last executing test programs: 9m52.131200043s ago: executing program 2 (id=370): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000102c0)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$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") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x3f2, 0x20, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40850}, 0x240440d0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x153103, 0x48) syz_clone(0x8011, 0x0, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0) 9m49.632390443s ago: executing program 2 (id=373): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500), 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, 0x0, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_matches\x00') read$eventfd(r4, &(0x7f00000001c0), 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x50, 0xffffffffffffffff, 0x6a855000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x81) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) 9m45.326742511s ago: executing program 2 (id=381): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x0) recvmmsg$unix(r5, &(0x7f0000000240)=[{{0x0, 0xd00, 0x0}}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000003c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000980)={0x4, 0x0, [{0x25000, 0x79, &(0x7f0000000300)=""/121}, {0x50000, 0xf1, &(0x7f0000000580)=""/241}, {0x8080000, 0xa4, &(0x7f0000000740)=""/164}, {0xb000, 0xc7, &(0x7f0000000880)=""/199}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) readv(0xffffffffffffffff, &(0x7f0000002b80)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1) 9m42.738952684s ago: executing program 2 (id=383): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYRES8=0x0, @ANYBLOB="43aba9911ba3d9bd9c2d341ba78391f3fd42251c28fa8791c674ecf2c666503c694dd8b576471ff008053eda3e0545d1e2a99f341297507e1038477a4f7c13ac0c9e96f1a9e280287791afe9e4417c02760fdfffb67798fa8fbf85698869e38d191ec5d1f9c0f116fbaead79cc672ecf6156a63c06dcbedae392d46e9fbf094f6d63ea0d8def073e77b2c537b4a4b94ad004aecc87a0327f6851869732e29e3719ba52c6495fce628d5f3e", @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYBLOB], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ptrace(0x10, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="d3d264a14245898a46fc5c184c4e1c42d0f170ab273ad0d6c7ad53d868c7e858d4f99ef4630262fbaf0a264702882803ed6491beeea68710ef3942a9f51926a353715ab607dd89df48139d300fb46634d79d91aba97aa09f4b51fda6e9e9907bbee951267731ae5f19e1e1cdc398d406c3857d2a5469b9f16b999b4177cc59", @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYBLOB="ebb034b1", @ANYRES32=r5], 0x22, 0x150b, &(0x7f0000002780)="$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") creat(0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) r6 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) sendfile(r6, r6, &(0x7f0000001000)=0x10000000000000, 0xffff) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) 9m39.994833572s ago: executing program 2 (id=388): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x200000, &(0x7f0000002100)=ANY=[]) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000940)="b9ff0300610d6991ff9e14beeeee", 0x0, 0xfff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x4c) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x20000007c, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) 9m34.791251078s ago: executing program 2 (id=392): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1ff) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80e40, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x400040) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xa) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f0e"], 0x22) openat(0xffffffffffffff9c, 0x0, 0x41842, 0x136) 9m19.534306867s ago: executing program 32 (id=392): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1ff) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80e40, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x400040) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xa) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f0e"], 0x22) openat(0xffffffffffffff9c, 0x0, 0x41842, 0x136) 16.453849179s ago: executing program 0 (id=1429): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000a00)={&(0x7f0000002d80)=ANY=[@ANYBLOB="918c7587b0b1a84c80d50af762dfde6fdfc6e3750e2036a1713f2e54c806772b481ccc2ec3e16ba314a1d8f8f23002c86f388a5de9d824f74b99687d8293da6c33f68cddc0fed7c513f2dad4b1253f119c484bb7d79ce4952a50e5b0f37fc45f43f712adb52fd80aace996dd4c54c23cba4a0d8c4cd5b41e1a5b1c7d4ec8cd52f3181e7ec47c8cc620f78a13917b5df767bf510d85a8384437cebff6f85bed4e8e48d72f7c5040c08a7e6c1b25625225feec88647d530cede6c8e8aa4b5658f1d8320474548ae8500be62506b090653b83a5f07762c45af66de31249247eec291276f90ec3f633040bff9aed7d", @ANYBLOB="0204000204000000a8c85cc6fe483b27ef50ba0379d858a27800000000000002000100000004d6000000000000002047f416f899ba279f916bcb5441170229a075875731830216911b41aee92c272cede149e82345083b30ffa89a3694e00a4da3d6788dfd4d2d971e6c7a7078b39e1b2a780000000000000000b5b58b18b795d74a4cd51e1a0003a7f8e5540555bed9dc101f592fa310ca48844bae3f8a", @ANYBLOB="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"], 0x20}, 0x1, 0x7}, 0x4000810) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), 0x0, 0x4003c, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000500), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@local, 0x4e22, 0x70e, 0x4e20, 0x9, 0x2, 0x30, 0x0, 0x50}, {0x0, 0x4fa1, 0x32, 0x45, 0x4a, 0x7, 0x4000000000005, 0x6}, {0x4, 0xe0a, 0x72c, 0xe16a}, 0x2, 0x6e6bb2, 0x73e4735fefb7cabf, 0x0, 0x3}, {{@in=@multicast2, 0x4d2, 0x33}, 0xa, @in6=@local, 0x3505, 0x1, 0x1, 0x8, 0xae8e, 0x3, 0x8}}, 0xe8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x1, 0x6, 0x0, 0x100, 0x2, 0x500000}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180104, r5}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180017000000000029000000370000008900000000000000e6a98b4396d3332853eb463fc990373f8ab8dfd18b84d0df6de19a02ae831122fced2786dfd2e15b7a8e541693ed71764aabb03458995868f2f73b77b76f24aeae91191cc1ac1d55e779fd2e3ccb1148e2b5738e98fdebed2c"], 0x18}}], 0x1, 0x400c0c4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="adea08c7beef905d069c564c90c2000000", 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x80000}, 0x10, r1}, 0x94) r6 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) getpeername$l2tp6(r6, &(0x7f0000000040), 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000000040)={@empty, @broadcast}, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r10, &(0x7f0000000200), 0x12) bind$x25(r9, &(0x7f0000000080), 0x12) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) 15.346493829s ago: executing program 1 (id=1432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$alg(r3, 0x0, 0x0, 0x844) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0xffc9) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r8, 0x8, 0x2, 0xff) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b04f, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'gretap0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x1}}]}]}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x58}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 14.350931184s ago: executing program 1 (id=1434): gettid() socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x1, 0x0) r1 = open(0x0, 0x101080, 0x0) getdents(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x800) get_robust_list(r0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) getsockopt$inet6_int(r6, 0x29, 0x18, 0x0, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, 0x0, 0x0) inotify_init1(0x0) 14.340561505s ago: executing program 0 (id=1435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) pread64(0xffffffffffffffff, 0x0, 0x0, 0x80002) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='encrypted\x00', &(0x7f0000000440)=@chain={'key_or_keyring:', r3}) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x80, &(0x7f0000000000)=ANY=[], 0x7d, 0x1507, &(0x7f0000001800)="$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") chdir(&(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) unshare(0x2040400) sendmmsg$inet(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="b3032625b4541d10d7de001cc613831016d52d8f7047b31008542a38b55548466c7ef13ac0ec71411cf39af35a6ee22ace8f6430730de06ef60234e6f049bb", 0x3f}], 0x1, &(0x7f0000000080)=ANY=[], 0xf0}}], 0x1, 0x24004c41) poll(&(0x7f00000001c0)=[{r4, 0x254c}], 0x1, 0xffff) 12.332291057s ago: executing program 1 (id=1437): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1dc, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x1ac, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x150, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x128, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x4}, {0x4}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(0x0, 0x0) syz_clone(0x83014000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) userfaultfd(0x80801) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11000200000000000000c57bb1ac7f15064482965a8016c7b334377dc43f8978abf6a849ef1cf3f53016a039519766539c33f0ab629d0c57e82646ac546c333d8147a9cf20ac43a7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r6, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) 12.159992583s ago: executing program 0 (id=1438): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500), 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, 0x0, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_matches\x00') read$eventfd(r4, &(0x7f00000001c0), 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x50, 0xffffffffffffffff, 0x6a855000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x81) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) 9.203264669s ago: executing program 3 (id=1441): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) process_mrelease(r0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x802) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r5, &(0x7f0000000a00)={0x2020}, 0x2020) set_mempolicy(0x6005, 0x0, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000050010000500000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, 0x0, &(0x7f0000000180)=""/177}, 0x20) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000040)={0x500, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000180), &(0x7f0000000340), &(0x7f00000001c0), 0x0, 0xff}) 8.936489199s ago: executing program 4 (id=1442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$alg(r3, 0x0, 0x0, 0x844) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0xffc9) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r8, 0x8, 0x2, 0xff) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b04f, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'gretap0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x1}}]}]}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x58}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 8.833143142s ago: executing program 0 (id=1443): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa3808a886c800ba0806000108000604"], 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_flash={0x33, 0x5067, './file0\x00'}}) alarm(0x5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000001000000"], 0x0, 0x42}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002300)={0x1, &(0x7f0000000140)=[{0x6, 0x24, 0x4, 0x775a}]}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x2000) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) 7.427002383s ago: executing program 4 (id=1444): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x593b]}, 0x8, 0x80800) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, r2, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="08000100ac1414aa08001e00439f000008000100ac1414bb0c00"], 0x50}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = getpgid(0x0) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0)=[0x4], 0x0, 0x2, 0x1, r6}}, 0x40) r8 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r9, 0x0) r10 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) close_range(r7, r10, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0xa68c1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r11, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4880) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'macvlan1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x101, 0xba}}, './file0\x00'}) unlinkat(r12, &(0x7f0000000340)='./file0\x00', 0x200) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$TUNGETFEATURES(r13, 0x5452, &(0x7f00000013c0)) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31090000000900020073797a32000000001c0004801800018008000100666962000c00028008000240000000021400000011000100000000000000f2f66d33629da55f291e25ff5300000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 7.301781977s ago: executing program 0 (id=1445): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @remote}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f0000000180)) ioprio_set$pid(0x2, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/softnet_stat\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20008b88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 5.750462443s ago: executing program 0 (id=1446): gettid() socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x1, 0x0) r1 = open(0x0, 0x101080, 0x0) getdents(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x800) get_robust_list(r0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, 0x0, 0x0) inotify_init1(0x0) 5.695963585s ago: executing program 1 (id=1447): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000008, &(0x7f0000000980)=ANY=[], 0x4, 0x28a, &(0x7f00000012c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) r4 = open(&(0x7f00000000c0)='./file1\x00', 0x24842, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001380)={'wlan0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb1000000080080f34803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) ioctl$SIOCSIFHWADDR(r5, 0x8b06, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000000c0)={0x0, 0x4, 0xfffc, 0x20, 0xfff3}) write$UHID_INPUT(r4, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 5.5610406s ago: executing program 3 (id=1448): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x28}, {&(0x7f00000003c0)="512ca299e7433eb9355ee162284e7761bc0c0ba06bd5831c6719fedd1e53143219c00ef5c82916125341d8de779ee75800cde59d2af6c1cb5198b3428110ce149e87b89bede8f9bee266eb670d37e7901da0403c324cd1a1be84be842622c781134fa830dd85f968c6641e0aa9131d596f962fc857223d969c612f1a55bae65ab0172ba8b6fcd11d931d26ea589465c74d"}], 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') timerfd_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4048aecb, &(0x7f0000008140)=@svm={0x0, 0x1, 0x1080, {0x6000}, {"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"}}) r5 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xcc50, 0x1000, 0x1, 0x196, 0x0, r3}) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r7, 0x2, 0x5001) close_range(r5, r6, 0x0) 5.421054155s ago: executing program 4 (id=1449): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500), 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, 0x0, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_matches\x00') read$eventfd(r4, &(0x7f00000001c0), 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x50, 0xffffffffffffffff, 0x6a855000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x81) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) 4.644940793s ago: executing program 1 (id=1450): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000004c0)='./file0\x00', 0x2210c80, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYBLOB="474bfbddc8673daa37ce65382f3b451399708380773a6f66ff70be5288b364bf028f82fcaffd5ecf2997cbd4ebf3847f44db99794bef6318602cd3e99d018027b205bf6fda74c8b585065dc4a91305ddb3b8808df024f44901974b39c116202302341a241938e004a64ead0ec5ae6b62", @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRES16=0x0, @ANYRES8=r1], 0x1, 0x1ab, &(0x7f00000009c0)="$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") ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000ac0)=""/102392, 0x18ff8) getdents64(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') r5 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x1, 0x10001011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x8) mknodat(r0, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 4.644696493s ago: executing program 3 (id=1451): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500), 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, 0x0, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_matches\x00') read$eventfd(r4, &(0x7f00000001c0), 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x50, 0xffffffffffffffff, 0x6a855000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x81) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) 4.593266815s ago: executing program 4 (id=1452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$alg(r3, 0x0, 0x0, 0x844) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0xffc9) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r8, 0x8, 0x2, 0xff) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b04f, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'gretap0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x1}}]}]}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x58}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 4.241166527s ago: executing program 3 (id=1453): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000018001280080001007070"], 0x40}}, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000280)={r0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x2000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000005c0)={0x300, 0x1, &(0x7f0000000180)=[r6], &(0x7f0000000600)=[0x3, 0x3, 0x3, 0xffff], &(0x7f0000000640)=[r8, r7, r7], &(0x7f0000000680)=[0x6], 0x0, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000000), 0x5, 0x88200) 3.539375633s ago: executing program 4 (id=1454): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x4000084) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x7) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x4, 0xfffffffc, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) gettid() r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r6, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 2.192615481s ago: executing program 3 (id=1455): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @remote}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f0000000180)) ioprio_set$pid(0x2, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/softnet_stat\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20008b88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 2.118175714s ago: executing program 1 (id=1456): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) process_mrelease(r0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x802) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r5, &(0x7f0000000a00)={0x2020}, 0x2020) set_mempolicy(0x6005, 0x0, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000050010000500000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, 0x0, &(0x7f0000000180)=""/177}, 0x20) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000040)={0x500, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000180), &(0x7f0000000340), &(0x7f00000001c0), 0x0, 0xff}) 1.989081238s ago: executing program 4 (id=1457): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_linger(r0, 0x1, 0x48, &(0x7f00000000c0)={0x4000, 0xffffff7d}, 0x8) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0x1, 0xffff0000, 0x2, 0x6, 0x7, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r5, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x4, 0xe, 0x1}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r7 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r1, 0x36, 0x0, 0x1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@fallback, r1, 0x36, 0x0, 0x0, @void, @value=r1, @void, @void, r8}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb8", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 0s ago: executing program 3 (id=1458): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x28}, {&(0x7f00000003c0)="512ca299e7433eb9355ee162284e7761bc0c0ba06bd5831c6719fedd1e53143219c00ef5c82916125341d8de779ee75800cde59d2af6c1cb5198b3428110ce149e87b89bede8f9bee266eb670d37e7901da0403c324cd1a1be84be842622c781134fa830dd85f968c6641e0aa9131d596f962fc857223d969c612f1a55bae65ab0172ba8b6fcd11d931d26ea589465c74d"}], 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') timerfd_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4048aecb, &(0x7f0000008140)=@svm={0x0, 0x1, 0x1080, {0x6000}, {"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"}}) r5 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xcc50, 0x1000, 0x1, 0x196, 0x0, r3}) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r7, 0x2, 0x5001) close_range(r5, r6, 0x0) kernel console output (not intermixed with test programs): g 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.457940][ T5849] usb 1-1: config 0 has no interface number 0 [ 117.464104][ T5849] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.516971][ T5849] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 117.536586][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.733777][ T5849] usb 1-1: config 0 descriptor?? [ 117.949591][ T5849] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 119.308347][ T5810] usb 2-1: USB disconnect, device number 3 [ 119.597909][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.207716][ T5807] usb 1-1: USB disconnect, device number 2 [ 120.270428][ T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 120.486454][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.497286][ T23] usb 4-1: config 0 has no interface number 0 [ 120.503508][ T23] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.516572][ T23] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 120.525740][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.548830][ T23] usb 4-1: config 0 descriptor?? [ 120.557323][ T23] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 122.498260][ T787] usb 4-1: USB disconnect, device number 4 [ 122.967742][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.173670][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 123.191834][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.222189][ T23] usb 1-1: config 0 has no interface number 0 [ 123.230089][ T23] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.250083][ T23] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 123.264009][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.304488][ T23] usb 1-1: config 0 descriptor?? [ 123.325509][ T23] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 125.046312][ T28] audit: type=1800 audit(1779940132.856:2): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.83" name="file0" dev="overlay" ino=152 res=0 errno=0 [ 125.273085][ T6198] Zero length message leads to an empty skb [ 125.764664][ T23] usb 1-1: USB disconnect, device number 3 [ 126.207910][ T5874] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 126.428347][ T5874] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.436807][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.447614][ T5874] usb 3-1: config 0 has no interface number 0 [ 126.471937][ T5874] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.485923][ T5874] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 126.533363][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.551316][ T5874] usb 3-1: config 0 descriptor?? [ 126.591216][ T5874] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 129.001988][ T5874] usb 3-1: USB disconnect, device number 3 [ 129.067898][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 129.200063][ T6248] loop2: detected capacity change from 0 to 164 [ 129.283156][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.372051][ T6248] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 130.167633][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.182178][ T23] usb 1-1: config 0 has no interface number 0 [ 130.188419][ T23] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.206513][ T23] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 130.215709][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.248725][ T23] usb 1-1: config 0 descriptor?? [ 130.260088][ T23] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 132.418010][ T6255] loop3: detected capacity change from 0 to 256 [ 132.429490][ T6255] ======================================================= [ 132.429490][ T6255] WARNING: The mand mount option has been deprecated and [ 132.429490][ T6255] and is ignored by this kernel. Remove the mand [ 132.429490][ T6255] option from the mount to silence this warning. [ 132.429490][ T6255] ======================================================= [ 132.464450][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.547047][ T6255] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 133.477979][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 133.577782][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 133.586834][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 133.596456][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 134.166840][ T6270] loop2: detected capacity change from 0 to 512 [ 134.302324][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.312118][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.451644][ T23] usb 1-1: USB disconnect, device number 4 [ 134.461980][ T6270] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 134.489453][ T6270] EXT4-fs error (device loop2): ext4_get_journal_inode:5820: comm syz.2.99: inode #1792: comm syz.2.99: iget: illegal inode # [ 134.505680][ T6270] EXT4-fs (loop2): Remounting filesystem read-only [ 134.512335][ T6270] EXT4-fs (loop2): no journal found [ 134.517643][ T6270] EXT4-fs (loop2): can't get journal size [ 134.570042][ T6270] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 134.585832][ T6270] EXT4-fs (loop2): failed to initialize system zone (-22) [ 134.593295][ T6270] EXT4-fs (loop2): mount failed [ 136.309306][ T6286] usb usb8: usbfs: process 6286 (syz.0.101) did not claim interface 0 before use [ 138.985854][ T6307] loop3: detected capacity change from 0 to 128 [ 139.557838][ T5849] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.435221][ T5849] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.468908][ T5849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.593026][ T5849] usb 3-1: config 0 has no interface number 0 [ 140.654384][ T5849] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.778073][ T5849] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 140.871489][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.054808][ T5849] usb 3-1: config 0 descriptor?? [ 141.223941][ T5849] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 142.652465][ T5761] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 143.151359][ T5761] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.162978][ T5761] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.177297][ T5761] usb 1-1: config 0 has no interface number 0 [ 143.192174][ T5761] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.216919][ T5761] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 143.244323][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.439280][ T5874] usb 3-1: USB disconnect, device number 4 [ 143.609331][ T5761] usb 1-1: config 0 descriptor?? [ 143.922688][ T5761] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 145.961283][ T27] usb 1-1: USB disconnect, device number 5 [ 150.085356][ T6381] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 151.088399][ T5808] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 151.310291][ T5808] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.324780][ T5808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.335175][ T5808] usb 3-1: config 0 has no interface number 0 [ 151.341495][ T5808] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.354724][ T5808] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 151.364339][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.375472][ T5808] usb 3-1: config 0 descriptor?? [ 151.385157][ T5808] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 153.679107][ T6405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.131'. [ 153.931157][ T5808] usb 3-1: USB disconnect, device number 5 [ 157.197791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 162.233274][ T6460] loop1: detected capacity change from 0 to 512 [ 162.395492][ T6460] EXT4-fs (loop1): can't read group descriptor 0 [ 162.857535][ C0] sched: RT throttling activated [ 162.873136][ T9] IPVS: starting estimator thread 0... [ 162.977875][ T6462] IPVS: using max 19 ests per chain, 45600 per kthread [ 171.275319][ T6524] loop3: detected capacity change from 0 to 4096 [ 171.409736][ T6524] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 171.421696][ T6524] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 171.447156][ T6524] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 171.458860][ T6524] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 171.472361][ T6524] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 171.497976][ T6524] ntfs: volume version 3.1. [ 171.516592][ T6524] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 171.529158][ T6524] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 171.545309][ T6524] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 171.556742][ T6524] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 171.568587][ T6524] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 171.736331][ T6526] loop2: detected capacity change from 0 to 164 [ 172.315834][ T6532] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6532] [ 181.388552][ T6584] loop2: detected capacity change from 0 to 128 [ 181.396227][ T6584] FAT-fs (loop2): Unrecognized mount option "0x0000000000000000" or missing value [ 181.830861][ T5782] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 183.080258][ T6597] loop3: detected capacity change from 0 to 512 [ 183.375519][ T6597] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 184.069769][ T6606] loop3: detected capacity change from 0 to 164 [ 186.008317][ T6614] input: syz0 as /devices/virtual/input/input6 [ 186.143750][ T6614] process 'syz.0.180' launched './file1' with NULL argv: empty string added [ 186.641868][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 186.827892][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 186.835253][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 186.844571][ T27] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 186.853940][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.866149][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.878476][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.888228][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.897306][ T27] usb 1-1: Product: syz [ 186.903408][ T27] usb 1-1: Manufacturer: syz [ 186.908442][ T27] usb 1-1: SerialNumber: syz [ 187.197845][ T27] usb 1-1: 0:2 : does not exist [ 187.287935][ T27] usb 1-1: USB disconnect, device number 6 [ 188.239470][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.471636][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 191.472241][ T5772] Bluetooth: hci1: command 0x0406 tx timeout [ 191.477785][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 194.528712][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.799735][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.619333][ T5088] Bluetooth: hci3: command 0x0406 tx timeout [ 197.554715][ T6690] loop2: detected capacity change from 0 to 16 [ 197.592761][ T6690] erofs: (device loop2): mounted with root inode @ nid 36. [ 200.388434][ T6707] netlink: 256 bytes leftover after parsing attributes in process `syz.3.203'. [ 200.781673][ T6709] comedi comedi0: comedi_parport: I/O port conflict (0x3,3) [ 206.128958][ T6757] netlink: 'syz.0.214': attribute type 10 has an invalid length. [ 206.156195][ T6757] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 209.071009][ T6789] mmap: syz.3.223 (6789) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 211.222895][ T6810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.230'. [ 211.262010][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'. [ 212.741394][ T6820] IPv6: syztnl0: Disabled Multicast RS [ 213.894322][ T6833] netlink: 16 bytes leftover after parsing attributes in process `syz.3.235'. [ 213.903514][ T6833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.235'. [ 218.860272][ T6851] tipc: Started in network mode [ 218.865437][ T6851] tipc: Node identity 4, cluster identity 4711 [ 218.871809][ T6851] tipc: Node number set to 4 [ 218.962563][ T6851] loop2: detected capacity change from 0 to 256 [ 219.747595][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 219.989793][ T27] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 220.060946][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.218912][ T27] usb 1-1: config 0 has no interface number 0 [ 220.269756][ T27] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.401388][ T27] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 220.504448][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.550423][ T6865] tipc: Failed to remove unknown binding: 66,1,1/4:3250030104/3250030106 [ 220.689418][ T27] usb 1-1: config 0 descriptor?? [ 220.735023][ T27] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 222.550437][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.245'. [ 223.518776][ T6886] loop1: detected capacity change from 0 to 8 [ 223.605744][ T6886] SQUASHFS error: Failed to read block 0x4de: -5 [ 223.617908][ T6886] SQUASHFS error: Failed to read block 0x4de: -5 [ 223.639361][ T6886] SQUASHFS error: Failed to read block 0x4de: -5 [ 223.649347][ T6886] SQUASHFS error: Failed to read block 0x4de: -5 [ 223.658811][ T6886] SQUASHFS error: Failed to read block 0x4de: -5 [ 223.667775][ T6886] SQUASHFS error: Failed to read block 0x4de: -5 [ 223.680945][ T6886] SQUASHFS error: Failed to read block 0x4de: -5 [ 223.691306][ T6886] SQUASHFS error: Failed to read block 0x4de: -5 [ 223.700657][ T6886] SQUASHFS error: Failed to read block 0x4de: -5 [ 223.708589][ T6886] SQUASHFS error: Failed to read block 0x4de: -5 [ 223.718797][ T6886] SQUASHFS error: Failed to read block 0x4de: -5 [ 223.725939][ T6886] SQUASHFS error: Failed to read block 0x4de: -5 [ 223.738869][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 223.738908][ T28] audit: type=1800 audit(1779940231.436:3): pid=6886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.248" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 224.038547][ T27] usb 1-1: USB disconnect, device number 7 [ 225.012182][ T27] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 225.327901][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 225.482754][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.499896][ T27] usb 4-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 225.510789][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.542449][ T27] usb 4-1: config 0 descriptor?? [ 228.657979][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 228.913879][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 228.965135][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.063407][ T9] usb 1-1: config 0 has no interface number 0 [ 229.134886][ T9] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.267015][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 229.382800][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.482742][ T9] usb 1-1: config 0 descriptor?? [ 229.541466][ T9] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 229.597353][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 229.603646][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 229.613263][ T27] usb 4-1: USB disconnect, device number 5 [ 231.768249][ T5810] usb 1-1: USB disconnect, device number 8 [ 233.702922][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 234.549870][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.574124][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.772586][ T9] usb 1-1: config 0 has no interface number 0 [ 234.811565][ T9] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 234.840339][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 234.855308][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.867274][ T9] usb 1-1: config 0 descriptor?? [ 234.895118][ T9] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 237.319933][ T787] usb 1-1: USB disconnect, device number 9 [ 240.375079][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.286'. [ 243.363409][ T7040] loop1: detected capacity change from 0 to 4096 [ 243.538863][ T7040] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 243.550990][ T7040] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 243.584735][ T7040] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 243.596393][ T7040] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 243.609692][ T7040] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 243.624173][ T7040] ntfs: volume version 3.1. [ 243.632818][ T7040] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 243.644720][ T7040] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 243.677882][ T7040] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 243.689163][ T7040] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 243.700488][ T7040] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 250.544913][ T7098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.309'. [ 253.102374][ T7119] loop0: detected capacity change from 0 to 512 [ 254.213618][ T5849] IPVS: starting estimator thread 0... [ 254.240505][ T7119] EXT4-fs (loop0): can't read group descriptor 0 [ 254.308738][ T7121] IPVS: using max 18 ests per chain, 43200 per kthread [ 254.466487][ T5782] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.750619][ T7127] loop3: detected capacity change from 0 to 128 [ 254.758916][ T7127] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 254.917567][ T5894] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 255.951173][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.958172][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.037764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 257.129444][ T7141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.319'. [ 259.507641][ T7157] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 263.976226][ T7185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.330'. [ 264.717708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 267.518941][ T7207] loop0: detected capacity change from 0 to 4096 [ 267.545235][ T7207] __ntfs_error: 6 callbacks suppressed [ 267.545258][ T7207] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 267.562950][ T7207] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 267.582632][ T7207] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 267.594868][ T7207] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 267.608148][ T7207] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 267.630484][ T7207] ntfs: volume version 3.1. [ 267.639813][ T7207] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 267.651927][ T7207] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 267.665971][ T7207] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 267.677119][ T7207] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 267.689154][ T7207] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 269.931461][ T5775] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 269.932323][ T7229] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 270.207404][ T7229] input: syz0 as /devices/virtual/input/input7 [ 270.582740][ T7239] loop1: detected capacity change from 0 to 256 [ 272.152544][ T7239] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 272.383567][ T7245] loop3: detected capacity change from 0 to 32768 [ 273.320059][ T1321] read_mapping_page failed! [ 273.334615][ T1321] ERROR: (device loop3): txCommit: [ 273.334615][ T1321] [ 273.350264][ T1321] jfs_write_inode: jfs_commit_inode failed! [ 273.423299][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 273.445955][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 273.457660][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 273.468904][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 274.757665][ T5849] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 275.089468][ T5849] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 275.099606][ T5849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.110535][ T5849] usb 2-1: config 0 has no interface number 0 [ 275.134057][ T5849] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 275.163570][ T5849] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 275.802897][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.813448][ T5849] usb 2-1: config 0 descriptor?? [ 275.823312][ T5849] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 278.278256][ T5810] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 278.814013][ T5810] usb 4-1: device descriptor read/all, error -71 [ 278.892839][ T7280] loop0: detected capacity change from 0 to 512 [ 279.117787][ T7280] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.356: iget: bad i_size value: 38620345925642 [ 279.142176][ T7280] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.356: couldn't read orphan inode 15 (err -117) [ 279.187114][ T7280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.338558][ T5874] usb 2-1: USB disconnect, device number 4 [ 279.465740][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.007780][ T7290] netlink: 20 bytes leftover after parsing attributes in process `syz.3.358'. [ 280.787306][ T7293] loop1: detected capacity change from 0 to 128 [ 288.183786][ T5808] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 288.605363][ T5808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.691320][ T5808] usb 1-1: config 0 has no interfaces? [ 288.742781][ T5808] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 288.814689][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.879016][ T5808] usb 1-1: config 0 descriptor?? [ 290.278016][ T5810] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 290.556162][ T5810] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 290.605845][ T5810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.685501][ T5810] usb 4-1: config 0 has no interface number 0 [ 290.732185][ T5810] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.823779][ T5810] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 291.057704][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.140530][ T5810] usb 4-1: config 0 descriptor?? [ 291.174318][ T5810] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 291.241693][ T5807] usb 1-1: USB disconnect, device number 10 [ 293.287509][ T9] usb 4-1: USB disconnect, device number 8 [ 294.813492][ T27] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 295.039218][ T7339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.369'. [ 295.041362][ T27] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 295.108613][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.227745][ T27] usb 1-1: config 0 has no interface number 0 [ 295.234731][ T27] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.271239][ T27] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 295.337317][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.435755][ T27] usb 1-1: config 0 descriptor?? [ 295.446413][ T27] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 295.590453][ T7348] loop2: detected capacity change from 0 to 256 [ 295.643641][ T7348] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 296.597829][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 296.707938][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 296.717068][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 296.726731][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 299.025770][ T5807] usb 1-1: USB disconnect, device number 11 [ 299.445285][ T7377] IPv6: syztnl0: Disabled Multicast RS [ 300.264981][ T7379] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.273871][ T7379] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.282643][ T7379] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.291415][ T7379] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.508771][ T7383] comedi comedi2: comedi_config --init_data is deprecated [ 300.621851][ T7379] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.630811][ T7379] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.639859][ T7379] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.648958][ T7379] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.939148][ T5775] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15 [ 304.298974][ T7382] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.307898][ T7382] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.316578][ T7382] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.325440][ T7382] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.403625][ T7382] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.412962][ T7382] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.422250][ T7382] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.431342][ T7382] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.533958][ T7393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.381'. [ 304.848920][ T7414] loop2: detected capacity change from 0 to 128 [ 307.797628][ T5808] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 308.647494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 310.797744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 311.873099][ T7441] usb usb8: usbfs: process 7441 (syz.2.388) did not claim interface 0 before use [ 312.630279][ T5808] usb 4-1: device descriptor read/all, error -71 [ 313.767508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 314.232123][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.393'. [ 314.258903][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 315.917642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 316.327493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 319.575407][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.581858][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.187433][ T7470] Process accounting resumed [ 322.238816][ T5807] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 323.140224][ T5807] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.168998][ T5807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.200108][ T5807] usb 4-1: config 0 has no interface number 0 [ 323.206313][ T5807] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.987009][ T7494] usb usb8: usbfs: process 7494 (syz.1.402) did not claim interface 0 before use [ 324.537536][ T5807] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 324.546871][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.572731][ T5807] usb 4-1: config 0 descriptor?? [ 324.581338][ T5807] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 324.725308][ T5874] usb 4-1: USB disconnect, device number 11 [ 325.917642][ T5775] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 329.956547][ T7554] comedi comedi0: comedi_parport: I/O port conflict (0x3,3) [ 332.301075][ T5088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.314264][ T5088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.337702][ T5088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.348283][ T5088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.497588][ T5088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 332.535721][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.587118][ T5088] Bluetooth: hci1: command tx timeout [ 337.637245][ T7608] comedi comedi0: comedi_parport: I/O port conflict (0x3,3) [ 338.176624][ T7571] chnl_net:caif_netlink_parms(): no params data found [ 338.348200][ T7616] xt_bpf: check failed: parse error [ 338.476172][ T7624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.423'. [ 338.485211][ T7624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.423'. [ 339.000582][ T7571] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.055133][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.092798][ T7571] bridge_slave_0: entered allmulticast mode [ 339.133566][ T7571] bridge_slave_0: entered promiscuous mode [ 339.189154][ T7571] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.196346][ T7571] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.259123][ T7571] bridge_slave_1: entered allmulticast mode [ 339.283317][ T7571] bridge_slave_1: entered promiscuous mode [ 339.344265][ T7571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.364644][ T7571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.443909][ T7571] team0: Port device team_slave_0 added [ 339.454117][ T7571] team0: Port device team_slave_1 added [ 339.506560][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.514106][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.540739][ T7571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.554364][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.561771][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.589107][ T7571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.627613][ T5088] Bluetooth: hci1: command tx timeout [ 339.677106][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.722247][ T7571] hsr_slave_0: entered promiscuous mode [ 339.729017][ T7571] hsr_slave_1: entered promiscuous mode [ 339.735593][ T7571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.744248][ T7571] Cannot create hsr debugfs directory [ 339.794428][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.868051][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.976931][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.707602][ T5088] Bluetooth: hci1: command tx timeout [ 343.847791][ T5088] Bluetooth: hci1: command tx timeout [ 344.852954][ T7571] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 344.884034][ T7571] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 344.949158][ T7571] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 344.998104][ T7571] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 345.124625][ T12] tipc: Left network mode [ 345.527038][ T7571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.612222][ T7571] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.692716][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.699940][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.729909][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.737119][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.966985][ T7571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.059313][ T7715] comedi comedi0: comedi_parport: I/O port conflict (0x3,3) [ 347.216641][ T7718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.435'. [ 347.225938][ T7718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.435'. [ 347.596554][ T7725] loop1: detected capacity change from 0 to 164 [ 349.635954][ T7664] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 349.999840][ T7735] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5769] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7735] [ 350.550971][ T7571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.886090][ T7753] tipc: Started in network mode [ 350.891320][ T7753] tipc: Node identity 4, cluster identity 4711 [ 350.897644][ T7753] tipc: Node number set to 4 [ 350.967937][ T7753] loop0: detected capacity change from 0 to 256 [ 351.950636][ T12] hsr_slave_0: left promiscuous mode [ 351.977750][ T12] hsr_slave_1: left promiscuous mode [ 352.010197][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.037673][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.066891][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.088084][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.119884][ T12] bridge_slave_1: left allmulticast mode [ 352.125594][ T12] bridge_slave_1: left promiscuous mode [ 352.314994][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.193614][ T12] bridge_slave_0: left allmulticast mode [ 353.210124][ T12] bridge_slave_0: left promiscuous mode [ 353.217082][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.321781][ T12] veth1_macvtap: left promiscuous mode [ 353.331303][ T12] veth0_macvtap: left promiscuous mode [ 353.337065][ T12] veth1_vlan: left promiscuous mode [ 353.345561][ T12] veth0_vlan: left promiscuous mode [ 355.940135][ T7791] loop0: detected capacity change from 0 to 128 [ 356.260451][ T7793] loop1: detected capacity change from 0 to 32768 [ 358.162871][ T994] read_mapping_page failed! [ 358.207472][ T994] ERROR: (device loop1): txCommit: [ 358.207472][ T994] [ 358.240660][ T994] jfs_write_inode: jfs_commit_inode failed! [ 358.567016][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 358.567031][ T28] audit: type=1800 audit(1779940366.376:4): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.453" name="file0" dev="overlay" ino=655 res=0 errno=0 [ 360.948257][ T12] team0 (unregistering): Port device team_slave_1 removed [ 361.061602][ T12] team0 (unregistering): Port device team_slave_0 removed [ 361.161959][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.602717][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.247553][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 362.329834][ T7835] comedi comedi0: comedi_parport: I/O port conflict (0x3,3) [ 364.293589][ T12] bond0 (unregistering): Released all slaves [ 364.312329][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 364.495876][ T27] usb 4-1: device descriptor read/all, error -71 [ 364.589896][ T7571] veth0_vlan: entered promiscuous mode [ 364.646147][ T7571] veth1_vlan: entered promiscuous mode [ 364.743286][ T7571] veth0_macvtap: entered promiscuous mode [ 364.769733][ T7571] veth1_macvtap: entered promiscuous mode [ 364.813632][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.828423][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.844319][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.855215][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.865582][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.880533][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.894606][ T7571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.944902][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.966130][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.980901][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.991509][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.009035][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.019736][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.031238][ T7571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.042211][ T7571] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.051200][ T7571] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.061249][ T7571] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.070422][ T7571] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.207828][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.215703][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.257382][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.295010][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.459965][ T7863] loop4: detected capacity change from 0 to 512 [ 365.500092][ T7861] random: crng reseeded on system resumption [ 365.668988][ T7863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.734082][ T7863] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.881455][ T7863] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.407: iget: bad i_size value: 2533274857506816 [ 365.903005][ T7863] EXT4-fs (loop4): Remounting filesystem read-only [ 366.026564][ T7571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.078690][ T7884] loop0: detected capacity change from 0 to 128 [ 366.631427][ T7884] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.659879][ T7884] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 366.691890][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.955677][ T7891] loop4: detected capacity change from 0 to 32768 [ 367.030500][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'. [ 369.795641][ T12] read_mapping_page failed! [ 369.818272][ T12] ERROR: (device loop4): txCommit: [ 369.818272][ T12] [ 369.845801][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.878335][ T12] jfs_write_inode: jfs_commit_inode failed! [ 371.732440][ T7943] loop4: detected capacity change from 0 to 128 [ 372.956660][ T7947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.118974][ T7969] loop3: detected capacity change from 0 to 8 [ 374.163566][ T7969] SQUASHFS error: Failed to read block 0x4de: -5 [ 374.181366][ T7969] SQUASHFS error: Failed to read block 0x4de: -5 [ 374.206549][ T7969] SQUASHFS error: Failed to read block 0x4de: -5 [ 374.214157][ T7969] SQUASHFS error: Failed to read block 0x4de: -5 [ 374.221533][ T7969] SQUASHFS error: Failed to read block 0x4de: -5 [ 374.228747][ T7969] SQUASHFS error: Failed to read block 0x4de: -5 [ 374.240675][ T7969] SQUASHFS error: Failed to read block 0x4de: -5 [ 374.248154][ T7969] SQUASHFS error: Failed to read block 0x4de: -5 [ 374.255483][ T7969] SQUASHFS error: Failed to read block 0x4de: -5 [ 374.262890][ T7969] SQUASHFS error: Failed to read block 0x4de: -5 [ 374.273670][ T7969] SQUASHFS error: Failed to read block 0x4de: -5 [ 374.280871][ T7969] SQUASHFS error: Failed to read block 0x4de: -5 [ 374.291926][ T28] audit: type=1800 audit(1779940382.006:5): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.476" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 375.610654][ T7971] binder: 7961:7971 ioctl 4002f516 0 returned -22 [ 378.048402][ T7988] loop0: detected capacity change from 0 to 32768 [ 378.238430][ T7988] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 378.341232][ T7988] XFS (loop0): Ending clean mount [ 378.351095][ T8000] loop4: detected capacity change from 0 to 164 [ 378.384122][ T7988] XFS (loop0): Quotacheck needed: Please wait. [ 378.439873][ T8007] loop3: detected capacity change from 0 to 16 [ 378.467131][ T8007] erofs: (device loop3): mounted with root inode @ nid 36. [ 379.324884][ T8015] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7571] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8015] [ 379.364048][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.483'. [ 379.422767][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.735294][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.844215][ T7988] XFS (loop0): Quotacheck: Done. [ 380.437733][ T28] audit: type=1804 audit(1779940388.146:6): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.481" name="/newroot/116/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=1 errno=0 [ 380.750515][ T5779] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 382.178652][ T8069] loop0: detected capacity change from 0 to 128 [ 382.279990][ T8069] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 382.348981][ T5810] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 382.361396][ T8069] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 383.088657][ T5810] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 383.126415][ T5810] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.223244][ T8078] syz.0.495 (pid 8078) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 383.273359][ T5810] usb 2-1: config 0 has no interface number 0 [ 383.290360][ T5810] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 383.314322][ T5810] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 383.325013][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.336100][ T5810] usb 2-1: config 0 descriptor?? [ 383.472018][ T5810] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 383.499264][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 383.576628][ T8087] loop4: detected capacity change from 0 to 256 [ 384.308541][ T8041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.828790][ T5807] usb 2-1: USB disconnect, device number 5 [ 387.167855][ T8129] Invalid ELF header type: 3 != 1 [ 391.845500][ T8170] netlink: 'syz.4.512': attribute type 10 has an invalid length. [ 392.565838][ T8170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.577518][ T8170] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 396.086136][ T8199] loop1: detected capacity change from 0 to 1024 [ 396.153933][ T8199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 396.166210][ T8199] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.850023][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 397.047820][ T8213] loop1: detected capacity change from 0 to 512 [ 397.962618][ T8213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.041751][ T8213] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.997261][ T8233] syz.1.529 uses obsolete (PF_INET,SOCK_PACKET) [ 399.238028][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 399.508738][ T8235] loop3: detected capacity change from 0 to 16 [ 399.555849][ T8235] erofs: (device loop3): mounted with root inode @ nid 36. [ 399.577029][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.802505][ T23] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 399.810936][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.821407][ T23] usb 5-1: config 0 has no interface number 0 [ 399.827785][ T23] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 399.838679][ T23] usb 5-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.854613][ T23] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 399.864074][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.881997][ T23] usb 5-1: Product: syz [ 399.886260][ T23] usb 5-1: Manufacturer: syz [ 400.451433][ T23] usb 5-1: SerialNumber: syz [ 400.511399][ T23] usb 5-1: config 0 descriptor?? [ 400.527310][ T8229] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 400.611699][ T23] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 400.623871][ T23] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 400.695493][ T23] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 401.146412][ T5810] usb 5-1: USB disconnect, device number 2 [ 401.192550][ T5810] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 401.399283][ T5810] cyberjack 5-1:0.69: device disconnected [ 401.802561][ T8264] syz.3.530 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 403.987635][ T5807] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 404.783507][ T5807] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 404.981685][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.991331][ T5807] usb 2-1: Product: syz [ 404.995579][ T5807] usb 2-1: Manufacturer: syz [ 405.000933][ T5807] usb 2-1: SerialNumber: syz [ 405.008404][ T5807] usb 2-1: config 0 descriptor?? [ 405.015967][ T5807] ch341 2-1:0.0: ch341-uart converter detected [ 405.070068][ T8302] loop0: detected capacity change from 0 to 16 [ 405.166289][ T8303] netlink: 'syz.4.539': attribute type 10 has an invalid length. [ 405.174243][ T8303] netlink: 40 bytes leftover after parsing attributes in process `syz.4.539'. [ 405.185153][ T8303] team0: entered promiscuous mode [ 405.190393][ T8303] team_slave_0: entered promiscuous mode [ 405.198944][ T8303] team_slave_1: entered promiscuous mode [ 405.206013][ T8303] team0: entered allmulticast mode [ 405.211247][ T8303] team_slave_0: entered allmulticast mode [ 405.217169][ T8303] team_slave_1: entered allmulticast mode [ 405.227756][ T8303] bridge0: port 3(team0) entered blocking state [ 405.234926][ T8303] bridge0: port 3(team0) entered disabled state [ 405.261805][ T8303] bridge0: port 3(team0) entered blocking state [ 405.268519][ T8303] bridge0: port 3(team0) entered forwarding state [ 405.710975][ T8302] erofs: (device loop0): mounted with root inode @ nid 36. [ 406.582153][ T5807] usb 2-1: failed to receive control message: -110 [ 406.589987][ T5807] ch341-uart: probe of ttyUSB0 failed with error -110 [ 407.646499][ T27] usb 2-1: USB disconnect, device number 6 [ 407.655789][ T27] ch341 2-1:0.0: device disconnected [ 409.977672][ T8347] netlink: 36 bytes leftover after parsing attributes in process `syz.0.545'. [ 414.808089][ T8416] netlink: 36 bytes leftover after parsing attributes in process `syz.3.556'. [ 416.583831][ T8441] loop4: detected capacity change from 0 to 128 [ 416.816057][ T8441] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 416.859987][ T8441] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.510992][ T7571] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 417.965090][ T23] IPVS: starting estimator thread 0... [ 418.147864][ T8453] IPVS: using max 16 ests per chain, 38400 per kthread [ 423.652971][ T8531] netlink: 36 bytes leftover after parsing attributes in process `syz.1.570'. [ 426.420812][ T8571] loop1: detected capacity change from 0 to 16 [ 426.498275][ T8571] erofs: (device loop1): mounted with root inode @ nid 36. [ 430.406502][ T8609] netlink: 280 bytes leftover after parsing attributes in process `syz.1.584'. [ 432.651808][ T8626] sctp: failed to load transform for md5: -2 [ 433.411278][ T8639] netlink: 'syz.3.585': attribute type 1 has an invalid length. [ 433.516561][ T8639] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 433.525589][ T8639] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 433.534596][ T8639] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 433.543444][ T8639] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 433.553434][ T8639] bond1: (slave geneve2): making interface the new active one [ 433.562170][ T8639] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 433.605119][ T8647] loop1: detected capacity change from 0 to 8 [ 434.219427][ T8647] netlink: 'syz.1.590': attribute type 10 has an invalid length. [ 434.227726][ T8647] netlink: 40 bytes leftover after parsing attributes in process `syz.1.590'. [ 434.237265][ T8647] batman_adv: batadv0: Adding interface: vlan1 [ 434.243571][ T8647] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.269219][ T8647] batman_adv: batadv0: Interface activated: vlan1 [ 434.418327][ T8657] loop1: detected capacity change from 0 to 16 [ 434.436393][ T8657] erofs: (device loop1): mounted with root inode @ nid 36. [ 435.049688][ T28] audit: type=1326 audit(1779940442.826:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.3.593" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 435.493632][ T28] audit: type=1326 audit(1779940442.826:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.3.593" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 435.517374][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.547786][ T28] audit: type=1326 audit(1779940442.826:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.3.593" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 435.603775][ T28] audit: type=1326 audit(1779940442.826:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.3.593" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 435.658201][ T28] audit: type=1326 audit(1779940442.826:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.3.593" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 435.707815][ T28] audit: type=1326 audit(1779940442.836:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.3.593" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 435.786078][ T28] audit: type=1326 audit(1779940442.836:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.3.593" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 435.874742][ T28] audit: type=1326 audit(1779940442.836:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.3.593" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 435.898625][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.904956][ T28] audit: type=1326 audit(1779940442.836:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.3.593" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 436.459031][ T8672] loop0: detected capacity change from 0 to 1024 [ 436.649215][ T28] audit: type=1326 audit(1779940442.836:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.3.593" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 436.719241][ T8672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 436.731683][ T8672] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.114195][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 438.832459][ T8696] loop4: detected capacity change from 0 to 512 [ 438.842731][ T8696] EXT4-fs: Ignoring removed orlov option [ 438.892439][ T8696] EXT4-fs (loop4): Test dummy encryption mode enabled [ 438.899323][ T8696] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 438.912454][ T8696] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 439.014838][ T8696] EXT4-fs (loop4): 1 truncate cleaned up [ 439.028816][ T8696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.271681][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.378127][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.517562][ T5775] Bluetooth: hci1: command tx timeout [ 440.789077][ T7571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.114811][ T8701] loop4: detected capacity change from 0 to 1024 [ 445.266592][ T5775] block nbd0: Receive control failed (result -32) [ 447.040465][ T8737] bridge_slave_1: left allmulticast mode [ 447.046274][ T8737] bridge_slave_1: left promiscuous mode [ 447.052938][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.993357][ T8737] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 453.414308][ T8779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.892083][ T8821] netlink: 256 bytes leftover after parsing attributes in process `syz.4.631'. [ 457.901369][ T8821] unsupported nlmsg_type 40 [ 457.959691][ T5088] Bluetooth: hci1: command 0x0406 tx timeout [ 462.672425][ T8862] Can't find a SQUASHFS superblock on nullb0 [ 463.402089][ T8870] input: syz0 as /devices/virtual/input/input9 [ 463.466176][ T8870] netlink: 140 bytes leftover after parsing attributes in process `syz.4.644'. [ 464.185834][ T8876] sctp: failed to load transform for md5: -2 [ 465.593030][ T5775] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 466.676396][ T8913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.650'. [ 467.224956][ T5437] veth0_macvtap: left promiscuous mode [ 468.493502][ T8956] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 468.517605][ T8956] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 468.528135][ T8956] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 469.420110][ T8970] GUP no longer grows the stack in syz.0.661 (8970): 200000006000-200000008000 (200000004000) [ 469.431173][ T8970] CPU: 1 PID: 8970 Comm: syz.0.661 Not tainted syzkaller #0 [ 469.438490][ T8970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 469.448568][ T8970] Call Trace: [ 469.451859][ T8970] [ 469.454789][ T8970] dump_stack_lvl+0x18c/0x250 [ 469.459479][ T8970] ? asm_sysvec_call_function_single+0x1a/0x20 [ 469.465647][ T8970] ? show_regs_print_info+0x20/0x20 [ 469.470853][ T8970] ? asm_sysvec_call_function_single+0x1a/0x20 [ 469.477120][ T8970] fixup_user_fault+0x642/0x700 [ 469.481989][ T8970] fault_in_user_writeable+0x71/0xd0 [ 469.487365][ T8970] futex_lock_pi+0x274/0x9b0 [ 469.491964][ T8970] ? fixup_pi_state_owner+0x5e0/0x5e0 [ 469.497378][ T8970] ? userfaultfd_unmap_prep+0x3d0/0x3d0 [ 469.502933][ T8970] ? mas_find_setup+0x493/0x590 [ 469.507786][ T8970] do_futex+0x23d/0x3e0 [ 469.511948][ T8970] ? __ia32_sys_get_robust_list+0x110/0x110 [ 469.517854][ T8970] __se_sys_futex+0x3a9/0x440 [ 469.522535][ T8970] ? __x64_sys_futex+0xf0/0xf0 [ 469.527301][ T8970] ? __x64_sys_futex+0x21/0xf0 [ 469.532067][ T8970] do_syscall_64+0x55/0xb0 [ 469.536493][ T8970] ? clear_bhb_loop+0x40/0x90 [ 469.541176][ T8970] ? clear_bhb_loop+0x40/0x90 [ 469.545858][ T8970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.551755][ T8970] RIP: 0033:0x7fe23e59ce59 [ 469.556187][ T8970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.575797][ T8970] RSP: 002b:00007fe23f40b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 469.584217][ T8970] RAX: ffffffffffffffda RBX: 00007fe23e816180 RCX: 00007fe23e59ce59 [ 469.592192][ T8970] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 469.600163][ T8970] RBP: 00007fe23e632d6f R08: 0000000000000000 R09: 0000000000000002 [ 469.608132][ T8970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.616103][ T8970] R13: 00007fe23e816218 R14: 00007fe23e816180 R15: 00007ffd038d8ce8 [ 469.624091][ T8970] [ 469.627223][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.434473][ T9022] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 476.260843][ T9029] loop0: detected capacity change from 0 to 128 [ 476.872888][ T9029] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 477.088608][ T9029] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.987932][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 480.185353][ T9049] sctp: failed to load transform for md5: -2 [ 480.869470][ T5809] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 481.097544][ T5807] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 481.157121][ T5809] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 481.168142][ T5809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.178792][ T5809] usb 1-1: config 0 has no interface number 0 [ 481.205587][ T5809] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.229747][ T5809] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 481.239928][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.271512][ T5809] usb 1-1: config 0 descriptor?? [ 481.299898][ T5809] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 481.323585][ T5807] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 481.333899][ T5807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.358963][ T5807] usb 5-1: config 0 has no interface number 0 [ 481.365125][ T5807] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.392591][ T5807] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 481.547525][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.672266][ T5807] usb 5-1: config 0 descriptor?? [ 481.701403][ T5807] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 483.846867][ T9107] nfs4: Unknown parameter 'no' [ 485.844337][ T5809] usb 1-1: USB disconnect, device number 12 [ 485.919823][ T5810] usb 5-1: USB disconnect, device number 3 [ 486.379918][ T9116] loop4: detected capacity change from 0 to 40427 [ 486.921833][ T9116] F2FS-fs (loop4): invalid crc_offset: 4177530876 [ 486.950628][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 486.978067][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 486.989810][ T9116] F2FS-fs (loop4): Wrong journal entry on segno 65538 [ 486.998329][ T9116] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 487.016960][ T9111] netlink: 'syz.0.689': attribute type 11 has an invalid length. [ 487.041336][ T9111] netlink: 'syz.0.689': attribute type 13 has an invalid length. [ 487.418008][ T9128] xt_connbytes: Forcing CT accounting to be enabled [ 487.424863][ T9128] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 487.893638][ T9111] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.901117][ T9111] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.084418][ T9111] bridge0: entered allmulticast mode [ 488.212770][ T9131] bridge_slave_1: left allmulticast mode [ 488.265733][ T9131] bridge_slave_1: left promiscuous mode [ 488.349951][ T9131] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.722159][ T9131] bridge_slave_0: left allmulticast mode [ 488.742175][ T9131] bridge_slave_0: left promiscuous mode [ 488.766812][ T9131] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.952762][ T9186] loop0: detected capacity change from 0 to 128 [ 502.528685][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.535068][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.076583][ T9271] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 508.083899][ T9271] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 508.117062][ T9271] hsr0: entered promiscuous mode [ 508.140150][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.725'. [ 508.231427][ T9270] EXT4-fs: Conflicting test_dummy_encryption options [ 513.911410][ T9324] kernel profiling enabled (shift: 9) [ 513.962447][ T9325] nfs4: Unknown parameter 'no' [ 516.109996][ T9344] loop0: detected capacity change from 0 to 2048 [ 518.954832][ T9355] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 519.177925][ T9370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.754'. [ 519.335694][ T9370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.754'. [ 521.131447][ T9370] syz.3.754 (9370) used greatest stack depth: 17608 bytes left [ 526.620445][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 526.620458][ T28] audit: type=1326 audit(1779940534.426:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 526.650483][ T28] audit: type=1326 audit(1779940534.426:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 527.305364][ T28] audit: type=1326 audit(1779940534.436:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 528.178106][ T28] audit: type=1326 audit(1779940534.436:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 528.292594][ T28] audit: type=1326 audit(1779940534.436:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 528.500640][ T28] audit: type=1326 audit(1779940534.436:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 529.996657][ T28] audit: type=1326 audit(1779940534.436:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 530.872464][ T28] audit: type=1326 audit(1779940534.436:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 531.145353][ T28] audit: type=1326 audit(1779940534.436:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 531.197480][ T28] audit: type=1326 audit(1779940534.436:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 532.169103][ T9449] loop0: detected capacity change from 0 to 32768 [ 532.622216][ T9454] read_mapping_page failed! [ 532.627664][ T9454] ERROR: (device loop0): txCommit: [ 532.627664][ T9454] [ 533.096413][ T1321] read_mapping_page failed! [ 533.105401][ T1321] ERROR: (device loop0): txCommit: [ 533.105401][ T1321] [ 533.117723][ T1321] jfs_write_inode: jfs_commit_inode failed! [ 535.591548][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'. [ 536.137315][ T9462] tipc: Started in network mode [ 536.142406][ T9462] tipc: Node identity 4, cluster identity 4711 [ 536.148644][ T9462] tipc: Node number set to 4 [ 539.381259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 541.426402][ T5810] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 541.495319][ T9516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.782'. [ 541.792930][ T5810] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 541.803861][ T5810] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.817421][ T5810] usb 5-1: config 0 has no interface number 0 [ 541.823569][ T5810] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.845494][ T5810] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 541.858908][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.944967][ T5810] usb 5-1: config 0 descriptor?? [ 542.163570][ T5810] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 544.157958][ T9528] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.166725][ T9528] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.175539][ T9528] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.184254][ T9528] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.195310][ T9528] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.204664][ T9528] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.213889][ T9528] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.222924][ T9528] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.830170][ T5874] usb 5-1: USB disconnect, device number 4 [ 544.879255][ T9550] loop0: detected capacity change from 0 to 4096 [ 549.875607][ T9577] nfs4: Unknown parameter 'no' [ 550.854411][ T9580] loop4: detected capacity change from 0 to 32768 [ 550.955127][ T9580] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 551.021692][ T9580] XFS (loop4): Ending clean mount [ 551.045136][ T9580] XFS (loop4): Quotacheck needed: Please wait. [ 551.099258][ T9580] XFS (loop4): Quotacheck: Done. [ 552.312302][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 552.312318][ T28] audit: type=1804 audit(1779940559.526:148): pid=9600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.798" name="/newroot/82/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=1 errno=0 [ 553.990621][ T7571] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 556.225047][ T9637] syz_tun: entered allmulticast mode [ 557.161440][ T9635] syz_tun: left allmulticast mode [ 557.198994][ T9641] nfs4: Unknown parameter 'no' [ 559.010684][ T9655] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.811'. [ 559.054097][ T5810] Process accounting resumed [ 563.007504][ T9688] capability: warning: `syz.3.820' uses deprecated v2 capabilities in a way that may be insecure [ 563.306529][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.313536][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.567731][ T5761] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 564.038319][ T5761] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 564.079518][ T5761] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.119740][ T5761] usb 5-1: config 0 has no interface number 0 [ 564.157488][ T5761] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 564.216507][ T5761] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 564.246109][ T5761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.279769][ T5761] usb 5-1: config 0 descriptor?? [ 564.687834][ T5761] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 566.739291][ T5849] usb 5-1: USB disconnect, device number 5 [ 566.773794][ T9730] loop0: detected capacity change from 0 to 512 [ 566.830196][ T9730] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 567.531135][ T9730] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 567.837636][ T9730] System zones: 1-12 [ 567.925850][ T9730] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 567.955585][ T9730] EXT4-fs (loop0): 1 truncate cleaned up [ 567.963199][ T9730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.506252][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.010795][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 572.021497][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 572.030835][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 572.040039][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 578.133500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 580.268032][ T5088] Bluetooth: hci1: command 0x0406 tx timeout [ 581.803671][ T9840] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 583.910412][ T9854] befs: (nullb0): invalid magic header [ 588.628354][ T9891] xt_TCPMSS: Only works on TCP SYN packets [ 588.960470][ T9884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.221532][ T9886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.254500][ T9886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.264084][ T9886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.377670][ T9886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.881980][ T9897] geneve2: entered promiscuous mode [ 590.887286][ T9897] geneve2: entered allmulticast mode [ 591.166340][ T9906] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 591.206188][ T9905] IPVS: stopping master sync thread 9906 ... [ 593.757304][ T9928] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.695811][ T9941] input: syz0 as /devices/virtual/input/input10 [ 595.807620][ T9949] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by " [ 600.948309][ T9979] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.886'. [ 601.196189][ T5761] Process accounting resumed [ 602.351760][ T9990] fuse: Bad value for 'fd' [ 604.254581][T10001] netlink: 96 bytes leftover after parsing attributes in process `syz.4.890'. [ 608.575796][T10031] loop0: detected capacity change from 0 to 1024 [ 608.700564][T10031] hfsplus: failed to load extents file [ 610.257128][T10043] loop4: detected capacity change from 0 to 1024 [ 612.647557][ T5761] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 612.855420][ T5761] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 612.933019][ T5761] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.045885][ T5761] usb 1-1: config 0 has no interface number 0 [ 613.163294][ T5761] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 613.301457][ T5761] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 613.405193][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.415871][ T5761] usb 1-1: config 0 descriptor?? [ 613.458425][ T5761] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 616.270780][T10100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 616.990254][ T5849] usb 1-1: USB disconnect, device number 13 [ 617.088464][T10104] loop4: detected capacity change from 0 to 512 [ 617.116588][T10104] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 617.198836][T10104] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 617.212312][T10104] System zones: 1-12 [ 617.223795][T10104] EXT4-fs (loop4): 1 truncate cleaned up [ 617.236596][T10104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.517346][ T5849] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 619.006128][ T7571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.380944][ T5849] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 619.765138][ T5849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.833150][ T5849] usb 1-1: config 0 has no interface number 0 [ 619.882443][ T5849] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 619.898092][ T5849] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 619.907269][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.921738][ T5849] usb 1-1: config 0 descriptor?? [ 619.935927][ T5849] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 620.154820][ T5849] usb 1-1: USB disconnect, device number 14 [ 622.319599][T10153] loop0: detected capacity change from 0 to 512 [ 622.364180][T10153] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 622.489526][T10160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.923'. [ 622.516762][T10153] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 622.537710][T10153] System zones: 1-12 [ 622.567261][T10153] EXT4-fs (loop0): 1 truncate cleaned up [ 622.608717][T10153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.763973][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.592333][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.613999][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.879433][ T787] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 627.838793][ T787] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 627.846857][ T787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.868743][ T787] usb 5-1: config 0 has no interface number 0 [ 628.043487][T10208] loop0: detected capacity change from 0 to 2048 [ 628.063537][T10208] UDF-fs: bad mount option "noadinicb@&°"w¤8¬êˆx7" or missing value [ 628.076728][ T787] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 628.090074][ T787] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 628.090136][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.120927][ T787] usb 5-1: config 0 descriptor?? [ 628.875183][ T787] usb 5-1: can't set config #0, error -71 [ 628.877194][ T787] usb 5-1: USB disconnect, device number 6 [ 629.240580][T10216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.249282][T10216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.653197][T10216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.712350][T10216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.507405][ T9620] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 637.781432][ T9620] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 638.545925][ T9620] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.593378][ T9620] usb 5-1: config 0 has no interface number 0 [ 638.614631][ T9620] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 638.628336][ T9620] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 638.637645][ T9620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.651548][ T9620] usb 5-1: config 0 descriptor?? [ 638.660241][ T9620] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 640.916093][ T9620] usb 5-1: USB disconnect, device number 7 [ 652.447638][ T5810] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 653.459695][ T5810] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 653.491971][ T5810] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.534945][ T5810] usb 1-1: config 0 has no interface number 0 [ 653.541598][ T5810] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 653.555112][ T5810] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 653.564441][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.592354][ T5810] usb 1-1: config 0 descriptor?? [ 653.630226][ T5810] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 655.766309][ T9620] usb 1-1: USB disconnect, device number 15 [ 656.632548][T10398] xt_TCPMSS: Only works on TCP SYN packets [ 656.639325][T10397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.409877][T10410] netlink: 96 bytes leftover after parsing attributes in process `syz.3.987'. [ 659.053813][T10409] dccp_close: ABORT with 4570 bytes unread [ 661.188129][T10449] input: syz0 as /devices/virtual/input/input11 [ 662.031559][T10447] loop4: detected capacity change from 0 to 2048 [ 662.038817][T10447] UDF-fs: bad mount option "noadinicb@&°"w¤8¬êˆx7" or missing value [ 666.553430][T10478] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1005'. [ 671.337866][ T5808] IPVS: starting estimator thread 0... [ 671.497520][T10511] IPVS: using max 21 ests per chain, 50400 per kthread [ 671.727415][ T9620] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 676.570223][T10542] loop4: detected capacity change from 0 to 1024 [ 676.579764][T10542] EXT4-fs: Ignoring removed orlov option [ 676.708399][T10545] loop0: detected capacity change from 0 to 2048 [ 676.718652][T10545] UDF-fs: bad mount option "noadinicb@&°"w¤8¬êˆx7" or missing value [ 676.733379][T10542] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 677.779052][T10542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.276346][T10559] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #12: block 7: comm syz.4.1025: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 679.219689][T10560] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 679.783281][T10559] EXT4-fs (loop4): Remounting filesystem read-only [ 680.573877][ T7571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.158649][T10580] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1028'. [ 686.358113][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.364427][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.473622][T10608] loop4: detected capacity change from 0 to 128 [ 686.482118][T10608] EXT4-fs (loop4): Test dummy encryption mode enabled [ 686.694673][T10608] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 687.468691][T10608] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 688.379099][T10627] ext4: Unknown parameter '' [ 689.360734][ T7571] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 690.966136][T10646] bridge0: port 3(veth0_to_bond) entered blocking state [ 690.973336][T10646] bridge0: port 3(veth0_to_bond) entered disabled state [ 690.980775][T10646] veth0_to_bond: entered allmulticast mode [ 690.988180][T10646] veth0_to_bond: entered promiscuous mode [ 690.994624][T10646] bridge0: port 3(veth0_to_bond) entered blocking state [ 691.001719][T10646] bridge0: port 3(veth0_to_bond) entered forwarding state [ 691.214164][T10639] bridge0: port 3(team0) entered disabled state [ 691.228207][T10639] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.237345][T10639] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.111753][T10691] loop0: detected capacity change from 0 to 2048 [ 697.235148][T10691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 698.971221][T10716] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1060'. [ 699.753648][T10707] dccp_close: ABORT with 4570 bytes unread [ 703.214565][T10746] loop0: detected capacity change from 0 to 128 [ 703.349427][T10746] EXT4-fs (loop0): Test dummy encryption mode enabled [ 703.378636][T10746] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 704.177476][T10746] ext4 filesystem being mounted at /256/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 705.895308][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 707.587058][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 707.761418][ T5088] Bluetooth: hci1: unexpected event for opcode 0x203d [ 711.497108][ T28] audit: type=1326 audit(2000000106.599:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10820 comm="syz.1.1089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 711.564697][ T28] audit: type=1326 audit(2000000106.599:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10820 comm="syz.1.1089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 711.616211][ T28] audit: type=1326 audit(2000000106.599:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10820 comm="syz.1.1089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 711.680801][ T28] audit: type=1326 audit(2000000106.599:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10820 comm="syz.1.1089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 711.706021][ T28] audit: type=1326 audit(2000000106.599:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10820 comm="syz.1.1089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 711.744015][ T28] audit: type=1326 audit(2000000106.599:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10820 comm="syz.1.1089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 711.859292][ T5088] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 711.868430][ T5088] Bluetooth: hci1: Injecting HCI hardware error event [ 711.882565][ T5088] Bluetooth: hci1: hardware error 0x00 [ 712.416492][ T28] audit: type=1326 audit(2000000106.599:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10820 comm="syz.1.1089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 712.578314][ T28] audit: type=1326 audit(2000000106.599:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10820 comm="syz.1.1089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 713.057510][ T28] audit: type=1326 audit(2000000106.599:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10820 comm="syz.1.1089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 713.333692][ T28] audit: type=1326 audit(2000000106.599:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10820 comm="syz.1.1089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 714.427928][ T5088] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 715.246474][T10849] bridge_slave_0: left allmulticast mode [ 715.253276][T10849] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.441063][T10849] bond0: (slave bond_slave_0): Releasing backup interface [ 716.049011][T10849] bond0: (slave bond_slave_1): Releasing backup interface [ 716.095734][T10849] team0: Port device team_slave_0 removed [ 716.151908][T10849] team0: Port device team_slave_1 removed [ 716.206805][T10849] bond1: (slave geneve2): Releasing active interface [ 716.225665][T10849] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 716.234814][T10849] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 716.244441][T10849] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 716.253441][T10849] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 716.395769][T10852] tipc: Enabling of bearer rejected, failed to enable media [ 716.987794][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 717.806801][T10865] MTD: Couldn't look up '/dev/nullb0': -15 [ 719.885330][T10885] syzkaller0: entered allmulticast mode [ 719.896182][T10885] syzkaller0: entered promiscuous mode [ 719.907256][T10885] syzkaller0 (unregistering): left allmulticast mode [ 719.914414][T10885] syzkaller0 (unregistering): left promiscuous mode [ 719.929325][T10884] loop4: detected capacity change from 0 to 1024 [ 719.936901][T10884] EXT4-fs: quotafile must be on filesystem root [ 722.055895][T10900] tipc: Enabling of bearer rejected, failed to enable media [ 724.405025][T10927] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1117'. [ 724.420210][T10927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1117'. [ 724.897786][T10927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1117'. [ 726.705791][ T5810] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 726.904022][ T5810] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 726.913289][ T5810] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.924581][ T5810] usb 5-1: config 0 has no interface number 0 [ 726.934652][ T5810] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 726.971214][ T5810] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 726.994531][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.044839][ T5810] usb 5-1: config 0 descriptor?? [ 727.182710][ T5810] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 728.359459][T10976] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 728.387628][T10968] IPVS: stopping master sync thread 10976 ... [ 728.441733][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 729.466297][ T5809] usb 5-1: USB disconnect, device number 9 [ 729.778427][T10992] xt_NFQUEUE: number of total queues is 0 [ 729.785620][T10992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1131'. [ 729.795716][T10992] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1131'. [ 736.360144][T11031] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 736.367264][T11031] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 736.378191][T11031] vhci_hcd vhci_hcd.0: Device attached [ 736.879174][T11032] vhci_hcd: connection closed [ 737.190514][ T1321] vhci_hcd: stop threads [ 737.217867][ T1321] vhci_hcd: release socket [ 737.222806][ T1321] vhci_hcd: disconnect device [ 737.254427][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 737.254441][ T28] audit: type=1326 audit(2000000132.409:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.3.1142" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 737.449492][ T28] audit: type=1326 audit(2000000132.409:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.3.1142" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 737.473606][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.482935][ T28] audit: type=1326 audit(2000000132.409:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.3.1142" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 737.506948][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.613841][ T28] audit: type=1326 audit(2000000132.409:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.3.1142" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 737.638039][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.141776][ T28] audit: type=1326 audit(2000000132.409:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.3.1142" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 740.878087][ T28] audit: type=1326 audit(2000000132.409:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.3.1142" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 740.902730][ T28] audit: type=1326 audit(2000000132.449:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.3.1142" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 740.927774][ T28] audit: type=1326 audit(2000000132.449:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.3.1142" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 740.952997][ T28] audit: type=1326 audit(2000000132.449:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.3.1142" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 740.977703][ T28] audit: type=1326 audit(2000000132.449:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.3.1142" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 741.268940][T11063] bridge_slave_0: left promiscuous mode [ 742.111779][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 745.504288][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 745.504305][ T28] audit: type=1326 audit(2000000140.449:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11098 comm="syz.4.1158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb2f9ce59 code=0x7ffc0000 [ 745.534598][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.038960][ T28] audit: type=1326 audit(2000000140.449:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11098 comm="syz.4.1158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb2f9ce59 code=0x7ffc0000 [ 746.188331][ T28] audit: type=1326 audit(2000000140.449:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11098 comm="syz.4.1158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1eb2f9ce59 code=0x7ffc0000 [ 746.274037][ T28] audit: type=1326 audit(2000000140.449:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11098 comm="syz.4.1158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb2f9ce59 code=0x7ffc0000 [ 746.298134][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.341762][ T28] audit: type=1326 audit(2000000140.449:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11098 comm="syz.4.1158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1eb2f9ce59 code=0x7ffc0000 [ 746.365819][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.613169][ T28] audit: type=1326 audit(2000000140.449:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11098 comm="syz.4.1158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb2f9ce59 code=0x7ffc0000 [ 746.743028][ T28] audit: type=1326 audit(2000000140.459:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11098 comm="syz.4.1158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1eb2f9ce59 code=0x7ffc0000 [ 746.777417][ T28] audit: type=1326 audit(2000000140.459:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11098 comm="syz.4.1158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb2f9ce59 code=0x7ffc0000 [ 746.956668][ T28] audit: type=1326 audit(2000000140.459:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11098 comm="syz.4.1158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb2f9ce59 code=0x7ffc0000 [ 746.980807][ C1] vkms_vblank_simulate: vblank timer overrun [ 747.676495][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.695426][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.770896][ T28] audit: type=1326 audit(2000000140.459:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11098 comm="syz.4.1158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1eb2f9ce59 code=0x7ffc0000 [ 747.795005][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.769554][T11166] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 756.790043][T11166] VFS: Can't find a romfs filesystem on dev nullb0. [ 756.790043][T11166] [ 757.175321][T11168] loop4: detected capacity change from 0 to 512 [ 757.218713][T11168] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 757.294093][T11168] EXT4-fs (loop4): 1 truncate cleaned up [ 757.304915][T11168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.534559][T11178] bond0: (slave bond_slave_0): Releasing backup interface [ 757.634742][T11178] bond0: (slave bond_slave_1): Releasing backup interface [ 757.734301][T11178] team0: Port device team_slave_0 removed [ 758.418473][T11178] team0: Port device team_slave_1 removed [ 758.470583][T11178] bond0: (slave wlan1): Releasing backup interface [ 760.814285][T11201] loop0: detected capacity change from 0 to 256 [ 762.273545][ T7571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.775969][T11217] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 764.024156][T11225] team0: left promiscuous mode [ 764.029209][T11225] team_slave_0: left promiscuous mode [ 764.036437][T11225] team_slave_1: left promiscuous mode [ 764.044259][T11225] bridge0: port 3(team0) entered disabled state [ 766.325496][T11225] bond0: (slave batadv0): Releasing backup interface [ 766.354476][T11225] bridge_slave_0: left allmulticast mode [ 766.360293][T11225] bridge_slave_0: left promiscuous mode [ 766.366081][T11225] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.394465][T11225] bridge_slave_1: left allmulticast mode [ 766.400275][T11225] bridge_slave_1: left promiscuous mode [ 766.405973][T11225] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.418184][T11225] bond0: (slave bond_slave_0): Releasing backup interface [ 766.443952][T11225] bond0: (slave bond_slave_1): Releasing backup interface [ 766.456764][T11225] team_slave_0: left allmulticast mode [ 766.575563][T11225] team0: Port device team_slave_0 removed [ 766.582302][T11225] team_slave_1: left allmulticast mode [ 766.727101][T11225] team0: Port device team_slave_1 removed [ 766.733665][T11225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.741280][T11225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.900506][T11225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.908553][T11225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.142585][ T5088] Bluetooth: hci2: unexpected event for opcode 0x0c56 [ 775.263718][T11305] loop4: detected capacity change from 0 to 64 [ 775.282683][T11305] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 776.308926][T11314] MTD: Couldn't look up '/dev/nullb0': -15 [ 786.626600][T11387] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1232'. [ 787.477506][T11397] (null): rxe_set_mtu: Set mtu to 256 [ 787.494505][T11397] vxcan1 speed is unknown, defaulting to 1000 [ 787.519750][T11397] vxcan1 speed is unknown, defaulting to 1000 [ 787.565262][T11397] vxcan1 speed is unknown, defaulting to 1000 [ 788.067393][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 788.067412][ T28] audit: type=1326 audit(2000000182.689:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11389 comm="syz.1.1234" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 788.123330][T11397] infiniband syz2: set active [ 788.128367][T11397] infiniband syz2: added vxcan1 [ 788.136319][T11397] syz2: rxe_create_cq: returned err = -12 [ 788.142651][T11397] infiniband syz2: Couldn't create ib_mad CQ [ 788.148876][T11397] infiniband syz2: Couldn't open port 1 [ 788.180135][T11393] vxcan1 speed is unknown, defaulting to 1000 [ 788.290189][ T23] vxcan1 speed is unknown, defaulting to 1000 [ 788.309164][T11397] RDS/IB: syz2: added [ 788.313871][T11397] smc: adding ib device syz2 with port count 1 [ 788.320464][T11397] smc: ib device syz2 port 1 has pnetid [ 788.331367][T11397] vxcan1 speed is unknown, defaulting to 1000 [ 788.418401][T11397] vxcan1 speed is unknown, defaulting to 1000 [ 788.508469][T11397] vxcan1 speed is unknown, defaulting to 1000 [ 788.594103][T11397] vxcan1 speed is unknown, defaulting to 1000 [ 788.734038][ T23] vxcan1 speed is unknown, defaulting to 1000 [ 788.968671][ T28] audit: type=1326 audit(2000000182.689:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11389 comm="syz.1.1234" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 789.013575][ T28] audit: type=1326 audit(2000000182.689:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11389 comm="syz.1.1234" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 789.047856][ T28] audit: type=1326 audit(2000000182.689:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11389 comm="syz.1.1234" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 789.087687][ T28] audit: type=1326 audit(2000000182.689:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11389 comm="syz.1.1234" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 789.209863][ T28] audit: type=1326 audit(2000000182.689:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11389 comm="syz.1.1234" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 789.234180][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.403144][ T28] audit: type=1326 audit(2000000182.689:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11389 comm="syz.1.1234" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 790.203263][ T28] audit: type=1326 audit(2000000182.689:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11389 comm="syz.1.1234" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 790.264012][ T28] audit: type=1326 audit(2000000182.699:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11389 comm="syz.1.1234" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 790.521639][ T28] audit: type=1326 audit(2000000182.699:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11389 comm="syz.1.1234" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 791.734321][T11437] loop0: detected capacity change from 0 to 4096 [ 792.036691][T11437] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 792.983050][T11458] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 793.240720][T11464] loop0: detected capacity change from 0 to 256 [ 793.248794][T11464] exfat: Deprecated parameter 'utf8' [ 793.254245][T11464] exfat: Deprecated parameter 'utf8' [ 793.547166][T11468] Invalid ELF header len 8 [ 793.894917][T11467] NILFS (nullb0): couldn't find nilfs on the device [ 793.921500][T11464] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 796.608476][T11502] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 797.440669][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 797.440684][ T28] audit: type=1326 audit(2000000192.599:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 797.484694][ T28] audit: type=1326 audit(2000000192.639:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 797.512203][ T28] audit: type=1326 audit(2000000192.669:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 797.538366][ T28] audit: type=1326 audit(2000000192.669:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 797.565267][ T28] audit: type=1326 audit(2000000192.669:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 797.594266][ T28] audit: type=1326 audit(2000000192.669:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 797.621965][T11509] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 797.635751][ T28] audit: type=1326 audit(2000000192.669:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 797.660160][ T9620] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 797.670056][ T28] audit: type=1326 audit(2000000192.689:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 797.694639][ T28] audit: type=1326 audit(2000000192.689:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 797.719352][ T28] audit: type=1326 audit(2000000192.699:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f687639ce59 code=0x7ffc0000 [ 797.862761][ T9620] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 797.890615][ T9620] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 797.905190][ T9620] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 797.913961][ T9620] usb 5-1: Product: syz [ 797.918454][ T9620] usb 5-1: Manufacturer: syz [ 797.923070][ T9620] usb 5-1: SerialNumber: syz [ 798.230879][ T9620] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 798.693118][T11535] infiniband syz2: set active [ 798.698297][T11535] infiniband syz2: set active [ 798.706688][T11535] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.715819][T11535] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.724285][T11535] bridge0: port 3(veth0_to_bond) entered disabled state [ 799.435703][ T5809] vxcan1 speed is unknown, defaulting to 1000 [ 799.450037][ T9620] vxcan1 speed is unknown, defaulting to 1000 [ 801.066427][T11550] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 801.160367][ T5809] usb 5-1: USB disconnect, device number 10 [ 801.190693][ T5809] usblp0: removed [ 802.210820][T11563] hsr0: entered promiscuous mode [ 802.221432][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1282'. [ 803.188289][T11571] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 804.661553][T11605] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 804.719601][T11605] loop4: detected capacity change from 0 to 512 [ 804.729351][T11605] EXT4-fs: Ignoring removed i_version option [ 805.549518][T11605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.563073][T11605] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 807.381640][ T7571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.940258][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.954392][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.593576][T11652] loop4: detected capacity change from 0 to 128 [ 813.681146][T11670] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 815.983531][T11687] Illegal XDP return value 4294967294 on prog (id 41) dev syz_tun, expect packet loss! [ 816.857082][T11695] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 820.257123][T11719] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 820.352361][T11722] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 822.368882][T11738] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 822.424803][T11738] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1331'. [ 824.858730][T11766] ±ÿþ€: renamed from team_slave_1 [ 826.137041][T11775] Invalid ELF header len 8 [ 828.863727][T11800] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1351'. [ 828.938004][T11800] bond0 (unregistering): Released all slaves [ 828.959940][T11802] syz_tun: entered allmulticast mode [ 829.094758][T11797] syz_tun: left allmulticast mode [ 834.686416][T11842] hsr0: entered promiscuous mode [ 834.704067][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1362'. [ 838.267611][T11864] fuse: Unknown parameter '0x0000000000000006' [ 838.403818][T11864] 9pnet_fd: Insufficient options for proto=fd [ 839.664521][T11872] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 840.537351][T11881] ±ÿþ€: renamed from team_slave_1 [ 840.626771][T11882] loop0: detected capacity change from 0 to 512 [ 840.674210][T11882] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 846.121111][T11917] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 846.906002][T11916] netlink: 'syz.0.1381': attribute type 3 has an invalid length. [ 846.937761][T11916] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1381'. [ 848.889541][T11937] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 849.935049][T11940] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1387'. [ 850.010126][T11947] lo speed is unknown, defaulting to 1000 [ 850.016415][T11947] lo speed is unknown, defaulting to 1000 [ 850.031955][T11947] lo speed is unknown, defaulting to 1000 [ 850.072722][T11947] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 850.139356][T11947] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 850.555632][T11947] lo speed is unknown, defaulting to 1000 [ 850.563897][T11947] lo speed is unknown, defaulting to 1000 [ 850.570777][T11947] lo speed is unknown, defaulting to 1000 [ 850.578768][T11947] lo speed is unknown, defaulting to 1000 [ 850.999599][T11963] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 853.721686][T11982] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 854.891702][T11989] Set syz0 is full, maxelem 0 reached [ 854.956521][T11993] pim6reg: entered allmulticast mode [ 854.983183][T11993] team0: entered allmulticast mode [ 854.989925][T11993] team_slave_0: entered allmulticast mode [ 854.995686][T11993] team_slave_1: entered allmulticast mode [ 855.003057][T11993] team0: left allmulticast mode [ 855.007972][T11993] team_slave_0: left allmulticast mode [ 855.013454][T11993] team_slave_1: left allmulticast mode [ 855.019032][T11993] pim6reg: left allmulticast mode [ 855.534015][T12007] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 859.583607][T12035] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 860.984483][T12041] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 862.238846][T12049] ±ÿþ€: renamed from team_slave_1 (while UP) [ 865.542247][T12076] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 868.440436][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 868.440472][ T28] audit: type=1326 audit(2000000263.579:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.3.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 869.077374][ T28] audit: type=1326 audit(2000000263.579:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.3.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 869.188937][ T28] audit: type=1326 audit(2000000263.589:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.3.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 869.625295][ T28] audit: type=1326 audit(2000000263.589:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.3.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 869.652290][ T28] audit: type=1326 audit(2000000263.589:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.3.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 869.711650][T12099] veth0: entered promiscuous mode [ 869.732665][ T28] audit: type=1326 audit(2000000263.589:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.3.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 869.955947][T12091] veth0: left promiscuous mode [ 870.077403][ T28] audit: type=1326 audit(2000000263.629:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.3.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 870.738537][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.744968][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.780686][ T28] audit: type=1326 audit(2000000263.629:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.3.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 870.807403][ T28] audit: type=1326 audit(2000000263.639:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.3.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 870.922338][ T28] audit: type=1326 audit(2000000263.639:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.3.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63739ce59 code=0x7ffc0000 [ 871.542947][T12103] netlink: 'syz.3.1426': attribute type 3 has an invalid length. [ 871.626855][T12103] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1426'. [ 872.283667][T12127] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 874.349766][T12146] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 874.568500][T12148] loop0: detected capacity change from 0 to 256 [ 874.645214][T12148] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 878.700433][T12175] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 883.108577][T12222] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 887.431602][T12242] siw: device registration error -23 [ 887.460042][T12242] smc: removing ib device syz2 [ 887.969401][T12242] ------------[ cut here ]------------ [ 887.975314][T12242] WARNING: CPU: 1 PID: 12242 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x42/0x50 [ 887.987117][T12242] Modules linked in: [ 887.991391][T12242] CPU: 1 PID: 12242 Comm: syz.4.1457 Not tainted syzkaller #0 [ 887.999584][T12242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 888.010102][T12242] RIP: 0010:rxe_pool_cleanup+0x42/0x50 [ 888.015663][T12242] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 90 76 05 fa 48 83 3b 00 75 07 e8 35 37 ad f9 5b c3 e8 2e 37 ad f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 00 55 41 57 41 [ 888.037447][T12242] RSP: 0018:ffffc9000493f148 EFLAGS: 00010246 [ 888.044070][T12242] RAX: ffffffff87d9f4c2 RBX: ffff88802d2fd298 RCX: 0000000000080000 [ 888.053323][T12242] RDX: ffffc90004f61000 RSI: 000000000007ffff RDI: 0000000000080000 [ 888.062159][T12242] RBP: 0000000000000002 R08: ffff88802d2fc743 R09: 1ffff11005a5f8e8 [ 888.070929][T12242] R10: dffffc0000000000 R11: ffffed1005a5f8e9 R12: dffffc0000000000 [ 888.080753][T12242] R13: 0000000000000008 R14: ffffffff87d833c0 R15: dffffc0000000000 [ 888.089521][T12242] FS: 00007f1eb11f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 888.098612][T12242] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 888.105524][T12242] CR2: 00005555913cfa38 CR3: 000000007e179000 CR4: 00000000003506e0 [ 888.113885][T12242] Call Trace: [ 888.117166][T12242] [ 888.120297][T12242] rxe_dealloc+0x33/0x100 [ 888.124837][T12242] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 888.131926][T12242] ib_dealloc_device+0x4e/0x1f0 [ 888.137393][T12242] __ib_unregister_device+0x120/0x170 [ 888.143068][T12242] ib_unregister_device_and_put+0xb8/0xf0 [ 888.149434][T12242] nldev_dellink+0x293/0x320 [ 888.154192][T12242] ? nldev_newlink+0x610/0x610 [ 888.159409][T12242] ? __lock_acquire+0x1347/0x7d40 [ 888.164700][T12242] ? apparmor_capable+0x137/0x1a0 [ 888.169928][T12242] ? bpf_lsm_capable+0x9/0x10 [ 888.174823][T12242] ? security_capable+0x89/0xb0 [ 888.180204][T12242] ? nldev_newlink+0x610/0x610 [ 888.185168][T12242] rdma_nl_rcv+0x6e3/0xa20 [ 888.190470][T12242] ? rdma_nl_net_init+0x190/0x190 [ 888.196101][T12242] ? __lock_acquire+0x7d40/0x7d40 [ 888.201411][T12242] ? net_generic+0x1e/0x240 [ 888.206293][T12242] ? netlink_deliver_tap+0x2e/0x1b0 [ 888.212816][T12242] netlink_unicast+0x751/0x8d0 [ 888.218543][T12242] netlink_sendmsg+0x8d0/0xbf0 [ 888.224235][T12242] ? netlink_getsockopt+0x590/0x590 [ 888.230059][T12242] ? aa_sock_msg_perm+0x94/0x150 [ 888.235432][T12242] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 888.241526][T12242] ? security_socket_sendmsg+0x80/0xa0 [ 888.247438][T12242] ? netlink_getsockopt+0x590/0x590 [ 888.254062][T12242] ____sys_sendmsg+0x5ba/0x960 [ 888.259072][T12242] ? __asan_memset+0x22/0x40 [ 888.263801][T12242] ? __sys_sendmsg_sock+0x30/0x30 [ 888.269168][T12242] ? __import_iovec+0x5f2/0x850 [ 888.274581][T12242] ? import_iovec+0x73/0xa0 [ 888.279286][T12242] ___sys_sendmsg+0x2a6/0x360 [ 888.283985][T12242] ? __sys_sendmsg+0x2a0/0x2a0 [ 888.288829][T12242] __se_sys_sendmsg+0x1c2/0x2b0 [ 888.293881][T12242] ? __x64_sys_sendmsg+0x80/0x80 [ 888.298996][T12242] ? lockdep_hardirqs_on+0x98/0x150 [ 888.304502][T12242] do_syscall_64+0x55/0xb0 [ 888.309611][T12242] ? clear_bhb_loop+0x40/0x90 [ 888.314621][T12242] ? clear_bhb_loop+0x40/0x90 [ 888.319765][T12242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 888.325765][T12242] RIP: 0033:0x7f1eb2f9ce59 [ 888.330435][T12242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.351020][T12242] RSP: 002b:00007f1eb11f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 888.360237][T12242] RAX: ffffffffffffffda RBX: 00007f1eb3215fa0 RCX: 00007f1eb2f9ce59 [ 888.368868][T12242] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 888.378057][T12242] RBP: 00007f1eb3032d6f R08: 0000000000000000 R09: 0000000000000000 [ 888.386927][T12242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.395571][T12242] R13: 00007f1eb3216038 R14: 00007f1eb3215fa0 R15: 00007ffff993c128 [ 888.404274][T12242] [ 888.407812][T12242] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 888.415297][T12242] CPU: 1 PID: 12242 Comm: syz.4.1457 Not tainted syzkaller #0 [ 888.423365][T12242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 888.436343][T12242] Call Trace: [ 888.440011][T12242] [ 888.443306][T12242] dump_stack_lvl+0x18c/0x250 [ 888.448018][T12242] ? show_regs_print_info+0x20/0x20 [ 888.454063][T12242] ? load_image+0x420/0x420 [ 888.459022][T12242] panic+0x2dc/0x730 [ 888.463160][T12242] ? bpf_jit_dump+0xd0/0xd0 [ 888.469792][T12242] __warn+0x2e0/0x470 [ 888.474595][T12242] ? rxe_pool_cleanup+0x42/0x50 [ 888.479835][T12242] ? rxe_pool_cleanup+0x42/0x50 [ 888.485254][T12242] report_bug+0x2be/0x4f0 [ 888.490695][T12242] ? rxe_pool_cleanup+0x42/0x50 [ 888.496296][T12242] ? rxe_pool_cleanup+0x42/0x50 [ 888.501702][T12242] ? rxe_pool_cleanup+0x44/0x50 [ 888.507944][T12242] handle_bug+0xcf/0x120 [ 888.512506][T12242] exc_invalid_op+0x1a/0x50 [ 888.517579][T12242] asm_exc_invalid_op+0x1a/0x20 [ 888.522728][T12242] RIP: 0010:rxe_pool_cleanup+0x42/0x50 [ 888.529162][T12242] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 90 76 05 fa 48 83 3b 00 75 07 e8 35 37 ad f9 5b c3 e8 2e 37 ad f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 00 55 41 57 41 [ 888.550681][T12242] RSP: 0018:ffffc9000493f148 EFLAGS: 00010246 [ 888.556893][T12242] RAX: ffffffff87d9f4c2 RBX: ffff88802d2fd298 RCX: 0000000000080000 [ 888.566623][T12242] RDX: ffffc90004f61000 RSI: 000000000007ffff RDI: 0000000000080000 [ 888.575888][T12242] RBP: 0000000000000002 R08: ffff88802d2fc743 R09: 1ffff11005a5f8e8 [ 888.584909][T12242] R10: dffffc0000000000 R11: ffffed1005a5f8e9 R12: dffffc0000000000 [ 888.594404][T12242] R13: 0000000000000008 R14: ffffffff87d833c0 R15: dffffc0000000000 [ 888.603018][T12242] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 888.610330][T12242] ? rxe_pool_cleanup+0x42/0x50 [ 888.615654][T12242] ? rxe_pool_cleanup+0x42/0x50 [ 888.620888][T12242] rxe_dealloc+0x33/0x100 [ 888.625695][T12242] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 888.632657][T12242] ib_dealloc_device+0x4e/0x1f0 [ 888.637869][T12242] __ib_unregister_device+0x120/0x170 [ 888.643402][T12242] ib_unregister_device_and_put+0xb8/0xf0 [ 888.649387][T12242] nldev_dellink+0x293/0x320 [ 888.654205][T12242] ? nldev_newlink+0x610/0x610 [ 888.660136][T12242] ? __lock_acquire+0x1347/0x7d40 [ 888.665262][T12242] ? apparmor_capable+0x137/0x1a0 [ 888.670511][T12242] ? bpf_lsm_capable+0x9/0x10 [ 888.675578][T12242] ? security_capable+0x89/0xb0 [ 888.680478][T12242] ? nldev_newlink+0x610/0x610 [ 888.685264][T12242] rdma_nl_rcv+0x6e3/0xa20 [ 888.689899][T12242] ? rdma_nl_net_init+0x190/0x190 [ 888.695069][T12242] ? __lock_acquire+0x7d40/0x7d40 [ 888.700233][T12242] ? net_generic+0x1e/0x240 [ 888.704766][T12242] ? netlink_deliver_tap+0x2e/0x1b0 [ 888.710264][T12242] netlink_unicast+0x751/0x8d0 [ 888.715363][T12242] netlink_sendmsg+0x8d0/0xbf0 [ 888.720277][T12242] ? netlink_getsockopt+0x590/0x590 [ 888.725516][T12242] ? aa_sock_msg_perm+0x94/0x150 [ 888.730486][T12242] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 888.736377][T12242] ? security_socket_sendmsg+0x80/0xa0 [ 888.741844][T12242] ? netlink_getsockopt+0x590/0x590 [ 888.747138][T12242] ____sys_sendmsg+0x5ba/0x960 [ 888.752795][T12242] ? __asan_memset+0x22/0x40 [ 888.757897][T12242] ? __sys_sendmsg_sock+0x30/0x30 [ 888.763047][T12242] ? __import_iovec+0x5f2/0x850 [ 888.768025][T12242] ? import_iovec+0x73/0xa0 [ 888.772590][T12242] ___sys_sendmsg+0x2a6/0x360 [ 888.777650][T12242] ? __sys_sendmsg+0x2a0/0x2a0 [ 888.782810][T12242] __se_sys_sendmsg+0x1c2/0x2b0 [ 888.788216][T12242] ? __x64_sys_sendmsg+0x80/0x80 [ 888.793291][T12242] ? lockdep_hardirqs_on+0x98/0x150 [ 888.798881][T12242] do_syscall_64+0x55/0xb0 [ 888.803428][T12242] ? clear_bhb_loop+0x40/0x90 [ 888.808311][T12242] ? clear_bhb_loop+0x40/0x90 [ 888.813631][T12242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 888.820502][T12242] RIP: 0033:0x7f1eb2f9ce59 [ 888.825139][T12242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.846029][T12242] RSP: 002b:00007f1eb11f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 888.854730][T12242] RAX: ffffffffffffffda RBX: 00007f1eb3215fa0 RCX: 00007f1eb2f9ce59 [ 888.862888][T12242] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 888.870967][T12242] RBP: 00007f1eb3032d6f R08: 0000000000000000 R09: 0000000000000000 [ 888.879048][T12242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.888336][T12242] R13: 00007f1eb3216038 R14: 00007f1eb3215fa0 R15: 00007ffff993c128 [ 888.896706][T12242] [ 888.900041][T12242] Kernel Offset: disabled [ 888.904593][T12242] Rebooting in 86400 seconds..