last executing test programs: 13m23.620439127s ago: executing program 3 (id=15): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_pidfd_open(r3, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x2aa}, 0x0, 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) add_key$user(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000340)="e1b78d1d6b6ed704a65c8dce607e536b7f9553b5138864138fa46056d0f502bf40bfd36efb0d5e2b69d67922068102ed97ab30a25e3b9f81f136935e01a10ab738bfa3509397518f13295c0ec567bda2ba9086790aef93daa45e9f77f05f167bf28f26b20e4440dd498e8f1d797de74df2bdcec4d55d0f92df2eb7693e0ad78012bf2b39dd920d4d", 0x88, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf6bf531d9ec214627c11430c1", 0x10) 13m21.402680096s ago: executing program 3 (id=16): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r3 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r3, 0x82000000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000002c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6800) ioprio_get$uid(0x3, r5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206010300000000000000000000fffd0e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008001e40ffffffff05000500020000000500"], 0x60}}, 0x0) 13m18.275615541s ago: executing program 3 (id=23): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB='quota,iocharset=cp437,noquota,errors=continue,discard=0x00000\x00\x00000000004,errors=continue,quota,discard,grpquota,\x00'], 0x1, 0x60b9, &(0x7f0000013cc0)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x80800) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r4, &(0x7f0000004740)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xd5, 0x0, 0x1}]}}}], 0x18}}], 0x1, 0x44008004) write$binfmt_misc(r4, &(0x7f0000000300), 0xfdef) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r5, &(0x7f0000000000)=""/49, 0x31) 13m15.233761513s ago: executing program 3 (id=25): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r6 = io_uring_setup(0x138a, &(0x7f00000006c0)={0x0, 0x40cf, 0x1, 0x40000007, 0x15f}) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f00000001c0), 0x5f) getuid() statx(r2, &(0x7f0000000180)='./file1/../file0\x00', 0x4000, 0x100, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000040)={0x25, 0x0, 0x0}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0) r7 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r7, 0xc, 0x0, 0x0) 13m6.06130367s ago: executing program 3 (id=33): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, 0x0, 0x40000) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7ffc}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x200}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffff00000000e25ccfc4e4f8119ab091e6d9000088a817008100400086dd67b2c5ac00ffffffffffff00012001000000d223ddb47dff00000000000000000000014e234e2204019078f2fd5ecd3b6b910000000000000000000000cc7d6281817297ef0082d56565581cea0ae1ee836111a4743cbd6ed5580dd098f52713a750cc7ea7f845bb565e755ad236ffa21a6ab0b0a273394899d3b2a087a5d45c51c73a22e85aee9a266bcab1"], 0x4e) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r6, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @null, 0x5, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r8, &(0x7f0000000280)={{0x3, @default, 0x1001}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) 13m4.22310749s ago: executing program 3 (id=38): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27a99fdd470f5961}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000001, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0x2, 0x0, 0x0, 0x82) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x1, 0x40024b}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 13m1.907991882s ago: executing program 32 (id=38): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27a99fdd470f5961}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000001, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0x2, 0x0, 0x0, 0x82) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x1, 0x40024b}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 16.882431289s ago: executing program 4 (id=1155): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) socket(0x2, 0x3, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb0300050000"], 0x50}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 15.640370204s ago: executing program 4 (id=1156): fsopen(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0xc54c295c) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x41) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2842, 0x0) ioctl$RTC_ALM_READ(r3, 0x40187013, &(0x7f0000000000)) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x7, 0x2000, 0xffffffffffffffef, 0x7d, 0xfffffffffffffffc, 0x8000, 0xf, 0xfffffffffffff942}, 0x0, &(0x7f00000002c0)={0x3fe, 0x3ffffff, 0x397e, 0x9, 0x7fffffffffffffff, 0x4000000000f, 0x2, 0x7fffffffffffffff}, 0x0, 0x0) r4 = syz_open_dev$MSR(0x0, 0x32, 0x0) read$msr(r4, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000000c0)) 12.926198307s ago: executing program 4 (id=1160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), 0x0, &(0x7f0000000180)) io_uring_enter(r3, 0xeed, 0xeed, 0x1, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r2, r4, 0x0, 0x6) r5 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r9, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) sendto$inet(r7, &(0x7f0000000300)="425ed2", 0x3, 0x1, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) 12.320406664s ago: executing program 2 (id=1161): userfaultfd(0x801) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x1acc02, 0x148, 0x158, 0x10, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0xf0, 0x158, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@addrtype1={{0x28}, {0x445, 0x18, 0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x5, 0xfff6, 0x8, 0x9, 'syz1\x00', 'syz0\x00', {0x470}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f00000000c0)={0x8, 0x5, 0x8, 0xba, 0x8, "837c73ba17582ccac16653f2ba2e59abed4afd", 0x3, 0xe92}) r4 = socket$inet(0x2, 0x2, 0x1) setrlimit(0xd, &(0x7f0000000040)={0xfc7, 0x40}) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x2004000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) 11.941718074s ago: executing program 2 (id=1162): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20008044, &(0x7f00000001c0)={0xa, 0x2, 0x7, @loopback, 0xfc47}, 0x1c) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 11.847430967s ago: executing program 4 (id=1163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(0x0) socket$inet(0x2b, 0x801, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r4 = epoll_create1(0x0) fcntl$dupfd(r4, 0x25, 0xffffffffffffffff) r5 = io_uring_setup(0x4d3f, &(0x7f0000000140)={0x0, 0xb18d, 0x8, 0x3, 0x105}) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x14, &(0x7f0000000400), 0x0) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") 9.249225278s ago: executing program 2 (id=1164): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) socket(0x2, 0x3, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb03000500000000"], 0x50}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 8.686834313s ago: executing program 4 (id=1165): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$rds(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) setitimer(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) r6 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, 0x0, 0x1) syz_emit_vhci(&(0x7f0000001480)=ANY=[@ANYBLOB="02c9"], 0x11) socket$nl_route(0x10, 0x3, 0x0) 8.323944393s ago: executing program 1 (id=1167): openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r0 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) write$uinput_user_dev(r2, &(0x7f0000000cc0)={'syz1\x00', {0xfff7, 0x2, 0x249, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x0, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x81, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0xef8, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0x10000, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x4, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x3, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8d0, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x5, 0xdab, 0x6, 0x4, 0x14000, 0xfffffffe, 0x9]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x80000007, 0x800, 0x0, 0x9, 0x4, 0x401, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xc000000b}) signalfd4(r2, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000140), 0x0, 0xffffffffffffffff) 6.571484911s ago: executing program 1 (id=1168): fsopen(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0xc54c295c) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x41) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2842, 0x0) ioctl$RTC_ALM_READ(r3, 0x40187013, &(0x7f0000000000)) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x7, 0x2000, 0xffffffffffffffef, 0x7d, 0xfffffffffffffffc, 0x8000, 0xf, 0xfffffffffffff942}, 0x0, &(0x7f00000002c0)={0x3fe, 0x3ffffff, 0x397e, 0x9, 0x7fffffffffffffff, 0x4000000000f, 0x2, 0x7fffffffffffffff}, 0x0, 0x0) r4 = syz_open_dev$MSR(0x0, 0x32, 0x0) read$msr(r4, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000000c0)) 6.564945911s ago: executing program 0 (id=1176): openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r0 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) write$uinput_user_dev(r2, &(0x7f0000000cc0)={'syz1\x00', {0xfff7, 0x2, 0x249, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x0, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x81, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0xef8, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0x10000, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x4, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x3, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8d0, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x5, 0xdab, 0x6, 0x4, 0x14000, 0xfffffffe, 0x9]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x80000007, 0x800, 0x0, 0x9, 0x4, 0x401, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xc000000b}) signalfd4(r2, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000140), 0x0, 0xffffffffffffffff) 5.388321703s ago: executing program 0 (id=1169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, r5, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0xfffffcd1, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4800) syz_clone(0x80e1280, &(0x7f0000000300)="9e920a23254f1e8e10bc2525225d1be304e664460c7294865830d05532a786006f797def105426ddfa6719122b851c3761852017b5a5f6cc3f976f82bb", 0x3d, 0x0, &(0x7f0000000180), &(0x7f0000000540)) close(r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1}]}) write(0xffffffffffffffff, &(0x7f0000000280)='s', 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') 4.309423433s ago: executing program 0 (id=1170): bind$alg(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000001600), 0x0, 0x0, 0x0, 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x26022, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0x70000, @private1={0xfc, 0x1, '\x00', 0x2}, 0x803}}, 0x3, 0x2, 0x8, 0x80000001, 0xe6, 0x7, 0x84}, 0x9c) mkdir(&(0x7f0000000000)='./bus\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) readv(r0, &(0x7f0000000080), 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r3, &(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x30, 0x3, 0x40}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r4, &(0x7f00000001c0)=0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r5 = add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) keyctl$revoke(0x3, r5) 4.309192013s ago: executing program 1 (id=1171): userfaultfd(0x801) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x1acc02, 0x148, 0x158, 0x10, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0xf0, 0x158, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@addrtype1={{0x28}, {0x445, 0x18, 0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x5, 0xfff6, 0x8, 0x9, 'syz1\x00', 'syz0\x00', {0x470}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f00000000c0)={0x8, 0x5, 0x8, 0xba, 0x8, "837c73ba17582ccac16653f2ba2e59abed4afd", 0x3, 0xe92}) r4 = socket$inet(0x2, 0x2, 0x1) setrlimit(0xd, &(0x7f0000000040)={0xfc7, 0x40}) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x2004000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) 4.308964783s ago: executing program 4 (id=1172): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x1) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) ioprio_set$pid(0x2, 0x0, 0x6000) fsetxattr$security_capability(r0, &(0x7f00000000c0), &(0x7f00000001c0)=@v1={0x1000000, [{0x5c, 0x7}]}, 0xc, 0x2) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2b) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000180)=0x4) 4.009061431s ago: executing program 2 (id=1173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x6, &(0x7f00000001c0)={[0x7]}, 0xffffffffffffff63) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_DATA_TYPE={0xfffffffffffffcd7, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x20050800) ioctl$LOOP_SET_STATUS(r2, 0x1260, &(0x7f0000000380)={0x0, {}, 0x2000000000000000, {}, 0xdb03, 0x5, 0xc, 0x4, "edf0c98dd46e2f433e157c11b61fd76e031f98e8aad01ccba893d22c6ca42d0e22404919797d9893631da439ace17384471651e41baa61a7fc47257802d43f31", "feb09f79899ce11f40e6932779d1f45df1ae19f87439dac78295c165d48aff1f", [0x3, 0x6]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) setfsuid(0xffffffffffffffff) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x33}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x2}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000200)) r4 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r5 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x20000a, 0x20002f6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$unix(r4, &(0x7f0000000ac0)={&(0x7f0000000300)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000440)="6d490959870c222fdf4021d5f8f268766392d4660fceb77e3b2d6007", 0x1c}, {&(0x7f0000000480)="def55889fabfd3a8059aa9e18abbb6a248", 0x11}, {&(0x7f00000004c0)="a2fa69aa1e38fa1ed7633fa1e24dae8cf723e4081324b2d4f5cb60ade7ad295afa90c4a8f362efa89a6dc78196890c4af29f790e989678cc039b790174b7bb087989299f42bd797211869ef86a12fa8041c392593b33da18d4ea93d128b1aaba83d96d660c7c72573bef6a961fde8b27b4dc06335b78eee39658c0e5fb582729a7777bfa5925639166058f834c1f07a30db62f4356fa1e56c9a0029dba54e3f0f13041897c94104a39bd175e5859258729c2d3907574a42139107cb1e3c8fca1254852866896712db2ae", 0xca}, {&(0x7f00000005c0)="3931c94e07a8a42216db165c56358f34b537dcf880fe82301108ee0122da2273efb97fc1e2ff5ee725d5cecfd558de", 0x2f}, {&(0x7f0000000600)="46c77daac6b09e49ae40263111ad8d78a9ca80bfb20b2aaedc2cb5137e1eb1fc442d62bb9636afe0bc29b217545d9d08182c6b5658b0b0872adbb4a78da9ced6f83ac7edc5547441202d9de11aa584377bea472bb21d6a5070a04230c785d64609c2b2ccb011b272b0e78dbba879d980e31b57040c211703a1fd19254c2b07b64fbb0069b1e824fe9edf054767e2735b10", 0x91}, {&(0x7f00000006c0)="d25c95d952ce6cca824165efd60c028fa3a70a41617c3fe6f23cf35a26055341d95f480171254f9b2db63419697d96b61b443fdc79d0898a5a52c04f66c812", 0x3f}, {&(0x7f0000000700)="f92f66", 0x3}, {&(0x7f0000000840)="5937cd417a466f700f6d9119a3c6c2beb213b66f4e2c6404c3d781fa95c4888c33db121c99578fc3d754d8c2d24391684aafc4e57fa818aee8137b583c5fe6ba2d1ad68202528de2e1eb6ad0b125a87bf48243d1aa3c30721471dc41c32279293253f69213ec3eff5d4a5a68b5976a4ad5d6f3a19a353098e38c6f60f790dc82fdf333c3730d2c34c6421d24666ca3deae3300a103527774a373a11a4b54553c3f03e5cad5bbd013a5b78fd0a5999326c1e2c2bec9442a09f4a69d71af65a33fd1f46ddc5136ad627b0537aeae3d613df334eb1f73b07a689c2019627d50e7d606", 0xe1}, {&(0x7f0000000940)="0e020c879c514e2c97cae5", 0xb}, {0x0}], 0xa, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) close(r1) 3.586096962s ago: executing program 0 (id=1174): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000002280), &(0x7f00000022c0)=0x10, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f00000003c0)}) socketpair(0x1, 0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x106f) 3.558970913s ago: executing program 1 (id=1175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x6, &(0x7f00000001c0)={[0x7]}, 0xffffffffffffff63) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_DATA_TYPE={0xfffffffffffffcd7, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x20050800) ioctl$LOOP_SET_STATUS(r2, 0x1260, &(0x7f0000000380)={0x0, {}, 0x2000000000000000, {}, 0xdb03, 0x5, 0xc, 0x4, "edf0c98dd46e2f433e157c11b61fd76e031f98e8aad01ccba893d22c6ca42d0e22404919797d9893631da439ace17384471651e41baa61a7fc47257802d43f31", "feb09f79899ce11f40e6932779d1f45df1ae19f87439dac78295c165d48aff1f", [0x3, 0x6]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x33}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x2}) 1.939003807s ago: executing program 1 (id=1177): r0 = memfd_secret(0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000a, 0x11, r0, 0x3000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000d, 0x110, 0xffffffffffffffff, 0x83000000) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ppoll(&(0x7f0000000100)=[{r1, 0x108}], 0x1, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080)) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) ftruncate(r0, 0x51a9497) mkdirat(0xffffffffffffff9c, 0x0, 0x82) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0xe2d) 1.808588061s ago: executing program 0 (id=1178): openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r0 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) write$uinput_user_dev(r2, &(0x7f0000000cc0)={'syz1\x00', {0xfff7, 0x2, 0x249, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x0, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x81, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0xef8, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0x10000, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x4, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x3, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8d0, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x5, 0xdab, 0x6, 0x4, 0x14000, 0xfffffffe, 0x9]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x80000007, 0x800, 0x0, 0x9, 0x4, 0x401, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xc000000b}) signalfd4(r2, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000140), 0x0, 0xffffffffffffffff) 1.780711282s ago: executing program 2 (id=1179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, r5, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0xfffffcd1, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4800) syz_clone(0x80e1280, &(0x7f0000000300)="9e920a23254f1e8e10bc2525225d1be304e664460c7294865830d05532a786006f797def105426ddfa6719122b851c3761852017b5a5f6cc3f976f82bb", 0x3d, 0x0, &(0x7f0000000180), &(0x7f0000000540)) close(r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1}]}) write(0xffffffffffffffff, &(0x7f0000000280)='s', 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') 801.569169ms ago: executing program 2 (id=1180): r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x27) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x20000000000006) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c098}, 0x80c0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4001850}, 0x24000840) r4 = socket$kcm(0xa, 0x922000000003, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x24040840) 591.95µs ago: executing program 1 (id=1181): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x2}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r4, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000001c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001, 0xffff7fffffffff81, 0xfffffffffffffffe}) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 0s ago: executing program 0 (id=1182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) socket(0x2, 0x3, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb03000500000000"], 0x50}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) kernel console output (not intermixed with test programs): ackup interface [ 139.575426][ T5889] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.137335][ T5889] .` (unregistering): Released all slaves [ 140.240394][ T6029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.250742][ T6029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.297567][ T6029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.348704][ T6192] warning: `syz.0.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 141.726180][ T6029] hsr_slave_0: entered promiscuous mode [ 141.781948][ T6029] hsr_slave_1: entered promiscuous mode [ 141.809417][ T6029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.828128][ T6029] Cannot create hsr debugfs directory [ 141.910835][ T6213] netlink: 80 bytes leftover after parsing attributes in process `syz.0.73'. [ 146.267527][ T6029] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 146.367261][ T6029] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 146.812527][ T6029] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 146.845136][ T6247] loop0: detected capacity change from 0 to 16 [ 146.872993][ T6247] erofs: (device loop0): erofs_read_inode: bogus i_mode (177777) @ nid 36 [ 146.929908][ T6029] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 148.538193][ T6256] loop1: detected capacity change from 0 to 16 [ 148.700390][ T6256] erofs: (device loop1): mounted with root inode @ nid 36. [ 148.727986][ T6029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.792111][ T6029] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.080869][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.088140][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.324812][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.332167][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.955441][ T6029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.301057][ T6314] loop0: detected capacity change from 0 to 512 [ 154.312710][ T6314] EXT4-fs: Ignoring removed nobh option [ 154.468102][ T6314] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.89: iget: bad i_size value: 38620345925642 [ 154.572182][ T6314] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.89: couldn't read orphan inode 15 (err -117) [ 154.660143][ T6324] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 154.708552][ T6324] input: syz0 as /devices/virtual/input/input5 [ 154.723501][ T6314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.845801][ T6029] veth0_vlan: entered promiscuous mode [ 155.076758][ T6330] ptrace attach of "./syz-executor exec"[5760] was attempted by "./syz-executor exec"[6330] [ 155.742211][ T6029] veth1_vlan: entered promiscuous mode [ 155.795026][ T6029] veth0_macvtap: entered promiscuous mode [ 155.808709][ T6029] veth1_macvtap: entered promiscuous mode [ 155.965449][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.007810][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.021297][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.128361][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.181401][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.225476][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.246530][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.258061][ T6029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.273841][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.289954][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.381733][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.425918][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.493864][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.954755][ T6349] netlink: 80 bytes leftover after parsing attributes in process `syz.2.94'. [ 156.965434][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.000428][ T6029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.585180][ T6353] pim6reg: entered allmulticast mode [ 157.625846][ T6029] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.659472][ T6029] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.727377][ T6029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.729008][ T6358] loop0: detected capacity change from 0 to 256 [ 157.749350][ T6358] exfat: Deprecated parameter 'utf8' [ 157.756938][ T6358] exFAT-fs (loop0): bogus number of FAT structure [ 157.763677][ T6358] exFAT-fs (loop0): failed to read boot sector [ 157.771791][ T6358] exFAT-fs (loop0): failed to recognize exfat type [ 157.781341][ T6029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.097608][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.158557][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.218039][ T6366] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 159.954710][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.023003][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.318974][ T6378] netlink: 'syz.2.98': attribute type 10 has an invalid length. [ 161.331384][ T6378] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 162.574702][ T6388] overlayfs: failed to resolve './file1': -2 [ 162.634934][ T6390] xt_hashlimit: size too large, truncated to 1048576 [ 165.761334][ T6403] loop2: detected capacity change from 0 to 32768 [ 165.905805][ T6403] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 166.456257][ T6418] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 166.477897][ T6403] XFS (loop2): Ending clean mount [ 166.546689][ T6403] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 167.617980][ T6428] loop4: detected capacity change from 0 to 32768 [ 167.656195][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 167.695094][ T6430] bridge0: port 3(geneve1) entered blocking state [ 167.703623][ T6430] bridge0: port 3(geneve1) entered disabled state [ 167.714766][ T6430] geneve1: entered allmulticast mode [ 167.728453][ T6430] geneve1: entered promiscuous mode [ 167.737276][ T6430] bridge0: port 3(geneve1) entered blocking state [ 167.744209][ T6430] bridge0: port 3(geneve1) entered forwarding state [ 167.882584][ T6428] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.107 (6428) [ 168.382100][ T6428] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 168.392747][ T6428] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 168.401565][ T6428] BTRFS info (device loop4): enabling disk space caching [ 168.408623][ T6428] BTRFS info (device loop4): force clearing of disk cache [ 168.424509][ T6428] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 168.434420][ T6428] BTRFS info (device loop4): use zstd compression, level 3 [ 168.441916][ T6428] BTRFS info (device loop4): disk space caching is enabled [ 168.638297][ T6428] BTRFS info (device loop4): enabling ssd optimizations [ 168.646906][ T6428] BTRFS info (device loop4): auto enabling async discard [ 168.670524][ T6428] BTRFS info (device loop4): rebuilding free space tree [ 168.748122][ T6428] BTRFS info (device loop4): disabling free space tree [ 168.755229][ T6428] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 168.765624][ T6428] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 170.720775][ T6463] loop1: detected capacity change from 0 to 512 [ 170.892736][ T6463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.926378][ T6463] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.171507][ T6471] loop0: detected capacity change from 0 to 16 [ 171.273556][ T6471] erofs: (device loop0): mounted with root inode @ nid 36. [ 171.329548][ T6471] syz.0.103: attempt to access beyond end of device [ 171.329548][ T6471] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 171.355661][ T6471] syz.0.103: attempt to access beyond end of device [ 171.355661][ T6471] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 171.386985][ T6471] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 171.547237][ T6471] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 171.560429][ T6471] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 171.586677][ T27] audit: type=1800 audit(1777512739.736:3): pid=6471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.103" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 171.660060][ T6029] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 172.404365][ T6477] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 172.976023][ T6478] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 173.312705][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.462989][ T5769] Bluetooth: hci3: command tx timeout [ 175.035764][ T6511] bridge_slave_1: left allmulticast mode [ 175.041608][ T6511] bridge_slave_1: left promiscuous mode [ 175.048632][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.141949][ T6511] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 176.256911][ T6524] bridge0: port 4(erspan0) entered blocking state [ 176.264236][ T6524] bridge0: port 4(erspan0) entered disabled state [ 176.281763][ T6524] erspan0: entered allmulticast mode [ 176.811490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 177.518108][ T6524] erspan0: entered promiscuous mode [ 178.319853][ T6524] bridge0: port 4(erspan0) entered blocking state [ 178.326466][ T6524] bridge0: port 4(erspan0) entered forwarding state [ 178.348356][ T6539] erspan0: left allmulticast mode [ 178.353620][ T6539] erspan0: left promiscuous mode [ 178.361483][ T6539] bridge0: port 4(erspan0) entered disabled state [ 179.665769][ T6560] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 184.739143][ T6580] loop4: detected capacity change from 0 to 2048 [ 185.126352][ T6580] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 185.513497][ T6592] loop2: detected capacity change from 0 to 512 [ 185.553637][ T6592] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 185.581782][ T6590] loop1: detected capacity change from 0 to 512 [ 185.589133][ T6590] EXT4-fs: Ignoring removed orlov option [ 185.593663][ T6580] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 185.594845][ T6590] EXT4-fs: Ignoring removed bh option [ 185.609405][ T6590] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 185.629582][ T6590] EXT4-fs (loop1): orphan cleanup on readonly fs [ 185.645036][ T6590] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.130: bg 0: block 248: padding at end of block bitmap is not set [ 185.664472][ T6580] UDF-fs: Scanning with blocksize 512 failed [ 185.681629][ T6590] Quota error (device loop1): write_blk: dquota write failed [ 185.689624][ T6590] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 185.699702][ T6590] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.130: Failed to acquire dquot type 1 [ 185.729759][ T6590] EXT4-fs (loop1): 1 truncate cleaned up [ 185.740617][ T6590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.777099][ T6590] EXT4-fs (loop1): shut down requested (2) [ 185.851291][ T6580] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.919910][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.079052][ T6603] loop2: detected capacity change from 0 to 22 [ 186.108662][ T6603] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 186.171811][ T6610] loop1: detected capacity change from 0 to 8 [ 186.203927][ T6603] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 186.236640][ T6610] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 186.287229][ T6610] cramfs: empty filesystem [ 186.297264][ T5754] udevd[5754]: incorrect cramfs checksum on /dev/loop1 [ 187.482981][ T6614] sctp: failed to load transform for md5: -2 [ 187.604973][ T5754] udevd[5754]: incorrect cramfs checksum on /dev/loop1 [ 187.687861][ T5754] udevd[5754]: incorrect cramfs checksum on /dev/loop1 [ 187.725639][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 187.725715][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.725754][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.872316][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.872339][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.201266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 189.382466][ T5753] udevd[5753]: incorrect cramfs checksum on /dev/loop1 [ 189.946594][ T6635] loop2: detected capacity change from 0 to 4096 [ 190.027061][ T6635] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 190.027146][ T6635] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 190.028582][ T6635] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 190.028688][ T6635] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 190.028943][ T6635] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 190.038899][ T6635] ntfs: volume version 3.1. [ 190.060426][ T6635] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 190.061446][ T6635] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 190.065245][ T6635] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 190.797876][ T6610] tty tty23: ldisc open failed (-12), clearing slot 22 [ 194.051039][ T6653] loop1: detected capacity change from 0 to 32768 [ 194.478329][ T6653] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 194.641985][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.711127][ T6653] XFS (loop1): Ending clean mount [ 194.734734][ T6653] XFS (loop1): Quotacheck needed: Please wait. [ 194.848261][ T6676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.136'. [ 194.896511][ T6676] loop4: detected capacity change from 0 to 512 [ 195.411691][ T6676] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 195.420866][ T6653] XFS (loop1): Quotacheck: Done. [ 196.231327][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 196.231341][ T27] audit: type=1804 audit(1777512764.346:4): pid=6683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.140" name="/newroot/33/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=1 errno=0 [ 196.832372][ T5760] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 197.807358][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.822289][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.426273][ T6699] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 198.821838][ T6709] loop1: detected capacity change from 0 to 16 [ 198.830435][ T6709] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 199.951125][ T6713] netlink: 68 bytes leftover after parsing attributes in process `syz.4.149'. [ 200.010432][ T6713] loop4: detected capacity change from 0 to 512 [ 200.836980][ T6713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.123607][ T6029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.556430][ T6729] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 201.843120][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 201.872441][ T6730] dns_resolver: Unsupported server list version (6) [ 202.041412][ T5082] Bluetooth: hci3: command 0x0406 tx timeout [ 202.047576][ T5082] Bluetooth: hci1: command 0x0406 tx timeout [ 202.055535][ T5082] Bluetooth: hci2: command 0x0406 tx timeout [ 202.492365][ T6735] loop0: detected capacity change from 0 to 32768 [ 202.607697][ T6735] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 202.808325][ T6745] loop1: detected capacity change from 0 to 32768 [ 202.909019][ T6735] XFS (loop0): Ending clean mount [ 202.921557][ T6735] XFS (loop0): Quotacheck needed: Please wait. [ 203.066188][ T6735] XFS (loop0): Quotacheck: Done. [ 203.388643][ T6765] read_mapping_page failed! [ 203.393323][ T6765] ERROR: (device loop1): txCommit: [ 203.393323][ T6765] [ 203.786753][ T27] audit: type=1804 audit(1777512772.056:5): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.152" name="/newroot/46/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=1 errno=0 [ 203.829994][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.856218][ T6760] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 203.862773][ T6760] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 203.995463][ T27] audit: type=1804 audit(1777512772.096:6): pid=6766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.152" name="/newroot/46/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=1 errno=0 [ 204.076515][ T6760] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.082904][ T6760] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 204.101330][ T5861] read_mapping_page failed! [ 204.114475][ T6760] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.118190][ T5763] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 204.120577][ T6760] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 204.135376][ T5861] ERROR: (device loop1): txCommit: [ 204.135376][ T5861] [ 204.177831][ T5861] jfs_write_inode: jfs_commit_inode failed! [ 204.941511][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 206.595536][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 206.601688][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 207.041313][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 208.748993][ T6796] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 208.768263][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 208.776349][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 209.217912][ T6804] loop4: detected capacity change from 0 to 40427 [ 209.583502][ T6810] ALSA: mixer_oss: invalid OSS volume '' [ 209.782531][ T6804] F2FS-fs (loop4): invalid crc value [ 209.844233][ T6804] F2FS-fs (loop4): Found nat_bits in checkpoint [ 209.942842][ T6804] F2FS-fs (loop4): Start checkpoint disabled! [ 209.995344][ T6804] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 210.565648][ T6827] netlink: 180 bytes leftover after parsing attributes in process `syz.1.164'. [ 211.769075][ T48] kworker/u4:3: attempt to access beyond end of device [ 211.769075][ T48] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 211.827401][ T48] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 211.852902][ T48] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 215.349953][ T6869] loop4: detected capacity change from 0 to 512 [ 215.762732][ T6872] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 216.558289][ T6877] loop0: detected capacity change from 0 to 32768 [ 216.642006][ T6877] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 216.734958][ T6877] XFS (loop0): Ending clean mount [ 216.796804][ T6877] XFS (loop0): Quotacheck needed: Please wait. [ 217.116598][ T6898] loop4: detected capacity change from 0 to 128 [ 217.153759][ T6898] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 217.196234][ T6877] XFS (loop0): Quotacheck: Done. [ 217.516512][ T6897] ipip0: entered promiscuous mode [ 217.521689][ T6897] ipip0: entered allmulticast mode [ 217.974954][ T27] audit: type=1800 audit(1777512785.916:7): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.174" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 218.016479][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.081295][ T5751] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 218.153471][ T5763] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 220.741221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 221.264992][ T6915] NILFS (nullb0): couldn't find nilfs on the device [ 222.148682][ T6921] capability: warning: `syz.4.179' uses deprecated v2 capabilities in a way that may be insecure [ 222.720150][ T6930] Invalid ELF header len 8 [ 223.260301][ T6921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.179'. [ 223.532459][ T6936] loop0: detected capacity change from 0 to 8 [ 224.019705][ T6946] netlink: 'syz.0.182': attribute type 10 has an invalid length. [ 224.220071][ T6946] netlink: 40 bytes leftover after parsing attributes in process `syz.0.182'. [ 224.274492][ T6946] batman_adv: batadv0: Adding interface: vlan1 [ 224.280716][ T6946] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.503487][ T6946] batman_adv: batadv0: Interface activated: vlan1 [ 230.586785][ T6977] IPv6: syztnl0: Disabled Multicast RS [ 231.312573][ T6988] loop1: detected capacity change from 0 to 4096 [ 231.325446][ T6988] ntfs: (device loop1): parse_options(): Unrecognized mount option vxcan0. [ 233.132157][ T7010] loop1: detected capacity change from 0 to 4096 [ 234.081404][ T7010] ntfs3: loop1: Primary boot: unsupported bytes per index 8192. [ 234.092176][ T7010] ntfs3: loop1: try to read out of volume at offset 0x1ffe00 [ 235.841244][ T6963] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 236.691695][ T7021] loop1: detected capacity change from 0 to 4096 [ 236.699489][ T7021] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 236.780539][ T7020] loop4: detected capacity change from 0 to 2048 [ 236.829225][ T7020] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.504369][ T7052] IPv6: syztnl0: Disabled Multicast RS [ 241.194948][ T7069] Invalid ELF header type: 3 != 1 [ 241.824734][ T7070] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 242.647483][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 244.542896][ T7089] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 246.819361][ T7121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.214'. [ 248.895654][ T42] IPVS: starting estimator thread 0... [ 249.001456][ T7128] IPVS: using max 19 ests per chain, 45600 per kthread [ 249.179855][ T7130] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 249.705881][ T7135] loop1: detected capacity change from 0 to 128 [ 250.386971][ T7135] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 250.524512][ T7135] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 250.991956][ T7151] dns_resolver: Unsupported server list version (6) [ 252.402206][ T5760] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.960376][ T7166] loop2: detected capacity change from 0 to 128 [ 253.146750][ T7168] IPv6: syztnl0: Disabled Multicast RS [ 253.346096][ T7166] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 255.446013][ T6992] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 255.559885][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.293230][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.467312][ T7184] xt_TPROXY: Can be used only with -p tcp or -p udp [ 257.679157][ T7191] loop4: detected capacity change from 0 to 8 [ 257.717735][ T7191] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 257.822451][ T7191] cramfs: empty filesystem [ 257.836742][ T6992] udevd[6992]: incorrect cramfs checksum on /dev/loop4 [ 259.656511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 260.473893][ T6963] udevd[6963]: incorrect cramfs checksum on /dev/loop4 [ 260.486619][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'. [ 260.608521][ T7191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.616893][ T7191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.325439][ T7191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.389138][ T7191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.717709][ T6963] udevd[6963]: incorrect cramfs checksum on /dev/loop4 [ 262.226933][ T7231] loop2: detected capacity change from 0 to 128 [ 262.306329][ T7231] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.364261][ T7231] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 263.226602][ T5761] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 264.412854][ T7258] overlayfs: failed to clone upperpath [ 266.182155][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.191326][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.218724][ T7271] bridge0: port 3(geneve1) entered disabled state [ 266.825939][ T7273] loop0: detected capacity change from 0 to 128 [ 267.878955][ T7273] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 268.487908][ T6963] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 268.550855][ T7272] ipip0: entered promiscuous mode [ 268.555932][ T7272] ipip0: entered allmulticast mode [ 270.359484][ T7283] loop0: detected capacity change from 0 to 2048 [ 270.405302][ T7283] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.554664][ T7290] loop2: detected capacity change from 0 to 4096 [ 270.792969][ T7290] ntfs3: loop2: Primary boot: unsupported bytes per index 8192. [ 270.802203][ T7290] ntfs3: loop2: try to read out of volume at offset 0x1ffe00 [ 272.011987][ T7209] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 273.619378][ T7290] loop2: detected capacity change from 0 to 4096 [ 273.634509][ T7290] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 274.232343][ T7306] loop0: detected capacity change from 0 to 512 [ 274.245643][ T7306] EXT4-fs: Ignoring removed orlov option [ 274.251384][ T7306] EXT4-fs: Ignoring removed bh option [ 274.280166][ T7306] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.993861][ T7306] EXT4-fs (loop0): orphan cleanup on readonly fs [ 275.018958][ T7306] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.241: bg 0: block 248: padding at end of block bitmap is not set [ 275.055277][ T7306] Quota error (device loop0): write_blk: dquota write failed [ 275.063877][ T7306] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 275.076064][ T7306] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.241: Failed to acquire dquot type 1 [ 275.106006][ T7306] EXT4-fs (loop0): 1 truncate cleaned up [ 275.152968][ T7306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.222928][ T7304] EXT4-fs (loop0): shut down requested (2) [ 275.345699][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.068895][ T7313] loop1: detected capacity change from 0 to 512 [ 276.125214][ T7313] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 276.151198][ T7314] loop0: detected capacity change from 0 to 8 [ 276.178839][ T7314] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 276.383319][ T7314] cramfs: empty filesystem [ 276.801351][ T7209] udevd[7209]: incorrect cramfs checksum on /dev/loop0 [ 276.890484][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'. [ 276.928491][ T7314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.943210][ T7314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.172036][ T7314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.190954][ T7314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.651946][ T7314] batman_adv: batadv0: Interface deactivated: vlan1 [ 277.663166][ T7314] batman_adv: batadv0: Removing interface: vlan1 [ 278.005950][ T6963] udevd[6963]: incorrect cramfs checksum on /dev/loop0 [ 278.673634][ T7346] loop1: detected capacity change from 0 to 128 [ 278.817029][ T7346] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 278.857995][ T7344] ipip0: entered promiscuous mode [ 278.863153][ T7344] ipip0: entered allmulticast mode [ 280.105683][ T7357] input: syz0 as /devices/virtual/input/input7 [ 280.265915][ T7365] capability: warning: `syz.1.254' uses 32-bit capabilities (legacy support in use) [ 280.908997][ T7357] netlink: 140 bytes leftover after parsing attributes in process `syz.2.253'. [ 287.141618][ T7408] input: syz0 as /devices/virtual/input/input8 [ 287.420079][ T7412] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 287.908594][ T7421] random: crng reseeded on system resumption [ 288.567327][ T7415] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 288.576273][ T7415] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 288.585368][ T7415] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 288.594248][ T7415] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 288.609366][ T7415] bond2: (slave geneve2): making interface the new active one [ 288.619244][ T7415] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 289.297376][ T7428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.178586][ T7444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.187885][ T7444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.200088][ T5888] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 293.403156][ T5888] usb 5-1: device descriptor read/64, error -71 [ 293.506274][ T1199] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 294.939972][ T5888] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 295.666774][ T5431] veth0_macvtap: left promiscuous mode [ 295.971221][ T7465] tipc: Enabling of bearer rejected, failed to enable media [ 296.493558][ T7471] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 297.823349][ T7499] lo speed is unknown, defaulting to 1000 [ 297.830080][ T7499] lo speed is unknown, defaulting to 1000 [ 297.852282][ T7499] lo speed is unknown, defaulting to 1000 [ 297.892885][ T7499] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 297.986593][ T7499] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 298.125321][ T7499] lo speed is unknown, defaulting to 1000 [ 298.139587][ T7499] lo speed is unknown, defaulting to 1000 [ 298.164425][ T7499] lo speed is unknown, defaulting to 1000 [ 298.179239][ T7499] lo speed is unknown, defaulting to 1000 [ 299.184535][ T7485] ceph: No mds server is up or the cluster is laggy [ 299.274441][ T7485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.709819][ T7517] loop2: detected capacity change from 0 to 8 [ 299.716860][ T7517] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 299.744142][ T7517] cramfs: empty filesystem [ 299.748481][ T6963] udevd[6963]: incorrect cramfs checksum on /dev/loop2 [ 299.780920][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 299.782022][ T6963] udevd[6963]: incorrect cramfs checksum on /dev/loop2 [ 299.790805][ T7517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.838290][ T7517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.257375][ T7517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.431340][ T7517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.567673][ T6963] udevd[6963]: incorrect cramfs checksum on /dev/loop2 [ 300.953097][ T7531] loop2: detected capacity change from 0 to 164 [ 302.775390][ T7546] loop1: detected capacity change from 0 to 2048 [ 304.609433][ T7546] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 305.395923][ T7555] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 306.670381][ T7560] lo speed is unknown, defaulting to 1000 [ 306.676704][ T7560] lo speed is unknown, defaulting to 1000 [ 306.687473][ T7560] lo speed is unknown, defaulting to 1000 [ 306.774273][ T7560] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 306.898643][ T7560] lo speed is unknown, defaulting to 1000 [ 306.998424][ T7560] lo speed is unknown, defaulting to 1000 [ 307.238867][ T7560] lo speed is unknown, defaulting to 1000 [ 307.280093][ T7560] lo speed is unknown, defaulting to 1000 [ 309.451017][ T7585] netlink: 64 bytes leftover after parsing attributes in process `syz.1.292'. [ 312.669735][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 312.747344][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 314.348259][ T7616] NILFS (nullb0): couldn't find nilfs on the device [ 319.547555][ T5774] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 323.822970][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.519985][ T7647] netlink: 'syz.1.309': attribute type 4 has an invalid length. [ 324.531253][ T7647] netlink: 152 bytes leftover after parsing attributes in process `syz.1.309'. [ 325.514785][ T7653] netlink: 180 bytes leftover after parsing attributes in process `syz.0.304'. [ 325.654056][ T7660] ALSA: mixer_oss: invalid OSS volume '' [ 325.702411][ T7647] .`: renamed from bond0 (while UP) [ 326.033147][ T7666] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 328.011120][ T7676] loop0: detected capacity change from 0 to 4096 [ 328.139667][ T7676] ntfs3: loop0: Primary boot: unsupported bytes per index 8192. [ 328.181096][ T7676] ntfs3: loop0: try to read out of volume at offset 0x1ffe00 [ 329.001759][ T7683] Invalid ELF header type: 3 != 1 [ 329.575986][ T7690] siw: device registration error -23 [ 331.182419][ T7707] loop2: detected capacity change from 0 to 8 [ 331.200464][ T7707] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 331.245296][ T7627] udevd[7627]: incorrect cramfs checksum on /dev/loop2 [ 331.307326][ T7627] udevd[7627]: incorrect cramfs checksum on /dev/loop2 [ 331.361928][ T7707] cramfs: empty filesystem [ 331.536273][ T7711] loop4: detected capacity change from 0 to 32768 [ 331.601049][ T7627] udevd[7627]: incorrect cramfs checksum on /dev/loop2 [ 331.660708][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 332.290179][ T7721] read_mapping_page failed! [ 332.294795][ T7721] ERROR: (device loop4): txCommit: [ 332.294795][ T7721] [ 332.847139][ T7626] udevd[7626]: incorrect cramfs checksum on /dev/loop2 [ 333.112638][ T2990] read_mapping_page failed! [ 333.117238][ T2990] ERROR: (device loop4): txCommit: [ 333.117238][ T2990] [ 333.153109][ T2990] jfs_write_inode: jfs_commit_inode failed! [ 335.590421][ T7756] loop4: detected capacity change from 0 to 4096 [ 335.601803][ T7756] ntfs3: loop4: Primary boot: unsupported bytes per index 8192. [ 335.625452][ T7756] ntfs3: loop4: try to read out of volume at offset 0x1ffe00 [ 335.989672][ T7758] loop0: detected capacity change from 0 to 40427 [ 336.663097][ T7758] F2FS-fs (loop0): invalid crc value [ 336.709984][ T7758] F2FS-fs (loop0): Found nat_bits in checkpoint [ 336.762062][ T7758] F2FS-fs (loop0): Start checkpoint disabled! [ 336.775198][ T7758] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 338.117467][ T7772] Invalid ELF header type: 3 != 1 [ 338.831886][ T7775] xt_TPROXY: Can be used only with -p tcp or -p udp [ 339.515884][ T7781] loop2: detected capacity change from 0 to 32768 [ 341.448580][ T7781] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 341.556157][ T995] kworker/u4:6: attempt to access beyond end of device [ 341.556157][ T995] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 341.570691][ T7781] XFS (loop2): Ending clean mount [ 341.582898][ T7781] XFS (loop2): Quotacheck needed: Please wait. [ 342.825219][ T995] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 343.020345][ T7781] XFS (loop2): Quotacheck: Done. [ 343.045124][ T5761] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 343.615284][ T7811] loop2: detected capacity change from 0 to 4096 [ 343.626163][ T7811] ntfs3: loop2: Primary boot: unsupported bytes per index 8192. [ 343.634040][ T7811] ntfs3: loop2: try to read out of volume at offset 0x1ffe00 [ 343.777688][ T7627] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 344.505927][ T7815] loop2: detected capacity change from 0 to 4096 [ 344.525531][ T7815] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 346.050014][ T7830] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 346.708583][ T7831] netlink: 80 bytes leftover after parsing attributes in process `syz.1.333'. [ 348.313033][ T7847] xt_TPROXY: Can be used only with -p tcp or -p udp [ 350.570615][ T7862] netlink: 'syz.1.341': attribute type 1 has an invalid length. [ 350.856496][ T7864] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 350.865524][ T7864] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 350.874558][ T7864] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 350.883446][ T7864] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 350.899277][ T7864] bond0: (slave geneve2): making interface the new active one [ 350.909488][ T7864] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 351.103186][ T7865] loop0: detected capacity change from 0 to 32768 [ 351.669613][ T7870] read_mapping_page failed! [ 351.674311][ T7870] ERROR: (device loop0): txCommit: [ 351.674311][ T7870] [ 352.165855][ T7872] random: crng reseeded on system resumption [ 352.618812][ T12] read_mapping_page failed! [ 352.623396][ T12] ERROR: (device loop0): txCommit: [ 352.623396][ T12] [ 352.638992][ T12] jfs_write_inode: jfs_commit_inode failed! [ 354.828665][ T7888] loop4: detected capacity change from 0 to 16 [ 355.300029][ T7888] erofs: (device loop4): mounted with root inode @ nid 36. [ 357.635435][ T7912] loop4: detected capacity change from 0 to 16 [ 357.687163][ T7912] erofs: (device loop4): mounted with root inode @ nid 36. [ 357.721454][ T7912] syz.4.351: attempt to access beyond end of device [ 357.721454][ T7912] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 357.743666][ T7912] syz.4.351: attempt to access beyond end of device [ 357.743666][ T7912] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 357.758433][ T7912] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 357.827677][ T27] audit: type=1800 audit(1777512919.632:8): pid=7912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.351" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 357.881223][ T7911] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 357.892780][ T7911] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 358.778813][ T7921] loop2: detected capacity change from 0 to 4096 [ 358.790696][ T7921] ntfs: (device loop2): parse_options(): Unrecognized mount option vxcan0. [ 359.891743][ T7926] random: crng reseeded on system resumption [ 360.335091][ T7927] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.343915][ T7927] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.352658][ T7927] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.361362][ T7927] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.518702][ T7927] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.528285][ T7927] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.537350][ T7927] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.546367][ T7927] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.029765][ T7937] loop4: detected capacity change from 0 to 4096 [ 362.435991][ T7937] ntfs3: loop4: Primary boot: unsupported bytes per index 8192. [ 362.443807][ T7937] ntfs3: loop4: try to read out of volume at offset 0x1ffe00 [ 362.732558][ T7928] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.741408][ T7928] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.750177][ T7928] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.759166][ T7928] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.155615][ T7941] loop4: detected capacity change from 0 to 4096 [ 363.466126][ T7941] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 363.515399][ T7928] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.524312][ T7928] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.533382][ T7928] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.544323][ T7928] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.787546][ T7945] netlink: 80 bytes leftover after parsing attributes in process `syz.2.359'. [ 367.480905][ T7966] ptrace attach of "./syz-executor exec"[6029] was attempted by "./syz-executor exec"[7966] [ 368.636722][ T7974] random: crng reseeded on system resumption [ 369.897927][ T7979] loop4: detected capacity change from 0 to 32768 [ 370.134783][ T7982] netlink: 80 bytes leftover after parsing attributes in process `syz.0.364'. [ 370.261586][ T7984] read_mapping_page failed! [ 370.266251][ T7984] ERROR: (device loop4): txCommit: [ 370.266251][ T7984] [ 370.588860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 370.695220][ T1096] read_mapping_page failed! [ 370.704175][ T1096] ERROR: (device loop4): txCommit: [ 370.704175][ T1096] [ 370.769931][ T1096] jfs_write_inode: jfs_commit_inode failed! [ 371.654824][ T7998] netlink: 80 bytes leftover after parsing attributes in process `syz.4.369'. [ 372.193960][ T51] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 375.344003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 376.059444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 376.747396][ T8028] loop2: detected capacity change from 0 to 32768 [ 377.160487][ T8030] read_mapping_page failed! [ 377.165125][ T8030] ERROR: (device loop2): txCommit: [ 377.165125][ T8030] [ 377.613157][ T5889] read_mapping_page failed! [ 377.618001][ T5889] ERROR: (device loop2): txCommit: [ 377.618001][ T5889] [ 377.668430][ T5889] jfs_write_inode: jfs_commit_inode failed! [ 378.995361][ T8040] loop0: detected capacity change from 0 to 32768 [ 379.083040][ T8040] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 379.233424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 379.308321][ T8057] random: crng reseeded on system resumption [ 379.938808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 380.578595][ T8056] netlink: 80 bytes leftover after parsing attributes in process `syz.1.384'. [ 380.880976][ T8040] XFS (loop0): Ending clean mount [ 380.905000][ T8040] XFS (loop0): Quotacheck needed: Please wait. [ 381.301941][ T51] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 381.653318][ T8040] XFS (loop0): Quotacheck: Done. [ 382.650253][ T8072] loop1: detected capacity change from 0 to 4096 [ 382.669254][ T8072] ntfs3: loop1: Primary boot: unsupported bytes per index 8192. [ 382.677115][ T8072] ntfs3: loop1: try to read out of volume at offset 0x1ffe00 [ 383.038207][ T5763] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 384.329716][ T8081] loop1: detected capacity change from 0 to 4096 [ 384.385656][ T8081] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 384.527313][ T8078] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.536462][ T8078] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.545612][ T8078] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.554836][ T8078] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.430595][ T8081] ntfs3: loop1: Failed to read $AttrDef (-4). [ 385.646379][ T8078] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.655326][ T8078] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.664411][ T8078] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.673450][ T8078] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.957917][ T8087] loop2: detected capacity change from 0 to 32768 [ 386.258699][ T8091] read_mapping_page failed! [ 386.263374][ T8091] ERROR: (device loop2): txCommit: [ 386.263374][ T8091] [ 386.674960][ T2990] read_mapping_page failed! [ 386.679520][ T2990] ERROR: (device loop2): txCommit: [ 386.679520][ T2990] [ 386.735175][ T2990] jfs_write_inode: jfs_commit_inode failed! [ 386.802076][ T8084] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.811021][ T8084] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.819757][ T8084] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.828539][ T8084] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.969807][ T8084] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.973110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 386.980753][ T8084] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.997850][ T8084] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.007298][ T8084] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.243733][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.397865][ T8098] random: crng reseeded on system resumption [ 388.808178][ T8104] random: crng reseeded on system resumption [ 389.693195][ T8106] loop4: detected capacity change from 0 to 4096 [ 389.702556][ T8106] NILFS: invalid option "cp=0x0000000000000002": read-only option is not specified [ 390.688646][ T8122] ptrace attach of "./syz-executor exec"[5761] was attempted by "./syz-executor exec"[8122] [ 393.339117][ T8131] ptrace attach of "./syz-executor exec"[5763] was attempted by "./syz-executor exec"[8131] [ 394.440763][ T8137] @: renamed from vlan0 (while UP) [ 395.987931][ T8154] bridge_slave_1: left allmulticast mode [ 395.993821][ T8154] bridge_slave_1: left promiscuous mode [ 396.000412][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.018037][ T8154] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 397.657141][ T8165] random: crng reseeded on system resumption [ 402.001237][ T8198] random: crng reseeded on system resumption [ 402.215472][ T8199] loop0: detected capacity change from 0 to 4096 [ 402.357554][ T8202] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 403.991353][ T8212] bridge_slave_1: left allmulticast mode [ 403.997358][ T8212] bridge_slave_1: left promiscuous mode [ 404.004054][ T8212] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.294446][ T8212] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 406.967086][ T8226] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 410.091109][ T8254] loop1: detected capacity change from 0 to 512 [ 411.445223][ T8254] EXT4-fs (loop1): Test dummy encryption mode enabled [ 411.452111][ T8254] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 411.465229][ T8254] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 411.477393][ T8254] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 411.485767][ T8254] EXT4-fs (loop1): orphan cleanup on readonly fs [ 411.495087][ T8254] EXT4-fs (loop1): 1 orphan inode deleted [ 411.502078][ T8254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 411.763051][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.337182][ T8282] random: crng reseeded on system resumption [ 415.156003][ T8284] bridge_slave_1: left allmulticast mode [ 415.162005][ T8284] bridge_slave_1: left promiscuous mode [ 415.168496][ T8284] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.045523][ T8276] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 417.073979][ T8284] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 417.545969][ T51] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 418.452330][ T8299] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 418.932135][ T8314] ptrace attach of "./syz-executor exec"[5763] was attempted by "./syz-executor exec"[8314] [ 419.424994][ T8316] tipc: Started in network mode [ 419.430153][ T8316] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 419.457075][ T8316] tipc: Enabled bearer , priority 10 [ 420.184169][ T8322] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 420.646206][ T5800] tipc: Node number set to 4269801492 [ 426.572780][ T8364] ptrace attach of "./syz-executor exec"[5763] was attempted by "./syz-executor exec"[8364] [ 427.569342][ T8375] NILFS (nullb0): couldn't find nilfs on the device [ 430.120435][ T8396] random: crng reseeded on system resumption [ 431.191517][ T8390] netlink: 140 bytes leftover after parsing attributes in process `syz.4.452'. [ 431.342498][ T51] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 431.407950][ T8401] netlink: 64 bytes leftover after parsing attributes in process `syz.1.456'. [ 432.078798][ T8411] overlayfs: failed to resolve './file2': -2 [ 433.721615][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 434.376112][ T8424] loop5: detected capacity change from 0 to 7 [ 434.401088][ T8424] Dev loop5: unable to read RDB block 7 [ 434.407227][ T8424] loop5: AHDI p1 [ 434.411065][ T8424] loop5: partition table partially beyond EOD, truncated [ 437.380463][ T8443] netlink: 64 bytes leftover after parsing attributes in process `syz.0.465'. [ 440.153129][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 440.421780][ T51] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 445.247854][ T8502] loop4: detected capacity change from 0 to 512 [ 445.273031][ T8499] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 445.480171][ T8502] EXT4-fs (loop4): Test dummy encryption mode enabled [ 445.489569][ T8502] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 445.509306][ T8502] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 445.517627][ T8502] EXT4-fs (loop4): orphan cleanup on readonly fs [ 445.529308][ T8502] EXT4-fs (loop4): 1 orphan inode deleted [ 445.548869][ T8502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 446.404211][ T6029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.465991][ T8507] loop1: detected capacity change from 0 to 256 [ 450.220757][ T51] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 451.947841][ T8545] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 452.729545][ T8552] loop2: detected capacity change from 0 to 512 [ 452.811877][ T8556] netlink: 64 bytes leftover after parsing attributes in process `syz.4.493'. [ 452.968884][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.133607][ T8552] EXT4-fs (loop2): Test dummy encryption mode enabled [ 453.140906][ T8552] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 453.320578][ T8552] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 453.328887][ T8552] EXT4-fs (loop2): orphan cleanup on readonly fs [ 453.335592][ T8552] EXT4-fs (loop2): 1 orphan inode deleted [ 453.344041][ T8552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 453.402121][ T8563] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 453.628973][ T5761] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.176403][ T8575] netlink: 'syz.4.498': attribute type 10 has an invalid length. [ 454.184263][ T8575] netlink: 40 bytes leftover after parsing attributes in process `syz.4.498'. [ 455.790804][ T8589] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 456.120440][ T51] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 456.864801][ T8596] xt_TPROXY: Can be used only with -p tcp or -p udp [ 458.266518][ T8605] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 458.740951][ T8604] loop0: detected capacity change from 0 to 512 [ 458.749347][ T8604] EXT4-fs (loop0): Test dummy encryption mode enabled [ 458.756201][ T8604] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 458.768456][ T8604] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 458.778107][ T8604] EXT4-fs (loop0): orphan cleanup on readonly fs [ 458.786130][ T8604] EXT4-fs (loop0): 1 orphan inode deleted [ 458.794875][ T8604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 459.095949][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.440348][ T5822] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 459.615038][ T8603] loop2: detected capacity change from 0 to 131072 [ 459.635780][ T8603] F2FS-fs (loop2): invalid crc value [ 459.659029][ T8603] F2FS-fs (loop2): Found nat_bits in checkpoint [ 459.764214][ T8628] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 459.831984][ T8603] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 462.711878][ T8639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.723652][ T8639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.224775][ T8638] lo speed is unknown, defaulting to 1000 [ 463.818226][ T8647] xt_TPROXY: Can be used only with -p tcp or -p udp [ 464.328325][ T51] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 464.567163][ T5822] usb 5-1: unable to get BOS descriptor or descriptor too short [ 464.597944][ T5822] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 464.793826][ T8653] xt_TPROXY: Can be used only with -p tcp or -p udp [ 465.256896][ T5822] usb 5-1: can't read configurations, error -71 [ 466.990968][ T8672] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 469.370748][ T8683] bond0: (slave syz_tun): Releasing backup interface [ 469.385044][ T8683] syz_tun: left promiscuous mode [ 469.396463][ T8683] bridge_slave_0: left allmulticast mode [ 469.402697][ T8683] bridge_slave_0: left promiscuous mode [ 469.408389][ T8683] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.563092][ T8686] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 469.722761][ T8683] bond0: (slave bond_slave_0): Releasing backup interface [ 469.734789][ T8683] bond_slave_0: left promiscuous mode [ 469.760077][ T8683] bond0: (slave bond_slave_1): Releasing backup interface [ 470.406612][ T8683] bond_slave_1: left promiscuous mode [ 470.480335][ T8683] team0: Port device team_slave_0 removed [ 470.929051][ T8683] team0: Port device team_slave_1 removed [ 470.977946][ T8683] bond1: (slave macvlan2): Removing an active aggregator [ 470.986793][ T8683] bond1: (slave macvlan2): Releasing backup interface [ 471.249344][ T8683] bond2: (slave geneve2): Releasing active interface [ 471.268232][ T8683] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 471.277841][ T8683] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 471.287372][ T8683] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 471.296464][ T8683] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 471.629391][ T8707] xt_TPROXY: Can be used only with -p tcp or -p udp [ 473.064547][ T8727] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 473.825700][ T27] audit: type=1326 audit(1777513028.157:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b66f9cdd9 code=0x7ffc0000 [ 473.881562][ T27] audit: type=1326 audit(1777513028.166:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b66f9cdd9 code=0x7ffc0000 [ 474.485819][ T27] audit: type=1326 audit(1777513028.166:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b66f9cdd9 code=0x7ffc0000 [ 474.799237][ T27] audit: type=1326 audit(1777513028.166:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9b66f9cdd9 code=0x7ffc0000 [ 474.872783][ T27] audit: type=1326 audit(1777513028.166:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b66f9cdd9 code=0x7ffc0000 [ 474.900001][ T27] audit: type=1326 audit(1777513028.166:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b66f9cdd9 code=0x7ffc0000 [ 474.922457][ T27] audit: type=1326 audit(1777513028.166:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b66f9cdd9 code=0x7ffc0000 [ 474.947711][ T27] audit: type=1326 audit(1777513028.166:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b66f9cdd9 code=0x7ffc0000 [ 474.980489][ T27] audit: type=1326 audit(1777513028.166:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b66f9cdd9 code=0x7ffc0000 [ 475.097289][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'. [ 475.909341][ T27] audit: type=1326 audit(1777513028.166:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9b66f9cdd9 code=0x7ffc0000 [ 478.434121][ T8770] random: crng reseeded on system resumption [ 478.921465][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 480.263903][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 481.745854][ T8794] xt_TPROXY: Can be used only with -p tcp or -p udp [ 482.780224][ T8803] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 483.912641][ T8814] kAFS: No cell specified [ 485.301876][ T8820] Driver unsupported XDP return value 0 on prog (id 42) dev N/A, expect packet loss! [ 485.597498][ T8824] random: crng reseeded on system resumption [ 487.053828][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 488.947158][ T8835] loop0: detected capacity change from 0 to 32768 [ 488.954260][ T8835] xfs: Unknown parameter '@' [ 489.220137][ T8837] loop1: detected capacity change from 0 to 40427 [ 489.236634][ T8837] F2FS-fs (loop1): invalid crc value [ 489.245087][ T8837] F2FS-fs (loop1): Found nat_bits in checkpoint [ 489.265503][ T8847] loop2: detected capacity change from 0 to 256 [ 489.291835][ T8837] F2FS-fs (loop1): Start checkpoint disabled! [ 489.300932][ T8837] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 489.402826][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 489.426343][ T8851] bridge0: port 2(geneve1) entered blocking state [ 489.433346][ T8851] bridge0: port 2(geneve1) entered disabled state [ 489.441008][ T8851] geneve1: entered allmulticast mode [ 489.452970][ T8851] geneve1: entered promiscuous mode [ 494.300899][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.565'. [ 494.428882][ T8875] random: crng reseeded on system resumption [ 495.583585][ T1096] kworker/u4:7: attempt to access beyond end of device [ 495.583585][ T1096] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 495.682517][ T1096] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 495.729816][ T1096] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 496.549014][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 496.561123][ T8888] bridge0: port 2(geneve1) entered blocking state [ 496.568154][ T8888] bridge0: port 2(geneve1) entered disabled state [ 496.574812][ T8888] geneve1: entered allmulticast mode [ 496.581594][ T8888] geneve1: entered promiscuous mode [ 496.587587][ T8888] bridge0: port 2(geneve1) entered blocking state [ 496.594160][ T8888] bridge0: port 2(geneve1) entered forwarding state [ 499.937873][ T8913] netlink: 64 bytes leftover after parsing attributes in process `syz.2.573'. [ 500.851383][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 502.560423][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 502.581307][ T8930] bridge0: port 1(geneve1) entered blocking state [ 502.588280][ T8930] bridge0: port 1(geneve1) entered disabled state [ 502.595876][ T8930] geneve1: entered allmulticast mode [ 502.614888][ T8930] geneve1: entered promiscuous mode [ 502.754523][ T8931] random: crng reseeded on system resumption [ 505.878843][ T8950] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 506.273959][ T5774] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 507.322345][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 509.570888][ T8971] random: crng reseeded on system resumption [ 510.264491][ T8970] loop4: detected capacity change from 0 to 32768 [ 510.286841][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 510.537639][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 510.547473][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.590'. [ 510.550295][ T8970] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 510.562731][ T8973] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.574127][ T8973] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.582962][ T8973] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.591746][ T8973] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.645236][ T8970] XFS (loop4): Ending clean mount [ 511.915978][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'. [ 511.986822][ T6029] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 512.577495][ T9000] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 513.057023][ T9002] random: crng reseeded on system resumption [ 514.263673][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'. [ 514.909917][ T9013] bridge_slave_0: left allmulticast mode [ 514.915795][ T9013] bridge_slave_0: left promiscuous mode [ 514.921880][ T9013] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.562133][ T9013] bond0: (slave bond_slave_0): Releasing backup interface [ 516.577836][ T9013] bond0: (slave bond_slave_1): Releasing backup interface [ 516.704249][ T9022] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 517.035823][ T9023] random: crng reseeded on system resumption [ 517.692338][ T9013] team0: Port device team_slave_0 removed [ 518.616400][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 518.715233][ T9013] team0: Port device team_slave_1 removed [ 518.727975][ T9013] geneve1: left allmulticast mode [ 518.733771][ T9013] geneve1: left promiscuous mode [ 518.739043][ T9013] bridge0: port 2(geneve1) entered disabled state [ 518.775487][ T9013] bond0: (slave wlan1): Releasing backup interface [ 518.878063][ T9033] Bluetooth: MGMT ver 1.22 [ 518.902417][ T9033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.602'. [ 519.982179][ T9042] random: crng reseeded on system resumption [ 522.124001][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.604'. [ 522.196341][ T9039] loop4: detected capacity change from 0 to 256 [ 522.204960][ T9039] FAT-fs (loop4): Unrecognized mount option "nonumtailá=0" or missing value [ 522.491492][ T7880] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 522.973698][ T9056] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 523.467260][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'. [ 524.628523][ T9070] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 525.340935][ T9083] random: crng reseeded on system resumption [ 525.534699][ T9085] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 527.132618][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 528.358224][ T9096] random: crng reseeded on system resumption [ 531.503740][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 532.549336][ T9119] loop4: detected capacity change from 0 to 40427 [ 532.671280][ T9119] F2FS-fs (loop4): invalid crc value [ 532.727789][ T9119] F2FS-fs (loop4): Found nat_bits in checkpoint [ 532.805498][ T9119] F2FS-fs (loop4): Start checkpoint disabled! [ 532.845401][ T9119] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 533.732990][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 533.753647][ T9133] bridge0: port 1(geneve1) entered blocking state [ 533.760697][ T9133] bridge0: port 1(geneve1) entered disabled state [ 533.769745][ T9133] geneve1: entered allmulticast mode [ 533.780752][ T9133] geneve1: entered promiscuous mode [ 533.789067][ T9133] bridge0: port 1(geneve1) entered blocking state [ 533.795677][ T9133] bridge0: port 1(geneve1) entered forwarding state [ 534.369924][ T9138] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 536.842807][ T51] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 537.675256][ T9151] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 538.477557][ T41] kworker/u4:2: attempt to access beyond end of device [ 538.477557][ T41] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 538.598515][ T41] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 538.622845][ T41] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 539.300811][ T9163] random: crng reseeded on system resumption [ 542.141728][ T9176] ipip0: left promiscuous mode [ 542.285977][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'. [ 542.519461][ T9177] overlayfs: failed to clone upperpath [ 542.593341][ T9178] loop1: detected capacity change from 0 to 256 [ 542.604470][ T9178] FAT-fs (loop1): Unrecognized mount option "nonumtailá=0" or missing value [ 543.523616][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 543.589227][ T7627] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 545.202598][ T9197] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.211525][ T9197] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.220357][ T9197] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.229112][ T9197] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.332839][ T9197] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.342212][ T9197] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.351432][ T9197] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.360632][ T9197] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.074451][ T9198] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.083340][ T9198] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.092386][ T9198] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.101483][ T9198] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.232080][ T9198] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.241231][ T9198] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.250512][ T9198] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.259642][ T9198] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.803227][ T9212] loop1: detected capacity change from 0 to 1024 [ 550.339241][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 550.466710][ T9221] random: crng reseeded on system resumption [ 557.307248][ T9259] xt_TPROXY: Can be used only with -p tcp or -p udp [ 557.829464][ T9266] random: crng reseeded on system resumption [ 562.975763][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'. [ 563.756864][ T5803] IPVS: starting estimator thread 0... [ 563.858313][ T9292] IPVS: using max 20 ests per chain, 48000 per kthread [ 564.749029][ T9300] random: crng reseeded on system resumption [ 567.582985][ T9316] binder: 9314:9316 ioctl c0306201 200000000080 returned -14 [ 567.784603][ T9318] loop1: detected capacity change from 0 to 32768 [ 568.066800][ T9321] binder: 9314:9321 ioctl 402c5639 200000000000 returned -22 [ 568.192660][ T9324] read_mapping_page failed! [ 568.197414][ T9324] ERROR: (device loop1): txCommit: [ 568.197414][ T9324] [ 568.611356][ T59] read_mapping_page failed! [ 568.615952][ T59] ERROR: (device loop1): txCommit: [ 568.615952][ T59] [ 568.645125][ T59] jfs_write_inode: jfs_commit_inode failed! [ 572.190650][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 572.237462][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 573.571731][ T9350] random: crng reseeded on system resumption [ 575.779448][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'. [ 582.860780][ T9408] loop4: detected capacity change from 0 to 512 [ 583.875073][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'. [ 583.928760][ T9408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.929152][ T1199] IPVS: starting estimator thread 0... [ 583.941722][ T9408] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 584.211985][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 584.602669][ T9412] IPVS: using max 21 ests per chain, 50400 per kthread [ 586.345308][ T6029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.207844][ T9430] xt_TPROXY: Can be used only with -p tcp or -p udp [ 588.706015][ T9448] ipip0: left promiscuous mode [ 590.040189][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 590.772623][ T9459] loop0: detected capacity change from 0 to 2048 [ 590.910444][ T9459] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 590.956266][ T9459] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 591.216825][ T9466] xt_TPROXY: Can be used only with -p tcp or -p udp [ 591.247154][ T9468] random: crng reseeded on system resumption [ 591.451456][ T9459] UDF-fs: Scanning with blocksize 512 failed [ 591.611874][ T9459] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 592.770220][ T51] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 594.912990][ T9477] xt_TPROXY: Can be used only with -p tcp or -p udp [ 594.959139][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 594.959176][ T27] audit: type=1326 audit(1777513140.986:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae039cdd9 code=0x7ffc0000 [ 595.650295][ T27] audit: type=1326 audit(1777513140.986:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae039cdd9 code=0x7ffc0000 [ 595.733046][ T27] audit: type=1326 audit(1777513141.089:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ae039cdd9 code=0x7ffc0000 [ 595.796598][ T27] audit: type=1326 audit(1777513141.089:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae039cdd9 code=0x7ffc0000 [ 595.909156][ T27] audit: type=1326 audit(1777513141.089:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae039cdd9 code=0x7ffc0000 [ 596.315265][ T27] audit: type=1326 audit(1777513141.192:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ae039cdd9 code=0x7ffc0000 [ 596.590981][ T27] audit: type=1326 audit(1777513141.192:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae039cdd9 code=0x7ffc0000 [ 598.008647][ T27] audit: type=1326 audit(1777513141.192:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae039cdd9 code=0x7ffc0000 [ 598.094310][ T27] audit: type=1326 audit(1777513141.230:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7ae039cdd9 code=0x7ffc0000 [ 598.155346][ T27] audit: type=1326 audit(1777513141.230:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.4.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae039cdd9 code=0x7ffc0000 [ 598.256359][ T9499] loop4: detected capacity change from 0 to 1024 [ 598.272863][ T9499] hfsplus: invalid btree flag [ 598.278672][ T9499] hfsplus: failed to load catalog file [ 598.516503][ T9500] xt_TPROXY: Can be used only with -p tcp or -p udp [ 599.507363][ T9512] random: crng reseeded on system resumption [ 605.360025][ T9536] loop0: detected capacity change from 0 to 32768 [ 607.306297][ T9542] read_mapping_page failed! [ 607.310959][ T9542] ERROR: (device loop0): txCommit: [ 607.310959][ T9542] [ 607.334022][ T9544] xt_TPROXY: Can be used only with -p tcp or -p udp [ 607.436794][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 607.436807][ T27] audit: type=1326 audit(1777513153.273:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9549 comm="syz.4.719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ae039cdd9 code=0x0 [ 607.573085][ T995] read_mapping_page failed! [ 607.587595][ T995] ERROR: (device loop0): txCommit: [ 607.587595][ T995] [ 607.616038][ T995] jfs_write_inode: jfs_commit_inode failed! [ 607.771482][ T9553] loop4: detected capacity change from 0 to 1024 [ 609.192836][ T7627] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 609.352644][ T9568] loop4: detected capacity change from 0 to 1764 [ 609.701810][ T9570] xt_TPROXY: Can be used only with -p tcp or -p udp [ 612.378734][ T9595] xt_TPROXY: Can be used only with -p tcp or -p udp [ 613.278333][ T9600] loop1: detected capacity change from 0 to 2048 [ 614.327443][ T9600] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 614.350286][ T9600] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 614.357972][ T9600] UDF-fs: Scanning with blocksize 512 failed [ 614.578583][ T9608] xt_TPROXY: Can be used only with -p tcp or -p udp [ 614.647229][ T8] IPVS: starting estimator thread 0... [ 614.662405][ T9600] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 614.733693][ T27] audit: type=1326 audit(1777513160.105:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.4.726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ae039cdd9 code=0x0 [ 614.755638][ T9610] IPVS: using max 25 ests per chain, 60000 per kthread [ 615.281038][ T9623] loop0: detected capacity change from 0 to 512 [ 615.432517][ T9623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.445068][ T9623] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.580582][ T9639] xt_TPROXY: Can be used only with -p tcp or -p udp [ 616.816615][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.506964][ T9650] loop1: detected capacity change from 0 to 32768 [ 618.603675][ T9650] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 618.865276][ T9656] xt_TPROXY: Can be used only with -p tcp or -p udp [ 619.297225][ T9650] XFS (loop1): Ending clean mount [ 620.248226][ T5760] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 621.719870][ T9686] loop0: detected capacity change from 0 to 164 [ 623.690584][ T9693] xt_TPROXY: Can be used only with -p tcp or -p udp [ 624.354732][ T9704] xt_TPROXY: Can be used only with -p tcp or -p udp [ 625.742008][ T9722] GUP no longer grows the stack in syz.1.754 (9722): 200000006000-200000009000 (200000004000) [ 625.753493][ T9722] CPU: 1 PID: 9722 Comm: syz.1.754 Not tainted syzkaller #0 [ 625.760804][ T9722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 625.770893][ T9722] Call Trace: [ 625.774193][ T9722] [ 625.777158][ T9722] dump_stack_lvl+0x18c/0x250 [ 625.781867][ T9722] ? show_regs_print_info+0x20/0x20 [ 625.787083][ T9722] ? load_image+0x420/0x420 [ 625.791600][ T9722] ? find_vma+0x134/0x1b0 [ 625.796047][ T9722] fixup_user_fault+0x642/0x700 [ 625.800922][ T9722] fault_in_user_writeable+0x71/0xd0 [ 625.806219][ T9722] futex_lock_pi+0x274/0x9b0 [ 625.810845][ T9722] ? fixup_pi_state_owner+0x5e0/0x5e0 [ 625.816248][ T9722] ? verify_lock_unused+0x140/0x140 [ 625.821564][ T9722] ? tomoyo_path_number_perm+0x217/0x620 [ 625.827244][ T9722] do_futex+0x23d/0x3e0 [ 625.831420][ T9722] ? __ia32_sys_get_robust_list+0x110/0x110 [ 625.837348][ T9722] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 625.843274][ T9722] __se_sys_futex+0x3a9/0x440 [ 625.847985][ T9722] ? __x64_sys_futex+0xf0/0xf0 [ 625.852775][ T9722] ? __x64_sys_futex+0x21/0xf0 [ 625.857556][ T9722] do_syscall_64+0x55/0xa0 [ 625.861990][ T9722] ? clear_bhb_loop+0x40/0x90 [ 625.866696][ T9722] ? clear_bhb_loop+0x40/0x90 [ 625.871404][ T9722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.877328][ T9722] RIP: 0033:0x7f33bdf9cdd9 [ 625.881780][ T9722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.901416][ T9722] RSP: 002b:00007f33bed9b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 625.909865][ T9722] RAX: ffffffffffffffda RBX: 00007f33be216270 RCX: 00007f33bdf9cdd9 [ 625.917860][ T9722] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 625.925854][ T9722] RBP: 00007f33be032d69 R08: 0000000000000000 R09: 0000000000000082 [ 625.933843][ T9722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.941826][ T9722] R13: 00007f33be216308 R14: 00007f33be216270 R15: 00007fff2ca3d2c8 [ 625.949828][ T9722] [ 626.149339][ T9719] loop0: detected capacity change from 0 to 32768 [ 626.296687][ T9719] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 626.470616][ T9719] XFS (loop0): Ending clean mount [ 626.713001][ T5763] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 627.735681][ T9750] loop0: detected capacity change from 0 to 32768 [ 628.095062][ T9742] xt_TPROXY: Can be used only with -p tcp or -p udp [ 628.194270][ T9750] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 628.398220][ T9750] XFS (loop0): Ending clean mount [ 628.825437][ T9767] xt_TPROXY: Can be used only with -p tcp or -p udp [ 629.031913][ T5763] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 629.635032][ T9776] loop1: detected capacity change from 0 to 32768 [ 629.761466][ T9776] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.765 (9776) [ 629.911863][ T9776] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 629.922470][ T9776] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 629.931794][ T9776] BTRFS info (device loop1): using free space tree [ 630.009752][ T9776] BTRFS info (device loop1): enabling ssd optimizations [ 630.018042][ T9776] BTRFS info (device loop1): auto enabling async discard [ 630.038385][ T27] audit: type=1800 audit(1777513174.422:66): pid=9776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.765" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 631.154194][ T5760] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 631.506507][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 631.640110][ T9812] xt_TPROXY: Can be used only with -p tcp or -p udp [ 633.420827][ T9818] random: crng reseeded on system resumption [ 634.106632][ T9826] xt_TPROXY: Can be used only with -p tcp or -p udp [ 634.384277][ T7627] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop1 scanned by udevd (7627) [ 635.737313][ T9837] loop0: detected capacity change from 0 to 32768 [ 635.789381][ T9837] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 636.041079][ T9837] XFS (loop0): Ending clean mount [ 639.191799][ T5763] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 640.325363][ T9861] loop2: detected capacity change from 0 to 32768 [ 640.444431][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.781'. [ 640.662275][ T9867] loop0: detected capacity change from 0 to 256 [ 640.711301][ T9875] xt_TPROXY: Can be used only with -p tcp or -p udp [ 641.758967][ T9861] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 642.131293][ T9861] XFS (loop2): Ending clean mount [ 642.815576][ T9889] random: crng reseeded on system resumption [ 643.345849][ T5761] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 645.466327][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 646.524912][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 647.749752][ T9920] xt_TPROXY: Can be used only with -p tcp or -p udp [ 649.217452][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'. [ 649.339317][ T9929] loop2: detected capacity change from 0 to 32768 [ 649.638128][ T9929] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 649.771231][ T9929] XFS (loop2): Ending clean mount [ 649.863376][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 650.024453][ T5761] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 654.160609][ T9972] xt_TPROXY: Can be used only with -p tcp or -p udp [ 655.826255][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'. [ 655.949159][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 658.024357][ T9992] loop4: detected capacity change from 0 to 32768 [ 658.112320][ T9992] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 658.161045][ T9992] XFS (loop4): Ending clean mount [ 659.542593][ T6029] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 659.927463][T10020] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 660.264554][T10018] xt_TPROXY: Can be used only with -p tcp or -p udp [ 660.623541][T10024] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 660.918149][T10024] netlink: 'syz.2.812': attribute type 10 has an invalid length. [ 661.220740][T10024] team0: Device ipvlan1 failed to register rx_handler [ 662.041078][T10043] loop1: detected capacity change from 0 to 128 [ 662.667706][T10040] loop4: detected capacity change from 0 to 32768 [ 662.684262][T10043] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 662.779993][T10040] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 662.828516][T10040] XFS (loop4): Ending clean mount [ 662.867330][ T7627] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 662.890777][T10041] ipip1: entered promiscuous mode [ 662.896095][T10041] ipip1: entered allmulticast mode [ 663.589316][ T6029] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 666.509293][T10068] loop2: detected capacity change from 0 to 32768 [ 668.153638][T10068] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 668.248530][T10068] XFS (loop2): Ending clean mount [ 669.234598][T10082] xt_TPROXY: Can be used only with -p tcp or -p udp [ 669.340842][ T5761] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 670.627268][T10103] loop1: detected capacity change from 0 to 32768 [ 670.743050][T10102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.825'. [ 670.908913][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 671.139832][T10103] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 672.161128][T10103] XFS (loop1): Ending clean mount [ 673.059918][ T5760] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 673.894622][T10124] loop2: detected capacity change from 0 to 32768 [ 673.927400][T10124] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.831 (10124) [ 674.288712][T10124] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 674.299037][T10124] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 674.307972][T10124] BTRFS info (device loop2): turning on sync discard [ 674.314735][T10124] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 674.324484][T10124] BTRFS info (device loop2): use zstd compression, level 3 [ 674.331799][T10124] BTRFS info (device loop2): turning on async discard [ 674.338900][T10124] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 674.349684][T10124] BTRFS info (device loop2): trying to use backup root at mount time [ 674.358677][T10124] BTRFS info (device loop2): enabling auto defrag [ 674.365208][T10124] BTRFS info (device loop2): using free space tree [ 674.664726][ T2990] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 675.824807][T10147] loop4: detected capacity change from 0 to 32768 [ 676.040854][T10124] BTRFS error (device loop2): failed to load root extent [ 676.048102][T10124] BTRFS warning (device loop2): try to load backup roots slot 1 [ 676.058847][ T48] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 676.141314][T10124] BTRFS warning (device loop2): couldn't read tree root [ 676.148566][T10124] BTRFS warning (device loop2): try to load backup roots slot 2 [ 676.156840][ T5889] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 676.172872][T10147] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 676.202045][T10124] BTRFS warning (device loop2): couldn't read tree root [ 676.210226][T10124] BTRFS warning (device loop2): try to load backup roots slot 3 [ 676.229680][T10124] BTRFS info (device loop2): enabling ssd optimizations [ 676.237909][T10124] BTRFS info (device loop2): rebuilding free space tree [ 676.269617][T10124] BTRFS info (device loop2): checking UUID tree [ 676.317498][T10147] XFS (loop4): Ending clean mount [ 676.610253][ T6029] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 677.191667][T10171] xt_TPROXY: Can be used only with -p tcp or -p udp [ 677.468816][ T27] audit: type=1800 audit(1777513218.798:67): pid=10168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.831" name="bus" dev="loop2" ino=257 res=0 errno=0 [ 677.868996][T10182] loop0: detected capacity change from 0 to 32768 [ 677.894132][T10182] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 678.888182][ T8439] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 678.917163][ T5761] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 680.105488][T10192] can: request_module (can-proto-4) failed. [ 680.315389][T10200] loop4: detected capacity change from 0 to 256 [ 682.733079][T10215] loop0: detected capacity change from 0 to 32768 [ 682.981611][T10215] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 683.300498][T10215] XFS (loop0): Ending clean mount [ 683.662016][ T5763] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 687.307016][T10252] loop2: detected capacity change from 0 to 256 [ 688.126080][T10254] loop1: detected capacity change from 0 to 32768 [ 688.222280][T10254] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 689.055194][T10254] XFS (loop1): Ending clean mount [ 690.002185][ T5760] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 690.011326][T10273] fuse: Bad value for 'fd' [ 691.246804][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 692.302633][ T51] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 697.423847][T10320] xt_TPROXY: Can be used only with -p tcp or -p udp [ 698.404436][T10313] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 702.250635][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.874'. [ 703.146597][T10362] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 703.707159][T10364] loop2: detected capacity change from 0 to 8 [ 708.525108][T10382] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 709.169269][T10386] loop2: detected capacity change from 0 to 32768 [ 709.176330][T10386] xfs: Unknown parameter '@' [ 712.574293][T10348] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 713.613409][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 714.248432][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 714.969000][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 714.993973][T10416] netlink: 'syz.4.883': attribute type 10 has an invalid length. [ 715.038874][T10416] team0: Device ipvlan1 failed to register rx_handler [ 715.408233][T10421] loop1: detected capacity change from 0 to 40427 [ 715.469736][T10421] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 715.477655][T10421] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 715.487403][T10421] F2FS-fs (loop1): invalid crc value [ 715.519644][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 715.540134][T10421] F2FS-fs (loop1): Found nat_bits in checkpoint [ 715.600750][T10421] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 715.608638][T10421] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 717.781813][T10437] syz.1.884: attempt to access beyond end of device [ 717.781813][T10437] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 717.981682][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.887'. [ 725.274481][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'. [ 726.179251][T10485] loop1: detected capacity change from 0 to 32768 [ 726.290407][T10485] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 726.333042][T10485] XFS (loop1): Ending clean mount [ 726.580051][ T5760] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 727.014365][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'. [ 729.422478][T10511] kernel profiling enabled (shift: 9) [ 729.975051][T10513] tty tty2: ldisc open failed (-12), clearing slot 1 [ 730.377126][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.903'. [ 731.252219][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'. [ 733.085710][T10541] loop0: detected capacity change from 0 to 32768 [ 733.101601][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 733.130724][T10541] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 734.176447][T10541] XFS (loop0): Ending clean mount [ 734.194213][T10554] random: crng reseeded on system resumption [ 734.287389][T10553] loop4: detected capacity change from 0 to 32768 [ 734.439351][T10553] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 734.505542][ T5763] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 734.591675][T10553] XFS (loop4): Ending clean mount [ 734.837922][ T6029] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 737.793574][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'. [ 740.426173][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 742.541758][T10597] loop0: detected capacity change from 0 to 32768 [ 743.230769][T10601] bridge0: port 2(erspan0) entered blocking state [ 743.237393][T10601] bridge0: port 2(erspan0) entered disabled state [ 743.244044][T10601] erspan0: entered allmulticast mode [ 743.250173][T10601] erspan0: entered promiscuous mode [ 743.255959][T10601] bridge0: port 2(erspan0) entered blocking state [ 743.262466][T10601] bridge0: port 2(erspan0) entered forwarding state [ 744.321090][T10619] loop2: detected capacity change from 0 to 32768 [ 744.434061][T10619] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 744.536066][T10627] xt_TPROXY: Can be used only with -p tcp or -p udp [ 744.598353][T10632] Bluetooth: MGMT ver 1.22 [ 744.734674][T10633] loop0: detected capacity change from 0 to 2048 [ 744.750014][T10633] UDF-fs: bad mount option "noadinicb@&°"w¤8¬êˆx7" or missing value [ 746.180818][T10619] XFS (loop2): Ending clean mount [ 746.470019][ T5761] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 747.157506][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 749.762396][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'. [ 753.186596][T10673] loop1: detected capacity change from 0 to 32768 [ 754.234806][T10683] loop2: detected capacity change from 0 to 32768 [ 754.490711][T10673] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 754.538335][T10673] XFS (loop1): AIL initialisation failed: error -12 [ 755.023701][T10683] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 755.054373][T10673] XFS (loop1): log mount failed [ 755.215888][T10683] XFS (loop2): Ending clean mount [ 755.564469][T10706] netlink: 'syz.0.933': attribute type 10 has an invalid length. [ 755.666287][ T5761] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 755.719120][T10706] team0: Device ipvlan1 failed to register rx_handler [ 756.115892][T10711] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.934'. [ 757.734087][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'. [ 759.577554][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.942'. [ 760.305151][T10740] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 760.312215][T10740] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 760.472248][T10740] vhci_hcd vhci_hcd.0: Device attached [ 761.562969][T10753] loop4: detected capacity change from 0 to 32768 [ 761.629845][T10753] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 761.690547][T10753] XFS (loop4): Ending clean mount [ 761.708236][ T1199] vhci_hcd: vhci_device speed not set [ 762.083915][T10762] bridge0: port 2(erspan0) entered blocking state [ 762.090860][T10762] bridge0: port 2(erspan0) entered disabled state [ 762.098377][T10762] erspan0: entered allmulticast mode [ 762.115199][T10762] erspan0: entered promiscuous mode [ 762.206860][ T1199] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 762.322422][ T6029] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 764.142042][T10742] vhci_hcd: connection reset by peer [ 764.248760][ T48] vhci_hcd: stop threads [ 764.271428][ T48] vhci_hcd: release socket [ 764.338922][ T48] vhci_hcd: disconnect device [ 764.475422][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 765.875765][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 766.028547][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'. [ 769.065897][ T1199] vhci_hcd: vhci_device speed not set [ 769.261336][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 769.270284][T10795] geneve1: left allmulticast mode [ 769.275416][T10795] geneve1: left promiscuous mode [ 769.282254][T10795] bridge0: port 1(geneve1) entered disabled state [ 769.654668][T10820] tmpfs: Bad value for 'mpol' [ 771.588529][T10832] loop4: detected capacity change from 0 to 32768 [ 771.641097][T10832] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 772.202765][T10832] XFS (loop4): Ending clean mount [ 772.651125][ T6029] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 772.893414][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'. [ 772.941622][T10853] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 774.291999][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 775.207541][T10871] random: crng reseeded on system resumption [ 775.716160][T10876] loop1: detected capacity change from 0 to 256 [ 775.840417][T10876] FAT-fs (loop1): Directory bread(block 64) failed [ 775.840526][T10876] FAT-fs (loop1): Directory bread(block 65) failed [ 775.840789][T10876] FAT-fs (loop1): Directory bread(block 66) failed [ 775.840851][T10876] FAT-fs (loop1): Directory bread(block 67) failed [ 775.841064][T10876] FAT-fs (loop1): Directory bread(block 68) failed [ 775.841122][T10876] FAT-fs (loop1): Directory bread(block 69) failed [ 775.841341][T10876] FAT-fs (loop1): Directory bread(block 70) failed [ 775.841382][T10876] FAT-fs (loop1): Directory bread(block 71) failed [ 775.841601][T10876] FAT-fs (loop1): Directory bread(block 72) failed [ 775.841663][T10876] FAT-fs (loop1): Directory bread(block 73) failed [ 776.065827][ T27] audit: type=1800 audit(1777513310.993:68): pid=10876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.967" name="file2" dev="loop1" ino=1049169 res=0 errno=0 [ 776.217714][T10878] random: crng reseeded on system resumption [ 777.067467][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 779.485403][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'. [ 780.201950][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'. [ 780.883432][T10898] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 781.251531][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 781.668670][T10916] random: crng reseeded on system resumption [ 785.073880][T10931] loop4: detected capacity change from 0 to 256 [ 785.165826][T10931] FAT-fs (loop4): Directory bread(block 64) failed [ 785.172460][T10931] FAT-fs (loop4): Directory bread(block 65) failed [ 785.179157][T10931] FAT-fs (loop4): Directory bread(block 66) failed [ 785.185769][T10931] FAT-fs (loop4): Directory bread(block 67) failed [ 785.192397][T10931] FAT-fs (loop4): Directory bread(block 68) failed [ 785.198983][T10931] FAT-fs (loop4): Directory bread(block 69) failed [ 785.205774][T10931] FAT-fs (loop4): Directory bread(block 70) failed [ 785.212414][T10931] FAT-fs (loop4): Directory bread(block 71) failed [ 785.219062][T10931] FAT-fs (loop4): Directory bread(block 72) failed [ 785.225601][T10931] FAT-fs (loop4): Directory bread(block 73) failed [ 785.279704][ T27] audit: type=1800 audit(1777513319.677:69): pid=10931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.985" name="file2" dev="loop4" ino=1049170 res=0 errno=0 [ 788.860426][T10956] loop0: detected capacity change from 0 to 32768 [ 788.924269][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'. [ 789.033484][T10956] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 789.118909][T10956] XFS (loop0): Ending clean mount [ 789.656233][ T5763] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 789.994675][T10971] random: crng reseeded on system resumption [ 790.480151][T10979] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 790.498458][T10980] wlan0 speed is unknown, defaulting to 1000 [ 790.504570][T10980] wlan0 speed is unknown, defaulting to 1000 [ 790.512622][T10980] wlan0 speed is unknown, defaulting to 1000 [ 790.528987][T10980] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 790.880984][T10980] wlan0 speed is unknown, defaulting to 1000 [ 790.891327][T10980] wlan0 speed is unknown, defaulting to 1000 [ 790.899544][T10980] wlan0 speed is unknown, defaulting to 1000 [ 790.907055][T10980] wlan0 speed is unknown, defaulting to 1000 [ 791.153957][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 791.818121][T10986] netlink: 'syz.1.994': attribute type 39 has an invalid length. [ 791.987806][T10994] binder: 10985:10994 ioctl c0285840 200000000000 returned -22 [ 794.224439][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 794.322457][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.999'. [ 796.364856][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'. [ 797.051310][T11025] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 797.183634][T11022] random: crng reseeded on system resumption [ 799.119344][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'. [ 800.269964][T11048] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 801.004484][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 801.686318][T11059] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 802.765708][T11062] loop2: detected capacity change from 0 to 32768 [ 802.808137][T11062] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 803.005614][T11072] siw: device registration error -23 [ 803.049529][T11062] XFS (loop2): Ending clean mount [ 803.372052][T11075] random: crng reseeded on system resumption [ 803.674626][ T5761] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 804.172492][T11083] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 804.258188][T11087] bridge_slave_0: left allmulticast mode [ 804.264193][T11087] bridge_slave_0: left promiscuous mode [ 804.270157][T11087] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.489205][T11090] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 806.362003][T11087] bond0: (slave bond_slave_0): Releasing backup interface [ 806.401528][T11087] bond0: (slave bond_slave_1): Releasing backup interface [ 806.469661][T11087] team0: Port device team_slave_0 removed [ 806.488354][T11087] team0: Port device team_slave_1 removed [ 806.498447][T11087] geneve1: left allmulticast mode [ 806.503550][T11087] geneve1: left promiscuous mode [ 806.508846][T11087] bridge0: port 2(geneve1) entered disabled state [ 806.843975][T11112] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 808.026619][T11121] loop1: detected capacity change from 0 to 32768 [ 808.238658][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1023'. [ 808.262513][T11122] bridge0: port 1(geneve1) entered blocking state [ 808.269514][T11122] bridge0: port 1(geneve1) entered disabled state [ 808.276890][T11122] geneve1: entered allmulticast mode [ 808.288420][T11122] geneve1: entered promiscuous mode [ 808.576649][T11121] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 808.792182][T11121] XFS (loop1): Ending clean mount [ 809.024665][ T5760] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 809.032764][T11133] random: crng reseeded on system resumption [ 809.399022][T11140] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 810.222538][T11142] fuse: Bad value for 'fd' [ 811.098835][T11152] loop2: detected capacity change from 0 to 32768 [ 811.148448][T11152] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 811.208702][T11152] XFS (loop2): Ending clean mount [ 811.408066][T11170] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 811.496425][ T5761] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 811.822102][T11172] overlayfs: failed to clone upperpath [ 813.255883][T11180] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled [ 813.322076][T11180] ftl_cs: FTL header not found. [ 813.538022][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1037'. [ 813.888296][T11196] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 814.200314][T11197] loop0: detected capacity change from 0 to 32768 [ 814.249070][T11197] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 814.361882][T11197] XFS (loop0): Ending clean mount [ 814.751198][ T5763] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 814.777868][T11210] random: crng reseeded on system resumption [ 815.035993][T11216] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 815.155022][T11220] loop4: detected capacity change from 0 to 512 [ 815.232797][T11220] EXT4-fs (loop4): 1 truncate cleaned up [ 815.265935][T11220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 817.342451][T11246] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 817.377172][ T6029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.534326][T11255] loop1: detected capacity change from 0 to 32768 [ 818.673990][T11255] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 818.812701][T11270] loop0: detected capacity change from 0 to 4096 [ 818.821671][T11270] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 818.855495][T11255] XFS (loop1): Ending clean mount [ 818.914805][T11270] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 818.926765][T11270] ntfs3: loop0: Failed to load $AttrDef (-22) [ 819.118033][ T5760] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 819.205690][T11274] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 819.215792][T11271] random: crng reseeded on system resumption [ 821.086949][ T27] audit: type=1326 audit(1777513353.198:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a859cdd9 code=0x7ffc0000 [ 821.165667][T11283] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 821.186817][ T27] audit: type=1326 audit(1777513353.198:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a859cdd9 code=0x7ffc0000 [ 821.276347][ T27] audit: type=1326 audit(1777513353.216:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a859cdd9 code=0x7ffc0000 [ 821.611426][ T27] audit: type=1326 audit(1777513353.216:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a859cdd9 code=0x7ffc0000 [ 821.873244][ T27] audit: type=1326 audit(1777513353.226:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe8a859cdd9 code=0x7ffc0000 [ 821.902442][ T27] audit: type=1326 audit(1777513353.226:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a859cdd9 code=0x7ffc0000 [ 822.020152][ T27] audit: type=1326 audit(1777513353.226:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a859cdd9 code=0x7ffc0000 [ 822.069241][ T27] audit: type=1326 audit(1777513353.226:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a859cdd9 code=0x7ffc0000 [ 822.127111][ T27] audit: type=1326 audit(1777513353.226:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a859cdd9 code=0x7ffc0000 [ 822.164373][ T27] audit: type=1326 audit(1777513353.226:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a859cdd9 code=0x7ffc0000 [ 822.417045][T11291] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 822.743122][T11299] fuse: Bad value for 'fd' [ 823.142237][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 823.916154][T11308] ceph: No mds server is up or the cluster is laggy [ 823.940732][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 823.949380][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 824.039248][T11311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 824.056116][T11307] smc: net device vcan0 applied user defined pnetid SYZ1 [ 824.494473][T11317] loop2: detected capacity change from 0 to 32768 [ 824.581199][ T1199] libceph: connect (1)[c::]:6789 error -101 [ 824.644417][ T1199] libceph: mon0 (1)[c::]:6789 connect error [ 824.693052][T11312] smc: net device vcan0 erased user defined pnetid SYZ1 [ 825.166027][T11317] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 825.244763][T11317] XFS (loop2): Ending clean mount [ 827.493860][ T5761] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 830.130184][T11356] random: crng reseeded on system resumption [ 830.912788][T11364] loop1: detected capacity change from 0 to 2048 [ 830.923134][T11364] UDF-fs: bad mount option "noadinicb@&°"w¤8¬êˆx7" or missing value [ 831.622758][T10517] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 831.940953][T11366] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 834.318382][T11388] loop4: detected capacity change from 0 to 32768 [ 834.439119][T11388] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 834.800333][T11388] XFS (loop4): Ending clean mount [ 835.698954][ T6029] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 836.598257][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1079'. [ 837.180227][T11420] loop0: detected capacity change from 0 to 2048 [ 837.190895][T11420] UDF-fs: bad mount option "noadinicb@&°"w¤8¬êˆx7" or missing value [ 838.132074][T11424] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 838.511489][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 839.969672][T11442] loop1: detected capacity change from 0 to 32768 [ 840.010356][T11442] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 840.088429][T11442] XFS (loop1): Ending clean mount [ 840.368534][ T5760] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 840.645362][T11461] random: crng reseeded on system resumption [ 840.661337][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1091'. [ 841.943205][T11474] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 842.755162][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 843.334304][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 843.512928][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'. [ 844.483696][T11495] loop1: detected capacity change from 0 to 32768 [ 844.524692][T11495] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 844.799496][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'. [ 844.901632][T11495] XFS (loop1): Ending clean mount [ 845.187134][ T5760] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 845.565533][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'. [ 846.826810][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 846.850171][T11532] loop4: detected capacity change from 0 to 32768 [ 846.954340][T11532] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 846.990163][T11532] XFS (loop4): Ending clean mount [ 847.325237][ T6029] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 851.500105][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'. [ 852.311219][T11565] loop0: detected capacity change from 0 to 32768 [ 852.376926][T11565] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 852.432298][T11565] XFS (loop0): Ending clean mount [ 852.666235][ T5763] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 853.468279][T11582] loop1: detected capacity change from 0 to 32768 [ 853.589589][T11582] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 853.713012][T11579] loop4: detected capacity change from 0 to 2048 [ 853.720150][T11579] UDF-fs: bad mount option "noadinicb@&°"w¤8¬êˆx7" or missing value [ 854.040477][T11582] XFS (loop1): Ending clean mount [ 854.576134][ T5760] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 854.591474][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1120'. [ 857.208248][T11610] loop1: detected capacity change from 0 to 32768 [ 857.366974][T11610] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 857.827315][T11623] loop0: detected capacity change from 0 to 32768 [ 857.892507][T11623] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 857.978762][T11610] XFS (loop1): Ending clean mount [ 857.986857][T11623] XFS (loop0): Ending clean mount [ 858.252713][ T5760] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 858.288639][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 858.294726][ T5763] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 859.413661][T11641] loop0: detected capacity change from 0 to 32768 [ 859.421124][T11641] xfs: Unknown parameter '@' [ 859.896163][T11643] ceph: No mds server is up or the cluster is laggy [ 860.062463][T11646] 8021q: adding VLAN 0 to HW filter on device .` [ 860.156797][T11638] random: crng reseeded on system resumption [ 860.264786][ T1199] libceph: connect (1)[c::]:6789 error -101 [ 860.272369][ T1199] libceph: mon0 (1)[c::]:6789 connect error [ 860.309469][T11646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 861.803517][T11654] loop2: detected capacity change from 0 to 32768 [ 864.317082][T11654] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 864.454451][T11654] XFS (loop2): Ending clean mount [ 864.666425][ T5761] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 865.551524][T11682] loop4: detected capacity change from 0 to 32768 [ 865.559314][T11682] xfs: Unknown parameter '@' [ 866.411191][T10434] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 867.335494][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 867.422492][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'. [ 868.444126][T11700] loop2: detected capacity change from 0 to 32768 [ 868.652422][T11700] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 868.734216][T11700] XFS (loop2): Ending clean mount [ 868.809843][T11717] loop0: detected capacity change from 0 to 256 [ 868.822160][T11717] exfat: Deprecated parameter 'utf8' [ 869.018768][ T5761] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 869.081863][T11717] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 870.442741][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 871.469799][T11732] loop1: detected capacity change from 0 to 32768 [ 871.513679][T11732] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 871.751852][T11732] XFS (loop1): Ending clean mount [ 871.767395][T11747] random: crng reseeded on system resumption [ 872.193583][ T5760] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 872.299373][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 872.840321][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 874.809431][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'. [ 875.239599][T11784] netlink: 'syz.0.1148': attribute type 12 has an invalid length. [ 876.871386][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1152'. [ 877.720910][T11806] loop2: detected capacity change from 0 to 32768 [ 877.754046][T11806] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 877.808519][T11806] XFS (loop2): Ending clean mount [ 878.054885][ T5761] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 878.931225][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'. [ 880.910324][T11841] random: crng reseeded on system resumption [ 884.542518][T11867] loop4: detected capacity change from 0 to 32768 [ 885.556955][T11867] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 885.728417][T11867] XFS (loop4): Ending clean mount [ 886.510877][ T6029] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 887.171647][T11893] fuse: Unknown parameter '0x0000000000000007' [ 887.185518][T11893] 9pnet_fd: Insufficient options for proto=fd [ 888.807942][T11903] ubi31: attaching mtd0 [ 888.815376][T11903] ubi31: scanning is finished [ 888.820133][T11903] ubi31: empty MTD device detected [ 889.040381][T11903] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 889.048547][T11903] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 889.056103][T11903] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 889.063333][T11903] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 889.071087][T11903] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 889.078281][T11903] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 889.086755][T11903] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2898532588 [ 889.097105][T11903] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 889.111143][T11905] ubi31: background thread "ubi_bgt31d" started, PID 11905 [ 889.651079][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'. [ 891.373610][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'. [ 891.449402][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'. [ 892.131524][T11942] random: crng reseeded on system resumption [ 893.340049][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'. [ 896.235528][ C0] ------------[ cut here ]------------ [ 896.241762][ C0] WARNING: CPU: 0 PID: 11958 at net/core/flow_dissector.c:1107 __skb_flow_dissect+0xbde/0x6d60 [ 896.252177][ C0] Modules linked in: [ 896.256125][ C0] CPU: 0 PID: 11958 Comm: syz.0.1182 Not tainted syzkaller #0 [ 896.263595][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 896.273695][ C0] RIP: 0010:__skb_flow_dissect+0xbde/0x6d60 [ 896.279651][ C0] Code: db 59 00 00 80 3d f0 a1 fd 05 01 0f 85 01 5a 00 00 e8 46 1c 0f f9 e9 17 f9 ff ff e8 3c 1c 0f f9 e9 b4 03 00 00 e8 32 1c 0f f9 <0f> 0b e9 00 ff ff ff e8 26 1c 0f f9 c6 05 bb a1 fd 05 01 48 c7 c7 [ 896.299334][ C0] RSP: 0018:ffffc90000006980 EFLAGS: 00010246 [ 896.305443][ C0] RAX: ffffffff887805ce RBX: ffff888079f839f0 RCX: ffff8880668f0000 [ 896.313462][ C0] RDX: 0000000000000100 RSI: ffffffff8b1c8fc0 RDI: ffffffff8b1c8f80 [ 896.321469][ C0] RBP: ffffc90000006f98 R08: dffffc0000000000 R09: 1ffffffff2238ca0 [ 896.329455][ C0] R10: dffffc0000000000 R11: fffffbfff2238ca1 R12: ffffffff8e8b8bb8 [ 896.337484][ C0] R13: ffffffff8877fbe9 R14: 0000000000000000 R15: 1ffffffff1d17178 [ 896.345525][ C0] FS: 00007f9b67e526c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 896.354502][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 896.361079][ C0] CR2: 000000110c3d054b CR3: 000000002d211000 CR4: 00000000003506f0 [ 896.369069][ C0] Call Trace: [ 896.372347][ C0] [ 896.375231][ C0] ? __read_once_word_nocheck+0x9/0x10 [ 896.381725][ C0] ? deref_stack_reg+0x1bd/0x240 [ 896.386697][ C0] ? is_bpf_text_address+0x28f/0x2a0 [ 896.391974][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 896.397179][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 896.403243][ C0] ? kernel_text_address+0xa0/0xd0 [ 896.408546][ C0] ? __kernel_text_address+0xd/0x30 [ 896.413828][ C0] ? unwind_get_return_address+0x91/0xc0 [ 896.419476][ C0] ? stack_trace_save+0x100/0x100 [ 896.424513][ C0] ? arch_stack_walk+0x160/0x190 [ 896.429460][ C0] ? bpf_flow_dissect+0x3f0/0x3f0 [ 896.434481][ C0] ? stack_trace_save+0xaa/0x100 [ 896.439426][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 896.444527][ C0] ? check_noncircular+0x18a/0x400 [ 896.449650][ C0] ? print_deadlock_bug+0x5d0/0x5d0 [ 896.454841][ C0] ? lockdep_unlock+0x146/0x2e0 [ 896.459720][ C0] ? lockdep_lock+0x230/0x230 [ 896.464421][ C0] ? add_lock_to_list+0x191/0x280 [ 896.469444][ C0] ? __lock_acquire+0x2b81/0x7d40 [ 896.474487][ C0] ? verify_lock_unused+0x140/0x140 [ 896.479676][ C0] ? mark_lock+0x94/0x320 [ 896.484040][ C0] ? __lock_acquire+0x1347/0x7d40 [ 896.489063][ C0] ? mark_lock+0x94/0x320 [ 896.493401][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 896.499389][ C0] ? lock_chain_count+0x20/0x20 [ 896.504254][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 896.509899][ C0] __skb_get_hash+0xf3/0x2e0 [ 896.514498][ C0] ? __skb_get_hash_symmetric+0x1d0/0x1d0 [ 896.520221][ C0] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 896.526135][ C0] nft_trace_init+0x1bb/0x410 [ 896.530806][ C0] ? nf_trace_fill_pkt_info+0x8a0/0x8a0 [ 896.536380][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 896.542363][ C0] nft_do_chain+0x14fc/0x1600 [ 896.547065][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 896.552257][ C0] ? mark_lock+0x94/0x320 [ 896.556631][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 896.562630][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 896.568569][ C0] ? ip6t_do_table+0x135e/0x1510 [ 896.573502][ C0] ? nf_route_table_hook6+0x2bb/0x7b0 [ 896.578887][ C0] nf_route_table_hook6+0x366/0x7b0 [ 896.584123][ C0] ? nft_inner_dump+0x2f0/0x2f0 [ 896.589074][ C0] ? ip6t_do_table+0x1d9/0x1510 [ 896.593939][ C0] ? nf_nat_ipv6_local_fn+0x2df/0x390 [ 896.599331][ C0] ? nft_inner_dump+0x2f0/0x2f0 [ 896.604179][ C0] nf_hook_slow+0xbd/0x200 [ 896.608599][ C0] __ip6_local_out+0x784/0x8a0 [ 896.613412][ C0] ? __ip6_local_out+0x60c/0x8a0 [ 896.618357][ C0] ? ip6_dst_hoplimit+0x350/0x350 [ 896.623396][ C0] ? __ip6_local_out+0x8a0/0x8a0 [ 896.628333][ C0] ? udp6_set_csum+0x98d/0xef0 [ 896.633140][ C0] ip6_local_out+0x2a/0x130 [ 896.637751][ C0] udp_tunnel6_xmit_skb+0x53e/0x970 [ 896.643002][ C0] tipc_udp_xmit+0x58d/0xb40 [ 896.647599][ C0] ? tipc_udp_xmit+0xb7/0xb40 [ 896.652289][ C0] ? tipc_udp_msg2addr+0x1d0/0x1d0 [ 896.657432][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 896.662491][ C0] ? tipc_udp_send_msg+0x2a5/0x3e0 [ 896.667621][ C0] tipc_bearer_xmit_skb+0x2ad/0x3f0 [ 896.672869][ C0] ? tipc_bearer_xmit_skb+0xaa/0x3f0 [ 896.678170][ C0] ? tipc_bearer_min_mtu+0x1d0/0x1d0 [ 896.683505][ C0] tipc_disc_timeout+0x596/0x6f0 [ 896.688459][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 896.693666][ C0] call_timer_fn+0x189/0x540 [ 896.698272][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 896.703492][ C0] ? call_timer_fn+0xd2/0x540 [ 896.708189][ C0] ? __run_timers+0x800/0x800 [ 896.712873][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 896.718082][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 896.723272][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 896.728478][ C0] __run_timers+0x542/0x800 [ 896.732982][ C0] ? detach_timer+0x2b0/0x2b0 [ 896.737669][ C0] ? lock_chain_count+0x20/0x20 [ 896.742516][ C0] run_timer_softirq+0x67/0xf0 [ 896.747272][ C0] handle_softirqs+0x280/0x820 [ 896.752042][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 896.756795][ C0] ? do_softirq+0x1a0/0x1a0 [ 896.761315][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 896.766529][ C0] __irq_exit_rcu+0xd3/0x190 [ 896.771124][ C0] ? irq_exit_rcu+0x20/0x20 [ 896.775624][ C0] irq_exit_rcu+0x9/0x20 [ 896.779871][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 896.785495][ C0] [ 896.788420][ C0] [ 896.791365][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 896.797348][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 896.803166][ C0] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 e9 de 04 00 00 4c 8b 75 d0 4c 89 e7 e8 00 b9 32 09 e8 9b 29 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 896.822794][ C0] RSP: 0018:ffffc900035e7578 EFLAGS: 00000286 [ 896.828855][ C0] RAX: 2dc344c8d89a5f00 RBX: 0000000000000000 RCX: 2dc344c8d89a5f00 [ 896.836847][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fe0 [ 896.844854][ C0] RBP: ffffc900035e75d0 R08: ffffffff911c6537 R09: 1ffffffff2238ca6 [ 896.852999][ C0] R10: dffffc0000000000 R11: fffffbfff2238ca7 R12: ffff8880668f0000 [ 896.860986][ C0] R13: dffffc0000000000 R14: ffff888023c73c00 R15: ffff8880b8e3cac8 [ 896.868982][ C0] ? finish_task_switch+0x265/0x8f0 [ 896.874176][ C0] __schedule+0x155b/0x45a0 [ 896.878707][ C0] ? asan.module_dtor+0x20/0x20 [ 896.883550][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 896.888781][ C0] preempt_schedule_irq+0xbf/0x150 [ 896.893912][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 896.899677][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 896.905479][ C0] irqentry_exit+0x67/0x70 [ 896.909916][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 896.915893][ C0] RIP: 0010:handle_mm_fault+0x2f3/0x4c00 [ 896.921534][ C0] Code: 04 48 8b 44 24 10 48 8d 58 20 48 89 d8 48 c1 e8 03 48 89 44 24 20 42 80 3c 30 00 74 08 48 89 df e8 32 9e 14 00 48 89 5c 24 18 <48> 8b 1b 48 89 de 48 81 e6 00 80 01 00 31 ff e8 29 6b bc ff 48 81 [ 896.941153][ C0] RSP: 0018:ffffc900035e7960 EFLAGS: 00000246 [ 896.947217][ C0] RAX: 1ffff1100ed30924 RBX: ffff888076984920 RCX: 0000000000080000 [ 896.955202][ C0] RDX: ffffc9000ce2a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 896.963190][ C0] RBP: ffffc900035e7b30 R08: ffffffff8e8b19ef R09: 1ffffffff1d1633d [ 896.971147][ C0] R10: dffffc0000000000 R11: fffffbfff1d1633e R12: ffff8880668f0000 [ 896.979135][ C0] R13: ffff888076984910 R14: dffffc0000000000 R15: 0000000000000014 [ 896.987128][ C0] ? handle_mm_fault+0xe7/0x4c00 [ 896.992061][ C0] ? numa_migrate_prep+0x350/0x350 [ 896.997176][ C0] ? follow_page_pte+0x6dd/0x1ac0 [ 897.002198][ C0] ? pmd_lock+0x60/0x60 [ 897.006371][ C0] __get_user_pages+0x5d0/0x1380 [ 897.011311][ C0] ? mtree_destroy+0x30/0x30 [ 897.015909][ C0] ? populate_vma_page_range+0x380/0x380 [ 897.021542][ C0] populate_vma_page_range+0x2c1/0x380 [ 897.027007][ C0] ? fixup_user_fault+0x700/0x700 [ 897.032020][ C0] ? userfaultfd_unmap_complete+0x29f/0x320 [ 897.037922][ C0] ? down_read+0x1ac/0x2e0 [ 897.042330][ C0] __mm_populate+0x260/0x390 [ 897.046928][ C0] ? faultin_page_range+0x8e0/0x8e0 [ 897.052129][ C0] ? up_write+0x1c3/0x410 [ 897.056449][ C0] vm_mmap_pgoff+0x2da/0x3f0 [ 897.061048][ C0] ? account_locked_vm+0x210/0x210 [ 897.066150][ C0] ? ksys_mmap_pgoff+0xea/0x700 [ 897.071005][ C0] ? __x64_sys_mmap+0x7a/0x130 [ 897.075754][ C0] do_syscall_64+0x55/0xa0 [ 897.080174][ C0] ? clear_bhb_loop+0x40/0x90 [ 897.084845][ C0] ? clear_bhb_loop+0x40/0x90 [ 897.089552][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 897.095483][ C0] RIP: 0033:0x7f9b66f9cdd9 [ 897.099899][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.119524][ C0] RSP: 002b:00007f9b67e52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 897.127951][ C0] RAX: ffffffffffffffda RBX: 00007f9b67215fa0 RCX: 00007f9b66f9cdd9 [ 897.135973][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 897.143961][ C0] RBP: 00007f9b67032d69 R08: ffffffffffffffff R09: 0000000000000000 [ 897.151926][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 897.159921][ C0] R13: 00007f9b67216038 R14: 00007f9b67215fa0 R15: 00007ffcdb072938 [ 897.167929][ C0] [ 897.170938][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 897.178207][ C0] CPU: 0 PID: 11958 Comm: syz.0.1182 Not tainted syzkaller #0 [ 897.185652][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 897.195705][ C0] Call Trace: [ 897.198975][ C0] [ 897.201905][ C0] dump_stack_lvl+0x18c/0x250 [ 897.206591][ C0] ? show_regs_print_info+0x20/0x20 [ 897.211782][ C0] ? load_image+0x420/0x420 [ 897.216283][ C0] panic+0x2dc/0x730 [ 897.220167][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 897.224681][ C0] __warn+0x2e0/0x470 [ 897.228648][ C0] ? __skb_flow_dissect+0xbde/0x6d60 [ 897.233934][ C0] ? __skb_flow_dissect+0xbde/0x6d60 [ 897.239202][ C0] report_bug+0x2be/0x4f0 [ 897.243514][ C0] ? __skb_flow_dissect+0xbde/0x6d60 [ 897.248780][ C0] ? __skb_flow_dissect+0xbde/0x6d60 [ 897.254056][ C0] ? __skb_flow_dissect+0xbe0/0x6d60 [ 897.259364][ C0] handle_bug+0xcf/0x120 [ 897.263598][ C0] exc_invalid_op+0x1a/0x50 [ 897.268096][ C0] asm_exc_invalid_op+0x1a/0x20 [ 897.272928][ C0] RIP: 0010:__skb_flow_dissect+0xbde/0x6d60 [ 897.278802][ C0] Code: db 59 00 00 80 3d f0 a1 fd 05 01 0f 85 01 5a 00 00 e8 46 1c 0f f9 e9 17 f9 ff ff e8 3c 1c 0f f9 e9 b4 03 00 00 e8 32 1c 0f f9 <0f> 0b e9 00 ff ff ff e8 26 1c 0f f9 c6 05 bb a1 fd 05 01 48 c7 c7 [ 897.298390][ C0] RSP: 0018:ffffc90000006980 EFLAGS: 00010246 [ 897.304439][ C0] RAX: ffffffff887805ce RBX: ffff888079f839f0 RCX: ffff8880668f0000 [ 897.312392][ C0] RDX: 0000000000000100 RSI: ffffffff8b1c8fc0 RDI: ffffffff8b1c8f80 [ 897.320352][ C0] RBP: ffffc90000006f98 R08: dffffc0000000000 R09: 1ffffffff2238ca0 [ 897.328326][ C0] R10: dffffc0000000000 R11: fffffbfff2238ca1 R12: ffffffff8e8b8bb8 [ 897.336290][ C0] R13: ffffffff8877fbe9 R14: 0000000000000000 R15: 1ffffffff1d17178 [ 897.344257][ C0] ? __skb_flow_dissect+0x1f9/0x6d60 [ 897.349706][ C0] ? __skb_flow_dissect+0xbde/0x6d60 [ 897.354977][ C0] ? __read_once_word_nocheck+0x9/0x10 [ 897.360418][ C0] ? deref_stack_reg+0x1bd/0x240 [ 897.365347][ C0] ? is_bpf_text_address+0x28f/0x2a0 [ 897.370618][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 897.375796][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 897.381872][ C0] ? kernel_text_address+0xa0/0xd0 [ 897.386974][ C0] ? __kernel_text_address+0xd/0x30 [ 897.392161][ C0] ? unwind_get_return_address+0x91/0xc0 [ 897.397779][ C0] ? stack_trace_save+0x100/0x100 [ 897.402792][ C0] ? arch_stack_walk+0x160/0x190 [ 897.407717][ C0] ? bpf_flow_dissect+0x3f0/0x3f0 [ 897.412731][ C0] ? stack_trace_save+0xaa/0x100 [ 897.417656][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 897.422752][ C0] ? check_noncircular+0x18a/0x400 [ 897.427855][ C0] ? print_deadlock_bug+0x5d0/0x5d0 [ 897.433039][ C0] ? lockdep_unlock+0x146/0x2e0 [ 897.437881][ C0] ? lockdep_lock+0x230/0x230 [ 897.442562][ C0] ? add_lock_to_list+0x191/0x280 [ 897.447595][ C0] ? __lock_acquire+0x2b81/0x7d40 [ 897.452629][ C0] ? verify_lock_unused+0x140/0x140 [ 897.457829][ C0] ? mark_lock+0x94/0x320 [ 897.462165][ C0] ? __lock_acquire+0x1347/0x7d40 [ 897.467206][ C0] ? mark_lock+0x94/0x320 [ 897.471533][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 897.477503][ C0] ? lock_chain_count+0x20/0x20 [ 897.482361][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 897.487986][ C0] __skb_get_hash+0xf3/0x2e0 [ 897.492568][ C0] ? __skb_get_hash_symmetric+0x1d0/0x1d0 [ 897.498276][ C0] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 897.504176][ C0] nft_trace_init+0x1bb/0x410 [ 897.508867][ C0] ? nf_trace_fill_pkt_info+0x8a0/0x8a0 [ 897.514398][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 897.520375][ C0] nft_do_chain+0x14fc/0x1600 [ 897.525043][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 897.530252][ C0] ? mark_lock+0x94/0x320 [ 897.534567][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 897.540540][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 897.546451][ C0] ? ip6t_do_table+0x135e/0x1510 [ 897.551383][ C0] ? nf_route_table_hook6+0x2bb/0x7b0 [ 897.556755][ C0] nf_route_table_hook6+0x366/0x7b0 [ 897.561962][ C0] ? nft_inner_dump+0x2f0/0x2f0 [ 897.566825][ C0] ? ip6t_do_table+0x1d9/0x1510 [ 897.571719][ C0] ? nf_nat_ipv6_local_fn+0x2df/0x390 [ 897.577091][ C0] ? nft_inner_dump+0x2f0/0x2f0 [ 897.581936][ C0] nf_hook_slow+0xbd/0x200 [ 897.586363][ C0] __ip6_local_out+0x784/0x8a0 [ 897.591136][ C0] ? __ip6_local_out+0x60c/0x8a0 [ 897.596073][ C0] ? ip6_dst_hoplimit+0x350/0x350 [ 897.601094][ C0] ? __ip6_local_out+0x8a0/0x8a0 [ 897.606035][ C0] ? udp6_set_csum+0x98d/0xef0 [ 897.610801][ C0] ip6_local_out+0x2a/0x130 [ 897.615295][ C0] udp_tunnel6_xmit_skb+0x53e/0x970 [ 897.620488][ C0] tipc_udp_xmit+0x58d/0xb40 [ 897.625084][ C0] ? tipc_udp_xmit+0xb7/0xb40 [ 897.629745][ C0] ? tipc_udp_msg2addr+0x1d0/0x1d0 [ 897.634845][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 897.639869][ C0] ? tipc_udp_send_msg+0x2a5/0x3e0 [ 897.644970][ C0] tipc_bearer_xmit_skb+0x2ad/0x3f0 [ 897.650160][ C0] ? tipc_bearer_xmit_skb+0xaa/0x3f0 [ 897.655432][ C0] ? tipc_bearer_min_mtu+0x1d0/0x1d0 [ 897.660732][ C0] tipc_disc_timeout+0x596/0x6f0 [ 897.665660][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 897.670859][ C0] call_timer_fn+0x189/0x540 [ 897.675450][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 897.680642][ C0] ? call_timer_fn+0xd2/0x540 [ 897.685329][ C0] ? __run_timers+0x800/0x800 [ 897.690012][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 897.695255][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 897.700449][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 897.705639][ C0] __run_timers+0x542/0x800 [ 897.710139][ C0] ? detach_timer+0x2b0/0x2b0 [ 897.714827][ C0] ? lock_chain_count+0x20/0x20 [ 897.719669][ C0] run_timer_softirq+0x67/0xf0 [ 897.724429][ C0] handle_softirqs+0x280/0x820 [ 897.729199][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 897.733963][ C0] ? do_softirq+0x1a0/0x1a0 [ 897.738453][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 897.743655][ C0] __irq_exit_rcu+0xd3/0x190 [ 897.748232][ C0] ? irq_exit_rcu+0x20/0x20 [ 897.752741][ C0] irq_exit_rcu+0x9/0x20 [ 897.756966][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 897.762585][ C0] [ 897.765512][ C0] [ 897.768427][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 897.774393][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 897.780198][ C0] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 e9 de 04 00 00 4c 8b 75 d0 4c 89 e7 e8 00 b9 32 09 e8 9b 29 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 897.799797][ C0] RSP: 0018:ffffc900035e7578 EFLAGS: 00000286 [ 897.805866][ C0] RAX: 2dc344c8d89a5f00 RBX: 0000000000000000 RCX: 2dc344c8d89a5f00 [ 897.813867][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fe0 [ 897.821852][ C0] RBP: ffffc900035e75d0 R08: ffffffff911c6537 R09: 1ffffffff2238ca6 [ 897.829817][ C0] R10: dffffc0000000000 R11: fffffbfff2238ca7 R12: ffff8880668f0000 [ 897.837779][ C0] R13: dffffc0000000000 R14: ffff888023c73c00 R15: ffff8880b8e3cac8 [ 897.845764][ C0] ? finish_task_switch+0x265/0x8f0 [ 897.850993][ C0] __schedule+0x155b/0x45a0 [ 897.855526][ C0] ? asan.module_dtor+0x20/0x20 [ 897.860371][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 897.865570][ C0] preempt_schedule_irq+0xbf/0x150 [ 897.870679][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 897.876415][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 897.882217][ C0] irqentry_exit+0x67/0x70 [ 897.886626][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 897.892598][ C0] RIP: 0010:handle_mm_fault+0x2f3/0x4c00 [ 897.898223][ C0] Code: 04 48 8b 44 24 10 48 8d 58 20 48 89 d8 48 c1 e8 03 48 89 44 24 20 42 80 3c 30 00 74 08 48 89 df e8 32 9e 14 00 48 89 5c 24 18 <48> 8b 1b 48 89 de 48 81 e6 00 80 01 00 31 ff e8 29 6b bc ff 48 81 [ 897.917825][ C0] RSP: 0018:ffffc900035e7960 EFLAGS: 00000246 [ 897.923899][ C0] RAX: 1ffff1100ed30924 RBX: ffff888076984920 RCX: 0000000000080000 [ 897.931867][ C0] RDX: ffffc9000ce2a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 897.939840][ C0] RBP: ffffc900035e7b30 R08: ffffffff8e8b19ef R09: 1ffffffff1d1633d [ 897.947798][ C0] R10: dffffc0000000000 R11: fffffbfff1d1633e R12: ffff8880668f0000 [ 897.955752][ C0] R13: ffff888076984910 R14: dffffc0000000000 R15: 0000000000000014 [ 897.963738][ C0] ? handle_mm_fault+0xe7/0x4c00 [ 897.968671][ C0] ? numa_migrate_prep+0x350/0x350 [ 897.973767][ C0] ? follow_page_pte+0x6dd/0x1ac0 [ 897.978783][ C0] ? pmd_lock+0x60/0x60 [ 897.982929][ C0] __get_user_pages+0x5d0/0x1380 [ 897.987880][ C0] ? mtree_destroy+0x30/0x30 [ 897.992467][ C0] ? populate_vma_page_range+0x380/0x380 [ 897.998113][ C0] populate_vma_page_range+0x2c1/0x380 [ 898.003563][ C0] ? fixup_user_fault+0x700/0x700 [ 898.008579][ C0] ? userfaultfd_unmap_complete+0x29f/0x320 [ 898.014464][ C0] ? down_read+0x1ac/0x2e0 [ 898.018869][ C0] __mm_populate+0x260/0x390 [ 898.023482][ C0] ? faultin_page_range+0x8e0/0x8e0 [ 898.028676][ C0] ? up_write+0x1c3/0x410 [ 898.032999][ C0] vm_mmap_pgoff+0x2da/0x3f0 [ 898.037611][ C0] ? account_locked_vm+0x210/0x210 [ 898.042723][ C0] ? ksys_mmap_pgoff+0xea/0x700 [ 898.047563][ C0] ? __x64_sys_mmap+0x7a/0x130 [ 898.052324][ C0] do_syscall_64+0x55/0xa0 [ 898.056734][ C0] ? clear_bhb_loop+0x40/0x90 [ 898.061398][ C0] ? clear_bhb_loop+0x40/0x90 [ 898.066066][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 898.071946][ C0] RIP: 0033:0x7f9b66f9cdd9 [ 898.076474][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.096092][ C0] RSP: 002b:00007f9b67e52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 898.104527][ C0] RAX: ffffffffffffffda RBX: 00007f9b67215fa0 RCX: 00007f9b66f9cdd9 [ 898.112494][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 898.120662][ C0] RBP: 00007f9b67032d69 R08: ffffffffffffffff R09: 0000000000000000 [ 898.128653][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 898.136625][ C0] R13: 00007f9b67216038 R14: 00007f9b67215fa0 R15: 00007ffcdb072938 [ 898.144598][ C0] [ 898.147948][ C0] Kernel Offset: disabled [ 898.152361][ C0] Rebooting in 86400 seconds..