last executing test programs: 3m40.901209337s ago: executing program 4 (id=172): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b95}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x4, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x7fffffff, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x4, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x0, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000000, 0x6, 0x438, 0x2, 0x9, 0x92, 0x7ffdffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x3fc, 0x4000006, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x6, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa774, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x4, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x5, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x5, 0x3, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xffff7ff9, 0x4, 0xfffffff9, 0x9, 0x3, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00m'], 0x28}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="2800000012"], 0x28}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x11, 0x70bd28, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0xe4}, 0x2c90224929df06d3) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m37.797488225s ago: executing program 4 (id=178): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) tkill(r0, 0x7) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_GET_TSC(0x43, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffb, r4, 0x1) 3m33.508728823s ago: executing program 4 (id=183): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) socket(0x10, 0x803, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[], 0x0) 3m33.013962789s ago: executing program 4 (id=184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r3, &(0x7f00000010c0)=""/4096, 0x1000) 3m31.889340744s ago: executing program 4 (id=186): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0x0, 0x8, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000002c0), 0x4) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3m27.093794685s ago: executing program 4 (id=189): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa814c8f6ea8", 0x8}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d046bccc3025bbe70", 0x1b}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0xff47) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000006c0)={0x1, @pix_mp={0x9, 0x200, 0x56555959, 0x8, 0xa, [{0x5, 0x3}, {0x0, 0x3}, {0x27, 0x101}, {0x1ff}, {0x1d3, 0xa}, {0x0, 0x4}, {0x1ff, 0xfffffff9}, {0x6, 0x5}], 0x7, 0x9, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m11.854214456s ago: executing program 32 (id=189): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa814c8f6ea8", 0x8}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d046bccc3025bbe70", 0x1b}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0xff47) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000006c0)={0x1, @pix_mp={0x9, 0x200, 0x56555959, 0x8, 0xa, [{0x5, 0x3}, {0x0, 0x3}, {0x27, 0x101}, {0x1ff}, {0x1d3, 0xa}, {0x0, 0x4}, {0x1ff, 0xfffffff9}, {0x6, 0x5}], 0x7, 0x9, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.213427462s ago: executing program 1 (id=1058): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) syz_emit_ethernet(0xffffffffffffffac, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23000000000000080045"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10.166022904s ago: executing program 3 (id=1059): r0 = epoll_create1(0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8001, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) epoll_pwait(r0, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) 9.906130193s ago: executing program 3 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r3) r4 = add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, r3) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0)={r4}, &(0x7f0000000240)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861332d32353600000000000000000000000000000000000000000000000000000000000000006c1cedbd6ec7ee2327d4bbb34240a4f600000000"], 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x7800, 0x7800, 0x1, 0x7f, {{0x5, 0x4, 0x0, 0x3b, 0x14, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast1, @broadcast}}}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0xee01, 0x1000) lgetxattr(0x0, 0x0, 0x0, 0x0) 8.341911896s ago: executing program 1 (id=1067): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa814c8f6ea8", 0x8}, {&(0x7f0000000600)="1a13a7837ea8ca56a9", 0x9}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x8001, 0xb, 0x3}, 0x3a, [0x8, 0x40, 0xf, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0xf, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x257, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1, 0x80, 0x3, 0x9, 0xff, 0x25, 0x2, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x9d2, 0x1, 0x7f, 0xa, 0xa7, 0xad1, 0x9, 0x4, 0x4, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5ba, 0x7, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x30, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0xc, 0x3, 0xce, 0x1, 0x4, 0x9, 0x7, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x1, 0x6, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x6, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x2, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x5, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0x7, 0x7, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0xe9, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000006c0)={0x1, @pix_mp={0x9, 0x200, 0x56555959, 0x8, 0xa, [{0x5, 0x3}, {0x0, 0x3}, {0x27, 0x101}, {0x1ff}, {0x1d3, 0xa}, {0x0, 0x4}, {0x1ff, 0xfffffff9}, {0x6, 0x5}], 0x7, 0x9, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x5, 0x12) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.922023234s ago: executing program 2 (id=1069): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003c00)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 7.869099382s ago: executing program 0 (id=1070): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) getdents64(r1, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) 6.91771711s ago: executing program 2 (id=1072): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 6.781786533s ago: executing program 0 (id=1074): socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r1, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r1, r1, 0x2f, 0x202c, 0x4, @void, @void, @value=r2}, 0x20) 6.729581807s ago: executing program 2 (id=1075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0), &(0x7f0000000240)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861332d32353600000000000000000000000000000000000000000000000000000000000000006c1cedbd6ec7ee2327d4bbb34240a4f600000000"], 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x7800, 0x7800, 0x1, 0x7f, {{0x5, 0x4, 0x0, 0x3b, 0x14, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast1, @broadcast}}}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0xee01, 0x1000) lgetxattr(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x4048004) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 5.554838221s ago: executing program 2 (id=1077): r0 = syz_usb_connect(0x3, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02"], 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000800)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES64=r1, @ANYRESDEC, @ANYRES8, @ANYRESOCT, @ANYBLOB="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"], 0x40, 0x300, &(0x7f0000000f00)="$eJzs3M9rE1sUwPGTNG3SlHayeDx4T6QX3ehmaONeCNKCGFBqI/4AYdpMNGRMQiZUImLjyq3/hqXLbqSg9Q/oxp0rN+KmG8FNQOtIMhOTtEmbpjZpyfcD5Z7ee09mJnMTzgRmdu6+fpJJ2XrKKIo/pMQvUpZdkUg18ixPiohPfFJrxtzOkNuU5fLE90/nlYjE4vG5BaXmY4tXokqpqel3T5+vX9gqTtzZmNoMynbk4c636Jftf7f/2/m1+Dhtq7StsrmiMtRS7nPRWLJMlUzbGV2pW5Zp2KZKZ22z4I7nit5mJZ8vKSObnAznC6ZtKyNbUhmzpIo5VSyUlPHISGeVrutqMizDozJda/JHzUusLSwYsR43utxjHv66rQNHC4X6h+eD0zqSWDu5fQIAAKdVvf4PNtf/ldb63+e1/ub631OWcrX+v33v/o0u6v/NsQ71f25f/e9dX0jLeMrKUf/3KrS/K7E20nv9jzOiMC5BWZfGJ/rlg/WZWkD9DwAAAAAAAAAAAAAAAAAAAADAWeATR3McR6s4jub34upf0LthpP7/oPcTJ6PiNM6/e64D1bOu+Tj/Q6Hpxr2QiPVqJbGScFt3PJaStFhiyoxo8rO2HjxuPH89PudTNRF5b616+asriZHW/FnRJNI+f9bNV635oxJuzo+KJv+0z4+2zR+TSxeb8nXR5OOy5MSSZG1dN/JfzCp17WZ8T/64JNvcMQcAAAAAwFmkqz/aXr/reqdxN7+b3wdm2l6fB+T/wGCPHQAAAACAYWGXnmUMyzILhwZvvIxDJ3/1Jnb9yscNRo9wFN0Gb2uBr9Mrh4701p1AUH8m84GTx71JLUPezzOrx9uN0UEc+/TeHn8/th6oLvqmnnDHyVMj7d7wg4Kg91Tmas+us2fO1Y1zPwa3xvr6NQQAAACgDxpF/6D3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4dWPx4kN+hgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0+J3AAAA//+F3RK5") syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) 5.342264433s ago: executing program 1 (id=1078): bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0xff, 0x0, 0xfff7f024}, {0x80000006, 0x0, 0x0, 0xb}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}}}}, 0x0) 5.086322745s ago: executing program 0 (id=1079): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.941600822s ago: executing program 1 (id=1080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r2) r3 = add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, r2) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0)={r3}, &(0x7f0000000240)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861332d32353600000000000000000000000000000000000000000000000000000000000000006c1cedbd6ec7ee2327d4bbb34240a4f600000000"], 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x7800, 0x7800, 0x1, 0x7f, {{0x5, 0x4, 0x0, 0x3b, 0x14, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast1, @broadcast}}}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0xee01, 0x1000) lgetxattr(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x4048004) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 4.804932455s ago: executing program 3 (id=1081): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 4.365231531s ago: executing program 1 (id=1082): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000f62000/0x1000)=nil, 0x7000) mremap(&(0x7f0000fa8000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) shmdt(r1) 3.655647498s ago: executing program 0 (id=1085): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3", 0x2}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.608180093s ago: executing program 5 (id=1086): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 3.607890655s ago: executing program 3 (id=1087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0), &(0x7f0000000240)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861332d32353600000000000000000000000000000000000000000000000000000000000000006c1cedbd6ec7ee2327d4bbb34240a4f600000000"], 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x7800, 0x7800, 0x1, 0x7f, {{0x5, 0x4, 0x0, 0x3b, 0x14, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast1, @broadcast}}}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0xee01, 0x1000) lgetxattr(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x4048004) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3.481802665s ago: executing program 0 (id=1088): close(0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 3.408016584s ago: executing program 5 (id=1089): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) sendto(r0, &(0x7f00000007c0)="5bea", 0x2, 0x8001, 0x0, 0x0) 2.286496799s ago: executing program 0 (id=1090): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 2.280119612s ago: executing program 3 (id=1091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) keyctl$invalidate(0x15, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0)={r4}, &(0x7f0000000240)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861332d32353600000000000000000000000000000000000000000000000000000000000000006c1cedbd6ec7ee2327d4bbb34240a4f600000000"], 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x7800, 0x7800, 0x1, 0x7f, {{0x5, 0x4, 0x0, 0x3b, 0x14, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast1, @broadcast}}}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0xee01, 0x1000) lgetxattr(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x4048004) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2.00696881s ago: executing program 2 (id=1092): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r4) r5 = add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0)={r5}, &(0x7f0000000240)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861332d32353600000000000000000000000000000000000000000000000000000000000000006c1cedbd6ec7ee2327d4bbb34240a4f600000000"], 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x7800, 0x7800, 0x1, 0x7f, {{0x5, 0x4, 0x0, 0x3b, 0x14, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast1, @broadcast}}}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0xee01, 0x1000) lgetxattr(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x4048004) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.131663005s ago: executing program 3 (id=1093): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000c0a01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000080)) 759.93056ms ago: executing program 5 (id=1094): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x30, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000480)={&(0x7f0000000000)={0xa, 0x4e22, 0x7fff, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x18}, 0x1) 500.269897ms ago: executing program 5 (id=1095): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000007300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=""/41, 0x29}, 0x200}], 0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xda, &(0x7f0000000540)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0xcc, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x1c, 0x8d, 0x0, 0x0, [0x3, 0x6ba5, 0x8, 0x6, 0x4, 0x4]}]}}, {0x1, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "e82ca9233cd8ac0fe6b4d73798030c0f667ad86fff3f32fa33c2e0fe1ae43d64", "acfb88723558ceeaf86fbed72cf31046bbffe5819111088759971568602602fdceba64124e79599871b0e53eaa3e6c8e", "c0527a7fed7f0b210a44e41677011b892290d4df235708ae273d1dab", {"99829b51f486c2ce12e69f9ed88756da", "af73eef74a94e7bf437f1c274e4abedb"}}}}}}}, 0x0) 321.145678ms ago: executing program 5 (id=1096): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="a4", 0x1}], 0x1}}], 0x1, 0x24044c45) 170.62992ms ago: executing program 2 (id=1097): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000052000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 170.463009ms ago: executing program 1 (id=1098): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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") r0 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_ATTR(r0, &(0x7f0000004cc0)={0x78, 0x24, 0x0, {0x4, 0x1089c319, 0x0, {0x3, 0x3, 0x9, 0x81, 0x9, 0x6, 0x2, 0x9c4, 0xfffffffe, 0x5000, 0x6, 0x0, 0x0, 0x2, 0x8}}}, 0x78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 0s ago: executing program 5 (id=1099): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa814c8f6ea8", 0x8}, {&(0x7f0000000600)="1a13a7837ea8ca56a9", 0x9}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x8001, 0xb, 0x3}, 0x3a, [0x8, 0x40, 0xf, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0xf, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x257, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1, 0x80, 0x3, 0x9, 0xff, 0x25, 0x2, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x9d2, 0x1, 0x7f, 0xa, 0xa7, 0xad1, 0x9, 0x4, 0x4, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5ba, 0x7, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x30, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0xc, 0x3, 0xce, 0x1, 0x4, 0x9, 0x7, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x1, 0x6, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x6, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x2, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x5, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0x7, 0x7, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0xe9, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000006c0)={0x1, @pix_mp={0x9, 0x200, 0x56555959, 0x8, 0xa, [{0x5, 0x3}, {0x0, 0x3}, {0x27, 0x101}, {0x1ff}, {0x1d3, 0xa}, {0x0, 0x4}, {0x1ff, 0xfffffff9}, {0x6, 0x5}], 0x7, 0x9, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x5, 0x12) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): 0_macvtap: entered promiscuous mode [ 87.034238][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.035618][ T5615] veth0_vlan: entered promiscuous mode [ 87.067678][ T5614] veth1_macvtap: entered promiscuous mode [ 87.137964][ T5615] veth1_vlan: entered promiscuous mode [ 87.213356][ T5612] veth0_vlan: entered promiscuous mode [ 87.230619][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.263465][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.295772][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.316321][ T5612] veth1_vlan: entered promiscuous mode [ 87.369359][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.398068][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.414000][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.447095][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.573630][ T5615] veth0_macvtap: entered promiscuous mode [ 87.589230][ T5613] veth0_vlan: entered promiscuous mode [ 87.675030][ T5615] veth1_macvtap: entered promiscuous mode [ 87.854169][ T5613] veth1_vlan: entered promiscuous mode [ 88.008153][ T5612] veth0_macvtap: entered promiscuous mode [ 88.027842][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.058535][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.058559][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.064934][ T5612] veth1_macvtap: entered promiscuous mode [ 88.099359][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.175504][ T1505] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.188243][ T1505] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.202158][ T1505] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.208630][ T1505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.208648][ T1505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.223452][ T3328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.228944][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.367951][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.369519][ T5611] veth0_vlan: entered promiscuous mode [ 88.377260][ T5613] veth0_macvtap: entered promiscuous mode [ 88.490441][ T5613] veth1_macvtap: entered promiscuous mode [ 88.518643][ T3328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.545955][ T3328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.559900][ T3328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.617503][ T3328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.631351][ T5611] veth1_vlan: entered promiscuous mode [ 88.961154][ T3706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.961172][ T3706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.966457][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.214229][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.369864][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.386086][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.408957][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.416025][ T197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.416043][ T197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.452805][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.566539][ T5611] veth0_macvtap: entered promiscuous mode [ 89.703301][ T1505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.703319][ T1505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.763874][ T5611] veth1_macvtap: entered promiscuous mode [ 90.389407][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.389426][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.590536][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.745418][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.838993][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.839013][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.874884][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.876887][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.156724][ T5820] loop2: detected capacity change from 0 to 32768 [ 91.159206][ T5820] btrfs: Deprecated parameter 'usebackuproot' [ 91.159367][ T5820] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 91.195028][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.228706][ T5820] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8 (5820) [ 91.270163][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.309659][ T5820] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 91.309703][ T5820] BTRFS info (device loop2): using crc32c checksum algorithm [ 91.592697][ T68] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 91.597801][ T5820] BTRFS error (device loop2): failed to load root extent [ 91.597864][ T5820] BTRFS warning (device loop2): try to load backup roots slot 1 [ 91.598199][ T12] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 91.598285][ T5820] BTRFS warning (device loop2): couldn't read tree root [ 91.598303][ T5820] BTRFS warning (device loop2): try to load backup roots slot 2 [ 91.600864][ T12] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 91.601009][ T5820] BTRFS warning (device loop2): couldn't read tree root [ 91.601028][ T5820] BTRFS warning (device loop2): try to load backup roots slot 3 [ 91.637117][ T5820] BTRFS info (device loop2): rebuilding free space tree [ 91.824420][ T5820] BTRFS info (device loop2): checking UUID tree [ 91.825727][ T5820] BTRFS info (device loop2): enabling ssd optimizations [ 91.825754][ T5820] BTRFS info (device loop2): turning on async discard [ 91.825769][ T5820] BTRFS info (device loop2): enabling free space tree [ 91.825787][ T5820] BTRFS info (device loop2): force clearing of disk cache [ 91.825802][ T5820] BTRFS info (device loop2): enabling auto defrag [ 91.825817][ T5820] BTRFS info (device loop2): trying to use backup root at mount time [ 91.825843][ T5820] BTRFS info (device loop2): use zstd compression, level 3 [ 92.121236][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.121254][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.916116][ T821] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.939924][ T3368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.939940][ T3368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.252178][ T821] usb 2-1: Using ep0 maxpacket: 16 [ 93.349900][ T821] usb 2-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 93.349919][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.349929][ T821] usb 2-1: Product: syz [ 93.349937][ T821] usb 2-1: Manufacturer: syz [ 93.349945][ T821] usb 2-1: SerialNumber: syz [ 93.391227][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.391242][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.730782][ T821] usb 2-1: config 0 descriptor?? [ 94.211326][ T5615] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.500160][ T821] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 94.523973][ T821] pwc: Warning: more than 1 configuration available. [ 94.877285][ T5853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'. [ 95.199830][ T821] pwc: recv_control_msg error -71 req 02 val 2b00 [ 95.246584][ T821] pwc: recv_control_msg error -71 req 02 val 2700 [ 95.247498][ T821] pwc: recv_control_msg error -71 req 04 val 1600 [ 95.248358][ T821] pwc: recv_control_msg error -71 req 02 val 2c00 [ 95.250194][ T821] pwc: recv_control_msg error -71 req 04 val 1000 [ 95.250636][ T821] pwc: recv_control_msg error -71 req 04 val 1300 [ 95.258603][ T821] pwc: recv_control_msg error -71 req 04 val 1400 [ 95.260556][ T821] pwc: recv_control_msg error -71 req 02 val 2000 [ 95.264165][ T821] pwc: recv_control_msg error -71 req 02 val 2100 [ 95.269885][ T821] pwc: recv_control_msg error -71 req 06 val 0600 [ 95.270617][ T821] pwc: recv_control_msg error -71 req 04 val 1500 [ 95.272329][ T821] pwc: recv_control_msg error -71 req 02 val 2500 [ 95.274117][ T821] pwc: recv_control_msg error -71 req 02 val 2400 [ 95.274924][ T821] pwc: recv_control_msg error -71 req 02 val 2600 [ 95.275403][ T821] pwc: recv_control_msg error -71 req 02 val 2900 [ 95.277381][ T821] pwc: recv_control_msg error -71 req 02 val 2800 [ 95.279623][ T821] pwc: recv_control_msg error -71 req 04 val 1100 [ 95.282695][ T821] pwc: recv_control_msg error -71 req 04 val 1200 [ 95.286427][ T821] pwc: Failed to power off camera (-71) [ 95.367534][ T821] pwc: Registered as video103. [ 95.660490][ T821] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 96.423010][ T821] usb 2-1: USB disconnect, device number 2 [ 96.458183][ T5864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 99.272461][ T5731] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.521249][ T5731] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 99.521276][ T5731] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.521293][ T5731] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 99.521350][ T5731] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.525406][ T5731] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.525434][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 99.525450][ T5731] usb 2-1: Product: syz [ 99.525463][ T5731] usb 2-1: Manufacturer: syz [ 99.612145][ T5904] Illegal XDP return value 1679163427 on prog (id 6) dev syz_tun, expect packet loss! [ 99.689039][ T5731] cdc_wdm 2-1:1.0: skipping garbage [ 99.689061][ T5731] cdc_wdm 2-1:1.0: skipping garbage [ 99.720397][ T5731] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 99.720429][ T5731] cdc_wdm 2-1:1.0: Unknown control protocol [ 100.056214][ T5732] usb 2-1: USB disconnect, device number 3 [ 100.223529][ T5756] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.434652][ T5756] usb 4-1: Using ep0 maxpacket: 16 [ 100.438627][ T5756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 100.438657][ T5756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9229, setting to 1024 [ 100.438680][ T5756] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.438720][ T5756] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 100.438741][ T5756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.537422][ T5921] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 100.790706][ T5756] usb 4-1: config 0 descriptor?? [ 100.810191][ T5909] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 100.811102][ T5732] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 100.985947][ T5732] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 100.985977][ T5732] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.985994][ T5732] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 100.986101][ T5732] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.017513][ T5732] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 101.017542][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 101.017561][ T5732] usb 2-1: Product: syz [ 101.017575][ T5732] usb 2-1: Manufacturer: syz [ 101.111296][ T5732] cdc_wdm 2-1:1.0: skipping garbage [ 101.111316][ T5732] cdc_wdm 2-1:1.0: skipping garbage [ 101.123197][ T5732] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 101.123217][ T5732] cdc_wdm 2-1:1.0: Unknown control protocol [ 101.527466][ T5921] syz.2.33 (5921) used greatest stack depth: 18680 bytes left [ 102.563520][ T5756] pantherlord 0003:0810:0002.0001: unknown main item tag 0x0 [ 102.563708][ T5756] pantherlord 0003:0810:0002.0001: unknown main item tag 0x0 [ 102.563892][ T5756] pantherlord 0003:0810:0002.0001: unknown main item tag 0x0 [ 102.590693][ T5756] pantherlord 0003:0810:0002.0001: unknown main item tag 0x0 [ 102.591041][ T5756] pantherlord 0003:0810:0002.0001: unknown main item tag 0x0 [ 102.591238][ T5756] pantherlord 0003:0810:0002.0001: unknown main item tag 0x0 [ 102.591387][ T5756] pantherlord 0003:0810:0002.0001: unknown global tag 0xe [ 102.591452][ T5756] pantherlord 0003:0810:0002.0001: item 0 0 1 14 parsing failed [ 102.849577][ T5756] pantherlord 0003:0810:0002.0001: parse failed [ 102.849623][ T5756] pantherlord 0003:0810:0002.0001: probe with driver pantherlord failed with error -22 [ 103.473601][ T5756] usb 4-1: USB disconnect, device number 2 [ 103.795837][ T821] usb 2-1: USB disconnect, device number 4 [ 104.136659][ T5946] binder: BINDER_SET_CONTEXT_MGR already set [ 104.136680][ T5946] binder: 5945:5946 ioctl 4018620d 200000004a80 returned -16 [ 105.046510][ T5967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.49'. [ 105.216677][ T5972] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.053509][ T5986] loop4: detected capacity change from 0 to 2048 [ 106.774688][ T5986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.042743][ T5983] loop1: detected capacity change from 0 to 32768 [ 107.045760][ T5983] btrfs: Deprecated parameter 'usebackuproot' [ 107.045780][ T5983] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 107.165291][ T5983] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.54 (5983) [ 107.317743][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.332511][ T5983] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.332545][ T5983] BTRFS info (device loop1): using crc32c checksum algorithm [ 107.623865][ T3368] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 107.624002][ T5983] BTRFS error (device loop1): failed to load root extent [ 107.624039][ T5983] BTRFS warning (device loop1): try to load backup roots slot 1 [ 107.649073][ T197] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 107.651426][ T5983] BTRFS warning (device loop1): couldn't read tree root [ 107.651448][ T5983] BTRFS warning (device loop1): try to load backup roots slot 2 [ 107.652347][ T68] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 107.653326][ T5983] BTRFS warning (device loop1): couldn't read tree root [ 107.653346][ T5983] BTRFS warning (device loop1): try to load backup roots slot 3 [ 107.694701][ T5983] BTRFS info (device loop1): rebuilding free space tree [ 107.971203][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 107.990799][ T5983] BTRFS info (device loop1): checking UUID tree [ 108.034689][ T5983] BTRFS info (device loop1): enabling ssd optimizations [ 108.034714][ T5983] BTRFS info (device loop1): turning on async discard [ 108.034730][ T5983] BTRFS info (device loop1): enabling free space tree [ 108.034746][ T5983] BTRFS info (device loop1): force clearing of disk cache [ 108.034761][ T5983] BTRFS info (device loop1): enabling auto defrag [ 108.034777][ T5983] BTRFS info (device loop1): trying to use backup root at mount time [ 108.034794][ T5983] BTRFS info (device loop1): use zstd compression, level 3 [ 108.376910][ T5731] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.636273][ T5731] usb 3-1: Using ep0 maxpacket: 16 [ 108.679103][ T5731] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 108.679136][ T5731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.705747][ T5731] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.705778][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.705799][ T5731] usb 3-1: Product: syz [ 108.705813][ T5731] usb 3-1: Manufacturer: syz [ 108.705827][ T5731] usb 3-1: SerialNumber: syz [ 108.842697][ T5731] usb 3-1: config 0 descriptor?? [ 108.940594][ T5731] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 108.940632][ T5731] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 109.297132][ T6025] loop3: detected capacity change from 0 to 32768 [ 109.571430][ T1261] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 109.652217][ T5731] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 109.685140][ T5731] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 109.756065][ T1261] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 109.756092][ T1261] usb 5-1: config 0 has no interface number 0 [ 109.756135][ T1261] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 109.756160][ T1261] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 109.756185][ T1261] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 109.760313][ T1261] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 109.760348][ T1261] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 109.760367][ T1261] usb 5-1: Product: syz [ 109.760380][ T1261] usb 5-1: SerialNumber: syz [ 109.899642][ T1261] usb 5-1: config 0 descriptor?? [ 109.988854][ T1261] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 110.155914][ T1261] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input6 [ 110.200299][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 110.211416][ T5612] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.297596][ T5731] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 110.538300][ T5731] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 110.567975][ T5731] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 110.584406][ T5731] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 110.587922][ T5731] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 110.588396][ T5731] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 110.721806][ T5731] usb 3-1: USB disconnect, device number 2 [ 111.231494][ T6025] read_mapping_page failed! [ 111.231508][ T6025] diRead: read_metapage failed [ 111.312509][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.319353][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.320254][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.320493][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.320728][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.321068][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.325158][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.325413][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.325639][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.325868][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.663584][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 111.675443][ T5732] usb 5-1: USB disconnect, device number 2 [ 112.037362][ T5732] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 112.975683][ T6077] fuse: Bad value for 'fd' [ 113.490682][ T6107] loop3: detected capacity change from 0 to 256 [ 113.674403][ T6107] ======================================================= [ 113.674403][ T6107] WARNING: The mand mount option has been deprecated and [ 113.674403][ T6107] and is ignored by this kernel. Remove the mand [ 113.674403][ T6107] option from the mount to silence this warning. [ 113.674403][ T6107] ======================================================= [ 114.305012][ T6107] FAT-fs (loop3): Directory bread(block 64) failed [ 114.305047][ T6107] FAT-fs (loop3): Directory bread(block 65) failed [ 114.305156][ T6107] FAT-fs (loop3): Directory bread(block 66) failed [ 114.305184][ T6107] FAT-fs (loop3): Directory bread(block 67) failed [ 114.305278][ T6107] FAT-fs (loop3): Directory bread(block 68) failed [ 114.305299][ T6107] FAT-fs (loop3): Directory bread(block 69) failed [ 114.305392][ T6107] FAT-fs (loop3): Directory bread(block 70) failed [ 114.305413][ T6107] FAT-fs (loop3): Directory bread(block 71) failed [ 114.305506][ T6107] FAT-fs (loop3): Directory bread(block 72) failed [ 114.305526][ T6107] FAT-fs (loop3): Directory bread(block 73) failed [ 119.115871][ T6154] loop3: detected capacity change from 0 to 256 [ 119.982097][ T6165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.93'. [ 119.982815][ T6165] netlink: 'syz.1.93': attribute type 7 has an invalid length. [ 119.982833][ T6165] netlink: 'syz.1.93': attribute type 8 has an invalid length. [ 119.982845][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 120.032966][ T38] audit: type=1800 audit(1780060372.211:2): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.88" name="file1" dev="loop3" ino=1048609 res=0 errno=0 [ 120.061328][ T6165] ip6gretap0: entered promiscuous mode [ 120.064467][ T6165] syz_tun: entered promiscuous mode [ 120.070082][ T6165] erspan0: entered promiscuous mode [ 121.799270][ T6185] tipc: Started in network mode [ 121.799292][ T6185] tipc: Node identity 4, cluster identity 4711 [ 121.799303][ T6185] tipc: Node number set to 4 [ 122.021189][ T38] audit: type=1326 audit(1780060374.151:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.3.100" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f647df1ce59 code=0x0 [ 122.155232][ T6187] loop1: detected capacity change from 0 to 32768 [ 122.171879][ T6187] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.99 (6187) [ 122.223736][ T6187] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.223769][ T6187] BTRFS info (device loop1): using sha256 checksum algorithm [ 122.441918][ T6187] BTRFS info (device loop1): setting nodatasum [ 122.441943][ T6187] BTRFS info (device loop1): enabling ssd optimizations [ 122.441960][ T6187] BTRFS info (device loop1): turning on async discard [ 122.441976][ T6187] BTRFS info (device loop1): enabling free space tree [ 127.443846][ T5612] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.696824][ T5924] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 129.002579][ T6255] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 129.720405][ T6263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.117'. [ 129.891316][ T6266] loop2: detected capacity change from 0 to 512 [ 129.920490][ T6266] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 0 [ 130.851804][ T5924] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 130.851835][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.851854][ T5924] usb 4-1: Product: syz [ 130.851869][ T5924] usb 4-1: Manufacturer: syz [ 130.851882][ T5924] usb 4-1: SerialNumber: syz [ 130.919553][ T5924] usb 4-1: config 0 descriptor?? [ 130.929224][ T6266] netlink: 168 bytes leftover after parsing attributes in process `syz.2.118'. [ 130.959067][ T5924] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 131.148274][ T5924] gspca_stk1135: reg_w 0x2 err -71 [ 131.149329][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 131.149341][ T5924] gspca_stk1135: Sensor write failed [ 131.149368][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 131.149377][ T5924] gspca_stk1135: Sensor write failed [ 131.149403][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 131.149411][ T5924] gspca_stk1135: Sensor read failed [ 131.149438][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 131.149447][ T5924] gspca_stk1135: Sensor read failed [ 131.149453][ T5924] gspca_stk1135: Detected sensor type unknown (0x0) [ 131.149486][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 131.149495][ T5924] gspca_stk1135: Sensor read failed [ 131.149521][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 131.149529][ T5924] gspca_stk1135: Sensor read failed [ 131.149556][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 131.149565][ T5924] gspca_stk1135: Sensor write failed [ 131.149590][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 131.149598][ T5924] gspca_stk1135: Sensor write failed [ 131.149682][ T5924] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 131.578574][ T5924] usb 4-1: USB disconnect, device number 3 [ 131.657231][ T6280] kAFS: unable to lookup cell '(,c¾ûL' [ 132.564021][ T6286] loop3: detected capacity change from 0 to 8192 [ 132.752457][ T6288] loop2: detected capacity change from 0 to 256 [ 132.773037][ T6288] exfat: Deprecated parameter 'namecase' [ 132.773138][ T6288] exfat: Deprecated parameter 'namecase' [ 132.976874][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.990545][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.007625][ T6294] Zero length message leads to an empty skb [ 133.548487][ T6288] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 134.659328][ T6307] loop4: detected capacity change from 0 to 4096 [ 134.803293][ T6313] loop1: detected capacity change from 0 to 1024 [ 134.907678][ T6313] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 135.071363][ T6307] ntfs3(loop4): ino=0, mi_enum_attr [ 135.508441][ T6307] ntfs3(loop4): ino=0, mi_enum_attr [ 135.508533][ T6307] ntfs3(loop4): Failed to load $MFT (-22). [ 135.907428][ T6305] (syz.4.127,6305,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 135.907447][ T6305] (syz.4.127,6305,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 136.060962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.080960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.090958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.100958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.110974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.120966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.130961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.140950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.160966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.170969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.520274][ T6327] process 'syz.1.134' launched '/dev/fd/4' with NULL argv: empty string added [ 137.604162][ T6322] syz.3.132 uses obsolete (PF_INET,SOCK_PACKET) [ 137.605007][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 137.750601][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806142cc00: rx timeout, send abort [ 138.238865][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806142c800: rx timeout, send abort [ 138.268530][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806142cc00: abort rx timeout. Force session deactivation [ 139.661438][ T5924] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 139.813528][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 139.829509][ T5924] usb 4-1: unable to get BOS descriptor or descriptor too short [ 139.842737][ T5924] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.842825][ T5924] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.873301][ T5924] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 139.873328][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.873344][ T5924] usb 4-1: Product: syz [ 139.873356][ T5924] usb 4-1: Manufacturer: syz [ 139.873368][ T5924] usb 4-1: SerialNumber: syz [ 140.467639][ T6358] netlink: 'syz.0.143': attribute type 1 has an invalid length. [ 140.486877][ T5924] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 140.537196][ T5924] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 142.100479][ T6358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.355107][ T6375] loop4: detected capacity change from 0 to 512 [ 142.454039][ T6375] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.848958][ T6375] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.147: invalid indirect mapped block 4294967295 (level 1) [ 145.850119][ T6375] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 145.863739][ C0] EXT4-fs (loop4): initial error at time 1780060398: ext4_free_branches:1023: inode 11 [ 145.863799][ C0] EXT4-fs (loop4): last error at time 1780060398: ext4_free_branches:1023: inode 11 [ 145.968926][ T6375] EXT4-fs (loop4): Remounting filesystem read-only [ 145.980380][ T6375] EXT4-fs (loop4): 2 truncates cleaned up [ 146.040630][ T6375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.315148][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.274773][ T6401] loop2: detected capacity change from 0 to 64 [ 149.597352][ T6406] loop4: detected capacity change from 0 to 512 [ 149.664370][ T6406] EXT4-fs: Ignoring removed nobh option [ 149.666304][ T6406] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 149.666321][ T6406] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 150.113171][ T5924] usb 4-1: USB disconnect, device number 4 [ 150.375402][ T6406] EXT4-fs (loop4): 1 truncate cleaned up [ 150.389970][ T6406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.434565][ T38] audit: type=1800 audit(1780060402.671:4): pid=6406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.154" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 150.966596][ T6420] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 151.112582][ T6423] loop0: detected capacity change from 0 to 512 [ 151.256686][ T6423] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 151.596869][ T6423] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 151.620693][ T6423] EXT4-fs (loop0): 1 truncate cleaned up [ 154.100654][ T6423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.488808][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.754799][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.762011][ T38] audit: type=1326 audit(1780060407.011:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.2.161" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e0d8ce59 code=0x7ffc0000 [ 154.808112][ T38] audit: type=1326 audit(1780060407.021:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.2.161" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f34e0d8ce59 code=0x7ffc0000 [ 154.808160][ T38] audit: type=1326 audit(1780060407.021:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.2.161" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e0d8ce59 code=0x7ffc0000 [ 154.846691][ T38] audit: type=1326 audit(1780060407.091:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.2.161" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e0d8ce59 code=0x7ffc0000 [ 154.888276][ T38] audit: type=1326 audit(1780060407.131:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.2.161" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f34e0d8ce59 code=0x7ffc0000 [ 155.109036][ T6446] IPVS: Scheduler module ip_vs_ not found [ 155.109451][ T38] audit: type=1326 audit(1780060407.351:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.2.161" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e0d8ce59 code=0x7ffc0000 [ 155.109498][ T38] audit: type=1326 audit(1780060407.351:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.2.161" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e0d8ce59 code=0x7ffc0000 [ 155.190079][ T6448] kvm: kvm [6447]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 155.821169][ T6455] loop3: detected capacity change from 0 to 512 [ 161.842616][ T6500] loop1: detected capacity change from 0 to 256 [ 161.957487][ T6500] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23633cdc, utbl_chksum : 0xe619d30d) [ 167.078995][ T6519] loop1: detected capacity change from 0 to 2048 [ 169.690074][ T6528] atomic_op ffff888038698a18 conn xmit_atomic 0000000000000000 [ 170.458686][ T6519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.298704][ T6563] usb usb8: usbfs: process 6563 (syz.3.192) did not claim interface 0 before use [ 185.408039][ T6561] netlink: 260 bytes leftover after parsing attributes in process `syz.3.192'. [ 188.268899][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 188.306306][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 188.327498][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 188.340562][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 188.364467][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.570763][ T6594] loop2: detected capacity change from 0 to 1024 [ 190.719859][ T5623] Bluetooth: hci5: command tx timeout [ 190.836103][ T6622] loop3: detected capacity change from 0 to 256 [ 191.377085][ T6628] loop2: detected capacity change from 0 to 1024 [ 191.393495][ T6628] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.393550][ T6628] EXT4-fs: Ignoring removed oldalloc option [ 191.393602][ T6628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.863171][ T5623] Bluetooth: hci5: command tx timeout [ 193.054787][ T6628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.116579][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.278960][ T6645] tipc: Started in network mode [ 194.278990][ T6645] tipc: Node identity 8246111eb9fa, cluster identity 4711 [ 194.279376][ T6645] tipc: Enabled bearer , priority 0 [ 194.370519][ T6646] syzkaller0: entered promiscuous mode [ 194.370544][ T6646] syzkaller0: entered allmulticast mode [ 194.423068][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.423171][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.581873][ T6648] loop2: detected capacity change from 0 to 256 [ 194.583191][ T6648] exfat: Deprecated parameter 'namecase' [ 194.583257][ T6648] exfat: Deprecated parameter 'namecase' [ 194.787671][ T6648] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 194.881020][ T5623] Bluetooth: hci5: command tx timeout [ 194.928506][ T6656] ieee802154 phy0 wpan0: encryption failed: -90 [ 195.148316][ T6660] netlink: 'syz.3.223': attribute type 1 has an invalid length. [ 195.277327][ T6662] warning: `syz.1.213' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 195.315645][ T6662] netlink: 'syz.1.213': attribute type 2 has an invalid length. [ 195.852536][ T6643] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 196.126288][ T6644] tipc: Resetting bearer [ 196.163417][ T6642] tipc: Resetting bearer [ 196.220826][ T6674] loop1: detected capacity change from 0 to 1024 [ 196.244603][ T6674] EXT4-fs: Ignoring removed oldalloc option [ 196.244649][ T6674] ext4: Unknown parameter 'fsmagic' [ 196.674332][ T6642] tipc: Disabling bearer [ 196.961073][ T5623] Bluetooth: hci5: command tx timeout [ 197.028899][ T5756] tipc: Node number set to 1002180894 [ 197.599145][ T6674] loop1: detected capacity change from 0 to 8192 [ 199.762038][ T3706] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.406270][ T3706] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.846683][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 201.846726][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 201.846751][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 201.846776][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 202.333199][ T6711] binder: Binderfs stats mode cannot be changed during a remount [ 204.624024][ T3706] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.906319][ T5621] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 206.396187][ T3706] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.636991][ T6739] netlink: 5 bytes leftover after parsing attributes in process `syz.3.247'. [ 206.671049][ T5600] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 206.693320][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 206.813332][ T6742] ip6tnl2: entered allmulticast mode [ 206.826813][ T5600] usb 3-1: Using ep0 maxpacket: 32 [ 206.839371][ T5600] usb 3-1: unable to get BOS descriptor or descriptor too short [ 206.859725][ T5600] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 206.859752][ T5600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.859771][ T5600] usb 3-1: Product: syz [ 206.859784][ T5600] usb 3-1: Manufacturer: syz [ 206.859796][ T5600] usb 3-1: SerialNumber: syz [ 207.072609][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.072931][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.073250][ T6584] bridge_slave_0: entered allmulticast mode [ 207.098926][ T6584] bridge_slave_0: entered promiscuous mode [ 207.157779][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.159711][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.159986][ T6584] bridge_slave_1: entered allmulticast mode [ 207.197433][ T6584] bridge_slave_1: entered promiscuous mode [ 207.222126][ T5600] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 207.222151][ T5600] usb 3-1: 1:1 : unsupported sample bitwidth 3 in 230 bytes [ 207.270263][ T5600] usb 3-1: unit 37 not found! [ 207.270291][ T5600] usb 3-1: unit 0 not found! [ 207.627208][ T6584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.637307][ T6584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.817314][ T5600] usb 3-1: USB disconnect, device number 3 [ 208.740730][ T6584] team0: Port device team_slave_0 added [ 208.926625][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 209.015240][ T6584] team0: Port device team_slave_1 added [ 209.558000][ T6790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.268'. [ 209.653431][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.653446][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.653464][ T6584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.845520][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.845537][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.845560][ T6584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.481360][ T6808] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.275'. [ 211.481396][ T6808] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.275'. [ 211.505002][ T6811] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 211.747582][ T6818] netlink: 60 bytes leftover after parsing attributes in process `syz.0.280'. [ 211.747802][ T6818] netlink: 60 bytes leftover after parsing attributes in process `syz.0.280'. [ 211.848054][ T6820] loop3: detected capacity change from 0 to 2048 [ 211.860576][ T6820] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 211.979623][ T3706] bridge_slave_1: left allmulticast mode [ 211.979783][ T3706] bridge_slave_1: left promiscuous mode [ 212.053163][ T6820] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.067947][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.358900][ T3706] bridge_slave_0: left allmulticast mode [ 213.358934][ T3706] bridge_slave_0: left promiscuous mode [ 213.359180][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.823289][ T6887] binder: Binderfs stats mode cannot be changed during a remount [ 218.711678][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.781763][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.813037][ T3706] bond0 (unregistering): Released all slaves [ 219.007811][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 219.065555][ T6584] hsr_slave_0: entered promiscuous mode [ 219.082547][ T6584] hsr_slave_1: entered promiscuous mode [ 219.092143][ T6584] debugfs: 'hsr0' already exists in 'hsr' [ 219.096150][ T6584] Cannot create hsr debugfs directory [ 219.294298][ T3706] tipc: Left network mode [ 219.587154][ T6910] loop3: detected capacity change from 0 to 8 [ 221.806091][ T6947] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 221.834472][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 222.055644][ T6963] loop2: detected capacity change from 0 to 1024 [ 222.077742][ T6963] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 224.004668][ T6993] loop2: detected capacity change from 0 to 128 [ 224.270272][ T6998] netlink: 'syz.3.341': attribute type 2 has an invalid length. [ 226.601378][ T7035] loop1: detected capacity change from 0 to 8 [ 226.658862][ T7035] SQUASHFS error: Unable to read inode 0xa7 [ 227.138191][ T7040] atomic_op ffff888032ec1a18 conn xmit_atomic 0000000000000000 [ 227.856256][ T5621] Bluetooth: hci3: Unexpected cc 0x0000 with no status [ 227.924771][ T3706] hsr_slave_0: left promiscuous mode [ 227.968137][ T3706] hsr_slave_1: left promiscuous mode [ 227.978255][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.978385][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.026923][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.026951][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.069153][ T7048] autofs: Bad value for 'fd' [ 228.366280][ T7058] loop1: detected capacity change from 0 to 64 [ 228.432209][ T7060] loop3: detected capacity change from 0 to 256 [ 228.814645][ T3706] veth1_macvtap: left promiscuous mode [ 228.814922][ T3706] veth0_macvtap: left promiscuous mode [ 228.815264][ T3706] veth1_vlan: left promiscuous mode [ 228.877141][ T3706] veth0_vlan: left promiscuous mode [ 228.926892][ T7058] hfs: keylen 40 too large [ 229.693502][ T5732] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 229.709984][ T7074] loop0: detected capacity change from 0 to 4096 [ 229.896701][ T5732] usb 2-1: Using ep0 maxpacket: 16 [ 229.908865][ T7074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.929531][ T5732] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 229.929561][ T5732] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 229.929579][ T5732] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 229.929596][ T5732] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 229.929607][ T5732] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 229.929618][ T5732] usb 2-1: config 0 has no interface number 0 [ 229.929651][ T5732] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 229.929665][ T5732] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 229.929677][ T5732] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 229.929695][ T5732] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.929709][ T5732] usb 2-1: config 0 interface 125 has no altsetting 0 [ 229.988390][ T5732] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 229.988419][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.988438][ T5732] usb 2-1: Product: syz [ 229.988450][ T5732] usb 2-1: Manufacturer: syz [ 229.988464][ T5732] usb 2-1: SerialNumber: syz [ 230.083001][ T5732] usb 2-1: config 0 descriptor?? [ 230.502713][ C0] usb 2-1: async_complete: urb error -71 [ 230.503042][ C0] usb 2-1: async_complete: urb error -71 [ 230.503574][ C0] usb 2-1: async_complete: urb error -71 [ 230.507366][ C0] usb 2-1: async_complete: urb error -71 [ 230.525061][ T5732] get_1284_register: usb error -71 [ 230.606373][ T5732] usb 2-1: USB disconnect, device number 5 [ 230.626596][ T7080] autofs: Bad value for 'fd' [ 230.732535][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.008722][ T7087] loop0: detected capacity change from 0 to 1024 [ 231.077700][ T7087] hfsplus: failed to extend attributes file [ 231.929258][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 232.005288][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 232.091727][ T7104] autofs: Bad value for 'fd' [ 232.396100][ T7098] loop1: detected capacity change from 0 to 32768 [ 233.299150][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 233.371011][ T6584] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 233.506409][ T7135] overlay: Unknown parameter '/' [ 233.650387][ T6584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 233.747604][ T7139] bond1: Removing last arp target with arp_interval on [ 233.747836][ T6584] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 234.004628][ T6584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 234.308920][ T7145] dvmrp1: entered allmulticast mode [ 234.821044][ T6584] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.076563][ T6584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 235.151675][ T6584] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 235.514243][ T6584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.011694][ T7188] autofs: Unknown parameter '0x0000000000000000' [ 237.700533][ T6584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.808919][ T6584] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.850330][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 237.912538][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.912695][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.978292][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.978524][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.299329][ T7219] ip6tnl1: entered promiscuous mode [ 239.917038][ T7241] loop3: detected capacity change from 0 to 256 [ 240.013603][ T7241] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 240.013890][ T7241] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 240.013930][ T7241] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 240.015122][ T38] audit: type=1800 audit(1780060492.261:12): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.429" name="file1" dev="loop3" ino=1048647 res=0 errno=0 [ 240.513178][ T5756] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 240.676133][ T5756] usb 1-1: too many configurations: 168, using maximum allowed: 8 [ 240.677542][ T5756] usb 1-1: config index 0 descriptor too short (expected 65016, got 133) [ 240.677567][ T5756] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.678627][ T5756] usb 1-1: config index 1 descriptor too short (expected 65016, got 133) [ 240.678651][ T5756] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.679882][ T5756] usb 1-1: config index 2 descriptor too short (expected 65016, got 133) [ 240.679908][ T5756] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.681471][ T5756] usb 1-1: config index 3 descriptor too short (expected 65016, got 133) [ 240.681495][ T5756] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.698163][ T5756] usb 1-1: config index 4 descriptor too short (expected 65016, got 133) [ 240.698192][ T5756] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.700196][ T6584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.703119][ T5756] usb 1-1: config index 5 descriptor too short (expected 65016, got 133) [ 240.703144][ T5756] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.705206][ T5756] usb 1-1: config index 6 descriptor too short (expected 65016, got 133) [ 240.705232][ T5756] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.706696][ T5756] usb 1-1: config index 7 descriptor too short (expected 65016, got 133) [ 240.706720][ T5756] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.768952][ T5756] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 240.768981][ T5756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.768997][ T5756] usb 1-1: Product: syz [ 240.769010][ T5756] usb 1-1: Manufacturer: syz [ 240.769024][ T5756] usb 1-1: SerialNumber: syz [ 241.168956][ T5756] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 242.287817][ T5742] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 242.473488][ T7276] bond1: entered promiscuous mode [ 242.482640][ T7276] bond1: entered allmulticast mode [ 242.483813][ T7276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.959162][ T5732] usb 1-1: USB disconnect, device number 2 [ 242.966367][ T5742] usb 1-1: ath9k_htc: Unable to allocate URBs [ 243.113710][ T5732] usb 1-1: ath9k_htc: USB layer deinitialized [ 243.209173][ T6584] veth0_vlan: entered promiscuous mode [ 243.234147][ T6584] veth1_vlan: entered promiscuous mode [ 243.389856][ T7291] netlink: 'syz.3.445': attribute type 9 has an invalid length. [ 244.943857][ T6584] veth0_macvtap: entered promiscuous mode [ 244.963799][ T7300] loop0: detected capacity change from 0 to 1024 [ 244.983119][ T7300] hfsplus: Bad value for 'session' [ 245.076247][ T6584] veth1_macvtap: entered promiscuous mode [ 245.288392][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.343781][ T7316] loop2: detected capacity change from 0 to 2048 [ 245.394637][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.522580][ T7316] loop2: p1 < > p4 [ 245.522580][ T7316] p4: [ 245.536462][ T1142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.615052][ T7322] veth3: entered promiscuous mode [ 245.615082][ T7322] veth3: entered allmulticast mode [ 245.644693][ T1142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.645065][ T1142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.672121][ T1142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.796547][ T7316] loop2: p4 size 722688 extends beyond EOD, truncated [ 247.659431][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.846137][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.901119][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.904526][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.907793][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 248.784783][ T6545] udevd[6545]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 248.818443][ T6755] udevd[6755]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 248.860213][ T5731] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 248.941815][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 248.942215][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.470'. [ 248.947299][ T6545] udevd[6545]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 248.956392][ T6755] udevd[6755]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 249.028524][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 249.028555][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 249.028577][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 249.028602][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 249.104314][ T5731] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 249.104344][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.104362][ T5731] usb 1-1: Product: syz [ 249.104375][ T5731] usb 1-1: Manufacturer: syz [ 249.104389][ T5731] usb 1-1: SerialNumber: syz [ 249.141966][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 249.216488][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.216518][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.216555][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 249.216576][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.219484][ T5731] usb 1-1: config 0 descriptor?? [ 249.242570][ T9] usb 3-1: config 0 descriptor?? [ 249.362183][ T9] hub 3-1:0.0: USB hub found [ 249.518748][ T9] hub 3-1:0.0: 1 port detected [ 249.588464][ T5731] adutux 1-1:0.0: Could not retrieve serial number [ 249.588576][ T5731] adutux 1-1:0.0: probe with driver adutux failed with error -5 [ 249.742215][ T9] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 249.742242][ T9] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 249.757484][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 249.757604][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 249.850642][ T821] usb 1-1: USB disconnect, device number 3 [ 249.855557][ T9] usb 3-1: USB disconnect, device number 4 [ 249.885182][ T7382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.473'. [ 250.085064][ T5623] Bluetooth: hci1: command tx timeout [ 250.818002][ T7406] loop2: detected capacity change from 0 to 64 [ 250.851798][ T821] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 250.880369][ T7406] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 251.022128][ T821] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 251.022159][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.022178][ T821] usb 1-1: Product: syz [ 251.022192][ T821] usb 1-1: Manufacturer: syz [ 251.022206][ T821] usb 1-1: SerialNumber: syz [ 251.071943][ T821] usb 1-1: config 0 descriptor?? [ 251.094903][ T821] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 004 [ 251.496241][ T821] (null): failure reading functionality [ 251.555001][ T821] i2c i2c-1: failure reading functionality [ 251.576537][ T1142] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.057276][ T7438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.488'. [ 253.057697][ T7438] netlink: get zone limit has 8 unknown bytes [ 253.058299][ T821] i2c i2c-1: connected i2c-tiny-usb device [ 253.093547][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 253.320291][ T5621] Bluetooth: hci1: command tx timeout [ 253.354382][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.490'. [ 253.364932][ T821] usb 1-1: USB disconnect, device number 4 [ 253.523361][ T7443] tmpfs: Bad value for 'mpol' [ 253.785286][ T7452] loop0: detected capacity change from 0 to 512 [ 253.836849][ T7452] EXT4-fs: Ignoring removed nobh option [ 253.890096][ T5621] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3 [ 253.890138][ T5621] Bluetooth: hci2: unexpected event for opcode 0x204b [ 254.393346][ T7452] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #3: comm syz.0.492: corrupted inode contents [ 254.393381][ T7452] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 254.403019][ C0] EXT4-fs (loop0): initial error at time 1780060506: ext4_do_update_inode:5690: inode 3 [ 254.403058][ C0] EXT4-fs (loop0): last error at time 1780060506: ext4_do_update_inode:5690: inode 3 [ 254.619843][ T7452] EXT4-fs (loop0): Remounting filesystem read-only [ 254.790772][ T7452] Quota error (device loop0): write_blk: dquota write failed [ 254.875702][ T7452] Quota error (device loop0): qtree_write_dquot: Error -30 occurred while creating quota [ 255.169382][ T7452] EXT4-fs (loop0): 1 truncate cleaned up [ 255.178423][ T7452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.178583][ T7452] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.374036][ T1142] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.937770][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 255.937814][ T5621] Bluetooth: hci1: command tx timeout [ 255.938911][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.939007][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.184309][ T7485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.501'. [ 256.230306][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.563986][ T7495] loop1: detected capacity change from 0 to 512 [ 256.664134][ T7503] loop2: detected capacity change from 0 to 2048 [ 256.938034][ T7503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.692831][ T7503] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 257.758222][ T1142] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.777236][ T7515] loop1: detected capacity change from 0 to 1024 [ 257.781085][ T7503] EXT4-fs (loop2): can't enable nombcache during remount [ 257.789581][ T7515] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 258.001095][ T5623] Bluetooth: hci1: command tx timeout [ 258.059112][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.816259][ T1142] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.504104][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 260.604336][ T7544] loop2: detected capacity change from 0 to 4096 [ 261.551316][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'. [ 261.639415][ T7564] mmap: syz.1.522 (7564) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 261.703927][ T7566] loop1: detected capacity change from 0 to 64 [ 263.553433][ T7589] loop0: detected capacity change from 0 to 256 [ 263.554755][ T7589] exfat: Deprecated parameter 'utf8' [ 263.668201][ T1142] bridge_slave_1: left allmulticast mode [ 263.668235][ T1142] bridge_slave_1: left promiscuous mode [ 263.668514][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.721656][ T7589] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 263.945654][ T1142] bridge_slave_0: left allmulticast mode [ 263.945701][ T1142] bridge_slave_0: left promiscuous mode [ 263.955025][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.173193][ T5600] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 264.232629][ T7603] loop2: detected capacity change from 0 to 128 [ 264.347309][ T5600] usb 4-1: config 0 interface 0 altsetting 149 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.347344][ T5600] usb 4-1: config 0 interface 0 altsetting 149 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.347364][ T5600] usb 4-1: config 0 interface 0 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.347388][ T5600] usb 4-1: config 0 interface 0 has no altsetting 0 [ 264.347421][ T5600] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 264.347442][ T5600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.406861][ T7603] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 264.407272][ T7603] hpfs: filesystem error: improperly stopped [ 264.407288][ T7603] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 264.407302][ T7603] hpfs: You really don't want any checks? You are crazy... [ 264.475132][ T5600] usb 4-1: config 0 descriptor?? [ 264.475414][ T7603] hpfs: hpfs_map_sector(): read error [ 264.475425][ T7603] hpfs: code page support is disabled [ 264.519723][ T7603] hpfs: hpfs_map_4sectors(): unaligned read [ 264.520176][ T7603] hpfs: hpfs_map_4sectors(): unaligned read [ 264.520189][ T7603] hpfs: filesystem error: unable to find root dir [ 264.991471][ T5600] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 264.991524][ T5600] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 264.991551][ T5600] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 264.991577][ T5600] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 264.991603][ T5600] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 264.991636][ T5600] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 264.991662][ T5600] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 264.991687][ T5600] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 264.991713][ T5600] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 264.991739][ T5600] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 265.107666][ T5600] magicmouse 0003:05AC:0265.0002: hidraw0: USB HID v0.01 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 265.135715][ T5600] usb 4-1: USB disconnect, device number 5 [ 265.477660][ T7615] fido_id[7615]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 265.660247][ T7620] netlink: 532 bytes leftover after parsing attributes in process `syz.3.539'. [ 265.764855][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.841604][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.885423][ T1142] bond0 (unregistering): Released all slaves [ 265.973955][ T7338] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.974195][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.975271][ T7338] bridge_slave_0: entered allmulticast mode [ 265.987635][ T7338] bridge_slave_0: entered promiscuous mode [ 266.025428][ T7338] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.025697][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.025983][ T7338] bridge_slave_1: entered allmulticast mode [ 266.036850][ T7338] bridge_slave_1: entered promiscuous mode [ 266.448462][ T7633] loop1: detected capacity change from 0 to 64 [ 266.551303][ T7338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.838547][ T1142] hsr_slave_0: left promiscuous mode [ 266.995198][ T1142] hsr_slave_1: left promiscuous mode [ 266.998045][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.998070][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.054699][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.054717][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.311495][ T1142] veth1_macvtap: left promiscuous mode [ 267.311588][ T1142] veth0_macvtap: left promiscuous mode [ 267.311857][ T1142] veth1_vlan: left promiscuous mode [ 267.312036][ T1142] veth0_vlan: left promiscuous mode [ 267.458626][ T38] audit: type=1800 audit(1780060519.701:13): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.546" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 267.589265][ T7629] loop0: detected capacity change from 0 to 32768 [ 268.186395][ T7664] netlink: 332 bytes leftover after parsing attributes in process `syz.3.554'. [ 268.186469][ T7664] netlink: 'syz.3.554': attribute type 9 has an invalid length. [ 268.186483][ T7664] netlink: 108 bytes leftover after parsing attributes in process `syz.3.554'. [ 268.186496][ T7664] netlink: 32 bytes leftover after parsing attributes in process `syz.3.554'. [ 268.912955][ T7674] loop3: detected capacity change from 0 to 512 [ 268.913649][ T7674] msdos: Unknown parameter 'do1xfloppy' [ 269.400374][ T7684] loop3: detected capacity change from 0 to 256 [ 269.402843][ T7684] exfat: Deprecated parameter 'namecase' [ 269.402935][ T7684] exfat: Deprecated parameter 'namecase' [ 269.402957][ T7684] exfat: Deprecated parameter 'utf8' [ 269.415530][ T7684] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 269.693215][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 269.772293][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 270.069205][ T7338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.200556][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 270.398312][ T7338] team0: Port device team_slave_0 added [ 270.412205][ T7696] loop2: detected capacity change from 0 to 64 [ 270.439632][ T7338] team0: Port device team_slave_1 added [ 270.448655][ T7700] loop3: detected capacity change from 0 to 256 [ 270.665647][ T7700] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 270.746297][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.746313][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.746336][ T7338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.808169][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.808184][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.808210][ T7338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.981545][ T7338] hsr_slave_0: entered promiscuous mode [ 270.983594][ T7338] hsr_slave_1: entered promiscuous mode [ 270.985415][ T7338] debugfs: 'hsr0' already exists in 'hsr' [ 270.985437][ T7338] Cannot create hsr debugfs directory [ 271.577978][ T7725] netlink: 32 bytes leftover after parsing attributes in process `syz.1.578'. [ 272.078225][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 272.247543][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 272.247576][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.247609][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 272.247629][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.301121][ T9] usb 2-1: config 0 descriptor?? [ 273.852101][ T9] hid_parser_main: 46 callbacks suppressed [ 273.852125][ T9] isku 0003:1E7D:319C.0003: unknown main item tag 0x1 [ 273.852165][ T9] isku 0003:1E7D:319C.0003: item fetching failed at offset 6/7 [ 273.852861][ T9] isku 0003:1E7D:319C.0003: parse failed [ 273.852932][ T9] isku 0003:1E7D:319C.0003: probe with driver isku failed with error -22 [ 273.893214][ T9] usb 2-1: USB disconnect, device number 6 [ 274.211647][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 274.352225][ T5742] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 274.570280][ T5742] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 274.570311][ T5742] usb 1-1: config 0 interface 0 has no altsetting 0 [ 274.570336][ T5742] usb 1-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.00 [ 274.570354][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.620426][ T5742] usb 1-1: config 0 descriptor?? [ 274.624814][ T7764] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 275.261996][ T5742] apple 0003:05AC:0259.0004: ignoring exceeding usage max [ 275.288456][ T5742] apple 0003:05AC:0259.0004: hidraw0: USB HID v0.0c Device [HID 05ac:0259] on usb-dummy_hcd.0-1/input0 [ 276.195459][ T9] usb 1-1: USB disconnect, device number 5 [ 276.455834][ T7794] fido_id[7794]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 276.854475][ T7797] vlan2: entered allmulticast mode [ 276.854496][ T7797] bond0: entered allmulticast mode [ 276.854509][ T7797] bond_slave_0: entered allmulticast mode [ 276.854534][ T7797] bond_slave_1: entered allmulticast mode [ 279.111000][ T5731] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 279.273480][ T5731] usb 3-1: config 251 has an invalid interface number: 254 but max is 0 [ 279.273508][ T5731] usb 3-1: config 251 has no interface number 0 [ 279.273539][ T5731] usb 3-1: config 251 interface 254 has no altsetting 0 [ 279.304590][ T5731] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=e1.c1 [ 279.304619][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.304636][ T5731] usb 3-1: Product: syz [ 279.304648][ T5731] usb 3-1: Manufacturer: syz [ 279.304662][ T5731] usb 3-1: SerialNumber: syz [ 279.933611][ T5731] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:251.254/input/input9 [ 280.135807][ T5731] usb 3-1: USB disconnect, device number 5 [ 281.013939][ T7338] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 281.313197][ T7338] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 281.320547][ T7338] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 281.393302][ T7338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 281.400087][ T7338] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 281.472444][ T7338] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 281.631466][ T7338] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 281.678727][ T7888] loop3: detected capacity change from 0 to 40427 [ 281.782856][ T7338] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 281.796985][ T7884] loop0: detected capacity change from 0 to 40427 [ 281.962873][ T7884] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 281.962898][ T7884] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 282.088641][ T7888] F2FS-fs (loop3): invalid crc value [ 282.089692][ T7884] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 282.108808][ T7916] loop1: detected capacity change from 0 to 128 [ 282.146774][ T7916] FAT-fs (loop1): bogus number of FAT sectors [ 282.146794][ T7916] FAT-fs (loop1): Can't find a valid FAT filesystem [ 282.887343][ T7936] netlink: 64 bytes leftover after parsing attributes in process `syz.2.633'. [ 283.213098][ T7338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.337357][ T7946] loop2: detected capacity change from 0 to 256 [ 283.338555][ T7946] exfat: Deprecated parameter 'utf8' [ 283.412727][ T7946] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 283.416288][ T7338] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.574465][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.576330][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.657372][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.657550][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.849273][ T7884] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 283.928506][ T5925] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 284.025026][ T7888] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 284.102016][ T5925] usb 2-1: unable to get BOS descriptor or descriptor too short [ 284.107350][ T5925] usb 2-1: not running at top speed; connect to a high speed hub [ 284.110413][ T5925] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 192, changing to 4 [ 284.123781][ T5925] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 284.123822][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.123841][ T5925] usb 2-1: Product: syz [ 284.123863][ T5925] usb 2-1: Manufacturer: syz [ 284.123877][ T5925] usb 2-1: SerialNumber: syz [ 284.397519][ T7888] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 284.397569][ T7888] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 284.397598][ T7888] F2FS-fs (loop3): Start checkpoint disabled! [ 284.665571][ T5925] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 284.706789][ T5925] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 285.037386][ T7888] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 285.037634][ T7888] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 285.367382][ T5925] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 285.424752][ T5925] usb 2-1: USB disconnect, device number 7 [ 285.928036][ T6545] udevd[6545]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.238368][ T7338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.347386][ T7980] random: crng reseeded on system resumption [ 287.299057][ T7338] veth0_vlan: entered promiscuous mode [ 287.386498][ T8002] : renamed from bond0 (while UP) [ 287.462351][ T7338] veth1_vlan: entered promiscuous mode [ 287.782666][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 287.815749][ T7338] veth0_macvtap: entered promiscuous mode [ 287.906681][ T7338] veth1_macvtap: entered promiscuous mode [ 287.975545][ T8020] Bluetooth: MGMT ver 1.23 [ 288.034299][ T7338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.078609][ T7338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.185592][ T3328] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.201366][ T3328] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.203467][ T3588] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.235918][ T3588] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.642643][ T5623] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 289.439077][ T6103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.439095][ T6103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.889360][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.889380][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.001129][ T5623] Bluetooth: hci0: command 0x0406 tx timeout [ 290.476820][ T8063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.679'. [ 290.547722][ T8065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.679'. [ 290.579436][ T5924] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 290.733379][ T5924] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 290.733395][ T5924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.733405][ T5924] usb 2-1: config 0 has no interface number 0 [ 290.735365][ T5924] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 290.735382][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.735392][ T5924] usb 2-1: Product: syz [ 290.735400][ T5924] usb 2-1: Manufacturer: syz [ 290.735408][ T5924] usb 2-1: SerialNumber: syz [ 290.797018][ T5924] usb 2-1: config 0 descriptor?? [ 290.911044][ T5731] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 291.024918][ T5924] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 291.041871][ T5924] usb 2-1: USB disconnect, device number 8 [ 291.105998][ T5731] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 291.106029][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.106048][ T5731] usb 1-1: Product: syz [ 291.106061][ T5731] usb 1-1: Manufacturer: syz [ 291.106076][ T5731] usb 1-1: SerialNumber: syz [ 291.134859][ T5731] usb 1-1: config 0 descriptor?? [ 291.230685][ T8074] netlink: 436 bytes leftover after parsing attributes in process `syz.2.681'. [ 291.230721][ T8074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'. [ 291.369093][ T5731] usb 1-1: ignoring: probably an ADSL modem [ 291.404368][ T8078] netlink: 44 bytes leftover after parsing attributes in process `syz.3.682'. [ 291.761331][ T5925] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 291.857147][ T5731] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 291.923823][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 291.928480][ T5925] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 291.928506][ T5925] usb 4-1: config 0 has no interface number 0 [ 291.928552][ T5925] usb 4-1: config 0 interface 184 has no altsetting 0 [ 291.931309][ T5925] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 291.931335][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.931354][ T5925] usb 4-1: Product: syz [ 291.931368][ T5925] usb 4-1: Manufacturer: syz [ 291.931382][ T5925] usb 4-1: SerialNumber: syz [ 292.002905][ T5925] usb 4-1: config 0 descriptor?? [ 292.013446][ T5731] usb 1-1: USB disconnect, device number 6 [ 292.073427][ T5732] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 292.231122][ T5732] usb 3-1: Using ep0 maxpacket: 32 [ 292.270489][ T5732] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 292.270526][ T5732] usb 3-1: config 0 has no interface number 0 [ 292.270573][ T5732] usb 3-1: config 0 interface 184 has no altsetting 0 [ 292.299349][ T5732] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 292.299379][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.299398][ T5732] usb 3-1: Product: syz [ 292.299412][ T5732] usb 3-1: Manufacturer: syz [ 292.299426][ T5732] usb 3-1: SerialNumber: syz [ 292.355287][ T5732] usb 3-1: config 0 descriptor?? [ 292.889494][ T5925] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 292.889524][ T5925] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 292.912339][ T5925] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 292.912368][ T5925] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 292.912386][ T5925] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 292.912403][ T5925] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 292.912647][ T5925] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 293.011753][ T5925] usb 4-1: USB disconnect, device number 6 [ 293.216668][ T5732] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 293.216698][ T5732] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 293.217204][ T5732] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 293.217228][ T5732] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 293.217246][ T5732] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 293.217263][ T5732] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 293.217543][ T5732] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 293.240134][ T5732] usb 3-1: USB disconnect, device number 6 [ 293.682240][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.696'. [ 293.682266][ T8109] block nbd0: Unsupported socket: should be TCP or UNIX. [ 294.584294][ T8137] netlink: 20 bytes leftover after parsing attributes in process `syz.5.709'. [ 294.684836][ T8139] netlink: 32 bytes leftover after parsing attributes in process `syz.0.710'. [ 294.815065][ T8139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.710'. [ 295.085967][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 295.215894][ T8153] loop2: detected capacity change from 0 to 64 [ 295.296630][ T8152] loop0: detected capacity change from 0 to 1024 [ 295.332003][ T8152] EXT4-fs: Ignoring removed bh option [ 295.355408][ T8152] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 295.414321][ T8159] loop5: detected capacity change from 0 to 256 [ 295.415413][ T8159] exfat: Deprecated parameter 'utf8' [ 295.445052][ T8152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.681074][ T8159] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 296.329009][ T6546] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 296.491198][ T6546] usb 6-1: Using ep0 maxpacket: 16 [ 296.494586][ T6546] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.494616][ T6546] usb 6-1: config 0 interface 0 has no altsetting 0 [ 296.494646][ T6546] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 296.494668][ T6546] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.495356][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.590551][ T6546] usb 6-1: config 0 descriptor?? [ 296.842813][ T8191] netlink: 'syz.0.725': attribute type 15 has an invalid length. [ 297.045039][ T8196] loop3: detected capacity change from 0 to 256 [ 297.207705][ T6546] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 297.207743][ T6546] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 297.209309][ T6546] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 297.209347][ T6546] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 297.209372][ T6546] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 297.346497][ T6546] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 297.419298][ T8206] cgroup: fork rejected by pids controller in /syz0 [ 297.868713][ T8210] loop1: detected capacity change from 0 to 2048 [ 298.014707][ T8210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 298.067232][ T6546] usb 6-1: USB disconnect, device number 2 [ 298.272634][ T8225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.745'. [ 298.573644][ T8231] loop3: detected capacity change from 0 to 512 [ 298.574749][ T8231] EXT4-fs: inline encryption not supported [ 298.586575][ T8231] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.586596][ T8231] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 298.677807][ T8233] loop2: detected capacity change from 0 to 16 [ 299.429312][ T8233] erofs (device loop2): DAX unsupported by block device. Turning off DAX. [ 299.533243][ T8238] loop1: detected capacity change from 0 to 512 [ 299.653587][ T8233] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 299.714832][ T8233] erofs (device loop2): mounted with root inode @ nid 36. [ 299.767929][ T8238] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 299.864543][ T8231] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 1 [ 299.864678][ T8231] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 299.864729][ T8231] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.749: Failed to acquire dquot type 1 [ 299.864957][ T8231] loop3: lost filesystem error report for type 5 error -5 [ 299.870423][ T8231] EXT4-fs (loop3): Remounting filesystem read-only [ 299.870541][ T8231] EXT4-fs (loop3): 1 truncate cleaned up [ 299.977846][ T8238] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 300.036848][ T8238] Quota error (device loop1): write_blk: dquota write failed [ 300.036871][ T8238] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 300.036960][ T8238] Quota error (device loop1): write_blk: dquota write failed [ 300.037065][ T8238] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 300.037108][ T8238] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.746: Failed to acquire dquot type 1 [ 300.037128][ T8238] loop1: lost filesystem error report for type 5 error -28 [ 300.133530][ C1] EXT4-fs (loop1): initial error at time 1780060552: ext4_mb_generate_buddy:1317 [ 300.133556][ C1] EXT4-fs (loop1): last error at time 1780060552: ext4_mb_generate_buddy:1317 [ 300.214262][ T8238] EXT4-fs (loop1): 1 truncate cleaned up [ 300.348855][ T8231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.436334][ T8238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.545944][ T8247] input: syz1 as /devices/virtual/input/input10 [ 300.547703][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.814301][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.383810][ T8258] loop2: detected capacity change from 0 to 2048 [ 302.816611][ T8258] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.842727][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.696332][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.778806][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.791220][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.867979][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.868694][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.630285][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.000978][ T5623] Bluetooth: hci0: command tx timeout [ 307.850680][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.084849][ T5623] Bluetooth: hci0: command tx timeout [ 309.269453][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.320339][ T5925] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 309.484227][ T5925] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 309.490572][ T5925] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 309.490599][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.490617][ T5925] usb 3-1: Product: syz [ 309.490631][ T5925] usb 3-1: Manufacturer: syz [ 309.490645][ T5925] usb 3-1: SerialNumber: syz [ 309.808584][ T5925] usb 3-1: USB disconnect, device number 7 [ 310.097336][ T8354] loop5: detected capacity change from 0 to 64 [ 310.161142][ T5623] Bluetooth: hci0: command tx timeout [ 310.793133][ T821] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 310.951488][ T821] usb 3-1: Using ep0 maxpacket: 8 [ 310.964074][ T821] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 310.964103][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 310.964122][ T821] usb 3-1: Product: syz [ 310.964135][ T821] usb 3-1: Manufacturer: syz [ 310.964149][ T821] usb 3-1: SerialNumber: syz [ 311.038473][ T821] usb 3-1: config 0 descriptor?? [ 311.068661][ T821] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 311.262662][ T821] gspca_sn9c2028: read1 error -32 [ 311.263773][ T821] gspca_sn9c2028: read1 error -32 [ 311.674241][ T821] usb 3-1: USB disconnect, device number 8 [ 312.131464][ T8382] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 312.241180][ T5623] Bluetooth: hci0: command tx timeout [ 313.715146][ T68] bridge_slave_1: left allmulticast mode [ 313.715189][ T68] bridge_slave_1: left promiscuous mode [ 313.715476][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.798289][ T8424] program syz.2.809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.858984][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.810'. [ 314.872726][ T68] bridge_slave_0: left allmulticast mode [ 314.872759][ T68] bridge_slave_0: left promiscuous mode [ 314.873012][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.001113][ T6103] wlan1: Trigger new scan to find an IBSS to join [ 316.291838][ T68]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.371580][ T68]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.412874][ T68]  (unregistering): Released all slaves [ 316.419400][ T68] bond1 (unregistering): Released all slaves [ 316.591613][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 316.698661][ T8441] gretap0: entered promiscuous mode [ 316.701010][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.815'. [ 316.701141][ T8443] gretap0: left promiscuous mode [ 316.726912][ T68] tipc: Left network mode [ 317.013461][ T8454] loop5: detected capacity change from 0 to 1024 [ 317.016417][ T8454] EXT4-fs: Ignoring removed bh option [ 317.291792][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.291884][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.408890][ T8288] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.409363][ T8288] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.409705][ T8288] bridge_slave_0: entered allmulticast mode [ 317.464073][ T8288] bridge_slave_0: entered promiscuous mode [ 317.474163][ T8288] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.474552][ T8288] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.474813][ T8288] bridge_slave_1: entered allmulticast mode [ 317.477510][ T8288] bridge_slave_1: entered promiscuous mode [ 317.515866][ T8454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.122754][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 318.302607][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 318.306541][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 318.306566][ T9] usb 2-1: config 0 has no interface number 0 [ 318.306605][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 318.313168][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 318.313196][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.313216][ T9] usb 2-1: Product: syz [ 318.313230][ T9] usb 2-1: Manufacturer: syz [ 318.313244][ T9] usb 2-1: SerialNumber: syz [ 318.328452][ T9] usb 2-1: config 0 descriptor?? [ 318.858189][ T7338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.876841][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 318.876870][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 318.876888][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 318.877171][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 319.683009][ T6104] wlan1: Trigger new scan to find an IBSS to join [ 319.868615][ T8288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.887916][ T8288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.918239][ T9] usb 2-1: USB disconnect, device number 9 [ 320.247872][ T8288] team0: Port device team_slave_0 added [ 320.250711][ T8288] team0: Port device team_slave_1 added [ 320.255537][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 320.399389][ T8504] loop3: detected capacity change from 0 to 256 [ 320.400398][ T8504] exfat: Deprecated parameter 'utf8' [ 320.400488][ T8504] exfat: Deprecated parameter 'utf8' [ 320.431193][ T8504] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 320.591239][ T821] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 320.633804][ T3328] wlan1: Creating new IBSS network, BSSID f2:9c:4f:d0:0f:86 [ 320.753454][ T821] usb 6-1: config 0 has no interfaces? [ 320.760347][ T821] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 320.760382][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.760401][ T821] usb 6-1: Product: syz [ 320.760415][ T821] usb 6-1: Manufacturer: syz [ 320.760428][ T821] usb 6-1: SerialNumber: syz [ 320.775978][ T821] usb 6-1: config 0 descriptor?? [ 320.954967][ T8288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.954978][ T8288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.954992][ T8288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.961375][ T5925] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 321.072906][ T821] usb 6-1: USB disconnect, device number 3 [ 321.156063][ T8288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.156078][ T8288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.156098][ T8288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.199874][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 321.212926][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 321.212958][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 321.233092][ T8517] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 321.233092][ T8517] The task syz.2.833 (8517) triggered the difference, watch for misbehavior. [ 321.246067][ T5925] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 321.246095][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.246113][ T5925] usb 4-1: Product: syz [ 321.246127][ T5925] usb 4-1: Manufacturer: syz [ 321.246140][ T5925] usb 4-1: SerialNumber: syz [ 321.418505][ T5925] usb 4-1: config 0 descriptor?? [ 321.468386][ T5925] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 321.468422][ T5925] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 321.508846][ T8288] hsr_slave_0: entered promiscuous mode [ 321.516807][ T8288] hsr_slave_1: entered promiscuous mode [ 321.518317][ T8288] debugfs: 'hsr0' already exists in 'hsr' [ 321.518339][ T8288] Cannot create hsr debugfs directory [ 322.066712][ T5925] em28xx 4-1:0.0: chip ID is em2874 [ 322.135419][ T68] hsr_slave_0: left promiscuous mode [ 322.180239][ T68] hsr_slave_1: left promiscuous mode [ 322.181517][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.181540][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.212144][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.212170][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.274966][ T5732] usb 4-1: USB disconnect, device number 7 [ 322.279146][ T5732] em28xx 4-1:0.0: Disconnecting em28xx [ 322.429026][ T5732] em28xx 4-1:0.0: Freeing device [ 322.586643][ T68] veth1_macvtap: left promiscuous mode [ 322.592470][ T68] veth0_macvtap: left promiscuous mode [ 322.592746][ T68] veth1_vlan: left promiscuous mode [ 322.592919][ T68] veth0_vlan: left promiscuous mode [ 322.783424][ T8544] loop2: detected capacity change from 0 to 512 [ 323.159543][ T8548] capability: warning: `syz.3.840' uses 32-bit capabilities (legacy support in use) [ 323.504837][ T8552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.914023][ T8558] loop2: detected capacity change from 0 to 512 [ 323.918234][ T8558] EXT4-fs: Ignoring removed bh option [ 323.959734][ T8558] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 324.004296][ T8558] EXT4-fs (loop2): 1 truncate cleaned up [ 324.007728][ T8558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.029580][ T68] team0 (unregistering): Port device team_slave_1 removed [ 324.133032][ T68] team0 (unregistering): Port device team_slave_0 removed [ 324.218747][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.509961][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 324.686198][ T8567] loop5: detected capacity change from 0 to 512 [ 325.700240][ T8567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.933874][ T8583] loop3: detected capacity change from 0 to 764 [ 326.076021][ T7338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.559219][ T8595] loop1: detected capacity change from 0 to 512 [ 326.569723][ T8595] EXT4-fs: Ignoring removed i_version option [ 326.889587][ T8595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.889737][ T8595] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.074647][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.090231][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 328.253082][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.253108][ T9] usb 6-1: config 0 has no interfaces? [ 328.274386][ T9] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 328.274417][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.274435][ T9] usb 6-1: Product: syz [ 328.274449][ T9] usb 6-1: Manufacturer: syz [ 328.274462][ T9] usb 6-1: SerialNumber: syz [ 328.336758][ T9] usb 6-1: config 0 descriptor?? [ 328.644763][ T5732] usb 6-1: USB disconnect, device number 4 [ 329.978247][ T8661] loop2: detected capacity change from 0 to 2048 [ 330.154397][ T8661] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 330.159081][ T8661] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.828027][ T8714] loop5: detected capacity change from 0 to 8192 [ 333.933639][ T8701] loop1: detected capacity change from 0 to 131072 [ 333.954011][ T8701] F2FS-fs (loop1): invalid crc value [ 334.067117][ T8701] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 334.094153][ T8701] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 336.342347][ T8742] loop2: detected capacity change from 0 to 512 [ 336.358684][ T8742] EXT4-fs: Ignoring removed i_version option [ 336.358737][ T8742] EXT4-fs: Ignoring removed mblk_io_submit option [ 336.643478][ T8742] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 336.692604][ T8742] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 336.744174][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 336.744201][ C1] EXT4-fs (loop2): initial error at time 1780060588: ext4_mb_generate_buddy:1317 [ 336.744217][ C1] EXT4-fs (loop2): last error at time 1780060588: ext4_mb_generate_buddy:1317 [ 336.817056][ T8742] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.893: attempt to clear invalid blocks 33619980 len 1 [ 336.817094][ T8742] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 336.957555][ T8742] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.893: invalid indirect mapped block 1819239214 (level 0) [ 336.957594][ T8742] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 336.964603][ T8742] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.893: invalid indirect mapped block 1819239214 (level 1) [ 336.964637][ T8742] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 336.990539][ T8742] EXT4-fs (loop2): 1 truncate cleaned up [ 336.995003][ T8742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.003682][ T8742] EXT4-fs (loop2): shut down requested (1) [ 337.135886][ T8752] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 337.203752][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.875467][ T8288] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 338.167364][ T8771] Bluetooth: MGMT ver 1.23 [ 338.280137][ T8288] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 338.296012][ T8288] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 338.446974][ T8288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 338.480399][ T8288] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 338.617347][ T8288] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 338.630307][ T8288] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 338.788074][ T8288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.218597][ T8288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.748622][ T8820] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 340.870037][ T8824] capability: warning: `syz.3.911' uses deprecated v2 capabilities in a way that may be insecure [ 341.116616][ T8288] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.302492][ T3368] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.302694][ T3368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.327281][ T8832] bridge0: entered allmulticast mode [ 341.642834][ T8832] bridge0: left allmulticast mode [ 342.382119][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.474771][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.865502][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 343.602910][ T6546] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 343.766264][ T6546] usb 4-1: Using ep0 maxpacket: 16 [ 343.774598][ T6546] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.774652][ T6546] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.774680][ T6546] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 343.777689][ T6546] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 343.777715][ T6546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 343.777735][ T6546] usb 4-1: SerialNumber: syz [ 343.866365][ T6546] hub 4-1:1.0: bad descriptor, ignoring hub [ 343.866403][ T6546] hub 4-1:1.0: probe with driver hub failed with error -5 [ 343.868511][ T6546] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 343.947594][ T8893] netlink: 36 bytes leftover after parsing attributes in process `syz.5.928'. [ 343.982589][ T8889] loop1: detected capacity change from 0 to 4096 [ 344.129238][ T8889] EXT4-fs (loop1): Test dummy encryption mode enabled [ 344.221096][ T6546] usb 4-1: USB disconnect, device number 8 [ 344.286167][ T8889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.610551][ T8889] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 344.769828][ T8913] loop2: detected capacity change from 0 to 128 [ 344.814061][ T8288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.893681][ T8913] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 345.015817][ T8913] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 345.206138][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.253899][ T5732] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 345.304018][ T5615] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.515303][ T5732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 345.515351][ T5732] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 345.515373][ T5732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.520643][ T5732] usb 6-1: config 0 descriptor?? [ 345.524947][ T8920] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 345.650426][ T8288] veth0_vlan: entered promiscuous mode [ 345.732216][ T8920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.732840][ T8920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.734987][ T8920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.735413][ T8920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.071606][ T8288] veth1_vlan: entered promiscuous mode [ 346.156722][ T5732] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 346.156759][ T5732] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 346.156785][ T5732] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 346.156811][ T5732] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 346.156835][ T5732] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 346.156861][ T5732] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 346.199797][ T5732] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 346.199839][ T5732] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 346.199866][ T5732] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 346.199891][ T5732] uclogic 0003:5543:0064.0006: unknown main item tag 0x0 [ 346.346061][ T5732] uclogic 0003:5543:0064.0006: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.5-1/input0 [ 346.442512][ T8288] veth0_macvtap: entered promiscuous mode [ 346.521097][ T5732] usb 6-1: USB disconnect, device number 5 [ 346.585240][ T8288] veth1_macvtap: entered promiscuous mode [ 346.622045][ T8936] fido_id[8936]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 347.006690][ T8288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.115063][ T8288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.230944][ T6104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.235214][ T6104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.236691][ T6104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.241828][ T6104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.447031][ T8957] overlay: filesystem on ./file0 is read-only [ 347.932444][ T8963] loop1: detected capacity change from 0 to 256 [ 348.616175][ T8963] FAT-fs (loop1): Directory bread(block 64) failed [ 348.616209][ T8963] FAT-fs (loop1): Directory bread(block 65) failed [ 348.616320][ T8963] FAT-fs (loop1): Directory bread(block 66) failed [ 348.616342][ T8963] FAT-fs (loop1): Directory bread(block 67) failed [ 348.616438][ T8963] FAT-fs (loop1): Directory bread(block 68) failed [ 348.616460][ T8963] FAT-fs (loop1): Directory bread(block 69) failed [ 348.616550][ T8963] FAT-fs (loop1): Directory bread(block 70) failed [ 348.616571][ T8963] FAT-fs (loop1): Directory bread(block 71) failed [ 348.616665][ T8963] FAT-fs (loop1): Directory bread(block 72) failed [ 348.616686][ T8963] FAT-fs (loop1): Directory bread(block 73) failed [ 348.853905][ T8969] mmap: syz.3.953 (8969): VmData 175874048 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 349.005255][ T3368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.005274][ T3368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.085422][ T38] audit: type=1326 audit(1780060601.331:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.2.955" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34e0d8ce59 code=0x0 [ 349.235008][ T6104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.235028][ T6104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.322711][ T5742] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 349.379653][ T8977] loop1: detected capacity change from 0 to 128 [ 349.471053][ T5742] usb 4-1: Using ep0 maxpacket: 16 [ 349.474554][ T5742] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 349.474643][ T5742] usb 4-1: config 0 has no interface number 0 [ 349.479860][ T5742] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 349.479888][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.479907][ T5742] usb 4-1: Product: syz [ 349.479922][ T5742] usb 4-1: Manufacturer: syz [ 349.479937][ T5742] usb 4-1: SerialNumber: syz [ 349.566278][ T5742] usb 4-1: config 0 descriptor?? [ 349.595386][ T5742] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 350.531501][ T5742] gspca_spca1528: reg_w err -71 [ 350.551113][ T5742] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 350.639791][ T197] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 350.712731][ T5742] usb 4-1: USB disconnect, device number 9 [ 351.216560][ T8982] loop0: detected capacity change from 0 to 40427 [ 351.229580][ T8982] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 351.229603][ T8982] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 351.233447][ T8982] F2FS-fs (loop0): invalid crc value [ 351.351782][ T5732] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 351.391058][ T5742] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 351.455500][ T8982] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 351.518272][ T5732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 351.518293][ T5732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.518313][ T5732] usb 6-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 351.518325][ T5732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.522033][ T5732] usb 6-1: config 0 descriptor?? [ 351.604941][ T5742] usb 2-1: Using ep0 maxpacket: 16 [ 351.678225][ T5742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.678260][ T5742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.678280][ T5742] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 351.678319][ T5742] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 351.678340][ T5742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.752919][ T5742] usb 2-1: config 0 descriptor?? [ 352.059751][ T5732] hid_parser_main: 372 callbacks suppressed [ 352.059776][ T5732] wacom 0003:056A:5012.0007: unknown main item tag 0x0 [ 352.059805][ T5732] wacom 0003:056A:5012.0007: unknown main item tag 0x0 [ 352.059829][ T5732] wacom 0003:056A:5012.0007: unknown main item tag 0x0 [ 352.059855][ T5732] wacom 0003:056A:5012.0007: unknown main item tag 0x0 [ 352.059880][ T5732] wacom 0003:056A:5012.0007: unknown main item tag 0x0 [ 352.059906][ T5732] wacom 0003:056A:5012.0007: unknown main item tag 0x0 [ 352.059930][ T5732] wacom 0003:056A:5012.0007: unknown main item tag 0x0 [ 352.059955][ T5732] wacom 0003:056A:5012.0007: unknown main item tag 0x0 [ 352.059980][ T5732] wacom 0003:056A:5012.0007: unknown main item tag 0x0 [ 352.060006][ T5732] wacom 0003:056A:5012.0007: unknown main item tag 0x0 [ 352.071004][ T8982] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 352.071040][ T8982] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 352.073018][ T5732] wacom 0003:056A:5012.0007: reserved main item tag 0xd [ 352.080648][ T5732] wacom 0003:056A:5012.0007: Unknown device_type for 'HID 056a:5012'. Ignoring. [ 352.127499][ T8982] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 352.228975][ T8999] loop1: detected capacity change from 0 to 8 [ 352.270319][ T5732] usb 6-1: USB disconnect, device number 6 [ 352.354744][ T5742] microsoft 0003:045E:07DA.0008: item fetching failed at offset 27/34 [ 352.355510][ T5742] microsoft 0003:045E:07DA.0008: parse failed [ 352.355602][ T5742] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 352.408398][ T9015] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.971'. [ 352.568074][ T5925] usb 2-1: USB disconnect, device number 10 [ 353.440063][ T9029] loop0: detected capacity change from 0 to 16 [ 353.673967][ T9029] erofs (device loop0): mounted with root inode @ nid 36. [ 353.873070][ T9029] syz.0.970: attempt to access beyond end of device [ 353.873070][ T9029] loop0: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 353.956699][ T9029] syz.0.970: attempt to access beyond end of device [ 353.956699][ T9029] loop0: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 353.978122][ T38] audit: type=1800 audit(1780060606.221:15): pid=9029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.970" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 354.387294][ T9047] loop5: detected capacity change from 0 to 1024 [ 354.482166][ T9047] EXT4-fs: Ignoring removed bh option [ 354.536258][ T9047] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 354.566220][ T9051] loop3: detected capacity change from 0 to 128 [ 354.797051][ T9051] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 354.797106][ T9051] hpfs: filesystem error: improperly stopped [ 354.797121][ T9051] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 354.797225][ T9051] hpfs: You really don't want any checks? You are crazy... [ 354.798032][ T9051] hpfs: hpfs_map_sector(): read error [ 354.798047][ T9051] hpfs: code page support is disabled [ 354.798535][ T9051] hpfs: hpfs_map_4sectors(): unaligned read [ 354.798631][ T9051] hpfs: hpfs_map_4sectors(): unaligned read [ 354.798642][ T9051] hpfs: filesystem error: unable to find root dir [ 354.884367][ T9051] hpfs: hpfs_map_4sectors(): unaligned read [ 354.885782][ T9051] hpfs: hpfs_map_sector(): read error [ 354.911810][ T9051] hpfs: hpfs_map_4sectors(): unaligned read [ 354.911839][ T9051] hpfs: hpfs_map_sector(): read error [ 356.240981][ T5733] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 356.493086][ T5733] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 356.493122][ T5733] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 356.494527][ T5733] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 356.494555][ T5733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 356.494575][ T5733] usb 6-1: SerialNumber: syz [ 356.538141][ T9080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.997'. [ 356.590521][ T5733] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 356.606738][ T5733] usb-storage 6-1:1.0: USB Mass Storage device detected [ 356.626352][ T5733] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 356.657227][ T5733] scsi host1: usb-storage 6-1:1.0 [ 356.723223][ T9087] loop8: detected capacity change from 0 to 7 [ 356.940404][ T9087] Dev loop8: unable to read RDB block 7 [ 356.940446][ T9087] loop8: unable to read partition table [ 356.940648][ T9087] loop8: partition table beyond EOD, truncated [ 356.940695][ T9087] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 357.061073][ T9091] loop3: detected capacity change from 0 to 256 [ 357.531510][ T5731] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 357.691144][ T5731] usb 1-1: Using ep0 maxpacket: 8 [ 357.711936][ T5731] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 357.711966][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.711986][ T5731] usb 1-1: Product: syz [ 357.712005][ T5731] usb 1-1: Manufacturer: syz [ 357.712020][ T5731] usb 1-1: SerialNumber: syz [ 357.807728][ T5731] usb 1-1: config 0 descriptor?? [ 357.854373][ T5731] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 358.034999][ T9113] loop3: detected capacity change from 0 to 512 [ 358.055868][ T9117] io-wq is not configured for unbound workers [ 358.966851][ T5732] usb 1-1: USB disconnect, device number 7 [ 359.037373][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 359.037554][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 359.104238][ T9113] EXT4-fs (loop3): 1 orphan inode deleted [ 359.105814][ T9113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.106154][ T9113] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.163490][ T13] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 359.163697][ T13] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 359.458191][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.863447][ T5925] usb 6-1: USB disconnect, device number 7 [ 363.279021][ T9177] loop0: detected capacity change from 0 to 256 [ 369.109502][ T9255] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1065'. [ 369.112670][ T9255] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1065'. [ 370.443136][ T5756] IPVS: starting estimator thread 0... [ 370.567191][ T9278] IPVS: using max 10 ests per chain, 24000 per kthread [ 370.712229][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1072'. [ 372.172474][ T5742] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 372.322207][ T5742] usb 6-1: Using ep0 maxpacket: 16 [ 372.338810][ T5742] usb 6-1: unable to get BOS descriptor or descriptor too short [ 372.340272][ T5742] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.340295][ T5742] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 372.340355][ T5742] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 372.340397][ T5742] usb 6-1: config 1 interface 1 has no altsetting 0 [ 372.356524][ T5742] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 372.356562][ T5742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.356583][ T5742] usb 6-1: Product: syz [ 372.356597][ T5742] usb 6-1: Manufacturer: syz [ 372.356612][ T5742] usb 6-1: SerialNumber: syz [ 372.446357][ T5733] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 372.593281][ T5733] usb 3-1: Using ep0 maxpacket: 32 [ 372.601035][ T5733] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 372.601059][ T5733] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.601078][ T5733] usb 3-1: config 0 has no interface number 0 [ 372.601118][ T5733] usb 3-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.645729][ T5733] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 372.645757][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.645777][ T5733] usb 3-1: Product: syz [ 372.645791][ T5733] usb 3-1: Manufacturer: syz [ 372.645805][ T5733] usb 3-1: SerialNumber: syz [ 372.658489][ T5733] usb 3-1: config 0 descriptor?? [ 372.707994][ T5733] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input15 [ 372.749935][ T5742] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 372.750366][ T5742] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 372.885457][ T9292] loop2: detected capacity change from 0 to 128 [ 373.038737][ T5742] usb 6-1: 1:2 : does not exist [ 373.251746][ T9292] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 373.528181][ T5742] usb 6-1: USB disconnect, device number 8 [ 373.926398][ T9018] udevd[9018]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.369379][ T5731] usb 3-1: USB disconnect, device number 9 [ 377.514182][ T9346] loop1: detected capacity change from 0 to 256 [ 377.603235][ T9329] ================================================================== [ 377.603235][ T9329] ================================================================== [ 377.603251][ T9329] BUG: KASAN: slab-use-after-free in reverse_path_check_proc+0x5b/0x240 [ 377.603279][ T9329] Read of size 8 at addr ffff88802077e7a0 by task syz.0.1090/9329 [ 377.603296][ T9329] [ 377.603311][ T9329] CPU: 1 UID: 0 PID: 9329 Comm: syz.0.1090 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 377.603336][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 377.603354][ T9329] Call Trace: [ 377.603365][ T9329] [ 377.603374][ T9329] dump_stack_lvl+0xe8/0x150 [ 377.603403][ T9329] print_address_description+0x55/0x1e0 [ 377.603430][ T9329] ? reverse_path_check_proc+0x5b/0x240 [ 377.603451][ T9329] print_report+0x58/0x70 [ 377.603475][ T9329] kasan_report+0x117/0x150 [ 377.603504][ T9329] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 377.603540][ T9329] ? reverse_path_check_proc+0x5b/0x240 [ 377.603562][ T9329] ? ep_insert+0xbbb/0x1820 [ 377.603587][ T9329] reverse_path_check_proc+0x5b/0x240 [ 377.603610][ T9329] ? ep_insert+0xbbb/0x1820 [ 377.603638][ T9329] ep_insert+0xc6c/0x1820 [ 377.603674][ T9329] ? __pfx_ep_insert+0x10/0x10 [ 377.603708][ T9329] ? lockdep_hardirqs_on+0x7a/0x110 [ 377.603728][ T9329] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 377.603756][ T9329] ? mutex_lock_nested+0x152/0x1d0 [ 377.603778][ T9329] ? do_epoll_ctl_file+0xc69/0xed0 [ 377.603804][ T9329] do_epoll_ctl_file+0x8bb/0xed0 [ 377.603830][ T9329] ? do_epoll_ctl_file+0xac3/0xed0 [ 377.603859][ T9329] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 377.603890][ T9329] ? __fget_files+0x3a6/0x420 [ 377.603914][ T9329] ? __fget_files+0x2a/0x420 [ 377.603942][ T9329] __se_sys_epoll_ctl+0x14e/0x210 [ 377.603971][ T9329] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 377.604004][ T9329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.604025][ T9329] do_syscall_64+0x174/0x580 [ 377.604045][ T9329] ? trace_irq_disable+0x3b/0x140 [ 377.604069][ T9329] ? clear_bhb_loop+0x40/0x90 [ 377.604090][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.604111][ T9329] RIP: 0033:0x7fbca107ce59 [ 377.604138][ T9329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.604157][ T9329] RSP: 002b:00007fbc9f2b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 377.604186][ T9329] RAX: ffffffffffffffda RBX: 00007fbca12f6090 RCX: 00007fbca107ce59 [ 377.604202][ T9329] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 377.604216][ T9329] RBP: 00007fbca1112d6f R08: 0000000000000000 R09: 0000000000000000 [ 377.604233][ T9329] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.604247][ T9329] R13: 00007fbca12f6128 R14: 00007fbca12f6090 R15: 00007ffd329d92d8 [ 377.604271][ T9329] [ 377.604279][ T9329] [ 377.604284][ T9329] Allocated by task 9327: [ 377.604294][ T9329] kasan_save_track+0x3e/0x80 [ 377.604318][ T9329] __kasan_slab_alloc+0x6c/0x80 [ 377.604341][ T9329] kmem_cache_alloc_noprof+0x33b/0x680 [ 377.604363][ T9329] ep_insert+0x512/0x1820 [ 377.604388][ T9329] do_epoll_ctl_file+0x8bb/0xed0 [ 377.604413][ T9329] __se_sys_epoll_ctl+0x14e/0x210 [ 377.604439][ T9329] do_syscall_64+0x174/0x580 [ 377.604456][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.604474][ T9329] [ 377.604479][ T9329] Freed by task 9327: [ 377.604488][ T9329] kasan_save_track+0x3e/0x80 [ 377.604510][ T9329] kasan_save_free_info+0x46/0x50 [ 377.604526][ T9329] __kasan_slab_free+0x5c/0x80 [ 377.604549][ T9329] kmem_cache_free+0x187/0x6c0 [ 377.604574][ T9329] eventpoll_release_file+0xc2/0x240 [ 377.604600][ T9329] __fput+0x83c/0xa70 [ 377.604626][ T9329] task_work_run+0x1d9/0x270 [ 377.604650][ T9329] get_signal+0x11eb/0x1330 [ 377.604679][ T9329] arch_do_signal_or_restart+0xbc/0x840 [ 377.604700][ T9329] exit_to_user_mode_loop+0xa9/0x680 [ 377.604720][ T9329] do_syscall_64+0x353/0x580 [ 377.604736][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.604752][ T9329] [ 377.604757][ T9329] The buggy address belongs to the object at ffff88802077e7a0 [ 377.604757][ T9329] which belongs to the cache ep_head of size 16 [ 377.604773][ T9329] The buggy address is located 0 bytes inside of [ 377.604773][ T9329] freed 16-byte region [ffff88802077e7a0, ffff88802077e7b0) [ 377.604794][ T9329] [ 377.604799][ T9329] The buggy address belongs to the physical page: [ 377.604818][ T9329] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802077e000 pfn:0x2077e [ 377.604838][ T9329] memcg:ffff88803a6d5801 [ 377.604846][ T9329] flags: 0x80000000000200(workingset|node=0|zone=1) [ 377.604866][ T9329] page_type: f5(slab) [ 377.604884][ T9329] raw: 0080000000000200 ffff88814041ec80 ffffea0000fa8a90 ffffea0000fc8810 [ 377.604903][ T9329] raw: ffff88802077e000 0000000800800013 00000000f5000000 ffff88803a6d5801 [ 377.604914][ T9329] page dumped because: kasan: bad access detected [ 377.604927][ T9329] page_owner tracks the page as allocated [ 377.604934][ T9329] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4976, tgid 4976 (udevd), ts 25995625202, free_ts 23063899237 [ 377.604969][ T9329] post_alloc_hook+0x1f9/0x250 [ 377.604992][ T9329] get_page_from_freelist+0x265c/0x26e0 [ 377.605020][ T9329] __alloc_frozen_pages_noprof+0x18d/0x380 [ 377.605048][ T9329] allocate_slab+0x74/0x5e0 [ 377.605065][ T9329] refill_objects+0x33c/0x3d0 [ 377.605082][ T9329] __pcs_replace_empty_main+0x373/0x720 [ 377.605100][ T9329] kmem_cache_alloc_noprof+0x433/0x680 [ 377.605119][ T9329] ep_insert+0x512/0x1820 [ 377.605141][ T9329] do_epoll_ctl_file+0x8bb/0xed0 [ 377.605164][ T9329] __se_sys_epoll_ctl+0x14e/0x210 [ 377.605199][ T9329] do_syscall_64+0x174/0x580 [ 377.605216][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.605234][ T9329] page last free pid 1 tgid 1 stack trace: [ 377.605244][ T9329] __free_frozen_pages+0x10af/0x1190 [ 377.605269][ T9329] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 377.605291][ T9329] __apply_to_page_range+0xbdc/0x1420 [ 377.605313][ T9329] __kasan_release_vmalloc+0xa2/0xd0 [ 377.605333][ T9329] purge_vmap_node+0x220/0x960 [ 377.605359][ T9329] __purge_vmap_area_lazy+0x779/0xb40 [ 377.605385][ T9329] _vm_unmap_aliases+0x746/0x7f0 [ 377.605406][ T9329] change_page_attr_set_clr+0x307/0xf40 [ 377.605431][ T9329] set_memory_nx+0xd6/0x110 [ 377.605453][ T9329] free_kernel_image_pages+0x85/0x100 [ 377.605473][ T9329] kernel_init+0x31/0x1d0 [ 377.605495][ T9329] ret_from_fork+0x514/0xb70 [ 377.605520][ T9329] ret_from_fork_asm+0x1a/0x30 [ 377.605550][ T9329] [ 377.605555][ T9329] Memory state around the buggy address: [ 377.605566][ T9329] ffff88802077e680: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 377.605579][ T9329] ffff88802077e700: 00 00 fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc [ 377.605591][ T9329] >ffff88802077e780: fa fb fc fc fa fb fc fc 00 00 fc fc fa fb fc fc [ 377.605600][ T9329] ^ [ 377.605611][ T9329] ffff88802077e800: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 377.605623][ T9329] ffff88802077e880: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 377.605634][ T9329] ================================================================== [ 377.620944][ T9329] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 377.620970][ T9329] CPU: 1 UID: 0 PID: 9329 Comm: syz.0.1090 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 377.620996][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 377.621009][ T9329] Call Trace: [ 377.621016][ T9329] [ 377.621025][ T9329] vpanic+0x56c/0xa60 [ 377.621059][ T9329] ? __pfx_vpanic+0x10/0x10 [ 377.621092][ T9329] panic+0xc5/0xd0 [ 377.621118][ T9329] ? __pfx_panic+0x10/0x10 [ 377.621145][ T9329] ? preempt_schedule_thunk+0x16/0x40 [ 377.621168][ T9329] ? preempt_schedule_thunk+0x16/0x40 [ 377.621197][ T9329] ? reverse_path_check_proc+0x5b/0x240 [ 377.621217][ T9329] check_panic_on_warn+0x89/0xb0 [ 377.621244][ T9329] ? reverse_path_check_proc+0x5b/0x240 [ 377.621263][ T9329] end_report+0x73/0x170 [ 377.621291][ T9329] ? reverse_path_check_proc+0x5b/0x240 [ 377.621310][ T9329] kasan_report+0x128/0x150 [ 377.621337][ T9329] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 377.621369][ T9329] ? reverse_path_check_proc+0x5b/0x240 [ 377.621391][ T9329] ? ep_insert+0xbbb/0x1820 [ 377.621419][ T9329] reverse_path_check_proc+0x5b/0x240 [ 377.621441][ T9329] ? ep_insert+0xbbb/0x1820 [ 377.621467][ T9329] ep_insert+0xc6c/0x1820 [ 377.621502][ T9329] ? __pfx_ep_insert+0x10/0x10 [ 377.621534][ T9329] ? lockdep_hardirqs_on+0x7a/0x110 [ 377.621552][ T9329] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 377.621583][ T9329] ? mutex_lock_nested+0x152/0x1d0 [ 377.621607][ T9329] ? do_epoll_ctl_file+0xc69/0xed0 [ 377.621637][ T9329] do_epoll_ctl_file+0x8bb/0xed0 [ 377.621665][ T9329] ? do_epoll_ctl_file+0xac3/0xed0 [ 377.621695][ T9329] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 377.621725][ T9329] ? __fget_files+0x3a6/0x420 [ 377.621750][ T9329] ? __fget_files+0x2a/0x420 [ 377.621778][ T9329] __se_sys_epoll_ctl+0x14e/0x210 [ 377.621809][ T9329] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 377.621842][ T9329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.621862][ T9329] do_syscall_64+0x174/0x580 [ 377.621881][ T9329] ? trace_irq_disable+0x3b/0x140 [ 377.621905][ T9329] ? clear_bhb_loop+0x40/0x90 [ 377.621928][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.621948][ T9329] RIP: 0033:0x7fbca107ce59 [ 377.621965][ T9329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.621984][ T9329] RSP: 002b:00007fbc9f2b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 377.622005][ T9329] RAX: ffffffffffffffda RBX: 00007fbca12f6090 RCX: 00007fbca107ce59 [ 377.622021][ T9329] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 377.622034][ T9329] RBP: 00007fbca1112d6f R08: 0000000000000000 R09: 0000000000000000 [ 377.622047][ T9329] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.622060][ T9329] R13: 00007fbca12f6128 R14: 00007fbca12f6090 R15: 00007ffd329d92d8 [ 377.622084][ T9329] [ 377.622433][ T9329] Kernel Offset: disabled