last executing test programs: 16m39.763825988s ago: executing program 1 (id=1077): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0x3}, 0x8) 16m39.41543526s ago: executing program 1 (id=1081): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4", 0x64, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5", 0x84}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 16m37.991167743s ago: executing program 1 (id=1096): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2b, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcf, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x138, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0x10001, 0x8251c, 0x5, 0x44a0, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 16m37.567099562s ago: executing program 1 (id=1103): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c00000010003704030000000300000000000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c00028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 16m37.009748589s ago: executing program 1 (id=1107): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x40000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) 16m36.533441464s ago: executing program 1 (id=1113): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xe, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), 0x0}, 0x20) 16m21.388757885s ago: executing program 32 (id=1113): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xe, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), 0x0}, 0x20) 13.664019619s ago: executing program 2 (id=11361): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4", 0x64, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa", 0x8d}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5", 0x84}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.599451713s ago: executing program 2 (id=11377): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x882c0, 0x4) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r2, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x33, 0x0, 0x0) 10.489624863s ago: executing program 2 (id=11383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.15276911s ago: executing program 3 (id=11390): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x917) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r5, 0x0, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000002400), 0x2004000, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) 8.100323005s ago: executing program 4 (id=11393): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x882c0, 0x4) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r2, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r3, 0x2219, 0x7721, 0x33, 0x0, 0x0) 7.20556246s ago: executing program 2 (id=11395): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r4, 0x0, 0x0, 0x6) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000100)={0x0, 0x0}) r6 = socket$inet(0x2, 0xa, 0x0) sendmmsg$sock(r6, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) 6.854135591s ago: executing program 3 (id=11398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 6.850557843s ago: executing program 4 (id=11399): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4", 0x64, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa", 0x8d}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5", 0x84}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.421344286s ago: executing program 3 (id=11402): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) clock_gettime(0x17, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x208000, 0x0) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32323b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdc69c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d9560ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f733b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x6, &(0x7f0000006680)) mkdir(&(0x7f00000000c0)='./cgroup\x00', 0x8) chdir(&(0x7f0000000140)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.191661115s ago: executing program 3 (id=11406): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r1 = syz_open_procfs(r0, &(0x7f0000000000)='ns\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, 0x0) r4 = socket(0x1e, 0x4, 0x0) fcntl$setlease(r4, 0x400, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x10f, 0x6f, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x8000000, 0x0}) connect$unix(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r6 = socket$inet6(0xa, 0x400000000001, 0x100) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) r7 = socket(0x1d, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 4.138613396s ago: executing program 4 (id=11407): r0 = socket$inet6(0xa, 0x400000000001, 0x100) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) 3.678935918s ago: executing program 2 (id=11412): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r1 = syz_open_procfs(r0, &(0x7f0000000000)='ns\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, 0x0) r4 = socket(0x1e, 0x4, 0x0) fcntl$setlease(r4, 0x400, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x10f, 0x6f, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x8000000, 0x0}) connect$unix(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r6 = socket$inet6(0xa, 0x400000000001, 0x100) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) r7 = socket(0x1d, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 3.270319247s ago: executing program 4 (id=11418): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4", 0x64, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa", 0x8d}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5", 0x84}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.024695854s ago: executing program 2 (id=11422): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r4, 0x0, 0x0, 0x6) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000100)={0x0, 0x0}) r6 = socket$inet(0x2, 0xa, 0x0) sendmmsg$sock(r6, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) 3.01955071s ago: executing program 3 (id=11423): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r1 = syz_open_procfs(r0, &(0x7f0000000000)='ns\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, 0x0) r4 = socket(0x1e, 0x4, 0x0) fcntl$setlease(r4, 0x400, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x10f, 0x6f, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x8000000, 0x0}) connect$unix(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r6 = socket$inet6(0xa, 0x400000000001, 0x100) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) r7 = socket(0x1d, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) 2.048532668s ago: executing program 0 (id=11435): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d92", 0xb6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428", 0x36}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e6", 0xae}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a13024", 0xcf}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.017491258s ago: executing program 4 (id=11436): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r1 = syz_open_procfs(r0, &(0x7f0000000000)='ns\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, 0x0) r4 = socket(0x1e, 0x4, 0x0) fcntl$setlease(r4, 0x400, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x10f, 0x6f, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x8000000, 0x0}) connect$unix(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r6 = socket$inet6(0xa, 0x400000000001, 0x100) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) socket(0x1d, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) 1.899101063s ago: executing program 5 (id=11437): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r1 = syz_open_procfs(r0, &(0x7f0000000000)='ns\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, 0x0) r4 = socket(0x1e, 0x4, 0x0) fcntl$setlease(r4, 0x400, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x10f, 0x6f, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x8000000, 0x0}) connect$unix(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r6 = socket$inet6(0xa, 0x400000000001, 0x100) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 1.843126695s ago: executing program 0 (id=11438): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x917) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r5, 0x0, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000002400), 0x2004000, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) 1.769399437s ago: executing program 5 (id=11439): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r5, 0x0, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000002400), 0x2004000, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) 1.767692717s ago: executing program 3 (id=11440): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r1 = syz_open_procfs(r0, &(0x7f0000000000)='ns\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, 0x0) r4 = socket(0x1e, 0x4, 0x0) fcntl$setlease(r4, 0x400, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x10f, 0x6f, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x8000000, 0x0}) connect$unix(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r6 = socket$inet6(0xa, 0x400000000001, 0x100) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) r7 = socket(0x1d, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) 1.709092678s ago: executing program 0 (id=11441): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r4, 0x0, 0x0, 0x6) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000100)={0x0, 0x0}) r6 = socket$inet(0x2, 0xa, 0x0) sendmmsg$sock(r6, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) 1.655528595s ago: executing program 5 (id=11442): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x917) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r5, 0x0, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000002400), 0x2004000, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) 1.573735337s ago: executing program 5 (id=11443): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r1 = syz_open_procfs(r0, &(0x7f0000000000)='ns\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, 0x0) r4 = socket(0x1e, 0x4, 0x0) fcntl$setlease(r4, 0x400, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x10f, 0x6f, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r6 = socket$inet6(0xa, 0x400000000001, 0x100) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) r7 = socket(0x1d, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) 1.457002654s ago: executing program 0 (id=11444): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="14"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 1.279156701s ago: executing program 5 (id=11445): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r1 = syz_open_procfs(r0, &(0x7f0000000000)='ns\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, 0x0) r4 = socket(0x1e, 0x4, 0x0) fcntl$setlease(r4, 0x400, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x10f, 0x6f, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x8000000, 0x0}) connect$unix(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r6 = socket$inet6(0xa, 0x400000000001, 0x100) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) r7 = socket(0x1d, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) 1.275401173s ago: executing program 4 (id=11446): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x917) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r5, 0x0, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000002400), 0x2004000, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) 1.166023284s ago: executing program 0 (id=11447): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000006d00010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="042000000d00f4ff07001c"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd36, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d5f}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1.019591977s ago: executing program 5 (id=11448): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d92", 0xb6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428", 0x36}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e6", 0xae}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a13024", 0xcf}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 0 (id=11449): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r1 = syz_open_procfs(r0, &(0x7f0000000000)='ns\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, 0x0) r4 = socket(0x1e, 0x4, 0x0) fcntl$setlease(r4, 0x400, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x10f, 0x6f, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r6 = socket$inet6(0xa, 0x400000000001, 0x100) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) r7 = socket(0x1d, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) kernel console output (not intermixed with test programs): tected capacity change from 0 to 512 [ 670.164972][T18485] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 670.217124][T18485] EXT4-fs (loop2): 1 truncate cleaned up [ 670.238132][T18485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.389958][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.860682][T18471] loop4: detected capacity change from 0 to 32768 [ 671.077015][T18471] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 671.320260][T18471] XFS (loop4): Ending clean mount [ 671.731456][ T5621] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 673.352114][T18588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5500'. [ 673.912288][ T1189] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 674.811585][T18614] loop2: detected capacity change from 0 to 32768 [ 674.866672][T18642] loop4: detected capacity change from 0 to 512 [ 674.981693][T18614] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 675.119946][T18614] XFS (loop2): Ending clean mount [ 675.142937][ T5630] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 675.395647][ T5617] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 676.236875][T18680] loop4: detected capacity change from 0 to 4096 [ 676.252728][T18680] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 677.016616][T18680] ntfs3(loop4): ino=19, mi_enum_attr [ 677.016653][T18680] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 677.144977][T18693] loop2: detected capacity change from 0 to 8192 [ 677.186062][T18680] ntfs3: Cannot use different iocharset when remounting! [ 677.719576][T18693] Dev loop2: unable to read RDB block 8 [ 677.719773][T18693] loop2: unable to read partition table [ 677.720054][T18693] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 679.783722][T18764] loop4: detected capacity change from 0 to 512 [ 679.795072][T18764] EXT4-fs (loop4): Test dummy encryption mode enabled [ 679.953566][T18764] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.5579: inode has both inline data and extents flags [ 679.953607][T18764] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 679.967316][ C0] EXT4-fs (loop4): initial error at time 1781891644: ext4_orphan_get:1399: inode 15 [ 679.967362][ C0] EXT4-fs (loop4): last error at time 1781891644: ext4_orphan_get:1399: inode 15 [ 680.626269][T18764] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.5579: couldn't read orphan inode 15 (err -117) [ 680.626311][T18764] loop4: lost filesystem error report for type 5 error -117 [ 680.652974][T18764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.004689][T18764] EXT4-fs error (device loop4): ext4_check_dx_root:2201: inode #2: comm syz.4.5579: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 682.287089][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.843969][T18819] loop2: detected capacity change from 0 to 256 [ 682.917715][T18819] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 683.358136][T18819] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 684.436140][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 684.436160][ T38] audit: type=1800 audit(1781891649.196:377): pid=18819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5598" name="file1" dev="loop2" ino=1048656 res=0 errno=0 [ 685.922211][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.922324][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.679327][T18989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5675'. [ 691.382891][T19018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5687'. [ 692.514440][T19059] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5706'. [ 692.784134][T19068] loop4: detected capacity change from 0 to 1024 [ 692.793995][T19068] EXT4-fs: Ignoring removed orlov option [ 692.857373][T19068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 692.857520][T19068] ext4 filesystem being mounted at /638/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 694.086416][T19068] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.5710: lblock 0 mapped to illegal pblock 0 (length 6) [ 694.507040][T19068] EXT4-fs error (device loop4): ext4_ext_remove_space:2969: inode #15: comm syz.4.5710: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 694.628309][T19111] 9pnet: p9_errstr2errno: server reported unknown error LÒ [ 694.869334][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 695.127052][T19134] loop2: detected capacity change from 0 to 7 [ 695.164303][T19134] Dev loop2: unable to read RDB block 7 [ 695.164353][T19134] loop2: AHDI p1 p2 p3 [ 695.164375][T19134] loop2: partition table partially beyond EOD, truncated [ 695.224061][T19134] loop2: p1 start 1601398130 is beyond EOD, truncated [ 695.224091][T19134] loop2: p2 start 1702059890 is beyond EOD, truncated [ 696.422880][T19161] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5749'. [ 696.422992][T19161] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5749'. [ 696.680888][T19169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5753'. [ 698.062629][T19179] loop4: detected capacity change from 0 to 32768 [ 698.125361][T19179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5757 (19179) [ 698.923551][T19179] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 698.923588][T19179] BTRFS info (device loop4): using sha256 checksum algorithm [ 699.741583][T19179] BTRFS info (device loop4): rebuilding free space tree [ 701.931978][T19303] macvlan3: entered allmulticast mode [ 701.942788][T19303] bridge0: port 3(macvlan3) entered blocking state [ 701.950892][T19303] bridge0: port 3(macvlan3) entered disabled state [ 702.021734][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5816'. [ 702.462479][T19179] BTRFS info (device loop4): checking UUID tree [ 702.463589][T19179] BTRFS error (device loop4): failed to check the UUID tree: -4 [ 702.575974][T19316] netlink: 'syz.3.5816': attribute type 1 has an invalid length. [ 702.575998][T19316] netlink: 'syz.3.5816': attribute type 2 has an invalid length. [ 703.342030][T19179] BTRFS error (device loop4): open_ctree failed: -4 [ 704.309019][T19336] loop2: detected capacity change from 0 to 32768 [ 704.481028][T19336] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 705.042238][T19336] XFS (loop2): Ending clean mount [ 705.573645][T19336] XFS (loop2): Quotacheck needed: Please wait. [ 707.418903][T19336] XFS (loop2): Quotacheck: Done. [ 707.615574][ T5617] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 709.455908][ T38] audit: type=1326 audit(1781891674.216:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.3.5900" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38f18fce59 code=0x0 [ 711.382102][T19568] fuse: Bad value for 'fd' [ 712.936455][T19512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.976782][T19512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.662696][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 715.398676][ T1189] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.400495][ T1189] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.400542][ T1189] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.400575][ T1189] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.813716][T19737] loop4: detected capacity change from 0 to 512 [ 715.830159][T19737] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 715.887509][T19737] EXT4-fs (loop4): 1 truncate cleaned up [ 715.962772][T19737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.053957][T19737] fscrypt (loop4, inode 18): Can't use IV_INO_LBLK_64 policy on filesystem 'loop4' because it doesn't have stable inode numbers [ 716.150460][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.309749][T19756] netlink: 'syz.2.6019': attribute type 11 has an invalid length. [ 718.037375][T19770] loop2: detected capacity change from 0 to 32768 [ 718.057334][T19770] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 718.124197][T19770] XFS (loop2): Ending clean mount [ 718.830473][T19770] XFS (loop2): Quotacheck needed: Please wait. [ 720.501339][T19867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6068'. [ 720.501368][T19867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6068'. [ 720.622441][T19867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6068'. [ 720.622501][T19867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6068'. [ 721.305116][T13920] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 721.430225][T19770] XFS (loop2): Quotacheck: Done. [ 721.454741][T13920] usb 5-1: Using ep0 maxpacket: 8 [ 721.456647][T13920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.456677][T13920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 721.456714][T13920] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 721.456734][T13920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.462573][T13920] usb 5-1: config 0 descriptor?? [ 721.977187][T13920] usbhid 5-1:0.0: can't add hid device: -71 [ 721.977320][T13920] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 722.072849][ T5617] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 722.099416][T13920] usb 5-1: USB disconnect, device number 25 [ 723.293118][ T38] audit: type=1800 audit(1781891688.046:379): pid=19953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6108" name="file0" dev="tmpfs" ino=5106 res=0 errno=0 [ 723.787179][T13920] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 723.956821][T13920] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 723.956857][T13920] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 723.956886][T13920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 723.956921][T13920] usb 3-1: New USB device found, idVendor=01c2, idProduct=2208, bcdDevice= 0.00 [ 723.956958][T13920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.040987][T13920] usb 3-1: config 0 descriptor?? [ 724.062792][T19959] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 724.540483][T13920] hid-generic 0003:01C2:2208.000D: ignoring exceeding usage max [ 724.543451][T13920] hid-generic 0003:01C2:2208.000D: unknown main item tag 0x0 [ 724.543488][T13920] hid-generic 0003:01C2:2208.000D: unknown main item tag 0x0 [ 724.543518][T13920] hid-generic 0003:01C2:2208.000D: unknown main item tag 0x0 [ 724.543546][T13920] hid-generic 0003:01C2:2208.000D: unknown main item tag 0x0 [ 724.543573][T13920] hid-generic 0003:01C2:2208.000D: unknown main item tag 0x0 [ 724.543732][T13920] hid-generic 0003:01C2:2208.000D: item fetching failed at offset 37/40 [ 724.606831][T13920] hid-generic 0003:01C2:2208.000D: probe with driver hid-generic failed with error -22 [ 724.687763][T13920] usb 3-1: USB disconnect, device number 34 [ 726.463740][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6161'. [ 728.652444][T20146] 9pnet: p9_errstr2errno: server reported unknown error ÿ [ 730.504366][T20220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6237'. [ 730.740764][T20220] batadv0: entered promiscuous mode [ 730.764741][T20220] macsec1: entered promiscuous mode [ 730.765092][T20220] macsec1: entered allmulticast mode [ 730.765109][T20220] batadv0: entered allmulticast mode [ 730.837962][T20220] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 730.959820][T20220] batadv0: left allmulticast mode [ 730.960236][T20220] batadv0: left promiscuous mode [ 731.594728][ T5630] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 731.594792][ T4928] Bluetooth: hci0: command 0x0406 tx timeout [ 732.487541][T20251] loop4: detected capacity change from 0 to 32768 [ 732.638142][T20251] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6248 (20251) [ 733.286734][T20251] BTRFS info (device loop4): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 733.286770][T20251] BTRFS info (device loop4): using xxhash64 checksum algorithm [ 734.081732][T20251] BTRFS info (device loop4): enabling ssd optimizations [ 734.081785][T20251] BTRFS info (device loop4): turning on async discard [ 734.081803][T20251] BTRFS info (device loop4): enabling free space tree [ 734.678078][ T5621] BTRFS info (device loop4): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 735.335591][T20359] vhci_hcd vhci_hcd.0: port 0 already used [ 735.812058][ T38] audit: type=1326 audit(1781891700.566:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20374 comm="syz.4.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41dfdce59 code=0x7ffc0000 [ 735.812115][ T38] audit: type=1326 audit(1781891700.566:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20374 comm="syz.4.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41dfdce59 code=0x7ffc0000 [ 735.812164][ T38] audit: type=1326 audit(1781891700.566:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20374 comm="syz.4.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41dfdce59 code=0x7ffc0000 [ 735.812213][ T38] audit: type=1326 audit(1781891700.566:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20374 comm="syz.4.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fc41dfdce59 code=0x7ffc0000 [ 735.812261][ T38] audit: type=1326 audit(1781891700.566:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20374 comm="syz.4.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41dfdce59 code=0x7ffc0000 [ 735.812312][ T38] audit: type=1326 audit(1781891700.566:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20374 comm="syz.4.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41dfdce59 code=0x7ffc0000 [ 735.812361][ T38] audit: type=1326 audit(1781891700.566:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20374 comm="syz.4.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41dfdce59 code=0x7ffc0000 [ 735.812408][ T38] audit: type=1326 audit(1781891700.566:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20374 comm="syz.4.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41dfdce59 code=0x7ffc0000 [ 735.812457][ T38] audit: type=1326 audit(1781891700.566:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20374 comm="syz.4.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41dfdce59 code=0x7ffc0000 [ 735.812505][ T38] audit: type=1326 audit(1781891700.566:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20374 comm="syz.4.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41dfdce59 code=0x7ffc0000 [ 739.050010][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 739.198276][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 739.202147][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 739.202177][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.202201][ T10] usb 3-1: config 0 has no interface number 0 [ 739.202248][ T10] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 739.202295][ T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 739.202322][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.299275][ T10] usb 3-1: config 0 descriptor?? [ 739.311657][ T10] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 739.516262][ T5729] usb 3-1: USB disconnect, device number 35 [ 741.126989][T20505] fuse: Bad value for 'fd' [ 742.884597][T13920] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 743.041080][T13920] usb 3-1: Using ep0 maxpacket: 16 [ 743.043385][T13920] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 743.043412][T13920] usb 3-1: config 0 has no interface number 0 [ 743.043459][T13920] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 743.087782][T13920] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 743.087806][T13920] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 743.087828][T13920] usb 3-1: Product: syz [ 743.087838][T13920] usb 3-1: SerialNumber: syz [ 743.148515][T13920] usb 3-1: config 0 descriptor?? [ 743.172593][T13920] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 743.258979][T13920] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input31 [ 743.614145][T20582] IPv6: sit1: Disabled Multicast RS [ 743.767627][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 743.768071][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 743.768323][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 743.768560][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 743.768799][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 743.769029][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 743.769259][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 743.769501][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 743.769737][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 743.769971][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 743.770209][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 743.960162][T13920] usb 3-1: USB disconnect, device number 36 [ 743.960251][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 744.126507][T13920] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 745.479907][T20643] tipc: Disabling bearer [ 745.585326][ T5633] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 745.683805][ T68] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 745.792629][ T5633] usb 3-1: unable to get BOS descriptor or descriptor too short [ 745.806416][ T5633] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 745.831006][ T5633] usb 3-1: string descriptor 0 read error: -22 [ 745.831136][ T5633] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 745.831155][ T5633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.153719][ T5633] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 747.242387][ T5633] usb 3-1: USB disconnect, device number 37 [ 747.359247][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.359357][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.520993][T20729] loop4: detected capacity change from 0 to 2048 [ 748.576548][T20729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.576645][T20729] ext4 filesystem being mounted at /703/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 750.323842][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.910979][T20822] loop4: detected capacity change from 0 to 512 [ 752.027231][T20822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 752.029932][T20822] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.6499: Unimplemented hash flags: 0x0001 [ 752.029968][T20822] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.6499: Corrupt directory, running e2fsck is recommended [ 752.030185][T20822] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.6499: path /705/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 752.441561][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.629521][T20840] loop2: detected capacity change from 0 to 256 [ 752.657903][T20840] vfat: Bad value for 'dmask' [ 752.970693][T20854] loop4: detected capacity change from 0 to 512 [ 753.031516][T20854] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 753.031577][T20854] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.6513: inode #15: comm syz.4.6513: iget: illegal inode # [ 753.031623][T20854] loop4: lost filesystem error report for type 5 error -117 [ 753.033624][T20854] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.6513: couldn't read orphan inode 15 (err -117) [ 753.033661][T20854] loop4: lost filesystem error report for type 5 error -117 [ 753.097178][T20854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.801594][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.804934][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 754.964094][ T10] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 754.964140][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.964163][ T10] usb 3-1: Product: syz [ 754.964185][ T10] usb 3-1: Manufacturer: syz [ 754.964200][ T10] usb 3-1: SerialNumber: syz [ 755.020628][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 755.020655][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 755.447523][ T10] r8152-cfgselector 3-1: USB disconnect, device number 38 [ 757.983614][T21050] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 758.253479][T21059] loop2: detected capacity change from 0 to 512 [ 758.430171][T21059] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 759.004213][T21089] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6620'. [ 759.461117][ T5630] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 759.605211][T21113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6631'. [ 761.804742][ T5876] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 761.964828][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 761.981672][ T5876] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 761.981706][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.981728][ T5876] usb 3-1: Product: syz [ 761.981744][ T5876] usb 3-1: Manufacturer: syz [ 761.981760][ T5876] usb 3-1: SerialNumber: syz [ 762.113855][ T5876] usb 3-1: config 0 descriptor?? [ 762.159440][ T5876] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 763.405408][ T5880] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 763.521259][ T5630] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 763.521536][ T5630] Bluetooth: hci3: Injecting HCI hardware error event [ 763.531806][ T4928] Bluetooth: hci3: hardware error 0x00 [ 763.574634][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 763.576659][ T5880] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 763.576735][ T5880] usb 5-1: config 0 has no interface number 0 [ 763.576776][ T5880] usb 5-1: config 0 interface 184 has no altsetting 0 [ 763.579012][ T5880] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 763.579040][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.579061][ T5880] usb 5-1: Product: syz [ 763.579075][ T5880] usb 5-1: Manufacturer: syz [ 763.579089][ T5880] usb 5-1: SerialNumber: syz [ 763.650810][ T5880] usb 5-1: config 0 descriptor?? [ 763.958513][ T5876] gspca_ov534_9: reg_w failed -71 [ 764.204644][ T5876] gspca_ov534_9: Unknown sensor 0000 [ 764.204750][ T5876] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 764.211525][ T5876] usb 3-1: USB disconnect, device number 39 [ 764.279647][ T5880] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 764.279679][ T5880] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 764.410531][T21283] fuse: Bad value for 'fd' [ 765.754619][ T4928] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 765.897337][ T5880] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 765.897370][ T5880] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 765.897390][ T5880] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 765.897699][ T5880] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 765.970653][ T5880] usb 5-1: USB disconnect, device number 26 [ 767.682853][T21364] binder: 21361:21364 ioctl c0306201 200000000080 returned -14 [ 767.703024][T21364] binder: 21361:21364 ioctl c0306201 2000000003c0 returned -14 [ 768.615764][T21396] binder: 21395:21396 unknown command 0 [ 768.615788][T21396] binder: 21395:21396 ioctl c0306201 200000000080 returned -22 [ 770.480043][T21460] binder: 21459:21460 ioctl c0306201 200000000080 returned -14 [ 770.497861][T21460] binder: 21459:21460 ioctl c0306201 2000000003c0 returned -14 [ 771.863983][T21478] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 776.972221][ T67] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 777.464254][ T38] kauditd_printk_skb: 13 callbacks suppressed [ 777.464275][ T38] audit: type=1326 audit(1781891742.216:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.2.6850" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 777.491216][ T38] audit: type=1326 audit(1781891742.246:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.2.6850" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 777.502311][ T38] audit: type=1326 audit(1781891742.246:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.2.6850" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 777.502448][ T38] audit: type=1326 audit(1781891742.246:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.2.6850" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 777.515444][ T38] audit: type=1326 audit(1781891742.276:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.2.6850" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 777.530310][ T38] audit: type=1326 audit(1781891742.276:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.2.6850" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 777.672711][ T38] audit: type=1326 audit(1781891742.426:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.2.6850" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 777.672773][ T38] audit: type=1326 audit(1781891742.426:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.2.6850" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 777.672820][ T38] audit: type=1326 audit(1781891742.426:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.2.6850" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 777.722279][ T38] audit: type=1326 audit(1781891742.476:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.2.6850" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 778.997908][T21654] /dev/nullb0: Can't lookup blockdev [ 779.351032][T21657] Invalid option length (1040762) for dns_resolver key [ 784.111152][T21775] loop4: detected capacity change from 0 to 512 [ 784.262495][T21775] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 785.178303][T21794] ip6erspan0: entered promiscuous mode [ 792.108251][T21888] binder: 21887:21888 ioctl c0306201 2000000001c0 returned -14 [ 794.830561][T21957] loop2: detected capacity change from 0 to 8192 [ 794.986505][T21957] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 805.306708][T22131] input: syz1 as /devices/virtual/input/input32 [ 807.525920][T22158] loop4: detected capacity change from 0 to 64 [ 809.171942][ T45] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 809.376925][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.377038][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.062316][T22197] fuse: Bad value for 'fd' [ 813.449950][T22217] overlayfs: failed to clone upperpath [ 815.219629][T22242] loop4: detected capacity change from 0 to 1024 [ 817.529195][T22266] loop4: detected capacity change from 0 to 1024 [ 817.530325][T22266] EXT4-fs: Ignoring removed orlov option [ 817.582328][T22266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 817.863589][T22281] /dev/nullb0: Can't lookup blockdev [ 818.258674][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.854635][T22388] blkio.reset_stats is deprecated [ 824.304235][T22400] futex_wake_op: syz.3.7172 tries to shift op by 144; fix this program [ 824.312704][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7172'. [ 824.322651][T22400] netlink: 'syz.3.7172': attribute type 2 has an invalid length. [ 827.340554][T22420] loop4: detected capacity change from 0 to 1024 [ 827.479906][T22420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 827.480047][T22420] ext4 filesystem being mounted at /761/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 827.831205][ T5714] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 828.313652][T22448] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7180: bg 0: block 112: padding at end of block bitmap is not set [ 828.793161][T22448] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 828.793197][T22448] EXT4-fs (loop4): This should not happen!! Data will be lost [ 828.793197][T22448] [ 828.793212][T22448] EXT4-fs (loop4): Total free blocks count 0 [ 828.793225][T22448] EXT4-fs (loop4): Free/Dirty block details [ 828.794196][T22448] EXT4-fs (loop4): free_blocks=0 [ 828.794334][T22448] EXT4-fs (loop4): dirty_blocks=64 [ 828.794350][T22448] EXT4-fs (loop4): Block reservation details [ 828.794362][T22448] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 829.018055][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.018093][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.018136][ T5714] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 829.018161][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.079946][ T5714] usb 3-1: config 0 descriptor?? [ 829.300286][ T5621] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 829.325984][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 829.657382][ T5714] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 829.950047][ T5714] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 830.154304][ T5714] cp2112 0003:10C4:EA90.000E: error requesting version [ 830.573656][ T5714] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -32 [ 832.083848][T13920] usb 3-1: USB disconnect, device number 40 [ 832.346729][T22507] netlink: 'syz.4.7209': attribute type 1 has an invalid length. [ 832.457768][T22513] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.7209'. [ 832.457863][T22513] openvswitch: netlink: Message has 4112 unknown bytes. [ 832.509403][T22520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7209'. [ 832.583179][T22520] bond1: entered promiscuous mode [ 832.583205][T22520] bond1: entered allmulticast mode [ 832.889179][T22521] bond1: (slave geneve2): making interface the new active one [ 832.889208][T22521] geneve2: entered promiscuous mode [ 832.889409][T22521] geneve2: entered allmulticast mode [ 832.975610][T22521] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 832.979731][ T3375] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 832.979771][ T3375] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 832.979799][ T3375] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 832.979826][ T3375] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 835.212335][ T5880] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 835.424224][T22549] netlink: 'syz.4.7225': attribute type 3 has an invalid length. [ 835.424245][T22549] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7225'. [ 835.476869][T22580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7225'. [ 835.601201][T22584] netlink: 'syz.3.7240': attribute type 1 has an invalid length. [ 835.602067][T22584] netlink: 'syz.3.7240': attribute type 2 has an invalid length. [ 835.673905][T22588] loop2: detected capacity change from 0 to 128 [ 835.693282][T22588] FAT-fs (loop2): bogus number of FAT sectors [ 835.693305][T22588] FAT-fs (loop2): Can't find a valid FAT filesystem [ 836.288563][ T5880] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 836.304650][T13920] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 836.458748][T13920] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 152, changing to 11 [ 836.461837][T13920] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 836.461870][T13920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.461892][T13920] usb 3-1: Product: syz [ 836.461914][T13920] usb 3-1: Manufacturer: syz [ 836.461930][T13920] usb 3-1: SerialNumber: syz [ 837.107595][T13920] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 837.107745][T13920] usb 3-1: MIDIStreaming interface descriptor not found [ 838.102293][T22651] loop2: detected capacity change from 0 to 512 [ 838.150456][T22651] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 838.240595][T13920] usb 3-1: USB disconnect, device number 41 [ 839.287839][T22651] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.7266: invalid indirect mapped block 4294967295 (level 0) [ 839.287884][T22651] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 839.359244][ C1] EXT4-fs (loop2): initial error at time 1781891804: ext4_free_branches:1023: inode 16 [ 839.359287][ C1] EXT4-fs (loop2): last error at time 1781891804: ext4_free_branches:1023: inode 16 [ 839.973464][T22688] udevd[22688]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 840.030167][T22651] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.7266: invalid indirect mapped block 4294967295 (level 1) [ 840.030197][T22651] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 840.255670][T22651] EXT4-fs (loop2): 1 orphan inode deleted [ 840.255699][T22651] EXT4-fs (loop2): 1 truncate cleaned up [ 840.299041][T22651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 840.620713][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.381240][ T4928] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 841.428494][ T1186] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 841.486337][T22737] Device name cannot be null; rc = [-22] [ 847.238225][T22773] loop2: detected capacity change from 0 to 256 [ 847.240942][T22773] exfat: Deprecated parameter 'utf8' [ 849.369921][T22773] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 849.370829][T22773] exFAT-fs (loop2): failed to load alloc-bitmap [ 849.370842][T22773] exFAT-fs (loop2): failed to recognize exfat type [ 851.589543][ T4928] Bluetooth: hci0: unexpected event for opcode 0x2007 [ 852.591450][T22865] dvmrp8: entered allmulticast mode [ 853.440232][T22866] can: request_module (can-proto-0) failed. [ 853.703760][T22888] loop2: detected capacity change from 0 to 4096 [ 853.721729][T22888] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 854.374678][T22888] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 854.606390][ T1484] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 854.606768][ T5617] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 854.606796][ T5617] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 854.606815][ T5617] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 854.622689][ T1484] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 854.839194][T22941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7383'. [ 854.861153][T22943] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7382'. [ 854.861183][T22943] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7382'. [ 855.313757][T22964] loop4: detected capacity change from 0 to 256 [ 856.103461][T22993] loop4: detected capacity change from 0 to 512 [ 856.120016][T22993] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (1800) [ 856.411888][T22958] loop2: detected capacity change from 0 to 40427 [ 856.420462][T22958] F2FS-fs: heap/no_heap options were deprecated [ 856.504972][T22958] F2FS-fs (loop2): build fault injection rate: 19 [ 856.504997][T22958] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 856.546142][T22958] F2FS-fs (loop2): invalid crc value [ 856.706334][T22958] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0 [ 857.073452][T22958] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 857.121369][T22958] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 857.472267][T22958] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 857.547393][T23048] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 857.547420][T23048] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 857.553850][T23048] vhci_hcd vhci_hcd.0: Device attached [ 857.986708][ T5633] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 858.443801][ C0] F2FS-fs (loop2): inject write IO error in f2fs_write_end_bio of blk_update_request+0x57b/0xe50 [ 858.495255][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 858.495296][ C0] Tainted: [L]=SOFTLOCKUP [ 858.495304][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 858.495331][ C0] Call Trace: [ 858.495344][ C0] [ 858.495354][ C0] dump_stack_lvl+0xe8/0x150 [ 858.495390][ C0] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 858.495423][ C0] f2fs_write_end_io+0x124b/0x1710 [ 858.495478][ C0] blk_update_request+0x57b/0xe50 [ 858.495528][ C0] blk_mq_end_request+0x3e/0x70 [ 858.495550][ C0] blk_flush_complete_seq+0x699/0xd10 [ 858.495584][ C0] flush_end_io+0xbc2/0xf10 [ 858.495619][ C0] __blk_mq_end_request+0x4e6/0x650 [ 858.495647][ C0] blk_done_softirq+0x10a/0x160 [ 858.495695][ C0] handle_softirqs+0x1d9/0x6c0 [ 858.495729][ C0] run_ksoftirqd+0x52/0x180 [ 858.495748][ C0] smpboot_thread_fn+0x57c/0xa80 [ 858.495770][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 858.495795][ C0] kthread+0x388/0x470 [ 858.495818][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 858.495837][ C0] ? __pfx_kthread+0x10/0x10 [ 858.495859][ C0] ret_from_fork+0x514/0xb70 [ 858.495884][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 858.495906][ C0] ? __switch_to+0xc89/0x1420 [ 858.495933][ C0] ? __pfx_kthread+0x10/0x10 [ 858.495956][ C0] ret_from_fork_asm+0x1a/0x30 [ 858.495995][ C0] [ 858.496017][ C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 858.503384][ T5617] F2FS-fs (loop2): do_checkpoint failed err:-5, stop checkpoint [ 858.633543][T23049] vhci_hcd: connection reset by peer [ 858.734089][ T5729] loop2: lost filesystem error report for type 5 error -108 [ 858.861519][ T8576] vhci_hcd vhci_hcd.4: stop threads [ 858.944117][ T8576] vhci_hcd vhci_hcd.4: release socket [ 859.029124][ T8576] vhci_hcd vhci_hcd.4: disconnect device [ 859.377504][T23101] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7456'. [ 859.809133][T23109] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7461'. [ 860.946815][T23130] loop2: detected capacity change from 0 to 256 [ 863.187349][ T5633] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 863.436561][T23197] usb usb8: usbfs: process 23197 (syz.2.7500) did not claim interface 0 before use [ 864.142251][T23230] Option ' ' to dns_resolver key: bad/missing value [ 864.258246][ T38] kauditd_printk_skb: 127 callbacks suppressed [ 864.258265][ T38] audit: type=1326 audit(1781891829.016:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.3.7521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f18fce59 code=0x7ffc0000 [ 864.260165][ T38] audit: type=1326 audit(1781891829.016:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.3.7521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f18fce59 code=0x7ffc0000 [ 864.262583][ T38] audit: type=1326 audit(1781891829.016:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.3.7521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f18fce59 code=0x7ffc0000 [ 864.262857][ T38] audit: type=1326 audit(1781891829.016:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.3.7521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f38f18fce59 code=0x7ffc0000 [ 864.281470][ T38] audit: type=1326 audit(1781891829.036:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.3.7521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f18fce59 code=0x7ffc0000 [ 864.464799][ T38] audit: type=1326 audit(1781891829.186:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.3.7521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f38f18bd68e code=0x7ffc0000 [ 864.565876][ T38] audit: type=1326 audit(1781891829.326:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.3.7521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f38f18bd68e code=0x7ffc0000 [ 864.578140][ T38] audit: type=1326 audit(1781891829.326:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.3.7521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f38f18bd68e code=0x7ffc0000 [ 864.611740][ T38] audit: type=1326 audit(1781891829.366:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.3.7521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f38f18bd68e code=0x7ffc0000 [ 864.718258][ T38] audit: type=1326 audit(1781891829.466:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.3.7521" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f38f18bd68e code=0x7ffc0000 [ 865.223755][T23266] loop2: detected capacity change from 0 to 512 [ 865.240525][T23266] EXT4-fs: inline encryption not supported [ 865.256117][T23266] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 865.256143][T23266] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 865.345865][T23266] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 865.461904][T23266] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7534: bg 0: block 248: padding at end of block bitmap is not set [ 865.461953][T23266] loop2: lost filesystem error report for type 5 error -117 [ 865.475405][ C1] EXT4-fs (loop2): last error at time 1781891830: ext4_validate_block_bitmap:441 [ 865.517034][T23279] netlink: 'syz.3.7540': attribute type 1 has an invalid length. [ 865.616121][T13920] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 865.682628][T23266] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.7534: Failed to acquire dquot type 1 [ 865.682653][T23266] loop2: lost filesystem error report for type 5 error -28 [ 865.790667][T23289] tmpfs: Bad value for 'mpol' [ 865.815134][T13920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 865.818306][T13920] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 865.818389][T13920] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 865.818435][T13920] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 865.818463][T13920] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 865.953065][T23266] EXT4-fs (loop2): 1 truncate cleaned up [ 865.979817][T13920] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 865.979841][T13920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.979856][T13920] usb 5-1: Product: syz [ 865.979866][T13920] usb 5-1: Manufacturer: syz [ 865.979878][T13920] usb 5-1: SerialNumber: syz [ 866.022973][T23266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 866.137097][T23266] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.7534: Failed to acquire dquot type 1 [ 866.324336][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 866.377097][T13144] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:26: Failed to release dquot type 1 [ 866.377133][T13144] loop2: lost filesystem error report for type 5 error -117 [ 867.208400][T23335] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7568'. [ 867.652204][T23351] loop4: detected capacity change from 0 to 1024 [ 867.785882][T23351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 868.029218][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 868.339723][T13920] usb 5-1: USB disconnect, device number 27 [ 870.106681][T23443] loop2: detected capacity change from 0 to 512 [ 870.208524][T23443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 870.208667][T23443] ext4 filesystem being mounted at /735/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 870.242369][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.242481][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.439178][T23443] EXT4-fs error (device loop2): ext4_xattr_block_list:766: inode #12: comm syz.2.7617: corrupted xattr block 6: invalid header [ 870.896614][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.146633][T23482] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7633'. [ 871.146694][T23482] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7633'. [ 871.478708][T23492] netlink: 'syz.4.7640': attribute type 2 has an invalid length. [ 873.513994][T23555] bridge0: left allmulticast mode [ 873.526435][T23555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.530832][T23555] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.553481][T23555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.927560][T23565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7673'. [ 873.989453][T23555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.998603][T23555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.011022][T23555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 874.011050][T23555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 874.023471][T23555] veth1_vlan: left promiscuous mode [ 874.026248][T23555] veth0_vlan: left promiscuous mode [ 874.028804][T23555] veth0_vlan: entered promiscuous mode [ 874.036697][T23555] veth1_vlan: entered promiscuous mode [ 874.053902][T23555] veth1_macvtap: left promiscuous mode [ 874.056833][T23555] veth0_macvtap: left promiscuous mode [ 874.058929][T23555] veth0_macvtap: entered promiscuous mode [ 874.061107][T23555] veth1_macvtap: entered promiscuous mode [ 874.085648][T23555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 874.087631][T23555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 874.097623][T23555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 874.099957][T23555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 874.123035][T23555] 8021q: adding VLAN 0 to HW filter on device bond1 [ 874.125816][T23555] veth3: left allmulticast mode [ 874.201986][T23555] ip6erspan0: left promiscuous mode [ 874.424057][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.424299][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.437320][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.437485][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.766898][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.786715][T23578] loop2: detected capacity change from 0 to 1024 [ 874.796375][T23578] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 874.796507][T23578] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 874.950575][T23578] EXT4-fs (loop2): invalid journal inode [ 875.373425][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.459111][T23584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7683'. [ 875.459360][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.460799][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.559624][T23606] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7693'. [ 875.567780][T23604] netlink: 'syz.2.7692': attribute type 1 has an invalid length. [ 875.669486][T23608] netlink: 4816 bytes leftover after parsing attributes in process `syz.3.7694'. [ 876.623800][T23641] loop2: detected capacity change from 0 to 128 [ 876.708094][T23641] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 876.739353][T23641] ext4 filesystem being mounted at /747/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 876.859916][ T1186] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 877.058177][ T5617] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 877.271196][T23663] loop4: detected capacity change from 0 to 128 [ 877.272493][T23663] EXT4-fs: Ignoring removed nomblk_io_submit option [ 877.273876][T23660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7718'. [ 877.327063][T23663] EXT4-fs (loop4): Test dummy encryption mode enabled [ 877.493005][T23663] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 877.493569][T23663] ext4 filesystem being mounted at /829/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 877.683623][T23674] dummy0: entered allmulticast mode [ 877.773039][ T5621] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 878.593358][T23696] loop4: detected capacity change from 0 to 2048 [ 878.764967][T23696] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 878.857180][T22776] udevd[22776]: incorrect nilfs2 checksum on /dev/loop4 [ 878.860467][T23709] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 879.487531][ T38] kauditd_printk_skb: 33 callbacks suppressed [ 879.487552][ T38] audit: type=1800 audit(1781891844.236:578): pid=23696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7736" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 879.847842][T23739] netlink: 376 bytes leftover after parsing attributes in process `syz.2.7758'. [ 879.851813][T23743] loop4: detected capacity change from 0 to 64 [ 880.281957][T23757] loop2: detected capacity change from 0 to 256 [ 880.369523][T23757] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 880.829102][T23777] loop4: detected capacity change from 0 to 256 [ 880.830198][T23777] exfat: Deprecated parameter 'utf8' [ 880.830297][T23777] exfat: Deprecated parameter 'namecase' [ 880.830359][T23777] exfat: Deprecated parameter 'namecase' [ 880.891295][T23777] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 880.933189][T23777] exfat: Deprecated parameter 'utf8' [ 880.933290][T23777] exfat: Deprecated parameter 'namecase' [ 880.933354][T23777] exfat: Deprecated parameter 'namecase' [ 881.638153][T23807] loop5: detected capacity change from 0 to 128 [ 881.682849][T23807] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 881.703697][T23807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 881.748663][T23799] can: request_module (can-proto-0) failed. [ 884.560153][T23836] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 884.561341][T23836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 884.579297][T23836] veth0_to_team: entered promiscuous mode [ 884.613265][T23836] bond1: left promiscuous mode [ 884.613289][T23836] geneve2: left promiscuous mode [ 884.613482][T23836] bond1: left allmulticast mode [ 884.613496][T23836] geneve2: left allmulticast mode [ 884.615481][T23836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 885.556027][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.640326][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.656639][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.991126][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.993380][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.286730][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.964965][T23885] loop4: detected capacity change from 0 to 256 [ 889.668400][T23953] loop2: detected capacity change from 0 to 256 [ 890.830020][ T4928] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 891.392717][T24026] usb usb8: check_ctrlrecip: process 24026 (syz.4.7887) requesting ep 01 but needs 81 [ 891.392752][T24026] usb usb8: usbfs: process 24026 (syz.4.7887) did not claim interface 0 before use [ 891.822091][T24039] loop2: detected capacity change from 0 to 1764 [ 893.338692][T24072] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.344554][T24072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.476662][T24072] dummy0: left allmulticast mode [ 893.548748][T24072] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 893.557231][T24072] ip6erspan0: left allmulticast mode [ 893.564494][T24072] 8021q: adding VLAN 0 to HW filter on device bond2 [ 893.639221][T13144] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.639396][T13144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.003185][T24039] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 895.442415][T24095] loop2: detected capacity change from 0 to 1024 [ 896.360476][T24113] netlink: 'syz.4.7925': attribute type 1 has an invalid length. [ 896.360501][T24113] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 896.531348][T24116] loop2: detected capacity change from 0 to 4096 [ 896.666910][T24116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.485566][T24137] Invalid ELF header len 7 [ 897.496058][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.371882][T24166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7950'. [ 898.371928][T24166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7950'. [ 898.600496][T24166] geneve3: entered promiscuous mode [ 899.452502][T24202] loop4: detected capacity change from 0 to 512 [ 899.464580][ T5632] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 899.543796][T24202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 899.627845][ T5632] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 899.627892][ T5632] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 899.627923][ T5632] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 899.627952][ T5632] usb 3-1: config 0 interface 0 has no altsetting 0 [ 899.628088][ T5632] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 899.628119][ T5632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.710490][ T5632] usb 3-1: config 0 descriptor?? [ 899.729315][T24194] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 900.213204][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.347661][ T5632] magicmouse 0003:05AC:0265.0010: unknown main item tag 0x2 [ 900.347700][ T5632] magicmouse 0003:05AC:0265.0010: unknown main item tag 0x0 [ 900.347728][ T5632] magicmouse 0003:05AC:0265.0010: unknown main item tag 0x0 [ 900.347755][ T5632] magicmouse 0003:05AC:0265.0010: unknown main item tag 0x0 [ 900.347783][ T5632] magicmouse 0003:05AC:0265.0010: unknown main item tag 0x0 [ 900.347811][ T5632] magicmouse 0003:05AC:0265.0010: unknown main item tag 0x0 [ 900.347839][ T5632] magicmouse 0003:05AC:0265.0010: unknown main item tag 0x0 [ 900.347867][ T5632] magicmouse 0003:05AC:0265.0010: unknown main item tag 0x0 [ 900.347895][ T5632] magicmouse 0003:05AC:0265.0010: unknown main item tag 0x0 [ 900.347922][ T5632] magicmouse 0003:05AC:0265.0010: unknown main item tag 0x0 [ 900.371443][ T5632] magicmouse 0003:05AC:0265.0010: hidraw0: USB HID v0.08 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 900.371590][ T5632] magicmouse 0003:05AC:0265.0010: magicmouse input not registered [ 900.623731][ T5632] magicmouse 0003:05AC:0265.0010: probe with driver magicmouse failed with error -12 [ 900.827031][T24235] loop4: detected capacity change from 0 to 64 [ 900.834509][ T5632] usb 3-1: USB disconnect, device number 42 [ 901.510201][T24260] netlink: 87 bytes leftover after parsing attributes in process `syz.2.7994'. [ 901.901458][ T38] audit: type=1800 audit(1781891866.656:579): pid=24235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7976" name="bus" dev="loop4" ino=9 res=0 errno=0 [ 902.874134][T24305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8015'. [ 902.874169][T24305] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 903.497856][T24331] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8028'. [ 904.273359][T24365] loop2: detected capacity change from 0 to 128 [ 906.765976][ T5632] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 906.785639][T24463] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8088'. [ 906.918401][ T5632] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 906.918432][ T5632] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 906.918453][ T5632] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 906.918476][ T5632] usb 3-1: config 220 has no interface number 2 [ 906.918541][ T5632] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 906.918565][ T5632] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 906.918586][ T5632] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 906.918613][ T5632] usb 3-1: config 220 interface 0 has no altsetting 0 [ 906.918631][ T5632] usb 3-1: config 220 interface 76 has no altsetting 0 [ 906.918650][ T5632] usb 3-1: config 220 interface 1 has no altsetting 0 [ 906.924192][ T5632] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 906.924276][ T5632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.924332][ T5632] usb 3-1: Product: syz [ 906.924361][ T5632] usb 3-1: Manufacturer: syz [ 906.932420][ T5632] usb 3-1: SerialNumber: syz [ 907.199815][T24471] geneve0: entered promiscuous mode [ 907.304771][ T5632] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 907.304806][ T5632] uvcvideo 3-1:220.0: No valid video chain found. [ 907.305079][ T5632] usb 3-1: selecting invalid altsetting 0 [ 907.497888][ T5632] usb 3-1: selecting invalid altsetting 0 [ 907.497928][ T5632] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 907.577614][ T5632] usb 3-1: USB disconnect, device number 43 [ 907.614635][T24471] geneve0: left promiscuous mode [ 908.001184][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 908.253341][T24464] loop4: detected capacity change from 0 to 32768 [ 908.265675][T24464] btrfs: Deprecated parameter 'usebackuproot' [ 908.265976][T24464] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 908.310475][T24503] loop2: detected capacity change from 0 to 64 [ 908.357938][T24464] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8089 (24464) [ 908.630954][T24464] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 908.630993][T24464] BTRFS info (device loop4): using crc32c checksum algorithm [ 908.986509][T24464] BTRFS info (device loop4): rebuilding free space tree [ 909.137656][T24464] BTRFS info (device loop4): enabling ssd optimizations [ 909.137686][T24464] BTRFS info (device loop4): using spread ssd allocation scheme [ 909.137706][T24464] BTRFS info (device loop4): turning on flush-on-commit [ 909.137724][T24464] BTRFS info (device loop4): enabling free space tree [ 909.137741][T24464] BTRFS info (device loop4): force clearing of disk cache [ 909.137759][T24464] BTRFS info (device loop4): trying to use backup root at mount time [ 909.137863][T24464] BTRFS info (device loop4): force zlib compression, level 3 [ 909.294343][ T38] audit: type=1800 audit(1781891874.046:580): pid=24464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8089" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 911.139329][T24534] loop2: detected capacity change from 0 to 40427 [ 911.158273][T24534] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 911.158296][T24534] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 911.159783][T24534] F2FS-fs (loop2): invalid crc value [ 911.677638][T24534] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 912.273834][T24534] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 912.273870][T24534] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 915.691813][T24665] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8155'. [ 915.708367][T24665] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8155'. [ 920.001670][ T4928] Bluetooth: hci2: unexpected event for opcode 0x040d [ 920.332738][ T5621] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 921.352665][T24818] team0: Device wg0 is of different type [ 921.727463][T24832] loop4: detected capacity change from 0 to 128 [ 921.897481][T24832] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 921.897581][T24832] hpfs: filesystem error: improperly stopped [ 921.897600][T24832] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 921.897616][T24832] hpfs: You really don't want any checks? You are crazy... [ 921.939856][T24832] hpfs: hpfs_map_sector(): read error [ 921.939874][T24832] hpfs: code page support is disabled [ 921.940874][T24832] hpfs: hpfs_map_4sectors(): unaligned read [ 921.941014][T24832] hpfs: hpfs_map_4sectors(): unaligned read [ 921.941026][T24832] hpfs: filesystem error: unable to find root dir [ 922.033246][T24832] hpfs: hpfs_map_4sectors(): unaligned read [ 922.657902][T24832] hpfs: hpfs_map_sector(): read error [ 922.860031][T24855] loop2: detected capacity change from 0 to 4096 [ 923.873582][ T38] audit: type=1800 audit(1781891888.626:581): pid=24855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8268" name="file2" dev="loop2" ino=33 res=0 errno=0 [ 924.714583][ T5714] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 924.864572][ T5714] usb 3-1: Using ep0 maxpacket: 16 [ 924.866890][ T5714] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 924.866926][ T5714] usb 3-1: config 0 interface 0 has no altsetting 0 [ 924.870095][ T5714] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 924.870127][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.870150][ T5714] usb 3-1: Product: syz [ 924.870167][ T5714] usb 3-1: Manufacturer: syz [ 924.870183][ T5714] usb 3-1: SerialNumber: syz [ 924.937859][ T5714] usb 3-1: config 0 descriptor?? [ 927.874488][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 927.971499][ T5714] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input34 [ 928.102854][ T5714] imon:send_packet: packet tx failed (-71) [ 928.116422][ T5714] imon 3-1:0.0: panel buttons/knobs setup failed [ 928.365034][ T5714] rc_core: IR keymap rc-imon-pad not found [ 928.365056][ T5714] Registered IR keymap rc-empty [ 928.365249][ T5714] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 928.365269][ T5714] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 928.369834][ T5714] imon:send_packet: packet tx failed (-71) [ 928.411546][ T5714] imon 3-1:0.0: remote input dev register failed [ 928.411763][ T5714] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 929.110719][T25041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8356'. [ 929.110742][T25041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8356'. [ 929.617862][ T5714] imon 3-1:0.0: unable to initialize intf0, err 0 [ 929.617886][ T5714] imon:imon_probe: failed to initialize context! [ 929.617899][ T5714] imon 3-1:0.0: unable to register, err -19 [ 929.651913][ T5714] usb 3-1: USB disconnect, device number 44 [ 930.074912][ T5714] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 930.225273][ T5714] usb 3-1: Using ep0 maxpacket: 32 [ 930.229171][ T5714] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 930.229203][ T5714] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 930.229230][ T5714] usb 3-1: config 0 interface 0 has no altsetting 0 [ 930.233347][ T5714] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 930.233378][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.233401][ T5714] usb 3-1: Product: syz [ 930.233417][ T5714] usb 3-1: Manufacturer: syz [ 930.233433][ T5714] usb 3-1: SerialNumber: syz [ 930.311736][ T5714] usb 3-1: config 0 descriptor?? [ 930.585013][ T5714] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 930.585058][ T5714] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 930.620262][ T5714] usb 3-1: USB disconnect, device number 45 [ 931.289436][T25110] Set syz1 is full, maxelem 65536 reached [ 931.677899][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.678012][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.683992][T25118] loop4: detected capacity change from 0 to 8192 [ 932.094533][ T5714] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 932.202779][T25118] loop4: p1 < > p2 < p5 > p4 [ 932.267273][ T5714] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 932.267310][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.272783][ T5714] usb 3-1: config 0 descriptor?? [ 932.327867][ T5714] cp210x 3-1:0.0: cp210x converter detected [ 932.568999][T25118] loop4: p4 size 16776960 extends beyond EOD, truncated [ 932.634658][T25118] loop4: p5 size 16776960 extends beyond EOD, truncated [ 932.705140][ T5714] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 932.759071][ T5714] usb 3-1: cp210x converter now attached to ttyUSB0 [ 932.997270][ T5876] usb 3-1: USB disconnect, device number 46 [ 933.059634][T23379] udevd[23379]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 933.101183][T23380] udevd[23380]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 933.109742][T23378] udevd[23378]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 933.133947][T22770] udevd[22770]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 933.165441][T25164] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8416'. [ 933.194737][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 933.510308][ T5876] cp210x 3-1:0.0: device disconnected [ 935.131924][T25231] program syz.4.8450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 937.040711][T25306] team0: Device wg0 is of different type [ 937.715963][T23087] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 937.881805][T23087] usb 3-1: Using ep0 maxpacket: 32 [ 937.884023][T23087] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 937.884051][T23087] usb 3-1: config 0 has no interface number 0 [ 937.909399][T23087] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 937.909432][T23087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.909454][T23087] usb 3-1: Product: syz [ 937.909470][T23087] usb 3-1: Manufacturer: syz [ 937.909486][T23087] usb 3-1: SerialNumber: syz [ 937.954280][T23087] usb 3-1: config 0 descriptor?? [ 938.021345][T23087] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 938.451563][T25334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.461464][T23087] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 938.465606][T25334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.641533][T23087] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 938.725926][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 938.836753][T23087] usb 3-1: USB disconnect, device number 47 [ 939.018089][T13142] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 939.064006][T23087] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 939.299763][T23087] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 939.319182][T23087] quatech2 3-1:0.51: device disconnected [ 939.677688][ T38] audit: type=1326 audit(1781891904.406:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.2.8537" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 939.677755][ T38] audit: type=1326 audit(1781891904.406:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.2.8537" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 939.677806][ T38] audit: type=1326 audit(1781891904.406:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.2.8537" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 939.677856][ T38] audit: type=1326 audit(1781891904.406:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.2.8537" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 939.677903][ T38] audit: type=1326 audit(1781891904.406:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.2.8537" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 939.677950][ T38] audit: type=1326 audit(1781891904.406:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.2.8537" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 939.677998][ T38] audit: type=1326 audit(1781891904.406:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.2.8537" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 939.678046][ T38] audit: type=1326 audit(1781891904.406:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.2.8537" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 939.678095][ T38] audit: type=1326 audit(1781891904.406:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.2.8537" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 939.678142][ T38] audit: type=1326 audit(1781891904.406:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.2.8537" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 940.188162][T25419] loop2: detected capacity change from 0 to 2048 [ 940.302411][T25419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 940.333029][T25430] netlink: 'syz.3.8546': attribute type 2 has an invalid length. [ 940.420348][T25419] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 940.451700][T25419] EXT4-fs error (device loop2): ext4_find_extent:904: inode #2: comm syz.2.8541: inode has invalid extent depth: 9 [ 940.553501][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.765960][T25443] loop4: detected capacity change from 0 to 32768 [ 941.932667][T25443] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 942.210798][T25443] XFS (loop4): Ending clean mount [ 943.092361][T25497] loop2: detected capacity change from 0 to 32768 [ 943.117690][T25497] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8574 (25497) [ 943.479223][ T5621] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 943.540675][T25497] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 943.540710][T25497] BTRFS info (device loop2): using blake2b checksum algorithm [ 943.880071][T25497] BTRFS info (device loop2): enabling ssd optimizations [ 943.880101][T25497] BTRFS info (device loop2): turning on async discard [ 943.880119][T25497] BTRFS info (device loop2): enabling free space tree [ 943.880139][T25497] BTRFS info (device loop2): use zstd compression, level 3 [ 945.718742][ T5617] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 946.870075][T25629] loop4: detected capacity change from 0 to 1764 [ 948.301667][T25637] loop4: detected capacity change from 0 to 32768 [ 948.395363][T25637] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 948.610951][T25683] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 948.611257][T25683] syzkaller0: linktype set to 823 [ 948.681019][T25637] XFS (loop4): Ending clean mount [ 949.078355][T25710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8665'. [ 949.371812][ T5621] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 952.123521][ T67] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.201447][ T67] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.352674][ T67] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.352727][ T67] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.263357][T25859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8733'. [ 953.263391][T25859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8733'. [ 953.844563][T25821] loop4: detected capacity change from 0 to 32768 [ 954.536959][T25878] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8742'. [ 955.578883][T25924] fuse: Bad value for 'fd' [ 957.216442][T23087] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 957.375927][T23087] usb 3-1: Using ep0 maxpacket: 32 [ 957.378643][T23087] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 957.378673][T23087] usb 3-1: config 0 has no interface number 0 [ 957.381979][T23087] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 957.382010][T23087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.382032][T23087] usb 3-1: Product: syz [ 957.382048][T23087] usb 3-1: Manufacturer: syz [ 957.382063][T23087] usb 3-1: SerialNumber: syz [ 957.459342][T23087] usb 3-1: config 0 descriptor?? [ 957.487398][T23087] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 957.773378][T23087] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 957.889048][T23087] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 958.070002][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 958.070884][ T5729] usb 3-1: USB disconnect, device number 48 [ 958.178028][ T5729] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 958.204188][ T5729] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 958.220284][ T5729] quatech2 3-1:0.51: device disconnected [ 958.915065][T26041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8817'. [ 958.990569][T26041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8817'. [ 959.161640][T26037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8816'. [ 959.181329][T26037] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.021274][T26046] loop4: detected capacity change from 0 to 32768 [ 960.143118][T26046] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8820 (26046) [ 960.323832][T26004] syz.3.8803 (26004): drop_caches: 2 [ 960.570867][T26046] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 960.570905][T26046] BTRFS info (device loop4): using crc32c checksum algorithm [ 960.955141][T26106] loop2: detected capacity change from 0 to 512 [ 961.040148][T26106] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 961.065240][T26106] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.8840: bad orphan inode 131083 [ 961.065293][T26106] loop2: lost filesystem error report for type 5 error -117 [ 961.095896][T26106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 961.266317][T26046] BTRFS info (device loop4): enabling ssd optimizations [ 961.266342][T26046] BTRFS info (device loop4): turning on flush-on-commit [ 961.266357][T26046] BTRFS info (device loop4): enabling free space tree [ 961.266374][T26046] BTRFS info (device loop4): enabling auto defrag [ 961.266391][T26046] BTRFS info (device loop4): use lzo compression, level 1 [ 961.266410][T26046] BTRFS info (device loop4): max_inline set to 4096 [ 961.519682][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.927922][T26135] netlink: 'syz.2.8850': attribute type 12 has an invalid length. [ 962.849165][T26164] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 963.465732][T26186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8878'. [ 963.551078][T26186] netlink: 'syz.3.8878': attribute type 1 has an invalid length. [ 963.551098][T26186] netlink: 'syz.3.8878': attribute type 2 has an invalid length. [ 963.733268][ T5621] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 967.087304][T26295] loop4: detected capacity change from 0 to 128 [ 967.283835][T26295] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 967.297117][T26295] ext4 filesystem being mounted at /942/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 967.641141][ T5621] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 968.744592][ T5714] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 968.881057][T26315] loop2: detected capacity change from 0 to 32768 [ 968.893971][T26315] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8940 (26315) [ 968.917040][ T5714] usb 5-1: Using ep0 maxpacket: 32 [ 968.927194][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.927230][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.927272][ T5714] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 968.927298][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.004869][ T5714] usb 5-1: config 0 descriptor?? [ 969.457640][ T5714] hid_parser_main: 23 callbacks suppressed [ 969.457665][ T5714] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 969.457724][ T5714] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 969.651294][ T5714] ft260 0003:0403:6030.0011: chip code: 0000 0000 [ 969.657548][T26315] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 969.657581][T26315] BTRFS info (device loop2): using sha256 checksum algorithm [ 970.045363][ T67] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 970.087586][T26315] BTRFS info (device loop2): enabling ssd optimizations [ 970.087616][T26315] BTRFS info (device loop2): turning on async discard [ 970.087634][T26315] BTRFS info (device loop2): enabling free space tree [ 970.141385][ T5714] usb 5-1: USB disconnect, device number 28 [ 972.785454][T26460] loop8: detected capacity change from 0 to 7 [ 973.039431][T26460] Dev loop8: unable to read RDB block 7 [ 973.039476][T26460] loop8: unable to read partition table [ 973.039650][T26460] loop8: partition table beyond EOD, truncated [ 973.039684][T26460] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 974.442259][ T5617] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 975.884820][T26511] loop4: detected capacity change from 0 to 32768 [ 976.004737][T26511] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 976.151230][T26511] XFS (loop4): Ending clean mount [ 977.201593][T13142] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 977.483237][ T5621] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 981.946625][T26720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.026999][T26720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.080680][T26720] bond0 (unregistering): Released all slaves [ 982.864615][ T5880] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 982.905586][T26779] loop2: detected capacity change from 0 to 512 [ 982.974280][T26779] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.9146: iget: bad i_size value: 38620345925642 [ 982.974322][T26779] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 982.992227][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 982.992253][ C0] EXT4-fs (loop2): initial error at time 1781891948: ext4_orphan_get:1399: inode 15 [ 982.992286][ C0] EXT4-fs (loop2): last error at time 1781891948: ext4_orphan_get:1399: inode 15 [ 983.021093][T26779] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.9146: couldn't read orphan inode 15 (err -117) [ 983.021193][T26779] loop2: lost filesystem error report for type 5 error -117 [ 983.051872][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 983.068892][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 983.068955][ T5880] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 983.068980][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.082493][ T5880] usb 5-1: config 0 descriptor?? [ 983.280297][T26779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.772967][ T5880] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 984.043983][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.718487][T26843] netlink: 51 bytes leftover after parsing attributes in process `syz.2.9176'. [ 985.499007][ T5714] usb 5-1: USB disconnect, device number 29 [ 987.119047][T23087] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 987.285288][T23087] usb 3-1: Using ep0 maxpacket: 16 [ 987.287850][T23087] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 987.287879][T23087] usb 3-1: config 0 has no interface number 0 [ 987.287925][T23087] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 987.287953][T23087] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 987.290737][T23087] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 987.290768][T23087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.290790][T23087] usb 3-1: Product: syz [ 987.290806][T23087] usb 3-1: Manufacturer: syz [ 987.290821][T23087] usb 3-1: SerialNumber: syz [ 987.400135][T23087] usb 3-1: config 0 descriptor?? [ 987.401484][T26928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 987.401610][T26928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 987.636758][T26928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 987.637464][T26928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 987.847920][T23087] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 987.848235][T23087] asix 3-1:0.34: probe with driver asix failed with error -61 [ 988.087169][T26969] fuse: Bad value for 'fd' [ 988.124058][ T5714] usb 3-1: USB disconnect, device number 49 [ 991.571569][T27098] netlink: 'syz.3.9286': attribute type 1 has an invalid length. [ 991.869614][T27098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 992.069809][T27104] bond3: (slave veth0_to_bond): making interface the new active one [ 992.425691][T27104] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 993.135988][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.136102][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.383109][T27141] can: request_module (can-proto-0) failed. [ 993.736486][T27156] can: request_module (can-proto-0) failed. [ 994.282310][T27175] loop4: detected capacity change from 0 to 512 [ 994.528819][T27175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.528961][T27175] ext4 filesystem being mounted at /976/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 995.318197][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 995.318219][ T38] audit: type=1800 audit(1781891961.074:600): pid=27190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9324" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 995.406612][T27213] process '/newroot/1421/file0' started with executable stack [ 995.745228][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.497739][T27217] loop2: detected capacity change from 0 to 32768 [ 996.532028][T27261] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 996.609338][T27217] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 996.745778][T27217] XFS (loop2): Ending clean mount [ 997.172137][T27217] XFS (loop2): Quotacheck needed: Please wait. [ 998.250730][T27326] input: syz1 as /devices/virtual/input/input36 [ 998.360969][T27217] XFS (loop2): Quotacheck: Done. [ 998.641556][ T5617] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1000.259051][T27383] can: request_module (can-proto-0) failed. [ 1000.788703][T27408] loop2: detected capacity change from 0 to 1024 [ 1000.789946][T27408] EXT4-fs: Ignoring removed mblk_io_submit option [ 1000.888819][T27408] EXT4-fs: Mount option(s) incompatible with ext2 [ 1001.069645][T13142] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1002.143038][T27463] loop2: detected capacity change from 0 to 512 [ 1002.320272][T27463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.040042][T27500] loop4: detected capacity change from 0 to 2048 [ 1003.111069][T27500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.326630][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.682220][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.771718][T27552] loop2: detected capacity change from 0 to 1024 [ 1008.671925][T27638] can: request_module (can-proto-0) failed. [ 1009.276844][T27665] loop4: detected capacity change from 0 to 147 [ 1009.293764][T27665] vfat: Unknown parameter 'uni_' [ 1010.666735][T27678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.673184][T27678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.741022][ T38] audit: type=1326 audit(1781891976.494:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27716 comm="syz.2.9562" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 1010.741358][ T38] audit: type=1326 audit(1781891976.494:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27716 comm="syz.2.9562" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 1010.797883][ T38] audit: type=1326 audit(1781891976.554:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27716 comm="syz.2.9562" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 1010.798341][ T38] audit: type=1326 audit(1781891976.554:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27716 comm="syz.2.9562" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 1010.798384][ T38] audit: type=1326 audit(1781891976.554:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27716 comm="syz.2.9562" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 1010.798757][ T38] audit: type=1326 audit(1781891976.554:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27716 comm="syz.2.9562" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 1010.799465][ T38] audit: type=1326 audit(1781891976.554:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27716 comm="syz.2.9562" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 1010.799516][ T38] audit: type=1326 audit(1781891976.554:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27716 comm="syz.2.9562" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 1010.799941][ T38] audit: type=1326 audit(1781891976.554:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27716 comm="syz.2.9562" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 1010.800427][ T38] audit: type=1326 audit(1781891976.554:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27716 comm="syz.2.9562" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf54ce59 code=0x7ffc0000 [ 1012.063265][T27678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.198612][T27678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.771691][ T1189] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.771732][ T1189] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.771762][ T1189] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1015.816096][ T1189] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.816134][ T1189] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.816163][ T1189] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1015.816207][ T1189] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.816237][ T1189] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.816265][ T1189] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1015.816303][ T1189] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.816332][ T1189] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.816360][ T1189] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1016.196674][T27886] can: request_module (can-proto-0) failed. [ 1017.832131][T27923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.546634][T27923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1018.580760][T27923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.532862][T24078] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.732370][T24078] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.777763][T24078] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.799111][T24078] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.862759][T28087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9734'. [ 1021.852654][T28118] loop2: detected capacity change from 0 to 1024 [ 1022.002434][T28118] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1022.002560][T28118] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1022.077375][T28118] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1022.077835][T28118] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1022.087683][T28118] EXT4-fs error (device loop2): ext4_read_inode_bitmap:169: comm syz.2.9748: Inode bitmap for bg 0 marked uninitialized [ 1022.087718][T28118] loop2: lost filesystem error report for type 5 error -117 [ 1022.103111][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1022.103185][ C0] EXT4-fs (loop2): initial error at time 1781891987: ext4_read_inode_bitmap:169 [ 1022.103264][ C0] EXT4-fs (loop2): last error at time 1781891987: ext4_read_inode_bitmap:169 [ 1022.363292][T28118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1023.587060][T28191] can: request_module (can-proto-0) failed. [ 1023.588582][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.109069][T28203] can: request_module (can-proto-0) failed. [ 1024.224544][T23875] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1024.415258][T23875] usb 3-1: Using ep0 maxpacket: 8 [ 1024.418040][T23875] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.418138][T23875] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1024.418192][T23875] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1024.418224][T23875] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1024.418269][T23875] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1024.418294][T23875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.540042][T23875] hub 3-1:1.0: bad descriptor, ignoring hub [ 1024.540086][T23875] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1024.543341][T23875] cdc_wdm 3-1:1.0: skipping garbage [ 1024.543369][T23875] cdc_wdm 3-1:1.0: skipping garbage [ 1024.585548][T23875] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1024.585647][T23875] cdc_wdm 3-1:1.0: Unknown control protocol [ 1026.160413][T28279] loop4: detected capacity change from 0 to 16 [ 1026.188355][T28279] erofs (device loop4): mounted with root inode @ nid 36. [ 1026.226991][T28279] evm: overlay not supported [ 1026.558315][T28235] loop2: detected capacity change from 0 to 40427 [ 1026.578501][T28235] F2FS-fs (loop2): build fault injection rate: 18446 [ 1026.884238][T28235] F2FS-fs (loop2): invalid crc value [ 1027.470818][T28235] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1027.500773][T28314] overlayfs: failed to clone upperpath [ 1027.545834][T28320] overlayfs: failed to clone upperpath [ 1028.022408][T28235] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 1028.022442][T28235] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1028.022473][T28235] F2FS-fs (loop2): Start checkpoint disabled! [ 1028.692876][T28235] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 1028.760643][T23875] usb 3-1: USB disconnect, device number 50 [ 1031.232548][T28381] loop4: detected capacity change from 0 to 32768 [ 1031.409458][T23875] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1031.572774][T23875] usb 3-1: Using ep0 maxpacket: 8 [ 1031.597781][T23875] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1031.597815][T23875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.597835][T23875] usb 3-1: Product: syz [ 1031.597850][T23875] usb 3-1: Manufacturer: syz [ 1031.597866][T23875] usb 3-1: SerialNumber: syz [ 1031.641535][T23875] usb 3-1: config 0 descriptor?? [ 1031.711519][T23875] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1031.711589][T23875] pctv452e: pctv452e_power_ctrl: 1 [ 1031.711589][T23875] [ 1031.711649][T23875] usb 3-1: selecting invalid altsetting 3 [ 1031.711664][T23875] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1031.711664][T23875] [ 1031.711682][T23875] dvb-usb: bulk message failed: -22 (5/0) [ 1031.772882][T28416] read_mapping_page failed! [ 1031.772900][T28416] ERROR: (device loop4): dbDiscardAG: -EIO [ 1031.772900][T28416] [ 1031.954057][T28408] loop2: detected capacity change from 0 to 4096 [ 1031.976544][T28408] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1032.062317][T23875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1032.082114][T23875] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1032.082210][T23875] usb 3-1: media controller created [ 1032.111573][T23875] dvb-usb: bulk message failed: -22 (8/0) [ 1032.111598][T23875] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1032.111711][T23875] dvb-usb: MAC address reading failed. [ 1032.145181][T23875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1032.371670][T23875] DVB: Unable to find symbol stb0899_attach() [ 1032.371766][T23875] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1032.667378][T23875] rc_core: IR keymap rc-tt-1500 not found [ 1032.667401][T23875] Registered IR keymap rc-empty [ 1032.888332][T23875] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1032.934678][T23875] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input37 [ 1032.941351][T23875] dvb-usb: schedule remote query interval to 100 msecs. [ 1032.941377][T23875] pctv452e: pctv452e_power_ctrl: 0 [ 1032.941377][T23875] [ 1032.941964][T23875] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1033.051134][T23560] dvb-usb: bulk message failed: -22 (4/0) [ 1033.051180][T23560] dvb-usb: error -22 while querying for an remote control event. [ 1033.128447][T23875] usb 3-1: USB disconnect, device number 51 [ 1033.155144][T23560] dvb-usb: bulk message failed: -22 (4/0) [ 1033.155177][T23560] dvb-usb: error -22 while querying for an remote control event. [ 1033.284528][T23560] dvb-usb: bulk message failed: -22 (4/0) [ 1033.284564][T23560] dvb-usb: error -22 while querying for an remote control event. [ 1034.273082][T23875] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1034.339830][T28469] can: request_module (can-proto-0) failed. [ 1034.867272][T23087] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1035.028405][T23087] usb 5-1: config 0 has no interfaces? [ 1035.028444][T23087] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1035.028470][T23087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.062625][T23087] usb 5-1: config 0 descriptor?? [ 1035.324988][ C1] sd 0:0:1:0: [sda] tag#3940 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1035.325095][ C1] sd 0:0:1:0: [sda] tag#3940 CDB: Read(6) 08 00 00 00 20 40 00 00 00 00 00 00 [ 1035.369233][T23087] usb 5-1: USB disconnect, device number 30 [ 1035.779681][T28528] loop2: detected capacity change from 0 to 512 [ 1035.806834][T28528] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 1039.484566][ T5880] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1039.669069][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 1039.671575][ T5880] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.671644][ T5880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 1039.682006][ T5880] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1039.682036][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.682068][ T5880] usb 5-1: Product: syz [ 1039.682084][ T5880] usb 5-1: Manufacturer: syz [ 1039.682098][ T5880] usb 5-1: SerialNumber: syz [ 1040.929053][ T5880] cdc_ncm 5-1:1.0: bind() failure [ 1040.977551][ T5880] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1040.977620][ T5880] cdc_ncm 5-1:1.1: bind() failure [ 1040.998411][ T5880] usb 5-1: USB disconnect, device number 31 [ 1042.856690][T28703] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.872104][T28703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.031498][ T67] Bluetooth: (null): Invalid header checksum [ 1043.089499][T28703] veth0_to_team: left promiscuous mode [ 1043.103170][T28703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1043.108310][T28703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1043.120272][T28703] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1043.120298][T28703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1043.131825][T28703] veth1_vlan: left promiscuous mode [ 1043.134579][T28703] veth0_vlan: left promiscuous mode [ 1043.136508][T28703] veth0_vlan: entered promiscuous mode [ 1043.143369][T28703] veth1_vlan: entered promiscuous mode [ 1043.153428][T28703] veth1_macvtap: left promiscuous mode [ 1043.156178][T28703] veth0_macvtap: left promiscuous mode [ 1043.158777][T28703] veth0_macvtap: entered promiscuous mode [ 1043.161459][T28703] veth1_macvtap: entered promiscuous mode [ 1043.176730][T28703] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1043.178979][T28703] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1043.181210][T28703] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1043.183385][T28703] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1043.192391][T28703] veth0_to_team: entered promiscuous mode [ 1043.271517][T28703] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1043.274528][T28703] geneve3: left promiscuous mode [ 1043.274555][T28703] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1043.340545][T13142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.341226][T13142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.508961][T13142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.509116][T13142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.361065][T28730] binder: BINDER_SET_CONTEXT_MGR already set [ 1044.361083][T28730] binder: 28727:28730 ioctl 4018620d 200000000040 returned -16 [ 1045.109139][T28730] binder: 28727:28730 ioctl c0306201 0 returned -14 [ 1045.246096][ T67] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1045.246152][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.246181][ T67] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1045.513923][ T67] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1045.513960][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.513986][ T67] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1045.544313][T28750] loop4: detected capacity change from 0 to 256 [ 1045.657952][T28750] FAT-fs (loop4): data area starts beyond volume (274 > 64) [ 1045.657980][T28750] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1046.009861][ T8576] wlan1: Trigger new scan to find an IBSS to join [ 1046.172182][ T67] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.172221][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.172249][ T67] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1046.255739][ T67] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.255778][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.255807][ T67] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1049.997512][ T68] wlan1: Trigger new scan to find an IBSS to join [ 1050.906981][T13142] wlan1: Creating new IBSS network, BSSID 0e:d3:5c:5d:3d:86 [ 1051.262528][T28867] loop4: detected capacity change from 0 to 2048 [ 1051.571439][T28867] loop4: detected capacity change from 0 to 8192 [ 1052.134212][T28867] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 1052.134243][T28867] FAT-fs (loop4): Filesystem has been set read-only [ 1052.134441][T28867] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 2068) [ 1052.134487][T28867] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 2068) [ 1054.602147][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.602227][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.802442][T28959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10111'. [ 1056.037874][T28963] macvlan3: entered promiscuous mode [ 1056.037913][T28963] macvlan3: entered allmulticast mode [ 1056.094800][T28963] bond4: (slave macvlan3): Opening slave failed [ 1057.646210][ T5880] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1057.845447][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 1057.861755][ T5880] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1057.861788][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.861812][ T5880] usb 5-1: Product: syz [ 1057.861828][ T5880] usb 5-1: Manufacturer: syz [ 1057.861844][ T5880] usb 5-1: SerialNumber: syz [ 1057.932269][ T5880] usb 5-1: config 0 descriptor?? [ 1057.963480][ T5880] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1058.874821][ T5880] gspca_topro: reg_w err -110 [ 1058.904680][ T5880] gspca_topro: Sensor soi763a [ 1060.753074][T29052] loop2: detected capacity change from 0 to 512 [ 1060.763800][T29052] EXT4-fs: Ignoring removed i_version option [ 1060.763826][T29052] EXT4-fs: Ignoring removed nobh option [ 1060.783374][T29052] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1060.821367][T29052] EXT4-fs (loop2): 1 truncate cleaned up [ 1060.834115][T29052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1060.967511][T23087] usb 5-1: USB disconnect, device number 32 [ 1061.428526][ T38] kauditd_printk_skb: 32 callbacks suppressed [ 1061.428576][ T38] audit: type=1800 audit(1781892027.124:643): pid=29065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10153" name="bus" dev="loop2" ino=19 res=0 errno=0 [ 1064.452381][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.826092][T29099] loop4: detected capacity change from 0 to 256 [ 1071.193777][T29218] can: request_module (can-proto-0) failed. [ 1073.360778][T29241] can: request_module (can-proto-0) failed. [ 1075.617185][ T4928] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 1083.362712][ T45] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1083.846819][T29447] Invalid argument reading file caps for ./file0 [ 1086.947325][T29488] can: request_module (can-proto-0) failed. [ 1087.018193][T29461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10321'. [ 1087.031869][T29461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10321'. [ 1088.316043][T13576] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1088.464708][T13576] usb 5-1: Using ep0 maxpacket: 32 [ 1088.489405][T13576] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1088.489440][T13576] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.489462][T13576] usb 5-1: Product: syz [ 1088.489478][T13576] usb 5-1: Manufacturer: syz [ 1088.489494][T13576] usb 5-1: SerialNumber: syz [ 1088.541915][T13576] usb 5-1: config 0 descriptor?? [ 1088.599276][T13576] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1089.522387][T13576] gspca_topro: reg_w err -110 [ 1089.544463][T13576] gspca_topro: Sensor soi763a [ 1091.219999][T29549] can: request_module (can-proto-0) failed. [ 1091.293310][T23560] usb 5-1: USB disconnect, device number 33 [ 1093.605497][T29571] can: request_module (can-proto-0) failed. [ 1097.377941][T29630] loop2: detected capacity change from 0 to 4096 [ 1097.378936][T29630] EXT4-fs: Ignoring removed i_version option [ 1097.378958][T29630] EXT4-fs: Ignoring removed oldalloc option [ 1098.456609][T29630] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1098.456870][T29630] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 1100.111597][T29632] can: request_module (can-proto-0) failed. [ 1102.631280][T29663] loop2: detected capacity change from 0 to 512 [ 1102.650377][T29663] EXT4-fs: Ignoring removed orlov option [ 1102.784519][T29663] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1106.132078][T29663] EXT4-fs: error -4 creating inode table initialization thread [ 1106.132988][T29663] EXT4-fs (loop2): mount failed [ 1109.264485][T29700] loop2: detected capacity change from 0 to 512 [ 1109.558683][T29700] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.10402: EA inode hash validation failed [ 1109.560111][T29700] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.10402: corrupted inode contents [ 1109.560143][T29700] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1109.564424][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1109.564449][ C0] EXT4-fs (loop2): initial error at time 1781892075: ext4_do_update_inode:5742: inode 15 [ 1109.564480][ C0] EXT4-fs (loop2): last error at time 1781892075: ext4_do_update_inode:5742: inode 15 [ 1109.753980][T29700] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #15: comm syz.2.10402: mark_inode_dirty error [ 1109.754021][T29700] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1109.786804][T29700] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.10402: corrupted inode contents [ 1109.786844][T29700] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1109.812960][T29700] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.10402: mark_inode_dirty error [ 1109.812998][T29700] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1109.813615][T29700] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.10402: mark inode dirty (error -117) [ 1109.813648][T29700] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1109.814210][T29700] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 1109.814446][T29700] EXT4-fs (loop2): 1 orphan inode deleted [ 1109.817437][T29700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.115304][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.836042][T29732] fuse: Bad value for 'fd' [ 1114.314536][T29752] Bluetooth: hci5: command 0x0405 tx timeout [ 1116.039102][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.039213][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.459801][ T1189] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1118.346387][T29838] can: request_module (can-proto-0) failed. [ 1118.950210][T29861] netlink: 'syz.3.10475': attribute type 28 has an invalid length. [ 1119.702170][T29875] overlayfs: failed to clone upperpath [ 1119.848364][T29876] overlayfs: failed to clone upperpath [ 1123.776176][T29922] loop0: detected capacity change from 0 to 16 [ 1123.963666][T29922] erofs (device loop0): mounted with root inode @ nid 36. [ 1128.107322][T29952] netlink: 'syz.2.10514': attribute type 28 has an invalid length. [ 1134.217218][T30035] netlink: 'syz.3.10545': attribute type 28 has an invalid length. [ 1134.288776][T30035] tipc: Enabling of bearer rejected, already enabled [ 1134.401880][T30044] tipc: Started in network mode [ 1134.401916][T30044] tipc: Node identity ac14140f, cluster identity 4711 [ 1134.402244][T30044] tipc: New replicast peer: 255.255.255.255 [ 1134.487766][T30044] tipc: Enabled bearer , priority 10 [ 1135.424849][ T5880] tipc: Node number set to 2886997007 [ 1137.106865][T30120] netlink: 'syz.2.10580': attribute type 28 has an invalid length. [ 1137.144067][T30120] tipc: Enabling of bearer rejected, already enabled [ 1146.118691][T30238] netlink: 'syz.3.10625': attribute type 28 has an invalid length. [ 1146.154244][T30238] tipc: Enabling of bearer rejected, already enabled [ 1146.292587][T30243] netlink: 'syz.2.10628': attribute type 28 has an invalid length. [ 1146.321488][T30243] tipc: Enabling of bearer rejected, already enabled [ 1146.422374][T30252] netlink: 'syz.3.10633': attribute type 28 has an invalid length. [ 1146.436940][T30252] tipc: Enabling of bearer rejected, already enabled [ 1146.851513][T30258] can: request_module (can-proto-0) failed. [ 1147.188656][T30274] loop4: detected capacity change from 0 to 128 [ 1149.278407][ T45] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1149.604727][T30321] tipc: Enabling of bearer rejected, already enabled [ 1156.157760][T30485] tipc: Enabling of bearer rejected, already enabled [ 1163.802294][T30694] netlink: 'syz.2.10816': attribute type 28 has an invalid length. [ 1164.527712][T30716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10827'. [ 1165.568559][T30745] netlink: 'syz.4.10839': attribute type 28 has an invalid length. [ 1167.459746][T30791] loop2: detected capacity change from 0 to 512 [ 1167.460892][T30791] EXT4-fs: Ignoring removed i_version option [ 1167.460947][T30791] EXT4-fs: Ignoring removed nobh option [ 1167.472390][T30791] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1167.809709][T30791] EXT4-fs (loop2): 1 truncate cleaned up [ 1167.818139][T30791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1168.472964][ T38] audit: type=1800 audit(1781892134.224:644): pid=30810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10851" name="bus" dev="loop2" ino=19 res=0 errno=0 [ 1168.900137][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.456127][T30857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10885'. [ 1170.511825][T30857] tipc: Enabling of bearer rejected, already enabled [ 1171.383978][T30882] can: request_module (can-proto-0) failed. [ 1177.462802][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.462917][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.590051][T31000] netlink: 'syz.3.10944': attribute type 28 has an invalid length. [ 1178.922999][T31011] MTD: Couldn't look up '/dev/nullb0': -13 [ 1181.275561][T24078] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1189.982350][T31202] netlink: 'syz.3.11027': attribute type 28 has an invalid length. [ 1190.035388][T31202] tipc: Enabling of bearer rejected, already enabled [ 1191.582078][T31238] netlink: 'syz.2.11043': attribute type 28 has an invalid length. [ 1191.699841][T31238] tipc: Enabling of bearer rejected, already enabled [ 1192.902093][T31274] netlink: 'syz.2.11059': attribute type 28 has an invalid length. [ 1194.265926][T31288] netlink: 'syz.2.11065': attribute type 28 has an invalid length. [ 1194.270751][T31288] tipc: Enabling of bearer rejected, already enabled [ 1194.509147][T31296] netlink: 'syz.2.11068': attribute type 28 has an invalid length. [ 1194.589454][T31296] tipc: Enabling of bearer rejected, already enabled [ 1194.794783][T31303] netlink: 'syz.4.11070': attribute type 28 has an invalid length. [ 1194.801974][T31303] tipc: New replicast peer: 255.255.255.255 [ 1194.825393][T31303] tipc: Enabled bearer , priority 10 [ 1196.477250][T31319] netlink: 'syz.4.11078': attribute type 28 has an invalid length. [ 1196.513675][T31319] tipc: Enabling of bearer rejected, already enabled [ 1196.964374][T31330] MTD: Couldn't look up '/dev/nullb0': -13 [ 1198.152007][T31343] MTD: Couldn't look up '/dev/nullb0': -13 [ 1199.888589][T31354] loop4: detected capacity change from 0 to 512 [ 1199.889735][T31354] EXT4-fs: Ignoring removed i_version option [ 1199.889759][T31354] EXT4-fs: Ignoring removed nobh option [ 1200.034766][T31354] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1200.208410][T31354] EXT4-fs (loop4): 1 truncate cleaned up [ 1200.222737][T31354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1201.522416][ T38] audit: type=1800 audit(1781892166.934:645): pid=31379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11092" name="bus" dev="loop4" ino=19 res=0 errno=0 [ 1201.667519][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.893365][T31506] netlink: 'syz.3.11157': attribute type 28 has an invalid length. [ 1205.923484][T31506] tipc: Enabling of bearer rejected, already enabled [ 1206.939581][T31524] can: request_module (can-proto-0) failed. [ 1209.087714][T31602] MTD: Couldn't look up '/dev/nullb0': -13 [ 1210.919671][T31640] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.11213'. [ 1211.163900][T31651] netlink: 'syz.3.11218': attribute type 28 has an invalid length. [ 1211.184173][T31651] tipc: Enabling of bearer rejected, already enabled [ 1213.405395][ T3375] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1218.524188][T31843] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1219.971411][T31888] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1231.787816][T32061] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1233.930567][T32094] MTD: Couldn't look up '/dev/nullb0': -13 [ 1235.377806][T32107] can: request_module (can-proto-0) failed. [ 1235.928435][T32118] can: request_module (can-proto-0) failed. [ 1236.504143][T32148] can: request_module (can-proto-0) failed. [ 1237.669035][T32181] can: request_module (can-proto-0) failed. [ 1237.801682][T32191] can: request_module (can-proto-0) failed. [ 1239.079773][T32206] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1239.086492][ T39] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 1239.086516][ T39] Tainted: G L syzkaller #0 [ 1239.086526][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1239.086534][ T39] task:kworker/0:0 state:D stack:20992 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1239.086589][ T39] Workqueue: usb_hub_wq hub_event [ 1239.086618][ T39] Call Trace: [ 1239.086624][ T39] [ 1239.086635][ T39] __schedule+0x1709/0x5530 [ 1239.086661][ T39] ? __lock_acquire+0x683/0x2ce0 [ 1239.086705][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1239.086732][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1239.086759][ T39] ? rt_spin_lock+0x1e0/0x400 [ 1239.086780][ T39] ? __pfx___schedule+0x10/0x10 [ 1239.086811][ T39] ? schedule+0x90/0x2b0 [ 1239.086836][ T39] schedule+0x164/0x2b0 [ 1239.086860][ T39] usb_kill_urb+0x1cf/0x2f0 [ 1239.086884][ T39] ? __pfx_usb_kill_urb+0x10/0x10 [ 1239.086905][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1239.086940][ T39] usb_start_wait_urb+0x22a/0x5b0 [ 1239.086968][ T39] ? rcu_is_watching+0x15/0xb0 [ 1239.086990][ T39] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1239.087040][ T39] usb_control_msg+0x234/0x3e0 [ 1239.087074][ T39] hub_port_init+0xb0b/0x28b0 [ 1239.087126][ T39] hub_event+0x24e2/0x4cf0 [ 1239.087211][ T39] ? __pfx_hub_event+0x10/0x10 [ 1239.087243][ T39] ? process_one_work+0x8cd/0x12b0 [ 1239.087283][ T39] ? process_one_work+0x8cd/0x12b0 [ 1239.087315][ T39] ? rcu_is_watching+0x15/0xb0 [ 1239.087337][ T39] ? process_one_work+0x8cd/0x12b0 [ 1239.087371][ T39] ? process_one_work+0x8cd/0x12b0 [ 1239.087404][ T39] process_one_work+0x93a/0x12b0 [ 1239.087472][ T39] ? __pfx_process_one_work+0x10/0x10 [ 1239.087504][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 1239.087540][ T39] ? assign_work+0x3cf/0x5d0 [ 1239.087581][ T39] worker_thread+0xb05/0x10d0 [ 1239.087631][ T39] kthread+0x388/0x470 [ 1239.087660][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1239.087691][ T39] ? __pfx_kthread+0x10/0x10 [ 1239.087721][ T39] ret_from_fork+0x514/0xb70 [ 1239.087754][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1239.087781][ T39] ? __switch_to+0xc89/0x1420 [ 1239.087809][ T39] ? __pfx_kthread+0x10/0x10 [ 1239.087838][ T39] ret_from_fork_asm+0x1a/0x30 [ 1239.087890][ T39] [ 1239.088146][ T39] [ 1239.088146][ T39] Showing all locks held in the system: [ 1239.088159][ T39] 5 locks held by kworker/0:0/9: [ 1239.088172][ T39] #0: ffff88801ab29538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1239.088243][ T39] #1: ffffc900000e7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1239.088307][ T39] #2: ffff88802b18c210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 1239.088358][ T39] #3: ffff88802b1a6658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20ad/0x4cf0 [ 1239.088416][ T39] #4: ffff88802a8cb658 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20e1/0x4cf0 [ 1239.088477][ T39] 2 locks held by kworker/0:1/10: [ 1239.088490][ T39] #0: ffff88813fe4a538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1239.088549][ T39] #1: ffffc900000f7c60 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1239.088601][ T39] 1 lock held by rcub/0/19: [ 1239.088611][ T39] #0: ffffffff8dfc8c08 (rcu_state){+.+.}-{0:0}, at: rcu_boost_kthread+0x30d/0x4c0 [ 1239.088693][ T39] 1 lock held by khungtaskd/39: [ 1239.088704][ T39] #0: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1239.088774][ T39] 9 locks held by kworker/u8:11/1200: [ 1239.088787][ T39] #0: ffff888033d91938 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1239.088859][ T39] #1: ffffc900061ffc60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1239.088925][ T39] #2: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1239.088979][ T39] #3: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 1239.089037][ T39] #4: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 [ 1239.089103][ T39] #5: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1239.089167][ T39] #6: ffffffff8de591a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1239.089217][ T39] #7: ffff8880330bf320 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa20 [ 1239.089268][ T39] #8: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 1239.089340][ T39] 2 locks held by getty/5363: [ 1239.089353][ T39] #0: ffff888036a6b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1239.089418][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1239.089478][ T39] 1 lock held by syz-executor/5618: [ 1239.089490][ T39] #0: ffff8880346b0500 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1239.089569][ T39] 5 locks held by kworker/u8:1/24078: [ 1239.089582][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1239.089647][ T39] #1: ffffc9000803fc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1239.089724][ T39] #2: ffff888039804310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1239.089781][ T39] #3: ffff88803efe2120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1239.089834][ T39] #4: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1239.089894][ T39] 2 locks held by syz.2.11422/32163: [ 1239.089907][ T39] #0: ffff888033d9f5f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 1239.089972][ T39] #1: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1239.090026][ T39] 1 lock held by syz.4.11446/32207: [ 1239.090038][ T39] #0: ffffffff8e6b57e0 (key_types_sem){++++}-{4:4}, at: key_type_lookup+0x29/0xc0 [ 1239.090165][ T39] [ 1239.090171][ T39] ============================================= [ 1239.090171][ T39] [ 1239.090180][ T39] NMI backtrace for cpu 1 [ 1239.090196][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1239.090220][ T39] Tainted: [L]=SOFTLOCKUP [ 1239.090226][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1239.090236][ T39] Call Trace: [ 1239.090243][ T39] [ 1239.090250][ T39] dump_stack_lvl+0xe8/0x150 [ 1239.090275][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 1239.090295][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1239.090318][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1239.090340][ T39] sys_info+0x135/0x170 [ 1239.090355][ T39] watchdog+0xfd7/0x1030 [ 1239.090384][ T39] ? watchdog+0x1c7/0x1030 [ 1239.090411][ T39] kthread+0x388/0x470 [ 1239.090444][ T39] ? __pfx_watchdog+0x10/0x10 [ 1239.090463][ T39] ? __pfx_kthread+0x10/0x10 [ 1239.090484][ T39] ret_from_fork+0x514/0xb70 [ 1239.090507][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1239.090529][ T39] ? __switch_to+0xc89/0x1420 [ 1239.090548][ T39] ? __pfx_kthread+0x10/0x10 [ 1239.090569][ T39] ret_from_fork_asm+0x1a/0x30 [ 1239.090604][ T39] [ 1239.090620][ T39] Sending NMI from CPU 1 to CPUs 0: [ 1239.090649][ C0] NMI backtrace for cpu 0 [ 1239.090674][ C0] CPU: 0 UID: 0 PID: 1200 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1239.090700][ C0] Tainted: [L]=SOFTLOCKUP [ 1239.090707][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1239.090719][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 1239.090747][ C0] RIP: 0010:__lock_acquire+0x18fa/0x2ce0 [ 1239.090775][ C0] Code: 13 25 ff 0f 00 00 39 05 40 c3 db 11 73 06 89 05 38 c3 db 11 48 8b 02 48 89 df 4c 39 e8 0f 84 34 fe ff ff 4c 89 78 30 48 8b 00 <4c> 39 e8 75 f4 48 89 df e9 20 fe ff ff 48 89 fb 48 c7 c7 30 03 e9 [ 1239.090791][ C0] RSP: 0018:ffffc900061ff0a8 EFLAGS: 00000002 [ 1239.090805][ C0] RAX: ffffffff96162bf8 RBX: 00000000000003cd RCX: 0000000000000046 [ 1239.090818][ C0] RDX: ffffffff96000dd8 RSI: ffff888029034ad0 RDI: 00000000000003cd [ 1239.090831][ C0] RBP: 1c8fe69fb3c5126a R08: ffffc900061ff070 R09: 0000000000000020 [ 1239.090844][ C0] R10: 0000000000000000 R11: ffffffff81a10810 R12: 0000000000000045 [ 1239.090855][ C0] R13: ffffffff931da250 R14: ffff888029033e00 R15: ffffffff960495a8 [ 1239.090869][ C0] FS: 0000000000000000(0000) GS:ffff888125ed4000(0000) knlGS:0000000000000000 [ 1239.090885][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1239.090897][ C0] CR2: 00007f05ddae7dac CR3: 000000002aa46000 CR4: 00000000003526f0 [ 1239.090914][ C0] Call Trace: [ 1239.090921][ C0] [ 1239.090940][ C0] ? ktime_get+0x45/0x220 [ 1239.090962][ C0] lock_acquire+0x106/0x350 [ 1239.090986][ C0] ? ktime_get+0x45/0x220 [ 1239.091014][ C0] ? ktime_get+0x45/0x220 [ 1239.091036][ C0] seqcount_lockdep_reader_access+0x55/0x100 [ 1239.091059][ C0] ? ktime_get+0x45/0x220 [ 1239.091082][ C0] ktime_get+0x45/0x220 [ 1239.091106][ C0] hrtick_start+0x99/0x250 [ 1239.091124][ C0] enqueue_task+0x75/0x410 [ 1239.091144][ C0] sched_change_end+0x213/0x600 [ 1239.091173][ C0] rt_mutex_setprio+0x4a0/0x910 [ 1239.091205][ C0] mark_wakeup_next_waiter+0x385/0x620 [ 1239.091237][ C0] __rt_mutex_futex_unlock+0xce/0x1c0 [ 1239.091265][ C0] rt_mutex_futex_unlock+0xc6/0x140 [ 1239.091292][ C0] ? __pfx_rt_mutex_futex_unlock+0x10/0x10 [ 1239.091327][ C0] rcu_note_context_switch+0x19a/0xef0 [ 1239.091353][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1239.091378][ C0] ? rcu_is_watching+0x15/0xb0 [ 1239.091397][ C0] __schedule+0x296/0x5530 [ 1239.091419][ C0] ? __pfx___set_cpus_allowed_ptr_locked+0x10/0x10 [ 1239.091444][ C0] ? __virt_addr_valid+0x137/0x390 [ 1239.091461][ C0] ? lock_acquire+0x106/0x350 [ 1239.091486][ C0] ? arch_irq_work_raise+0x6d/0x80 [ 1239.091506][ C0] ? __irq_work_queue_local+0x22d/0x530 [ 1239.091530][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1239.091549][ C0] ? __pfx___schedule+0x10/0x10 [ 1239.091569][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1239.091592][ C0] preempt_schedule_irq+0x4d/0xa0 [ 1239.091614][ C0] irqentry_exit+0x14f/0x8f0 [ 1239.091636][ C0] ? trace_irq_disable+0x3b/0x140 [ 1239.091662][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 1239.091682][ C0] RIP: 0010:__local_bh_enable_ip+0x1c2/0x2b0 [ 1239.091699][ C0] Code: f7 89 df e8 60 01 00 00 41 f7 c4 00 02 00 00 74 05 e8 e2 af 45 00 9c 58 a9 00 02 00 00 75 23 41 f7 c4 00 02 00 00 74 01 fb 5b <41> 5c 41 5d 41 5e 41 5f 5d e9 00 26 ac 09 cc 90 0f 0b 90 e9 66 fe [ 1239.091714][ C0] RSP: 0018:ffffc900061ff988 EFLAGS: 00000206 [ 1239.091728][ C0] RAX: 0000000000000002 RBX: ffff88803ab5f0a0 RCX: 0000000000000046 [ 1239.091740][ C0] RDX: 0000000000000006 RSI: ffffffff8d65601e RDI: ffffffff8baa4c80 [ 1239.091752][ C0] RBP: 1ffff1100520693e R08: ffffffff8f8c6df7 R09: 1ffffffff1f18dbe [ 1239.091767][ C0] R10: dffffc0000000000 R11: fffffbfff1f18dbf R12: 0000000000000286 [ 1239.091781][ C0] R13: dffffc0000000000 R14: ffff8880290349f4 R15: 0000000000000001 [ 1239.091803][ C0] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 1239.091830][ C0] wg_socket_send_skb_to_peer+0x199/0x200 [ 1239.091856][ C0] wg_packet_handshake_send_worker+0x204/0x370 [ 1239.091883][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1239.091918][ C0] ? process_one_work+0x8cd/0x12b0 [ 1239.091944][ C0] ? rcu_is_watching+0x15/0xb0 [ 1239.091960][ C0] ? process_one_work+0x8cd/0x12b0 [ 1239.091987][ C0] ? process_one_work+0x8cd/0x12b0 [ 1239.092013][ C0] process_one_work+0x93a/0x12b0 [ 1239.092048][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1239.092074][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1239.092098][ C0] ? assign_work+0x3cf/0x5d0 [ 1239.092146][ C0] worker_thread+0xb05/0x10d0 [ 1239.092174][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1239.092198][ C0] kthread+0x388/0x470 [ 1239.092219][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1239.092235][ C0] ? __pfx_kthread+0x10/0x10 [ 1239.092256][ C0] ret_from_fork+0x514/0xb70 [ 1239.092280][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1239.092303][ C0] ? __switch_to+0xc89/0x1420 [ 1239.092323][ C0] ? __pfx_kthread+0x10/0x10 [ 1239.092344][ C0] ret_from_fork_asm+0x1a/0x30 [ 1239.092377][ C0] [ 1239.092656][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1239.092682][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1239.092704][ T39] Tainted: [L]=SOFTLOCKUP [ 1239.092710][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1239.092720][ T39] Call Trace: [ 1239.092727][ T39] [ 1239.092733][ T39] vpanic+0x56c/0xa60 [ 1239.092759][ T39] ? __pfx___schedule+0x10/0x10 [ 1239.092779][ T39] ? __pfx_vpanic+0x10/0x10 [ 1239.092811][ T39] panic+0xc5/0xd0 [ 1239.092834][ T39] ? __pfx_panic+0x10/0x10 [ 1239.092855][ T39] ? preempt_schedule_common+0x82/0xd0 [ 1239.092877][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 1239.092895][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1239.092916][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1239.092938][ T39] watchdog+0x1030/0x1030 [ 1239.092966][ T39] ? watchdog+0x1c7/0x1030 [ 1239.092993][ T39] kthread+0x388/0x470 [ 1239.093014][ T39] ? __pfx_watchdog+0x10/0x10 [ 1239.093034][ T39] ? __pfx_kthread+0x10/0x10 [ 1239.093056][ T39] ret_from_fork+0x514/0xb70 [ 1239.093080][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1239.093101][ T39] ? __switch_to+0xc89/0x1420 [ 1239.093121][ T39] ? __pfx_kthread+0x10/0x10 [ 1239.093143][ T39] ret_from_fork_asm+0x1a/0x30 [ 1239.093182][ T39] [ 1239.101178][ T39] Kernel Offset: disabled