last executing test programs: 23.462685953s ago: executing program 2 (id=1645): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@none}}}, 0x9) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1}, 0x4004) dup(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) shmget$private(0x0, 0x1000, 0xc230eea466119881, &(0x7f0000000000/0x1000)=nil) 20.616683792s ago: executing program 2 (id=1649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac1414aa08000b00e6"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000480)=0x8, 0x4) 15.645626212s ago: executing program 1 (id=1654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget(0x3, 0x0, 0x608) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x260, 0x2f8, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6tnl0\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x220, 0x260, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc59, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x29, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x7, 0x1}}, @common=@unspec=@physdev={{0x68}, {'vlan1\x00', {0xff}, 'ip6gre0\x00', {}, 0x17}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7, 0xd0, {0x9}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x33, 0x2f, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x80000, 0x80) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, r5, 0x0) prlimit64(r0, 0xe, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/diskstats\x00', 0x0, 0x0) preadv(r6, 0x0, 0x0, 0x800, 0xfff) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x40, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r6], 0x1, 0x19f, &(0x7f0000000480)="$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") r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f000000a140)={0x0, 0x0, &(0x7f000000a100)={&(0x7f0000009f40)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x44080) 15.404929078s ago: executing program 0 (id=1655): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x4004401) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) 14.294868514s ago: executing program 1 (id=1656): syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) inotify_init() utime(0x0, 0xfffffffffffffffd) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000580)={0x20000008}) r3 = fanotify_init(0x1, 0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x2}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0xa0000001}) r4 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x6) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) 14.121794969s ago: executing program 0 (id=1657): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@none}}}, 0x9) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1}, 0x4004) dup(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) shmget$private(0x0, 0x1000, 0xc230eea466119881, &(0x7f0000000000/0x1000)=nil) 12.84636983s ago: executing program 2 (id=1658): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = open(&(0x7f0000000000)='./file0\x00', 0x143142, 0x80) sendfile(r4, r4, 0x0, 0x1000000201005) 12.84559867s ago: executing program 1 (id=1666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac1414aa08000b00e6"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000480)=0x8, 0x4) 12.324673842s ago: executing program 0 (id=1659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) mmap(&(0x7f000077e000/0x4000)=nil, 0x4000, 0x3000002, 0x28011, r3, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r4, 0x0, 0x52cc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.time\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x11, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f0000002140)={{0x2, 0x4e24, @multicast2}, {0x6, @broadcast}, 0x2, {0x2, 0x4e20, @multicast1}, 'pimreg\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) 12.323837632s ago: executing program 3 (id=1668): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@none}}}, 0x9) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1}, 0x4004) dup(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) shmget$private(0x0, 0x1000, 0xc230eea466119881, &(0x7f0000000000/0x1000)=nil) 10.524586326s ago: executing program 2 (id=1660): openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x0, 0x0, &(0x7f0000000200)={0x7f, 0x4, 0x7, 0x9, 0x5, 0x6c8, 0x100000000, 0x1}, &(0x7f00000002c0)={0x9, 0x9, 0x8, 0xfff, 0xf5, 0x0, 0x5c11, 0x7}, &(0x7f0000000300)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x9]}, 0x8}) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480) r4 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r5, 0x11, 0x67, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'vlan0\x00'}) sendmmsg$inet(r5, &(0x7f00000051c0)=[{{&(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000050c0)=[{&(0x7f0000000340)="67d628c20f6a631cc7", 0xffe3}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) 10.514805756s ago: executing program 0 (id=1661): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) prlimit64(r1, 0xd, &(0x7f0000000280)={0x100000000, 0xf}, &(0x7f00000003c0)) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$nullb(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r3, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000000f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000b00)={0x430, 0x3f4, 0x10, 0x70bd26, 0x25dfdbfc, {0x2, 0x2, 0x25, [0xc2cf, 0x672, 0xfffffffa, 0x7ff, 0x1, 0x5, 0x4, 0x2, 0x4, 0x2, 0xc, 0x2, 0x2, 0x5, 0xfad, 0xc0, 0x200, 0xfffffc01, 0x6, 0x8, 0x0, 0x9, 0x0, 0xa6, 0x10, 0x9, 0x48a2, 0x100, 0x7, 0x5, 0x0, 0xfffffff7, 0x2, 0x1, 0x1, 0xbd0, 0xffffffff, 0xfffffff7, 0xe, 0x6, 0x6, 0x0, 0x1, 0x8001, 0x61e9395a, 0x3, 0x2, 0x8f, 0x7, 0x5, 0x2, 0x8, 0x7fff, 0x0, 0x5, 0x4, 0x2, 0x400, 0x9, 0xfffffffd, 0x8, 0x80000000, 0x431e, 0x1ff], [0x2, 0xffff, 0x800, 0xf06, 0x0, 0x2a9, 0x7fffffff, 0x3, 0x1, 0x800, 0xcef6, 0x9, 0x9, 0x101, 0x80000000, 0x0, 0x2, 0x8, 0x4, 0x1, 0x2, 0x3a7, 0x800, 0xde, 0xffff, 0x8001, 0x780, 0xf0, 0x100, 0x4, 0x701, 0x8, 0x8, 0x5, 0xdd0, 0x7f, 0xffffffff, 0x7, 0xe8, 0x8, 0x0, 0x8, 0x0, 0x6, 0xe, 0x5, 0x6, 0x0, 0x3536, 0x1, 0x651, 0x8000, 0xfd9, 0x4, 0x2, 0x9, 0x1, 0x9, 0x0, 0x0, 0x5, 0x100, 0x3ff, 0x1], [0x1, 0x3ff, 0x3, 0xffffffff, 0xfffffff7, 0xffffffff, 0x5, 0x101, 0x40, 0x88, 0x100, 0xe7eb, 0x2cf, 0x9, 0x2, 0x0, 0x4aa, 0x1, 0x1, 0x100, 0x5, 0xb, 0x3ca, 0x3, 0x8, 0x80000000, 0x2, 0x1, 0x9, 0x7, 0x8c3, 0x9, 0x4, 0x7, 0x2, 0xfffffffd, 0x4, 0x5, 0x8, 0x5, 0x81, 0x0, 0x8, 0xfff, 0x7, 0x57d, 0x2, 0x7, 0x6, 0x1b92, 0x2, 0x400, 0x2, 0x9b, 0xd, 0x1, 0x4, 0x401, 0x96a, 0xfffffff8, 0x5, 0x1, 0x7, 0x6], [0x9, 0x10, 0x112, 0x40, 0x10, 0x2611ee86, 0x9, 0xffff, 0x1, 0x9, 0x6, 0x81, 0x3, 0x7, 0x8, 0x5, 0x9, 0xfffffff8, 0x7ff, 0x3, 0x8, 0x828, 0x4, 0xb, 0x1, 0x48b, 0x80, 0x9, 0xd8d, 0x7ff, 0x5821, 0x9, 0xff, 0x1, 0x9, 0x3, 0x88b, 0x0, 0x100, 0x4, 0x4, 0xbb2, 0x0, 0x1, 0x5, 0x2, 0x5, 0x200000, 0x27cf2191, 0x9, 0x1, 0x1, 0x4, 0xff, 0x1ff, 0x4, 0x5, 0x1ff, 0x49da, 0x9b, 0x9, 0x2f, 0x8, 0x8001], 0x10, ['#!\x00', '/dev/userio\x00', '\x00']}, ["", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x840}, 0x14) pselect6(0x40, &(0x7f0000000440)={0x6, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x83f, 0x9, 0xfffffffffffffffd, 0x100000000000a, 0x80000006, 0x400}, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 10.32324376s ago: executing program 3 (id=1662): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0xfffffffffffffffc, 0x12) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r6, 0x2) 8.828991776s ago: executing program 3 (id=1663): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@multicast2, 0x4e20, 0x10048, 0xd0, 0x48, 0xfffffffe}}, 0x44) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r6, 0x0, 0x0, 0x7, 0x1) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5d800"}}, 0x48}}, 0x410) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x290, 0xffffffff, {0x77359400}, {}, {}, 0x1, @can={{}, 0x4, 0x1, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}, 0x1, 0x0, 0x0, 0x24000041}, 0x8000) writev(r3, 0x0, 0x0) 8.717765409s ago: executing program 0 (id=1664): openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xfdfdffff}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="190000000400"], 0x50) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700"], 0x1c}}, 0x0) recvmmsg$unix(r5, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x71bd27, 0x3, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x4) 7.407968911s ago: executing program 2 (id=1665): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x4004401) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) 7.00777338s ago: executing program 0 (id=1667): syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) inotify_init() utime(0x0, 0xfffffffffffffffd) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000580)={0x20000008}) r3 = fanotify_init(0x1, 0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x2}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0xa0000001}) r4 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x6) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) 3.330959989s ago: executing program 3 (id=1669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac1414aa08000b00e6"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0403000000dc770000ab39"], 0xf) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000480)=0x8, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, 0xffffffffffffffff, 0x31, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_matches\x00') preadv(r6, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0x9d, 0x0) 3.138038474s ago: executing program 1 (id=1670): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) keyctl$clear(0x3, 0xfffffffffffffffd) sched_setparam(r1, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x2, 0x0, 0x6}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) sendto$inet6(r4, 0x0, 0x0, 0x200000c0, &(0x7f00000001c0)={0xa, 0x2, 0x8001, @loopback, 0x8}, 0x1c) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x132, 0x401}) 1.973700542s ago: executing program 3 (id=1671): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = open(&(0x7f0000000000)='./file0\x00', 0x143142, 0x80) sendfile(r4, r4, 0x0, 0x1000000201005) 1.972661282s ago: executing program 2 (id=1679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac1414aa08000b00e6"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000480)=0x8, 0x4) 1.931244353s ago: executing program 1 (id=1672): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@none}}}, 0x9) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1", 0x6c}], 0x1}, 0x4004) dup(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) shmget$private(0x0, 0x1000, 0xc230eea466119881, &(0x7f0000000000/0x1000)=nil) 229.009884ms ago: executing program 3 (id=1673): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="02000000010003000000000002000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="040000000000000008000300", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="00080500000000002000000000000000"], 0x64, 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}, {&(0x7f0000000200)=""/42, 0x2a}], 0x2, 0xa3, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010c2abd7000fcdbdf250600000006000b000300000000"], 0x1c}, 0x1, 0x0, 0x0, 0xd4}, 0x20004000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES64=r1], 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r8, 0x20, &(0x7f0000000780)={&(0x7f0000000480)=""/99, 0x63, 0x0, &(0x7f0000000680)=""/218, 0xda}}, 0x10) 0s ago: executing program 1 (id=1674): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$eJzs3d9rW1UcAPDvTdut+6HtYAz1QQp7cDKXrq0/JvgwH0WHA33XkGRlNF1Gk461Dtwe3IsvMgQRB6Lvvvs4/Af8KwY6GDKKPuwlctObLluTNu3StVs+H7jtOffe9Jxv7v2enpubkAAG1kT6IxfxakR8l0SMtW0bjmzjxOp+Kw+uFdMliUbjs3+SSLJ1rf2T7PehrPJKRPzxTcTJ3Pp2a0vLc4VKpbyQ1Sfr85cna0vLpy7OF2bLs+VL0zMzZ96ZmX7/vXf7Fuub5//78dM7H5359vjKD7/dO3IribNxONvWHsdTuN5emYiJ7DkZibNP7DjVh8b2kmS3O8C2DGV5PhLpGDAWQ1nWd9QYe5ZdA3bY12laAwMqkf8woFrzgNa1fZ+ug58b9z9cvQBaH//w6msjMdq8Njq4kjx2ZZRe7473of20jd//vn0rXaJ/r0MAbOr6jYg4PTy8fvxLsvFv+073sM+TbRj/4Nm5k85/3uo0/8mtzX+iw/znUIfc3Y7N8z93rw/NdJXO/z7oOP9du2k1PpTVXmrO+UaSCxcr5XRsezkiTsTI/rS+wf2cL3MrdxvdNrbP/9Ilbb81F8z6cW94/+OPKRXqhacKus39GxGvdZz/JmvHP+lw/NPn43yPbRwr336927bN499ZjV8i3uh4/B/d0Uo2vj852TwfJltnxXr/3jz2Z7f2dzv+9Pgf3Dj+8aT9fm1t6238PPqw3G3bds//fcnnzfK+bN3VQr2+MBWxL/lk/frpR49t1Vv7p/GfOL7x+Nfp/D+QJnaP8d88erN919Gtxb+z0vhLWzr+Wy/c/firn7q139vxf7tZOpGt6WX867WDT/PcAQAAAAAAwF6Ti4jDkeTya+VcLp9ffX/H0TiYq1Rr9ZMXqouXStH8rOx4jORad7rH2t4PMZW9H7ZVn36iPhMRRyLi+6EDzXq+WK2Udjt4AAAAAAAAAAAAAAAAAAAA2CMORYx2+vx/6q+h3e4dsOM2+Mpv4AXXPf+zLf34pidgT/L/HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcG0l/389t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPn0qWx8uBaMa2XriwtzlWvnCqVa3P5+cVivlhduJyfrVZnK+V8sTq/2d+rVKuXp6Zj8epkvVyrT9aWlr+Yry5eethYVR55JlEBAAAAAAAAAAAAAAAAAADA86W2tDxXqFTKCwoK2yoM741uKPS5sNsjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA88n8AAAD//75iP7A=") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0xfffff, r7) kernel console output (not intermixed with test programs): es 32-bit capabilities (legacy support in use) [ 339.597972][ T8041] loop1: detected capacity change from 0 to 512 [ 339.623402][ T8041] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 339.675902][ T8041] EXT4-fs (loop1): 1 truncate cleaned up [ 339.694248][ T8041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.467275][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.796252][ T8073] netlink: 'syz.2.498': attribute type 1 has an invalid length. [ 341.804001][ T8073] netlink: 152 bytes leftover after parsing attributes in process `syz.2.498'. [ 341.813395][ T8073] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 342.014182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 343.835741][ T8078] loop2: detected capacity change from 0 to 128 [ 344.218264][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 344.218312][ T28] audit: type=1326 audit(1785359941.699:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d42f9df99 code=0x7ffc0000 [ 345.034378][ T28] audit: type=1326 audit(1785359941.699:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d42f9df99 code=0x7ffc0000 [ 345.113366][ T28] audit: type=1326 audit(1785359941.699:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f5d42f9df99 code=0x7ffc0000 [ 345.168983][ T28] audit: type=1326 audit(1785359941.699:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d42f9df99 code=0x7ffc0000 [ 345.194941][ T28] audit: type=1326 audit(1785359941.699:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d42f9df99 code=0x7ffc0000 [ 346.548362][ T28] audit: type=1326 audit(1785359941.708:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d42f9df99 code=0x7ffc0000 [ 346.577278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 346.627368][ T8087] loop1: detected capacity change from 0 to 512 [ 346.637082][ T28] audit: type=1326 audit(1785359941.708:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d42f9df99 code=0x7ffc0000 [ 346.671156][ T28] audit: type=1326 audit(1785359941.708:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d42f9df99 code=0x7ffc0000 [ 346.696197][ T28] audit: type=1326 audit(1785359941.708:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5d42f9df99 code=0x7ffc0000 [ 346.721571][ T28] audit: type=1326 audit(1785359941.708:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d42f9df99 code=0x7ffc0000 [ 346.768601][ T8087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.887847][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.896333][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.998951][ T8092] bridge0: entered allmulticast mode [ 347.085523][ T8093] bridge_slave_1: left allmulticast mode [ 347.104441][ T8093] bridge_slave_1: left promiscuous mode [ 347.110256][ T8093] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.128256][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.144242][ T8093] bridge_slave_0: left allmulticast mode [ 347.149934][ T8093] bridge_slave_0: left promiscuous mode [ 347.206922][ T8093] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.349662][ T8097] loop1: detected capacity change from 0 to 2048 [ 347.564888][ T8097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 349.968619][ T8116] loop1: detected capacity change from 0 to 256 [ 349.998246][ T8118] netlink: 'syz.3.509': attribute type 1 has an invalid length. [ 350.006594][ T8118] netlink: 152 bytes leftover after parsing attributes in process `syz.3.509'. [ 350.018463][ T8118] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 350.566694][ T8116] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 350.660795][ T8120] wg1: entered promiscuous mode [ 350.665982][ T8120] wg1: entered allmulticast mode [ 351.899175][ T8124] loop3: detected capacity change from 0 to 128 [ 352.624151][ T8129] loop2: detected capacity change from 0 to 1024 [ 352.633868][ T8129] EXT4-fs: Ignoring removed bh option [ 352.685960][ T8129] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 352.729508][ T8129] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 352.747882][ T8129] System zones: 0-1, 3-12 [ 352.819415][ T8129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.086301][ T8138] netlink: 'syz.1.516': attribute type 1 has an invalid length. [ 353.094036][ T8138] netlink: 152 bytes leftover after parsing attributes in process `syz.1.516'. [ 353.104338][ T8138] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 354.816190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 356.053427][ T8162] loop1: detected capacity change from 0 to 1024 [ 356.075099][ T8162] EXT4-fs: Ignoring removed bh option [ 356.124476][ T8162] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 356.162649][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.194325][ T8162] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 356.209279][ T8162] System zones: 0-1, 3-12 [ 356.215204][ T8162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.117469][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.268377][ T8173] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 357.868465][ T8187] netlink: 272 bytes leftover after parsing attributes in process `syz.0.526'. [ 357.916821][ T8188] netlink: 'syz.3.521': attribute type 1 has an invalid length. [ 357.924674][ T8188] netlink: 152 bytes leftover after parsing attributes in process `syz.3.521'. [ 357.936687][ T8188] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 357.957291][ T8189] netlink: 'syz.1.528': attribute type 1 has an invalid length. [ 357.965259][ T8189] netlink: 152 bytes leftover after parsing attributes in process `syz.1.528'. [ 357.977399][ T8189] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 358.979616][ T8197] netlink: 'syz.0.537': attribute type 1 has an invalid length. [ 359.288948][ T8197] netlink: 152 bytes leftover after parsing attributes in process `syz.0.537'. [ 359.292877][ T8197] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 360.170680][ T8203] netlink: 272 bytes leftover after parsing attributes in process `syz.2.538'. [ 364.908126][ T8232] loop1: detected capacity change from 0 to 32768 [ 364.918502][ T8232] (syz.1.535,8232,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 364.932588][ T8232] (syz.1.535,8232,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 364.972611][ T8232] (syz.1.535,8232,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 364.987880][ T8232] (syz.1.535,8232,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 365.006164][ T8232] JBD2: Ignoring recovery information on journal [ 365.042862][ T8232] (syz.1.535,8232,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 365.056658][ T8232] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 365.101044][ T8232] (syz.1.535,8232,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 365.135896][ T8232] (syz.1.535,8232,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 365.207326][ T8237] wg1: entered promiscuous mode [ 365.213100][ T8237] wg1: entered allmulticast mode [ 365.300227][ T8231] (syz.1.535,8231,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 365.336307][ T8231] (syz.1.535,8231,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 365.349920][ T8231] (syz.1.535,8231,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 365.362555][ T8231] (syz.1.535,8231,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 365.371155][ T8231] (syz.1.535,8231,1):ocfs2_quota_read:201 ERROR: status = -5 [ 365.378725][ T8231] __quota_error: 13 callbacks suppressed [ 365.378782][ T8231] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 5 [ 365.393970][ T8231] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 365.403617][ T8231] (syz.1.535,8231,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 365.411597][ T8231] (syz.1.535,8231,1):ocfs2_mknod:314 ERROR: status = -5 [ 365.418690][ T8231] (syz.1.535,8231,1):ocfs2_mknod:502 ERROR: status = -5 [ 365.425671][ T8231] (syz.1.535,8231,1):ocfs2_create:676 ERROR: status = -5 [ 366.179586][ T5781] ocfs2: Unmounting device (7,1) on (node local) [ 366.972425][ T8252] netlink: 'syz.3.543': attribute type 1 has an invalid length. [ 366.980125][ T8252] netlink: 152 bytes leftover after parsing attributes in process `syz.3.543'. [ 366.989532][ T8252] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 373.523930][ T8285] ubi0: attaching mtd0 [ 373.544560][ T8285] ubi0: scanning is finished [ 373.549423][ T8285] ubi0: empty MTD device detected [ 374.018691][ T8285] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 374.026363][ T8285] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 374.033739][ T8285] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 374.040789][ T8285] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 374.048225][ T8285] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 374.093299][ T8285] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 374.102184][ T8285] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 674294022 [ 374.112172][ T8285] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 374.179211][ T8286] ubi0: background thread "ubi_bgt0d" started, PID 8286 [ 375.461371][ T8295] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 377.063702][ T8303] loop2: detected capacity change from 0 to 40427 [ 377.091738][ T8303] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 377.100148][ T8303] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 377.124572][ T8303] F2FS-fs (loop2): invalid crc value [ 377.918670][ T8303] F2FS-fs (loop2): Found nat_bits in checkpoint [ 378.010329][ T8303] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 378.018898][ T8303] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 378.444577][ T8320] syz.2.555: attempt to access beyond end of device [ 378.444577][ T8320] loop2: rw=34817, sector=77824, nr_sectors = 32 limit=40427 [ 379.228955][ T8329] netlink: 'syz.1.560': attribute type 1 has an invalid length. [ 379.236777][ T8329] netlink: 152 bytes leftover after parsing attributes in process `syz.1.560'. [ 379.246656][ T8329] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 379.824846][ T8332] loop3: detected capacity change from 0 to 1024 [ 379.840102][ T8332] EXT4-fs: Ignoring removed bh option [ 379.855701][ T8332] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 380.008753][ T8332] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 380.049647][ T8332] System zones: 0-1, 3-12 [ 380.095317][ T8332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.173435][ T8342] loop2: detected capacity change from 0 to 1024 [ 380.181838][ T8342] EXT4-fs: Ignoring removed bh option [ 380.377291][ T8342] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 380.814433][ T8342] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 381.022979][ T8342] System zones: 0-1, 3-12 [ 381.125877][ T8342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.960020][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.077447][ T8363] NILFS (nullb0): couldn't find nilfs on the device [ 385.706780][ T8373] loop3: detected capacity change from 0 to 1024 [ 385.715086][ T8373] EXT4-fs: Ignoring removed bh option [ 385.811027][ T8373] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 385.891489][ T8373] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 385.924126][ T8373] System zones: 0-1, 3-12 [ 385.952296][ T8373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.967225][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.120461][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.127981][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.154662][ T8387] loop1: detected capacity change from 0 to 4096 [ 387.212948][ T8387] EXT4-fs: inline encryption not supported [ 387.567670][ T8387] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 387.639232][ T8387] EXT4-fs (loop1): Test dummy encryption mode enabled [ 387.795119][ T8387] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 388.051083][ T8387] System zones: 0-5 [ 388.057659][ T8387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.176830][ T28] audit: type=1800 audit(1785359982.865:96): pid=8387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.579" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 389.893904][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.072602][ T8408] loop2: detected capacity change from 0 to 1024 [ 390.089954][ T8408] EXT4-fs: Ignoring removed bh option [ 390.113559][ T8408] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 391.544055][ T8408] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 391.567947][ T8408] System zones: 0-1, 3-12 [ 391.573895][ T8408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.811733][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.353279][ T8421] netlink: 'syz.0.578': attribute type 1 has an invalid length. [ 392.361440][ T8421] netlink: 152 bytes leftover after parsing attributes in process `syz.0.578'. [ 392.393576][ T8421] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 393.926708][ T8439] tipc: Enabling of bearer rejected, failed to enable media [ 395.233270][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.536139][ T8457] loop1: detected capacity change from 0 to 32768 [ 395.637432][ T8457] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 398.520275][ T5781] ocfs2: Unmounting device (7,1) on (node local) [ 400.238610][ T8491] loop3: detected capacity change from 0 to 1024 [ 400.275741][ T8491] EXT4-fs: Ignoring removed bh option [ 400.307666][ T8491] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 400.364536][ T8491] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 400.392360][ T8491] System zones: 0-1, 3-12 [ 400.405410][ T8491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.198133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 403.571998][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.515194][ T8517] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 406.356405][ T8526] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 406.599080][ T8528] loop2: detected capacity change from 0 to 512 [ 406.698324][ T8528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.095228][ T8549] loop1: detected capacity change from 0 to 1024 [ 409.132413][ T8549] EXT4-fs: Ignoring removed bh option [ 409.172643][ T8549] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 409.215331][ T8549] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 409.227993][ T8549] System zones: 0-1, 3-12 [ 409.269613][ T8549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.271903][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.342309][ T8563] netlink: 'syz.0.617': attribute type 1 has an invalid length. [ 410.350159][ T8563] netlink: 152 bytes leftover after parsing attributes in process `syz.0.617'. [ 410.360495][ T8563] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 411.343873][ T8574] loop3: detected capacity change from 0 to 512 [ 411.808010][ T8578] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 411.964418][ T8574] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 412.463330][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.210422][ T8589] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 414.774013][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'. [ 417.081085][ T8618] netlink: 'syz.1.620': attribute type 1 has an invalid length. [ 417.090410][ T8618] netlink: 152 bytes leftover after parsing attributes in process `syz.1.620'. [ 417.101472][ T8618] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 419.240817][ T27] IPVS: starting estimator thread 0... [ 419.339289][ T8636] IPVS: using max 27 ests per chain, 64800 per kthread [ 424.859888][ T8674] loop1: detected capacity change from 0 to 512 [ 425.737035][ T8674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.583648][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.127674][ T8691] netlink: 'syz.0.647': attribute type 10 has an invalid length. [ 429.145214][ T8691] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 429.225058][ T8707] ubi: mtd0 is already attached to ubi0 [ 429.900345][ T8691] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 429.960534][ T8709] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 430.657819][ T8718] Bluetooth: MGMT ver 1.22 [ 433.222433][ T8734] loop3: detected capacity change from 0 to 32768 [ 433.253692][ T8734] (syz.3.646,8734,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 433.289420][ T8734] (syz.3.646,8734,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 433.324221][ T8734] (syz.3.646,8734,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 433.344561][ T8734] (syz.3.646,8734,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 433.363086][ T8734] JBD2: Ignoring recovery information on journal [ 433.424174][ T8734] (syz.3.646,8734,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 433.438536][ T8734] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 433.450751][ T8734] (syz.3.646,8734,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 433.491180][ T8734] (syz.3.646,8734,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 433.564536][ T8734] (syz.3.646,8734,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 433.604108][ T8734] (syz.3.646,8734,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 433.618134][ T8734] (syz.3.646,8734,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 433.631202][ T8734] (syz.3.646,8734,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 433.640439][ T8734] (syz.3.646,8734,1):ocfs2_quota_read:201 ERROR: status = -5 [ 433.649430][ T8734] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 5 [ 433.659779][ T8734] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 433.669884][ T8734] (syz.3.646,8734,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 433.677782][ T8734] (syz.3.646,8734,1):ocfs2_mknod:314 ERROR: status = -5 [ 433.684924][ T8734] (syz.3.646,8734,1):ocfs2_mknod:502 ERROR: status = -5 [ 433.692157][ T8734] (syz.3.646,8734,1):ocfs2_create:676 ERROR: status = -5 [ 433.898674][ T5780] ocfs2: Unmounting device (7,3) on (node local) [ 441.151636][ T8784] loop1: detected capacity change from 0 to 1024 [ 441.835046][ T8784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 441.901092][ T8784] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.323031][ T8794] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.662: bg 0: block 112: padding at end of block bitmap is not set [ 442.358805][ T8794] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 442.371999][ T8794] EXT4-fs (loop1): This should not happen!! Data will be lost [ 442.371999][ T8794] [ 442.382077][ T8794] EXT4-fs (loop1): Total free blocks count 0 [ 442.388292][ T8794] EXT4-fs (loop1): Free/Dirty block details [ 442.394272][ T8794] EXT4-fs (loop1): free_blocks=0 [ 442.399498][ T8794] EXT4-fs (loop1): dirty_blocks=64 [ 442.404643][ T8794] EXT4-fs (loop1): Block reservation details [ 442.410842][ T8794] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 442.956045][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 443.201300][ T8783] netlink: 'syz.3.660': attribute type 1 has an invalid length. [ 443.209102][ T8783] netlink: 152 bytes leftover after parsing attributes in process `syz.3.660'. [ 443.259366][ T8783] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 445.319600][ T8824] loop1: detected capacity change from 0 to 2048 [ 445.349522][ T8824] UDF-fs: bad mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 445.408914][ T7604] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 446.977626][ T8831] loop2: detected capacity change from 0 to 128 [ 447.007580][ T8831] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 448.762808][ T8842] netlink: 'syz.1.673': attribute type 1 has an invalid length. [ 448.770842][ T8842] netlink: 152 bytes leftover after parsing attributes in process `syz.1.673'. [ 448.781528][ T8842] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 448.799306][ T8844] netlink: 'syz.2.675': attribute type 1 has an invalid length. [ 448.815581][ T8844] netlink: 152 bytes leftover after parsing attributes in process `syz.2.675'. [ 448.837692][ T8844] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 448.998639][ T8850] loop1: detected capacity change from 0 to 1024 [ 449.230059][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 450.480567][ T8857] bridge0: entered promiscuous mode [ 451.888230][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 451.894905][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.033475][ T8861] loop3: detected capacity change from 0 to 64 [ 453.247003][ T8867] tipc: Enabling of bearer rejected, already enabled [ 453.882237][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.681'. [ 455.107844][ T8874] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 456.149072][ T8882] netlink: 'syz.1.685': attribute type 1 has an invalid length. [ 456.156864][ T8882] netlink: 152 bytes leftover after parsing attributes in process `syz.1.685'. [ 456.168031][ T8882] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 457.008832][ T8889] loop1: detected capacity change from 0 to 1024 [ 457.016337][ T8889] EXT4-fs: Ignoring removed bh option [ 457.047690][ T8889] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 457.320037][ T8889] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 457.332752][ T8889] System zones: 0-1, 3-12 [ 458.386356][ T8889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.991064][ T8907] syz.0.691 (8907) used greatest stack depth: 17896 bytes left [ 459.077019][ T8909] loop2: detected capacity change from 0 to 512 [ 460.676793][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.698458][ T8909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.756641][ T8909] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.239350][ T8927] netlink: 'syz.1.695': attribute type 1 has an invalid length. [ 461.247113][ T8927] netlink: 152 bytes leftover after parsing attributes in process `syz.1.695'. [ 461.256862][ T8927] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 461.436703][ T8909] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 461.527913][ T8909] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 461.821998][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.594529][ T8937] loop2: detected capacity change from 0 to 1024 [ 462.621672][ T8937] EXT4-fs: Ignoring removed bh option [ 462.667310][ T8937] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 462.733722][ T8937] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 462.753364][ T8937] System zones: 0-1, 3-12 [ 462.770287][ T8937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.592866][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.703941][ T8945] syzkaller0: entered promiscuous mode [ 463.717308][ T8945] syzkaller0: entered allmulticast mode [ 463.917901][ T8945] tipc: Enabled bearer , priority 0 [ 463.974235][ T8944] tipc: Resetting bearer [ 464.101705][ T8944] tipc: Disabling bearer [ 466.895293][ T8968] loop3: detected capacity change from 0 to 256 [ 466.930242][ T8968] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777" or missing value [ 468.190866][ T8977] netlink: 'syz.1.706': attribute type 1 has an invalid length. [ 468.198636][ T8977] netlink: 152 bytes leftover after parsing attributes in process `syz.1.706'. [ 468.208420][ T8977] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 469.328214][ T28] audit: type=1326 audit(1785360058.421:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.1.709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ae59df99 code=0x7ffc0000 [ 469.699931][ T28] audit: type=1326 audit(1785360058.421:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.1.709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ae59df99 code=0x7ffc0000 [ 469.816479][ T28] audit: type=1326 audit(1785360058.421:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.1.709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ae59df99 code=0x7ffc0000 [ 469.982365][ T28] audit: type=1326 audit(1785360058.431:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.1.709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ae59df99 code=0x7ffc0000 [ 470.357730][ T28] audit: type=1326 audit(1785360058.431:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.1.709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f41ae59df99 code=0x7ffc0000 [ 470.718111][ T28] audit: type=1326 audit(1785360058.431:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.1.709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ae59df99 code=0x7ffc0000 [ 471.073426][ T28] audit: type=1326 audit(1785360058.431:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.1.709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ae59df99 code=0x7ffc0000 [ 471.438593][ T28] audit: type=1326 audit(1785360058.431:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.1.709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ae59df99 code=0x7ffc0000 [ 471.842698][ T28] audit: type=1326 audit(1785360058.431:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.1.709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ae59df99 code=0x7ffc0000 [ 471.936490][ T28] audit: type=1326 audit(1785360058.431:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.1.709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ae59df99 code=0x7ffc0000 [ 473.368034][ T8996] loop3: detected capacity change from 0 to 1024 [ 473.375721][ T8996] EXT4-fs: Ignoring removed bh option [ 473.389532][ T8996] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 473.521431][ T8996] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 473.576252][ T8996] System zones: 0-1, 3-12 [ 473.619196][ T8996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.364375][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.216536][ T9020] netlink: 'syz.3.718': attribute type 1 has an invalid length. [ 476.224693][ T9020] netlink: 152 bytes leftover after parsing attributes in process `syz.3.718'. [ 476.234358][ T9020] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 478.740542][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 478.740591][ T28] audit: type=1326 audit(1785360067.302:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.0.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12519df99 code=0x7ffc0000 [ 478.992198][ T28] audit: type=1326 audit(1785360067.302:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.0.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12519df99 code=0x7ffc0000 [ 479.325283][ T28] audit: type=1326 audit(1785360067.302:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.0.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fd12519df99 code=0x7ffc0000 [ 479.442438][ T28] audit: type=1326 audit(1785360067.302:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.0.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12519df99 code=0x7ffc0000 [ 479.575701][ T28] audit: type=1326 audit(1785360067.312:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.0.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12519df99 code=0x7ffc0000 [ 479.639848][ T28] audit: type=1326 audit(1785360067.312:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.0.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fd12519df99 code=0x7ffc0000 [ 479.709512][ T28] audit: type=1326 audit(1785360067.312:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.0.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12519df99 code=0x7ffc0000 [ 479.826230][ T28] audit: type=1326 audit(1785360067.312:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.0.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12519df99 code=0x7ffc0000 [ 479.874611][ T28] audit: type=1326 audit(1785360067.312:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.0.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fd12519df99 code=0x7ffc0000 [ 479.947209][ T28] audit: type=1326 audit(1785360067.312:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.0.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12519df99 code=0x7ffc0000 [ 481.709147][ T9045] loop3: detected capacity change from 0 to 1024 [ 481.750508][ T9045] EXT4-fs: Ignoring removed bh option [ 481.832768][ T9045] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 481.903507][ T9045] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 481.930575][ T9045] System zones: 0-1, 3-12 [ 482.109742][ T9045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.232131][ T9057] NILFS (nullb0): couldn't find nilfs on the device [ 484.876886][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.941383][ T9072] syzkaller0: entered promiscuous mode [ 485.947784][ T9072] syzkaller0: entered allmulticast mode [ 485.962905][ T9072] tipc: Enabled bearer , priority 0 [ 485.983277][ T9072] tipc: Resetting bearer [ 485.995546][ T9071] tipc: Resetting bearer [ 486.075520][ T9071] tipc: Disabling bearer [ 486.087685][ T9076] loop3: detected capacity change from 0 to 512 [ 486.283859][ T9076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.277332][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.669858][ T9095] netlink: 'syz.1.735': attribute type 1 has an invalid length. [ 487.677839][ T9095] netlink: 152 bytes leftover after parsing attributes in process `syz.1.735'. [ 487.689807][ T9095] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 489.225064][ T9104] bridge0: left promiscuous mode [ 489.230077][ T9104] bridge0: entered allmulticast mode [ 489.256784][ T9105] loop3: detected capacity change from 0 to 1024 [ 489.433647][ T9105] EXT4-fs: Ignoring removed bh option [ 489.869530][ T9108] xt_TPROXY: Can be used only with -p tcp or -p udp [ 490.353186][ T9105] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 490.407052][ T9105] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 490.417348][ T9105] System zones: 0-1, 3-12 [ 490.498141][ T9105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.315225][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.585595][ T9126] loop2: detected capacity change from 0 to 512 [ 492.655709][ T9126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.565357][ T9140] tmpfs: Bad value for 'mpol' [ 495.315089][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.282122][ T9183] loop1: detected capacity change from 0 to 8 [ 503.044072][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 506.817724][ T9225] NILFS (nullb0): couldn't find nilfs on the device [ 506.836237][ T9220] tipc: Enabling of bearer rejected, failed to enable media [ 508.902929][ T9230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 510.431664][ T9243] loop2: detected capacity change from 0 to 512 [ 510.507327][ T9243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.508593][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.111086][ C0] hrtimer: interrupt took 45522 ns [ 517.476957][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 517.621107][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 520.583597][ T9327] netlink: 'syz.1.786': attribute type 1 has an invalid length. [ 520.591770][ T9327] netlink: 152 bytes leftover after parsing attributes in process `syz.1.786'. [ 520.602104][ T9327] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 521.326500][ T9341] capability: warning: `syz.3.800' uses deprecated v2 capabilities in a way that may be insecure [ 522.622158][ T9347] loop3: detected capacity change from 0 to 512 [ 523.300751][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 523.360473][ T9347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.156149][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.159988][ T9380] trusted_key: syz.2.802 sent an empty control message without MSG_MORE. [ 531.181398][ T9399] loop1: detected capacity change from 0 to 512 [ 531.232382][ T9400] 9pnet_fd: Insufficient options for proto=fd [ 531.253073][ T9400] warning: `syz.3.807' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 531.824386][ T9397] netlink: 'syz.3.807': attribute type 10 has an invalid length. [ 531.847513][ T9397] team0: Port device netdevsim0 added [ 531.870861][ T9399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.688806][ T9405] netlink: 'syz.2.804': attribute type 1 has an invalid length. [ 532.696674][ T9405] netlink: 152 bytes leftover after parsing attributes in process `syz.2.804'. [ 532.706279][ T9405] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 532.758129][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.492516][ T9417] loop1: detected capacity change from 0 to 512 [ 533.556913][ T9417] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.809: corrupted inode contents [ 533.614572][ T9417] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 533.698351][ T9417] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.809: corrupted inode contents [ 533.782880][ T9417] EXT4-fs error (device loop1): ext4_evict_inode:302: inode #15: comm syz.1.809: mark_inode_dirty error [ 533.796184][ T9417] EXT4-fs (loop1): 1 orphan inode deleted [ 533.812563][ T9417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.947999][ T9425] misc userio: Invalid payload size [ 534.210423][ T9428] netlink: 120 bytes leftover after parsing attributes in process `syz.2.812'. [ 536.288410][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.993960][ T9440] loop1: detected capacity change from 0 to 1024 [ 537.017813][ T9440] EXT4-fs: Ignoring removed bh option [ 537.019590][ T9441] loop2: detected capacity change from 0 to 1024 [ 537.379668][ T9440] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 537.506800][ T9440] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 537.535853][ T9440] System zones: 0-1, 3-12 [ 537.897645][ T9440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.580375][ T9447] bridge0: entered promiscuous mode [ 538.897812][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.948161][ T9452] loop3: detected capacity change from 0 to 512 [ 539.174992][ T9452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.573659][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.537774][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 541.589540][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.823'. [ 541.604663][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 541.604680][ T28] audit: type=1800 audit(1785360126.445:200): pid=9455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.819" name="bus" dev="ramfs" ino=16888 res=0 errno=0 [ 541.618892][ T9469] netlink: 48 bytes leftover after parsing attributes in process `syz.3.823'. [ 542.789601][ T9471] netlink: 'syz.2.821': attribute type 1 has an invalid length. [ 542.797663][ T9471] netlink: 152 bytes leftover after parsing attributes in process `syz.2.821'. [ 542.809632][ T9471] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 543.465644][ T9504] loop1: detected capacity change from 0 to 8192 [ 548.466586][ T9541] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 548.781042][ T9550] netlink: 'syz.0.836': attribute type 1 has an invalid length. [ 548.788911][ T9550] netlink: 152 bytes leftover after parsing attributes in process `syz.0.836'. [ 548.798842][ T9550] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 551.076735][ T9579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 551.084607][ T9579] IPv6: NLM_F_CREATE should be set when creating new route [ 551.092164][ T9579] IPv6: NLM_F_CREATE should be set when creating new route [ 551.099499][ T9579] IPv6: NLM_F_CREATE should be set when creating new route [ 551.166112][ T9582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.845'. [ 552.811023][ T9595] loop3: detected capacity change from 0 to 512 [ 553.024656][ T9595] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 553.047924][ T9595] EXT4-fs (loop3): DAX unsupported by block device. [ 553.057408][ T9601] netlink: 'syz.1.849': attribute type 1 has an invalid length. [ 553.065197][ T9601] netlink: 152 bytes leftover after parsing attributes in process `syz.1.849'. [ 553.075122][ T9601] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 556.792417][ T9623] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 557.829110][ T9629] netlink: 'syz.3.855': attribute type 2 has an invalid length. [ 559.810969][ T9661] netlink: 'syz.3.859': attribute type 1 has an invalid length. [ 559.818821][ T9661] netlink: 152 bytes leftover after parsing attributes in process `syz.3.859'. [ 559.828490][ T9661] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 560.986564][ T9671] loop3: detected capacity change from 0 to 128 [ 562.425898][ T9671] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 562.546942][ T9671] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 563.435546][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 565.205711][ T9701] loop3: detected capacity change from 0 to 64 [ 566.094385][ T9704] netlink: 'syz.2.869': attribute type 1 has an invalid length. [ 566.102310][ T9704] netlink: 152 bytes leftover after parsing attributes in process `syz.2.869'. [ 566.112039][ T9704] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 567.036370][ T9716] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 569.133623][ T9740] bond1: option xmit_hash_policy: invalid value (6) [ 570.514743][ T9740] bond1 (unregistering): Released all slaves [ 573.150743][ T9764] syz.3.882 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 581.671379][ T9805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 581.895083][ T9840] loop1: detected capacity change from 0 to 64 [ 583.113896][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 583.121317][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 583.347425][ T9849] loop2: detected capacity change from 0 to 1024 [ 583.370356][ T9849] EXT4-fs: Ignoring removed bh option [ 583.565183][ T9849] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 583.786803][ T9849] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 584.065730][ T9849] System zones: 0-1, 3-12 [ 584.192100][ T9849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.233970][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.560388][ T9886] netlink: 120 bytes leftover after parsing attributes in process `syz.0.906'. [ 591.977698][ T9914] loop1: detected capacity change from 0 to 128 [ 592.015257][ T9914] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 592.108437][ T9916] xt_hashlimit: max too large, truncated to 1048576 [ 592.820750][ T9040] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 592.833029][ T9919] loop2: detected capacity change from 0 to 512 [ 592.902477][ T9919] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 592.962992][ T9919] EXT4-fs (loop2): DAX unsupported by block device. [ 596.519675][ T9937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.926'. [ 601.533053][ T9965] loop1: detected capacity change from 0 to 32768 [ 601.608740][ T9973] loop2: detected capacity change from 0 to 64 [ 602.736591][ T9965] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 603.032797][ T9965] XFS (loop1): Ending clean mount [ 603.057245][ T9965] XFS (loop1): Quotacheck needed: Please wait. [ 603.183064][ T9965] XFS (loop1): Quotacheck: Done. [ 604.322118][ T5781] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 606.127729][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'. [ 606.721122][T10002] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 613.343286][T10041] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 613.542718][T10046] loop3: detected capacity change from 0 to 512 [ 613.550254][T10046] EXT4-fs: Ignoring removed i_version option [ 613.565419][T10046] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 613.574041][T10046] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 614.330849][T10046] EXT4-fs (loop3): orphan cleanup on readonly fs [ 614.340278][T10046] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 614.351358][T10046] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 614.623729][T10046] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 614.663253][T10046] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 614.691121][T10046] EXT4-fs (loop3): Remounting filesystem read-only [ 614.698674][T10046] EXT4-fs (loop3): 1 truncate cleaned up [ 614.707172][T10046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 614.721462][T10046] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.918359][T10052] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 615.033780][T10057] loop1: detected capacity change from 0 to 1024 [ 617.200399][T10075] loop1: detected capacity change from 0 to 16 [ 617.349167][T10075] erofs: (device loop1): mounted with root inode @ nid 36. [ 617.713845][T10078] misc userio: Invalid payload size [ 621.088233][T10098] loop3: detected capacity change from 0 to 128 [ 621.118270][T10098] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 623.839129][T10104] loop2: detected capacity change from 0 to 512 [ 623.890827][T10104] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.956: EA inode hash validation failed [ 623.904522][T10104] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.956: corrupted inode contents [ 623.922152][T10104] EXT4-fs (loop2): Remounting filesystem read-only [ 623.928773][T10104] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -5) [ 623.937927][T10104] EXT4-fs (loop2): 1 orphan inode deleted [ 623.944467][T10104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.043231][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.174794][T10123] loop1: detected capacity change from 0 to 512 [ 624.187429][T10123] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 625.782902][T10129] ipt_REJECT: TCP_RESET invalid for non-tcp [ 628.284988][T10148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.967'. [ 628.571815][T10154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.967'. [ 630.949465][T10158] netlink: 'syz.2.968': attribute type 9 has an invalid length. [ 632.279523][T10156] block device autoloading is deprecated and will be removed. [ 632.546390][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 633.306218][T10174] loop2: detected capacity change from 0 to 512 [ 634.283579][T10174] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 634.408355][T10184] misc userio: Invalid payload size [ 634.525393][T10174] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 634.543180][T10174] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.972: Corrupt directory, running e2fsck is recommended [ 634.594382][T10174] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 634.651555][T10174] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.972: corrupted in-inode xattr: e_name out of bounds [ 634.686432][T10174] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.972: couldn't read orphan inode 15 (err -117) [ 634.783272][T10174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.987944][T10188] misc userio: Invalid payload size [ 634.998010][T10188] netlink: 120 bytes leftover after parsing attributes in process `syz.3.975'. [ 637.210659][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.197235][T10202] syz_tun: entered allmulticast mode [ 638.324866][T10210] loop3: detected capacity change from 0 to 128 [ 638.800680][T10213] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10213] [ 642.781977][T10233] o2cb: This node has not been configured. [ 642.788535][T10233] o2cb: Cluster check failed. Fix errors before retrying. [ 642.795848][T10233] (syz.3.985,10233,0):user_dlm_register:674 ERROR: status = -22 [ 642.803514][T10233] (syz.3.985,10233,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 643.592716][T10237] misc userio: Invalid payload size [ 644.180780][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'. [ 645.963811][T10257] loop2: detected capacity change from 0 to 16 [ 646.006129][T10257] erofs: (device loop2): mounted with root inode @ nid 36. [ 646.529192][T10262] netlink: 'syz.3.989': attribute type 1 has an invalid length. [ 646.537025][T10262] netlink: 152 bytes leftover after parsing attributes in process `syz.3.989'. [ 646.547221][T10262] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 646.604417][T10020] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 649.197027][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.203370][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.503628][T10277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.995'. [ 649.868772][T10282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.995'. [ 650.422396][T10284] o2cb: This node has not been configured. [ 650.428392][T10284] o2cb: Cluster check failed. Fix errors before retrying. [ 650.435693][T10284] (syz.0.996,10284,1):user_dlm_register:674 ERROR: status = -22 [ 650.443533][T10284] (syz.0.996,10284,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 652.006145][T10297] netlink: 'syz.0.999': attribute type 1 has an invalid length. [ 652.016578][T10297] netlink: 'syz.0.999': attribute type 2 has an invalid length. [ 652.738087][T10303] netlink: 'syz.1.1000': attribute type 1 has an invalid length. [ 652.745996][T10303] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1000'. [ 652.758074][T10303] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 655.593364][T10306] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 656.197310][T10327] loop3: detected capacity change from 0 to 16 [ 656.522375][T10328] netlink: 'syz.1.1008': attribute type 9 has an invalid length. [ 656.844088][T10328] vivid-007: kernel_thread() failed [ 656.927787][T10327] erofs: (device loop3): mounted with root inode @ nid 36. [ 657.200678][T10336] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1009'. [ 658.445268][T10345] netlink: 'syz.0.1012': attribute type 1 has an invalid length. [ 658.453502][T10345] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1012'. [ 658.463204][T10345] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 658.897058][T10353] loop2: detected capacity change from 0 to 64 [ 660.012494][ T9148] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 660.076464][T10354] misc userio: Invalid payload size [ 660.138639][T10357] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1013'. [ 660.154702][T10356] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 660.417251][T10363] loop3: detected capacity change from 0 to 1024 [ 660.430547][T10363] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 660.455230][T10363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.484518][ T9148] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 660.499606][ T9148] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 660.515119][ T9148] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 660.526036][ T9148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.551136][T10350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 660.574141][ T9148] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 660.748664][ T5866] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 660.927427][T10370] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 661.401934][ T23] IPVS: starting estimator thread 0... [ 661.410216][T10350] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 661.451252][ T5866] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 661.479130][ T23] usb 2-1: USB disconnect, device number 2 [ 662.276808][T10373] IPVS: using max 24 ests per chain, 57600 per kthread [ 662.338127][ T5866] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 662.372059][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.397571][ T5866] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 662.407559][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.473678][T10361] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 662.516870][ T5866] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 662.684141][T10380] netlink: 'syz.3.1019': attribute type 9 has an invalid length. [ 663.352331][T10361] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 663.643469][ T8943] usb 3-1: USB disconnect, device number 2 [ 667.615646][T10402] misc userio: Invalid payload size [ 667.681544][T10405] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1025'. [ 668.102631][T10413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1026'. [ 668.924078][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1027'. [ 668.960527][T10415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1026'. [ 669.701548][T10431] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 670.250987][T10431] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 672.019091][T10449] misc userio: Invalid payload size [ 672.182805][T10451] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1037'. [ 672.311307][T10444] loop2: detected capacity change from 0 to 2048 [ 673.213121][T10454] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 673.891935][T10463] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5782] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10463] [ 674.536056][T10465] xt_TPROXY: Can be used only with -p tcp or -p udp [ 674.581788][T10465] syzkaller1: entered promiscuous mode [ 674.587458][T10465] syzkaller1: entered allmulticast mode [ 675.386532][T10473] netlink: 'syz.0.1041': attribute type 1 has an invalid length. [ 675.394358][T10473] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1041'. [ 675.405965][T10473] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 675.963743][T10454] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 676.101225][T10454] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 676.289890][T10454] Remounting filesystem read-only [ 676.378113][ T5928] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 676.437524][ T5928] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 676.518081][ T5928] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.624433][ T5928] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.713823][ T5928] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.734338][ T5928] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 676.753584][ T5928] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 676.761450][ T5928] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.770668][ T5928] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.780194][ T5928] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.789435][ T5928] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 676.796264][ T5928] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 676.803943][ T5928] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 676.811706][ T5928] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 676.819635][ T5928] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.828642][ T5928] NILFS (loop2): discard dirty page: offset=98304, ino=3 [ 676.918162][ T5928] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.930912][ T5928] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.941110][ T5928] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 676.993925][ T5928] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 677.627947][ T5928] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 677.704855][ T5928] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 677.757446][ T5928] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 677.776132][ T5928] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 677.783837][ T5928] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 677.797791][ T5928] NILFS (loop2): discard dirty page: offset=0, ino=19 [ 677.805354][ T5928] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 677.819619][ T5928] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 677.829012][ T5928] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 677.864927][ T5928] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 677.905563][ T5783] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 677.923462][ T5783] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 677.947693][ T5783] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 678.317408][ T5783] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 678.368948][ T5783] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 678.452317][ T5783] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 678.554742][ T5783] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 678.573401][ T5783] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 678.580862][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 678.603086][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 678.646069][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 678.656157][ T5783] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 678.673221][ T5783] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 678.861474][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 678.956474][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 678.965976][ T5783] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 679.614918][T10498] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 681.097501][T10512] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1047'. [ 681.430398][T10513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.468137][T10513] batadv_slave_1: entered promiscuous mode [ 681.507691][T10517] loop1: detected capacity change from 0 to 256 [ 681.901028][T10520] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 682.074066][T10522] netlink: 'syz.3.1051': attribute type 1 has an invalid length. [ 682.101777][T10522] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1051'. [ 682.332321][T10522] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 683.078286][T10529] netlink: 'syz.0.1050': attribute type 1 has an invalid length. [ 683.135008][T10529] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1050'. [ 683.184807][T10529] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 683.356209][T10534] loop2: detected capacity change from 0 to 128 [ 685.095947][T10540] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5783] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10540] [ 686.692642][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 686.772711][T10550] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1060'. [ 687.776175][ T23] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 687.807636][ T23] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 687.832198][ T23] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 687.856480][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.396186][ T23] usb 4-1: can't set config #27, error -71 [ 689.407681][ T23] usb 4-1: USB disconnect, device number 4 [ 692.007136][T10587] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 692.033498][T10587] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1067'. [ 692.062771][T10587] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 692.514322][T10593] NILFS (nullb0): couldn't find nilfs on the device [ 695.073246][T10604] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1071'. [ 695.321143][T10608] loop2: detected capacity change from 0 to 512 [ 695.340875][T10608] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 696.257249][T10608] EXT4-fs (loop2): 1 truncate cleaned up [ 696.264247][T10608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.766950][T10624] loop1: detected capacity change from 0 to 16 [ 698.860845][T10624] erofs: (device loop1): mounted with root inode @ nid 36. [ 698.917232][T10623] syz.1.1076: attempt to access beyond end of device [ 698.917232][T10623] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 698.941474][T10623] syz.1.1076: attempt to access beyond end of device [ 698.941474][T10623] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 698.959519][T10623] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 699.002508][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.640065][ T28] audit: type=1800 audit(1785360272.780:201): pid=10623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1076" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 703.719051][T10659] netlink: 'syz.1.1082': attribute type 1 has an invalid length. [ 704.177058][T10659] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1082'. [ 704.534653][T10659] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 704.589259][T10665] netlink: 'syz.0.1077': attribute type 1 has an invalid length. [ 704.597321][T10665] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1077'. [ 704.606904][T10665] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 708.487266][T10692] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1094'. [ 712.857871][T10737] misc userio: Invalid payload size [ 713.022204][T10742] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1106'. [ 714.308901][T10754] netlink: 'syz.1.1103': attribute type 1 has an invalid length. [ 714.316837][T10754] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1103'. [ 714.326596][T10754] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 714.462489][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 714.468937][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 714.544855][T10757] loop2: detected capacity change from 0 to 1024 [ 714.555587][T10757] EXT4-fs: Ignoring removed bh option [ 714.569555][T10757] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 714.641911][T10757] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 714.657940][T10757] System zones: 0-1, 3-12 [ 714.664508][T10757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.777334][T10765] syzkaller0: entered promiscuous mode [ 714.782871][T10765] syzkaller0: entered allmulticast mode [ 714.820089][T10765] tipc: Enabled bearer , priority 0 [ 714.831846][T10764] tipc: Resetting bearer [ 714.954331][T10764] tipc: Disabling bearer [ 715.845016][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.541356][T10799] NILFS (nullb0): couldn't find nilfs on the device [ 720.209842][T10789] misc userio: Invalid payload size [ 720.303896][T10801] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1119'. [ 721.054095][T10809] xt_CT: No such helper "netbios-ns" [ 721.722020][T10817] netlink: 'syz.3.1121': attribute type 1 has an invalid length. [ 721.729829][T10817] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1121'. [ 721.739549][T10817] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 721.938978][T10822] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1124'. [ 721.954713][T10821] loop1: detected capacity change from 0 to 1024 [ 721.997173][T10821] EXT4-fs: Ignoring removed bh option [ 722.081429][T10821] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 722.111695][T10821] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 722.132843][T10821] System zones: 0-1, 3-12 [ 722.151489][T10821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.564984][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.845799][T10849] lo speed is unknown, defaulting to 1000 [ 725.517275][T10859] netlink: 'syz.3.1132': attribute type 1 has an invalid length. [ 725.525443][T10859] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1132'. [ 725.537332][T10859] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 726.385329][T10863] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1129'. [ 726.794630][T10872] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 726.828543][T10872] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 727.714267][T10878] netlink: 'syz.3.1134': attribute type 1 has an invalid length. [ 727.722332][T10878] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1134'. [ 727.732196][T10878] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 728.083063][T10881] netlink: 'syz.2.1137': attribute type 11 has an invalid length. [ 729.886626][T10890] befs: (nullb0): invalid magic header [ 731.495378][ T5823] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 731.939220][ T5823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.957707][T10901] loop1: detected capacity change from 0 to 1024 [ 731.964215][ T5823] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 731.973423][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.002288][T10901] EXT4-fs: Ignoring removed bh option [ 732.038823][T10902] netlink: 'syz.0.1142': attribute type 1 has an invalid length. [ 732.046852][T10902] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1142'. [ 732.058410][T10902] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 732.164627][T10901] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 732.584857][ T5823] usb 3-1: config 0 descriptor?? [ 732.685477][ T5823] usb 3-1: can't set config #0, error -71 [ 732.717676][T10901] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 732.753201][ T5823] usb 3-1: USB disconnect, device number 3 [ 732.792838][T10901] System zones: 0-1, 3-12 [ 732.858147][T10901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.325850][T10919] misc userio: Invalid payload size [ 733.486732][T10920] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1144'. [ 734.096535][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.137206][T10924] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 734.203899][T10928] ipt_REJECT: ECHOREPLY no longer supported. [ 734.920266][T10932] misc userio: Invalid payload size [ 735.103297][T10934] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1148'. [ 737.789385][T10957] misc userio: Invalid payload size [ 737.944113][T10958] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1160'. [ 738.348859][T10947] netlink: 'syz.0.1151': attribute type 1 has an invalid length. [ 738.356965][T10947] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1151'. [ 738.366488][T10947] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 739.656129][T10974] IPVS: ip_vs_add_dest(): server weight less than zero [ 739.681839][T10981] misc userio: Invalid payload size [ 739.846904][T10982] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1157'. [ 742.647299][T11011] netlink: 'syz.1.1163': attribute type 1 has an invalid length. [ 742.655329][T11011] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1163'. [ 742.665011][T11011] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 746.053425][ T5822] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 746.269343][ T5822] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 746.316899][ T5822] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 746.328899][ T5822] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 746.349016][ T5822] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 746.360577][ T5822] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 746.374943][ T5822] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 746.384412][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 746.408628][ T5822] usb 2-1: Product: syz [ 746.412858][ T5822] usb 2-1: Manufacturer: syz [ 746.486566][ T5822] cdc_wdm 2-1:1.0: skipping garbage [ 746.515510][ T5822] cdc_wdm 2-1:1.0: skipping garbage [ 746.577710][ T5822] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 746.606672][ T5822] cdc_wdm 2-1:1.0: Unknown control protocol [ 747.151828][T11048] loop2: detected capacity change from 0 to 128 [ 747.183646][T11048] EXT4-fs (loop2): Test dummy encryption mode enabled [ 748.681024][T11060] netlink: 'syz.0.1174': attribute type 1 has an invalid length. [ 748.689101][T11060] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1174'. [ 748.700190][T11060] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 748.833316][T11048] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 748.913440][T11048] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 749.413278][ T5783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 749.813222][T11072] xt_TPROXY: Can be used only with -p tcp or -p udp [ 750.460004][T11056] futex_wake_op: syz.1.1171 tries to shift op by 144; fix this program [ 750.514565][T11073] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 750.536231][T11073] VFS: Can't find a romfs filesystem on dev nullb0. [ 750.536231][T11073] [ 750.809857][T11056] futex_wake_op: syz.1.1171 tries to shift op by 144; fix this program [ 752.296784][ T5888] usb 2-1: USB disconnect, device number 3 [ 753.835492][T11093] overlayfs: missing 'lowerdir' [ 753.942571][T11099] misc userio: Invalid payload size [ 754.688121][T11094] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1182'. [ 755.082170][T11108] loop2: detected capacity change from 0 to 1024 [ 756.323697][T11108] EXT4-fs: Ignoring removed bh option [ 756.335154][T11108] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 756.386365][T11108] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 756.406124][T11108] System zones: 0-1, 3-12 [ 756.421820][T11108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.455976][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1189'. [ 757.537449][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.793422][T11127] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1189'. [ 759.315001][T11149] misc userio: Invalid payload size [ 760.341202][T11153] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1194'. [ 760.677649][T11157] loop2: detected capacity change from 0 to 512 [ 760.685075][T11157] EXT4-fs: Ignoring removed bh option [ 760.714673][T11157] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 760.812156][T11157] EXT4-fs (loop2): 1 truncate cleaned up [ 760.821495][T11157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 761.733111][ T5841] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 761.741945][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.935596][ T5841] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 761.988876][ T5841] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 762.734356][ T5841] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 762.743500][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.957712][T11163] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.976342][ T5841] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 764.152593][T11182] misc userio: Invalid payload size [ 764.162601][T11182] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1200'. [ 764.478389][T11189] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 764.847202][ T5841] usb 4-1: USB disconnect, device number 5 [ 764.895461][T10368] udevd[10368]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 769.623335][T11215] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.483884][T11226] loop3: detected capacity change from 0 to 128 [ 771.299568][T11226] EXT4-fs (loop3): Test dummy encryption mode enabled [ 771.370061][T11226] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 771.383107][T11226] ext4 filesystem being mounted at /312/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 771.439362][T11232] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1212'. [ 771.779370][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 773.174836][T11251] misc userio: Invalid payload size [ 773.183675][T11251] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1213'. [ 774.322182][T11260] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 774.599177][T11271] loop2: detected capacity change from 0 to 512 [ 774.622743][T11271] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 774.633183][T11271] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 774.644442][T11271] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.1221: Invalid inode table block 1 in block_group 0 [ 774.834820][T11275] overlayfs: missing 'lowerdir' [ 774.943466][T11271] EXT4-fs (loop2): get root inode failed [ 775.332589][T11271] EXT4-fs (loop2): mount failed [ 776.231571][T11286] ubi: mtd0 is already attached to ubi0 [ 777.906795][T11301] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1228'. [ 778.118665][T11306] misc userio: Invalid payload size [ 778.126659][T11306] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1227'. [ 780.049874][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 780.056357][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 780.242435][T11324] loop3: detected capacity change from 0 to 1024 [ 780.290306][T11324] EXT4-fs: Ignoring removed bh option [ 780.310396][T11324] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 780.665179][T11324] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 780.900632][T11324] System zones: 0-1, 3-12 [ 780.907143][T11324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.126252][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.614995][T11344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1239'. [ 784.065832][T11364] loop3: detected capacity change from 0 to 4096 [ 785.521390][T11356] misc userio: Invalid payload size [ 785.600445][T11368] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1239'. [ 785.609798][T11364] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 785.916784][T11370] loop2: detected capacity change from 0 to 1024 [ 785.924356][T11370] EXT4-fs: Ignoring removed bh option [ 785.969887][T11364] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 785.976949][T11370] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 786.031068][T11361] ntfs3: loop3: failed to convert "c46c" to cp936 [ 786.046585][T11370] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 786.080230][T11370] System zones: 0-1, 3-12 [ 786.095151][T11370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.189450][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.570624][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 788.533115][T11404] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1250'. [ 789.880471][T11419] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1253'. [ 790.144879][ T5823] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 790.400137][ T5823] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 790.519934][ T5823] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 790.618276][ T5823] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 790.717184][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.793488][T11414] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 790.811651][ T5823] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 791.256218][T11434] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 791.358291][ T5841] usb 4-1: USB disconnect, device number 6 [ 791.580720][T11440] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 795.003671][T11464] misc userio: Invalid payload size [ 795.072612][T11467] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1264'. [ 796.534586][T11481] loop2: detected capacity change from 0 to 1024 [ 796.557443][T11481] EXT4-fs: Ignoring removed bh option [ 796.698575][T11481] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 797.379117][T11481] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 797.387586][T11481] System zones: 0-1, 3-12 [ 797.801417][T11481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.902508][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.084088][T11508] overlayfs: failed to clone upperpath [ 800.560354][T11506] xt_TPROXY: Can be used only with -p tcp or -p udp [ 803.946293][T11528] autofs4:pid:11528:autofs_fill_super: called with bogus options [ 808.401078][T11557] loop2: detected capacity change from 0 to 1024 [ 808.409883][T11557] EXT4-fs: Ignoring removed bh option [ 808.424869][T11557] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 808.665011][T11557] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 808.673184][T11557] System zones: 0-1, 3-12 [ 808.758251][T11557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 809.546309][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.716805][T11589] bridge0: left promiscuous mode [ 811.735465][T11589] bridge0: entered allmulticast mode [ 813.202714][T11600] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 813.326885][T11595] can: request_module (can-proto-3) failed. [ 813.802241][T11595] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 814.044614][T11611] loop2: detected capacity change from 0 to 1024 [ 814.070655][T11611] EXT4-fs: Ignoring removed bh option [ 814.722191][T11611] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 814.817712][T11611] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 814.983626][T11611] System zones: 0-1, 3-12 [ 815.001414][T11611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.084206][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.300496][T11631] loop2: detected capacity change from 0 to 512 [ 816.438391][T11631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 816.446243][T11631] ext4: Unknown parameter 'fscontext' [ 818.249899][T11648] loop2: detected capacity change from 0 to 1024 [ 818.286235][T11648] EXT4-fs: Ignoring removed bh option [ 818.299899][T11649] misc userio: Invalid payload size [ 818.308270][T11649] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1302'. [ 819.109892][T11648] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 819.156800][T11648] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 819.208096][T11648] System zones: 0-1, 3-12 [ 819.541571][T11648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.362342][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.089737][T11684] netlink: 'syz.2.1312': attribute type 11 has an invalid length. [ 825.097632][T11684] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1312'. [ 825.134579][T11684] ip6erspan1: entered allmulticast mode [ 825.191433][T11684] ALSA: mixer_oss: invalid OSS volume '' [ 825.301092][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 825.349266][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1315'. [ 826.027999][T11692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.035846][T11692] bond2: (slave bond0): making interface the new active one [ 826.043966][T11692] bond2: (slave bond0): Enslaving as an active interface with an up link [ 826.053099][T11695] netlink: 'syz.0.1315': attribute type 4 has an invalid length. [ 826.113795][T11695] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1315'. [ 826.363196][T11695] wlan1: mtu less than device minimum [ 828.139896][T11720] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1319'. [ 829.943370][T11738] futex_wake_op: syz.0.1321 tries to shift op by 144; fix this program [ 830.659504][T11740] loop2: detected capacity change from 0 to 1024 [ 830.689384][T11740] EXT4-fs: Ignoring removed bh option [ 830.706689][T11740] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 832.033272][T11740] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 832.072096][T11740] System zones: 0-1, 3-12 [ 832.082060][T11740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.966403][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.430013][T11792] netlink: 'syz.3.1334': attribute type 1 has an invalid length. [ 835.491754][T11792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 835.510966][T11797] bond1: (slave geneve2): making interface the new active one [ 835.522112][T11797] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 836.663304][T11806] loop2: detected capacity change from 0 to 128 [ 836.686570][T11808] loop3: detected capacity change from 0 to 512 [ 836.694141][T11808] EXT4-fs: Ignoring removed nomblk_io_submit option [ 836.715037][T11808] ext4: Unknown parameter 'fscontext' [ 836.735328][T11806] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 836.805949][T11806] ext4 filesystem being mounted at /298/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 837.387830][T11817] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 837.861063][ T5783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 837.967293][T11821] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1340'. [ 838.991794][T11833] autofs4:pid:11833:autofs_fill_super: called with bogus options [ 844.713468][T11870] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1353'. [ 845.434741][T11876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1354'. [ 846.172003][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 846.180766][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 846.837591][T11885] misc userio: Invalid payload size [ 848.196238][T11890] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1355'. [ 850.568170][T11901] loop3: detected capacity change from 0 to 1024 [ 850.601098][T11901] EXT4-fs: Ignoring removed bh option [ 850.643027][T11901] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 850.699384][T11901] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 850.754661][T11901] System zones: 0-1, 3-12 [ 850.785354][T11901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 851.425610][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.104700][T11924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1364'. [ 852.826979][T11918] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.836578][T11918] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.845426][T11918] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.854213][T11918] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.490465][T11918] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.499462][T11918] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.508397][T11918] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.517426][T11918] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.935110][T11920] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.943988][T11920] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.952797][T11920] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.961627][T11920] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.008693][T11920] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.018419][T11920] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.027497][T11920] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.036556][T11920] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.046909][T11929] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1365'. [ 854.319195][T11937] netlink: 'syz.0.1366': attribute type 1 has an invalid length. [ 854.327019][T11937] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1366'. [ 854.336597][T11937] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 854.573562][T11940] misc userio: Invalid payload size [ 855.217085][T11946] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1368'. [ 856.386893][T11957] loop3: detected capacity change from 0 to 1024 [ 856.526830][T11957] EXT4-fs: Ignoring removed bh option [ 856.567756][T11957] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 856.630823][T11957] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 856.640519][T11957] System zones: 0-1, 3-12 [ 856.651613][T11957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 857.455863][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.915709][T11971] netlink: 'syz.2.1375': attribute type 1 has an invalid length. [ 857.923586][T11971] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1375'. [ 857.935549][T11971] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 858.614815][T11977] loop2: detected capacity change from 0 to 512 [ 858.622238][T11977] EXT4-fs: Ignoring removed nomblk_io_submit option [ 858.629002][T11977] ext4: Unknown parameter 'fscontext' [ 861.302529][T11994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1381'. [ 861.792015][T11996] misc userio: Invalid payload size [ 861.887938][T11994] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1381'. [ 863.722710][T12022] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1395'. [ 864.000993][T12026] autofs4:pid:12026:autofs_fill_super: called with bogus options [ 864.624644][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 866.684952][T12036] netlink: 'syz.2.1390': attribute type 12 has an invalid length. [ 867.264238][ T23] usb 2-1: device descriptor read/all, error -71 [ 868.882301][T12044] misc userio: Invalid payload size [ 869.308313][T12060] netlink: 'syz.3.1399': attribute type 1 has an invalid length. [ 869.316289][T12060] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1399'. [ 869.328016][T12060] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 869.927756][T12061] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1394'. [ 870.807935][T12064] misc userio: Invalid payload size [ 870.813957][T12064] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1400'. [ 872.198515][T12068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.460146][ T5841] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 873.675251][ T5841] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 873.697655][ T5841] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 873.730040][ T5841] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 873.780128][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.808717][T12082] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 873.820710][ T5841] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 873.857155][T12087] netlink: 'syz.3.1408': attribute type 1 has an invalid length. [ 873.864941][T12087] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1408'. [ 873.874585][T12087] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 874.149060][ T5823] usb 2-1: USB disconnect, device number 6 [ 874.329380][ T5841] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 874.527559][ T5841] usb 3-1: Using ep0 maxpacket: 8 [ 874.537341][ T5841] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 874.559075][ T5841] usb 3-1: config 150 has 0 interfaces, different from the descriptor's value: 3 [ 874.589143][ T5841] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c3.eb [ 874.600044][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.619936][ T5841] usb 3-1: Product: syz [ 874.639574][ T5841] usb 3-1: Manufacturer: syz [ 874.666164][ T5841] usb 3-1: SerialNumber: syz [ 874.683133][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1409'. [ 876.673455][T12103] misc userio: Invalid payload size [ 876.725914][T12112] misc userio: Invalid payload size [ 876.870369][T12113] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1411'. [ 877.439169][ T5823] usb 3-1: USB disconnect, device number 4 [ 877.446415][T12103] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1412'. [ 879.969794][T12139] netlink: 'syz.1.1417': attribute type 1 has an invalid length. [ 879.977723][T12139] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1417'. [ 879.987480][T12139] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 880.164347][T12142] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1416'. [ 880.817386][T12147] syz.3.1420: attempt to access beyond end of device [ 880.817386][T12147] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 880.830747][T12147] syz.3.1420: attempt to access beyond end of device [ 880.830747][T12147] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 880.843832][T12147] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 880.853783][T12147] syz.3.1420: attempt to access beyond end of device [ 880.853783][T12147] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 880.866836][T12147] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 880.876461][T12147] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 880.884143][T12147] UDF-fs: Scanning with blocksize 512 failed [ 880.891156][T12147] syz.3.1420: attempt to access beyond end of device [ 880.891156][T12147] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 880.904488][T12147] syz.3.1420: attempt to access beyond end of device [ 880.904488][T12147] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 880.917549][T12147] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 880.927729][T12147] syz.3.1420: attempt to access beyond end of device [ 880.927729][T12147] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 880.941090][T12147] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 880.950921][T12147] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 880.958573][T12147] UDF-fs: Scanning with blocksize 1024 failed [ 880.965360][T12147] syz.3.1420: attempt to access beyond end of device [ 880.965360][T12147] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 880.978498][T12147] syz.3.1420: attempt to access beyond end of device [ 880.978498][T12147] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 880.991635][T12147] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 881.001378][T12147] syz.3.1420: attempt to access beyond end of device [ 881.001378][T12147] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 881.014693][T12147] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 881.024310][T12147] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 881.032003][T12147] UDF-fs: Scanning with blocksize 2048 failed [ 881.039075][T12147] syz.3.1420: attempt to access beyond end of device [ 881.039075][T12147] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 881.052202][T12147] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 881.062010][T12147] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 881.071669][T12147] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 881.079396][T12147] UDF-fs: Scanning with blocksize 4096 failed [ 881.085472][T12147] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 881.905998][T12151] misc userio: Invalid payload size [ 881.914617][T12151] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1422'. [ 883.034993][T12168] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 883.478632][T12168] sctp: [Deprecated]: syz.0.1427 (pid 12168) Use of int in max_burst socket option. [ 883.478632][T12168] Use struct sctp_assoc_value instead [ 883.548097][T12173] loop3: detected capacity change from 0 to 256 [ 883.558666][T12173] exfat: Deprecated parameter 'namecase' [ 883.564615][T12173] exfat: Deprecated parameter 'namecase' [ 883.570551][T12173] exfat: Unknown parameter 'zero_size_dir' [ 884.344729][T12180] netlink: 'syz.2.1429': attribute type 1 has an invalid length. [ 884.352840][T12180] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1429'. [ 884.365399][T12180] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 886.357755][T12190] misc userio: Invalid payload size [ 886.445438][T12190] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1433'. [ 887.968369][T12209] tipc: Enabling of bearer rejected, already enabled [ 887.987305][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'. [ 888.001629][T12210] tmpfs: Bad value for 'huge' [ 888.018996][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 888.028463][T12210] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1437'. [ 889.031008][T12215] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1438'. [ 889.861500][T12222] netlink: 'syz.1.1439': attribute type 1 has an invalid length. [ 889.869410][T12222] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1439'. [ 889.879460][T12222] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 890.286613][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1441'. [ 891.756119][T12237] netlink: 'syz.1.1443': attribute type 1 has an invalid length. [ 893.030439][T12243] NILFS (nullb0): couldn't find nilfs on the device [ 896.574068][T12259] loop2: detected capacity change from 0 to 128 [ 896.619531][T12259] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 896.650912][T12259] ext4 filesystem being mounted at /324/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 896.920189][T12270] netlink: 'syz.0.1451': attribute type 1 has an invalid length. [ 896.928091][T12270] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1451'. [ 896.938095][T12270] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 898.505470][ T5783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 900.249806][T12296] misc userio: Invalid payload size [ 900.548310][T12308] netlink: 'syz.1.1462': attribute type 1 has an invalid length. [ 900.556124][T12308] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1462'. [ 900.566096][T12308] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 901.874628][T12296] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1459'. [ 902.740564][T12324] tipc: Cannot configure node identity twice [ 903.783052][T12321] loop2: detected capacity change from 0 to 4096 [ 903.816983][T12321] EXT4-fs (loop2): Test dummy encryption mode enabled [ 903.842111][T12321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 904.478750][ T28] audit: type=1800 audit(1785884753.115:202): pid=12335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1467" name="host_addr" dev="configfs" ino=25489 res=0 errno=0 [ 904.603215][T12321] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 904.963854][T12329] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1466'. [ 905.461862][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.965615][T12350] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1472'. [ 909.430647][T12374] netlink: 'syz.3.1479': attribute type 2 has an invalid length. [ 910.197464][T12389] misc userio: Invalid payload size [ 910.971354][T12389] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1473'. [ 911.017747][T12388] misc userio: Invalid payload size [ 911.108074][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 911.138761][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 911.148615][T12383] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1480'. [ 911.772384][T12402] loop3: detected capacity change from 0 to 1024 [ 911.784873][T12402] EXT4-fs: Ignoring removed mblk_io_submit option [ 911.791817][T12402] EXT4-fs: inline encryption not supported [ 912.160249][T12402] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 912.211489][T12405] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1483'. [ 912.338212][ T28] audit: type=1326 audit(1785884760.629:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12394 comm="syz.3.1482" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad939df99 code=0x7fc00000 [ 915.386318][T12435] misc userio: Invalid payload size [ 916.045427][T12443] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1492'. [ 916.161006][T12446] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1494'. [ 916.474168][T12449] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1495'. [ 917.670162][T12480] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 920.886986][T12519] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1506'. [ 921.006460][T12521] loop3: detected capacity change from 0 to 128 [ 921.064869][T12521] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 921.081223][T12521] qnx6: wrong signature (magic) in superblock #1. [ 921.087764][T12521] qnx6: unable to read the first superblock [ 921.524673][T11607] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 921.644330][T12523] lo speed is unknown, defaulting to 1000 [ 922.389638][T12536] block nbd2: NBD_DISCONNECT [ 924.783279][T12540] misc userio: Invalid payload size [ 925.063258][T12531] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1511'. [ 925.167162][T12550] loop3: detected capacity change from 0 to 512 [ 925.496251][T12550] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 925.890641][T12550] EXT4-fs (loop3): 1 truncate cleaned up [ 925.935648][T12550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.244432][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.827957][T12616] misc userio: Invalid payload size [ 928.305311][T12629] loop2: detected capacity change from 0 to 512 [ 928.517910][T12616] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1520'. [ 929.163160][T12629] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 929.256833][T12629] EXT4-fs (loop2): 1 truncate cleaned up [ 929.360159][T12629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.140026][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.825123][T12654] bridge0: entered promiscuous mode [ 933.580756][T12654] bridge0: entered allmulticast mode [ 933.610357][T12654] team0: Port device bridge0 added [ 934.688150][T12678] misc userio: Invalid payload size [ 934.763164][T12673] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1532'. [ 935.110843][T12681] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 935.757119][T12684] loop3: detected capacity change from 0 to 512 [ 935.765069][T12684] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 937.584407][T12690] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1533'. [ 937.816004][T12703] netlink: 'syz.0.1539': attribute type 10 has an invalid length. [ 937.843518][T12703] team0: Port device dummy0 added [ 939.457979][T12716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1542'. [ 940.288688][T12716] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 940.439641][T12725] loop3: detected capacity change from 0 to 1024 [ 940.461884][T12726] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1543'. [ 940.509044][T12725] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 940.516215][T12725] hfsplus: xattr searching failed [ 940.654475][ T5822] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 941.676264][T12736] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1546'. [ 941.700850][ T5822] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 941.720225][T12607] hfsplus: b-tree write err: -5, ino 25 [ 941.740128][ T5822] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 941.752031][T12607] hfsplus: b-tree write err: -5, ino 4 [ 941.780861][T12607] hfsplus: b-tree write err: -5, ino 2 [ 941.798132][ T5822] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 941.826328][T12607] hfsplus: b-tree write err: -5, ino 23 [ 941.860711][T12607] hfsplus: bad catalog file entry [ 941.866582][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.937314][T12721] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 941.950101][ T5822] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 943.419487][T12721] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 943.450380][ T5822] usb 3-1: USB disconnect, device number 5 [ 944.217681][T12759] loop3: detected capacity change from 0 to 32768 [ 945.555961][T12607] read_mapping_page failed! [ 945.562674][T12607] ERROR: (device loop3): txCommit: [ 945.562674][T12607] [ 945.593709][T12607] jfs_write_inode: jfs_commit_inode failed! [ 946.588941][T12780] misc userio: Invalid payload size [ 947.307208][T12774] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1554'. [ 947.830007][T12787] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1557'. [ 947.905021][T12793] loop3: detected capacity change from 0 to 1024 [ 947.912803][T12793] EXT4-fs: Ignoring removed i_version option [ 948.049730][T12793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 949.224040][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.085492][T12817] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 951.961577][T12838] misc userio: Invalid payload size [ 952.111524][T12842] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1568'. [ 953.206046][T12855] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 954.039515][T12857] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1570'. [ 954.382302][T12864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'. [ 954.617218][T12867] Cannot find map_set index 135 as target [ 956.308153][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1576'. [ 959.514699][T12901] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1583'. [ 959.602502][T12895] misc userio: Invalid payload size [ 960.156801][T12898] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1582'. [ 960.267611][T12914] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 961.567931][T12933] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1589'. [ 961.713750][T12934] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 963.361845][T12942] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1590'. [ 963.611067][T12955] misc userio: Invalid payload size [ 963.696673][T12960] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1595'. [ 963.736303][ T8943] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 964.784306][ T8943] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 965.132288][ T8943] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 965.142900][ T8943] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 965.152154][ T8943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.172144][T12953] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 965.190610][ T8943] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 965.816168][T12974] @0Ù: renamed from dummy0 (while UP) [ 966.325968][T12953] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 966.359690][ T8943] usb 3-1: USB disconnect, device number 6 [ 966.491711][T11562] udevd[11562]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 967.294064][ T28] audit: type=1326 audit(1785884812.069:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12976 comm="syz.0.1600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd12519df99 code=0x0 [ 967.760330][T12994] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1603'. [ 969.568891][T12999] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 970.541140][T13013] misc userio: Invalid payload size [ 970.708321][T13013] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1607'. [ 970.959326][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'. [ 973.375603][ T5822] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 973.692506][ T5822] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 974.773153][T13059] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1615'. [ 975.038557][T13061] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 975.889984][ T5822] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 975.934104][ T5822] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 976.123026][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.156251][T13070] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1619'. [ 976.362284][T13074] autofs4:pid:13074:autofs_fill_super: called with bogus options [ 976.891714][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 976.900662][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 976.976403][ T5822] usb 2-1: can't set config #27, error -71 [ 976.984903][ T5822] usb 2-1: USB disconnect, device number 7 [ 981.179492][T13105] loop2: detected capacity change from 0 to 512 [ 981.250536][T13105] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 981.274125][T13105] EXT4-fs error (device loop2): ext4_get_journal_inode:5820: comm syz.2.1626: inode #1792: comm syz.2.1626: iget: illegal inode # [ 981.293174][T13105] EXT4-fs (loop2): Remounting filesystem read-only [ 981.299888][T13105] EXT4-fs (loop2): no journal found [ 981.305204][T13105] EXT4-fs (loop2): can't get journal size [ 981.443420][T13105] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 981.453599][T13105] EXT4-fs (loop2): failed to initialize system zone (-22) [ 981.461192][T13105] EXT4-fs (loop2): mount failed [ 981.932380][ T9148] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 982.594089][T13114] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1629'. [ 983.272404][T13116] loop2: detected capacity change from 0 to 256 [ 983.331611][T13116] FAT-fs (loop2): Directory bread(block 64) failed [ 983.339390][T13116] FAT-fs (loop2): Directory bread(block 65) failed [ 983.348218][T13116] FAT-fs (loop2): Directory bread(block 66) failed [ 983.355917][T13116] FAT-fs (loop2): Directory bread(block 67) failed [ 983.363787][T13116] FAT-fs (loop2): Directory bread(block 68) failed [ 983.371503][T13116] FAT-fs (loop2): Directory bread(block 69) failed [ 983.379686][T13116] FAT-fs (loop2): Directory bread(block 70) failed [ 983.387397][T13116] FAT-fs (loop2): Directory bread(block 71) failed [ 983.395165][T13116] FAT-fs (loop2): Directory bread(block 72) failed [ 983.403789][T13116] FAT-fs (loop2): Directory bread(block 73) failed [ 983.568738][ T9148] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 983.601716][ T9148] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 983.611641][ T9148] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 983.634215][ T9148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.870040][T13120] netlink: 'syz.1.1631': attribute type 1 has an invalid length. [ 984.123139][T13108] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 984.155676][ T9148] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 984.627325][T13108] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 984.652955][ T5823] usb 4-1: USB disconnect, device number 7 [ 985.787260][T13140] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1635'. [ 988.350419][ T5823] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 988.492689][T13151] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5781] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13151] [ 988.789620][T13149] befs: (nbd2): No write support. Marking filesystem read-only [ 988.815622][T13149] bio_check_eod: 2 callbacks suppressed [ 988.815673][T13149] syz.2.1639: attempt to access beyond end of device [ 988.815673][T13149] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 989.110558][ T5823] usb 4-1: device descriptor read/all, error -71 [ 989.902235][T13166] loop3: detected capacity change from 0 to 256 [ 989.909545][T13166] exfat: Deprecated parameter 'utf8' [ 989.958666][T13166] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 997.747344][T13205] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1006.896106][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1007.134392][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1007.520914][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1007.531320][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1007.540900][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.554457][T13270] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1007.569732][ T8] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1007.887575][T13270] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1008.096524][ T789] usb 4-1: USB disconnect, device number 10 [ 1011.082578][T13293] futex_wake_op: syz.1.1670 tries to shift op by 144; fix this program [ 1127.633200][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1127.640206][ C0] rcu: 1-...!: (1 GPs behind) idle=0bf4/1/0x4000000000000000 softirq=46554/46557 fqs=1 [ 1127.651952][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13314/1:b..l [ 1127.660009][ C0] rcu: (detected by 0, t=10502 jiffies, g=52001, q=55 ncpus=2) [ 1127.667676][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1127.672902][ C1] NMI backtrace for cpu 1 [ 1127.672924][ C1] CPU: 1 PID: 13319 Comm: syz.1.1674 Not tainted syzkaller #0 [ 1127.672939][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1127.672953][ C1] RIP: 0010:__lock_acquire+0x107f/0x7d80 [ 1127.672979][ C1] Code: 03 89 c3 81 e3 ff 1f 00 00 c1 e8 03 25 f8 03 00 00 48 8d b8 00 b5 1e 91 be 08 00 00 00 e8 09 59 77 00 48 0f a3 1d 11 1a b6 0f <0f> 83 48 01 00 00 48 69 c3 d0 00 00 00 48 8d 98 c0 33 b5 90 49 b8 [ 1127.672992][ C1] RSP: 0018:ffffc900001f0880 EFLAGS: 00000057 [ 1127.673006][ C1] RAX: 0000000000000001 RBX: 0000000000000068 RCX: ffffffff81689ae7 [ 1127.673016][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911eb508 [ 1127.673025][ C1] RBP: ffffc900001f0ac8 R08: ffffffff911eb50f R09: 1ffffffff223d6a1 [ 1127.673036][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a2 R12: 0000000041359547 [ 1127.673047][ C1] R13: ffff88802b638000 R14: 0000000041f79c6b R15: ffff88802b638b28 [ 1127.673058][ C1] FS: 00007f41af4bf6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1127.673072][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1127.673082][ C1] CR2: 00007fd1251eb680 CR3: 000000002e991000 CR4: 00000000003506e0 [ 1127.673095][ C1] Call Trace: [ 1127.673103][ C1] [ 1127.673123][ C1] ? verify_lock_unused+0x140/0x140 [ 1127.673174][ C1] ? debug_objects_fill_pool+0x8b/0x790 [ 1127.673216][ C1] lock_acquire+0x19e/0x420 [ 1127.673249][ C1] ? debug_object_activate+0x6c/0x500 [ 1127.673292][ C1] ? debug_objects_fill_pool+0xcc/0x790 [ 1127.673313][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1127.673331][ C1] ? debug_object_activate+0x500/0x500 [ 1127.673351][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 1127.673373][ C1] ? debug_object_activate+0x6c/0x500 [ 1127.673390][ C1] ? _raw_spin_lock+0x40/0x40 [ 1127.673410][ C1] ? advance_sched+0x9d7/0xc70 [ 1127.673437][ C1] debug_object_activate+0x6c/0x500 [ 1127.673455][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1127.673477][ C1] enqueue_hrtimer+0x34/0x380 [ 1127.673494][ C1] ? __hrtimer_run_queues+0x620/0xc10 [ 1127.673511][ C1] __hrtimer_run_queues+0x62f/0xc10 [ 1127.673526][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 1127.673544][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 1127.673569][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1127.673585][ C1] ? read_tsc+0x9/0x20 [ 1127.673601][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1127.673623][ C1] hrtimer_interrupt+0x39d/0x980 [ 1127.673649][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1127.673669][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1127.673689][ C1] [ 1127.673693][ C1] [ 1127.673698][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1127.673716][ C1] RIP: 0010:___sys_recvmsg+0x57/0x590 [ 1127.673733][ C1] Code: 48 89 7c 24 38 65 48 8b 04 25 28 00 00 00 48 89 84 24 a0 01 00 00 48 b9 f8 f8 f8 f8 f8 f8 f8 f8 49 bf 00 00 00 00 00 fc ff df <4c> 8d ac 24 c0 00 00 00 4c 8d a4 24 60 01 00 00 48 c7 44 24 40 b3 [ 1127.673745][ C1] RSP: 0018:ffffc9000cad7a80 EFLAGS: 00000282 [ 1127.673757][ C1] RAX: 7af16665f5ac9000 RBX: 0000000000000002 RCX: f8f8f8f8f8f8f8f8 [ 1127.673768][ C1] RDX: ffffc9000cad7d20 RSI: 00002000000c88c0 RDI: ffff88807864e000 [ 1127.673779][ C1] RBP: ffffc9000cad7c70 R08: 0000000000003220 R09: 1ffffffff1d18f95 [ 1127.673789][ C1] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: 00002000000000c0 [ 1127.673800][ C1] R13: 0000000000000008 R14: 00002000000c88c0 R15: dffffc0000000000 [ 1127.673829][ C1] ? __might_sleep+0xe0/0xe0 [ 1127.673847][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1127.673867][ C1] ? __might_fault+0xc6/0x120 [ 1127.673881][ C1] ? __might_fault+0xaa/0x120 [ 1127.673897][ C1] do_recvmmsg+0x377/0x810 [ 1127.673916][ C1] ? __sys_recvmmsg+0x290/0x290 [ 1127.673931][ C1] ? do_futex+0x301/0x3e0 [ 1127.673949][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1127.673964][ C1] ? rcu_read_lock_sched_held+0x8a/0x110 [ 1127.673987][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 1127.674004][ C1] ? do_recvmmsg+0x810/0x810 [ 1127.674020][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1127.674040][ C1] do_syscall_64+0x55/0xb0 [ 1127.674055][ C1] ? clear_bhb_loop+0x40/0x90 [ 1127.674070][ C1] ? clear_bhb_loop+0x40/0x90 [ 1127.674085][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1127.674101][ C1] RIP: 0033:0x7f41ae59df99 [ 1127.674114][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1127.674126][ C1] RSP: 002b:00007f41af4bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1127.674140][ C1] RAX: ffffffffffffffda RBX: 00007f41ae826090 RCX: 00007f41ae59df99 [ 1127.674151][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1127.674160][ C1] RBP: 00007f41ae634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 1127.674169][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1127.674178][ C1] R13: 00007f41ae826128 R14: 00007f41ae826090 R15: 00007ffc55ebcd68 [ 1127.674195][ C1] [ 1127.674897][ C0] task:syz.3.1673 state:R running task stack:26792 pid:13314 ppid:5780 flags:0x00004000 [ 1128.175972][ C0] Call Trace: [ 1128.179258][ C0] [ 1128.182200][ C0] __schedule+0x15ae/0x4660 [ 1128.186744][ C0] ? mark_lock+0x94/0x320 [ 1128.191091][ C0] ? asan.module_dtor+0x20/0x20 [ 1128.195978][ C0] ? preempt_schedule+0xc0/0xd0 [ 1128.200848][ C0] preempt_schedule_common+0x82/0xc0 [ 1128.206150][ C0] preempt_schedule+0xc0/0xd0 [ 1128.210854][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 1128.216680][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1128.221727][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1128.227041][ C0] _raw_spin_unlock+0x3a/0x40 [ 1128.231826][ C0] unmap_page_range+0x2577/0x32f0 [ 1128.236869][ C0] ? trace_irq_disable+0x37/0xe0 [ 1128.241942][ C0] ? copy_page_range+0x3700/0x3700 [ 1128.247088][ C0] unmap_vmas+0x286/0x3f0 [ 1128.251530][ C0] ? unmap_page_range+0x32f0/0x32f0 [ 1128.256748][ C0] ? preempt_schedule+0xc0/0xd0 [ 1128.261615][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1128.266742][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 1128.272143][ C0] exit_mmap+0x238/0xb90 [ 1128.276511][ C0] ? vm_brk+0x30/0x30 [ 1128.280598][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1128.287061][ C0] ? uprobe_clear_state+0x278/0x290 [ 1128.292656][ C0] __mmput+0x118/0x3a0 [ 1128.297339][ C0] exit_mm+0x23f/0x340 [ 1128.301557][ C0] ? do_exit+0x2530/0x2530 [ 1128.306011][ C0] ? taskstats_exit+0x359/0x9e0 [ 1128.310883][ C0] do_exit+0x909/0x2530 [ 1128.315186][ C0] ? put_task_struct+0xc0/0xc0 [ 1128.319976][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1128.325973][ C0] ? get_signal+0x100e/0x1390 [ 1128.330662][ C0] ? lock_chain_count+0x20/0x20 [ 1128.335535][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1128.340580][ C0] do_group_exit+0x22d/0x2f0 [ 1128.345192][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1128.350422][ C0] get_signal+0x12a6/0x1390 [ 1128.354976][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 1128.360559][ C0] ? trace_irq_disable+0x37/0xe0 [ 1128.365527][ C0] ? get_sigframe_size+0x20/0x20 [ 1128.370521][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1128.376712][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1128.382216][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1128.387526][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1128.393187][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 1128.398681][ C0] do_syscall_64+0x61/0xb0 [ 1128.403211][ C0] ? clear_bhb_loop+0x40/0x90 [ 1128.407919][ C0] ? clear_bhb_loop+0x40/0x90 [ 1128.412673][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1128.418597][ C0] RIP: 0033:0x7fdad939df99 [ 1128.423029][ C0] RSP: 002b:00007fdada1c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1128.431547][ C0] RAX: fffffffffffffe00 RBX: 00007fdad9626188 RCX: 00007fdad939df99 [ 1128.439637][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdad9626188 [ 1128.447637][ C0] RBP: 00007fdad9626180 R08: 0000000000000000 R09: 0000000000000000 [ 1128.455625][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1128.463725][ C0] R13: 00007fdad9626218 R14: 00007ffc6a830720 R15: 00007ffc6a830808 [ 1128.471727][ C0] [ 1128.474841][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g52001 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1128.486743][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1128.496894][ C0] rcu: RCU grace-period kthread stack dump: [ 1128.502895][ C0] task:rcu_preempt state:R running task stack:27848 pid:17 ppid:2 flags:0x00004000 [ 1128.513994][ C0] Call Trace: [ 1128.517370][ C0] [ 1128.520319][ C0] __schedule+0x15ae/0x4660 [ 1128.525076][ C0] ? lock_chain_count+0x20/0x20 [ 1128.529951][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1128.535864][ C0] ? asan.module_dtor+0x20/0x20 [ 1128.540733][ C0] ? rcu_is_watching+0x15/0xb0 [ 1128.545546][ C0] schedule+0xbd/0x170 [ 1128.550300][ C0] schedule_timeout+0x188/0x2d0 [ 1128.555173][ C0] ? console_conditional_schedule+0x40/0x40 [ 1128.561082][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1128.567169][ C0] ? update_process_times+0x1b0/0x1b0 [ 1128.572557][ C0] ? prepare_to_swait_event+0x344/0x360 [ 1128.578157][ C0] rcu_gp_fqs_loop+0x30d/0x1590 [ 1128.583035][ C0] ? dump_blkd_tasks+0x820/0x820 [ 1128.587994][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1128.593064][ C0] ? rcu_gp_init+0x1530/0x1530 [ 1128.597844][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 1128.604039][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1128.609382][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1128.614690][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 1128.619298][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1128.624422][ C0] ? __kthread_parkme+0x71/0x1c0 [ 1128.629404][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 1128.634451][ C0] kthread+0x2fa/0x390 [ 1128.638531][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1128.643662][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1128.648306][ C0] ret_from_fork+0x48/0x80 [ 1128.652753][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1128.657550][ C0] ret_from_fork_asm+0x11/0x20 [ 1128.662393][ C0] [ 1128.665525][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1128.671980][ C0] CPU: 0 PID: 12618 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 1128.679807][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1128.689968][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1128.696514][ C0] RIP: 0010:smp_call_function_many_cond+0xd85/0x1190 [ 1128.703210][ C0] Code: 45 8b 34 24 44 89 f6 83 e6 01 31 ff e8 14 fe 0a 00 41 83 e6 01 49 be 00 00 00 00 00 fc ff df 75 07 e8 4f fa 0a 00 eb 38 f3 90 <42> 0f b6 04 33 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 33 fa [ 1128.723300][ C0] RSP: 0018:ffffc900039e7780 EFLAGS: 00000293 [ 1128.729412][ C0] RAX: ffffffff817c7aad RBX: 1ffff110171e82bd RCX: ffff888023babc00 [ 1128.737512][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1128.745513][ C0] RBP: ffffc900039e7900 R08: ffffffff911eb507 R09: 1ffffffff223d6a0 [ 1128.753503][ C0] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: ffff8880b8f415e8 [ 1128.761486][ C0] R13: ffff8880b8e3d3c0 R14: dffffc0000000000 R15: 0000000000000001 [ 1128.769491][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1128.778547][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1128.785146][ C0] CR2: 00007f41ae5eb680 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 1128.793217][ C0] Call Trace: [ 1128.797203][ C0] [ 1128.800163][ C0] ? smp_call_function_many+0x40/0x40 [ 1128.805643][ C0] ? text_poke+0xc0/0xc0 [ 1128.809905][ C0] ? __mutex_trylock_common+0x160/0x270 [ 1128.815992][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1128.822185][ C0] ? text_poke_sync+0x30/0x30 [ 1128.826897][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1128.832026][ C0] ? kmem_cache_alloc_bulk+0x12a/0x5a0 [ 1128.837516][ C0] text_poke_bp_batch+0x31e/0x980 [ 1128.842568][ C0] ? text_poke_loc_init+0x7c0/0x7c0 [ 1128.847870][ C0] ? mutex_lock_nested+0x20/0x20 [ 1128.853175][ C0] ? text_poke_queue+0x134/0x190 [ 1128.858148][ C0] ? arch_jump_label_transform_queue+0x93/0x100 [ 1128.864415][ C0] ? __jump_label_update+0x39a/0x3c0 [ 1128.869736][ C0] text_poke_finish+0x30/0x50 [ 1128.874432][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1128.880504][ C0] static_key_enable_cpuslocked+0x123/0x240 [ 1128.886426][ C0] static_key_enable+0x1a/0x20 [ 1128.891204][ C0] ? process_scheduled_works+0x975/0x1600 [ 1128.897024][ C0] toggle_allocation_gate+0xa8/0x260 [ 1128.902330][ C0] ? show_object+0x70/0x70 [ 1128.906817][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1128.912226][ C0] ? process_scheduled_works+0x975/0x1600 [ 1128.917966][ C0] ? process_scheduled_works+0x975/0x1600 [ 1128.923881][ C0] process_scheduled_works+0xa60/0x1600 [ 1128.929472][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1128.934957][ C0] ? assign_work+0x3cc/0x5d0 [ 1128.939569][ C0] worker_thread+0xa5e/0xfe0 [ 1128.944200][ C0] kthread+0x2fa/0x390 [ 1128.948363][ C0] ? pr_cont_work+0x550/0x550 [ 1128.953062][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1128.957670][ C0] ret_from_fork+0x48/0x80 [ 1128.962098][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1128.966708][ C0] ret_from_fork_asm+0x11/0x20 [ 1128.971597][ C0]