last executing test programs: 11.286598646s ago: executing program 3 (id=3098): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0xdb9303c4987113b7, 0x0, 0x1, 0x0, &(0x7f00000002c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x37) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./bus\x00') rmdir(&(0x7f0000000080)='./bus\x00') syz_open_dev$sg(0x0, 0x6f5e, 0x3) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x3fc, 0x40000000, 0x2, 0x62571c94}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) getpgid(0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 11.035115021s ago: executing program 3 (id=3100): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x80480, &(0x7f0000000100), 0x6, 0x61e, &(0x7f0000002740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000280)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x10, 0x5, {}, {0x1, 0xc, 0xd7, 0x7, 0x1, 0x3, "621a65f4"}, 0x1ff, 0x2, {0x0}, 0x6}) listen(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) 10.917404593s ago: executing program 2 (id=3103): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$eJzs3U1rJMUfB/DfJJPH/SeTv66ruyAWelGEcZODJy9BdkEMKNEsqKdeM9EhkwcyQyAi7njyJPgyRD16E8Q3kIsXz4IgkovHPYgtyUw085BsYjIJyOdz6aK6vlXV6U5DD1303itfrK2u1MsrWSOGCoUobo5E8WGKFEMxHC3NeOHeTz8//dY7774+v7BwZzGlu/Nvz76cUpp+5vv3Pv7m2R8a1+59O/3dWOzODO39PvfL7o3dm3t/fh3VeqrW0/pGI2Xp/sZGI7tfq6Tlan21nNKbtUpWr6Tqer2y1bF/pbaxubmTsvXlqcnNrUq9nrL1nbRa2UmNQmps7aTsg6y6nsrlcpqaDM5j6auHeZ5H5PlIjEae5/lETMa1+F9MxXSUYib+H4/F43E9nogb8WQ8FTcPWl31vAEAAAAAAAAAAAAAAAAAAOC/5RHr/wvW/wMAAAAAAAAAAAAAAAAAAMDgda//L0b4/j8AAAAAAAAAAAAAAAAAAABcskd8/79r/f+L1v8DAAAAAAAAAAAAAAAAAADAIIy3NospjUesfba9tL3U2rbq51eiGrWoxO0oxR9xsPq/pVW++9rCndvpwEy8tPagnX+wvTTcmZ8dKcVMoW9+diIiUkqd+bGYPJqfi1Jc7z/+XGv8rvx4PP/cfv7TVr4cpfjx/diIWixHFNpHf5D/ZDalV99YmOjM39pvd6zhAZ8WAAAAuEjl9Lfe5/dmu1Hf/a1d7efz1G5ZOOH3ga7n82LcKl7VUXOovvPRalarVbb+ZWH0+H5Gz9dzT6EQEVkcrZme/HVxf/BT9nN4uV3QfI4Uhi+6wxMLIye3Occ5jeKp/5gDKkSzuyYvRZy1n9++PFIzfub4+QpD7cssqzVPfbFFM88HOrG+/4xjJ6WOv2cUBnxP4vL8c9KveiYAAAAAAAAAAACcRd+3/yYioud9wA97ag5fD++M9/Z8/OifX8IRAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sQPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK8CAAD//w+Ty90=") 9.008709246s ago: executing program 1 (id=3105): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x140) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 9.008373676s ago: executing program 2 (id=3106): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x20, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0x4}, {0x1, 0x2}, {0x1, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xfffffffa}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0x0, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x44041050) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010", @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x28, r10, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7ff, 0x74}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r12 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_PIT(r12, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x7, 0x20, 0xa6, 0x1, 0x5, 0xd, 0xce}, {0xfffffff9, 0xfffa, 0x7f, 0x0, 0x0, 0x2, 0xc9, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x4, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000007}], 0xcc79}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x14, r14, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24044894}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x5) r15 = dup(r6) syz_ublk_setup_queues(r15, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4f92, 0x10000, 0x3, 0xc, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf2e3, 0x2, 0x0, 0x8f, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x706, 0x800, 0x0, 0x5a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd31a, 0x1000, 0x2, 0x3e6, 0x0, r15}}], 0x4, &(0x7f0000001a80)={0x2e, 0x40, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r4, '\x00', {0x1, 0xbf8, 0x0, 0x0}}, &(0x7f0000001b00)) 9.008237096s ago: executing program 3 (id=3107): io_uring_setup(0x17ce, &(0x7f0000000140)={0x0, 0x52c1, 0x1, 0x0, 0x31d}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x3, {0x0, 0x1}, 0xfd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) 9.006186576s ago: executing program 0 (id=3108): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x80480, &(0x7f0000000100), 0x6, 0x61e, &(0x7f0000002740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000280)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x10, 0x5, {}, {0x1, 0xc, 0xd7, 0x7, 0x1, 0x3, "621a65f4"}, 0x1ff, 0x2, {0x0}, 0x6, 0x0, r4}) listen(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) 7.782987704s ago: executing program 0 (id=3109): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0xdb9303c4987113b7, 0x0, 0x1, 0x0, &(0x7f00000002c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x37) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./bus\x00') rmdir(&(0x7f0000000080)='./bus\x00') syz_open_dev$sg(0x0, 0x6f5e, 0x3) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x3fc, 0x40000000, 0x2, 0x62571c94}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) getpgid(0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 7.776961614s ago: executing program 1 (id=3110): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff00000000800000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7.711137306s ago: executing program 3 (id=3111): io_uring_setup(0x17ce, &(0x7f0000000140)={0x0, 0x52c1, 0x1, 0x0, 0x31d}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x3, {0x0, 0x1}, 0xfd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) 7.472034441s ago: executing program 1 (id=3112): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r7) r9 = open(&(0x7f0000000080)='./file0\x00', 0x20002, 0x1a9) fcntl$setlease(r9, 0x400, 0x1) r10 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r10, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0xb9d9, 0x2}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc) sched_setscheduler(0x0, 0x2, 0x0) syz_ublk_add_dev(r0, r1, r5, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, r11, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x4, 0xac1, 0x0, 0x0, 0x1000, 0x7fffffff, 0x0, 0x0, 0x102}}}, &(0x7f0000000280)) 6.62251805s ago: executing program 3 (id=3113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.62077474s ago: executing program 0 (id=3121): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$eJzs3U1rJMUfB/DfJJPH/SeTv66ruyAWelGEcZODJy9BdkEMKNEsqKdeM9EhkwcyQyAi7njyJPgyRD16E8Q3kIsXz4IgkovHPYgtyUw085BsYjIJyOdz6aK6vlXV6U5DD1303itfrK2u1MsrWSOGCoUobo5E8WGKFEMxHC3NeOHeTz8//dY7774+v7BwZzGlu/Nvz76cUpp+5vv3Pv7m2R8a1+59O/3dWOzODO39PvfL7o3dm3t/fh3VeqrW0/pGI2Xp/sZGI7tfq6Tlan21nNKbtUpWr6Tqer2y1bF/pbaxubmTsvXlqcnNrUq9nrL1nbRa2UmNQmps7aTsg6y6nsrlcpqaDM5j6auHeZ5H5PlIjEae5/lETMa1+F9MxXSUYib+H4/F43E9nogb8WQ8FTcPWl31vAEAAAAAAAAAAAAAAAAAAOC/5RHr/wvW/wMAAAAAAAAAAAAAAAAAAMDgda//L0b4/j8AAAAAAAAAAAAAAAAAAABcskd8/79r/f+L1v8DAAAAAAAAAAAAAAAAAADAIIy3NospjUesfba9tL3U2rbq51eiGrWoxO0oxR9xsPq/pVW++9rCndvpwEy8tPagnX+wvTTcmZ8dKcVMoW9+diIiUkqd+bGYPJqfi1Jc7z/+XGv8rvx4PP/cfv7TVr4cpfjx/diIWixHFNpHf5D/ZDalV99YmOjM39pvd6zhAZ8WAAAAuEjl9Lfe5/dmu1Hf/a1d7efz1G5ZOOH3ga7n82LcKl7VUXOovvPRalarVbb+ZWH0+H5Gz9dzT6EQEVkcrZme/HVxf/BT9nN4uV3QfI4Uhi+6wxMLIye3Occ5jeKp/5gDKkSzuyYvRZy1n9++PFIzfub4+QpD7cssqzVPfbFFM88HOrG+/4xjJ6WOv2cUBnxP4vL8c9KveiYAAAAAAAAAAACcRd+3/yYioud9wA97ag5fD++M9/Z8/OifX8IRAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sQPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK8CAAD//w+Ty90=") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0xdb9303c4987113b7, 0x0, 0x1, 0x0, &(0x7f00000002c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x37) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./bus\x00') rmdir(&(0x7f0000000080)='./bus\x00') syz_open_dev$sg(0x0, 0x6f5e, 0x3) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x3fc, 0x40000000, 0x2, 0x62571c94}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) getpgid(0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 6.61999155s ago: executing program 2 (id=3114): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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") 6.610614511s ago: executing program 1 (id=3115): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x80480, &(0x7f0000000100), 0x6, 0x61e, &(0x7f0000002740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000280)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x10, 0x5, {}, {0x1, 0xc, 0xd7, 0x7, 0x1, 0x3, "621a65f4"}, 0x1ff, 0x2, {0x0}, 0x6}) listen(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) 4.388204241s ago: executing program 1 (id=3116): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_complete(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) 4.282450273s ago: executing program 2 (id=3117): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x80480, &(0x7f0000000100), 0x6, 0x61e, &(0x7f0000002740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000280)=0x2) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x10, 0x5, {}, {0x1, 0xc, 0xd7, 0x7, 0x1, 0x3, "621a65f4"}, 0x1ff, 0x2, {0x0}, 0x6, 0x0, r3}) listen(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) 3.311397125s ago: executing program 0 (id=3118): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_complete(0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0xdddd0000, 0x1000, &(0x7f0000c15000/0x1000)=nil}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 3.310588275s ago: executing program 1 (id=3119): io_uring_setup(0x17ce, &(0x7f0000000140)={0x0, 0x52c1, 0x1, 0x0, 0x31d}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x3, {0x0, 0x1}, 0xfd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) 2.808139596s ago: executing program 2 (id=3120): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff00000000800000001801", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.902784577s ago: executing program 0 (id=3122): io_uring_setup(0x17ce, &(0x7f0000000140)={0x0, 0x52c1, 0x1, 0x0, 0x31d}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x3, {0x0, 0x1}, 0xfd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) 1.901876937s ago: executing program 2 (id=3123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) 1.801655389s ago: executing program 3 (id=3124): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 0s ago: executing program 0 (id=3125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x6006, 0x0, 0x3) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x1, 0x3, 0x480, 0x70bd2b, 0x25dfdbfd, {0xe}, [@nested={0x4, 0x15c}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000015) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb0d003f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df9ba34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa0400096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353904ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8f2d826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb8030000009dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16e1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0b88027b3883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c9984205000000cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742bb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r4, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) syz_open_dev$sndctrl(&(0x7f00000003c0), 0x3, 0x400600) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$apparmor_exec(r5, &(0x7f0000000080)={'stack ', ':(%#{//(@\\)//&@},[\'%%&\\#*\x00'}, 0x20) kernel console output (not intermixed with test programs): t [1, 0] type 2 family 0 port 6081 - 0 [ 293.918045][ T7960] gretap1: left promiscuous mode [ 293.991358][ T7973] vlan2: entered promiscuous mode [ 294.010073][ T7973] vlan2: entered allmulticast mode [ 294.024694][ T7973] hsr_slave_1: entered allmulticast mode [ 294.059159][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 295.490628][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 296.633641][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 298.125473][ T8030] loop1: detected capacity change from 0 to 64 [ 300.662246][ T8054] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 306.310095][ T8082] loop1: detected capacity change from 0 to 1024 [ 306.317755][ T8082] ext4: Unknown parameter 'appraise' [ 306.393763][ T8083] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 307.120025][ T6938] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 308.843784][ T8099] ICMPv6: NA: aa:aa:aa:aa:aa:bb advertised our address fe80::aa on syz_tun! [ 308.900733][ T8099] warning: `syz.3.596' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 308.940124][ T8099] xt_hashlimit: max too large, truncated to 1048576 [ 309.118279][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.597'. [ 311.332721][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.603'. [ 315.189946][ T8160] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 315.245289][ T8160] ref_ctr increment failed for inode: 0x324 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ebc1300 [ 315.323958][ T8163] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 315.356985][ T8163] ref_ctr decrement failed for inode: 0x324 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ebc1300 [ 316.097256][ T8171] loop1: detected capacity change from 0 to 128 [ 316.196950][ T6938] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 316.457782][ T8185] loop1: detected capacity change from 0 to 512 [ 316.471570][ T8185] EXT4-fs: Ignoring removed oldalloc option [ 316.492545][ T8185] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 316.536546][ T8185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.554464][ T8185] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.715752][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.727066][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.568342][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 319.568376][ T28] audit: type=1326 audit(2000000213.550:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.2.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 320.131667][ T28] audit: type=1326 audit(2000000213.550:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.2.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 320.156288][ T28] audit: type=1326 audit(2000000213.550:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.2.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 320.230149][ T28] audit: type=1326 audit(2000000213.550:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.2.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 320.254519][ T28] audit: type=1326 audit(2000000213.550:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.2.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 320.339679][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.342371][ T28] audit: type=1326 audit(2000000213.550:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.2.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 320.373099][ T5814] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 320.436943][ T28] audit: type=1326 audit(2000000213.550:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.2.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 320.566076][ T28] audit: type=1326 audit(2000000213.550:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.2.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 320.591264][ T5814] usb 1-1: Using ep0 maxpacket: 16 [ 320.600080][ T28] audit: type=1326 audit(2000000213.550:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.2.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 320.630145][ T28] audit: type=1326 audit(2000000213.550:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.2.626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 320.767546][ T5814] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.777824][ T5814] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.792029][ T5814] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.802154][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.810186][ T5814] usb 1-1: Product: syz [ 320.814587][ T5814] usb 1-1: Manufacturer: syz [ 320.819219][ T5814] usb 1-1: SerialNumber: syz [ 320.906204][ T8285] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 321.564934][ T5814] usb 1-1: 0:2 : does not exist [ 321.588210][ T5814] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 321.611782][ T5814] usb 1-1: USB disconnect, device number 2 [ 321.647623][ T6938] udevd[6938]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.870514][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 326.109754][ T8333] netlink: 'syz.0.643': attribute type 1 has an invalid length. [ 326.340694][ T8342] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 327.118532][ T8338] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 327.150595][ T8338] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 327.190230][ T8338] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 327.222944][ T8338] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 327.447492][ T8338] bond2: (slave geneve2): making interface the new active one [ 327.468416][ T8338] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 327.478397][ T8333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.643'. [ 328.659993][ T8357] loop1: detected capacity change from 0 to 1024 [ 328.684330][ T8357] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 328.732939][ T8357] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 328.835543][ T8359] netlink: 'syz.0.649': attribute type 1 has an invalid length. [ 329.953853][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 330.281752][ T8367] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 330.485198][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.649'. [ 330.506258][ T8359] 8021q: adding VLAN 0 to HW filter on device bond3 [ 330.508889][ T8250] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 330.515740][ T8357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 330.618366][ T8357] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz.1.648: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0 [ 330.652407][ T8250] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 330.691306][ T8370] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 330.781968][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.508505][ T8381] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 333.531022][ T8396] syzkaller0: entered promiscuous mode [ 333.542592][ T8396] syzkaller0: entered allmulticast mode [ 333.685603][ T8396] TC_ACT_REPEAT abuse ? [ 339.336081][ T8456] netlink: 'syz.2.675': attribute type 1 has an invalid length. [ 339.566881][ T8456] 8021q: adding VLAN 0 to HW filter on device bond4 [ 339.602557][ T8460] bond4: (slave ip6gretap2): making interface the new active one [ 339.632406][ T8460] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 340.266192][ T8461] veth5: entered promiscuous mode [ 340.293912][ T8461] bond4: (slave veth5): Enslaving as an active interface with a down link [ 340.387994][ T8456] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 340.682043][ T8469] loop1: detected capacity change from 0 to 256 [ 340.861885][ T8469] FAT-fs (loop1): Directory bread(block 64) failed [ 340.868954][ T8469] FAT-fs (loop1): Directory bread(block 65) failed [ 340.876159][ T8469] FAT-fs (loop1): Directory bread(block 66) failed [ 340.882935][ T8469] FAT-fs (loop1): Directory bread(block 67) failed [ 340.890127][ T8469] FAT-fs (loop1): Directory bread(block 68) failed [ 340.896932][ T8469] FAT-fs (loop1): Directory bread(block 69) failed [ 340.904586][ T8469] FAT-fs (loop1): Directory bread(block 70) failed [ 340.911736][ T8469] FAT-fs (loop1): Directory bread(block 71) failed [ 340.918856][ T8469] FAT-fs (loop1): Directory bread(block 72) failed [ 340.926261][ T8469] FAT-fs (loop1): Directory bread(block 73) failed [ 340.974290][ T8469] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 341.836081][ T8481] bridge_slave_0: left allmulticast mode [ 341.872737][ T8481] bridge_slave_0: left promiscuous mode [ 341.889107][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.138835][ T8481] bridge_slave_1: left allmulticast mode [ 342.145292][ T8481] bridge_slave_1: left promiscuous mode [ 342.151669][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.165515][ T8481] bond0: (slave bond_slave_0): Releasing backup interface [ 342.183716][ T8481] bond0: (slave bond_slave_1): Releasing backup interface [ 342.860810][ T8481] team0: Port device team_slave_0 removed [ 342.895084][ T8481] team0: Port device team_slave_1 removed [ 342.913236][ T8481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.921435][ T8481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.936767][ T8481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.945977][ T8481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.984256][ T8481] bond1: (slave veth3): Releasing backup interface [ 343.046090][ T8482] team0: Mode changed to "loadbalance" [ 343.055627][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 343.774944][ T8491] syz.1.683 uses obsolete (PF_INET,SOCK_PACKET) [ 344.450278][ T8505] netlink: 'syz.1.687': attribute type 1 has an invalid length. [ 344.893220][ T8505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 345.239492][ T8509] bond3: (slave ip6gretap1): making interface the new active one [ 345.279549][ T8509] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 345.361036][ T8512] veth3: entered promiscuous mode [ 345.616579][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 345.616698][ T28] audit: type=1326 audit(2000000239.590:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 345.647639][ T28] audit: type=1326 audit(2000000239.590:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 345.747459][ T28] audit: type=1326 audit(2000000239.590:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 345.781201][ T28] audit: type=1326 audit(2000000239.590:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 346.193359][ T8512] bond3: (slave veth3): Enslaving as an active interface with a down link [ 346.210638][ T28] audit: type=1326 audit(2000000239.590:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 346.375731][ T28] audit: type=1326 audit(2000000239.590:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 346.400214][ T28] audit: type=1326 audit(2000000239.590:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 346.488529][ T28] audit: type=1326 audit(2000000239.600:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 346.530185][ T28] audit: type=1326 audit(2000000239.600:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 346.570128][ T8505] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 346.595077][ T28] audit: type=1326 audit(2000000239.600:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 348.060859][ T8549] netlink: 'syz.1.699': attribute type 11 has an invalid length. [ 348.239812][ T8549] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 348.256845][ T8549] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 348.452865][ T8556] netlink: 184 bytes leftover after parsing attributes in process `syz.3.702'. [ 348.478553][ T8556] bond0: entered allmulticast mode [ 349.580058][ T8562] macvlan2: entered allmulticast mode [ 349.588556][ T8562] bond0: entered allmulticast mode [ 349.597540][ T8562] bond_slave_1: entered allmulticast mode [ 349.606829][ T8562] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 349.619451][ T8562] team0: Port device macvlan2 added [ 350.000923][ T8564] loop2: detected capacity change from 0 to 40427 [ 350.020916][ T8564] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 350.028662][ T8564] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 350.038446][ T8564] F2FS-fs (loop2): Image doesn't support compression [ 350.045688][ T8564] F2FS-fs (loop2): Image doesn't support compression [ 350.063469][ T8564] F2FS-fs (loop2): invalid crc value [ 350.083004][ T8566] netlink: 'syz.3.705': attribute type 1 has an invalid length. [ 350.183539][ T8564] F2FS-fs (loop2): Start checkpoint disabled! [ 350.210188][ T8564] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 350.217810][ T8564] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 350.436011][ T8566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 350.464000][ T8570] bond2: (slave ip6gretap1): making interface the new active one [ 350.482097][ T8570] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 351.201873][ T8254] kworker/u4:19: attempt to access beyond end of device [ 351.201873][ T8254] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 351.241104][ T8572] veth7: entered promiscuous mode [ 351.254775][ T8572] bond2: (slave veth7): Enslaving as an active interface with a down link [ 351.267130][ T8254] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 351.357111][ T8566] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 351.743170][ T8580] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 353.427890][ T8602] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 357.638400][ T8637] xt_connbytes: Forcing CT accounting to be enabled [ 357.646870][ T8637] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 357.661862][ T8637] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 358.823984][ T8642] netlink: 'syz.0.723': attribute type 11 has an invalid length. [ 358.964123][ T8642] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 358.983160][ T8642] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 359.886031][ T8656] atomic_op ffff888079b02198 conn xmit_atomic 0000000000000000 [ 362.265313][ T8670] netlink: 36 bytes leftover after parsing attributes in process `syz.2.730'. [ 362.450497][ T8671] xt_connbytes: Forcing CT accounting to be enabled [ 362.466466][ T8671] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 363.424152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 364.831875][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 366.543976][ T8711] bridge_slave_0: left allmulticast mode [ 366.549881][ T8711] bridge_slave_0: left promiscuous mode [ 366.556587][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.569525][ T8711] bridge_slave_1: left allmulticast mode [ 366.588314][ T8711] bridge_slave_1: left promiscuous mode [ 366.614418][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.643082][ T8711] bond0: (slave bond_slave_0): Releasing backup interface [ 366.664937][ T8711] bond0: (slave bond_slave_1): Releasing backup interface [ 366.806344][ T8711] team0: Port device team_slave_0 removed [ 366.837751][ T8711] team0: Port device team_slave_1 removed [ 366.853867][ T8711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.869637][ T8711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.879003][ T8711] bond2: (slave geneve2): Releasing active interface [ 366.887809][ T8711] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 366.897008][ T8711] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 366.907297][ T8711] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 366.917655][ T8711] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 366.937501][ T8711] bond3: (slave ip6gretap1): Removing an active aggregator [ 366.950323][ T8711] bond3: (slave ip6gretap1): Releasing backup interface [ 367.466113][ T8712] team0: Mode changed to "loadbalance" [ 367.472581][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'. [ 370.498512][ T8750] tipc: Enabled bearer , priority 0 [ 371.132485][ T8750] netlink: 44 bytes leftover after parsing attributes in process `syz.0.752'. [ 372.140506][ T6584] tipc: Node number set to 2750261093 [ 373.191065][ T8776] capability: warning: `syz.3.756' uses deprecated v2 capabilities in a way that may be insecure [ 376.663476][ T7687] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 377.411879][ T7687] usb 3-1: Using ep0 maxpacket: 32 [ 377.433772][ T7687] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 377.465993][ T7687] usb 3-1: config 0 has no interface number 0 [ 377.483863][ T7687] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 377.494379][ T7687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.503372][ T7687] usb 3-1: Product: syz [ 377.510659][ T7687] usb 3-1: Manufacturer: syz [ 377.515405][ T7687] usb 3-1: SerialNumber: syz [ 377.528170][ T7687] usb 3-1: config 0 descriptor?? [ 377.543321][ T7687] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 377.683434][ T8822] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.794893][ T8822] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 377.809711][ T7687] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 377.833821][ T7687] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 377.836304][ T8822] bond3: (slave macvlan2): Enslaving as a backup interface with a down link [ 378.120386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 378.150398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 378.190381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 378.250133][ T8800] team0: No ports can be present during mode change [ 378.310386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 379.210386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 380.122167][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.128637][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.216216][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 380.228968][ T7687] usb 3-1: USB disconnect, device number 3 [ 380.288415][ T7687] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 380.331943][ T7687] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 380.347818][ T7687] quatech2 3-1:0.51: device disconnected [ 383.980277][ T8865] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 383.988182][ T8865] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 385.307388][ T8872] bond2: (slave syz_tun): Releasing backup interface [ 385.644170][ T8872] bridge_slave_0: left allmulticast mode [ 385.649880][ T8872] bridge_slave_0: left promiscuous mode [ 385.667940][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.679464][ T8872] bridge_slave_1: left allmulticast mode [ 385.688579][ T8872] bridge_slave_1: left promiscuous mode [ 385.696333][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.743781][ T8872] team0: Port device bond_slave_0 removed [ 385.773515][ T8872] bond0: (slave bond_slave_1): Releasing backup interface [ 386.222179][ T8872] bond_slave_1: left allmulticast mode [ 386.236662][ T8872] team0: Port device team_slave_0 removed [ 386.249171][ T8872] team0: Port device team_slave_1 removed [ 386.257485][ T8872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.280482][ T7695] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 386.341957][ T8872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.577335][ T8872] bond3: (slave ip6gretap1): Releasing active interface [ 386.605237][ T8872] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 9a:7c:c3:e4:c9:9a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 386.661001][ T7695] usb 2-1: Using ep0 maxpacket: 32 [ 386.753112][ T8872] bond3: (slave veth3): Releasing active interface [ 386.779642][ T7695] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 386.824321][ T7695] usb 2-1: config 0 has no interface number 0 [ 386.839079][ T8872] bond0: left allmulticast mode [ 386.850159][ T7695] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 386.894490][ T8888] loop2: detected capacity change from 0 to 8192 [ 387.764280][ T8872] team0: Port device macvlan2 removed [ 387.783870][ T8888] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 387.920471][ T8888] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 387.961798][ T8888] REISERFS (device loop2): using ordered data mode [ 387.969273][ T8888] reiserfs: using flush barriers [ 388.030945][ T8888] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 388.054639][ T7695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.062763][ T7695] usb 2-1: Product: syz [ 388.066953][ T7695] usb 2-1: Manufacturer: syz [ 388.071709][ T7695] usb 2-1: SerialNumber: syz [ 388.079936][ T8888] REISERFS (device loop2): checking transaction log (loop2) [ 388.098659][ T7695] usb 2-1: config 0 descriptor?? [ 388.125051][ T8888] REISERFS (device loop2): Using r5 hash to sort names [ 388.140730][ T7695] usb 2-1: can't set config #0, error -71 [ 388.162431][ T8888] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 388.208467][ T7695] usb 2-1: USB disconnect, device number 2 [ 388.397174][ T8898] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3677, free_space(entry_count) 2 [ 388.468279][ T8898] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 388.468901][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'. [ 388.480253][ T8898] REISERFS (device loop2): Remounting filesystem read-only [ 388.571987][ T8898] REISERFS error (device loop2): vs-5350 reiserfs_delete_solid_item: i/o failure occurred trying to delete [-1 2 0x1 IND] [ 388.591180][ T8898] REISERFS warning (device loop2): clm-6006 reiserfs_dirty_inode: writing inode 2 on readonly FS [ 390.825352][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805db2ec00: rx timeout, send abort [ 391.326417][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805db2f000: rx timeout, send abort [ 391.335547][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805db2ec00: abort rx timeout. Force session deactivation [ 391.840631][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805db2f000: abort rx timeout. Force session deactivation [ 395.201267][ T8933] tipc: Enabling of bearer rejected, failed to enable media [ 396.385137][ T8963] gfs2: gfs2 mount does not exist [ 397.468676][ T8969] dns_resolver: Unsupported server list version (6) [ 400.479316][ T8986] Illegal XDP return value 4294967283 on prog (id 99) dev N/A, expect packet loss! [ 401.329801][ T8995] SET target dimension over the limit! [ 402.866731][ T9006] loop1: detected capacity change from 0 to 512 [ 403.798303][ T9006] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 403.837843][ T9006] System zones: 1-12 [ 403.915410][ T9006] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.817: corrupted in-inode xattr: e_value size too large [ 404.940730][ T9006] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.817: couldn't read orphan inode 15 (err -117) [ 404.966149][ T9006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.752561][ T9027] dns_resolver: Unsupported server list version (6) [ 405.997109][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.330429][ T7695] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 406.569081][ T9044] lo speed is unknown, defaulting to 1000 [ 406.575536][ T9044] lo speed is unknown, defaulting to 1000 [ 406.585026][ T9044] lo speed is unknown, defaulting to 1000 [ 406.599550][ T9044] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 406.619770][ T9044] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 406.670905][ T9044] lo speed is unknown, defaulting to 1000 [ 406.679153][ T9044] lo speed is unknown, defaulting to 1000 [ 406.688713][ T9044] lo speed is unknown, defaulting to 1000 [ 406.696452][ T9044] lo speed is unknown, defaulting to 1000 [ 407.329324][ T7695] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 407.386789][ T7695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.420905][ T7695] usb 3-1: Product: syz [ 407.430585][ T7695] usb 3-1: Manufacturer: syz [ 407.446056][ T7695] usb 3-1: SerialNumber: syz [ 407.461477][ T7695] usb 3-1: config 0 descriptor?? [ 407.760730][ T7695] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 409.654063][ T7695] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 409.664518][ T7695] usb 3-1: USB disconnect, device number 4 [ 410.748846][ T9083] siw: device registration error -23 [ 412.586271][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'. [ 413.013882][ T9103] tipc: Started in network mode [ 413.018911][ T9103] tipc: Node identity 76657468115f, cluster identity 4711 [ 413.031423][ T9103] tipc: Enabled bearer , priority 0 [ 413.186295][ T9103] tipc: Resetting bearer [ 413.850549][ T9106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.843'. [ 414.131242][ T7695] tipc: Node number set to 1731884136 [ 415.096236][ T28] audit: type=1800 audit(2000000309.080:161): pid=9115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.847" name="file0" dev="overlay" ino=1084 res=0 errno=0 [ 415.756884][ T9127] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 415.800077][ T9127] netlink: 'syz.0.850': attribute type 11 has an invalid length. [ 417.042559][ T9141] tipc: Enabled bearer , priority 0 [ 417.319738][ T9141] syzkaller0: entered promiscuous mode [ 418.029697][ T9141] syzkaller0: entered allmulticast mode [ 418.516584][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 418.801003][ T9153] tipc: Resetting bearer [ 419.132675][ T9140] tipc: Resetting bearer [ 419.187936][ T9140] tipc: Disabling bearer [ 421.617779][ T9185] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 423.423494][ T6584] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 424.260288][ T9206] tipc: Enabling of bearer rejected, already enabled [ 424.300827][ T6584] usb 2-1: device descriptor read/64, error -71 [ 425.500278][ T6584] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 425.838877][ T6584] usb 2-1: device descriptor read/64, error -71 [ 425.979586][ T6584] usb usb2-port1: attempt power cycle [ 426.363749][ T9223] netlink: 'syz.3.876': attribute type 1 has an invalid length. [ 427.852131][ T9223] 8021q: adding VLAN 0 to HW filter on device bond4 [ 427.942171][ T9232] veth9: entered allmulticast mode [ 427.954698][ T9232] bond4: (slave veth9): Enslaving as an active interface with a down link [ 427.996169][ T9236] bond4: entered promiscuous mode [ 428.003389][ T9236] bond4: entered allmulticast mode [ 428.861664][ T9237] macvlan3: entered promiscuous mode [ 428.884889][ T9237] macvlan3: entered allmulticast mode [ 428.896807][ T9237] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 433.198208][ T9267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.886'. [ 438.196123][ T9315] loop1: detected capacity change from 0 to 4096 [ 440.821618][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.830373][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.577459][ T9355] tipc: Enabled bearer , priority 0 [ 441.585711][ T9355] syzkaller0: entered promiscuous mode [ 441.591739][ T9355] syzkaller0: entered allmulticast mode [ 441.630730][ T9355] tipc: Resetting bearer [ 441.647081][ T9354] tipc: Resetting bearer [ 441.676287][ T9354] tipc: Disabling bearer [ 444.152183][ T5785] Bluetooth: hci3: unexpected event for opcode 0x0006 [ 445.121247][ T9376] loop1: detected capacity change from 0 to 1024 [ 445.137981][ T9376] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 449.373834][ T5785] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 449.384483][ T5785] Bluetooth: hci3: Injecting HCI hardware error event [ 449.396477][ T5785] Bluetooth: hci3: hardware error 0x00 [ 450.355865][ T9423] bad cache= option: no%e [ 450.355865][ T9423] [ 450.362953][ T9423] CIFS: VFS: bad cache= option: no%e [ 450.581928][ T9425] tipc: Enabled bearer , priority 10 [ 452.190011][ T5785] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 453.561853][ T9456] netlink: 84 bytes leftover after parsing attributes in process `syz.0.940'. [ 453.580795][ T9456] netlink: 'syz.0.940': attribute type 1 has an invalid length. [ 455.490205][ T9479] overlayfs: failed to clone lowerpath [ 468.624898][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.967'. [ 468.784204][ T787] IPVS: starting estimator thread 0... [ 469.103018][ T9563] IPVS: using max 24 ests per chain, 57600 per kthread [ 470.814805][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 473.559782][ T28] audit: type=1326 audit(2000000367.540:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.981" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 474.105244][ T28] audit: type=1326 audit(2000000367.550:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.981" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 474.540121][ T9630] loop2: detected capacity change from 0 to 1024 [ 474.547394][ T28] audit: type=1326 audit(2000000367.570:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.981" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 474.615962][ T28] audit: type=1326 audit(2000000367.570:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.981" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 474.672864][ T9630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 474.831778][ T28] audit: type=1326 audit(2000000367.570:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.981" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 474.879138][ T9630] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.105281][ T28] audit: type=1326 audit(2000000367.820:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.981" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 475.169997][ T28] audit: type=1326 audit(2000000367.820:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.981" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 475.989271][ T28] audit: type=1326 audit(2000000367.850:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.981" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 476.250373][ T28] audit: type=1326 audit(2000000367.860:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.981" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 476.625511][ T28] audit: type=1326 audit(2000000367.860:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.981" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e3a15e68e code=0x7ffc0000 [ 476.649956][ T9636] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 476.684303][ T9636] EXT4-fs (loop2): Remounting filesystem read-only [ 477.231742][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 482.087001][ T9710] syzkaller0: entered promiscuous mode [ 482.104789][ T9710] syzkaller0: entered allmulticast mode [ 495.697563][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 496.623328][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1040'. [ 498.357587][ T9871] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 498.649806][ T9871] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 500.888798][ T9893] loop1: detected capacity change from 0 to 512 [ 500.917051][ T9893] EXT4-fs: Invalid want_extra_isize 5 [ 501.810885][ T9603] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 502.035974][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.217898][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.903961][ T5785] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 503.932834][ T9917] libceph: secret too big 32 [ 504.315254][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 504.355458][ T9915] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1058'. [ 504.513034][ T9915] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1058'. [ 504.533062][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'. [ 505.198169][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 505.290744][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 505.300148][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 505.326991][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 508.007328][ T9959] tipc: Enabling of bearer rejected, failed to enable media [ 531.579778][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1119'. [ 532.828161][T10159] libceph: secret too big 32 [ 535.824031][T10205] overlayfs: failed to clone lowerpath [ 536.592552][T10214] overlayfs: overlapping lowerdir path [ 537.220349][T10214] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 537.765157][T10224] netlink: 'syz.0.1151': attribute type 1 has an invalid length. [ 538.945108][T10226] bond4: (slave gretap1): making interface the new active one [ 539.007733][T10226] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 539.062260][T10230] macvlan2: entered promiscuous mode [ 539.067719][T10230] macvlan2: entered allmulticast mode [ 539.091647][T10230] bond4: entered promiscuous mode [ 539.097246][T10230] gretap1: entered promiscuous mode [ 539.104336][T10230] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 539.112498][T10230] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 539.129642][T10230] bond4: left promiscuous mode [ 539.136309][T10230] gretap1: left promiscuous mode [ 544.598918][T10287] netlink: 'syz.0.1158': attribute type 1 has an invalid length. [ 545.540816][T10290] macvtap2: entered allmulticast mode [ 547.194415][T10287] macvtap3: entered allmulticast mode [ 547.331643][T10314] loop2: detected capacity change from 0 to 256 [ 547.561988][T10318] netlink: 'syz.2.1166': attribute type 2 has an invalid length. [ 555.810801][T10386] syzkaller0: entered promiscuous mode [ 555.816434][T10386] syzkaller0: entered allmulticast mode [ 555.963500][T10386] tipc: Enabled bearer , priority 0 [ 555.999334][T10386] tipc: Resetting bearer [ 556.067213][T10385] tipc: Resetting bearer [ 556.162069][T10385] tipc: Disabling bearer [ 556.334654][T10391] tipc: Enabling of bearer rejected, failed to enable media [ 557.544461][T10406] netlink: 'syz.1.1177': attribute type 1 has an invalid length. [ 558.583154][T10406] macvtap2: entered allmulticast mode [ 558.683798][T10406] macvtap3: entered allmulticast mode [ 559.615242][T10408] bond4: (slave bridge3): making interface the new active one [ 559.652808][T10408] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 560.342957][T10430] loop2: detected capacity change from 0 to 4096 [ 560.948039][T10430] __ntfs_error: 36 callbacks suppressed [ 560.948113][T10430] ntfs: (device loop2): ntfs_read_inode_mount(): Incorrect mft record size 2048 in superblock, should be 4096. [ 560.965970][T10430] ntfs: (device loop2): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 560.975340][T10430] ntfs: (device loop2): ntfs_fill_super(): Failed to load essential metadata. [ 563.584735][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.591354][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.680995][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 563.737427][T10448] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1197'. [ 563.746837][T10448] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1197'. [ 563.884087][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 563.894088][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 563.910540][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 563.925370][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 567.498932][T10479] pim6reg: entered allmulticast mode [ 570.557993][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 570.622223][T10518] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1220'. [ 570.637188][T10518] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1220'. [ 570.835849][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 570.846187][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 570.862448][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 570.871989][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 573.392538][T10544] syz.3.1226: attempt to access beyond end of device [ 573.392538][T10544] loop7: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 573.406636][T10544] SQUASHFS error: Failed to read block 0x0: -5 [ 576.895205][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'. [ 576.943395][T10572] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1235'. [ 576.953032][T10572] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1235'. [ 576.985747][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'. [ 576.996343][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'. [ 577.008850][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'. [ 577.019489][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'. [ 578.736627][T10584] loop2: detected capacity change from 0 to 2048 [ 578.856319][T10584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.880595][T10584] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.807368][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.766085][T10604] pim6reg: entered allmulticast mode [ 582.811183][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'. [ 582.829764][T10625] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1252'. [ 582.841299][T10625] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1252'. [ 582.866510][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'. [ 583.027237][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'. [ 583.154954][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'. [ 583.170179][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'. [ 584.105750][T10646] tipc: Enabling of bearer rejected, already enabled [ 586.862316][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'. [ 586.890910][T10679] tipc: Enabled bearer , priority 0 [ 587.291559][T10679] syzkaller0: entered promiscuous mode [ 587.297509][T10679] syzkaller0: entered allmulticast mode [ 587.321431][T10679] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 587.550606][T10679] tipc: Resetting bearer [ 587.619683][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'. [ 587.666255][T10675] tipc: Resetting bearer [ 587.799872][T10675] tipc: Disabling bearer [ 587.811728][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'. [ 587.823320][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'. [ 588.471775][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'. [ 588.959756][T10702] loop2: detected capacity change from 0 to 128 [ 588.978373][T10702] FAT-fs (loop2): bogus number of FAT structure [ 589.394321][T10702] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 589.404644][T10702] FAT-fs (loop2): Can't find a valid FAT filesystem [ 593.085286][T10733] overlayfs: missing 'lowerdir' [ 593.118792][T10733] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 595.521603][ T7695] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 597.824370][T10751] loop1: detected capacity change from 0 to 128 [ 597.902864][T10751] FAT-fs (loop1): bogus number of FAT structure [ 597.909357][T10751] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 597.926613][ T7695] usb 2-1: device not accepting address 6, error -71 [ 598.236613][T10751] FAT-fs (loop1): Can't find a valid FAT filesystem [ 600.675313][T10777] 9pnet_virtio: no channels available for device c::: [ 601.213634][ T28] audit: type=1326 audit(2000000495.200:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.1296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 601.260869][ T28] audit: type=1326 audit(2000000495.200:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.1296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 601.329331][ T28] audit: type=1326 audit(2000000495.250:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.1296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 601.402207][ T28] audit: type=1326 audit(2000000495.250:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.1296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 601.483308][ T28] audit: type=1326 audit(2000000495.250:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.1296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 601.508284][ T28] audit: type=1326 audit(2000000495.250:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.1296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 601.561213][ T28] audit: type=1326 audit(2000000495.250:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.1296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 601.633064][ T28] audit: type=1326 audit(2000000495.250:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.1296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 601.875678][ T28] audit: type=1326 audit(2000000495.250:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.1296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 602.177978][ T28] audit: type=1326 audit(2000000495.250:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.1296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a19de59 code=0x7ffc0000 [ 607.688320][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 607.740809][T10829] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 607.983435][T10829] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 609.791633][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 610.059387][T10875] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 610.120418][T10875] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 616.021355][ T5434] veth0_vlan: left promiscuous mode [ 616.036291][ T5434] veth0_vlan: entered promiscuous mode [ 618.287934][T10986] tipc: Enabling of bearer rejected, failed to enable media [ 620.073238][T11024] syzkaller0: entered promiscuous mode [ 620.078789][T11024] syzkaller0: entered allmulticast mode [ 620.500706][T11024] tipc: Enabled bearer , priority 0 [ 620.832257][T11024] tipc: Resetting bearer [ 620.887636][T11021] tipc: Resetting bearer [ 621.271071][T11021] tipc: Disabling bearer [ 623.834744][T11086] syzkaller0: entered promiscuous mode [ 623.840725][T11086] syzkaller0: entered allmulticast mode [ 624.913361][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.919815][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.978362][T11154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1375'. [ 631.293111][T11162] pim6reg: entered allmulticast mode [ 631.705190][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1384'. [ 632.705002][T11175] bridge2: port 1(veth11) entered blocking state [ 632.711909][T11175] bridge2: port 1(veth11) entered disabled state [ 632.718465][T11175] veth11: entered allmulticast mode [ 632.740793][T11175] veth11: entered promiscuous mode [ 632.888844][T11179] bridge2: port 2(veth0_to_bond) entered blocking state [ 632.910373][T11179] bridge2: port 2(veth0_to_bond) entered disabled state [ 632.924709][T11179] veth0_to_bond: entered allmulticast mode [ 632.932238][T11179] veth0_to_bond: entered promiscuous mode [ 633.433259][T11175] vlan2: entered allmulticast mode [ 633.902512][T11175] vlan0: entered allmulticast mode [ 633.935604][T11175] veth0_vlan: entered allmulticast mode [ 633.947918][T11175] bridge2: port 3(vlan2) entered blocking state [ 633.988327][T11175] bridge2: port 3(vlan2) entered disabled state [ 634.018211][T11175] vlan2: entered promiscuous mode [ 634.040776][T11175] vlan0: entered promiscuous mode [ 634.115812][T11207] tipc: Enabling of bearer rejected, already enabled [ 644.451123][T11283] loop1: detected capacity change from 0 to 2048 [ 644.529934][T11283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.543338][T11283] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.954580][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.050662][T11343] tipc: Enabling of bearer rejected, failed to enable media [ 656.919479][T11393] syzkaller0: entered promiscuous mode [ 656.939289][T11393] syzkaller0: entered allmulticast mode [ 661.354789][T11429] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1445'. [ 662.048833][T11439] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 662.209244][T11439] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 663.540833][T11448] tipc: Enabling of bearer rejected, already enabled [ 667.413695][ T5785] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 667.506783][T11499] syzkaller0: entered promiscuous mode [ 667.519637][T11499] syzkaller0: entered allmulticast mode [ 667.552380][T11499] tipc: Enabled bearer , priority 0 [ 667.568298][T11499] tipc: Resetting bearer [ 667.582019][T11498] tipc: Resetting bearer [ 667.770627][T11498] tipc: Disabling bearer [ 669.715416][T11519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.726136][T11519] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.400442][T11519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 671.920161][T11545] netlink: 'syz.3.1473': attribute type 3 has an invalid length. [ 672.679940][T11551] tipc: Enabling of bearer rejected, failed to enable media [ 672.738466][T11554] netlink: 'syz.2.1476': attribute type 1 has an invalid length. [ 672.948042][T11559] overlayfs: failed to clone upperpath [ 674.613968][T11586] loop2: detected capacity change from 0 to 512 [ 674.629725][T11586] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 674.908217][T11586] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 675.025105][T11586] EXT4-fs (loop2): 1 truncate cleaned up [ 675.054753][T11586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.917482][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.180375][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 678.180391][ T28] audit: type=1800 audit(2000000572.160:235): pid=11615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1497" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 678.361667][T11625] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 678.688321][T11632] bridge0: entered allmulticast mode [ 683.437610][T11680] loop2: detected capacity change from 0 to 1024 [ 683.446873][T11680] EXT4-fs: Invalid want_extra_isize 7 [ 683.509646][T11666] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 684.256396][T11690] loop1: detected capacity change from 0 to 512 [ 684.680317][T11690] EXT4-fs: test_dummy_encryption requires encrypt feature [ 685.269128][T11698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1526'. [ 686.488410][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.494901][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.124341][T11733] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1535'. [ 693.724640][T11788] tipc: New replicast peer: 255.255.255.255 [ 693.743715][T11788] tipc: Enabled bearer , priority 10 [ 693.780096][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1549'. [ 693.808962][T11788] netlink: 'syz.1.1549': attribute type 1 has an invalid length. [ 693.910924][T11788] bond5: entered promiscuous mode [ 693.917790][T11788] 8021q: adding VLAN 0 to HW filter on device bond5 [ 694.220056][T11791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1549'. [ 694.778092][T11799] loop1: detected capacity change from 0 to 1024 [ 694.788931][T11799] EXT4-fs: Invalid want_extra_isize 7 [ 698.115492][ T5785] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 702.215401][T11850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1566'. [ 704.237474][T11863] loop2: detected capacity change from 0 to 512 [ 704.337452][T11863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.396809][T11863] ext4 filesystem being mounted at /370/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 706.518740][T11885] loop1: detected capacity change from 0 to 8192 [ 706.588606][T11885] Bluetooth: MGMT ver 1.22 [ 706.604311][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.100544][T11906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1580'. [ 710.042056][T11933] loop2: detected capacity change from 0 to 512 [ 710.117008][T11933] EXT4-fs: test_dummy_encryption requires encrypt feature [ 711.022263][T11941] loop1: detected capacity change from 0 to 512 [ 711.039141][T11941] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 711.291748][T11941] EXT4-fs (loop1): 1 truncate cleaned up [ 711.355241][T11941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.345473][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.640827][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1613'. [ 728.664189][T12059] tipc: Enabled bearer , priority 0 [ 728.672674][T12059] syzkaller0: entered promiscuous mode [ 728.678204][T12059] syzkaller0: entered allmulticast mode [ 728.688541][T12059] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 728.718140][T12059] tipc: Resetting bearer [ 728.975663][T12057] tipc: Resetting bearer [ 729.351382][T12057] tipc: Disabling bearer [ 729.459793][T12062] xfrm0: entered promiscuous mode [ 729.464951][T12062] xfrm0: entered allmulticast mode [ 731.578287][T12088] loop2: detected capacity change from 0 to 256 [ 731.601651][T12088] exfat: Unknown parameter 'ÿ0177777777777777777777718446744073709551615' [ 731.995881][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 732.015813][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 732.026269][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 732.037188][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 732.047632][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 732.951205][T12098] netlink: 'syz.3.1632': attribute type 5 has an invalid length. [ 732.962775][T12098] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.971992][T12098] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.980859][T12098] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.989598][T12098] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.664429][ T5785] Bluetooth: hci1: SCO packet for unknown connection handle 3840 [ 733.712726][T12098] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.729571][T12098] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.738842][T12098] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.747994][T12098] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.857992][T12102] netlink: 'syz.3.1632': attribute type 5 has an invalid length. [ 733.916009][T12102] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.925152][T12102] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.934071][T12102] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.942858][T12102] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.103103][T12102] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.112129][T12102] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.121221][T12102] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.130133][T12102] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.072507][T12116] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 736.126786][T12124] loop1: detected capacity change from 0 to 1024 [ 736.626781][T12129] loop2: detected capacity change from 0 to 512 [ 736.736468][T12129] EXT4-fs (loop2): Test dummy encryption mode enabled [ 736.863379][T12129] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e024e0ad, mo2=0002] [ 736.871590][T12129] System zones: 1-12 [ 737.038910][T12129] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 737.094020][T12121] batadv_slave_1: entered promiscuous mode [ 737.110897][T12124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.124123][T12120] batadv_slave_1: left promiscuous mode [ 737.477226][ T5772] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 738.605723][T12133] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 738.649133][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.109696][T12151] xt_CT: You must specify a L4 protocol and not use inversions on it [ 741.263502][T12184] syz_tun: entered allmulticast mode [ 741.278875][T12184] pimreg: entered allmulticast mode [ 741.312050][T12182] syz_tun: left allmulticast mode [ 746.364786][T12226] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1663'. [ 747.164481][T12231] loop1: detected capacity change from 0 to 256 [ 747.185586][T12231] FAT-fs (loop1): "posix" option is obsolete, not supported now [ 748.522903][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.532484][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.574090][T12240] netlink: 'syz.1.1667': attribute type 4 has an invalid length. [ 748.868740][T12245] batadv_slave_1: entered promiscuous mode [ 750.075952][T12239] batadv_slave_1: left promiscuous mode [ 752.060646][T12266] netlink: 'syz.1.1672': attribute type 4 has an invalid length. [ 752.340779][T12283] syz_tun: entered allmulticast mode [ 752.355685][T12283] pimreg: entered allmulticast mode [ 752.377512][T12282] syz_tun: left allmulticast mode [ 753.117417][T12287] batadv_slave_1: entered promiscuous mode [ 753.127441][T12286] batadv_slave_1: left promiscuous mode [ 753.451626][T12291] loop1: detected capacity change from 0 to 32768 [ 753.505636][T12291] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 753.593598][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1683'. [ 753.616371][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1683'. [ 753.627268][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1683'. [ 753.637922][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1683'. [ 753.648192][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1683'. [ 754.118969][T12291] XFS (loop1): Ending clean mount [ 754.143903][T12291] XFS (loop1): Quotacheck needed: Please wait. [ 754.384124][T12291] XFS (loop1): Quotacheck: Done. [ 754.475289][T12309] syzkaller1: entered promiscuous mode [ 754.499409][T12309] syzkaller1: entered allmulticast mode [ 755.215168][T12309] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 755.496030][T12309] xt_CONNSECMARK: invalid mode: 254 [ 756.146002][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 756.171236][T12327] netlink: 'syz.0.1692': attribute type 1 has an invalid length. [ 756.372943][T12327] bond6: entered promiscuous mode [ 756.397422][T12327] 8021q: adding VLAN 0 to HW filter on device bond6 [ 756.429599][T12329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1692'. [ 757.046730][T12329] bond6: entered allmulticast mode [ 757.120101][T12327] bond6: (slave bridge0): making interface the new active one [ 757.143448][T12327] bridge0: entered promiscuous mode [ 757.221479][T12327] bridge0: entered allmulticast mode [ 757.249485][T12327] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 758.440379][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 758.540852][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 758.549975][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 758.559269][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 761.757002][T12365] __nla_validate_parse: 2 callbacks suppressed [ 761.757040][T12365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1701'. [ 763.734765][T12389] loop1: detected capacity change from 0 to 256 [ 763.763711][T12389] exfat: Unknown parameter 'ÿ0177777777777777777777718446744073709551615' [ 764.242143][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 764.253337][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 764.262569][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 764.272462][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 764.281628][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 764.550172][T12396] loop2: detected capacity change from 0 to 128 [ 765.446274][T12403] loop1: detected capacity change from 0 to 128 [ 766.867286][T12407] batman_adv: batadv0: Adding interface: vxlan0 [ 766.892273][T12407] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.050242][T12407] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 768.014022][T12424] overlayfs: failed to clone upperpath [ 769.406275][T12437] overlayfs: missing 'lowerdir' [ 776.012169][T12502] netlink: 'syz.3.1742': attribute type 1 has an invalid length. [ 776.136762][T12502] 8021q: adding VLAN 0 to HW filter on device bond5 [ 776.428533][T12510] loop2: detected capacity change from 0 to 2048 [ 776.528675][T12510] loop2: p1 < > p3 [ 776.546985][T12510] loop2: p3 start 458752 is beyond EOD, truncated [ 777.016680][T12502] gretap1: entered promiscuous mode [ 777.085425][T12502] macvlan3: entered promiscuous mode [ 777.139437][T12502] macvlan3: entered allmulticast mode [ 777.202315][T12502] bond5: entered promiscuous mode [ 777.226410][T12502] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 777.262889][T12502] bond5: left promiscuous mode [ 779.583338][ T28] audit: type=1326 audit(2000000672.850:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.2.1747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 779.672562][ T28] audit: type=1326 audit(2000000672.850:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.2.1747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 779.760316][ T28] audit: type=1326 audit(2000000672.880:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.2.1747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 779.810388][ T28] audit: type=1326 audit(2000000672.880:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.2.1747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 779.861312][ T28] audit: type=1326 audit(2000000672.880:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.2.1747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 779.895975][ T28] audit: type=1326 audit(2000000672.880:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.2.1747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 779.927151][ T28] audit: type=1326 audit(2000000672.880:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.2.1747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 779.956254][ T28] audit: type=1326 audit(2000000672.890:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.2.1747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 779.987305][ T28] audit: type=1326 audit(2000000672.890:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.2.1747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 780.012629][ T28] audit: type=1326 audit(2000000672.890:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.2.1747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 782.841298][T12561] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 788.684838][T12604] loop1: detected capacity change from 0 to 32768 [ 788.766132][T12604] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 788.891535][T12604] XFS (loop1): Ending clean mount [ 788.911646][T12604] XFS (loop1): Quotacheck needed: Please wait. [ 789.000075][T12604] XFS (loop1): Quotacheck: Done. [ 789.172644][T12621] loop2: detected capacity change from 0 to 512 [ 789.752364][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 789.752502][ T28] audit: type=1800 audit(2000000683.400:305): pid=12624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1764" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 789.832784][T12621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 789.870865][T12621] ext4: Unknown parameter 'fscontext' [ 790.129851][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 796.542933][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1782'. [ 799.491604][T12689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1791'. [ 800.555198][T12693] loop2: detected capacity change from 0 to 8192 [ 800.663492][T12693] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 800.796395][T12693] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 800.815645][T12693] REISERFS (device loop2): using ordered data mode [ 800.827019][T12693] reiserfs: using flush barriers [ 800.848264][T12693] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 800.908024][T12693] REISERFS (device loop2): checking transaction log (loop2) [ 800.932705][T12693] REISERFS (device loop2): Using r5 hash to sort names [ 800.952743][T12693] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 804.830427][T12709] Bluetooth: hci0: command 0x0406 tx timeout [ 805.901476][T12741] loop1: detected capacity change from 0 to 256 [ 805.909095][T12741] exfat: Deprecated parameter 'utf8' [ 807.015509][T12736] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 809.360905][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.367371][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.694124][T12762] syzkaller0: entered promiscuous mode [ 809.699904][T12762] syzkaller0: entered allmulticast mode [ 811.768173][T12777] loop2: detected capacity change from 0 to 256 [ 811.787613][T12777] exfat: Deprecated parameter 'utf8' [ 811.826411][T12777] exfat: Deprecated parameter 'namecase' [ 812.538091][T12777] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 813.294878][T12782] overlayfs: failed to resolve './bus': -2 [ 815.497115][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 816.758257][T12817] overlayfs: failed to clone lowerpath [ 816.941150][T12819] netlink: 'syz.0.1825': attribute type 1 has an invalid length. [ 821.364951][T12861] overlayfs: failed to clone lowerpath [ 823.954909][T12882] loop2: detected capacity change from 0 to 4096 [ 824.347103][T12882] EXT4-fs (loop2): Test dummy encryption mode enabled [ 824.392881][T12882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.271202][T12898] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1843'. [ 825.794222][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.527474][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 831.945630][T12976] loop2: detected capacity change from 0 to 32768 [ 832.175809][T12976] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 832.408177][T12976] XFS (loop2): Ending clean mount [ 832.439995][T12976] XFS (loop2): Quotacheck needed: Please wait. [ 832.524361][T12976] XFS (loop2): Quotacheck: Done. [ 832.910926][ T28] audit: type=1800 audit(2000000726.840:306): pid=12993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1870" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4428 res=0 errno=0 [ 833.173255][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1871'. [ 833.202352][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 833.595205][T13003] netlink: 'syz.3.1877': attribute type 1 has an invalid length. [ 833.646129][T13003] 8021q: adding VLAN 0 to HW filter on device bond6 [ 833.690484][T13003] veth0_to_bond: left allmulticast mode [ 833.698799][T13003] veth0_to_bond: left promiscuous mode [ 833.707556][T13003] bridge2: port 2(veth0_to_bond) entered disabled state [ 833.735064][T13003] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 834.435986][T13011] veth0_vlan: entered allmulticast mode [ 834.447551][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1879'. [ 834.603356][T13011] veth0_vlan (unregistering): left allmulticast mode [ 836.512827][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1883'. [ 837.191120][ T5787] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 837.509682][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1886'. [ 840.110573][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1893'. [ 840.413028][T13073] loop1: detected capacity change from 0 to 32768 [ 840.515344][T13073] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 840.564471][T13084] xt_CONNSECMARK: invalid mode: 254 [ 841.451029][T13073] XFS (loop1): Ending clean mount [ 841.468665][T13073] XFS (loop1): Quotacheck needed: Please wait. [ 841.577096][T13073] XFS (loop1): Quotacheck: Done. [ 842.770998][ T28] audit: type=1800 audit(2000000736.030:307): pid=13098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1894" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 842.882712][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 844.240995][T13114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1904'. [ 844.804009][ T5787] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 845.548102][T13130] netlink: 'syz.0.1908': attribute type 13 has an invalid length. [ 845.584449][T13130] netlink: 'syz.0.1908': attribute type 17 has an invalid length. [ 845.753908][T13130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.802316][T13130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 846.089547][T13092] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 846.859375][T13149] loop1: detected capacity change from 0 to 256 [ 847.941014][T13149] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 847.974289][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1914'. [ 848.021446][T13149] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 848.091528][T13145] overlayfs: failed to resolve './bus': -2 [ 850.590393][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 854.717726][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1928'. [ 855.553488][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1934'. [ 857.408845][T13236] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 858.629827][T13237] overlayfs: overlapping lowerdir path [ 859.211612][T13243] loop2: detected capacity change from 0 to 32768 [ 859.258642][T13248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1944'. [ 859.284492][T13243] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 859.824761][T13243] XFS (loop2): Ending clean mount [ 859.845278][T13243] XFS (loop2): Quotacheck needed: Please wait. [ 860.027731][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 860.188812][T13243] XFS (loop2): Quotacheck: Done. [ 860.930799][ T28] audit: type=1800 audit(2000000754.579:308): pid=13267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1943" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4428 res=0 errno=0 [ 861.096677][T13272] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 861.410244][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 862.808288][T13286] kvm: pic: non byte read [ 862.815109][T13286] kvm: pic: non byte write [ 862.820658][T13286] kvm: pic: non byte write [ 862.831021][T13286] kvm: pic: non byte write [ 862.841463][T13286] kvm: pic: non byte write [ 862.852338][T13286] kvm: pic: non byte write [ 865.767867][T13330] loop2: detected capacity change from 0 to 32768 [ 866.026136][T13330] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 866.166681][T13330] XFS (loop2): Ending clean mount [ 866.308565][T13330] XFS (loop2): Quotacheck needed: Please wait. [ 866.508249][T13330] XFS (loop2): Quotacheck: Done. [ 867.597507][T13358] loop1: detected capacity change from 0 to 32768 [ 867.606791][ T28] audit: type=1800 audit(2000000760.636:309): pid=13354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1967" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4428 res=0 errno=0 [ 867.679156][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 867.710890][T13358] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 867.804824][T13358] XFS (loop1): Ending clean mount [ 868.847237][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 870.890462][T13405] loop1: detected capacity change from 0 to 32768 [ 871.050543][T13405] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 871.109384][T13405] XFS (loop1): Ending clean mount [ 871.331589][T13405] XFS (loop1): Quotacheck needed: Please wait. [ 872.651584][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.660622][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.282633][T13419] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 873.287611][T13405] XFS (loop1): Quotacheck: Done. [ 873.654955][ T28] audit: type=1800 audit(2000000766.385:310): pid=13404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1976" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 873.895345][T13430] loop2: detected capacity change from 0 to 4096 [ 874.035643][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 876.812380][T13465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1996'. [ 879.376180][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 880.394814][T13501] loop1: detected capacity change from 0 to 512 [ 880.418876][T13501] EXT4-fs: Ignoring removed oldalloc option [ 880.453889][T13501] EXT4-fs (loop1): 1 truncate cleaned up [ 880.465117][T13501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 881.799679][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.051990][T13529] loop1: detected capacity change from 0 to 64 [ 888.728098][T13579] Timeout policy `syz1' can only be used by L3 protocol number 71 [ 890.579362][T13590] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 891.554906][T13601] loop1: detected capacity change from 0 to 16 [ 892.154635][T13601] erofs: (device loop1): mounted with root inode @ nid 36. [ 895.994480][T13623] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 900.274860][T13662] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 902.280532][T13677] loop1: detected capacity change from 0 to 4096 [ 905.568205][T13687] ntfs3: loop1: failed to convert "0080" to cp869 [ 905.585078][T13687] ntfs3: loop1: failed to convert name for inode 1e. [ 908.119310][T13723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2064'. [ 911.924328][T13749] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2071'. [ 912.106524][T13751] loop1: detected capacity change from 0 to 32768 [ 912.159835][T13751] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 912.216456][T13751] XFS (loop1): Ending clean mount [ 912.230349][T13751] XFS (loop1): Quotacheck needed: Please wait. [ 912.329830][T13751] XFS (loop1): Quotacheck: Done. [ 912.460923][T13764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2074'. [ 912.715463][ T28] audit: type=1800 audit(2000001058.471:311): pid=13766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2072" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 913.086330][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 915.998180][T13804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2087'. [ 916.327147][T13806] loop1: detected capacity change from 0 to 32768 [ 917.010404][T13806] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 917.168615][T13806] XFS (loop1): Ending clean mount [ 917.227570][T13806] XFS (loop1): Quotacheck needed: Please wait. [ 917.401440][T13806] XFS (loop1): Quotacheck: Done. [ 917.734868][ T28] audit: type=1800 audit(2000001063.126:312): pid=13839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2086" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 918.161457][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 918.427690][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2090'. [ 919.564547][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 922.086433][T11331] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 923.333708][T11331] usb 2-1: Using ep0 maxpacket: 16 [ 923.871576][T11331] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 923.903958][T11331] usb 2-1: config 0 has no interface number 0 [ 923.940635][T11331] usb 2-1: config 0 interface 246 has no altsetting 0 [ 924.165287][T11331] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 924.195049][T11331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.225369][T11331] usb 2-1: Product: syz [ 924.258262][T11331] usb 2-1: Manufacturer: syz [ 924.262931][T11331] usb 2-1: SerialNumber: syz [ 924.290373][T11331] usb 2-1: config 0 descriptor?? [ 924.901864][T13893] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2106'. [ 925.449169][T11331] usb 2-1: USB disconnect, device number 8 [ 925.453510][ T6556] libceph: connect (1)[c::]:6789 error -101 [ 925.492560][ T6556] libceph: mon0 (1)[c::]:6789 connect error [ 925.548474][T13891] ceph: No mds server is up or the cluster is laggy [ 938.675072][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.681535][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.926096][T13972] overlayfs: failed to clone upperpath [ 942.161638][T14033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2141'. [ 947.784115][T14091] tipc: Enabling of bearer rejected, failed to enable media [ 953.425949][T14142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2167'. [ 957.136356][T14157] syz.3.2172 (14157) used greatest stack depth: 17288 bytes left [ 957.571219][T14163] fuse: Bad value for 'fd' [ 959.082153][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2181'. [ 959.091304][T14182] netlink: 'syz.2.2181': attribute type 2 has an invalid length. [ 959.099493][T14182] netlink: 'syz.2.2181': attribute type 1 has an invalid length. [ 959.170472][T14185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2179'. [ 959.497059][T14180] netlink: 'syz.0.2180': attribute type 1 has an invalid length. [ 959.786433][T14187] overlayfs: failed to clone upperpath [ 959.958092][T14180] 8021q: adding VLAN 0 to HW filter on device bond7 [ 959.997552][ T28] audit: type=1326 audit(2000001102.140:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14192 comm="syz.1.2182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a50f9de59 code=0x0 [ 960.061905][T14189] bond7: (slave ip6gretap2): making interface the new active one [ 960.110779][T14189] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 960.147191][T14196] netlink: 'syz.2.2183': attribute type 10 has an invalid length. [ 960.156874][T14196] bond0: (slave wlan1): Opening slave failed [ 960.170092][T14191] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 961.278327][T14206] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14209] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14206] [ 961.545554][T14215] autofs4:pid:14215:autofs_fill_super: called with bogus options [ 961.677768][T14218] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2186'. [ 962.335949][T14227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2191'. [ 964.047469][T14241] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 966.728225][T14257] trusted_key: encrypted_key: insufficient parameters specified [ 967.058532][T14260] NILFS (nullb0): couldn't find nilfs on the device [ 968.128635][T14268] loop1: detected capacity change from 0 to 512 [ 968.141898][T14268] EXT4-fs: Ignoring removed i_version option [ 968.148016][T14268] EXT4-fs: Ignoring removed nobh option [ 968.168112][T14268] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 968.477922][T14268] EXT4-fs (loop1): 1 truncate cleaned up [ 969.393076][T14268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 971.532003][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.586293][T14294] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 974.771657][T14307] loop1: detected capacity change from 0 to 32768 [ 976.368222][T14307] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 976.481401][T14307] XFS (loop1): Ending clean mount [ 976.490130][T14307] XFS (loop1): Quotacheck needed: Please wait. [ 976.621733][T14307] XFS (loop1): Quotacheck: Done. [ 977.515853][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 977.554210][T14339] netlink: 316 bytes leftover after parsing attributes in process `syz.2.2218'. [ 980.802110][T14362] pimreg: left allmulticast mode [ 985.633112][T14411] loop1: detected capacity change from 0 to 32768 [ 986.674245][T14415] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 987.865248][T14411] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 987.954338][T14411] XFS (loop1): Ending clean mount [ 987.972362][T14411] XFS (loop1): Quotacheck needed: Please wait. [ 988.648276][T14411] XFS (loop1): Quotacheck: Done. [ 988.677859][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 990.029857][T14439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2244'. [ 990.039004][T14439] netlink: 'syz.0.2244': attribute type 2 has an invalid length. [ 990.046742][T14439] netlink: 'syz.0.2244': attribute type 1 has an invalid length. [ 995.177158][T14479] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 995.184635][T14479] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 995.231341][T14479] netlink: 'syz.1.2261': attribute type 13 has an invalid length. [ 995.517221][T14479] netlink: 'syz.1.2261': attribute type 17 has an invalid length. [ 996.526127][T14479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.536170][T14479] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.984180][T14479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 998.903934][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 999.265158][T14529] overlayfs: failed to clone lowerpath [ 1001.011891][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2265'. [ 1004.531764][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1004.541111][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.696016][T12709] Bluetooth: hci1: command 0x0406 tx timeout [ 1005.648315][T14574] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 1005.656044][T14574] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 1005.685828][T14571] tipc: Enabling of bearer rejected, already enabled [ 1005.725939][T14577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2278'. [ 1005.985730][T14581] overlayfs: failed to clone upperpath [ 1006.975465][T14584] overlayfs: failed to clone lowerpath [ 1008.748744][T14602] tipc: Enabling of bearer rejected, already enabled [ 1009.960975][T14622] loop1: detected capacity change from 0 to 8192 [ 1010.169765][T14622] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1010.182974][T14622] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1010.192526][T14622] REISERFS (device loop1): using ordered data mode [ 1010.199131][T14622] reiserfs: using flush barriers [ 1010.206844][T14622] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1010.223558][T14622] REISERFS (device loop1): checking transaction log (loop1) [ 1010.240251][T14622] REISERFS (device loop1): Using r5 hash to sort names [ 1010.247639][T14622] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1010.365131][T14633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2294'. [ 1014.639839][T14659] loop1: detected capacity change from 0 to 32768 [ 1014.687166][T14659] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1014.791809][T14659] XFS (loop1): Ending clean mount [ 1014.818898][T14659] XFS (loop1): Quotacheck needed: Please wait. [ 1014.886844][T14659] XFS (loop1): Quotacheck: Done. [ 1015.232481][ T28] audit: type=1800 audit(1003.382:314): pid=14677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2298" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 1015.550130][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1017.729868][T14700] overlayfs: failed to clone upperpath [ 1019.955195][T12709] Bluetooth: hci0: adv larger than maximum supported [ 1019.955295][T12709] Bluetooth: hci0: Unknown advertising packet type: 0x39 [ 1019.962821][T12709] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1020.801075][T14721] loop1: detected capacity change from 0 to 4096 [ 1020.822681][T14721] EXT4-fs: inline encryption not supported [ 1020.850939][T14721] EXT4-fs: Ignoring removed mblk_io_submit option [ 1020.879885][T14721] EXT4-fs: Ignoring removed bh option [ 1020.906445][T14721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1020.998481][T14721] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 1021.008117][T14721] System zones: 0-5 [ 1021.024183][T14721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1022.934324][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.518448][T14752] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1025.587718][T12709] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 1026.011559][T14767] netlink: 'syz.1.2327': attribute type 1 has an invalid length. [ 1026.136417][T14767] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1026.384906][T14777] capability: warning: `syz.0.2335' uses 32-bit capabilities (legacy support in use) [ 1033.395562][ T787] IPVS: starting estimator thread 0... [ 1033.746418][T14861] IPVS: using max 19 ests per chain, 45600 per kthread [ 1034.024961][T14845] kvm: pic: non byte read [ 1034.030680][T14845] kvm: pic: non byte write [ 1034.040356][T14845] kvm: pic: non byte write [ 1034.161325][T14845] kvm: pic: non byte write [ 1034.190106][T14845] kvm: pic: non byte write [ 1034.201283][T14845] kvm: pic: non byte write [ 1035.252102][T14888] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1036.203659][T14897] loop1: detected capacity change from 0 to 32768 [ 1036.250989][T14897] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1036.306320][T14897] XFS (loop1): Ending clean mount [ 1036.316432][T14897] XFS (loop1): Quotacheck needed: Please wait. [ 1037.518827][T14897] XFS (loop1): Quotacheck: Done. [ 1037.752243][ T28] audit: type=1800 audit(1024.173:315): pid=14897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2360" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 1037.848515][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1041.913688][T14948] No such timeout policy "syz1" [ 1043.576549][T14964] netlink: 'syz.3.2374': attribute type 1 has an invalid length. [ 1043.880867][T14964] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1048.431225][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2386'. [ 1048.944027][T15011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2387'. [ 1049.798875][T15015] netlink: 'syz.2.2389': attribute type 1 has an invalid length. [ 1050.048347][T15015] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1051.716161][T15042] overlayfs: failed to clone upperpath [ 1055.627545][T15091] tipc: Enabling of bearer rejected, already enabled [ 1059.092490][T15117] loop1: detected capacity change from 0 to 32768 [ 1059.196553][T15117] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1059.250193][T15117] XFS (loop1): Ending clean mount [ 1059.268638][T15117] XFS (loop1): Quotacheck needed: Please wait. [ 1059.938894][T15117] XFS (loop1): Quotacheck: Done. [ 1060.631354][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 1060.662467][T15140] netlink: 'syz.3.2417': attribute type 13 has an invalid length. [ 1060.670445][T15140] netlink: 'syz.3.2417': attribute type 17 has an invalid length. [ 1060.682866][ T28] audit: type=1800 audit(1045.101:316): pid=15139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2415" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 1060.741516][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1060.808479][T15140] bridge0: left promiscuous mode [ 1060.832663][T15140] bridge0: left allmulticast mode [ 1060.893349][T15140] bond0: left allmulticast mode [ 1060.926717][T15140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.979246][T15140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1061.752795][T15149] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2421'. [ 1062.428639][T15160] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1065.945239][T15202] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1068.387875][T15213] hub 8-0:1.0: USB hub found [ 1068.395445][T15213] hub 8-0:1.0: 1 port detected [ 1071.313995][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1071.320662][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1078.599683][T15281] ceph: No mds server is up or the cluster is laggy [ 1078.607369][T11331] libceph: connect (1)[c::]:6789 error -101 [ 1078.754838][T11331] libceph: mon0 (1)[c::]:6789 connect error [ 1080.931903][T15312] xt_l2tp: unknown flags: 17 [ 1084.121897][T15347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1085.742226][T15357] loop1: detected capacity change from 0 to 8192 [ 1090.032474][T15400] loop1: detected capacity change from 0 to 32768 [ 1090.743637][T15400] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1090.832287][T15400] XFS (loop1): Ending clean mount [ 1090.853286][T15400] XFS (loop1): Quotacheck needed: Please wait. [ 1090.933719][T15400] XFS (loop1): Quotacheck: Done. [ 1091.998014][ T28] audit: type=1800 audit(1074.265:317): pid=15431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2491" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 1094.090442][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1098.559606][T15500] loop1: detected capacity change from 0 to 32768 [ 1098.812442][T15500] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1098.854137][T15506] overlayfs: failed to clone lowerpath [ 1098.890078][T15500] XFS (loop1): Ending clean mount [ 1098.900302][T15500] XFS (loop1): Quotacheck needed: Please wait. [ 1098.983769][T15513] ceph: No mds server is up or the cluster is laggy [ 1099.067280][T15500] XFS (loop1): Quotacheck: Done. [ 1099.359006][ T28] audit: type=1800 audit(1081.069:318): pid=15527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2527" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 1101.019607][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1102.417298][T11371] libceph: connect (1)[c::]:6789 error -101 [ 1102.436576][T11371] libceph: mon0 (1)[c::]:6789 connect error [ 1102.498361][T15550] loop1: detected capacity change from 0 to 8192 [ 1102.691357][T15556] ceph: No mds server is up or the cluster is laggy [ 1106.403337][T15596] loop1: detected capacity change from 0 to 8192 [ 1106.555583][T15596] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1106.565343][T15596] FAT-fs (loop1): Filesystem has been set read-only [ 1107.334895][T15599] loop1: detected capacity change from 0 to 8192 [ 1108.513127][T15610] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1110.457767][T15626] loop1: detected capacity change from 0 to 8192 [ 1110.553303][T15626] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 1110.596419][T15626] FAT-fs (loop1): Filesystem has been set read-only [ 1110.630362][T15625] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1111.392567][T15637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2557'. [ 1123.145908][T12709] Bluetooth: hci1: command 0x0406 tx timeout [ 1123.593873][ T28] audit: type=1326 audit(1103.438:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.2.2603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 1123.650955][ T28] audit: type=1326 audit(1103.438:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.2.2603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 1123.682242][ T28] audit: type=1326 audit(1103.438:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.2.2603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 1123.707579][ T28] audit: type=1326 audit(1103.438:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.2.2603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 1123.753495][ T28] audit: type=1326 audit(1103.438:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.2.2603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 1123.842967][ T28] audit: type=1326 audit(1103.438:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.2.2603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 1123.869263][ T28] audit: type=1326 audit(1103.438:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.2.2603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 1124.464897][ T28] audit: type=1326 audit(1103.438:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.2.2603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 1124.515594][ T28] audit: type=1326 audit(1103.438:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.2.2603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 1124.543460][ T28] audit: type=1326 audit(1103.438:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.2.2603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x7ffc0000 [ 1124.736814][T15780] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2606'. [ 1126.515063][T15793] loop1: detected capacity change from 0 to 8192 [ 1126.711399][T15793] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 1126.720822][T15793] FAT-fs (loop1): Filesystem has been set read-only [ 1127.102776][T15789] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1128.306188][ C1] hrtimer: interrupt took 34767 ns [ 1128.907456][T15818] loop1: detected capacity change from 0 to 32768 [ 1128.964136][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2618'. [ 1129.012297][T15818] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1129.048900][T15818] XFS (loop1): Ending clean mount [ 1129.070909][T15818] XFS (loop1): Quotacheck needed: Please wait. [ 1129.219174][T15818] XFS (loop1): Quotacheck: Done. [ 1129.741048][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 1129.741067][ T28] audit: type=1800 audit(1108.959:387): pid=15838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2620" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 1130.776084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1131.317979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1131.714582][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1132.615073][T15863] loop1: detected capacity change from 0 to 8192 [ 1134.109310][T15874] loop1: detected capacity change from 0 to 8192 [ 1136.138251][T15872] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 1136.147439][T15872] FAT-fs (loop1): Filesystem has been set read-only [ 1136.369801][T15870] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1136.487080][T15880] netlink: 'syz.3.2637': attribute type 1 has an invalid length. [ 1137.538463][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1137.545052][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1144.042652][T15937] loop1: detected capacity change from 0 to 8192 [ 1144.165311][T15937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 1144.174311][T15937] FAT-fs (loop1): Filesystem has been set read-only [ 1144.358745][T15936] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1144.654861][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2663'. [ 1145.681261][T15958] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1147.650184][T15976] loop1: detected capacity change from 0 to 8192 [ 1148.984545][T15987] loop1: detected capacity change from 0 to 8192 [ 1149.147674][T15987] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 1149.156714][T15987] FAT-fs (loop1): Filesystem has been set read-only [ 1149.308841][T15982] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1150.601591][T15988] xt_CT: No such helper "snmp_trap" [ 1151.797074][ T28] audit: type=1326 audit(1129.473:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.0.2675" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbded9de59 code=0x0 [ 1152.907732][T16016] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[16017] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16016] [ 1154.197082][T16028] loop1: detected capacity change from 0 to 32768 [ 1154.247948][T16028] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1154.334868][T16028] XFS (loop1): Ending clean mount [ 1154.359221][T16028] XFS (loop1): Quotacheck needed: Please wait. [ 1154.508906][T16028] XFS (loop1): Quotacheck: Done. [ 1154.761474][ T28] audit: type=1800 audit(1132.205:389): pid=16044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2680" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 1155.153833][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1155.279399][T16050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2687'. [ 1155.306986][T12709] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 1159.718860][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1159.824454][ T28] audit: type=1326 audit(1136.886:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.2.2697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f141a39de59 code=0x0 [ 1163.271396][T16110] loop1: detected capacity change from 0 to 40427 [ 1163.288992][T16110] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1163.296829][T16110] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1163.306076][T16110] F2FS-fs (loop1): invalid crc value [ 1163.362614][T16110] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1163.449586][T16110] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1163.456723][T16110] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1164.163229][T16123] syz.1.2701: attempt to access beyond end of device [ 1164.163229][T16123] loop1: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 1171.086616][T16188] loop1: detected capacity change from 0 to 8192 [ 1171.210413][T16188] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 1171.219530][T16188] FAT-fs (loop1): Filesystem has been set read-only [ 1171.599213][T16186] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1179.000082][T16251] pimreg: left allmulticast mode [ 1180.771103][T16260] loop1: detected capacity change from 0 to 8192 [ 1182.088603][T16274] loop1: detected capacity change from 0 to 2048 [ 1182.884378][T16274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1185.868212][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.844914][T16312] loop1: detected capacity change from 0 to 1024 [ 1189.198780][T16325] loop1: detected capacity change from 0 to 8192 [ 1192.555790][T16347] loop1: detected capacity change from 0 to 8192 [ 1196.375553][T16391] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1198.556251][T16402] loop1: detected capacity change from 0 to 32768 [ 1199.347806][T16402] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1199.442545][T16402] XFS (loop1): Ending clean mount [ 1199.467995][T16402] XFS (loop1): Quotacheck needed: Please wait. [ 1199.533531][T16402] XFS (loop1): Quotacheck: Done. [ 1200.454207][ T28] audit: type=1800 audit(1174.322:391): pid=16424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2785" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 1201.919106][T16435] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1203.805324][T16449] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1204.110725][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1204.117078][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1204.419152][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1208.908995][T16498] loop1: detected capacity change from 0 to 32768 [ 1209.110551][T16498] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1209.951235][T16498] XFS (loop1): Ending clean mount [ 1209.963082][T16498] XFS (loop1): Quotacheck needed: Please wait. [ 1210.092180][T16498] XFS (loop1): Quotacheck: Done. [ 1211.295660][ T28] audit: type=1800 audit(1184.403:392): pid=16529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2801" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 1214.755147][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1215.929934][T16564] loop1: detected capacity change from 0 to 1024 [ 1216.159721][T16557] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1218.454715][T16591] pimreg: entered allmulticast mode [ 1220.238622][T16608] netlink: 'syz.1.2831': attribute type 24 has an invalid length. [ 1220.257778][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2831'. [ 1220.268997][T16608] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1227.907601][T16666] netlink: 'syz.0.2847': attribute type 2 has an invalid length. [ 1229.540898][T16687] loop1: detected capacity change from 0 to 512 [ 1229.549742][T16687] EXT4-fs: inline encryption not supported [ 1229.569438][T16687] EXT4-fs: Ignoring removed orlov option [ 1229.578281][T16687] EXT4-fs: Ignoring removed mblk_io_submit option [ 1229.640891][T16687] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.2854: corrupted in-inode xattr: e_value size too large [ 1230.357873][T16687] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2854: couldn't read orphan inode 15 (err -117) [ 1230.517735][T16687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1231.498703][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1233.954690][T16717] loop1: detected capacity change from 0 to 8192 [ 1235.229835][T16732] overlayfs: failed to clone upperpath [ 1235.356260][T16736] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2869'. [ 1236.860318][ T28] audit: type=1107 audit(1208.112:393): pid=16739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1237.439528][T16758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2873'. [ 1245.067498][T16832] loop1: detected capacity change from 0 to 8 [ 1245.152307][ T28] audit: type=1326 audit(1215.879:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16831 comm="syz.1.2896" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a50f9de59 code=0x0 [ 1246.840864][T16846] SQUASHFS error: Failed to read block 0x4de: -5 [ 1246.850472][T16846] SQUASHFS error: Failed to read block 0x4de: -5 [ 1247.108032][T16844] SQUASHFS error: Failed to read block 0x4de: -5 [ 1247.116500][T16844] SQUASHFS error: Failed to read block 0x4de: -5 [ 1247.124245][T16844] SQUASHFS error: Failed to read block 0x4de: -5 [ 1247.131541][T16844] SQUASHFS error: Failed to read block 0x4de: -5 [ 1247.676906][ T28] audit: type=1800 audit(1217.479:395): pid=16846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2896" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 1249.872098][T16878] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2906'. [ 1253.026951][T16892] random: crng reseeded on system resumption [ 1254.908744][T16903] loop1: detected capacity change from 0 to 32768 [ 1254.947510][T16903] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1255.085078][T16903] XFS (loop1): Ending clean mount [ 1255.103474][T16903] XFS (loop1): Quotacheck needed: Please wait. [ 1256.376039][T16903] XFS (loop1): Quotacheck: Done. [ 1256.833410][ T28] audit: type=1800 audit(1226.753:396): pid=16931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2913" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 1257.109133][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1257.316971][T16932] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2918'. [ 1263.380049][T16978] loop1: detected capacity change from 0 to 1024 [ 1267.105609][T17016] bridge2: entered promiscuous mode [ 1268.441762][T17026] loop1: detected capacity change from 0 to 32768 [ 1268.959152][T17026] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1269.980595][T17026] XFS (loop1): Ending clean mount [ 1269.991722][T17026] XFS (loop1): Quotacheck needed: Please wait. [ 1270.060561][T17026] XFS (loop1): Quotacheck: Done. [ 1270.077022][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1270.083677][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1270.345349][ T28] audit: type=1800 audit(1239.433:397): pid=17047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2939" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 1270.713192][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1270.886396][T17050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2944'. [ 1272.101343][T17058] loop1: detected capacity change from 0 to 1024 [ 1273.040999][T17067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2948'. [ 1273.760370][T16669] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1274.937154][T17084] loop1: detected capacity change from 0 to 1024 [ 1280.429350][T17124] loop1: detected capacity change from 0 to 1024 [ 1280.774027][T16669] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1283.888849][ T28] audit: type=1326 audit(1252.123:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17147 comm="syz.2.2968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f141a39de59 code=0x0 [ 1284.440159][T17158] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1291.537846][T17223] loop1: detected capacity change from 0 to 1024 [ 1291.624803][T16669] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1293.224436][T17246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2995'. [ 1294.223842][ T28] audit: type=1326 audit(1261.771:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.0.2998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbded9de59 code=0x0 [ 1298.565681][T17290] loop1: detected capacity change from 0 to 32768 [ 1298.621644][T17290] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1298.762771][T17290] XFS (loop1): Ending clean mount [ 1298.842448][T17290] XFS (loop1): Quotacheck needed: Please wait. [ 1298.907808][T17290] XFS (loop1): Quotacheck: Done. [ 1299.300023][ T28] audit: type=1800 audit(1266.403:400): pid=17290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3012" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 1299.488564][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1299.873328][T17311] tipc: Enabling of bearer rejected, already enabled [ 1300.015197][T17313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3007'. [ 1301.597186][ T28] audit: type=1107 audit(1268.677:401): pid=17321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1302.362790][T17335] loop1: detected capacity change from 0 to 32768 [ 1302.391481][T17335] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1302.451483][T17335] XFS (loop1): Ending clean mount [ 1302.466081][T17335] XFS (loop1): Quotacheck needed: Please wait. [ 1302.541365][T17335] XFS (loop1): Quotacheck: Done. [ 1302.879529][ T28] audit: type=1800 audit(1269.819:402): pid=17353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3016" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 1303.283103][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1307.898160][T17408] fuse: Bad value for 'fd' [ 1308.124395][T17410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3035'. [ 1309.112658][T17423] xt_l2tp: unknown flags: 17 [ 1314.366621][T17468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3046'. [ 1315.981359][T17475] loop1: detected capacity change from 0 to 8192 [ 1320.703390][T17523] loop1: detected capacity change from 0 to 8192 [ 1324.550409][T17545] loop1: detected capacity change from 0 to 1024 [ 1324.802691][T17547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3074'. [ 1325.248694][T17548] netlink: 'syz.0.3073': attribute type 1 has an invalid length. [ 1327.232631][T17563] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1327.587032][T17562] loop1: detected capacity change from 0 to 1024 [ 1327.651327][T16669] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1327.711739][T17568] netlink: 'syz.3.3079': attribute type 2 has an invalid length. [ 1330.544684][T17588] loop1: detected capacity change from 0 to 8192 [ 1330.698359][T17588] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 1330.707632][T17588] FAT-fs (loop1): Filesystem has been set read-only [ 1331.849652][T17587] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1334.591251][T17632] No such timeout policy "syz1" [ 1335.187725][T17635] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1336.134987][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1336.143492][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1340.065657][T17689] No such timeout policy "syz1" [ 1341.706547][T17703] loop1: detected capacity change from 0 to 1024 [ 1348.255638][ T9511] ------------[ cut here ]------------ [ 1348.262280][ T9511] WARNING: CPU: 1 PID: 9511 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830 [ 1348.272175][ T9511] Modules linked in: [ 1348.276761][ T9511] CPU: 1 PID: 9511 Comm: kworker/u4:28 Not tainted syzkaller #0 [ 1348.285348][ T9511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1348.295684][ T9511] Workqueue: iou_exit io_ring_exit_work [ 1348.301465][ T9511] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 1348.307847][ T9511] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 ff 10 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 f1 a8 03 f7 e9 b1 fd ff ff e8 e7 a8 03 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 1348.328271][ T9511] RSP: 0018:ffffc90004b77a40 EFLAGS: 00010293 [ 1348.334742][ T9511] RAX: ffffffff8a833c89 RBX: ffff88804dec0000 RCX: ffff88805b32da00 [ 1348.342891][ T9511] RDX: 0000000000000000 RSI: ffffffffffffffef RDI: 0000000000000000 [ 1348.352065][ T9511] RBP: ffffc90004b77bb0 R08: ffffc90004b779c7 R09: 1ffff9200096ef38 [ 1348.360415][ T9511] R10: dffffc0000000000 R11: fffff5200096ef39 R12: dffffc0000000000 [ 1348.368428][ T9511] R13: 0000000100018a84 R14: 0000000100018a95 R15: ffff88804dec0510 [ 1348.376686][ T9511] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1348.386181][ T9511] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1348.392923][ T9511] CR2: 0000001b2dd0cff8 CR3: 0000000062631000 CR4: 00000000003506e0 [ 1348.401018][ T9511] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1348.409163][ T9511] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1348.417310][ T9511] Call Trace: [ 1348.420612][ T9511] [ 1348.423753][ T9511] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 1348.429706][ T9511] ? _raw_spin_unlock_irq+0x23/0x50 [ 1348.435096][ T9511] ? process_scheduled_works+0x975/0x1600 [ 1348.440916][ T9511] ? process_scheduled_works+0x975/0x1600 [ 1348.446843][ T9511] process_scheduled_works+0xa60/0x1600 [ 1348.452462][ T9511] ? worker_attach_to_pool+0x370/0x370 [ 1348.458317][ T9511] ? assign_work+0x3cc/0x5d0 [ 1348.463131][ T9511] worker_thread+0xa5e/0xfe0 [ 1348.467923][ T9511] ? _raw_spin_unlock+0x40/0x40 [ 1348.472802][ T9511] ? __kthread_parkme+0x71/0x1c0 [ 1348.478130][ T9511] kthread+0x2fa/0x390 [ 1348.482229][ T9511] ? pr_cont_work+0x550/0x550 [ 1348.486945][ T9511] ? kthread_blkcg+0xd0/0xd0 [ 1348.491638][ T9511] ret_from_fork+0x48/0x80 [ 1348.496133][ T9511] ? kthread_blkcg+0xd0/0xd0 [ 1348.500831][ T9511] ret_from_fork_asm+0x11/0x20 [ 1348.505676][ T9511] [ 1348.508729][ T9511] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1348.516033][ T9511] CPU: 1 PID: 9511 Comm: kworker/u4:28 Not tainted syzkaller #0 [ 1348.523781][ T9511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1348.533855][ T9511] Workqueue: iou_exit io_ring_exit_work [ 1348.539420][ T9511] Call Trace: [ 1348.542693][ T9511] [ 1348.545618][ T9511] dump_stack_lvl+0x18c/0x250 [ 1348.550383][ T9511] ? show_regs_print_info+0x20/0x20 [ 1348.555587][ T9511] ? load_image+0x420/0x420 [ 1348.560199][ T9511] panic+0x2ca/0x720 [ 1348.564107][ T9511] ? bpf_jit_dump+0xd0/0xd0 [ 1348.568619][ T9511] ? ret_from_fork_asm+0x11/0x20 [ 1348.573560][ T9511] __warn+0x2e0/0x470 [ 1348.577537][ T9511] ? io_ring_exit_work+0x3b9/0x830 [ 1348.582679][ T9511] ? io_ring_exit_work+0x3b9/0x830 [ 1348.587876][ T9511] report_bug+0x2be/0x4f0 [ 1348.592244][ T9511] ? io_ring_exit_work+0x3b9/0x830 [ 1348.598487][ T9511] ? io_ring_exit_work+0x3b9/0x830 [ 1348.603773][ T9511] ? io_ring_exit_work+0x3bb/0x830 [ 1348.608897][ T9511] handle_bug+0xcf/0x120 [ 1348.613231][ T9511] exc_invalid_op+0x1a/0x50 [ 1348.617739][ T9511] asm_exc_invalid_op+0x1a/0x20 [ 1348.623059][ T9511] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 1348.628871][ T9511] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 ff 10 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 f1 a8 03 f7 e9 b1 fd ff ff e8 e7 a8 03 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 1348.648563][ T9511] RSP: 0018:ffffc90004b77a40 EFLAGS: 00010293 [ 1348.654633][ T9511] RAX: ffffffff8a833c89 RBX: ffff88804dec0000 RCX: ffff88805b32da00 [ 1348.662616][ T9511] RDX: 0000000000000000 RSI: ffffffffffffffef RDI: 0000000000000000 [ 1348.670587][ T9511] RBP: ffffc90004b77bb0 R08: ffffc90004b779c7 R09: 1ffff9200096ef38 [ 1348.678556][ T9511] R10: dffffc0000000000 R11: fffff5200096ef39 R12: dffffc0000000000 [ 1348.686525][ T9511] R13: 0000000100018a84 R14: 0000000100018a95 R15: ffff88804dec0510 [ 1348.694677][ T9511] ? io_ring_exit_work+0x3b9/0x830 [ 1348.700353][ T9511] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 1348.706881][ T9511] ? _raw_spin_unlock_irq+0x23/0x50 [ 1348.712083][ T9511] ? process_scheduled_works+0x975/0x1600 [ 1348.717902][ T9511] ? process_scheduled_works+0x975/0x1600 [ 1348.724404][ T9511] process_scheduled_works+0xa60/0x1600 [ 1348.730090][ T9511] ? worker_attach_to_pool+0x370/0x370 [ 1348.735685][ T9511] ? assign_work+0x3cc/0x5d0 [ 1348.740334][ T9511] worker_thread+0xa5e/0xfe0 [ 1348.745059][ T9511] ? _raw_spin_unlock+0x40/0x40 [ 1348.750016][ T9511] ? __kthread_parkme+0x71/0x1c0 [ 1348.755053][ T9511] kthread+0x2fa/0x390 [ 1348.759127][ T9511] ? pr_cont_work+0x550/0x550 [ 1348.763813][ T9511] ? kthread_blkcg+0xd0/0xd0 [ 1348.768397][ T9511] ret_from_fork+0x48/0x80 [ 1348.772911][ T9511] ? kthread_blkcg+0xd0/0xd0 [ 1348.777510][ T9511] ret_from_fork_asm+0x11/0x20 [ 1348.782291][ T9511] [ 1348.785590][ T9511] Kernel Offset: disabled [ 1348.790000][ T9511] Rebooting in 86400 seconds..