last executing test programs: 14m23.89942422s ago: executing program 4 (id=5): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x210805, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x584, &(0x7f0000000700)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@setneightbl={0x12, 0x43, 0x1, 0x70bd2c, 0x25dfdbff, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x8010) 14m22.873944665s ago: executing program 4 (id=13): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c000280050001000000000008000740000000001000170000000000"], 0x84}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, 0x0, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) socket(0x10, 0x803, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) r5 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050401000000000000000a0000000900010073797a300000000040000000120a050402000000000000000a0000000900010073797a30000000000900020073797a310000000008000300000000050c000480080001000000000114000000110001"], 0x88}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14m22.342971488s ago: executing program 4 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) getgroups(0x0, &(0x7f00000035c0)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000003740), 0x4000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0x9) r3 = memfd_create(&(0x7f0000005a00)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xb8y\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\r\"\x82\x83\x80>\xbd\x0fV\x1e\xa0\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n\x19F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3v\xe8$\\I?\x1bm\xd1\xed`\xae\xa4\xc8`Q\x8d4^\xf6(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x5) ftruncate(r3, 0x400000) finit_module(r3, 0x0, 0x0) 14m21.320433534s ago: executing program 32 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) getgroups(0x0, &(0x7f00000035c0)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000003740), 0x4000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0x9) r3 = memfd_create(&(0x7f0000005a00)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xb8y\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\r\"\x82\x83\x80>\xbd\x0fV\x1e\xa0\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n\x19F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3v\xe8$\\I?\x1bm\xd1\xed`\xae\xa4\xc8`Q\x8d4^\xf6(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x5) ftruncate(r3, 0x400000) finit_module(r3, 0x0, 0x0) 21.151814386s ago: executing program 2 (id=2402): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8922, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setresgid(0xee00, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ftruncate(r1, 0x6000809) sendfile(r0, r1, 0x0, 0x7ffff004) 17.924197404s ago: executing program 2 (id=2409): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000000c0)={0x1, 0x3, 0x6d7, 0x604f39d8888a9b0d, 0x9}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5463, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 16.354046033s ago: executing program 5 (id=2410): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071103100000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x10}, 0x4e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01042cbd701004000000050000000600010005e1000008000900060000000800050014000800"/54], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000680)='dctcp', 0x5) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000000100)) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="500400002900090027bd700000000000040000003c0411801b0b6aa62fd0d528e13d7ce86c27728cfd", @ANYRESDEC=r0], 0x450}, 0x1, 0x0, 0x0, 0x24002817}, 0x24000094) 15.376444806s ago: executing program 3 (id=2412): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x6, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x34, 0x34, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x65, 0x0, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x62, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x8, 0x66, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x61, 0x30, 0x30, 0x34, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x5a, 0x30, 0x64, 0x39, 0x30, 0x30, 0x30, 0x30, 0x38, 0x65]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccdceeff0011223344556613be755f104f6abfff", 0x3d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 12.690168552s ago: executing program 2 (id=2414): socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ab3000/0x3000)=nil) openat$ptmx(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r4 = shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmat(r3, &(0x7f0000d6f000/0x3000)=nil, 0x6000) shmdt(r4) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, &(0x7f0000000100)='barrier') mq_timedsend(0xffffffffffffffff, 0x0, 0x20, 0xc, 0x0) 12.689995892s ago: executing program 3 (id=2415): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {0x0, 0xff}, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c280"], 0x30}, 0x1, 0x0, 0x0, 0x4048010}, 0x44000) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000100)) dup(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 12.679374002s ago: executing program 0 (id=2425): socketpair$nbd(0x1, 0x1, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x1020c, 0xe, 0x0, 0x8, 0x1, 0x1}, 0x30, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r2, 0x1) prctl$PR_SET_PTRACER(0x59616d61, r2) listen(0xffffffffffffffff, 0x101fffd) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 11.806916373s ago: executing program 0 (id=2417): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) 10.020492217s ago: executing program 5 (id=2430): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r3, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r1, &(0x7f00000018c0), 0x0, 0x4880) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, 0x0, 0x880) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, 0x0, 0x25, 0x0, @void}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000005400)={{r4}, &(0x7f0000005380), &(0x7f00000053c0)='%-5lx \x00'}, 0x20) syz_emit_ethernet(0x32, &(0x7f0000001200)=ANY=[], 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{r0, &(0x7f0000000080)='\x00', 0x8502, &(0x7f00000000c0)={@align=0x1, {0x6, 0x61, 0x40, 0x5}}, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x703e9e1f}, {[0x9, 0x3, 0x3, 0x2]}, 0xce6, 0x46, &(0x7f0000000240)=""/70}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x74, &(0x7f0000000200)={r8, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) 9.978602998s ago: executing program 2 (id=2420): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="3c5c583ecd2d036a2762bb626c65640a", 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000200), 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./debug\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x62000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xa, 0x8, "ff000000000000000000000000000200"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000002c0)=0x11) write$binfmt_elf64(r4, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x4, 0x9, 0x6, 0x2, 0x3, 0x3, 0x6, 0xb3, 0x40, 0x248, 0x7fff, 0x4, 0x38, 0x1, 0x8, 0x6, 0x1ff}, [{0x7, 0x5, 0x81, 0x200, 0x3, 0xffffffffffffffff, 0x0, 0x100000000}], "919fe5258697eb83817cc640b2f9a092c8b81ba47dcc74cfa365ec52a74abd1177", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa99) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000180)={r7, 0x1, r4, 0x1000, 0x80000}) futex(0x0, 0x36bf51381f43f77, 0x1, 0x0, 0x0, 0x1) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000000)=0x2) 9.961911028s ago: executing program 3 (id=2421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setitimer(0x2, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x1f0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1f0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x7e51ff628128eca7}, 0x100, 0x20}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xe, 0x0, 0xe, 0x2, 0x400, 0x7, 0x80000000]}}}, {{@ipv6={@mcast2, @local, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0xffff, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5a8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xa2fab000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 9.813894362s ago: executing program 5 (id=2422): bpf$MAP_CREATE(0x0, 0x0, 0x50) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', './file0', [], 0xa, "26716ec47a07f6f5264a85c9"}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x20000040) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000040)=""/52, &(0x7f0000000080)=0x34) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x4804) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 8.952963433s ago: executing program 1 (id=2423): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r3, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r1, &(0x7f00000018c0), 0x0, 0x4880) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, 0x0, 0x880) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, 0x0, 0x25, 0x0, @void}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000005400)={{r4}, &(0x7f0000005380), &(0x7f00000053c0)='%-5lx \x00'}, 0x20) syz_emit_ethernet(0x32, &(0x7f0000001200)=ANY=[], 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{r0, &(0x7f0000000080)='\x00', 0x8502, &(0x7f00000000c0)={@align=0x1, {0x6, 0x61, 0x40, 0x5}}, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x703e9e1f}, {[0x9, 0x3, 0x3, 0x2]}, 0xce6, 0x46, &(0x7f0000000240)=""/70}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x74, &(0x7f0000000200)={r8, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) 8.562063192s ago: executing program 3 (id=2424): r0 = socket(0x2d, 0x2, 0x0) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="df", 0x1}], 0x1}, 0x10) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000240)={0x8, 0x97, 0xffff}, 0xc) r4 = socket$phonet(0x23, 0x2, 0x1) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000001680)) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) sendto$phonet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x23, 0x2, 0x0, 0x5}, 0x10) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000180)={'mangle\x00', 0x0, [0x5, 0x6, 0x2894, 0x6737267d, 0x1]}, &(0x7f0000000200)=0x54) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000340)=0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) landlock_restrict_self(0xffffffffffffffff, 0xa) r6 = socket$unix(0x1, 0x1, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x5) bind$unix(r6, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x428}, 0x1, 0x0, 0x0, 0x80}, 0x40088) 8.121135423s ago: executing program 5 (id=2426): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x1fc, @loopback, 0x3}, 0x1c) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x2, 0x4) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8901, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x200006}, 0x1c) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x30) shutdown(r0, 0x0) creat(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdir(0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='6', 0x1) 7.961803947s ago: executing program 1 (id=2427): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000000c0)={0x1, 0x3, 0x6d7, 0x604f39d8888a9b0d, 0x9}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5463, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 7.906265558s ago: executing program 2 (id=2428): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2d, 0x2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000100)=0x3) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r3, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE \''], 0x8c) close(r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 7.101817908s ago: executing program 0 (id=2429): bpf$MAP_CREATE(0x0, 0x0, 0x50) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', './file0', [], 0xa, "26716ec47a07f6f5264a85c9"}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x20000040) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000040)=""/52, &(0x7f0000000080)=0x34) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x4804) 7.054391369s ago: executing program 3 (id=2431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x4, r3, r3) r4 = getpid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_pidfd_open(r4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 6.239375549s ago: executing program 2 (id=2432): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071103100000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x10}, 0x4e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01042cbd701004000000050000000600010005e1000008000900060000000800050014000800"/54], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000680)='dctcp', 0x5) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000000100)) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="500400002900090027bd700000000000040000003c0411801b0b6aa62fd0d528e13d7ce86c27728cfd", @ANYRESDEC=r0], 0x450}, 0x1, 0x0, 0x0, 0x24002817}, 0x24000094) 5.061742677s ago: executing program 1 (id=2442): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket(0x2a, 0x80000, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, 0x0) ppoll(&(0x7f00000003c0), 0x0, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000440)={[0x3ff]}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 5.057130677s ago: executing program 3 (id=2433): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {0x0, 0xff}, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00"], 0x30}, 0x1, 0x0, 0x0, 0x4048010}, 0x44000) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000100)) dup(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 4.14505589s ago: executing program 0 (id=2434): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r3, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r1, &(0x7f00000018c0), 0x0, 0x4880) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, 0x0, 0x880) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, 0x0, 0x25, 0x0, @void}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000005400)={{r4}, &(0x7f0000005380), &(0x7f00000053c0)='%-5lx \x00'}, 0x20) syz_emit_ethernet(0x32, &(0x7f0000001200)=ANY=[], 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{r0, &(0x7f0000000080)='\x00', 0x8502, &(0x7f00000000c0)={@align=0x1, {0x6, 0x61, 0x40, 0x5}}, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x703e9e1f}, {[0x9, 0x3, 0x3, 0x2]}, 0xce6, 0x46, &(0x7f0000000240)=""/70}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x74, &(0x7f0000000200)={r8, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) 4.030396782s ago: executing program 5 (id=2435): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket(0x2a, 0x80000, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, 0x0) ppoll(&(0x7f00000003c0), 0x0, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000440)={[0x3ff]}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 3.71280087s ago: executing program 0 (id=2436): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket(0x2a, 0x80000, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, 0x0) ppoll(&(0x7f00000003c0), 0x0, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000440)={[0x3ff]}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 3.381574018s ago: executing program 1 (id=2437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2c0, 0xffffffff, 0x130, 0x130, 0x98, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'tunl0\x00', {}, {}, 0x6, 0x0, 0x60}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x4, 0x4, 0x5, 0x6, 0x4], 0x6}}}, @common=@socket0={{0x20}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) socket$inet_udp(0x2, 0x2, 0x0) tgkill(r0, r0, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) r6 = socket(0x1f, 0x6, 0x4) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143943, 0x18) 443.336639ms ago: executing program 1 (id=2438): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r3, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r1, &(0x7f00000018c0), 0x0, 0x4880) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, 0x0, 0x880) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, 0x0, 0x25, 0x0, @void}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000005400)={{r4}, &(0x7f0000005380), &(0x7f00000053c0)='%-5lx \x00'}, 0x20) syz_emit_ethernet(0x32, &(0x7f0000001200)=ANY=[], 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{r0, &(0x7f0000000080)='\x00', 0x8502, &(0x7f00000000c0)={@align=0x1, {0x6, 0x61, 0x40, 0x5}}, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x703e9e1f}, {[0x9, 0x3, 0x3, 0x2]}, 0xce6, 0x46, &(0x7f0000000240)=""/70}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x74, &(0x7f0000000200)={r8, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) 274.283384ms ago: executing program 0 (id=2439): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r5, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r8, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000080)) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000140)={[{@umask={'umask', 0x3d, 0x80}}, {@part={'part', 0x3d, 0x9}}, {@codepage={'codepage', 0x3d, 'cp855'}}, {@type={'type', 0x3d, "9d4b9598"}}, {@type}, {@umask={'umask', 0x3d, 0x100}}, {@gid}, {@file_umask={'file_umask', 0x3d, 0x3}}]}, 0x4, 0x34a, &(0x7f0000000c40)="$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") 273.989104ms ago: executing program 5 (id=2440): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x28, 0x13, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)={0x14, r7, 0x30b, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) bpf$BPF_LINK_CREATE_XDP(0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x37, 0x0, @val=@netfilter={0x5, 0x1, 0x23ad88ef}}, 0x20) ioctl$MEMREADOOB64(0xffffffffffffffff, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0xfffffcec, &(0x7f0000000000)="d7360000000000000000"}) 0s ago: executing program 1 (id=2441): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x140841, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r1, 0x540a, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000000)={0x0, 0x2, 0x7, &(0x7f0000000240)={0x1d, "e922604a455494c905fd824393fe53e14fcab3d1eb00007456b15b0000000800"}}) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000180)={0x7d, 0x3}, 0x20) sendmmsg$alg(r4, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x4008004}], 0x1, 0x20) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000580)}, 0x10000) kernel console output (not intermixed with test programs): [ 88.138129][ T4486] loop3: detected capacity change from 0 to 1024 [ 88.494455][ T4491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.33'. [ 88.528870][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 89.902103][ T4443] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.914721][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.924279][ T4443] device bridge_slave_0 entered promiscuous mode [ 90.590857][ T4501] fuse: Unknown parameter 'user_id00000000000000000000' [ 90.599238][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 90.809593][ T4443] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.899564][ T4513] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 90.977421][ T4443] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.075425][ T4443] device bridge_slave_1 entered promiscuous mode [ 91.483683][ T4333] device hsr_slave_0 left promiscuous mode [ 91.499486][ T4333] device hsr_slave_1 left promiscuous mode [ 91.506260][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.558982][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.592242][ T4508] process 'syz.2.35' launched './file0' with NULL argv: empty string added [ 91.612122][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.667867][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.771666][ T4333] device bridge_slave_1 left promiscuous mode [ 91.779237][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.485026][ T4333] device bridge_slave_0 left promiscuous mode [ 92.519483][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.678990][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 92.747306][ T4333] device veth1_macvtap left promiscuous mode [ 92.764533][ T4333] device veth0_macvtap left promiscuous mode [ 92.807753][ T4333] device veth1_vlan left promiscuous mode [ 92.861602][ T4333] device veth0_vlan left promiscuous mode [ 93.171033][ T4540] loop2: detected capacity change from 0 to 32768 [ 93.323497][ T4540] XFS (loop2): Mounting V5 Filesystem [ 93.408306][ T4540] XFS (loop2): Ending clean mount [ 94.285726][ T4562] sctp: [Deprecated]: syz.3.45 (pid 4562) Use of int in max_burst socket option. [ 94.285726][ T4562] Use struct sctp_assoc_value instead [ 94.337185][ T4278] XFS (loop2): Unmounting Filesystem [ 100.345602][ T4607] loop0: detected capacity change from 0 to 512 [ 100.359340][ T4607] ======================================================= [ 100.359340][ T4607] WARNING: The mand mount option has been deprecated and [ 100.359340][ T4607] and is ignored by this kernel. Remove the mand [ 100.359340][ T4607] option from the mount to silence this warning. [ 100.359340][ T4607] ======================================================= [ 100.835259][ T4607] EXT4-fs: test_dummy_encryption requires encrypt feature [ 101.423651][ T2187] libceph: connect (1)[c::]:6789 error -101 [ 101.442910][ T2187] libceph: mon0 (1)[c::]:6789 connect error [ 101.462876][ T4602] ceph: No mds server is up or the cluster is laggy [ 101.714633][ T4333] team0 (unregistering): Port device team_slave_1 removed [ 101.811714][ T4333] team0 (unregistering): Port device team_slave_0 removed [ 101.915211][ T4333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.709764][ T4333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.903546][ T4627] loop1: detected capacity change from 0 to 512 [ 103.357035][ T4627] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 103.435789][ T4627] EXT4-fs (loop1): 1 truncate cleaned up [ 103.466379][ T4627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 103.658383][ T4635] capability: warning: `syz.0.61' uses deprecated v2 capabilities in a way that may be insecure [ 104.227879][ T4333] bond0 (unregistering): Released all slaves [ 104.275335][ T4641] loop0: detected capacity change from 0 to 512 [ 104.337008][ T4628] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 104.481491][ T4443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.521443][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 104.576001][ T4443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.638460][ T4643] batman_adv: batadv0: Adding interface: veth0 [ 104.663127][ T4643] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.715292][ T4643] batman_adv: batadv0: Interface activated: veth0 [ 104.737212][ T4443] team0: Port device team_slave_0 added [ 104.752934][ T4443] team0: Port device team_slave_1 added [ 104.794951][ T4443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.818994][ T4443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.900395][ T4443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.099302][ T4643] batman_adv: batadv0: Interface deactivated: veth0 [ 105.113671][ T4643] batman_adv: batadv0: Removing interface: veth0 [ 105.560340][ T4643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.568445][ T4643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.609903][ T4643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.652865][ T4643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.695241][ T4653] mmap: syz.1.66 (4653) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.979678][ T4443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.024948][ T4443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.199046][ T4443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.349763][ T4443] device hsr_slave_0 entered promiscuous mode [ 107.377411][ T4443] device hsr_slave_1 entered promiscuous mode [ 107.397628][ T4443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.432177][ T4443] Cannot create hsr debugfs directory [ 107.734378][ T4669] Trying to write to read-only block-device nullb0 [ 108.525454][ T4668] Trying to write to read-only block-device nullb0 [ 108.733897][ T4443] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.755650][ T4443] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.804263][ T4443] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.888566][ T4443] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.944670][ T4443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.020907][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.050523][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.062470][ T4443] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.087702][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.116890][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.146172][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.154253][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.190067][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.209904][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.234643][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.274614][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.281793][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.342189][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.375986][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.427256][ T4443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.458124][ T4443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.479050][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.490167][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.535619][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.538554][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.554599][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.725371][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.754351][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.763370][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.776114][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.798032][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.191159][ T4742] loop3: detected capacity change from 0 to 2048 [ 112.495534][ T4742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.616255][ T4758] loop3: detected capacity change from 0 to 1024 [ 114.471638][ T4758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 115.186493][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 115.274459][ T4776] netlink: 'syz.0.88': attribute type 10 has an invalid length. [ 115.507237][ T4776] team0 (unregistering): Port device team_slave_0 removed [ 115.549106][ T4776] team0 (unregistering): Port device team_slave_1 removed [ 115.629750][ T4443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.726398][ T4782] netlink: 72 bytes leftover after parsing attributes in process `syz.0.88'. [ 115.782143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.813756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.834954][ T4783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 116.783651][ T4802] loop3: detected capacity change from 0 to 128 [ 116.792045][ T4802] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.098780][ C0] sched: RT throttling activated [ 117.203884][ T4802] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.734076][ T4609] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.768991][ T4271] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 118.092653][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.586842][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.631583][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.831473][ T4854] syz.2.103 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 123.916883][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.936504][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.968610][ T4443] device veth0_vlan entered promiscuous mode [ 125.139061][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.147551][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.191813][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.220379][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.768933][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 126.961482][ T4443] device veth1_vlan entered promiscuous mode [ 126.971249][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 127.006991][ T27] usb 1-1: config index 0 descriptor too short (expected 1068, got 27) [ 127.029139][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 127.063309][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 127.104150][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.188718][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.232682][ T4443] device veth0_macvtap entered promiscuous mode [ 128.286932][ T4443] device veth1_macvtap entered promiscuous mode [ 128.335910][ T4443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.365738][ T4443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.964613][ T4443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.198930][ T4443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.209262][ T4443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.224704][ T4443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.247484][ T4443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.347525][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.384161][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.444782][ T4443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.468159][ T4443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.502492][ T4443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.701063][ T4443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.739015][ T4443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.315444][ T4443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.326796][ T4443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.340817][ T4443] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.350431][ T4443] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.376304][ T4443] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.385308][ T4443] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.814734][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.842726][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.177095][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.209103][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.363024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.390033][ T4609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.407010][ T4609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.204788][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.514654][ T27] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 133.276123][ T4283] Bluetooth: hci0: command 0x040a tx timeout [ 133.283137][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.296073][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.621598][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.650444][ T27] usb 1-1: config 0 descriptor?? [ 133.659195][ T27] usb 1-1: can't set config #0, error -71 [ 133.670713][ T27] usb 1-1: USB disconnect, device number 2 [ 135.165964][ T4949] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 135.484415][ T4952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.120'. [ 137.148544][ T26] audit: type=1326 audit(1786977693.910:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4954 comm="syz.3.124" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 137.218716][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 137.316249][ T26] audit: type=1326 audit(1786977693.940:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4954 comm="syz.3.124" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 137.405391][ T26] audit: type=1326 audit(1786977693.950:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4954 comm="syz.3.124" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 137.482974][ T26] audit: type=1326 audit(1786977693.950:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4954 comm="syz.3.124" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 137.607682][ T26] audit: type=1326 audit(1786977693.950:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4954 comm="syz.3.124" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 137.678246][ T26] audit: type=1326 audit(1786977693.950:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4954 comm="syz.3.124" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 137.756975][ T26] audit: type=1326 audit(1786977693.950:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4954 comm="syz.3.124" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 137.834010][ T26] audit: type=1326 audit(1786977693.950:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4954 comm="syz.3.124" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 137.917303][ T26] audit: type=1326 audit(1786977693.950:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4954 comm="syz.3.124" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 138.025762][ T26] audit: type=1326 audit(1786977693.950:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4954 comm="syz.3.124" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 138.625841][ T4983] loop1: detected capacity change from 0 to 256 [ 138.691807][ T4983] exfat: Unknown parameter 'zero_size_dir' [ 138.857703][ T4987] block device autoloading is deprecated and will be removed. [ 138.870278][ T4987] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 139.728611][ T4495] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.558950][ T4355] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 140.685121][ T5005] loop3: detected capacity change from 0 to 512 [ 140.780143][ T4355] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.879374][ T4355] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 140.955638][ T4355] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 141.039431][ T4355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.180757][ T5005] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 141.261207][ T4355] usb 3-1: config 0 descriptor?? [ 141.525169][ T5011] capability: warning: `syz.5.135' uses 32-bit capabilities (legacy support in use) [ 142.457952][ T5005] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.587080][ T5005] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 142.650373][ T5005] EXT4-fs (loop3): 1 truncate cleaned up [ 142.725339][ T5005] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 142.746608][ T4355] usb 3-1: Direct firmware load for ar3k/AthrBT_0xd3674841.dfu failed with error -2 [ 142.804528][ T4355] usb 3-1: Falling back to sysfs fallback for: ar3k/AthrBT_0xd3674841.dfu [ 142.865458][ T5018] netlink: 32 bytes leftover after parsing attributes in process `syz.1.136'. [ 143.188522][ T5024] loop1: detected capacity change from 0 to 1024 [ 143.832184][ T5031] loop0: detected capacity change from 0 to 128 [ 143.843454][ T5031] FAT-fs (loop0): bogus number of FAT structure [ 143.851464][ T5031] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 143.863731][ T5031] FAT-fs (loop0): Can't find a valid FAT filesystem [ 143.927644][ T5024] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 144.175966][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 144.666066][ T4495] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.874174][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 146.115564][ T5056] loop3: detected capacity change from 0 to 256 [ 146.249789][ T5056] exfat: Unknown parameter 'zero_size_dir' [ 147.863482][ T5077] loop5: detected capacity change from 0 to 256 [ 149.587324][ T4315] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 149.794104][ T4315] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.860698][ T4315] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 149.898262][ T4315] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 149.911110][ T5102] netlink: 23 bytes leftover after parsing attributes in process `syz.2.153'. [ 149.928028][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.959384][ T4316] libceph: connect (1)[c::]:6789 error -101 [ 149.978146][ T4316] libceph: mon0 (1)[c::]:6789 connect error [ 150.004491][ T4315] usb 4-1: config 0 descriptor?? [ 150.092593][ T5102] ceph: No mds server is up or the cluster is laggy [ 150.357337][ T4316] libceph: connect (1)[c::]:6789 error -101 [ 150.389466][ T4316] libceph: mon0 (1)[c::]:6789 connect error [ 150.545077][ T5103] tipc: Started in network mode [ 150.564828][ T5103] tipc: Node identity ac14140f, cluster identity 4711 [ 150.584851][ T5103] tipc: New replicast peer: 255.255.255.255 [ 150.592663][ T5103] tipc: Enabled bearer , priority 10 [ 150.661312][ T5115] 0x200000000007-0x20000000003f : "" [ 150.667206][ T5115] mtd: partition "" is out of reach -- disabled [ 150.692659][ T5115] ftl_cs: FTL header not found. [ 151.682183][ T4316] tipc: Node number set to 2886997007 [ 151.697075][ T5126] loop5: detected capacity change from 0 to 256 [ 152.816542][ T5126] exfat: Unknown parameter 'zero_size_dir' [ 152.862149][ T5128] tmpfs: Bad value for 'nr_inodes' [ 152.868727][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 154.648041][ T5161] device veth1_macvtap left promiscuous mode [ 155.482443][ T5180] netlink: 44 bytes leftover after parsing attributes in process `syz.3.165'. [ 156.216501][ T5193] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4278] was attempted by " [ 157.122701][ T5182] loop5: detected capacity change from 0 to 8192 [ 157.209762][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.264763][ T5196] loop2: detected capacity change from 0 to 256 [ 157.597282][ T5196] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 160.270771][ T5209] tmpfs: Bad value for 'nr_inodes' [ 160.277053][ T5209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 160.404218][ T5215] sctp: [Deprecated]: syz.0.175 (pid 5215) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.404218][ T5215] Use struct sctp_sack_info instead [ 162.072500][ T5219] loop2: detected capacity change from 0 to 32768 [ 162.648585][ T5220] netlink: 52 bytes leftover after parsing attributes in process `syz.1.177'. [ 162.950631][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 162.950644][ T26] audit: type=1800 audit(1787502008.052:30): pid=5234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.180" name="attr_allow_any_host" dev="configfs" ino=38011 res=0 errno=0 [ 163.044409][ T26] audit: type=1800 audit(1787502008.122:31): pid=5234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.180" name="addr_adrfam" dev="configfs" ino=38018 res=0 errno=0 [ 167.068408][ T5276] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 167.088636][ T5276] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 167.272227][ T5274] netlink: 32 bytes leftover after parsing attributes in process `syz.5.184'. [ 167.615539][ T5276] can: request_module (can-proto-3) failed. [ 167.630588][ T5289] tmpfs: Bad value for 'nr_inodes' [ 167.636704][ T5289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 169.039434][ T5304] loop2: detected capacity change from 0 to 2048 [ 169.652835][ T5304] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 169.662029][ T5304] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.906398][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 170.269399][ T5325] 0x000000000007-0x000000020000 : "" [ 170.282703][ T5325] ftl_cs: FTL header corrupt! [ 171.459390][ T5342] tmpfs: Bad value for 'nr_inodes' [ 171.468394][ T5342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 172.613824][ T5355] loop2: detected capacity change from 0 to 128 [ 173.724504][ T5359] loop1: detected capacity change from 0 to 512 [ 173.746899][ T5359] EXT4-fs: Ignoring removed i_version option [ 173.808927][ T5359] EXT4-fs: Ignoring removed bh option [ 173.862827][ T5359] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.205: inode #13: comm syz.1.205: iget: illegal inode # [ 173.908733][ T5359] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.205: couldn't read orphan inode 13 (err -117) [ 174.042028][ T5359] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 174.898153][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 176.359241][ T5425] batman_adv: batadv0: Adding interface: veth0 [ 176.386463][ T5425] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.411728][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.435861][ T5425] batman_adv: batadv0: Interface activated: veth0 [ 176.468476][ T5425] batman_adv: batadv0: Interface deactivated: veth0 [ 176.484321][ T5425] batman_adv: batadv0: Removing interface: veth0 [ 176.496951][ T5425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.513139][ T5425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.522845][ T5425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.533072][ T5425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.813484][ T5474] hub 8-0:1.0: USB hub found [ 178.819812][ T5474] hub 8-0:1.0: 1 port detected [ 180.544848][ T5493] kAFS: bad VL server IP address [ 183.626724][ T5521] tmpfs: Bad value for 'nr_inodes' [ 183.635509][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 185.861079][ T5485] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 187.792596][ T5485] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 187.801892][ T5485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.809970][ T5485] usb 6-1: Product: syz [ 187.814143][ T5485] usb 6-1: Manufacturer: syz [ 187.818759][ T5485] usb 6-1: SerialNumber: syz [ 188.684638][ T5584] batman_adv: batadv0: Adding interface: veth0 [ 188.719884][ T5584] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.745057][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.841126][ T5584] batman_adv: batadv0: Interface activated: veth0 [ 188.858932][ T5485] usb 6-1: can't set config #1, error -71 [ 188.868114][ T5485] usb 6-1: USB disconnect, device number 2 [ 188.907267][ T5584] batman_adv: batadv0: Interface deactivated: veth0 [ 188.940124][ T5584] batman_adv: batadv0: Removing interface: veth0 [ 188.977137][ T5584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.998086][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.023517][ T5584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.225916][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.273872][ T5595] binder: 5592:5595 ioctl 4018620d 0 returned -22 [ 190.314183][ T5595] binder: 5592:5595 ioctl c0306201 0 returned -14 [ 190.948898][ T5611] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 190.956526][ T5611] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 190.964296][ T5611] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 190.979038][ T5611] Error parsing options; rc = [-22] [ 191.657831][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 191.665329][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 191.671391][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 191.677402][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 191.974403][ T5618] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 193.914402][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.940773][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.283653][ T5695] netlink: 44 bytes leftover after parsing attributes in process `syz.0.268'. [ 196.062550][ T5703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 198.063392][ T5729] loop2: detected capacity change from 0 to 128 [ 198.120457][ T5729] EXT4-fs (loop2): Test dummy encryption mode enabled [ 199.366516][ T5729] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 199.491899][ T5729] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.523572][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.345044][ T5729] fscrypt (loop2): Error allocating 'xts(aes)' transform: -4 [ 202.552423][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 202.743401][ T5774] device syzkaller0 entered promiscuous mode [ 203.500324][ T4286] Bluetooth: hci2: command 0x040a tx timeout [ 203.645159][ T5774] tipc: Enabled bearer , priority 0 [ 203.726157][ T5781] tipc: Resetting bearer [ 203.790126][ T5786] loop3: detected capacity change from 0 to 8 [ 203.894523][ T5773] tipc: Resetting bearer [ 203.925190][ T5786] unable to read inode lookup table [ 203.956554][ T5773] tipc: Disabling bearer [ 204.153780][ T4355] Bluetooth: Patch file not found ar3k/AthrBT_0xd3674841.dfu [ 204.161344][ T4315] Bluetooth: Patch file not found ar3k/AthrBT_0xd3674841.dfu [ 204.295785][ T4315] Bluetooth: Loading patch file failed [ 204.301728][ T4355] Bluetooth: Loading patch file failed [ 204.311908][ T4315] ath3k: probe of 4-1:0.0 failed with error -2 [ 204.892337][ T4315] usb 4-1: USB disconnect, device number 2 [ 204.898322][ T4355] ath3k: probe of 3-1:0.0 failed with error -110 [ 204.934743][ T4355] usb 3-1: USB disconnect, device number 2 [ 205.335226][ T5808] netlink: 'syz.3.286': attribute type 2 has an invalid length. [ 205.344048][ T5808] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 206.219819][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 211.055577][ T5694] Bluetooth: Error in BCSP hdr checksum [ 213.021102][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 213.027619][ T4286] Bluetooth: hci5: command 0x1003 tx timeout [ 213.190061][ T2187] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 213.519881][ T2187] usb 3-1: Using ep0 maxpacket: 16 [ 214.069799][ C0] hrtimer: interrupt took 47099 ns [ 217.855703][ T5923] loop5: detected capacity change from 0 to 164 [ 218.752691][ T2187] usb 3-1: unable to read config index 0 descriptor/start: -110 [ 218.796836][ T2187] usb 3-1: can't read configurations, error -110 [ 218.837019][ T5922] Unsupported NM flag settings (240) [ 219.056264][ T2187] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 219.057193][ T4443] Unsupported NM flag settings (240) [ 219.130501][ T4443] Unsupported NM flag settings (240) [ 219.222683][ T4443] Unsupported NM flag settings (240) [ 221.052740][ T4283] Bluetooth: hci1: command 0x0405 tx timeout [ 221.191933][ T4443] Unsupported NM flag settings (240) [ 221.199649][ T4443] Unsupported NM flag settings (240) [ 221.288260][ T5933] bridge0: port 3(syz_tun) entered blocking state [ 221.295271][ T5933] bridge0: port 3(syz_tun) entered disabled state [ 221.346260][ T5934] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 222.050424][ T4443] Unsupported NM flag settings (240) [ 222.292904][ T5933] device syz_tun entered promiscuous mode [ 222.318554][ T5933] bridge0: port 3(syz_tun) entered blocking state [ 222.325328][ T5933] bridge0: port 3(syz_tun) entered forwarding state [ 223.920670][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 229.115533][ T6000] block device autoloading is deprecated and will be removed. [ 229.125103][ T6000] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 231.454990][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 231.715006][ T22] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.649713][ T22] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 232.753932][ T22] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.801515][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.841296][ T6011] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 233.111783][ T22] usb 3-1: USB disconnect, device number 5 [ 235.091597][ T6068] loop2: detected capacity change from 0 to 1024 [ 235.139325][ T6068] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 235.177751][ T6076] loop5: detected capacity change from 0 to 2048 [ 235.580909][ T6081] tmpfs: Bad value for 'nr_inodes' [ 235.596342][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 235.758584][ T6076] UDF-fs: bad mount option "½|¾ñòÌÙ¹ÉùùɉÆØtûêÌÄä¶p¿õ7;Z€Æ×oN\»6ß8uüô†·o¾?ðäáÁsCÏ{¶[vlxddt½H½·|ížÒq§¢ˆc‘âùïü$µ"¢ˆû?õ½ûÍV8Zublx¤êÈT»5½P¾y©{"ŠˆFO¥f÷m=QëßÓ>ÜY3b±l~Ùà£e÷Fg[s­+S“K­¹…öB{fúRê´¶ìO#Š8›"–"beàƒ‡ë"j‘â[‡VÓ•ˆè랇ÏWƒïÜŽbû¸e;ýK" or missing value [ 236.012966][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 242.640343][ T6135] loop3: detected capacity change from 0 to 40427 [ 242.658243][ T6135] F2FS-fs (loop3): invalid crc value [ 242.751595][ T6135] F2FS-fs (loop3): Found nat_bits in checkpoint [ 242.781899][ T6135] F2FS-fs (loop3): Start checkpoint disabled! [ 242.806197][ T6137] loop5: detected capacity change from 0 to 1024 [ 242.827363][ T6135] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 242.868448][ T6137] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 243.492250][ T6146] openvswitch: netlink: EtherType 0 is less than min 600 [ 243.598283][ T6153] loop1: detected capacity change from 0 to 16 [ 243.755381][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 243.829357][ T6155] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 243.941174][ T6153] erofs: (device loop1): mounted with root inode @ nid 36. [ 244.483808][ T6153] syz.1.359: attempt to access beyond end of device [ 244.483808][ T6153] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 244.518112][ T5690] kworker/u4:19: attempt to access beyond end of device [ 244.518112][ T5690] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 244.630711][ T6159] loop5: detected capacity change from 0 to 16 [ 244.721953][ T6159] erofs: Unknown parameter 'ãé' [ 245.291834][ T6175] atomic_op ffff88802f752998 conn xmit_atomic 0000000000000000 [ 245.589820][ T6153] syz.1.359: attempt to access beyond end of device [ 245.589820][ T6153] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 246.437343][ T6153] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -41 in[61, 4035] out[8192] [ 247.863482][ T26] audit: type=1800 audit(1788550672.326:32): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.359" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 247.872422][ T6153] syz.1.359 (6153) used greatest stack depth: 20400 bytes left [ 248.061023][ T6196] loop2: detected capacity change from 0 to 32768 [ 248.092165][ T6196] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.370 (6196) [ 248.122492][ T6196] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 248.133146][ T6196] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 248.142324][ T6196] BTRFS info (device loop2): turning on sync discard [ 248.149116][ T6196] BTRFS info (device loop2): using free space tree [ 248.463134][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 249.473186][ T6196] BTRFS info (device loop2): enabling ssd optimizations [ 249.639867][ T26] audit: type=1800 audit(1788550674.138:33): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.370" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 249.655415][ T6229] loop1: detected capacity change from 0 to 1024 [ 249.722717][ T6229] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 250.539946][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 250.556041][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 250.575659][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 250.639343][ T26] audit: type=1800 audit(1789074963.132:34): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.372" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 250.715136][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 250.819644][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 250.833147][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 250.846766][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 251.666122][ T6255] loop5: detected capacity change from 0 to 4096 [ 251.802504][ T6255] ntfs: (device loop5): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 251.814140][ T6255] ntfs: (device loop5): ntfs_fill_super(): Unsupported NTFS filesystem. [ 252.173065][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 252.301776][ T6258] tmpfs: Bad value for 'nr_inodes' [ 253.342940][ T4278] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 254.010138][ T4350] libceph: connect (1)[c::]:6789 error -101 [ 254.084691][ T4350] libceph: mon0 (1)[c::]:6789 connect error [ 254.135192][ T6270] ceph: No mds server is up or the cluster is laggy [ 254.864178][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.870581][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.998015][ T6323] loop2: detected capacity change from 0 to 64 [ 260.717058][ T6335] device bridge1 entered promiscuous mode [ 260.727979][ T6335] team0: Port device bridge1 added [ 260.836082][ T6344] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 260.934805][ T6344] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 261.005707][ T6335] bridge0: port 3(team0) entered blocking state [ 261.142181][ T6335] bridge0: port 3(team0) entered disabled state [ 261.400002][ T6335] device team0 entered promiscuous mode [ 261.587608][ T6335] device team_slave_0 entered promiscuous mode [ 261.753366][ T6335] device team_slave_1 entered promiscuous mode [ 261.786868][ T6335] bridge0: port 3(team0) entered blocking state [ 261.793311][ T6335] bridge0: port 3(team0) entered forwarding state [ 262.510105][ T6290] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 262.618469][ T6359] tmpfs: Bad value for 'nr_inodes' [ 262.733175][ T6290] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 263.427144][ T6290] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 263.483829][ T6290] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 263.510048][ T6290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.074302][ T6367] input: syz0 as /devices/virtual/input/input8 [ 264.099590][ T6290] usb 6-1: USB disconnect, device number 3 [ 264.393035][ T6376] 9pnet_virtio: no channels available for device syz [ 265.435001][ T4283] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 265.446203][ T4283] CPU: 1 PID: 4283 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 265.453774][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.463832][ T4283] Workqueue: hci2 hci_rx_work [ 265.468551][ T4283] Call Trace: [ 265.471831][ T4283] [ 265.474801][ T4283] dump_stack_lvl+0x188/0x24e [ 265.479503][ T4283] ? show_regs_print_info+0x12/0x12 [ 265.484704][ T4283] ? load_image+0x410/0x410 [ 265.489211][ T4283] sysfs_create_dir_ns+0x26a/0x290 [ 265.494325][ T4283] ? __lock_acquire+0x7c40/0x7c40 [ 265.499358][ T4283] ? sysfs_warn_dup+0xa0/0xa0 [ 265.504042][ T4283] ? do_raw_spin_unlock+0x11d/0x230 [ 265.509238][ T4283] kobject_add_internal+0x617/0xca0 [ 265.514438][ T4283] kobject_add+0x160/0x230 [ 265.518849][ T4283] ? kobject_init+0x1c0/0x1c0 [ 265.523522][ T4283] ? __raw_spin_lock_init+0x41/0x100 [ 265.528799][ T4283] ? klist_children_get+0x50/0x50 [ 265.533826][ T4283] ? get_device_parent+0x121/0x3e0 [ 265.538938][ T4283] device_add+0x470/0x1050 [ 265.543392][ T4283] hci_conn_add_sysfs+0xd1/0x1e0 [ 265.548333][ T4283] le_conn_complete_evt+0xfac/0x15c0 [ 265.553620][ T4283] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 265.559859][ T4283] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 265.565493][ T4283] ? mutex_unlock+0x10/0x10 [ 265.569993][ T4283] ? skb_pull_data+0xec/0x1f0 [ 265.574665][ T4283] hci_le_conn_complete_evt+0x183/0x440 [ 265.580210][ T4283] ? hci_remote_host_features_evt+0x230/0x230 [ 265.586273][ T4283] hci_event_packet+0x7b3/0x1290 [ 265.591223][ T4283] ? __lock_acquire+0x7c40/0x7c40 [ 265.596248][ T4283] ? bis_list+0x280/0x280 [ 265.600582][ T4283] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 265.606490][ T4283] ? kcov_remote_start+0x4b0/0x7e0 [ 265.611639][ T4283] ? do_machine_check+0x380/0x750 [ 265.616687][ T4283] ? hci_send_to_monitor+0x9c/0x4a0 [ 265.621894][ T4283] hci_rx_work+0x3eb/0xd40 [ 265.626334][ T4283] ? _raw_spin_unlock+0x40/0x40 [ 265.631192][ T4283] ? process_one_work+0x7b4/0x1160 [ 265.636304][ T4283] process_one_work+0x8ab/0x1160 [ 265.641296][ T4283] ? worker_detach_from_pool+0x240/0x240 [ 265.646949][ T4283] ? _raw_spin_lock_irq+0xb7/0xf0 [ 265.651975][ T4283] ? _raw_spin_lock_irqsave+0x100/0x100 [ 265.657518][ T4283] ? wq_worker_running+0x97/0x190 [ 265.662543][ T4283] worker_thread+0xaf5/0x12a0 [ 265.667240][ T4283] kthread+0x29d/0x330 [ 265.671305][ T4283] ? worker_clr_flags+0x1a0/0x1a0 [ 265.676321][ T4283] ? kthread_blkcg+0xd0/0xd0 [ 265.680904][ T4283] ret_from_fork+0x1f/0x30 [ 265.685331][ T4283] [ 265.691229][ T6290] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 265.693837][ T4283] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 265.719364][ T4283] Bluetooth: hci2: failed to register connection device [ 265.974702][ T6395] loop3: detected capacity change from 0 to 256 [ 266.826664][ T4263] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 267.024997][ T6399] loop2: detected capacity change from 0 to 1024 [ 267.200755][ T6399] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 267.671553][ T6416] loop0: detected capacity change from 0 to 128 [ 267.679107][ T6416] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 267.713756][ T6416] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.647680][ T4824] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.724075][ T6411] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.084341][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.420'. [ 271.162744][ T6445] loop1: detected capacity change from 0 to 8192 [ 271.200702][ T6445] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 271.214914][ T6445] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 271.224719][ T6445] REISERFS (device loop1): using ordered data mode [ 271.231279][ T6445] reiserfs: using flush barriers [ 271.248687][ T6445] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 271.268238][ T6445] REISERFS (device loop1): checking transaction log (loop1) [ 271.286655][ T6445] REISERFS (device loop1): Using r5 hash to sort names [ 271.300471][ T6445] REISERFS warning (device loop1): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 271.866342][ T6421] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 271.938722][ T6458] loop5: detected capacity change from 0 to 256 [ 272.021385][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.422'. [ 272.748019][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'. [ 273.001396][ T6467] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 273.792052][ T26] audit: type=1800 audit(1789599274.784:35): pid=6471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.426" name="attr_allow_any_host" dev="configfs" ino=41111 res=0 errno=0 [ 273.830932][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 273.868090][ T6471] nvmet: adding nsid 1 to subsystem testnqn [ 273.981126][ T26] audit: type=1800 audit(1789599274.979:36): pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.426" name="addr_trtype" dev="configfs" ino=41123 res=0 errno=0 [ 274.033400][ T6467] nvmet_rdma: address family 255 not supported [ 274.062021][ T26] audit: type=1800 audit(1789599275.030:37): pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.426" name="addr_adrfam" dev="configfs" ino=40637 res=0 errno=0 [ 274.657933][ T6489] loop7: detected capacity change from 0 to 16384 [ 274.699103][ T4283] Bluetooth: hci4: Malformed Event: 0x2f [ 275.309642][ T6497] loop7: detected capacity change from 16384 to 0 [ 275.850047][ T6510] syz.5.434 (6510) used greatest stack depth: 17408 bytes left [ 276.624472][ T6519] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 276.837424][ T6525] loop2: detected capacity change from 0 to 128 [ 276.894039][ T6525] FAT-fs (loop2): invalid media value (0x07) [ 276.925431][ T6525] FAT-fs (loop2): Can't find a valid FAT filesystem [ 278.011241][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 279.948261][ T6566] loop3: detected capacity change from 0 to 1024 [ 280.044465][ T6566] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 280.824731][ T26] audit: type=1800 audit(1790123569.944:38): pid=6574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.449" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 280.936329][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 281.543044][ T6587] loop2: detected capacity change from 0 to 7 [ 281.558342][ T6587] Dev loop2: unable to read RDB block 7 [ 281.564139][ T6587] loop2: AHDI p1 p2 p3 [ 281.568644][ T6587] loop2: partition table partially beyond EOD, truncated [ 281.578480][ T6587] loop2: p1 start 1601398130 is beyond EOD, truncated [ 281.585366][ T6587] loop2: p2 start 1702059890 is beyond EOD, truncated [ 283.027831][ T6610] tmpfs: Bad value for 'nr_inodes' [ 283.041061][ T6610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 283.581987][ T6616] loop3: detected capacity change from 0 to 1024 [ 284.028282][ T6616] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 284.738924][ T6630] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 284.870353][ T6633] loop2: detected capacity change from 0 to 128 [ 284.893405][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 285.385057][ T6636] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4278] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6636] [ 285.451841][ T4283] Bluetooth: Wrong link type (-22) [ 285.500941][ T6637] netlink: 260 bytes leftover after parsing attributes in process `syz.2.467'. [ 285.509983][ T6637] netlink: 104 bytes leftover after parsing attributes in process `syz.2.467'. [ 285.519347][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 288.325580][ T6671] loop5: detected capacity change from 0 to 1024 [ 288.421580][ T6673] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 288.443353][ T6671] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 289.315780][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 290.752076][ T6705] loop5: detected capacity change from 0 to 8192 [ 291.104075][ T4495] I/O error, dev loop5, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 291.479621][ T6728] tmpfs: Bad value for 'nr_inodes' [ 291.487232][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'. [ 292.468326][ T6734] loop1: detected capacity change from 0 to 1024 [ 292.570206][ T6734] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 292.581365][ T6736] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 292.919665][ T6742] siw: device registration error -23 [ 293.126693][ T26] audit: type=1800 audit(1791172158.573:39): pid=6742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.496" name="attr_allow_any_host" dev="configfs" ino=41496 res=0 errno=0 [ 293.513710][ T6742] nvmet_rdma: address family 255 not supported [ 293.547892][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 293.636564][ T26] audit: type=1800 audit(1791696446.947:40): pid=6742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.496" name="addr_trtype" dev="configfs" ino=41500 res=0 errno=0 [ 293.789013][ T26] audit: type=1800 audit(1791696446.957:41): pid=6742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.496" name="addr_adrfam" dev="configfs" ino=40913 res=0 errno=0 [ 296.753568][ T6784] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 296.776356][ T6790] loop2: detected capacity change from 0 to 1024 [ 296.962328][ T6790] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 297.240639][ T6796] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 297.811461][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 297.996860][ T6809] siw: device registration error -23 [ 298.007569][ T6803] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 298.046662][ T26] audit: type=1800 audit(1792220739.596:42): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.511" name="attr_allow_any_host" dev="configfs" ino=42006 res=0 errno=0 [ 298.227449][ T26] audit: type=1800 audit(1792220739.776:43): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.511" name="addr_trtype" dev="configfs" ino=42012 res=0 errno=0 [ 299.000339][ T6809] nvmet_rdma: address family 255 not supported [ 299.020076][ T26] audit: type=1800 audit(1792220740.459:44): pid=6819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.511" name="addr_adrfam" dev="configfs" ino=41596 res=0 errno=0 [ 300.949644][ T6843] loop2: detected capacity change from 0 to 1024 [ 301.202906][ T6843] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 302.551301][ T26] audit: type=1800 audit(1792745032.170:45): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.524" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 302.605542][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 303.278268][ T6871] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 305.390432][ T6900] loop3: detected capacity change from 0 to 8192 [ 307.095924][ T6919] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 307.282432][ T6922] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 307.429721][ T6931] loop1: detected capacity change from 0 to 1024 [ 307.702415][ T6931] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 307.799653][ T6944] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6944] [ 307.821283][ T6944] netlink: 260 bytes leftover after parsing attributes in process `syz.0.550'. [ 307.830824][ T6944] netlink: 104 bytes leftover after parsing attributes in process `syz.0.550'. [ 307.839953][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'. [ 307.876838][ T4283] Bluetooth: Wrong link type (-22) [ 310.223696][ T26] audit: type=1800 audit(1792745040.087:46): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.558" name="zoned" dev="configfs" ino=41810 res=0 errno=0 [ 310.654450][ T26] audit: type=1800 audit(1792745040.087:47): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.558" name="size" dev="configfs" ino=41811 res=0 errno=0 [ 310.778251][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 310.786651][ T26] audit: type=1800 audit(1792745040.087:48): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.558" name="power" dev="configfs" ino=41812 res=0 errno=0 [ 311.067057][ T6981] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 311.099447][ T6983] loop5: detected capacity change from 0 to 1024 [ 311.212621][ T6983] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 312.188665][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 312.278657][ T6971] loop2: detected capacity change from 0 to 32768 [ 312.391121][ T6971] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.558 (6971) [ 312.937131][ T6971] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 312.967470][ T6971] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 313.000691][ T6971] BTRFS info (device loop2): using free space tree [ 314.123247][ T6971] BTRFS error (device loop2): open_ctree failed: -12 [ 314.961283][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.968175][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.397233][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 316.464619][ T7061] loop2: detected capacity change from 0 to 16 [ 316.482551][ T7061] erofs: Unknown parameter 'ãé' [ 317.107689][ T7069] atomic_op ffff88807daf3198 conn xmit_atomic 0000000000000000 [ 318.921102][ T7087] siw: device registration error -23 [ 319.769586][ T7089] loop1: detected capacity change from 0 to 1024 [ 319.878951][ T7089] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 320.788697][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 321.049249][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 321.824469][ T26] audit: type=1326 audit(1793793627.947:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.0.598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8e79e0d9 code=0x7ffc0000 [ 321.848933][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.975894][ T26] audit: type=1326 audit(1793793628.112:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.0.598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fef8e79e0d9 code=0x7ffc0000 [ 321.999715][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.304354][ T26] audit: type=1326 audit(1793793628.452:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.0.598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8e79e0d9 code=0x7ffc0000 [ 322.529723][ T26] audit: type=1326 audit(1793793628.452:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.0.598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8e79e0d9 code=0x7ffc0000 [ 325.712050][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.614'. [ 327.647286][ T7200] input: syz0 as /devices/virtual/input/input9 [ 330.480509][ T7230] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 330.711156][ T7242] loop2: detected capacity change from 0 to 16 [ 330.732735][ T7242] erofs: (device loop2): mounted with root inode @ nid 36. [ 330.822179][ T7242] syz.2.643: attempt to access beyond end of device [ 330.822179][ T7242] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 330.840170][ T7242] syz.2.643: attempt to access beyond end of device [ 330.840170][ T7242] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 330.855792][ T7242] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -41 in[61, 4035] out[8192] [ 330.896629][ T7243] loop3: detected capacity change from 0 to 1024 [ 330.904803][ T26] audit: type=1800 audit(1794317925.262:53): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.643" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 331.009869][ T7243] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 331.726772][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 332.095427][ T7255] loop1: detected capacity change from 0 to 40427 [ 332.106685][ T7255] F2FS-fs (loop1): invalid crc value [ 332.140059][ T7255] F2FS-fs (loop1): Found nat_bits in checkpoint [ 332.173216][ T7255] F2FS-fs (loop1): Start checkpoint disabled! [ 332.205072][ T7255] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 332.544737][ T7266] openvswitch: netlink: EtherType 0 is less than min 600 [ 333.516545][ T4953] kworker/u4:18: attempt to access beyond end of device [ 333.516545][ T4953] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 333.748840][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 333.796403][ T7279] loop5: detected capacity change from 0 to 1024 [ 333.910188][ T7279] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 333.936052][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 334.414971][ T14] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 334.425938][ T14] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 334.448421][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.714950][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 334.857292][ T5343] usb 4-1: USB disconnect, device number 3 [ 335.131236][ T7307] loop2: detected capacity change from 0 to 1024 [ 335.214465][ T7307] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 335.961463][ T5343] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 336.010415][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 337.300693][ T7331] loop3: detected capacity change from 0 to 1024 [ 337.402522][ T7331] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 338.346843][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 338.398441][ T4286] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 338.408072][ T4286] Bluetooth: hci2: Injecting HCI hardware error event [ 338.424360][ T4283] Bluetooth: hci2: hardware error 0x00 [ 340.311596][ T7362] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4443] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7362] [ 341.025229][ T4283] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 342.180789][ T7374] loop1: detected capacity change from 0 to 1024 [ 342.676643][ T7374] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 343.809439][ T7392] loop3: detected capacity change from 0 to 2048 [ 343.878582][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 343.905647][ T7392] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 343.915111][ T7392] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.266552][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 346.688926][ T7441] loop2: detected capacity change from 0 to 1024 [ 347.300938][ T7441] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 347.779133][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 348.377354][ T7461] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7461] [ 349.920226][ T7478] loop2: detected capacity change from 0 to 1024 [ 350.026404][ T7478] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 350.924249][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 352.397199][ T7503] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4278] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7503] [ 353.905938][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'. [ 354.790144][ T7522] loop5: detected capacity change from 0 to 128 [ 354.848115][ T7522] FAT-fs (loop5): invalid media value (0x07) [ 354.905789][ T7522] FAT-fs (loop5): Can't find a valid FAT filesystem [ 356.662520][ T7540] loop1: detected capacity change from 0 to 1024 [ 356.771436][ T7540] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 357.567647][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 357.800316][ T7556] tmpfs: Bad value for 'nr_inodes' [ 357.809255][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.736'. [ 359.228580][ T7561] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7561] [ 360.973699][ T7589] loop5: detected capacity change from 0 to 1024 [ 361.035983][ T7589] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 361.941405][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 362.164052][ T7607] loop2: detected capacity change from 0 to 1024 [ 362.361695][ T7612] tmpfs: Bad value for 'nr_inodes' [ 363.074616][ T7607] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 363.695377][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 364.259820][ T7637] loop5: detected capacity change from 0 to 2048 [ 365.300996][ T7637] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 365.310064][ T7637] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.502437][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 365.735050][ T7645] loop3: detected capacity change from 0 to 1024 [ 366.069481][ T7645] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 367.608692][ T7675] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 369.441529][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 369.956700][ T7712] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 370.723438][ T7732] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 372.059427][ T7755] loop1: detected capacity change from 0 to 1024 [ 372.175157][ T7755] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 374.133029][ T7784] loop3: detected capacity change from 0 to 1024 [ 374.200078][ T7784] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 374.263544][ T7786] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 374.487709][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 374.580648][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 374.987569][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.994093][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.179333][ T7816] 9pnet_virtio: no channels available for device syz [ 376.298822][ T7820] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 384.899391][ T7935] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 390.051614][ T8052] loop1: detected capacity change from 0 to 1024 [ 390.138898][ T8052] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 390.401761][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 392.710327][ T8111] loop5: detected capacity change from 0 to 2048 [ 393.005095][ T8111] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 393.014476][ T8111] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.318950][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 394.604041][ T8146] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 394.950900][ T8157] loop2: detected capacity change from 0 to 2048 [ 395.028664][ T8160] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 395.057848][ T8157] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 395.067030][ T8157] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.289886][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 396.347875][ T8175] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 400.139232][ T8255] loop5: detected capacity change from 0 to 1024 [ 400.270214][ T8255] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 400.374993][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 400.911529][ T8274] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 402.555598][ T8310] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 405.425017][ T8348] loop5: detected capacity change from 0 to 1024 [ 405.582084][ T8348] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 405.739849][ T8362] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 405.987662][ T8365] loop1: detected capacity change from 0 to 2048 [ 406.481185][ T8365] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 406.490191][ T8365] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.786948][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 408.885424][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 411.439690][ T8436] loop5: detected capacity change from 0 to 1024 [ 411.510706][ T8436] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 412.431198][ T8461] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 413.786529][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 414.738814][ T8511] loop2: detected capacity change from 0 to 2048 [ 414.865726][ T8511] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 414.874844][ T8511] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.958971][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 418.286474][ T8571] loop5: detected capacity change from 0 to 2048 [ 418.455244][ T8571] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 418.464485][ T8571] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.618556][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 420.566614][ T8598] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 421.603940][ T8614] loop1: detected capacity change from 0 to 128 [ 421.719592][ T8614] FAT-fs (loop1): invalid media value (0x07) [ 421.725640][ T8614] FAT-fs (loop1): Can't find a valid FAT filesystem [ 428.700785][ T8730] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 433.152445][ T8775] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 435.201488][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.207942][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.161573][ T8866] loop5: detected capacity change from 0 to 1024 [ 439.292916][ T8866] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 441.269782][ T8904] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 442.049762][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 442.546188][ T8920] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 444.936384][ T8959] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 446.884962][ T8967] loop5: detected capacity change from 0 to 2048 [ 447.090841][ T8967] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 447.207858][ T8967] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.964735][ T8995] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 449.519226][ T9018] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 449.564073][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 451.381255][ T9040] loop2: detected capacity change from 0 to 1024 [ 451.442533][ T9041] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 451.491198][ T9040] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 453.167131][ T9074] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 453.751801][ T9084] loop3: detected capacity change from 0 to 2048 [ 453.983982][ T9084] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 454.043070][ T9084] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.319070][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 456.067618][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 460.038362][ T9172] loop2: detected capacity change from 0 to 1024 [ 460.118165][ T9172] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 461.221801][ T9199] loop5: detected capacity change from 0 to 2048 [ 462.418210][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 462.438457][ T9199] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 462.447523][ T9199] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.607660][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 473.784661][ T9373] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 475.892061][ T26] audit: type=1800 audit(1806900985.531:54): pid=9415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1251" name="zoned" dev="configfs" ino=48284 res=0 errno=0 [ 475.968391][ T26] audit: type=1800 audit(1806900985.562:55): pid=9415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1251" name="size" dev="configfs" ino=47649 res=0 errno=0 [ 476.034597][ T26] audit: type=1800 audit(1806900985.562:56): pid=9415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1251" name="power" dev="configfs" ino=47650 res=0 errno=0 [ 476.643485][ T9415] loop5: detected capacity change from 0 to 32768 [ 476.681660][ T9415] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1251 (9415) [ 476.754762][ T9415] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 476.813825][ T9415] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 476.936519][ T9415] BTRFS info (device loop5): using free space tree [ 477.689696][ T9415] BTRFS info (device loop5): enabling ssd optimizations [ 477.797368][ T9452] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 478.413111][ T4443] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 478.691358][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'. [ 486.179132][ T9602] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 492.586646][ T9696] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 495.191836][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.203239][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.723469][ T9784] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 500.913804][ T9807] loop5: detected capacity change from 0 to 2048 [ 500.999743][ T9807] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 501.008837][ T9807] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.171985][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 501.841946][ T9824] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 503.151816][ T9841] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 506.716544][ T9888] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 509.300792][ T9936] loop5: detected capacity change from 0 to 128 [ 509.368749][ T9936] FAT-fs (loop5): bogus number of FAT structure [ 509.392768][ T9936] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 509.410214][ T9941] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 509.414042][ T9936] FAT-fs (loop5): Can't find a valid FAT filesystem [ 509.427506][ T9941] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 509.738288][ T9941] can: request_module (can-proto-3) failed. [ 515.238407][ T9991] loop3: detected capacity change from 0 to 128 [ 515.384562][ T9991] FAT-fs (loop3): bogus number of FAT structure [ 515.404993][ T9991] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 515.459655][ T9991] FAT-fs (loop3): Can't find a valid FAT filesystem [ 515.511968][ T9995] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 517.991663][T10018] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 524.347481][T10101] loop2: detected capacity change from 0 to 8 [ 524.394126][T10101] unable to read inode lookup table [ 525.742293][T10109] loop3: detected capacity change from 0 to 32768 [ 527.586527][T10134] loop1: detected capacity change from 0 to 1024 [ 527.728816][T10134] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 529.649256][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 530.620246][T10159] loop5: detected capacity change from 0 to 32768 [ 531.759109][T10170] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 532.827695][T10189] loop2: detected capacity change from 0 to 2048 [ 532.967769][T10189] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 532.976806][T10189] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.662836][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 535.302884][T10219] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 537.723729][T10262] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 540.285546][T10301] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 542.211466][T10317] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 542.226741][T10326] using random self ethernet address [ 542.242338][T10326] using random host ethernet address [ 543.023696][ T4283] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 543.030495][ T5343] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 543.033196][ T4283] Bluetooth: hci0: Injecting HCI hardware error event [ 543.052172][ T4286] Bluetooth: hci0: hardware error 0x00 [ 543.332772][ T5343] usb 1-1: Dual-Role OTG device on HNP port [ 543.587189][ T5343] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 543.714698][ T5343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.006962][T10356] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1507'. [ 544.270704][ T5343] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 545.181708][ T4286] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 545.515197][T10377] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 548.445908][T10395] loop3: detected capacity change from 0 to 1024 [ 548.556857][T10395] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 553.589522][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1532'. [ 554.520148][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 555.440919][T10459] tty tty4: ldisc open failed (-12), clearing slot 3 [ 555.712148][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 555.718760][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 556.052591][T10468] loop1: detected capacity change from 0 to 256 [ 559.014157][T10515] zram0: detected capacity change from 0 to 8 [ 560.410449][T10539] Cannot find set identified by id 0 to match [ 565.338946][T10615] loop5: detected capacity change from 0 to 2048 [ 566.452402][T10615] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 566.461619][T10615] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.621370][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 566.670116][T10624] loop1: detected capacity change from 0 to 8 [ 566.684024][T10624] unable to read inode lookup table [ 567.511125][T10633] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 567.798434][T10644] tmpfs: Unknown parameter 'quota' [ 569.249578][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 570.521104][T10669] loop2: detected capacity change from 0 to 256 [ 571.017251][T10676] loop5: detected capacity change from 0 to 2048 [ 573.462446][T10676] EXT4-fs: failed to create workqueue [ 573.468048][T10676] EXT4-fs (loop5): mount failed [ 575.821102][T10711] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 582.676780][T10754] loop2: detected capacity change from 0 to 1024 [ 582.804209][T10754] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 582.855123][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/287.tmp-b7:2' failed: Read-only file system [ 582.944990][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 583.371310][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/287.tmp-b7:2' failed: Read-only file system [ 583.418970][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 583.440714][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 583.570492][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/287.tmp-b7:2' failed: Read-only file system [ 584.003734][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/287.tmp-b7:2' failed: Read-only file system [ 584.061720][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/288.tmp-b7:2' failed: Read-only file system [ 585.468875][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/288.tmp-b7:2' failed: Read-only file system [ 585.533116][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1622'. [ 586.418178][T10799] tipc: Enabling of bearer rejected, failed to enable media [ 586.635316][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/288.tmp-b7:2' failed: Read-only file system [ 586.821385][T10808] cgroup: name respecified [ 589.332649][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/288.tmp-b7:2' failed: Read-only file system [ 589.475649][T10826] loop3: detected capacity change from 0 to 1024 [ 589.618962][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/289.tmp-b7:3' failed: Read-only file system [ 589.644860][T10826] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 590.061413][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 590.410681][T10844] loop5: detected capacity change from 0 to 1024 [ 590.509346][T10844] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 590.595071][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/290.tmp-b7:5' failed: Read-only file system [ 590.678274][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 590.918144][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 590.947392][T10843] loop2: detected capacity change from 0 to 2048 [ 591.600116][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 591.629315][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 591.706467][ T5332] udevd[5332]: symlink '../../loop5' '/dev/disk/by-diskseq/290.tmp-b7:5' failed: Read-only file system [ 591.821886][ T5332] udevd[5332]: symlink '../../loop5' '/dev/disk/by-diskseq/290.tmp-b7:5' failed: Read-only file system [ 591.826510][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/289.tmp-b7:3' failed: Read-only file system [ 591.954438][ T4263] udevd[4263]: symlink '../../loop2' '/dev/disk/by-diskseq/291.tmp-b7:2' failed: Read-only file system [ 592.879891][T10843] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 592.962067][T10843] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.792745][T10876] tmpfs: Unknown parameter 'quota' [ 594.876007][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 597.584849][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 597.705647][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 598.533414][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/291.tmp-b7:2' failed: Read-only file system [ 598.627757][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/291.tmp-b7:2' failed: Read-only file system [ 598.730228][T10907] netlink: 'syz.2.1652': attribute type 10 has an invalid length. [ 598.763462][T10907] team0: Port device dummy0 added [ 599.548236][ T4263] udevd[4263]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 599.577037][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 600.675455][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 600.706384][ T4263] udevd[4263]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 601.272891][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 601.767426][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 602.337877][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 602.454408][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 602.488190][ T4263] udevd[4263]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 602.723920][T10944] Cannot find set identified by id 0 to match [ 603.354858][T10945] tmpfs: Unknown parameter 'quota' [ 603.467258][ T5332] udevd[5332]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 603.549023][T10951] cgroup: name respecified [ 606.204152][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 607.566174][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 607.579939][ T4263] udevd[4263]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 608.174876][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 608.223174][ T4263] udevd[4263]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 608.257772][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 608.497218][T11003] Cannot find set identified by id 0 to match [ 610.282849][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 610.765146][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 610.951074][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 611.986345][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 612.035732][ T4263] udevd[4263]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 612.075596][T11024] tmpfs: Unknown parameter 'quota' [ 614.465859][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 615.808435][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 615.894390][T11054] Cannot find set identified by id 0 to match [ 616.546143][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 616.577631][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 616.770117][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 616.822530][T11061] cgroup: name respecified [ 618.017940][T11073] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 618.040172][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 618.083358][ T4263] udevd[4263]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 618.593869][T11074] bridge0: port 3(syz_tun) entered blocking state [ 618.600805][T11074] bridge0: port 3(syz_tun) entered disabled state [ 618.611133][T11074] device syz_tun entered promiscuous mode [ 618.618046][T11074] bridge0: port 3(syz_tun) entered blocking state [ 618.624617][T11074] bridge0: port 3(syz_tun) entered forwarding state [ 618.655603][T11074] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 618.934047][ T4263] udevd[4263]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 619.243352][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 620.178865][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 620.868506][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 621.389722][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 621.455884][ T4263] udevd[4263]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 622.034109][T11125] tipc: Enabling of bearer rejected, failed to enable media [ 622.551025][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 623.397258][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 624.412410][T11145] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 624.960866][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 625.393379][ T4263] udevd[4263]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 625.435438][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 625.484862][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 625.578193][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 625.613006][ T4263] udevd[4263]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 625.812613][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 625.901058][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 627.082886][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 627.758391][T11192] netlink: 'syz.1.1723': attribute type 12 has an invalid length. [ 627.828725][T11193] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 628.995664][ T4263] udevd[4263]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 630.241768][ T4263] udevd[4263]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 630.339091][T11208] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 630.583869][ T4263] udevd[4263]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 631.646653][ T4263] udevd[4263]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 632.039496][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 632.149520][T11224] cgroup: name respecified [ 633.028067][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 634.879235][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 637.366926][ T4263] udevd[4263]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 637.401352][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 637.448772][ T4263] udevd[4263]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 637.590207][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 637.650660][ T4263] udevd[4263]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 637.816626][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 638.642647][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 639.986223][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 641.866068][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 642.574305][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 642.913368][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 644.325013][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 644.359333][ T4263] udevd[4263]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 644.517561][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/293.tmp-b7:5' failed: Read-only file system [ 645.920721][T11334] loop5: detected capacity change from 0 to 2048 [ 646.041223][T11334] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 646.050371][T11334] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.175548][ T4263] udevd[4263]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 646.209681][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 646.220101][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/295.tmp-b7:5' failed: Read-only file system [ 646.262067][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 646.327606][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/295.tmp-b7:5' failed: Read-only file system [ 646.607582][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/295.tmp-b7:5' failed: Read-only file system [ 647.176222][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/295.tmp-b7:5' failed: Read-only file system [ 647.313435][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 647.378950][ T4263] udevd[4263]: symlink '../../loop5' '/dev/disk/by-diskseq/296.tmp-b7:5' failed: Read-only file system [ 647.441500][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 647.707511][T11361] tipc: Enabling of bearer rejected, failed to enable media [ 648.346885][T11360] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 648.694662][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 651.598979][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/296.tmp-b7:5' failed: Read-only file system [ 651.672988][T11396] loop5: detected capacity change from 0 to 256 [ 651.695911][ T4495] udevd[4495]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 651.837332][T11396] exfat: Deprecated parameter 'utf8' [ 651.942958][T11404] 9pnet_fd: Insufficient options for proto=fd [ 652.517627][T11396] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 652.661412][ T4263] udevd[4263]: symlink '../../loop5' '/dev/disk/by-diskseq/297.tmp-b7:5' failed: Read-only file system [ 652.685841][ T4263] udevd[4263]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system [ 652.720725][ T4495] udevd[4495]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 653.913459][T11414] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 653.927465][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/297.tmp-b7:5' failed: Read-only file system [ 653.958118][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/297.tmp-b7:5' failed: Read-only file system [ 654.013488][ T4263] udevd[4263]: symlink '../../loop2' '/dev/disk/by-diskseq/294.tmp-b7:2' failed: Read-only file system [ 654.054365][ T4495] udevd[4495]: symlink '../../loop5' '/dev/disk/by-diskseq/298.tmp-b7:5' failed: Read-only file system [ 654.095579][ T5332] udevd[5332]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 655.548391][T11447] loop5: detected capacity change from 0 to 1024 [ 655.594802][T11447] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 655.918388][T11458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1787'. [ 658.020607][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 660.858797][T11482] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 663.472851][T11511] loop2: detected capacity change from 0 to 128 [ 664.638290][T11511] EXT4-fs: Ignoring removed orlov option [ 665.828758][T11511] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 665.863264][T11511] ext4 filesystem being mounted at /344/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 666.096070][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 668.149268][T11544] loop5: detected capacity change from 0 to 1024 [ 668.234595][T11544] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 668.995460][ T26] audit: type=1800 audit(1812668349.273:57): pid=11555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1823" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 669.134784][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 670.064112][T11574] tmpfs: Unknown parameter 'quota' [ 671.831468][T11581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1829'. [ 675.155375][T11614] input: syz1 as /devices/virtual/input/input11 [ 675.238242][T11617] loop2: detected capacity change from 0 to 4096 [ 675.245756][T11617] EXT4-fs: inline encryption not supported [ 675.913189][T11617] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 675.921992][T11617] EXT4-fs (loop2): Test dummy encryption mode enabled [ 675.967827][T11617] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 675.976117][T11617] System zones: 0-5 [ 675.983503][T11617] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 676.376875][T11623] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 676.889874][T11625] 9pnet_fd: Insufficient options for proto=fd [ 676.899620][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 676.971720][T11611] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 676.995623][ T26] audit: type=1326 audit(1813192645.500:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.3.1843" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 677.165540][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 677.171846][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 677.186525][ T26] audit: type=1326 audit(1813192645.500:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.3.1843" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 677.559292][ T26] audit: type=1326 audit(1813192645.500:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.3.1843" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 677.784191][ T26] audit: type=1326 audit(1813192645.500:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.3.1843" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 677.940025][ T26] audit: type=1326 audit(1813192645.500:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.3.1843" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 678.004498][ T26] audit: type=1326 audit(1813192645.500:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.3.1843" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 678.033550][ T26] audit: type=1326 audit(1813192645.500:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.3.1843" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 678.173445][ T26] audit: type=1326 audit(1813192645.500:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.3.1843" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 678.241786][ T26] audit: type=1326 audit(1813192645.500:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.3.1843" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 678.292877][ T26] audit: type=1326 audit(1813192645.500:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz.3.1843" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f75f019e0d9 code=0x7ffc0000 [ 678.378349][T11651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1848'. [ 678.458634][T11656] loop5: detected capacity change from 0 to 1024 [ 678.497963][T11656] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 679.370886][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 680.517155][T11690] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11690] [ 680.540881][T11690] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1857'. [ 680.697851][T11692] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 682.020906][T11704] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 682.211687][T11706] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1861'. [ 683.020494][T11704] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 683.031402][T11705] overlayfs: missing 'lowerdir' [ 683.104917][T11704] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 683.199745][T11704] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 683.217149][T11716] loop5: detected capacity change from 0 to 1024 [ 683.267702][T11704] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 683.291347][T11716] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 683.422145][T11704] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 684.088539][T11704] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 684.115112][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 684.894033][T11742] loop3: detected capacity change from 0 to 2048 [ 684.972705][T11743] loop1: detected capacity change from 0 to 8 [ 685.606677][T11742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 688.203443][T11765] loop2: detected capacity change from 0 to 1024 [ 688.296182][T11765] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 689.033029][ T26] kauditd_printk_skb: 515 callbacks suppressed [ 689.033109][ T26] audit: type=1800 audit(1814765521.820:583): pid=11778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1877" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 691.104094][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 691.617886][T11800] loop3: detected capacity change from 0 to 128 [ 691.976290][T11800] qnx6: superblock #1 checksum error [ 692.023207][ T4263] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 694.141101][T11820] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 694.173488][T11823] loop3: detected capacity change from 0 to 1024 [ 694.296174][T11823] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 695.357660][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 699.199289][T11873] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 700.450940][T11889] loop3: detected capacity change from 0 to 1024 [ 701.270068][T11889] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 701.812572][ T26] audit: type=1800 audit(1816338398.904:584): pid=11901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1906" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 701.868490][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 703.322289][T11929] loop3: detected capacity change from 0 to 2048 [ 704.349717][T11929] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 704.358776][T11929] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 704.555009][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 704.632754][T11936] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 705.837031][T11953] loop1: detected capacity change from 0 to 1024 [ 707.008008][T11953] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 707.465935][ T26] audit: type=1800 audit(1816862692.733:585): pid=11965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1920" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 707.695889][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 708.002340][T11973] bridge0: port 3(syz_tun) entered disabled state [ 708.056867][T11973] device syz_tun left promiscuous mode [ 708.065269][T11973] bridge0: port 3(syz_tun) entered disabled state [ 708.248774][T11986] loop1: detected capacity change from 0 to 2048 [ 708.280314][T11986] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 713.247949][T12031] loop5: detected capacity change from 0 to 2048 [ 713.368776][T12031] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 714.290903][T12046] loop5: detected capacity change from 0 to 1024 [ 714.408086][T12046] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 716.065456][T12068] tmpfs: Bad value for 'mpol' [ 716.500398][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 717.020398][T12078] binder: 12077:12078 ioctl c0306201 0 returned -14 [ 717.903804][T12084] loop5: detected capacity change from 0 to 512 [ 717.995495][T12084] FAT-fs (loop5): Directory bread(block 199916) failed [ 718.002718][T12084] FAT-fs (loop5): Directory bread(block 199917) failed [ 718.009949][T12084] FAT-fs (loop5): Directory bread(block 199918) failed [ 718.017199][T12084] FAT-fs (loop5): Directory bread(block 199919) failed [ 718.024115][T12084] FAT-fs (loop5): Directory bread(block 199920) failed [ 718.031294][T12084] FAT-fs (loop5): Directory bread(block 199921) failed [ 718.038345][T12084] FAT-fs (loop5): Directory bread(block 199922) failed [ 718.045225][T12084] FAT-fs (loop5): Directory bread(block 199923) failed [ 718.116753][T12078] FAT-fs (loop5): FAT read failed (blocknr 128) [ 720.893205][T12120] loop2: detected capacity change from 0 to 1024 [ 721.077669][T12122] loop3: detected capacity change from 0 to 128 [ 721.309713][T12133] overlayfs: failed to clone upperpath [ 721.403230][T12120] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 722.329260][ T26] audit: type=1800 audit(1817386995.648:586): pid=12141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1957" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 722.363391][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 727.098967][T12194] 9pnet_fd: Insufficient options for proto=fd [ 730.234776][T12218] binder: 12216:12218 ioctl c0306201 0 returned -14 [ 730.332625][T12223] loop1: detected capacity change from 0 to 512 [ 730.347216][T12223] FAT-fs (loop1): Directory bread(block 199916) failed [ 730.354480][T12223] FAT-fs (loop1): Directory bread(block 199917) failed [ 730.361452][T12223] FAT-fs (loop1): Directory bread(block 199918) failed [ 730.368661][T12223] FAT-fs (loop1): Directory bread(block 199919) failed [ 730.375900][T12223] FAT-fs (loop1): Directory bread(block 199920) failed [ 730.383022][T12223] FAT-fs (loop1): Directory bread(block 199921) failed [ 730.389976][T12223] FAT-fs (loop1): Directory bread(block 199922) failed [ 730.397922][T12223] FAT-fs (loop1): Directory bread(block 199923) failed [ 730.465303][T12223] FAT-fs (loop1): FAT read failed (blocknr 128) [ 731.858103][T12234] loop1: detected capacity change from 0 to 128 [ 731.886379][T12234] FAT-fs (loop1): Directory bread(block 414) failed [ 731.893066][T12234] FAT-fs (loop1): Directory bread(block 415) failed [ 731.899766][T12234] FAT-fs (loop1): Directory bread(block 416) failed [ 731.906373][T12234] FAT-fs (loop1): Directory bread(block 417) failed [ 731.913017][T12234] FAT-fs (loop1): Directory bread(block 418) failed [ 731.920017][T12234] FAT-fs (loop1): Directory bread(block 419) failed [ 731.926631][T12234] FAT-fs (loop1): Directory bread(block 420) failed [ 731.933259][T12234] FAT-fs (loop1): Directory bread(block 421) failed [ 733.422282][T12258] loop5: detected capacity change from 0 to 8 [ 734.099240][T12261] 9pnet_fd: Insufficient options for proto=fd [ 735.001838][T12272] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 735.012935][T12272] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 735.021590][T12272] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 735.029623][T12272] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 735.037732][T12272] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 735.045841][T12272] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 735.125481][T12268] loop5: detected capacity change from 0 to 1024 [ 735.271270][T12272] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 735.280270][T12268] EXT4-fs: Ignoring removed nomblk_io_submit option [ 736.303688][T12282] overlayfs: missing 'lowerdir' [ 736.696888][T12268] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 736.877143][T12268] System zones: 0-1, 3-12 [ 737.275856][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 737.653540][T12268] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 737.654543][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 740.104077][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 740.310564][T12309] loop2: detected capacity change from 0 to 2048 [ 740.321487][T12309] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 740.896990][T12321] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 741.810882][T12332] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 744.216612][T12351] netlink: 'syz.2.2010': attribute type 2 has an invalid length. [ 744.225226][T12351] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2010'. [ 745.598661][T11913] Bluetooth: hci4: unexpected subevent 0x1a length: 30 > 6 [ 745.885615][T12373] 9pnet_fd: Insufficient options for proto=fd [ 747.698198][T12390] loop5: detected capacity change from 0 to 2048 [ 748.875085][T12390] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 748.884146][T12390] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 749.095927][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 749.473604][T12411] loop5: detected capacity change from 0 to 64 [ 749.476016][T12411] hfs: unable to parse mount options [ 749.988975][T12414] loop3: detected capacity change from 0 to 1024 [ 750.201207][ T4263] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 750.282674][T12403] loop3: detected capacity change from 0 to 1024 [ 750.298209][ T4263] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 750.912910][T12425] loop1: detected capacity change from 0 to 8192 [ 752.983376][T12444] 9pnet_fd: Insufficient options for proto=fd [ 753.264407][T12447] loop5: detected capacity change from 0 to 2048 [ 754.300709][T12447] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 754.309881][T12447] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 754.481460][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 766.255385][T12534] loop3: detected capacity change from 0 to 1024 [ 767.101889][T12534] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 767.829302][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 768.135329][T12555] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 768.150456][T12555] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 768.167331][T12555] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 768.287978][T12555] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 768.343225][T12555] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 768.356703][T12555] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 768.372943][T12555] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 768.472526][T12555] overlayfs: missing 'lowerdir' [ 776.932413][T12617] loop2: detected capacity change from 0 to 128 [ 777.148268][T12617] FAT-fs (loop2): Directory bread(block 414) failed [ 777.154976][T12617] FAT-fs (loop2): Directory bread(block 415) failed [ 777.162056][T12617] FAT-fs (loop2): Directory bread(block 416) failed [ 777.168789][T12617] FAT-fs (loop2): Directory bread(block 417) failed [ 777.175436][T12617] FAT-fs (loop2): Directory bread(block 418) failed [ 777.182089][T12617] FAT-fs (loop2): Directory bread(block 419) failed [ 777.188744][T12617] FAT-fs (loop2): Directory bread(block 420) failed [ 777.195349][T12617] FAT-fs (loop2): Directory bread(block 421) failed [ 778.677129][T12630] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 779.195743][T12647] loop2: detected capacity change from 0 to 1024 [ 779.318915][T12647] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 780.073081][T12653] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 780.352606][T12664] loop1: detected capacity change from 0 to 2048 [ 780.454234][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 781.354323][T12664] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 781.363419][T12664] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 781.555879][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 787.628328][T12718] loop5: detected capacity change from 0 to 2048 [ 788.550972][T12718] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 788.560166][T12718] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.755931][ T4443] EXT4-fs (loop5): unmounting filesystem. [ 797.518741][T12810] loop3: detected capacity change from 0 to 2048 [ 797.610509][T12810] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 798.010160][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 798.050030][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 799.395917][T12836] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 799.405661][T12836] F2FS-fs (loop1): Unable to read 1th superblock [ 799.412737][T12836] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 799.422125][T12836] F2FS-fs (loop1): Unable to read 2th superblock [ 800.358282][T12844] gadgetfs: bound to dummy_udc driver [ 813.791047][T12942] loop3: detected capacity change from 0 to 2048 [ 814.802145][T12942] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 814.811347][T12942] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 814.961670][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 816.068799][T12967] loop2: detected capacity change from 0 to 2048 [ 816.149903][T12967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 819.957104][T13000] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 821.949032][T13034] loop3: detected capacity change from 0 to 2048 [ 822.003297][T13034] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 822.191167][T13039] loop2: detected capacity change from 0 to 1024 [ 822.921638][T13039] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 823.446340][ T26] audit: type=1800 audit(1818959962.051:587): pid=13048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2184" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 823.706698][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 824.513454][T13060] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 4, id = 0 [ 832.622857][T13134] loop1: detected capacity change from 0 to 1024 [ 832.737278][T13134] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 833.517745][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 844.206452][T13251] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 847.555823][T13282] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 849.322433][T13307] UBIFS error (pid: 13307): cannot open "ubifs", error -22 [ 853.023078][T13359] loop5: detected capacity change from 0 to 128 [ 853.094532][T13359] FAT-fs (loop5): Directory bread(block 414) failed [ 853.122744][T13359] FAT-fs (loop5): Directory bread(block 415) failed [ 853.145348][T13359] FAT-fs (loop5): Directory bread(block 416) failed [ 853.182271][T13359] FAT-fs (loop5): Directory bread(block 417) failed [ 853.201795][T13359] FAT-fs (loop5): Directory bread(block 418) failed [ 853.233449][T13359] FAT-fs (loop5): Directory bread(block 419) failed [ 853.251606][T13359] FAT-fs (loop5): Directory bread(block 420) failed [ 854.387516][T13359] FAT-fs (loop5): Directory bread(block 421) failed [ 855.100903][T13378] FAT-fs (loop5): Directory bread(block 414) failed [ 855.108483][T13378] FAT-fs (loop5): Directory bread(block 415) failed [ 856.482916][T13388] netlink: 'syz.1.2268': attribute type 2 has an invalid length. [ 856.490991][T13388] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2268'. [ 859.660161][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 859.666542][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.883267][T13458] loop2: detected capacity change from 0 to 256 [ 867.059824][ T5343] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 868.030025][ T5343] usb 3-1: Using ep0 maxpacket: 8 [ 868.046718][ T5343] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 868.779676][ T5343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.806017][ T5343] usb 3-1: config 0 descriptor?? [ 868.991965][ T5343] usb 3-1: string descriptor 0 read error: -71 [ 869.001673][ T5343] uvcvideo 3-1:0.0: Found multiple Units with ID 1 [ 869.013181][ T5343] usb 3-1: Found UVC 0.00 device (2833:0201) [ 869.024895][ T5343] usb 3-1: No valid video chain found. [ 869.059931][ T5343] usb 3-1: USB disconnect, device number 6 [ 879.050389][T13560] loop2: detected capacity change from 0 to 8 [ 879.381731][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.392628][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.423557][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.432178][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.439015][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.445751][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.452424][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.459143][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.475087][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.481991][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.488727][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.495452][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.502177][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.508870][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.515690][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.522371][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.579076][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.585909][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.592539][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.604907][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.611709][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.618482][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.625287][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.632136][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.638954][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.645727][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.652266][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.658729][ T26] audit: type=1800 audit(1820008594.775:588): pid=13567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2302" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 879.689964][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.696613][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.703288][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.710834][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.717609][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.724164][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.733334][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 879.739759][T13567] SQUASHFS error: Failed to read block 0x4de: -5 [ 881.580469][T13589] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 4, id = 0 [ 882.862968][T13601] loop1: detected capacity change from 0 to 128 [ 882.951747][T13601] FAT-fs (loop1): Directory bread(block 414) failed [ 882.987994][T13601] FAT-fs (loop1): Directory bread(block 415) failed [ 883.034766][T13601] FAT-fs (loop1): Directory bread(block 416) failed [ 883.074287][T13601] FAT-fs (loop1): Directory bread(block 417) failed [ 883.099290][T13601] FAT-fs (loop1): Directory bread(block 418) failed [ 883.162426][T13601] FAT-fs (loop1): Directory bread(block 419) failed [ 883.182461][T13601] FAT-fs (loop1): Directory bread(block 420) failed [ 883.217535][T13601] FAT-fs (loop1): Directory bread(block 421) failed [ 884.548149][T13627] FAT-fs (loop1): Directory bread(block 414) failed [ 884.555119][T13627] FAT-fs (loop1): Directory bread(block 415) failed [ 894.441845][T13700] loop2: detected capacity change from 0 to 2048 [ 895.481153][T13700] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 895.490271][T13700] ext4 filesystem being mounted at /445/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 895.672445][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 895.759744][T13708] IPVS: stopping master sync thread 12321 ... [ 895.919651][T13708] device hsr0 entered promiscuous mode [ 895.980643][T13708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2344'. [ 902.060635][T13769] loop3: detected capacity change from 0 to 8192 [ 903.085090][T13776] loop1: detected capacity change from 0 to 2048 [ 904.072322][T13776] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 904.081435][T13776] ext4 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 904.264623][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 906.741451][T13814] loop5: detected capacity change from 0 to 16 [ 906.751229][T13814] erofs: (device loop5): mounted with root inode @ nid 36. [ 909.976755][T13844] loop3: detected capacity change from 0 to 2048 [ 910.173418][T13840] gadgetfs: bound to dummy_udc driver [ 910.189187][T13844] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 910.198221][T13844] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 910.365098][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 914.459277][T13895] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 914.468641][T13895] F2FS-fs (loop3): Unable to read 1th superblock [ 914.477365][T13895] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 914.655200][T13895] F2FS-fs (loop3): Unable to read 2th superblock [ 918.522908][T13915] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 919.922427][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 919.970162][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.472342][T13980] loop1: detected capacity change from 0 to 256 [ 926.501870][T13980] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 929.569440][T13997] debugfs: Directory ' j¦!ÐÕ(á=|èl'rŒý00000000000000000003' with parent 'ieee80211' already present! [ 931.118800][T14011] loop1: detected capacity change from 0 to 4096 [ 931.626424][T14011] ntfs3: loop1: failed to replay log file. Can't mount rw! [ 931.787549][T14016] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 931.797021][T14016] F2FS-fs (loop2): Unable to read 1th superblock [ 931.804099][T14016] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 931.813495][T14016] F2FS-fs (loop2): Unable to read 2th superblock [ 933.292512][T14030] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 935.631489][T14063] overlayfs: missing 'lowerdir' [ 935.694295][T14063] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 939.127425][T14090] debugfs: Directory ' j¦!ÐÕ(á=|èl'rŒý00000000000000000003' with parent 'ieee80211' already present! [ 939.567822][T14096] ipt_REJECT: TCP_RESET invalid for non-tcp [ 939.579647][T14096] loop1: detected capacity change from 0 to 128 [ 941.275258][T14096] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 941.285136][T14096] ext4 filesystem being mounted at /499/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 942.139780][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 942.956659][T14110] ================================================================== [ 942.964778][T14110] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 942.972421][T14110] Read of size 8 at addr ffff888147360a18 by task syz.5.2440/14110 [ 942.980574][T14110] [ 942.982941][T14110] CPU: 1 PID: 14110 Comm: syz.5.2440 Not tainted syzkaller #0 [ 942.990516][T14110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 943.000565][T14110] Call Trace: [ 943.003943][T14110] [ 943.006930][T14110] dump_stack_lvl+0x188/0x24e [ 943.011673][T14110] ? read_lock_is_recursive+0x10/0x10 [ 943.017071][T14110] ? show_regs_print_info+0x12/0x12 [ 943.022287][T14110] ? load_image+0x410/0x410 [ 943.026850][T14110] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 943.032373][T14110] ? __virt_addr_valid+0x188/0x540 [ 943.037484][T14110] ? __virt_addr_valid+0x467/0x540 [ 943.042626][T14110] ? dvb_device_open+0xc5/0x360 [ 943.047473][T14110] print_report+0xa8/0x210 [ 943.051902][T14110] kasan_report+0x10b/0x140 [ 943.056409][T14110] ? dvb_device_open+0xc5/0x360 [ 943.061261][T14110] dvb_device_open+0xc5/0x360 [ 943.065945][T14110] chrdev_open+0x585/0x5f0 [ 943.070371][T14110] ? cd_forget+0x160/0x160 [ 943.074774][T14110] ? fsnotify_perm+0x39b/0x550 [ 943.079530][T14110] ? cd_forget+0x160/0x160 [ 943.083958][T14110] do_dentry_open+0x7dd/0x10b0 [ 943.088715][T14110] path_openat+0x2674/0x2f10 [ 943.093478][T14110] ? verify_lock_unused+0x140/0x140 [ 943.098667][T14110] ? do_sys_openat2+0xdd/0x4f0 [ 943.103427][T14110] ? do_filp_open+0x420/0x420 [ 943.108129][T14110] do_filp_open+0x1ee/0x420 [ 943.112623][T14110] ? vfs_tmpfile+0x470/0x470 [ 943.117206][T14110] ? _raw_spin_unlock+0x24/0x40 [ 943.122058][T14110] ? alloc_fd+0x590/0x640 [ 943.126378][T14110] do_sys_openat2+0x14b/0x4f0 [ 943.131051][T14110] ? do_sys_open+0xe0/0xe0 [ 943.135458][T14110] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 943.141434][T14110] ? lock_chain_count+0x20/0x20 [ 943.146319][T14110] __x64_sys_openat+0x135/0x160 [ 943.151169][T14110] do_syscall_64+0x4c/0xa0 [ 943.155664][T14110] ? clear_bhb_loop+0x60/0xb0 [ 943.160403][T14110] ? clear_bhb_loop+0x60/0xb0 [ 943.165075][T14110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 943.170969][T14110] RIP: 0033:0x7f54e6b5e90e [ 943.175459][T14110] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 943.195108][T14110] RSP: 002b:00007f54e7ae7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 943.203568][T14110] RAX: ffffffffffffffda RBX: 00007f54e7ae86c0 RCX: 00007f54e6b5e90e [ 943.211527][T14110] RDX: 0000000000000002 RSI: 00007f54e7ae7c00 RDI: ffffffffffffff9c [ 943.219530][T14110] RBP: 00007f54e7ae7c00 R08: 0000000000000000 R09: 0000000000000000 [ 943.227573][T14110] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 943.235616][T14110] R13: 00007f54e6e26128 R14: 00007f54e6e26090 R15: 00007ffdf9ca9388 [ 943.243667][T14110] [ 943.246669][T14110] [ 943.248976][T14110] Allocated by task 1: [ 943.253098][T14110] kasan_set_track+0x4b/0x70 [ 943.257678][T14110] __kasan_kmalloc+0x8e/0xa0 [ 943.262268][T14110] dvb_register_device+0x305/0x1dc0 [ 943.267471][T14110] dvb_register_frontend+0x629/0x900 [ 943.272742][T14110] vidtv_bridge_probe+0x9cf/0xf50 [ 943.277799][T14110] platform_probe+0x137/0x1c0 [ 943.282693][T14110] really_probe+0x24a/0xb40 [ 943.287179][T14110] __driver_probe_device+0x1f5/0x390 [ 943.292463][T14110] driver_probe_device+0x4f/0x420 [ 943.297490][T14110] __driver_attach+0x43d/0x6c0 [ 943.302253][T14110] bus_for_each_dev+0x182/0x1f0 [ 943.307099][T14110] bus_add_driver+0x324/0x5d0 [ 943.311753][T14110] driver_register+0x32d/0x430 [ 943.316537][T14110] vidtv_bridge_init+0x39/0x67 [ 943.321465][T14110] do_one_initcall+0x257/0x800 [ 943.326234][T14110] do_initcall_level+0x13d/0x1ed [ 943.331240][T14110] do_initcalls+0x4b/0x8a [ 943.335555][T14110] kernel_init_freeable+0x401/0x5ab [ 943.340752][T14110] kernel_init+0x19/0x1b0 [ 943.345081][T14110] ret_from_fork+0x1f/0x30 [ 943.349505][T14110] [ 943.351818][T14110] Freed by task 13915: [ 943.355863][T14110] kasan_set_track+0x4b/0x70 [ 943.360448][T14110] kasan_save_free_info+0x27/0x40 [ 943.365475][T14110] ____kasan_slab_free+0x126/0x1f0 [ 943.370572][T14110] slab_free_freelist_hook+0x133/0x1b0 [ 943.376019][T14110] __kmem_cache_free+0xb6/0x200 [ 943.380858][T14110] dvb_device_open+0x2d2/0x360 [ 943.385609][T14110] chrdev_open+0x585/0x5f0 [ 943.390012][T14110] do_dentry_open+0x7dd/0x10b0 [ 943.394760][T14110] path_openat+0x2674/0x2f10 [ 943.399334][T14110] do_filp_open+0x1ee/0x420 [ 943.403824][T14110] do_sys_openat2+0x14b/0x4f0 [ 943.408483][T14110] __x64_sys_openat+0x135/0x160 [ 943.413330][T14110] do_syscall_64+0x4c/0xa0 [ 943.417735][T14110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 943.423624][T14110] [ 943.425993][T14110] The buggy address belongs to the object at ffff888147360a00 [ 943.425993][T14110] which belongs to the cache kmalloc-256 of size 256 [ 943.440118][T14110] The buggy address is located 24 bytes inside of [ 943.440118][T14110] 256-byte region [ffff888147360a00, ffff888147360b00) [ 943.453470][T14110] [ 943.455780][T14110] The buggy address belongs to the physical page: [ 943.462286][T14110] page:ffffea00051cd800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x147360 [ 943.472512][T14110] head:ffffea00051cd800 order:1 compound_mapcount:0 compound_pincount:0 [ 943.481031][T14110] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 943.489113][T14110] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 943.497693][T14110] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 943.506285][T14110] page dumped because: kasan: bad access detected [ 943.512703][T14110] page_owner tracks the page as allocated [ 943.518414][T14110] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16190551869, free_ts 0 [ 943.538109][T14110] post_alloc_hook+0x173/0x1a0 [ 943.542862][T14110] get_page_from_freelist+0x206b/0x2180 [ 943.548401][T14110] __alloc_pages+0x1ec/0x4f0 [ 943.552971][T14110] alloc_page_interleave+0x24/0x1e0 [ 943.558151][T14110] alloc_slab_page+0x5d/0x180 [ 943.562810][T14110] new_slab+0x87/0x2d0 [ 943.566860][T14110] ___slab_alloc+0xbc5/0x1240 [ 943.571549][T14110] __kmem_cache_alloc_node+0x126/0x270 [ 943.577011][T14110] kmalloc_trace+0x26/0xe0 [ 943.581411][T14110] bus_add_driver+0xdc/0x5d0 [ 943.585979][T14110] driver_register+0x32d/0x430 [ 943.590723][T14110] usb_register_driver+0x201/0x3c0 [ 943.595870][T14110] au0828_init+0x135/0x162 [ 943.600291][T14110] do_one_initcall+0x257/0x800 [ 943.605034][T14110] do_initcall_level+0x13d/0x1ed [ 943.609956][T14110] do_initcalls+0x4b/0x8a [ 943.614270][T14110] page_owner free stack trace missing [ 943.619620][T14110] [ 943.621928][T14110] Memory state around the buggy address: [ 943.627536][T14110] ffff888147360900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 943.635581][T14110] ffff888147360980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 943.643634][T14110] >ffff888147360a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 943.651673][T14110] ^ [ 943.656499][T14110] ffff888147360a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 943.664542][T14110] ffff888147360b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 943.672595][T14110] ================================================================== [ 943.727304][T14110] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 943.734524][T14110] CPU: 1 PID: 14110 Comm: syz.5.2440 Not tainted syzkaller #0 [ 943.741981][T14110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 943.752036][T14110] Call Trace: [ 943.755299][T14110] [ 943.758212][T14110] dump_stack_lvl+0x188/0x24e [ 943.762880][T14110] ? memcpy+0x3c/0x60 [ 943.766843][T14110] ? show_regs_print_info+0x12/0x12 [ 943.772045][T14110] ? load_image+0x410/0x410 [ 943.776530][T14110] panic+0x2d3/0x710 [ 943.780416][T14110] ? bpf_jit_dump+0xd0/0xd0 [ 943.784897][T14110] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 943.790863][T14110] ? _raw_spin_unlock+0x40/0x40 [ 943.795693][T14110] check_panic_on_warn+0x80/0xa0 [ 943.800629][T14110] ? dvb_device_open+0xc5/0x360 [ 943.805495][T14110] end_report+0x66/0x110 [ 943.809733][T14110] kasan_report+0x118/0x140 [ 943.814244][T14110] ? dvb_device_open+0xc5/0x360 [ 943.819095][T14110] dvb_device_open+0xc5/0x360 [ 943.823764][T14110] chrdev_open+0x585/0x5f0 [ 943.828174][T14110] ? cd_forget+0x160/0x160 [ 943.832579][T14110] ? fsnotify_perm+0x39b/0x550 [ 943.837364][T14110] ? cd_forget+0x160/0x160 [ 943.841777][T14110] do_dentry_open+0x7dd/0x10b0 [ 943.846534][T14110] path_openat+0x2674/0x2f10 [ 943.851125][T14110] ? verify_lock_unused+0x140/0x140 [ 943.856318][T14110] ? do_sys_openat2+0xdd/0x4f0 [ 943.861163][T14110] ? do_filp_open+0x420/0x420 [ 943.865827][T14110] do_filp_open+0x1ee/0x420 [ 943.870343][T14110] ? vfs_tmpfile+0x470/0x470 [ 943.874944][T14110] ? _raw_spin_unlock+0x24/0x40 [ 943.879784][T14110] ? alloc_fd+0x590/0x640 [ 943.884104][T14110] do_sys_openat2+0x14b/0x4f0 [ 943.888863][T14110] ? do_sys_open+0xe0/0xe0 [ 943.893277][T14110] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 943.899260][T14110] ? lock_chain_count+0x20/0x20 [ 943.904113][T14110] __x64_sys_openat+0x135/0x160 [ 943.908965][T14110] do_syscall_64+0x4c/0xa0 [ 943.913369][T14110] ? clear_bhb_loop+0x60/0xb0 [ 943.918033][T14110] ? clear_bhb_loop+0x60/0xb0 [ 943.922705][T14110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 943.928585][T14110] RIP: 0033:0x7f54e6b5e90e [ 943.932997][T14110] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 943.952595][T14110] RSP: 002b:00007f54e7ae7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 943.961113][T14110] RAX: ffffffffffffffda RBX: 00007f54e7ae86c0 RCX: 00007f54e6b5e90e [ 943.969088][T14110] RDX: 0000000000000002 RSI: 00007f54e7ae7c00 RDI: ffffffffffffff9c [ 943.977060][T14110] RBP: 00007f54e7ae7c00 R08: 0000000000000000 R09: 0000000000000000 [ 943.985029][T14110] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 943.993014][T14110] R13: 00007f54e6e26128 R14: 00007f54e6e26090 R15: 00007ffdf9ca9388 [ 944.000981][T14110] [ 944.004125][T14110] Kernel Offset: disabled [ 944.008436][T14110] Rebooting in 86400 seconds..