last executing test programs: 5m12.321648457s ago: executing program 1 (id=88): socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') socket$packet(0x11, 0x2, 0x300) openat$uhid(0xffffff9c, &(0x7f0000000540), 0x802, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x9, 0x20fe, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x361}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 5m11.132573558s ago: executing program 1 (id=96): unshare(0x4000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 5m10.898385683s ago: executing program 1 (id=99): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0xffe0}, {}, {0xfff3, 0x10}}}, 0x24}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000030000000400000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000000001000b00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m10.762292456s ago: executing program 1 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) setuid(0xee00) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0x9362, 0x0) 5m10.391549406s ago: executing program 1 (id=102): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) 5m9.942467527s ago: executing program 1 (id=103): socket$igmp(0x2, 0x3, 0x2) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x218, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5m9.398133491s ago: executing program 32 (id=103): socket$igmp(0x2, 0x3, 0x2) add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12", 0x218, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4m37.988313915s ago: executing program 0 (id=227): syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa010000000001085a0604000c4bf4359b59400a0101020180b2000103ac1e0101"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0xfc}}, 0x6, 0x400}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4m37.76571667s ago: executing program 0 (id=230): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000001c00)=r3) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x26}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 4m36.874935063s ago: executing program 0 (id=237): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000002c0)) 4m35.162672456s ago: executing program 0 (id=256): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x3fb, 0x10, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x40804}, 0x4080) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x40000, @mcast1}, 0x1c, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m34.708186228s ago: executing program 0 (id=248): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xfffffffeffffffff, {0x5, 0x5, 0x0, 0x4000000000004, 0xfffffffd, 0x6, {0x2, 0xfff, 0x808, 0xfffffffffbd, 0x8, 0x81, 0xfaae, 0x6, 0x2, 0x4000, 0xe44, r2, r3, 0x4, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000100), 0x82000, 0x0) 4m34.019577135s ago: executing program 0 (id=250): r0 = syz_io_uring_setup(0x26b6, &(0x7f0000000200)={0x0, 0xf906, 0x800, 0x0, 0x308}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) 4m33.357542422s ago: executing program 33 (id=250): r0 = syz_io_uring_setup(0x26b6, &(0x7f0000000200)={0x0, 0xf906, 0x800, 0x0, 0x308}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) 34.488321559s ago: executing program 6 (id=1046): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$assume_authority(0x10, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x0, &(0x7f0000000280)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_pgetevents(0x0, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, 0x0) 26.707457465s ago: executing program 6 (id=1062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xa, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = fanotify_init(0x20, 0x0) r4 = socket$inet6(0xa, 0x3, 0x88) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) getsockopt$inet6_mreq(r4, 0x29, 0x15, 0x0, &(0x7f0000000280)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) close_range(r3, 0xffffffffffffffff, 0x2) 24.596486949s ago: executing program 2 (id=1065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup(r3) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r4, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @loopback, 0x6}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000000280)="d5", 0x1}], 0x1}, 0x40054) 23.440183758s ago: executing program 6 (id=1068): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000a00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) request_key(&(0x7f0000000600)='rxrpc\x00', &(0x7f0000000640)={'syz', 0x3}, &(0x7f0000000680)='logon\x00', r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x64, 0x62, 0x30, 0x64, 0x30, 0x36, 0x32, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddee1901112233445566778899aabbccddeeff00112233445566778899aabbccddeeff001122334455667704000000ccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000800)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x33, 0x36, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a80), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x62, 0x63, 0x30, 0x66, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x37, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000bc0), &(0x7f0000000c00)={'syz', 0x3}, &(0x7f0000000c40)='o', 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x65, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x65, 0x30, 0x30, 0x64, 0x62, 0x30, 0x66, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0xc0}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x33, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x63, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabb0400eeff00112233445566778899aabbccddeeff00112233445566318599aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x33, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x31, 0x55, 0x30, 0x30, 0x34, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x10}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x31]}, &(0x7f0000000100)={0x0, "0211223300112233445566778899aabaccddeaff00912233445566778899aa00000000ff00000000005566778899aabb00000000000000000000000000000080", 0x100}, 0x48, r0) 21.915685687s ago: executing program 2 (id=1069): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) r8 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000080)=r4, 0x12) 20.19448744s ago: executing program 2 (id=1072): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x600, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r1, 0x8080583a, 0x0) write(r0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_io_uring_setup(0xefd, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 19.023297269s ago: executing program 2 (id=1074): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='projid_map\x00') write$P9_RSTAT(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) write$cgroup_pid(r0, &(0x7f0000000180)=r1, 0x12) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x3ffffffffc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x358, 0x800000000000) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 17.330759582s ago: executing program 2 (id=1078): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_pidfd_open(r1, 0x0) setns(r6, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8e, 0x0, 0x100000}, 0x20) 17.220762415s ago: executing program 5 (id=1079): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/vlan/vlan0\x00') ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000280)={0xfd, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) 16.644380849s ago: executing program 6 (id=1080): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) r1 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x7ff, 0x1000009, 0x1010, 0xffffffffffffffff, 0x20000000) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r3, 0x0, 0x0) readv(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) 15.979309317s ago: executing program 5 (id=1081): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) 14.850603475s ago: executing program 5 (id=1083): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x34, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "7419189c2ac30927a2a05c2c1f"}]}]}, 0x34}}, 0x20000010) 13.784426662s ago: executing program 6 (id=1084): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x513000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x2000000, r2}, 0x10) 12.629986951s ago: executing program 5 (id=1086): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299583d", 0xa}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24044004) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x10) 12.107224124s ago: executing program 5 (id=1090): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) r2 = dup(0xffffffffffffffff) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) sendto$inet(r0, 0x0, 0x0, 0x12, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x44}}, 0x0) syz_emit_ethernet(0x10a, &(0x7f0000000f00)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ad6abb", 0xd4, 0x2b, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x81}, {[@routing={0x87, 0x6, 0x2, 0x80, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0xb}, @empty]}], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "8a2e0b0ec46fadbd18834312e9385e5b91593453652ca34faa9af7e503cdd8a4", "c7d38cffe3874f77f421060f4ddfabe88f79f6a4c06e7f495ebd67c2b83bd11c9b2b5b6508ccf912ff63750351d69e6f", "a9b67a62f584fabf70acf4e004a87a4898ab17058c5d1c20e471b1ae", {"000000000097ce50cb00", "e760555695aaf81ffd8de70c81ecf313"}}}}}}}}, 0x0) recvfrom$inet(r0, &(0x7f00000000c0), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1404) 10.429681327s ago: executing program 3 (id=1092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x4f62b68f6fa20884}, {0xc, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x80000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 10.425825577s ago: executing program 2 (id=1102): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000081e300000000000000000000181100", @ANYRES32=r0, @ANYBLOB], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 8.985827443s ago: executing program 34 (id=1102): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000081e300000000000000000000181100", @ANYRES32=r0, @ANYBLOB], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 8.970126983s ago: executing program 5 (id=1094): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000280)='/dev/nullb0', 0xb) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='rdma\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00') 7.850839302s ago: executing program 3 (id=1095): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) write(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000002580)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 7.850667592s ago: executing program 4 (id=1096): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r3) 6.376323119s ago: executing program 4 (id=1097): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) socket(0x23, 0x80805, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x24622, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91", 0x1}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 6.3362829s ago: executing program 3 (id=1098): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(&(0x7f00000000c0)={0x3564}, 0x18, 0x0) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x4, 0x8fb, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48010}, 0x84) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 5.272152847s ago: executing program 4 (id=1099): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x8ffff) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) 5.012562674s ago: executing program 6 (id=1100): add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) fsopen(0x0, 0x0) r0 = syz_io_uring_setup(0x25, &(0x7f00000000c0)={0x0, 0x219a, 0x80, 0x8001, 0x143}, &(0x7f0000000000), &(0x7f0000000640), &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x7, &(0x7f0000000280)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000080)={0x9, r0, 0x3, {0x9, 0x7}}, 0x1) 3.880138052s ago: executing program 4 (id=1101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103", @ANYRES8=0x0, @ANYBLOB="06", @ANYRESOCT], 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20b0, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f00000002c0)=0x10001) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000) recvmmsg(r6, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4080, 0xffffff16}], 0x3}, 0xfff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x10022, 0x0) 2.894301887s ago: executing program 3 (id=1103): syz_open_dev$video4linux(&(0x7f0000000200), 0x6, 0xa800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() syz_open_procfs$pagemap(r0, &(0x7f0000000080)) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r1, 0x29, 0x48, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x40101286, 0x3) ioctl$HCIINQUIRY(r4, 0x800448d4, 0x0) mount(0x0, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) 2.665606173s ago: executing program 4 (id=1105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e145755", 0x11}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afa", 0x21}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.796331375s ago: executing program 3 (id=1106): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x800, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setsig(r0, 0xa, 0x21) socket$inet_udp(0x2, 0x2, 0x0) unlinkat(r0, 0x0, 0x200) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000040)='./file0\x00', 0x104000, 0x180) creat(&(0x7f0000000100)='./file0\x00', 0x0) 273.700674ms ago: executing program 3 (id=1107): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 0s ago: executing program 4 (id=1108): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ptrace$getregset(0x4204, 0x0, 0x4, &(0x7f0000000640)={0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x1, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) kernel console output (not intermixed with test programs): e [ 88.177095][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.214982][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.245033][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.253587][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.303457][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.369032][ T4288] device veth0_macvtap entered promiscuous mode [ 88.400797][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.421301][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.434529][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.458847][ T4288] device veth1_macvtap entered promiscuous mode [ 88.475074][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 88.478860][ T4366] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.518604][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.545286][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 88.547621][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 88.551321][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 88.610213][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.624924][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 88.671883][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.696880][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.715481][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.726283][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.733487][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.736408][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.754839][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.770563][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.778224][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.789795][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.801319][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.811937][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.823898][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.840486][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.856006][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.882360][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.890515][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.901239][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.924046][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.974913][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.999332][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.010361][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.022999][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.040921][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.052868][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.066518][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.077714][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.101962][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.146258][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.160266][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.216904][ T4288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.244792][ T4288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.280968][ T4288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.300589][ T4288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.450470][ T4383] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.462145][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.487136][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.571822][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.596203][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.615364][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.622982][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.025012][ T4395] loop4: detected capacity change from 0 to 16 [ 90.044304][ T4395] erofs: (device loop4): mounted with root inode @ nid 36. [ 90.057344][ T4395] syz.4.5: attempt to access beyond end of device [ 90.057344][ T4395] loop4: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 90.072255][ T4395] syz.4.5: attempt to access beyond end of device [ 90.072255][ T4395] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 90.086178][ T4395] syz.4.5: attempt to access beyond end of device [ 90.086178][ T4395] loop4: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 90.101043][ T26] audit: type=1800 audit(1786062302.825:2): pid=4395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 90.275002][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.474854][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 90.484926][ T27] usb 2-1: config 0 has no interfaces? [ 90.490672][ T27] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 90.519398][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.581188][ T27] usb 2-1: config 0 descriptor?? [ 90.620118][ T4410] jffs2: notice: (4410) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 90.824405][ T4317] usb 2-1: USB disconnect, device number 2 [ 91.054814][ T4316] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.250874][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.261913][ T131] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.273795][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.284120][ T4316] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 91.293918][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.314740][ T4316] usb 4-1: config 0 descriptor?? [ 91.444853][ T131] usb 5-1: Using ep0 maxpacket: 16 [ 91.452742][ T131] usb 5-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 91.478507][ T131] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.542151][ T131] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.575758][ T131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.583871][ T131] usb 5-1: Product: syz [ 91.597769][ T131] usb 5-1: Manufacturer: syz [ 91.602460][ T131] usb 5-1: SerialNumber: syz [ 91.747845][ T1197] cfg80211: failed to load regulatory.db [ 91.849570][ T131] usb 5-1: 0:2 : does not exist [ 91.873664][ T131] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 91.987257][ T131] usb 5-1: USB disconnect, device number 2 [ 91.998925][ T26] audit: type=1800 audit(1786062304.715:3): pid=4438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.30" name="zoned" dev="configfs" ino=35165 res=0 errno=0 [ 92.082465][ T26] audit: type=1800 audit(1786062304.745:4): pid=4438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.30" name="memory_backed" dev="configfs" ino=35166 res=0 errno=0 [ 92.142561][ T26] audit: type=1800 audit(1786062304.745:5): pid=4438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.30" name="power" dev="configfs" ino=35167 res=0 errno=0 [ 92.164114][ T4316] hid-led: probe of 0003:27B8:01ED.0001 failed with error -32 [ 92.173912][ T4438] null_blk: disk nullb1 created [ 92.317464][ T4436] udevd[4436]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.529664][ T4450] syz.1.34 uses obsolete (PF_INET,SOCK_PACKET) [ 92.665068][ T22] usb 4-1: USB disconnect, device number 2 [ 92.894344][ T4461] loop7: detected capacity change from 0 to 16384 [ 93.171582][ T4465] loop7: detected capacity change from 16384 to 16320 [ 93.197196][ T4470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.41'. [ 93.245913][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.333265][ T4463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.323092][ T4504] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 95.330258][ T4504] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 95.494744][ T4323] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 95.664788][ T4316] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.699384][ T4323] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 95.709981][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.725698][ T4323] usb 3-1: Product: syz [ 95.730073][ T4323] usb 3-1: Manufacturer: syz [ 95.748424][ T4323] usb 3-1: SerialNumber: syz [ 95.776641][ T4323] usb 3-1: config 0 descriptor?? [ 95.796441][ T4513] loop3: detected capacity change from 0 to 2048 [ 95.854758][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.869825][ T4513] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 95.879037][ T4316] usb 5-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 95.880443][ T4513] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.899707][ T4316] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 95.936894][ T4316] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 1.00 [ 95.954086][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.966089][ T4316] usb 5-1: Product: syz [ 95.970331][ T4316] usb 5-1: Manufacturer: syz [ 95.975160][ T4316] usb 5-1: SerialNumber: syz [ 95.990888][ T4323] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 96.044727][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 96.055142][ T22] usb 2-1: config 0 has no interfaces? [ 96.060690][ T22] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.101484][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.142145][ T22] usb 2-1: config 0 descriptor?? [ 96.175843][ T4511] loop0: detected capacity change from 0 to 32768 [ 96.215904][ T4511] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.56 (4511) [ 96.250575][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 96.314261][ T4511] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 96.336872][ T4511] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 96.365201][ T4511] BTRFS info (device loop0): using free space tree [ 96.431641][ T4316] ath6kl: Unsupported hardware version: 0x0 [ 96.447800][ T131] usb 2-1: USB disconnect, device number 3 [ 96.515160][ T4316] ath6kl: Failed to init ath6kl core: -22 [ 96.583095][ T4316] ath6kl_usb: probe of 5-1:1.0 failed with error -22 [ 96.662020][ T4537] overlayfs: failed to resolve './bus': -2 [ 96.672921][ T4511] BTRFS info (device loop0): enabling ssd optimizations [ 96.945058][ T4541] loop3: detected capacity change from 0 to 4096 [ 97.006297][ T4323] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 97.014109][ T4541] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 97.048073][ T4541] ntfs3: loop3: Failed to load $Extend. [ 97.196221][ T4281] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 97.223468][ T27] usb 3-1: USB disconnect, device number 2 [ 97.560213][ T4278] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 98.426959][ T4567] loop0: detected capacity change from 0 to 32768 [ 98.496105][ T7] usb 5-1: USB disconnect, device number 3 [ 98.628309][ T26] audit: type=1800 audit(1786062311.345:6): pid=4567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.73" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 98.953829][ T4583] loop3: detected capacity change from 0 to 4096 [ 98.982665][ T4580] loop0: detected capacity change from 0 to 8 [ 99.020385][ T4583] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 99.129663][ T4580] SQUASHFS error: lzo decompression failed, data probably corrupt [ 99.161441][ T4580] SQUASHFS error: Failed to read block 0x144: -5 [ 99.190931][ T4580] SQUASHFS error: Unable to read metadata cache entry [142] [ 99.221763][ T4580] SQUASHFS error: Unable to read inode 0x11f [ 99.573367][ T4278] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 99.616698][ T4594] loop0: detected capacity change from 0 to 512 [ 99.665298][ T4594] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 99.735772][ T4594] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.808038][ T4594] EXT4-fs (loop0): 1 truncate cleaned up [ 99.813770][ T4594] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 99.932466][ T4601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.76'. [ 99.985712][ T4594] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.74: Invalid block bitmap block 3 in block_group 0 [ 100.074856][ T4594] EXT4-fs error (device loop0): ext4_discard_preallocations:5132: comm syz.0.74: Error -117 reading block bitmap for 0 [ 100.105602][ T4594] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #15: comm syz.0.74: invalid indirect mapped block 38 (level 1) [ 100.130197][ T4604] loop3: detected capacity change from 0 to 8 [ 100.157317][ T4594] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 100.171362][ T4604] SQUASHFS error: zlib decompression failed, data probably corrupt [ 100.182447][ T4594] EXT4-fs error (device loop0): ext4_truncate:4325: inode #15: comm syz.0.74: mark_inode_dirty error [ 100.198306][ T4604] SQUASHFS error: Failed to read block 0x9b: -5 [ 100.206126][ T4604] SQUASHFS error: Unable to read metadata cache entry [99] [ 100.214050][ T4594] EXT4-fs error (device loop0) in ext4_setattr:5695: Corrupt filesystem [ 100.231937][ T4604] SQUASHFS error: Unable to read inode 0x127 [ 100.314864][ T4594] syz.0.74 (4594) used greatest stack depth: 20688 bytes left [ 100.357750][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 100.505410][ T4611] loop4: detected capacity change from 0 to 7 [ 100.513538][ T4436] Dev loop4: unable to read RDB block 7 [ 100.522269][ T4436] loop4: AHDI p2 p3 [ 100.544904][ T4436] loop4: partition table partially beyond EOD, truncated [ 100.552828][ T4436] loop4: p3 start 335544320 is beyond EOD, truncated [ 100.595194][ T4611] Dev loop4: unable to read RDB block 7 [ 100.640890][ T4611] loop4: AHDI p2 p3 [ 100.672794][ T4611] loop4: partition table partially beyond EOD, truncated [ 100.717366][ T4611] loop4: p3 start 335544320 is beyond EOD, truncated [ 100.757561][ T4618] overlayfs: statfs failed on './file0' [ 101.139453][ T4623] kvm: emulating exchange as write [ 102.043751][ T4650] TC_ACT_REPEAT abuse ? [ 102.534804][ T4547] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 102.746594][ T4547] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 102.750544][ T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 102.774668][ T4547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.782778][ T4547] usb 1-1: Product: syz [ 102.812248][ T4547] usb 1-1: Manufacturer: syz [ 102.824641][ T4547] usb 1-1: SerialNumber: syz [ 102.841051][ T4547] usb 1-1: config 0 descriptor?? [ 102.936550][ T4652] loop3: detected capacity change from 0 to 40427 [ 102.958090][ T4652] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 102.967424][ T4652] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 102.986682][ T27] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 103.012504][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.038607][ T4652] F2FS-fs (loop3): Found nat_bits in checkpoint [ 103.052105][ T27] usb 5-1: config 0 descriptor?? [ 103.065513][ T27] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 103.088078][ T4547] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 103.262118][ T4652] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 103.283698][ T4652] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 103.649533][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.782267][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.926810][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.074820][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.495197][ T27] gspca_stv06xx: HDCS-1020 sensor detected [ 104.509716][ T4547] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 104.546282][ T4547] usb 1-1: USB disconnect, device number 2 [ 104.765299][ T27] STV06xx: probe of 5-1:0.0 failed with error -71 [ 104.785660][ T27] usb 5-1: USB disconnect, device number 4 [ 104.923155][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.942854][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.951851][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.960304][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.968703][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 104.976578][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.275202][ T26] audit: type=1326 audit(1786062317.985:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.0.107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1eb59e0d9 code=0x0 [ 106.269803][ T4717] Illegal XDP return value 4294967274 on prog (id 7) dev syz_tun, expect packet loss! [ 106.284301][ T4687] chnl_net:caif_netlink_parms(): no params data found [ 107.024960][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 107.083054][ T4725] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.092039][ T4725] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.718960][ T4725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.762909][ T4725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.432841][ T4725] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.454804][ T4725] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.465002][ T26] audit: type=1800 audit(1786062321.185:8): pid=4763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.122" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 108.474510][ T4725] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.520156][ T4725] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.550394][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 109.673549][ T11] device hsr_slave_0 left promiscuous mode [ 109.735417][ T11] device hsr_slave_1 left promiscuous mode [ 109.749506][ T4725] syz.3.113 (4725) used greatest stack depth: 20528 bytes left [ 109.768411][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.820652][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.851251][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.859853][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.876549][ T11] device bridge_slave_1 left promiscuous mode [ 109.885401][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.909638][ T4765] loop0: detected capacity change from 0 to 32768 [ 109.928680][ T11] device bridge_slave_0 left promiscuous mode [ 109.949980][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.983282][ T4765] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.124 (4765) [ 110.094041][ T11] device veth1_macvtap left promiscuous mode [ 110.104121][ T4765] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 110.112797][ T11] device veth0_macvtap left promiscuous mode [ 110.146142][ T11] device veth1_vlan left promiscuous mode [ 110.154218][ T4765] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 110.171305][ T11] device veth0_vlan left promiscuous mode [ 110.211060][ T4765] BTRFS info (device loop0): using free space tree [ 110.630497][ T4765] BTRFS info (device loop0): enabling ssd optimizations [ 110.840045][ T4281] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 111.194930][ T4320] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 111.426656][ T4320] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.461376][ T4320] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 111.473418][ T4320] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 111.482588][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.490650][ T4320] usb 5-1: Product: syz [ 111.495906][ T4320] usb 5-1: Manufacturer: syz [ 111.500554][ T4320] usb 5-1: SerialNumber: syz [ 111.507889][ T4320] usb 5-1: config 0 descriptor?? [ 111.588951][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 111.755723][ T11] team0 (unregistering): Port device team_slave_1 removed [ 111.858560][ T11] team0 (unregistering): Port device team_slave_0 removed [ 111.941493][ T4320] usb 5-1: USB disconnect, device number 5 [ 111.947992][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.016312][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.292141][ T11] bond0 (unregistering): Released all slaves [ 112.396582][ T4687] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.403737][ T4687] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.412493][ T4687] device bridge_slave_0 entered promiscuous mode [ 112.422446][ T4785] netlink: 'syz.2.130': attribute type 39 has an invalid length. [ 112.492874][ T4687] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.525969][ T4687] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.534302][ T4687] device bridge_slave_1 entered promiscuous mode [ 112.632135][ T4687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.671758][ T4687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.794438][ T4687] team0: Port device team_slave_0 added [ 112.857126][ T4687] team0: Port device team_slave_1 added [ 112.980349][ T4687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.024710][ T4687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.138124][ T4687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.176292][ T4687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.212172][ T4687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.304618][ T4687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.615451][ T4687] device hsr_slave_0 entered promiscuous mode [ 113.632750][ T4687] device hsr_slave_1 entered promiscuous mode [ 113.664811][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 113.674453][ T4687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.730603][ T4687] Cannot create hsr debugfs directory [ 113.743852][ T4813] loop3: detected capacity change from 0 to 32768 [ 113.791971][ T4816] loop4: detected capacity change from 0 to 40427 [ 113.805702][ T4813] ======================================================= [ 113.805702][ T4813] WARNING: The mand mount option has been deprecated and [ 113.805702][ T4813] and is ignored by this kernel. Remove the mand [ 113.805702][ T4813] option from the mount to silence this warning. [ 113.805702][ T4813] ======================================================= [ 113.899817][ T4816] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 113.945708][ T4816] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 114.071641][ T4813] XFS (loop3): Mounting V5 Filesystem [ 114.084510][ T4842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'. [ 114.112949][ T4816] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.283635][ T4813] XFS (loop3): Ending clean mount [ 114.338442][ T4813] XFS (loop3): Quotacheck needed: Please wait. [ 114.375291][ T4816] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 114.382413][ T4816] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.494810][ T4813] XFS (loop3): Quotacheck: Done. [ 114.563635][ T4687] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.610807][ T4687] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.667616][ T4687] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.707320][ T4687] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 115.001032][ T4687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.072140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.082645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.116550][ T4687] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.213126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.261293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.288560][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.295750][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.332837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.357845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.386352][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.393493][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.437212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.466038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.530877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.570290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.610806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.633233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.652616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.668633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.685373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.697812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.708298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.728177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.748715][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.649208][ T4278] XFS (loop3): Unmounting Filesystem [ 117.084343][ T4888] loop4: detected capacity change from 0 to 512 [ 117.136057][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.159227][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.203654][ T4687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.286036][ T4888] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 117.298604][ T4888] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.446702][ T4892] 0: reclassify loop, rule prio 0, protocol 03 [ 117.887482][ T4288] EXT4-fs (loop4): unmounting filesystem. [ 118.225378][ T4925] loop2: detected capacity change from 0 to 1024 [ 118.264542][ T4925] EXT4-fs: Ignoring removed bh option [ 118.374731][ T14] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 118.427475][ T4925] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 118.572786][ T26] audit: type=1804 audit(1786062331.285:9): pid=4925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.153" name="/newroot/22/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 118.599451][ T14] usb 5-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 118.634714][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.642782][ T14] usb 5-1: Product: syz [ 118.664719][ T14] usb 5-1: Manufacturer: syz [ 118.669396][ T14] usb 5-1: SerialNumber: syz [ 118.726505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.737567][ T4912] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 118.745157][ T14] qcserial 5-1:1.0: Qualcomm USB modem converter detected [ 118.751206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.773338][ T4944] loop3: detected capacity change from 0 to 512 [ 118.788522][ T14] usb 5-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 118.856434][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.864284][ T4944] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.887931][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.960611][ T4944] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.964559][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.008448][ T4923] dummy_hcd dummy_hcd.0: remove, state 4 [ 119.037116][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 119.043572][ T4923] usb usb1: USB disconnect, device number 1 [ 119.100568][ T4944] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 119.107344][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.222208][ T4687] device veth0_vlan entered promiscuous mode [ 119.237576][ T4944] EXT4-fs (loop3): 1 truncate cleaned up [ 119.263244][ T4944] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 119.268256][ T4923] dummy_hcd dummy_hcd.0: stopped [ 119.282316][ T4958] loop2: detected capacity change from 0 to 1024 [ 119.315634][ T4687] device veth1_vlan entered promiscuous mode [ 119.354072][ T4923] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 119.448365][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.476608][ T4952] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 119.489183][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.511068][ T4952] dummy_hcd dummy_hcd.0: Dummy host controller [ 119.560702][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.561447][ T4952] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 119.594048][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.611472][ T4687] device veth0_macvtap entered promiscuous mode [ 119.645193][ T4687] device veth1_macvtap entered promiscuous mode [ 119.675715][ T4952] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.01 [ 119.694915][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.703514][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 119.715021][ T4952] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 119.742767][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.743953][ T4952] usb usb1: Product: Dummy host controller [ 119.764829][ T4952] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 119.795044][ T4952] usb usb1: SerialNumber: dummy_hcd.0 [ 119.813338][ T4687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.852987][ T4952] hub 1-0:1.0: USB hub found [ 119.859228][ T4687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.879115][ T4952] hub 1-0:1.0: 1 port detected [ 119.884262][ T4687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.911019][ T4687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.942923][ T4687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.965195][ T4687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.049096][ T4687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.083436][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.135556][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.167770][ T4687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.198516][ T4687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.216317][ T22] usb 5-1: USB disconnect, device number 6 [ 120.246644][ T22] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 120.275411][ T4687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.295355][ T22] qcserial 5-1:1.0: device disconnected [ 120.304698][ T4687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.344684][ T4687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.361048][ T4687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.382734][ T4687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.391603][ T58] hfsplus: b-tree write err: -5, ino 25 [ 120.411359][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.440918][ T58] hfsplus: b-tree write err: -5, ino 4 [ 120.453067][ T58] hfsplus: b-tree write err: -5, ino 2 [ 120.453515][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.500825][ T4687] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.511082][ T4687] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.521796][ T4687] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.531431][ T4687] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.119149][ T4997] dlm: Using TCP for communications [ 125.314743][ T5003] Zero length message leads to an empty skb [ 125.424133][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.474731][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.520293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.637719][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.679609][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.724505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.887695][ T5048] netlink: 'syz.3.175': attribute type 39 has an invalid length. [ 125.901193][ T5047] loop2: detected capacity change from 0 to 512 [ 126.030487][ T5047] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.174: iget: bad i_size value: 38620345925642 [ 126.152003][ T5047] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.174: couldn't read orphan inode 15 (err -117) [ 126.207022][ T5047] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.361872][ T5059] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.174: bg 0: block 5: invalid block bitmap [ 126.711624][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 126.739044][ T5068] process 'syz.4.176' launched './file0' with NULL argv: empty string added [ 126.954871][ T5073] loop2: detected capacity change from 0 to 512 [ 127.035497][ T5073] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 127.065208][ T5073] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.181386][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 127.640142][ T5099] netlink: 'syz.5.184': attribute type 4 has an invalid length. [ 127.729176][ T5103] netlink: 'syz.5.184': attribute type 4 has an invalid length. [ 128.622766][ T5138] loop0: detected capacity change from 0 to 1024 [ 128.705271][ T5138] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 129.670112][ T5169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.749418][ T5169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.171135][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 130.393692][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.454000][ T5180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.106454][ T5192] batman_adv: batadv0: Adding interface: dummy0 [ 132.114723][ T5192] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.140259][ T5192] batman_adv: batadv0: Interface activated: dummy0 [ 132.161918][ T5194] batadv0: mtu less than device minimum [ 132.177188][ T5194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.190031][ T5194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.201672][ T5194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.213478][ T5194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.225297][ T5194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.237616][ T5194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.249786][ T5194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.261403][ T5194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.304777][ T5210] device wlan1 entered promiscuous mode [ 132.735195][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.742089][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.874935][ T4319] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.085194][ T4319] usb 5-1: Using ep0 maxpacket: 32 [ 133.497707][ T4319] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.540182][ T4319] usb 5-1: too many configurations: 80, using maximum allowed: 8 [ 133.650109][ T4319] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 133.711906][ T4319] usb 5-1: can't read configurations, error -71 [ 134.744624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 134.948076][ T5256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.012807][ T4319] wlan1: authenticate with 08:02:11:00:00:00 [ 135.042247][ T4319] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 135.175539][ T33] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 135.284858][ T4329] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 135.406075][ T4743] wlan1: authentication with 08:02:11:00:00:00 timed out [ 135.455160][ T5281] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 137.274951][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 137.355874][ T4736] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 137.474864][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 137.482308][ T22] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 137.504429][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.547275][ T22] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 137.562505][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.571087][ T4736] usb 5-1: Using ep0 maxpacket: 16 [ 137.583618][ T22] usb 3-1: Product: syz [ 137.589394][ T4736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 137.624741][ T22] usb 3-1: Manufacturer: syz [ 137.629590][ T22] usb 3-1: SerialNumber: syz [ 137.639556][ T4736] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 137.659578][ T22] usb 3-1: config 0 descriptor?? [ 137.676891][ T4736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.691133][ T4736] usb 5-1: Product: syz [ 137.701727][ T22] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 137.713385][ T4736] usb 5-1: Manufacturer: syz [ 137.727899][ T4736] usb 5-1: SerialNumber: syz [ 137.742119][ T4736] usb 5-1: config 0 descriptor?? [ 137.798036][ T4736] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 137.808103][ T4736] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 138.477993][ T4736] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 138.904720][ T4736] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 138.916671][ T4736] em28xx 5-1:0.0: board has no eeprom [ 139.244408][ T5377] loop5: detected capacity change from 0 to 1024 [ 139.309104][ T5377] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e01c, mo2=0000] [ 139.350696][ T5377] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 2: comm syz.5.249: lblock 2 mapped to illegal pblock 2 (length 1) [ 139.368972][ T5377] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 139.378120][ T5377] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 48: comm syz.5.249: lblock 0 mapped to illegal pblock 48 (length 1) [ 139.405719][ T5377] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 139.428990][ T5377] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.249: Failed to acquire dquot type 0 [ 139.442912][ T5377] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 139.487379][ T5377] EXT4-fs error (device loop5): ext4_evict_inode:281: inode #11: comm syz.5.249: mark_inode_dirty error [ 139.500870][ T5377] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 139.512088][ T5377] EXT4-fs (loop5): 1 orphan inode deleted [ 139.518191][ T5377] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 139.527672][ T9] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.621044][ T9] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 139.650360][ T9] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0 [ 139.669072][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.728469][ T4687] EXT4-fs (loop5): unmounting filesystem. [ 139.754349][ T4687] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 139.832901][ T4687] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 139.870198][ T4687] EXT4-fs error (device loop5): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 139.888814][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.946429][ T4320] usb 3-1: USB disconnect, device number 3 [ 140.004101][ T5336] em28xx 5-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 140.049991][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.066151][ T4736] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 140.080290][ T4736] em28xx 5-1:0.0: dvb set to bulk mode. [ 140.111931][ T4736] usb 5-1: USB disconnect, device number 9 [ 140.132785][ T4736] em28xx 5-1:0.0: Disconnecting em28xx [ 140.149793][ T4358] em28xx 5-1:0.0: Binding DVB extension [ 140.326386][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.389938][ T4358] em28xx 5-1:0.0: Registering input extension [ 140.410974][ T4736] em28xx 5-1:0.0: Closing input extension [ 140.515005][ T4736] em28xx 5-1:0.0: Freeing device [ 140.899439][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.913267][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.922260][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.930961][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.941935][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 140.951175][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.967651][ T5399] chnl_net:caif_netlink_parms(): no params data found [ 142.204841][ T5440] loop2: detected capacity change from 0 to 512 [ 142.452888][ T5440] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 142.498910][ T5440] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.548377][ T5399] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.601448][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.619076][ T5399] device bridge_slave_0 entered promiscuous mode [ 142.675182][ T5399] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.682346][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.745609][ T5399] device bridge_slave_1 entered promiscuous mode [ 142.926077][ T5440] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.264: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 143.038762][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 143.495352][ T5399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.507130][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 143.671656][ T57] device hsr_slave_0 left promiscuous mode [ 143.723454][ T57] device hsr_slave_1 left promiscuous mode [ 143.771828][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.783371][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.799369][ T5458] event trace: Could not enable event p [ 143.826408][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.855246][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.887102][ T57] device bridge_slave_1 left promiscuous mode [ 143.893414][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.956869][ T57] device bridge_slave_0 left promiscuous mode [ 143.979385][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.940163][ T57] device veth1_macvtap left promiscuous mode [ 144.949877][ T57] device veth0_macvtap left promiscuous mode [ 144.964817][ T57] device veth1_vlan left promiscuous mode [ 144.975005][ T57] device veth0_vlan left promiscuous mode [ 145.146790][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 145.247258][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 145.895923][ T5494] loop2: detected capacity change from 0 to 32768 [ 146.408982][ T5505] ubi0: attaching mtd0 [ 146.482317][ T5505] ubi0: scanning is finished [ 146.498271][ T5505] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 146.596432][ T5505] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 146.901612][ T57] team0 (unregistering): Port device team_slave_1 removed [ 146.976139][ T57] team0 (unregistering): Port device team_slave_0 removed [ 147.076674][ T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.104326][ T22] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 147.121642][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.199996][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.274837][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 148.044409][ T57] bond0 (unregistering): Released all slaves [ 148.469782][ T5532] random: crng reseeded on system resumption [ 149.134641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 149.144635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 149.154601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 149.164602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 149.174598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 149.184607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 149.194595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 149.204600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 149.214601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 149.345684][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 149.579808][ T5399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.724675][ T4736] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 149.924730][ T4736] usb 6-1: Using ep0 maxpacket: 8 [ 149.937546][ T4736] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.978488][ T4736] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 149.988702][ T4736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.001625][ T4736] usb 6-1: config 0 descriptor?? [ 150.122630][ T5399] team0: Port device team_slave_0 added [ 150.167874][ T5399] team0: Port device team_slave_1 added [ 150.233341][ T4736] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 150.306012][ T5399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.344973][ T5399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.501339][ T4736] usb 6-1: USB disconnect, device number 2 [ 150.507324][ C1] iowarrior 6-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 150.532218][ T5399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.631859][ T5399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.664279][ T5399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.753855][ T5399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.886013][ T5559] netlink: 16 bytes leftover after parsing attributes in process `syz.4.293'. [ 150.962560][ T5399] device hsr_slave_0 entered promiscuous mode [ 150.981482][ T5399] device hsr_slave_1 entered promiscuous mode [ 151.043978][ T5399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.086601][ T5399] Cannot create hsr debugfs directory [ 151.221392][ T5562] input: syz0 as /devices/virtual/input/input6 [ 151.871512][ T5399] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 151.911742][ T5399] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 151.945050][ T5399] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 151.963556][ T5399] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 152.242039][ T5399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.656085][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.726105][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.931150][ T5399] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.995267][ T5455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.035251][ T5455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.075611][ T5455] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.082778][ T5455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.122993][ T5455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.150040][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.179440][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.205951][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.213117][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.255065][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.274332][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.316455][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.338004][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.363668][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.381634][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.436611][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.501566][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.555493][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.581815][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.420355][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.487490][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.944580][ C0] sched: RT throttling activated [ 155.926835][ T5648] netlink: 12 bytes leftover after parsing attributes in process `syz.5.313'. [ 155.981291][ T5648] bond1 (unregistering): Released all slaves [ 156.045798][ T5455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.065106][ T4736] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 156.089887][ T5455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.120222][ T5399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.284648][ T4736] usb 4-1: Using ep0 maxpacket: 16 [ 156.292327][ T4736] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 156.323928][ T4736] usb 4-1: config 0 has no interface number 0 [ 156.350385][ T4736] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 156.381018][ T4736] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 156.430459][ T4736] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 156.482897][ T4736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.514381][ T4736] usb 4-1: Product: syz [ 156.532890][ T4736] usb 4-1: Manufacturer: syz [ 156.544853][ T4736] usb 4-1: SerialNumber: syz [ 156.570298][ T4736] usb 4-1: config 0 descriptor?? [ 156.594458][ T5642] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 156.622467][ T5642] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 156.867312][ T5642] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 156.901162][ T5642] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.145766][ T4736] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 157.183151][ T5678] netlink: 'syz.2.320': attribute type 11 has an invalid length. [ 157.318340][ T5678] netlink: 36 bytes leftover after parsing attributes in process `syz.2.320'. [ 158.370082][ T5696] nvmet: adding nsid 1 to subsystem subsys1 [ 158.404921][ T4736] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 158.428486][ T4736] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 158.470243][ T4736] asix: probe of 4-1:0.34 failed with error -71 [ 158.521266][ T4736] usb 4-1: USB disconnect, device number 3 [ 158.529189][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 158.546396][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.607283][ T5399] device veth0_vlan entered promiscuous mode [ 158.645724][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.661284][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.694016][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.720087][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.762014][ T5399] device veth1_vlan entered promiscuous mode [ 158.783515][ T5702] device vlan4 entered promiscuous mode [ 158.797560][ T5702] device vlan3 entered promiscuous mode [ 158.810547][ T5702] device erspan0 entered promiscuous mode [ 158.880004][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 158.911246][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 158.976773][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.025811][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.037079][ T5399] device veth0_macvtap entered promiscuous mode [ 159.078010][ T5399] device veth1_macvtap entered promiscuous mode [ 159.153347][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.190445][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.251825][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.289845][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.323746][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.334423][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.346018][ T5399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.354305][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 159.570146][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 159.861664][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.962494][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.059796][ T5722] loop5: detected capacity change from 0 to 8 [ 160.125510][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.143943][ T5722] SQUASHFS error: lzo decompression failed, data probably corrupt [ 160.162551][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.186716][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.201238][ T5722] SQUASHFS error: Failed to read block 0x144: -5 [ 160.217682][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.248627][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.251909][ T5722] SQUASHFS error: Unable to read metadata cache entry [142] [ 160.267864][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.289866][ T5399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.312011][ T5722] SQUASHFS error: Unable to read inode 0x11f [ 160.320322][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.337123][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.362112][ T5726] device syzkaller0 entered promiscuous mode [ 160.376036][ T5399] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.414764][ T5399] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.444215][ T5399] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.475374][ T5399] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.723792][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.752166][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.775229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.836851][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.858667][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.882649][ T5455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.137226][ T4282] Bluetooth: hci2: Invalid handle: 0xff00 > 0x0eff [ 161.152602][ T5755] loop6: detected capacity change from 0 to 256 [ 161.213542][ T5755] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.231137][ T5755] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 161.248254][ T5755] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 161.631933][ T5764] loop5: detected capacity change from 0 to 2048 [ 161.717798][ T5773] loop3: detected capacity change from 0 to 512 [ 161.761842][ T5773] EXT4-fs: Ignoring removed i_version option [ 161.767113][ T5764] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 161.823542][ T5773] EXT4-fs: Ignoring removed oldalloc option [ 161.875570][ T5764] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.926219][ T5773] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 163.320758][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 164.962854][ T5820] binder_alloc: 5819: pid 5819 spamming oneway? 2 buffers allocated for a total size of 5120 [ 165.031800][ T5825] binder_alloc: 5819: pid 5819 spamming oneway? 3 buffers allocated for a total size of 5128 [ 167.745109][ T5879] loop6: detected capacity change from 0 to 1024 [ 167.760829][ T5879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.858250][ T5879] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.064456][ T5879] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 168.521230][ T5399] EXT4-fs (loop6): unmounting filesystem. [ 169.020845][ T5911] loop4: detected capacity change from 0 to 512 [ 169.058840][ T5911] EXT4-fs: Ignoring removed bh option [ 169.132102][ T5911] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 169.214387][ T5911] EXT4-fs (loop4): 1 truncate cleaned up [ 169.224287][ T5911] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 169.386804][ T4288] EXT4-fs (loop4): unmounting filesystem. [ 169.434292][ T5929] loop6: detected capacity change from 0 to 128 [ 169.583115][ T5929] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 169.706340][ T5929] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 169.783981][ T5929] ext2 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.966278][ T5949] device syzkaller0 entered promiscuous mode [ 170.240268][ T5399] EXT4-fs (loop6): unmounting filesystem. [ 170.259146][ T5955] loop4: detected capacity change from 0 to 512 [ 170.398559][ T5955] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 170.474269][ T5955] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 170.487912][ T5955] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.963693][ T4288] EXT4-fs (loop4): unmounting filesystem. [ 171.824525][ T5983] loop4: detected capacity change from 0 to 4096 [ 172.185456][ T14] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 172.404794][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 172.412256][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.496715][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.536407][ T5998] loop3: detected capacity change from 0 to 128 [ 172.620406][ T14] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 172.659385][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 172.704641][ T14] usb 3-1: SerialNumber: syz [ 172.742517][ T14] usb 3-1: 0:2 : does not exist [ 172.878972][ T6008] fuse: Bad value for 'fd' [ 172.894226][ T4282] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 173.551364][ T14] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 173.682259][ T14] usb 3-1: USB disconnect, device number 4 [ 173.937520][ T4680] udevd[4680]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.117133][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 174.484640][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 174.494511][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.516055][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 174.547066][ T7] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 174.878222][ T7] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 175.074745][ T7] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 175.234472][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.336366][ T7] hub 7-1:1.0: bad descriptor, ignoring hub [ 175.366712][ T7] hub: probe of 7-1:1.0 failed with error -5 [ 175.410985][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 175.420597][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 175.440959][ T7] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 175.449370][ T7] cdc_wdm 7-1:1.0: Unknown control protocol [ 175.478049][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.407'. [ 175.897240][ T6076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.219936][ T6076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.700728][ T4736] usb 7-1: USB disconnect, device number 2 [ 176.814930][ T6046] cdc_wdm 7-1:1.0: Tx URB error: -19 [ 180.637950][ T6107] loop2: detected capacity change from 0 to 1024 [ 180.701908][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 180.779211][ T6107] hfsplus: request for non-existent node 33423360 in B*Tree [ 180.795430][ T6107] hfsplus: request for non-existent node 33423360 in B*Tree [ 180.830372][ T6107] hfsplus: request for non-existent node 33423360 in B*Tree [ 180.874488][ T6107] hfsplus: request for non-existent node 33423360 in B*Tree [ 180.910925][ T6107] hfsplus: request for non-existent node 33423360 in B*Tree [ 180.934466][ T6107] hfsplus: request for non-existent node 33423360 in B*Tree [ 180.948280][ T6107] hfsplus: request for non-existent node 33423360 in B*Tree [ 180.985011][ T6107] hfsplus: request for non-existent node 33423360 in B*Tree [ 181.061268][ T6107] hfsplus: request for non-existent node 33423360 in B*Tree [ 181.105545][ T6107] hfsplus: request for non-existent node 33423360 in B*Tree [ 181.229642][ T6118] hfsplus: request for non-existent node 33423360 in B*Tree [ 181.286455][ T6118] hfsplus: request for non-existent node 33423360 in B*Tree [ 181.344418][ T6121] hfsplus: request for non-existent node 33423360 in B*Tree [ 181.394792][ T6121] hfsplus: request for non-existent node 33423360 in B*Tree [ 181.434939][ T6107] hfsplus: request for non-existent node 33423360 in B*Tree [ 181.442343][ T6107] hfsplus: request for non-existent node 33423360 in B*Tree [ 181.484677][ T6107] hfsplus: request for non-existent node 33423360 in B*Tree [ 181.505764][ T6107] hfsplus: request for non-existent node 33423360 in B*Tree [ 181.572811][ T6118] hfsplus: request for non-existent node 33423360 in B*Tree [ 181.594732][ T6118] hfsplus: request for non-existent node 33423360 in B*Tree [ 181.623397][ T6107] hfsplus: request for non-existent node 33423360 in B*Tree [ 181.658559][ T6107] hfsplus: request for non-existent node 33423360 in B*Tree [ 181.668850][ T6101] loop6: detected capacity change from 0 to 32768 [ 181.892327][ T6101] XFS (loop6): Mounting V5 Filesystem [ 181.919657][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.430'. [ 182.049224][ T6101] XFS (loop6): Ending clean mount [ 182.112701][ T26] audit: type=1800 audit(1786062394.825:10): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.418" name="file1" dev="loop6" ino=6150 res=0 errno=0 [ 182.189107][ T6101] XFS (loop6): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 182.571254][ T6171] netlink: 'syz.2.436': attribute type 1 has an invalid length. [ 182.630789][ T6172] netlink: 'syz.2.436': attribute type 1 has an invalid length. [ 182.667352][ T6174] device syzkaller0 entered promiscuous mode [ 182.708969][ T6174] tipc: Started in network mode [ 182.734752][ T6174] tipc: Node identity 72263c9b09b4, cluster identity 4711 [ 182.783688][ T6174] tipc: Enabled bearer , priority 0 [ 182.857913][ T6173] tipc: Resetting bearer [ 183.012413][ T6101] syz.6.418 (6101) used greatest stack depth: 19920 bytes left [ 183.031178][ T6173] tipc: Disabling bearer [ 183.049722][ T6181] binder_alloc: 6178: binder_alloc_buf, no vma [ 183.154282][ T5399] XFS (loop6): Unmounting Filesystem [ 183.685351][ T6199] fuse: Bad value for 'fd' [ 184.045145][ T6207] capability: warning: `syz.5.446' uses deprecated v2 capabilities in a way that may be insecure [ 184.243758][ T6211] Need at least one configuration in g1. [ 184.315026][ T6211] udc dummy_udc.0: failed to start g1: -22 [ 184.320924][ T6211] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 184.466976][ T6211] UDC core: g1: couldn't find an available UDC or it's busy [ 185.405459][ T26] audit: type=1326 audit(1786062398.125:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 185.486166][ T26] audit: type=1326 audit(1786062398.165:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 186.299795][ T26] audit: type=1326 audit(1786062398.195:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 186.414641][ T26] audit: type=1326 audit(1786062398.195:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 186.554646][ T26] audit: type=1326 audit(1786062398.195:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 186.650691][ T26] audit: type=1326 audit(1786062398.195:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 186.797667][ T26] audit: type=1326 audit(1786062398.195:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 186.862771][ T26] audit: type=1326 audit(1786062398.205:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 187.042558][ T26] audit: type=1326 audit(1786062398.205:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 187.144799][ T4754] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 187.395593][ T4754] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 187.484609][ T4754] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 187.534663][ T26] audit: type=1326 audit(1786062398.205:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 187.564609][ T4754] usb 4-1: config 220 has no interface number 2 [ 187.600379][ T4754] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 187.675393][ T4754] usb 4-1: config 220 interface 0 has no altsetting 0 [ 187.682576][ T4754] usb 4-1: config 220 interface 76 has no altsetting 0 [ 187.685244][ T26] audit: type=1326 audit(1786062398.205:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 187.713720][ T26] audit: type=1326 audit(1786062398.205:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 187.764355][ T4754] usb 4-1: config 220 interface 1 has no altsetting 0 [ 187.801915][ T4754] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 187.811556][ T26] audit: type=1326 audit(1786062398.205:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 187.832994][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.461'. [ 187.854616][ T4754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.877302][ T4754] usb 4-1: Product: syz [ 187.892582][ T4754] usb 4-1: Manufacturer: syz [ 187.897693][ T4754] usb 4-1: SerialNumber: syz [ 187.911386][ T26] audit: type=1326 audit(1786062398.205:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 188.008501][ T26] audit: type=1326 audit(1786062398.205:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 188.149108][ T4754] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 188.181068][ T4754] usb 4-1: No valid video chain found. [ 188.210700][ T4754] usb 4-1: selecting invalid altsetting 0 [ 188.263154][ T26] audit: type=1326 audit(1786062398.205:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 188.342239][ T6274] xt_limit: Overflow, try lower: 324382443/0 [ 188.470639][ T4754] usb 4-1: selecting invalid altsetting 0 [ 188.579492][ T26] audit: type=1326 audit(1786062398.205:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 188.616932][ T4754] usbtest: probe of 4-1:220.1 failed with error -22 [ 188.905828][ T4754] usb 4-1: USB disconnect, device number 4 [ 189.144775][ T26] audit: type=1326 audit(1786062398.205:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 189.218044][ T6285] tipc: Enabled bearer , priority 0 [ 189.238263][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 189.247739][ T26] audit: type=1326 audit(1786062398.205:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0d9e0d9 code=0x7ffc0000 [ 189.274230][ T6289] device syzkaller0 entered promiscuous mode [ 189.310926][ T6285] tipc: Resetting bearer [ 189.374965][ T6282] tipc: Resetting bearer [ 189.490853][ T6282] tipc: Disabling bearer [ 191.119091][ T6320] device syzkaller0 entered promiscuous mode [ 192.346663][ T6347] netlink: 'syz.2.477': attribute type 1 has an invalid length. [ 192.399758][ T6351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.477'. [ 192.730575][ T6351] bond1: (slave veth3): Enslaving as an active interface with a down link [ 192.860429][ T6347] bond1: (slave veth0_to_bond): making interface the new active one [ 192.907326][ T6347] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 192.984419][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'. [ 193.057194][ T6359] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.109333][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 194.153759][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.160168][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.335391][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.482'. [ 194.645839][ T14] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 194.726393][ T6383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.762021][ T4736] wlan1: authenticate with 08:02:11:00:00:00 [ 194.778101][ T6385] netlink: 'syz.2.488': attribute type 1 has an invalid length. [ 194.782925][ T4736] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 194.844680][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 194.850382][ T5455] wlan1: authenticated [ 194.854791][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 194.870591][ T6383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.896787][ T14] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 194.904992][ T4736] mac80211_hwsim hwsim15 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 194.914743][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.924012][ T14] usb 4-1: Product: syz [ 194.928606][ T14] usb 4-1: Manufacturer: syz [ 194.933253][ T14] usb 4-1: SerialNumber: syz [ 194.948204][ T5455] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 194.951319][ T14] usb 4-1: config 0 descriptor?? [ 194.969459][ T14] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 194.979014][ T14] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 195.098638][ T6387] bond2: (slave veth5): Enslaving as an active interface with a down link [ 195.115771][ T9] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 195.211991][ T6388] bond1: (slave veth0_to_bond): Releasing active interface [ 195.234662][ T5455] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 195.250085][ T4743] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 195.457788][ T4743] wlan1: associated [ 195.484992][ T6383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.895528][ T6388] bond2: (slave veth0_to_bond): making interface the new active one [ 195.939509][ T6388] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 196.085464][ T14] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 197.231307][ T6413] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.240479][ T14] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 197.248663][ T14] em28xx 4-1:0.0: board has no eeprom [ 197.281543][ T6413] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 197.362457][ T6413] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 197.384698][ T14] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 197.402943][ T14] em28xx 4-1:0.0: dvb set to bulk mode. [ 197.409608][ T4318] em28xx 4-1:0.0: Binding DVB extension [ 197.492273][ T4320] usb 4-1: USB disconnect, device number 5 [ 197.525263][ T4320] em28xx 4-1:0.0: Disconnecting em28xx [ 197.644323][ T4318] em28xx 4-1:0.0: Registering input extension [ 197.757909][ T6413] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.781657][ T6413] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 198.492082][ T4320] em28xx 4-1:0.0: Closing input extension [ 198.498520][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.534689][ T4320] em28xx 4-1:0.0: Freeing device [ 198.553712][ T26] kauditd_printk_skb: 45 callbacks suppressed [ 198.553728][ T26] audit: type=1326 audit(1786062411.265:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.6.493" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b18b9e0d9 code=0x0 [ 198.633793][ T6413] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 198.674881][ T6413] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 198.726383][ T6413] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 198.811296][ T6413] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 198.835202][ T6413] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.835692][ T6413] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 198.842073][ T6413] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 198.842199][ T6413] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.842242][ T6413] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 198.870222][ T6413] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 198.980447][ T6441] input: syz0 as /devices/virtual/input/input10 [ 199.565051][ T6467] loop3: detected capacity change from 0 to 256 [ 199.824750][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 199.920026][ T14] libceph: mon0 (1)127.0.0.1:8080 socket closed (con state V1_BANNER) [ 199.975224][ T6446] ceph: No mds server is up or the cluster is laggy [ 200.387275][ T7] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 200.544717][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 200.674381][ T7] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 200.714944][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 200.865010][ T4287] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.866514][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.366275][ T7] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0043, bcdDevice= 1.01 [ 201.376979][ T7] usb 7-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 201.385124][ T7] usb 7-1: Product: syz [ 201.389314][ T7] usb 7-1: Manufacturer: syz [ 201.393948][ T7] usb 7-1: SerialNumber: syz [ 201.410697][ T7] em28xx 7-1:1.0: New device syz syz @ 480 Mbps (0ccd:0043, interface 0, class 0) [ 201.428738][ T7] em28xx 7-1:1.0: DVB interface 0 found: bulk [ 201.871805][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.512'. [ 201.903323][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.512'. [ 201.914779][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 201.976330][ T6506] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.986145][ T6506] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.995044][ T6506] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.003823][ T6506] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.020744][ T7] em28xx 7-1:1.0: unknown em28xx chip ID (0) [ 202.045169][ T6510] netlink: 'syz.5.512': attribute type 10 has an invalid length. [ 202.101882][ T6510] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 202.741351][ T6527] device wlan0 entered promiscuous mode [ 202.790337][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 203.013231][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 203.052593][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 203.868984][ T7] em28xx 7-1:1.0: failed to get i2c transfer status from bridge register (error=-5) [ 203.880508][ T7] em28xx 7-1:1.0: board has no eeprom [ 204.628190][ T7] em28xx 7-1:1.0: Identified as Terratec Cinergy T XS (MT2060) (card=44) [ 204.636806][ T7] em28xx 7-1:1.0: dvb set to bulk mode. [ 204.643368][ T4318] em28xx 7-1:1.0: Binding DVB extension [ 204.655065][ T7] usb 7-1: USB disconnect, device number 3 [ 204.663737][ T4318] em28xx 7-1:1.0: writing to i2c device at 0x1e failed (error=-19) [ 204.705533][ T7] em28xx 7-1:1.0: Disconnecting em28xx [ 204.734690][ T4318] zl10353_read_register: readreg error (reg=127, ret==-19) [ 204.742723][ T4318] em28xx 7-1:1.0: frontend initialization failed [ 204.777114][ T4318] em28xx 7-1:1.0: Remote control support is not available for this card. [ 204.844750][ T7] em28xx 7-1:1.0: Closing input extension [ 204.876597][ T7] em28xx 7-1:1.0: Freeing device [ 206.474856][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 206.476510][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 206.489520][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 206.965678][ T6584] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 208.636935][ T6616] device bond1 entered promiscuous mode [ 208.642767][ T6616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.974147][ T26] audit: type=1800 audit(1786062421.685:76): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.540" name="zoned" dev="configfs" ino=44440 res=0 errno=0 [ 209.045452][ T26] audit: type=1800 audit(1786062421.715:77): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.540" name="zone_nr_conv" dev="configfs" ino=44441 res=0 errno=0 [ 209.066026][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.134813][ T26] audit: type=1800 audit(1786062421.725:78): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.540" name="zoned" dev="configfs" ino=45327 res=0 errno=0 [ 209.232199][ T26] audit: type=1800 audit(1786062421.725:79): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.540" name="power" dev="configfs" ino=45328 res=0 errno=0 [ 209.619675][ T6637] device-mapper: space map common: metadata block out of bounds [ 209.659049][ T6637] device-mapper: space map common: dm_tm_shadow_block() failed [ 209.784784][ T6637] device-mapper: space map metadata: dm_sm_metadata_create: apply_bops failed [ 210.639941][ T6637] device-mapper: transaction manager: couldn't create metadata space map [ 210.696611][ T6637] device-mapper: thin metadata: tm_create_with_sm failed [ 210.719112][ T6656] loop6: detected capacity change from 0 to 128 [ 210.792586][ T6656] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 211.780311][ T6663] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4279] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6663] [ 211.804440][ T6656] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 211.825188][ T6661] net_ratelimit: 11 callbacks suppressed [ 211.825213][ T6661] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 211.954011][ T6656] syz.6.548 (pid 6656) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 212.030954][ T6637] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EINVAL) [ 212.082684][ T6637] device-mapper: ioctl: error adding target to table [ 212.172457][ T6671] mmap: syz.5.551 (6671) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 212.455322][ T6674] device syzkaller0 entered promiscuous mode [ 212.770059][ T5399] EXT4-fs (loop6): unmounting filesystem. [ 214.325321][ T6698] loop3: detected capacity change from 0 to 32768 [ 214.335203][ T6698] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.560 (6698) [ 214.355294][ T6698] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 214.365540][ T6698] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 214.374298][ T6698] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 214.384434][ T6698] BTRFS info (device loop3): use zstd compression, level 3 [ 214.391755][ T6698] BTRFS info (device loop3): force clearing of disk cache [ 214.398979][ T6698] BTRFS info (device loop3): enabling disk space caching [ 214.406402][ T6698] BTRFS info (device loop3): disk space caching is enabled [ 214.431254][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 214.732173][ T6698] BTRFS info (device loop3): enabling ssd optimizations [ 214.743316][ T6698] BTRFS info (device loop3): rebuilding free space tree [ 214.840324][ T6698] BTRFS info (device loop3): disabling free space tree [ 214.848214][ T6698] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 214.858592][ T6698] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 215.731599][ T4278] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 215.764898][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 215.787958][ T26] audit: type=1326 audit(1786062428.505:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.6.567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b18b9e0d9 code=0x0 [ 215.954730][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 215.961999][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.025545][ T7] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 216.069353][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.134286][ T7] usb 3-1: config 0 descriptor?? [ 216.170176][ T7] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 217.454093][ T6780] fuse: Bad value for 'fd' [ 217.615602][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.576'. [ 218.369599][ T6792] bond2: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 218.415995][ T6792] bond2: (slave ip_vti0): Error -95 calling set_mac_address [ 218.510843][ T4319] usb 3-1: USB disconnect, device number 5 [ 218.779409][ T6801] netlink: 76 bytes leftover after parsing attributes in process `syz.6.577'. [ 218.938798][ T6804] device syzkaller0 entered promiscuous mode [ 221.401094][ T6833] netlink: 'syz.6.586': attribute type 1 has an invalid length. [ 221.457793][ T6833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.047775][ T6837] device vlan3 entered promiscuous mode [ 222.054696][ T6837] device bond1 entered promiscuous mode [ 222.119129][ T6833] bond1: (slave bridge1): making interface the new active one [ 222.134778][ T6833] device bridge1 entered promiscuous mode [ 222.170441][ T6833] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 222.250643][ T6599] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 222.314738][ T6599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 222.596571][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 222.655087][ T4753] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 222.903460][ T4753] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 222.992510][ T4753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.154834][ T4753] usb 3-1: Product: syz [ 223.187575][ T4753] usb 3-1: Manufacturer: syz [ 223.215793][ T4753] usb 3-1: SerialNumber: syz [ 223.440249][ T4753] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 223.657239][ T6852] team0: Port device team_slave_0 removed [ 223.677986][ T6869] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 223.699878][ T6869] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 223.740252][ T4753] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 223.830243][ T6869] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 223.952424][ T6869] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 223.999276][ T6869] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 224.031810][ T6869] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 224.076420][ T6869] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 224.199705][ T6872] device syzkaller0 entered promiscuous mode [ 224.445288][ T6888] netlink: 'syz.4.597': attribute type 1 has an invalid length. [ 224.589321][ T6894] UHID_CREATE from different security context by process 149 (syz.6.598), this is not allowed. [ 224.606590][ T6888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.766764][ T6891] bond2: (slave syz_tun): making interface the new active one [ 224.784921][ T4753] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 224.795812][ T4753] ath9k_htc: Failed to initialize the device [ 224.846262][ T6891] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 224.890007][ T4753] usb 3-1: ath9k_htc: USB layer deinitialized [ 224.965901][ T6888] device bond2 entered promiscuous mode [ 224.984313][ T6888] device syz_tun entered promiscuous mode [ 228.355290][ T14] usb 3-1: USB disconnect, device number 6 [ 228.530566][ T6957] loop2: detected capacity change from 0 to 256 [ 228.638228][ T6957] FAT-fs (loop2): bogus sectors per cluster 0 [ 228.682726][ T6957] FAT-fs (loop2): Can't find a valid FAT filesystem [ 228.793805][ T4680] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 229.456001][ T6957] loop2: detected capacity change from 0 to 1024 [ 229.495025][ T4680] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 229.802283][ T11] hfsplus: b-tree write err: -5, ino 25 [ 229.821512][ T11] hfsplus: b-tree write err: -5, ino 4 [ 229.871630][ T11] hfsplus: b-tree write err: -5, ino 2 [ 229.894773][ T11] hfsplus: b-tree write err: -5, ino 26 [ 230.006545][ T6981] overlayfs: failed to clone upperpath [ 230.033381][ T6980] device syzkaller0 entered promiscuous mode [ 230.061392][ T6981] overlayfs: failed to clone upperpath [ 230.081902][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 230.118627][ T6980] tipc: Enabled bearer , priority 0 [ 230.145708][ T6979] tipc: Resetting bearer [ 230.262070][ T6979] tipc: Disabling bearer [ 232.074917][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 232.716183][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'. [ 232.961380][ T7017] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.968694][ T7017] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.196661][ T7037] netlink: 'syz.5.636': attribute type 1 has an invalid length. [ 235.325124][ T7037] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.448614][ T7042] bond3: (slave ip6gretap1): making interface the new active one [ 235.458970][ T7042] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 235.468346][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 236.270293][ T7043] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 237.780008][ T7071] tipc: Started in network mode [ 237.809857][ T7071] tipc: Node identity 62bd67bd8f33, cluster identity 4711 [ 237.825101][ T7071] tipc: Enabled bearer , priority 0 [ 239.041860][ T4753] tipc: Node number set to 3985532861 [ 239.214511][ T7087] tipc: Enabled bearer , priority 0 [ 239.273662][ T7087] device syzkaller0 entered promiscuous mode [ 239.292193][ T7087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'. [ 239.385239][ T7094] tipc: Resetting bearer [ 239.396986][ T7085] tipc: Resetting bearer [ 239.446851][ T7097] netlink: 108 bytes leftover after parsing attributes in process `syz.6.652'. [ 239.534014][ T7085] tipc: Disabling bearer [ 239.566547][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.653'. [ 240.769019][ T7097] bridge0: port 3(syz_tun) entered blocking state [ 240.818880][ T7097] bridge0: port 3(syz_tun) entered disabled state [ 240.881700][ T7097] device syz_tun entered promiscuous mode [ 240.905887][ T7097] bridge0: port 3(syz_tun) entered blocking state [ 240.914645][ T7097] bridge0: port 3(syz_tun) entered forwarding state [ 242.502534][ T7150] netlink: 'syz.4.660': attribute type 10 has an invalid length. [ 242.586735][ T7150] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 242.620347][ T7154] sch_tbf: burst 1520 is lower than device lo mtu (11337746) ! [ 245.301446][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 251.287585][ T7202] batman_adv: batadv0: Interface deactivated: dummy0 [ 252.841543][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.895555][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.763960][ T7202] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.788392][ T7202] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.804712][ T7202] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.818941][ T7202] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.100324][ T7221] netlink: 'syz.3.678': attribute type 1 has an invalid length. [ 255.204493][ T7244] netem: change failed [ 255.343119][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.698'. [ 255.588779][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.599498][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.520336][ T4282] Bluetooth: hci4: unexpected event 0x03 length: 12 > 11 [ 267.549138][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'. [ 267.904773][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 271.784618][ T26] audit: type=1800 audit(1786062484.495:81): pid=7475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.740" name="/" dev="fuse" ino=1 res=0 errno=0 [ 277.446183][ T7548] device syzkaller0 entered promiscuous mode [ 278.033896][ T7558] Bluetooth: MGMT ver 1.22 [ 278.352059][ T7566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.430175][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.770'. [ 278.622488][ T7568] bond3 (unregistering): Released all slaves [ 278.724961][ T7573] device vlan3 entered promiscuous mode [ 278.752326][ T7573] device vlan2 entered promiscuous mode [ 278.758398][ T7573] device erspan0 entered promiscuous mode [ 279.153860][ T7583] device syzkaller0 entered promiscuous mode [ 279.558497][ T4285] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 287.062468][ T7642] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 288.079572][ T4285] Bluetooth: hci4: Invalid handle: 0xff00 > 0x0eff [ 289.624663][ T7669] device wlan1 left promiscuous mode [ 290.113370][ T4285] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 291.761943][ T7698] device syzkaller0 entered promiscuous mode [ 291.784691][ T7700] fuse: Bad value for 'fd' [ 292.120468][ T7712] device syzkaller0 entered promiscuous mode [ 292.294877][ T7718] netlink: 'syz.4.815': attribute type 10 has an invalid length. [ 292.674328][ T7724] kvm [7722]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 292.697032][ T7724] kvm [7722]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x180 [ 292.716295][ T7724] kvm [7722]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 292.740217][ T7724] kvm [7722]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x380 [ 296.127587][ T7760] netlink: 'syz.6.819': attribute type 10 has an invalid length. [ 296.876701][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.953132][ T7760] device bridge_slave_1 left promiscuous mode [ 296.959492][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.984407][ T7760] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 301.194668][ T7804] loop3: detected capacity change from 0 to 512 [ 301.231189][ T7804] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 301.252511][ T7804] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 301.262762][ T7804] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 301.279669][ T7804] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)! [ 301.289919][ T7804] EXT4-fs (loop3): group descriptors corrupted! [ 301.740355][ T7818] binder_alloc: 7814: binder_alloc_buf, no vma [ 302.069622][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 302.123046][ T26] audit: type=1326 audit(1786062513.147:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.3.853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef159e0d9 code=0x7ffc0000 [ 302.176878][ T26] audit: type=1326 audit(1786062513.166:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.3.853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef159e0d9 code=0x7ffc0000 [ 302.215187][ T26] audit: type=1326 audit(1786062513.185:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.3.853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef159e0d9 code=0x7ffc0000 [ 302.364295][ T26] audit: type=1326 audit(1786062513.185:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.3.853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef159e0d9 code=0x7ffc0000 [ 302.453302][ T26] audit: type=1326 audit(1786062513.185:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.3.853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef159e0d9 code=0x7ffc0000 [ 302.528981][ T26] audit: type=1326 audit(1786062513.185:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.3.853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ef159e0d9 code=0x7ffc0000 [ 302.588008][ T26] audit: type=1326 audit(1786062513.185:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.3.853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef159e0d9 code=0x7ffc0000 [ 302.669910][ T26] audit: type=1326 audit(1786062513.185:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.3.853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef159e0d9 code=0x7ffc0000 [ 302.729109][ T26] audit: type=1326 audit(1786062513.204:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.3.853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef159e0d9 code=0x7ffc0000 [ 302.790377][ T26] audit: type=1326 audit(1786062513.204:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.3.853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef159e0d9 code=0x7ffc0000 [ 304.922160][ T7870] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 305.783073][ T7890] loop2: detected capacity change from 0 to 512 [ 305.859806][ T7890] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.871: iget: bad i_size value: 38620345925642 [ 305.930343][ T7890] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.871: couldn't read orphan inode 15 (err -117) [ 306.002241][ T7890] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 306.030829][ T7877] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.038898][ T7877] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.944651][ T11] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:1: bg 0: block 5: invalid block bitmap [ 307.011389][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1476 with error 28 [ 307.049040][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 307.049040][ T11] [ 307.063750][ T11] EXT4-fs (loop2): Total free blocks count 0 [ 307.073120][ T11] EXT4-fs (loop2): Free/Dirty block details [ 307.079406][ T11] EXT4-fs (loop2): free_blocks=0 [ 307.087686][ T11] EXT4-fs (loop2): dirty_blocks=1476 [ 307.100497][ T11] EXT4-fs (loop2): Block reservation details [ 307.112422][ T11] EXT4-fs (loop2): i_reserved_data_blocks=1476 [ 307.218959][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 307.405302][ T6762] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 307.659108][ T6762] usb 4-1: Using ep0 maxpacket: 8 [ 307.672961][ T6762] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.715836][ T6762] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 307.760601][ T6762] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 307.841251][ T6762] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 307.869689][ T6762] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 308.064431][ T6762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.090111][ T6762] hub 4-1:1.0: bad descriptor, ignoring hub [ 308.096879][ T6762] hub: probe of 4-1:1.0 failed with error -5 [ 308.117100][ T6762] cdc_wdm 4-1:1.0: skipping garbage [ 308.124247][ T6762] cdc_wdm 4-1:1.0: skipping garbage [ 308.957702][ T6762] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 308.986519][ T6762] cdc_wdm 4-1:1.0: Unknown control protocol [ 309.174984][ T7877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.209258][ T7897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.217928][ T7897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.436607][ T7877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.296862][ T6762] usb 4-1: USB disconnect, device number 6 [ 310.303193][ T7897] cdc_wdm 4-1:1.0: Error autopm - -16 [ 310.756363][ T7877] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.765441][ T7877] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.775170][ T7877] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.785617][ T7877] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.905402][ T7877] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.914605][ T7877] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.923627][ T7877] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.932648][ T7877] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.048971][ T7918] netlink: 12 bytes leftover after parsing attributes in process `syz.6.878'. [ 314.067729][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 315.335095][ T7955] device wlan0 entered promiscuous mode [ 315.393893][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 315.393909][ T26] audit: type=1804 audit(1786062525.566:146): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.890" name="bus" dev="ramfs" ino=48919 res=1 errno=0 [ 315.429477][ T26] audit: type=1804 audit(1786062525.603:147): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.890" name="bus" dev="ramfs" ino=48919 res=1 errno=0 [ 316.483651][ T7967] device syzkaller0 entered promiscuous mode [ 316.499436][ T7967] tipc: Enabled bearer , priority 0 [ 316.600093][ T7967] tipc: Resetting bearer [ 316.648754][ T7966] tipc: Resetting bearer [ 316.738774][ T7966] tipc: Disabling bearer [ 317.992565][ T1197] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 319.095443][ T1197] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.125446][ T1197] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 319.163788][ T1197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.216721][ T1197] usb 3-1: config 0 descriptor?? [ 319.247767][ T1197] pwc: Askey VC010 type 2 USB webcam detected. [ 319.310960][ T8012] device wlan0 entered promiscuous mode [ 319.390829][ T8020] MTD: Couldn't look up './dev/mtdblock0': -2 [ 319.458925][ T1197] pwc: send_video_command error -71 [ 319.464297][ T1197] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 319.481740][ T1197] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 319.496955][ T1197] usb 3-1: USB disconnect, device number 7 [ 319.895240][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.901675][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.935130][ T1197] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 332.507798][ T8140] device bond1 entered promiscuous mode [ 332.519283][ T8140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.075996][ T8194] device syzkaller0 left promiscuous mode [ 341.081938][ T8194] device vlan4 left promiscuous mode [ 341.087370][ T8194] device vlan3 left promiscuous mode [ 341.092692][ T8194] device erspan0 left promiscuous mode [ 341.098691][ T8194] device bond2 left promiscuous mode [ 341.104022][ T8194] device syz_tun left promiscuous mode [ 343.062078][ T8213] tipc: Started in network mode [ 343.165082][ T8213] tipc: Node identity 8a773700b458, cluster identity 4711 [ 343.219101][ T8213] tipc: Enabled bearer , priority 0 [ 343.833064][ T4285] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 344.282187][ T27] tipc: Node number set to 1043281664 [ 344.451472][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 344.807101][ T8248] netlink: 'syz.5.961': attribute type 1 has an invalid length. [ 344.879584][ T8248] 8021q: adding VLAN 0 to HW filter on device bond4 [ 344.906937][ T8248] bond4: (slave syz_tun): making interface the new active one [ 344.916488][ T8248] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 344.925721][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 345.018040][ T8248] device bond4 entered promiscuous mode [ 345.042086][ T8248] device syz_tun entered promiscuous mode [ 346.107760][ T8265] loop2: detected capacity change from 0 to 128 [ 346.142184][ T8265] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 346.159867][ T8265] ext4 filesystem being mounted at /189/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 346.424175][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.976'. [ 347.030848][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 347.228607][ T8277] netlink: 'syz.2.967': attribute type 10 has an invalid length. [ 347.253539][ T8277] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 348.265712][ T8293] capability: warning: `syz.5.974' uses 32-bit capabilities (legacy support in use) [ 349.495719][ T8306] loop3: detected capacity change from 0 to 1024 [ 349.547147][ T4285] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 349.669736][ T8306] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 349.686996][ T8306] EXT4-fs (loop3): orphan cleanup on readonly fs [ 349.782675][ T8306] Quota error (device loop3): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 349.792991][ T8306] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 349.803250][ T8306] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.977: Failed to acquire dquot type 0 [ 349.816228][ T8306] Quota error (device loop3): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 349.826324][ T8306] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 349.836337][ T8306] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.977: Failed to acquire dquot type 0 [ 349.849636][ T8306] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.977: Freeing blocks not in datazone - block = 0, count = 4096 [ 349.867948][ T8306] Quota error (device loop3): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 349.879020][ T8306] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 349.889286][ T8306] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.977: Failed to acquire dquot type 0 [ 349.909076][ T8306] EXT4-fs (loop3): 1 orphan inode deleted [ 349.918988][ T8306] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 349.978286][ T8318] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4687] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8318] [ 350.180994][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 351.060462][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 351.468678][ T8326] team0: Port device team_slave_0 removed [ 351.524518][ T8328] netlink: 'syz.4.982': attribute type 1 has an invalid length. [ 351.622986][ T8328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 351.655958][ T8330] device vlan5 entered promiscuous mode [ 351.679176][ T8330] device bond3 entered promiscuous mode [ 351.713759][ T8332] bond3: (slave bridge1): making interface the new active one [ 351.771425][ T8332] device bridge1 entered promiscuous mode [ 351.815038][ T8332] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 351.886042][ T6599] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 351.929292][ T6599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan5: link becomes ready [ 352.131779][ T8343] netlink: 'syz.3.983': attribute type 10 has an invalid length. [ 352.162436][ T8343] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 352.195658][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.985'. [ 352.387343][ T8338] kvm [8337]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100000040 [ 352.398695][ T8338] kvm [8337]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 352.419881][ T8350] loop3: detected capacity change from 0 to 128 [ 352.509026][ T8350] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 352.552264][ T8350] ext4 filesystem being mounted at /191/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 352.584211][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.627455][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.6.990'. [ 354.000352][ T8355] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 354.469948][ T8355] bond4: (slave macvlan2): making interface the new active one [ 354.482627][ T8355] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 355.072743][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 355.864011][ T8383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1003'. [ 359.287802][ T8430] loop2: detected capacity change from 0 to 32768 [ 359.379882][ T8430] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1004 (8430) [ 359.398713][ T8430] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 359.409074][ T8430] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 359.418145][ T8430] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 359.427767][ T8430] BTRFS info (device loop2): use zstd compression, level 3 [ 359.435268][ T8430] BTRFS info (device loop2): force clearing of disk cache [ 359.442422][ T8430] BTRFS info (device loop2): enabling disk space caching [ 359.449729][ T8430] BTRFS info (device loop2): disk space caching is enabled [ 360.241593][ T8468] syz.4.1006 sent an empty control message without MSG_MORE. [ 360.752293][ T8430] BTRFS info (device loop2): enabling ssd optimizations [ 360.769290][ T8430] BTRFS info (device loop2): rebuilding free space tree [ 360.794876][ T8430] BTRFS info (device loop2): disabling free space tree [ 360.802025][ T8430] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 360.811943][ T8430] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 361.230190][ T4285] Bluetooth: hci0: unexpected subevent 0x06 length: 18 > 10 [ 361.814704][ T4279] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 363.450979][ T4285] Bluetooth: hci0: command 0x2021 tx timeout [ 365.268647][ T8507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.359313][ T8507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.464603][ T8514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.868242][ T4285] Bluetooth: hci2: unexpected event for opcode 0x0c1c [ 371.486090][ T8577] xt_CT: You must specify a L4 protocol and not use inversions on it [ 374.314717][ T8602] netlink: 'syz.5.1033': attribute type 1 has an invalid length. [ 374.397270][ T8602] 8021q: adding VLAN 0 to HW filter on device bond5 [ 374.446313][ T8604] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.511120][ T8604] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.519919][ T8604] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.590829][ T8604] bond5: (slave geneve2): making interface the new active one [ 374.621839][ T8604] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 374.667851][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 376.309969][ T8624] "syz.3.1038" (8624) uses obsolete ecb(arc4) skcipher [ 377.288846][ T8628] device bond0 entered promiscuous mode [ 377.299070][ T8628] device bond_slave_0 entered promiscuous mode [ 377.312166][ T8626] tipc: Failed to remove unknown binding: 66,0,0/3985532861:1567547820/1567547821 [ 377.765716][ T8628] device bond_slave_1 entered promiscuous mode [ 377.937903][ T4285] Bluetooth: hci4: Malformed Event: 0x02 [ 378.549229][ T8628] device bridge_slave_1 entered promiscuous mode [ 385.257592][ T8692] o2cb: This node has not been configured. [ 385.264046][ T8692] o2cb: Cluster check failed. Fix errors before retrying. [ 385.271649][ T8692] (syz.2.1051,8692,0):user_dlm_register:674 ERROR: status = -22 [ 385.279402][ T8692] (syz.2.1051,8692,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 386.024756][ T8691] syz.3.1056 (8691) used greatest stack depth: 17072 bytes left [ 386.052597][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.058954][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.728493][ T8699] se_device not configured yet, cannot port link [ 386.742037][ T26] audit: type=1800 audit(1786062848.403:148): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1059" name="members" dev="configfs" ino=52243 res=0 errno=0 [ 388.878340][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 392.723337][ T8743] lo speed is unknown, defaulting to 1000 [ 392.729688][ T8743] lo speed is unknown, defaulting to 1000 [ 392.740530][ T8743] lo speed is unknown, defaulting to 1000 [ 392.753000][ T8743] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 392.767960][ T8743] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 392.859274][ T8743] lo speed is unknown, defaulting to 1000 [ 392.866171][ T8743] lo speed is unknown, defaulting to 1000 [ 392.872865][ T8743] lo speed is unknown, defaulting to 1000 [ 392.879363][ T8743] lo speed is unknown, defaulting to 1000 [ 392.885927][ T8743] lo speed is unknown, defaulting to 1000 [ 393.728793][ T8750] Cannot find add_set index 0 as target [ 394.588929][ T8753] loop2: detected capacity change from 0 to 1024 [ 394.868802][ T8759] hfsplus: xattr searching failed [ 396.367258][ T58] hfsplus: b-tree write err: -5, ino 3 [ 400.299011][ T8799] xt_TPROXY: Can be used only with -p tcp or -p udp [ 401.081722][ T8737] bond0: (slave syz_tun): Releasing backup interface [ 401.117561][ T6762] libceph: connect (1)[c::]:6789 error -101 [ 401.130190][ T6762] libceph: mon0 (1)[c::]:6789 connect error [ 401.169936][ T8805] ceph: No mds server is up or the cluster is laggy [ 404.040540][ T8190] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.428703][ T8190] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.580304][ T8834] tipc: Enabling of bearer rejected, failed to enable media [ 405.621481][ T8190] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.902335][ T8190] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.145996][ T8844] infiniband syz2: set down [ 407.162360][ T8844] infiniband syz2: added veth0 [ 407.299050][ T8844] rdma_rxe: unable to create cq [ 407.304864][ T8844] infiniband syz2: Couldn't create ib_mad CQ [ 407.324283][ T8844] infiniband syz2: Couldn't open port 1 [ 407.826292][ T8844] RDS/IB: syz2: added [ 407.999531][ T8844] smc: adding ib device syz2 with port count 1 [ 408.057442][ T8844] smc: ib device syz2 port 1 has pnetid [ 408.370456][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 408.382873][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 408.391891][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 408.399927][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 408.411475][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 408.420147][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 408.931977][ T8190] tipc: Disabling bearer [ 408.942775][ T8190] tipc: Left network mode [ 409.425222][ T8867] lo speed is unknown, defaulting to 1000 [ 410.640823][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 413.178628][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 413.294855][ T26] audit: type=1326 audit(1786062873.258:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.6.1100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b18b9e0d9 code=0x0 [ 413.470125][ T8190] bond0: (slave wlan1): Releasing backup interface [ 413.543298][ T8190] ------------[ cut here ]------------ [ 413.549669][ T8190] WARNING: CPU: 1 PID: 8190 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x150/0x180 [ 413.560664][ T8190] Modules linked in: [ 413.564633][ T8190] CPU: 1 PID: 8190 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 413.572397][ T8190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.582548][ T8190] Workqueue: netns cleanup_net [ 413.587411][ T8190] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 413.594467][ T8190] Code: 7c 2d 00 00 74 08 48 89 df e8 ac 2a 1b f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 d8 80 00 e8 d0 fd c9 f7 <0f> 0b eb c5 48 c7 c1 a4 3f 21 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 413.614176][ T8190] RSP: 0018:ffffc900037bf6e8 EFLAGS: 00010293 [ 413.620426][ T8190] RAX: ffffffff89b83050 RBX: ffff8880744115a8 RCX: ffff88805f81da00 [ 413.628553][ T8190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 413.636634][ T8190] RBP: 0000000000000000 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 413.644692][ T8190] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: ffff888074412ab0 [ 413.652723][ T8190] R13: 1ffff1100e8822b5 R14: ffff888074412228 R15: dffffc0000000000 [ 413.660941][ T8190] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 413.669987][ T8190] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.676657][ T8190] CR2: 00007f9bc1b5da08 CR3: 000000004e3c4000 CR4: 00000000003506e0 [ 413.684675][ T8190] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 413.692738][ T8190] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 413.700795][ T8190] Call Trace: [ 413.704112][ T8190] [ 413.707090][ T8190] ? trace_drv_return_void+0x240/0x240 [ 413.712782][ T8190] unregister_netdevice_many_notify+0x13c4/0x1990 [ 413.719344][ T8190] ? unregister_netdevice_many+0x20/0x20 [ 413.725155][ T8190] ? mutex_unlock+0x10/0x10 [ 413.729811][ T8190] ? unregister_netdevice_queue+0x17c/0x330 [ 413.735756][ T8190] ? list_netdevice+0x640/0x640 [ 413.740765][ T8190] ? ieee80211_txq_teardown_flows+0x15c/0x220 [ 413.746898][ T8190] ? cfg80211_shutdown_all_interfaces+0x173/0x1c0 [ 413.753476][ T8190] ieee80211_remove_interfaces+0x44b/0x700 [ 413.759338][ T8190] ? ieee80211_unregister_hw+0x51/0x290 [ 413.765004][ T8190] ? ieee80211_do_stop+0x1e10/0x1e10 [ 413.770349][ T8190] ? atomic_notifier_chain_unregister+0xf1/0x100 [ 413.776818][ T8190] ieee80211_unregister_hw+0x59/0x290 [ 413.782403][ T8190] mac80211_hwsim_del_radio+0x285/0x480 [ 413.788070][ T8190] ? rhashtable_remove_fast+0xc50/0xc50 [ 413.793728][ T8190] hwsim_exit_net+0x589/0x650 [ 413.798449][ T8190] ? hwsim_init_net+0x80/0x80 [ 413.803183][ T8190] ? __ip_vs_dev_cleanup_batch+0x234/0x250 [ 413.809143][ T8190] cleanup_net+0x703/0xba0 [ 413.813615][ T8190] ? ops_free_list+0x3b0/0x3b0 [ 413.818561][ T8190] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 413.824534][ T8190] ? _raw_spin_unlock+0x40/0x40 [ 413.829511][ T8190] ? _raw_spin_unlock_irq+0x1f/0x40 [ 413.834898][ T8190] ? process_one_work+0x7b4/0x1160 [ 413.840161][ T8190] process_one_work+0x8ab/0x1160 [ 413.845165][ T8190] ? worker_detach_from_pool+0x240/0x240 [ 413.850906][ T8190] ? _raw_spin_lock_irq+0xb7/0xf0 [ 413.855971][ T8190] ? _raw_spin_lock_irqsave+0x100/0x100 [ 413.861627][ T8190] ? wq_worker_running+0x97/0x190 [ 413.866818][ T8190] worker_thread+0xaf5/0x12a0 [ 413.871620][ T8190] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 413.877585][ T8190] kthread+0x29d/0x330 [ 413.881751][ T8190] ? worker_clr_flags+0x1a0/0x1a0 [ 413.886822][ T8190] ? kthread_blkcg+0xd0/0xd0 [ 413.891761][ T8190] ret_from_fork+0x1f/0x30 [ 413.896280][ T8190] [ 413.899355][ T8190] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 413.906665][ T8190] CPU: 1 PID: 8190 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 413.914337][ T8190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.924420][ T8190] Workqueue: netns cleanup_net [ 413.929229][ T8190] Call Trace: [ 413.932552][ T8190] [ 413.935511][ T8190] dump_stack_lvl+0x188/0x24e [ 413.940269][ T8190] ? memcpy+0x3c/0x60 [ 413.944335][ T8190] ? show_regs_print_info+0x12/0x12 [ 413.949572][ T8190] ? load_image+0x410/0x410 [ 413.954135][ T8190] panic+0x2d3/0x710 [ 413.958071][ T8190] ? bpf_jit_dump+0xd0/0xd0 [ 413.962615][ T8190] ? ret_from_fork+0x1f/0x30 [ 413.967259][ T8190] __warn+0x2f8/0x4f0 [ 413.971271][ T8190] ? ieee80211_link_release_channel+0x150/0x180 [ 413.977559][ T8190] ? ieee80211_link_release_channel+0x150/0x180 [ 413.983846][ T8190] report_bug+0x2ba/0x4f0 [ 413.988259][ T8190] ? ieee80211_link_release_channel+0x150/0x180 [ 413.994551][ T8190] handle_bug+0x3a/0x70 [ 413.998748][ T8190] exc_invalid_op+0x16/0x40 [ 414.003297][ T8190] asm_exc_invalid_op+0x16/0x20 [ 414.008248][ T8190] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 414.015150][ T8190] Code: 7c 2d 00 00 74 08 48 89 df e8 ac 2a 1b f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 d8 80 00 e8 d0 fd c9 f7 <0f> 0b eb c5 48 c7 c1 a4 3f 21 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 414.034817][ T8190] RSP: 0018:ffffc900037bf6e8 EFLAGS: 00010293 [ 414.040926][ T8190] RAX: ffffffff89b83050 RBX: ffff8880744115a8 RCX: ffff88805f81da00 [ 414.048937][ T8190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 414.057026][ T8190] RBP: 0000000000000000 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 414.065036][ T8190] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: ffff888074412ab0 [ 414.073038][ T8190] R13: 1ffff1100e8822b5 R14: ffff888074412228 R15: dffffc0000000000 [ 414.081053][ T8190] ? ieee80211_link_release_channel+0x150/0x180 [ 414.087361][ T8190] ? ieee80211_link_release_channel+0x150/0x180 [ 414.093651][ T8190] ? trace_drv_return_void+0x240/0x240 [ 414.099168][ T8190] unregister_netdevice_many_notify+0x13c4/0x1990 [ 414.105665][ T8190] ? unregister_netdevice_many+0x20/0x20 [ 414.111347][ T8190] ? mutex_unlock+0x10/0x10 [ 414.115900][ T8190] ? unregister_netdevice_queue+0x17c/0x330 [ 414.121845][ T8190] ? list_netdevice+0x640/0x640 [ 414.126740][ T8190] ? ieee80211_txq_teardown_flows+0x15c/0x220 [ 414.132866][ T8190] ? cfg80211_shutdown_all_interfaces+0x173/0x1c0 [ 414.139350][ T8190] ieee80211_remove_interfaces+0x44b/0x700 [ 414.145215][ T8190] ? ieee80211_unregister_hw+0x51/0x290 [ 414.150810][ T8190] ? ieee80211_do_stop+0x1e10/0x1e10 [ 414.156149][ T8190] ? atomic_notifier_chain_unregister+0xf1/0x100 [ 414.162516][ T8190] ieee80211_unregister_hw+0x59/0x290 [ 414.167938][ T8190] mac80211_hwsim_del_radio+0x285/0x480 [ 414.173541][ T8190] ? rhashtable_remove_fast+0xc50/0xc50 [ 414.179156][ T8190] hwsim_exit_net+0x589/0x650 [ 414.183876][ T8190] ? hwsim_init_net+0x80/0x80 [ 414.188616][ T8190] ? __ip_vs_dev_cleanup_batch+0x234/0x250 [ 414.194469][ T8190] cleanup_net+0x703/0xba0 [ 414.198940][ T8190] ? ops_free_list+0x3b0/0x3b0 [ 414.203751][ T8190] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 414.209692][ T8190] ? _raw_spin_unlock+0x40/0x40 [ 414.214583][ T8190] ? _raw_spin_unlock_irq+0x1f/0x40 [ 414.219821][ T8190] ? process_one_work+0x7b4/0x1160 [ 414.224976][ T8190] process_one_work+0x8ab/0x1160 [ 414.229971][ T8190] ? worker_detach_from_pool+0x240/0x240 [ 414.235775][ T8190] ? _raw_spin_lock_irq+0xb7/0xf0 [ 414.240843][ T8190] ? _raw_spin_lock_irqsave+0x100/0x100 [ 414.246430][ T8190] ? wq_worker_running+0x97/0x190 [ 414.251524][ T8190] worker_thread+0xaf5/0x12a0 [ 414.256257][ T8190] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 414.262212][ T8190] kthread+0x29d/0x330 [ 414.266331][ T8190] ? worker_clr_flags+0x1a0/0x1a0 [ 414.271397][ T8190] ? kthread_blkcg+0xd0/0xd0 [ 414.276017][ T8190] ret_from_fork+0x1f/0x30 [ 414.280493][ T8190] [ 414.284131][ T8190] Kernel Offset: disabled [ 414.288653][ T8190] Rebooting in 86400 seconds..