 0 to 8192 [ 165.783558][ T6841] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 165.796791][ T6841] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 165.806046][ T6841] REISERFS (device loop1): using ordered data mode [ 165.812651][ T6841] reiserfs: using flush barriers [ 165.819914][ T6841] REISERFS warning (device loop1): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 165.844337][ T6845] syz.3.287 uses obsolete (PF_INET,SOCK_PACKET) [ 166.549600][ T6858] loop5: detected capacity change from 0 to 7 [ 166.572813][ T6858] Dev loop5: unable to read RDB block 7 [ 166.587984][ T6858] loop5: unable to read partition table [ 166.593899][ T6858] loop5: partition table beyond EOD, truncated [ 166.607650][ T6856] syzkaller0: entered promiscuous mode [ 166.613993][ T6856] syzkaller0: entered allmulticast mode [ 166.624113][ T6858] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 168.248781][ T6874] loop0: detected capacity change from 0 to 128 [ 168.257946][ T6874] EXT4-fs: inline encryption not supported [ 168.266217][ T6874] ext2: Unknown parameter 'func' [ 169.969125][ T6896] loop3: detected capacity change from 0 to 8192 [ 169.978128][ T6896] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 169.991201][ T6896] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 170.000648][ T6896] REISERFS (device loop3): using ordered data mode [ 170.007262][ T6896] reiserfs: using flush barriers [ 170.019994][ T6896] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 172.019606][ T6865] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 172.681822][ T6919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.305'. [ 172.921189][ T6921] loop2: detected capacity change from 0 to 8192 [ 172.938470][ T6921] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 172.952278][ T6921] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 172.961661][ T6921] REISERFS (device loop2): using ordered data mode [ 172.968342][ T6921] reiserfs: using flush barriers [ 172.988736][ T6921] REISERFS warning (device loop2): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 173.900902][ T6137] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 175.210797][ T6936] syzkaller0: entered promiscuous mode [ 175.250827][ T6936] syzkaller0: entered allmulticast mode [ 176.161029][ T6952] loop1: detected capacity change from 0 to 8192 [ 176.453236][ T6952] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 176.466329][ T6952] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 176.475587][ T6952] REISERFS (device loop1): using ordered data mode [ 176.482661][ T6952] reiserfs: using flush barriers [ 176.489424][ T6952] REISERFS warning (device loop1): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 177.199951][ T6970] loop1: detected capacity change from 0 to 8192 [ 177.244425][ T6970] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 177.257807][ T6970] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 177.267127][ T6970] REISERFS (device loop1): using ordered data mode [ 177.273642][ T6970] reiserfs: using flush barriers [ 177.281121][ T6970] REISERFS warning (device loop1): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 178.157062][ T6985] netlink: 20 bytes leftover after parsing attributes in process `syz.1.325'. [ 178.941049][ T6988] loop5: detected capacity change from 0 to 7 [ 178.948398][ T6988] Dev loop5: unable to read RDB block 7 [ 178.954011][ T6988] loop5: unable to read partition table [ 178.970863][ T6988] loop5: partition table beyond EOD, truncated [ 178.991030][ T6988] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 179.873342][ T7002] loop0: detected capacity change from 0 to 8192 [ 179.877175][ T7001] loop2: detected capacity change from 0 to 8192 [ 179.892813][ T7002] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 179.905967][ T7002] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 179.906595][ T7001] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 179.915403][ T7002] REISERFS (device loop0): using ordered data mode [ 179.928242][ T7001] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 179.934664][ T7002] reiserfs: using flush barriers [ 179.948980][ T7001] REISERFS (device loop2): using ordered data mode [ 179.955504][ T7001] reiserfs: using flush barriers [ 179.956270][ T7002] REISERFS warning (device loop0): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 179.974795][ T7001] REISERFS warning (device loop2): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 180.052932][ T5766] udevd: attempt to access beyond end of device [ 180.052932][ T5766] loop2: rw=524288, sector=8064, nr_sectors = 8 limit=0 [ 180.535722][ T7020] syzkaller0: entered promiscuous mode [ 180.542228][ T7020] syzkaller0: entered allmulticast mode [ 180.742780][ T7027] loop5: detected capacity change from 0 to 7 [ 180.749975][ T7027] Dev loop5: unable to read RDB block 7 [ 180.756014][ T7027] loop5: unable to read partition table [ 180.767187][ T7027] loop5: partition table beyond EOD, truncated [ 180.779522][ T7027] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.801385][ T7025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.338'. [ 180.866448][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 182.172773][ T7041] loop3: detected capacity change from 0 to 8192 [ 182.188104][ T7039] loop1: detected capacity change from 0 to 8192 [ 182.218604][ T7039] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 182.231719][ T7039] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 182.241079][ T7039] REISERFS (device loop1): using ordered data mode [ 182.247697][ T7039] reiserfs: using flush barriers [ 182.261509][ T7039] REISERFS warning (device loop1): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 182.266408][ T7041] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 182.285957][ T7041] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 182.295329][ T7041] REISERFS (device loop3): using ordered data mode [ 182.301924][ T7041] reiserfs: using flush barriers [ 182.308868][ T7041] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 182.393499][ T5762] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 182.403485][ T5764] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 182.704446][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 182.888269][ T7064] loop5: detected capacity change from 0 to 7 [ 182.903167][ T7064] Dev loop5: unable to read RDB block 7 [ 182.915051][ T7064] loop5: unable to read partition table [ 182.926463][ T7064] loop5: partition table beyond EOD, truncated [ 182.944709][ T7064] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.114304][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.358'. [ 184.137901][ T7081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.355'. [ 184.478672][ T7088] loop2: detected capacity change from 0 to 8192 [ 184.740864][ T7083] loop0: detected capacity change from 0 to 8192 [ 184.752044][ T7088] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 184.756621][ T7083] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 184.765073][ T7088] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 184.778300][ T7083] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 184.787574][ T7088] REISERFS (device loop2): using ordered data mode [ 184.796684][ T7083] REISERFS (device loop0): using ordered data mode [ 184.803076][ T7088] reiserfs: using flush barriers [ 184.809628][ T7083] reiserfs: using flush barriers [ 184.823177][ T7083] REISERFS warning (device loop0): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 184.838520][ T7088] REISERFS warning (device loop2): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 185.415924][ T7097] syzkaller0: entered promiscuous mode [ 185.446918][ T7097] syzkaller0: entered allmulticast mode [ 185.619058][ T7116] loop5: detected capacity change from 0 to 7 [ 185.635572][ T7116] Dev loop5: unable to read RDB block 7 [ 185.641590][ T7116] loop5: unable to read partition table [ 185.647843][ T7116] loop5: partition table beyond EOD, truncated [ 185.654156][ T7116] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 185.705189][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 185.888615][ T7122] loop3: detected capacity change from 0 to 8192 [ 185.897031][ T7122] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 185.910421][ T7122] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 185.919763][ T7122] REISERFS (device loop3): using ordered data mode [ 185.926359][ T7122] reiserfs: using flush barriers [ 185.939642][ T7122] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 186.690721][ T7127] loop3: detected capacity change from 0 to 8192 [ 186.762748][ T7127] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 186.775921][ T7127] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 186.785767][ T7127] REISERFS (device loop3): using ordered data mode [ 186.792419][ T7127] reiserfs: using flush barriers [ 186.807393][ T7127] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 187.248805][ T7136] loop3: detected capacity change from 0 to 1024 [ 187.285836][ T7136] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 187.319633][ T7136] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 187.346242][ T7136] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 187.371527][ T7136] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #3: comm syz.3.374: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 187.402913][ T7136] EXT4-fs (loop3): no journal found [ 187.409926][ T7136] EXT4-fs (loop3): can't get journal size [ 187.428748][ T7137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.372'. [ 187.440370][ T7136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.492494][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.451799][ T7153] loop0: detected capacity change from 0 to 8192 [ 188.466511][ T7153] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 188.479600][ T7153] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 188.488918][ T7153] REISERFS (device loop0): using ordered data mode [ 188.495440][ T7153] reiserfs: using flush barriers [ 188.508957][ T7153] REISERFS warning (device loop0): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 189.900345][ T7172] loop3: detected capacity change from 0 to 128 [ 189.911994][ T7172] EXT4-fs: inline encryption not supported [ 189.935170][ T7172] ext2: Unknown parameter 'func' [ 190.246744][ T7179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.383'. [ 190.736316][ T6316] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 190.964523][ T6316] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.993222][ T6316] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 191.041679][ T6316] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 191.081591][ T6316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.125361][ T6316] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 191.173094][ T7187] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 191.184867][ T7187] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 191.193386][ T7187] CPU: 0 PID: 7187 Comm: syz.2.386 Not tainted syzkaller #0 [ 191.200703][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 191.210775][ T7187] RIP: 0010:vsscanf+0x19a/0x2520 [ 191.215746][ T7187] Code: 48 c7 c6 10 4f 54 8f e8 24 91 03 f7 41 83 fe 25 74 4d 45 85 f6 0f 84 1e 22 00 00 48 ff c3 48 89 5c 24 78 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 bd 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 191.235371][ T7187] RSP: 0018:ffffc90003307640 EFLAGS: 00010246 [ 191.241461][ T7187] RAX: 0000000000000000 RBX: ffffffff8ad69621 RCX: 0000000000000001 [ 191.249453][ T7187] RDX: ffffffff8a84044c RSI: ffffffff8f544f10 RDI: 0000000000000030 [ 191.257441][ T7187] RBP: ffffc90003307770 R08: ffff888024708000 R09: 0000000000000002 [ 191.265400][ T7187] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff8ad69620 [ 191.273382][ T7187] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 191.281381][ T7187] FS: 00007fa5a2bb36c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 191.290307][ T7187] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.296882][ T7187] CR2: 000000110c3a7a65 CR3: 00000000264a5000 CR4: 00000000003506f0 [ 191.304849][ T7187] Call Trace: [ 191.308116][ T7187] [ 191.311035][ T7187] ? bprintf+0x140/0x140 [ 191.315293][ T7187] sscanf+0xe3/0x140 [ 191.319191][ T7187] ? __might_fault+0xaa/0x120 [ 191.323874][ T7187] ? skip_atoi+0xe0/0xe0 [ 191.328112][ T7187] ? __might_fault+0xaa/0x120 [ 191.332781][ T7187] ? __might_fault+0xc6/0x120 [ 191.337449][ T7187] ? __might_fault+0xaa/0x120 [ 191.342125][ T7187] ? split_huge_pages_write+0x372/0x1b60 [ 191.347810][ T7187] split_huge_pages_write+0x391/0x1b60 [ 191.353261][ T7187] ? mark_lock+0x94/0x320 [ 191.357594][ T7187] ? deferred_split_scan+0x940/0x940 [ 191.362894][ T7187] ? aa_file_perm+0x11b/0xee0 [ 191.367576][ T7187] ? debugfs_file_get+0x36c/0x460 [ 191.372593][ T7187] ? rcu_read_lock_any_held+0xb4/0x140 [ 191.378046][ T7187] ? rcu_read_lock_bh_held+0x100/0x100 [ 191.383496][ T7187] full_proxy_write+0x110/0x1c0 [ 191.388343][ T7187] ? full_proxy_read+0x1c0/0x1c0 [ 191.393277][ T7187] vfs_write+0x299/0x9a0 [ 191.397511][ T7187] ? file_end_write+0x250/0x250 [ 191.402353][ T7187] ? __fget_files+0x28/0x460 [ 191.406938][ T7187] ? __fget_files+0x3fc/0x460 [ 191.411612][ T7187] ? __fdget_pos+0x2a3/0x330 [ 191.416201][ T7187] ? ksys_write+0x74/0x260 [ 191.420611][ T7187] ksys_write+0x151/0x260 [ 191.424928][ T7187] ? __ia32_sys_read+0x90/0x90 [ 191.429685][ T7187] ? lockdep_hardirqs_on+0x98/0x150 [ 191.434879][ T7187] do_syscall_64+0x55/0xb0 [ 191.439382][ T7187] ? clear_bhb_loop+0x40/0x90 [ 191.444050][ T7187] ? clear_bhb_loop+0x40/0x90 [ 191.448736][ T7187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.454632][ T7187] RIP: 0033:0x7fa5a1d9e2d9 [ 191.459043][ T7187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.478652][ T7187] RSP: 002b:00007fa5a2bb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.487062][ T7187] RAX: ffffffffffffffda RBX: 00007fa5a2025fa0 RCX: 00007fa5a1d9e2d9 [ 191.495038][ T7187] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 191.503008][ T7187] RBP: 00007fa5a1e35888 R08: 0000000000000000 R09: 0000000000000000 [ 191.510967][ T7187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.518941][ T7187] R13: 00007fa5a2026038 R14: 00007fa5a2025fa0 R15: 00007ffee4b97188 [ 191.526927][ T7187] [ 191.529973][ T7187] Modules linked in: [ 191.540863][ T7187] ---[ end trace 0000000000000000 ]--- [ 191.546420][ T7187] RIP: 0010:vsscanf+0x19a/0x2520 [ 191.551384][ T7187] Code: 48 c7 c6 10 4f 54 8f e8 24 91 03 f7 41 83 fe 25 74 4d 45 85 f6 0f 84 1e 22 00 00 48 ff c3 48 89 5c 24 78 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 bd 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 191.571051][ T7187] RSP: 0018:ffffc90003307640 EFLAGS: 00010246 [ 191.577231][ T7187] RAX: 0000000000000000 RBX: ffffffff8ad69621 RCX: 0000000000000001 [ 191.585213][ T7187] RDX: ffffffff8a84044c RSI: ffffffff8f544f10 RDI: 0000000000000030 [ 191.593271][ T7187] RBP: ffffc90003307770 R08: ffff888024708000 R09: 0000000000000002 [ 191.601277][ T7187] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff8ad69620 [ 191.609288][ T7187] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 191.617293][ T7187] FS: 00007fa5a2bb36c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 191.626246][ T7187] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.632985][ T7187] CR2: 000000110c3b883b CR3: 00000000264a5000 CR4: 00000000003506f0 [ 191.641027][ T7187] Kernel panic - not syncing: Fatal exception [ 191.647332][ T7187] Kernel Offset: disabled [ 191.651648][ T7187] Rebooting in 86400 seconds..