last executing test programs: 8m54.987644012s ago: executing program 1 (id=20): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1e, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x1943, &(0x7f0000000480)={0x0, 0x5fc5, 0x1, 0xffffffff, 0x3b5}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0xa, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(r1, r3, r2, r4, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r1, r5, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x200034d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40, 0x5f, 0x91, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x73a3, 0x4000, 0x7, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x24a04, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8m51.483337398s ago: executing program 1 (id=28): io_uring_setup(0x136b, &(0x7f00000002c0)={0x0, 0xa060, 0x40, 0xfffffffe, 0x22e}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$unix(0x1, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) pipe(&(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 8m48.667777097s ago: executing program 1 (id=33): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8m46.711116575s ago: executing program 1 (id=38): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x210805, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x584, &(0x7f0000000700)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@setneightbl={0x12, 0x43, 0x1, 0x70bd2c, 0x25dfdbff, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x8010) 8m44.587859727s ago: executing program 1 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r3, 0x1) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, 0x0}) ioctl$NBD_DISCONNECT(r4, 0xab08) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 8m42.958993197s ago: executing program 1 (id=45): syz_ublk_setup_io_uring(0x2b59, &(0x7f0000000040)={0x0, 0x30b9, 0x0, 0x8000002, 0x158}, &(0x7f0000000100), &(0x7f0000002d00), 0x0) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, 0x0, 0x4005) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 8m41.878812034s ago: executing program 32 (id=45): syz_ublk_setup_io_uring(0x2b59, &(0x7f0000000040)={0x0, 0x30b9, 0x0, 0x8000002, 0x158}, &(0x7f0000000100), &(0x7f0000002d00), 0x0) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, 0x0, 0x4005) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 7m54.498453117s ago: executing program 3 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setown(r2, 0x8, r0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000080)='@', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r4, 0x1) r5 = dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x1, @empty, 0x5b}}, 0x105, 0x6, 0xf06, 0x1, 0xe, 0x5d, 0x81}, 0x9c) 7m52.417203287s ago: executing program 3 (id=139): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0x5204, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x2) r5 = socket$unix(0x1, 0x5, 0x0) connect$unix(r5, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 7m48.351332177s ago: executing program 3 (id=147): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x20000810) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x1, r2, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x104) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002a00)={0x0, 0x0, 0x0}, 0x40000101) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0, 0x1}}, 0x40) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x1) 7m42.652542177s ago: executing program 3 (id=157): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x210805, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x584, &(0x7f0000000700)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@setneightbl={0x12, 0x43, 0x1, 0x70bd2c, 0x25dfdbff, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x8010) 7m39.205924222s ago: executing program 3 (id=161): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000300), 0x0, 0x4002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r7, @ANYBLOB="05002f"], 0x2c}}, 0x18) 7m37.999085131s ago: executing program 3 (id=163): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x6) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7m37.6396168s ago: executing program 33 (id=163): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x6) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 25.492082315s ago: executing program 6 (id=939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040845}, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_getres(0x8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f00000007c0), 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 24.079365099s ago: executing program 5 (id=941): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffff9c, 0x0, 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="00000007000000000500000000000000950000000000000038cd4ef7d44aa4bb6d83a3e35a4051785443da081c1e2664480b9b1d4c0d717ab40ff3b3ab01250696ad6b5a1648c4d915e0e7584826b472ffb9e3d75e1704789e25b2822a9fbdec9541d7d9898df2c5645a851be95a26f7422fa7dff553c83a804ff03f4709360f4b311a0a95ac412bbbc45f71be1078532feeb7"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x41, 0x0) writev(r6, &(0x7f0000005500)=[{&(0x7f0000003440)="0600", 0x2}], 0x1) listen(r5, 0x14) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r4, 0x0, 0x0, 0x800) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2b) sendto$packet(r7, &(0x7f0000000a40)="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"/579, 0xffffffffffffff09, 0x24008805, 0x0, 0x0) unshare(0xa000200) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r4, 0xc0805841, &(0x7f0000000000)={0x7, 0x2d, 0xfff, 0x101, 0x4}) r8 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r8, 0x0, 0xd, &(0x7f0000001300)=""/4083) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc048aeca, &(0x7f00000000c0)={0x6, 0x0, [{0x9c7, 0x0, 0x4}, {0x2e8, 0x0, 0x40000009}, {0x8be, 0x0, 0x8001}, {0x9b5, 0x0, 0xb}, {0x804}, {0xadc, 0x0, 0x200000400004}]}) 24.04924363s ago: executing program 4 (id=942): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x10000, &(0x7f0000000180)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x4, 0x93d5, 0x58565559, 0x7, 0x10001, 0x9, 0x9, 0x900, 0x0, 0x4, 0x0, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x50) 20.466951808s ago: executing program 4 (id=947): execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c5393120", 0xab}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d2", 0xa3}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd", 0x32}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19.197212009s ago: executing program 6 (id=949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) r2 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) execve(&(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x0) 17.512527731s ago: executing program 6 (id=950): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x50424752, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}}) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0xff00) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) sendmsg$tipc(r3, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)}, 0x2000c8c0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 17.408884293s ago: executing program 2 (id=951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000000c00078008000640000000200500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240", @ANYBLOB="01"], 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20000084) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r2) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x2, 0x4, 0x5d8f, r6}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x60, r9, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x44, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x60}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={0x0, 0x2b8}, 0x1, 0x0, 0x0, 0x4000080}, 0x24008001) 17.334550615s ago: executing program 4 (id=952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) r2 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) symlink(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x0) 16.096354185s ago: executing program 4 (id=953): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50", 0x47}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195d826f9fd3b46efe6524229e48a311e4aab2a2e", 0x96}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50", 0x18}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff000000"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15.672608016s ago: executing program 2 (id=954): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e22, 0xffff, @local, 0x9}}}, 0x38) 14.745183398s ago: executing program 5 (id=955): socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) r0 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x105000, 0x82) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\t\x00'/14, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000500000004000000000000000005000000000000000000"], 0x50) syz_open_dev$hidraw(0x0, 0x82, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x801}, 0xc8c4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x100008, 0x1, 0xc05}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_G_CAPS(0xffffffffffffffff, 0xc04c6100, &(0x7f0000002440)) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 13.558301658s ago: executing program 2 (id=956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r4, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0xffffffffffffff16) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005dc0)={@ifindex, 0x11, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[], 0x47) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7) 12.373397827s ago: executing program 5 (id=957): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r2, 0x0, 0x4000) 12.281642889s ago: executing program 0 (id=958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) mount$afs(&(0x7f0000000240)=ANY=[@ANYBLOB='#s'], &(0x7f00000006c0)='./cgroup\x00', &(0x7f0000000700), 0x1000000, &(0x7f0000000740)={[{@dyn}]}) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 11.301591303s ago: executing program 2 (id=959): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1}) eventfd2(0x5, 0x1) ioperm(0x9, 0xa1d7, 0x80000004) ptrace(0x10, r2) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x2, 0x2003) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x20000, 0x1, 0x288}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x3, 0x200, 0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0x0, 0x81, 0xfffffffd, 0x800, 0x32, 0x0, 0xfffffffe, 0x80000, 0x85, 0xfffffffd, 0x0, 0x9, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x4, 0x3, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x9fa, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x925, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0xbda6, 0x0, 0xa3, 0x0, 0x0, 0x2, 0x0, 0x800, 0xfffeffe4, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x5, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x4, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11.258655324s ago: executing program 6 (id=960): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24044004) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x10) 9.524531047s ago: executing program 5 (id=961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) r2 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) execve(&(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x0) 7.388921869s ago: executing program 5 (id=962): epoll_create1(0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000200)={0x1, @vbi={0x7, 0x1, 0x1, 0x3a324152, [0xfffffffb, 0xdeee], [0x4, 0x4], 0x13a}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x4, @remote, 'wg1\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x11, &(0x7f0000000880)="50985cd3baad0be6a3f42c443af29c8238500bfcee38ff73921861daa76438cab539db44cba23aa57a8164325d30be2564c6ebd5c1f37a4f5474c7ca2ec0984f28dce4dc83fdee987b0d06e40ddf2288fba3bd7bc22cc4f30c3f7a7a4ca1f05310abdcea6b9951d381bbfb4617abbd701a4f8d64564fbe2d3497e7fca4e2f1c270bf9775ad6cfc", 0x87) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 7.375790729s ago: executing program 0 (id=963): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x7, 0x10, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x66, 0x0, 0xc, 0x2f, 0x0, @empty, @multicast1}}}}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) socket$unix(0x1, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r5, 0x0, 0x2, 0x0) 7.196952804s ago: executing program 6 (id=964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) r2 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) symlink(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x0) 6.852307972s ago: executing program 2 (id=966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) r2 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) 6.407205723s ago: executing program 0 (id=967): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x9, 0x400) r2 = accept$inet(r1, &(0x7f0000000380)={0x2, 0x0, @loopback}, &(0x7f0000000480)=0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in6, @in=@multicast2}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@s, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000040)='!+$.:\\\x00', 0x80, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x9}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000880)=""/206, 0xce}, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r7, 0x100000000) 5.285675671s ago: executing program 6 (id=968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup3(r3, r2, 0x80000) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r4) sendmsg$NFT_BATCH(r0, 0x0, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380), 0xe) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 4.49912022s ago: executing program 2 (id=969): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e22, 0xffff, @local, 0x9}}}, 0x38) 4.377100833s ago: executing program 4 (id=970): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3d4, 0x208, 0x2d0, 0xfeffffff, 0x2d0, 0x208, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@inet=@tcp={{0x2c}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x24}}, {{@ip={@multicast1, @rand_addr=0x64010100, 0xffffff00, 0xff, 'tunl0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x84, 0x1, 0x9}, 0x0, 0xf0, 0x124, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x1, 0x7]}}}, @common=@set={{0x40}, {{0x0, [], 0x5}}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x64}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x430) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r2, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}, 0x1c) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x3, {"477220adff04856ec9e8776d0ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x13eef, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 3.608573582s ago: executing program 0 (id=971): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r3 = openat$vsock(0xffffffffffffff9c, 0x0, 0x103000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 2.44821881s ago: executing program 4 (id=972): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r3) socket$inet6(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) clock_getres(0x2, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2c2c}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 2.179003557s ago: executing program 0 (id=973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) r2 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x0) 1.295381778s ago: executing program 5 (id=974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=975): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24044004) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x10) kernel console output (not intermixed with test programs): an up link [ 108.289950][ T4570] team0: Port device team_slave_0 added [ 108.299236][ T4570] team0: Port device team_slave_1 added [ 109.309534][ T4570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.390028][ T4570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.561300][ T4570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.626554][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 110.670311][ T4675] Bluetooth: MGMT ver 1.22 [ 110.725034][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.732697][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.761936][ T4672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.780331][ T4570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.872311][ T4570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.341681][ T4681] ip6t_rpfilter: unknown options [ 112.130084][ T4570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.287537][ T4570] device hsr_slave_0 entered promiscuous mode [ 112.458093][ T4570] device hsr_slave_1 entered promiscuous mode [ 112.467444][ T4570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.478646][ T4570] Cannot create hsr debugfs directory [ 116.431052][ T4718] capability: warning: `syz.3.82' uses 32-bit capabilities (legacy support in use) [ 116.685658][ T4351] libceph: connect (1)[c::]:6789 error -101 [ 116.781752][ T26] audit: type=1800 audit(1786467813.434:4): pid=4720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.83" name="nexus" dev="configfs" ino=34803 res=0 errno=0 [ 116.837921][ T4351] libceph: mon0 (1)[c::]:6789 connect error [ 116.946176][ T4723] ceph: No mds server is up or the cluster is laggy [ 117.445475][ T4714] sctp: failed to load transform for md5: -4 [ 117.456452][ T4730] sctp: failed to load transform for md5: -4 [ 117.665655][ T4351] libceph: connect (1)[c::]:6789 error -101 [ 117.671836][ T4351] libceph: mon0 (1)[c::]:6789 connect error [ 117.806832][ T4704] sctp: failed to load transform for md5: -4 [ 117.854518][ T4707] sctp: failed to load transform for md5: -4 [ 117.891576][ T4709] sctp: failed to load transform for md5: -4 [ 121.085407][ T4756] ip6t_rpfilter: unknown options [ 122.041499][ T4782] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 122.789593][ T4783] loop0: detected capacity change from 0 to 2048 [ 122.796473][ T57] device hsr_slave_0 left promiscuous mode [ 122.820518][ T4783] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.143555][ T57] device hsr_slave_1 left promiscuous mode [ 124.502269][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.524400][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.649798][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.735305][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.880732][ T57] device bridge_slave_1 left promiscuous mode [ 125.904703][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.954509][ T57] device bridge_slave_0 left promiscuous mode [ 125.964206][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.034716][ T57] device veth1_macvtap left promiscuous mode [ 126.051747][ T57] device veth0_macvtap left promiscuous mode [ 126.079456][ T57] device veth1_vlan left promiscuous mode [ 126.106603][ T57] device veth0_vlan left promiscuous mode [ 129.427249][ T4833] loop0: detected capacity change from 0 to 1024 [ 129.493714][ T4833] EXT4-fs: Ignoring removed bh option [ 129.517546][ T4833] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 130.404569][ T57] team0 (unregistering): Port device team_slave_1 removed [ 130.495080][ T57] team0 (unregistering): Port device team_slave_0 removed [ 130.599812][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.704755][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.407663][ T57] bond0 (unregistering): Released all slaves [ 132.744908][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 132.841081][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.848219][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.534609][ T4570] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.568246][ T4570] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.590960][ T4570] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.625931][ T4570] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 135.946492][ T4858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'. [ 136.365191][ T4570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.447005][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.472489][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.513765][ T4570] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.909818][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.947514][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.003387][ T4359] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.010620][ T4359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.413943][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.454301][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.494379][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.523175][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.530409][ T4359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.620864][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.721048][ T4880] No such timeout policy "syz1" [ 137.776346][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.328207][ T4570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.339795][ T4570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.370909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.427372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.456857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.558379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.775746][ T4893] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 138.983287][ T4895] block nbd2: NBD_DISCONNECT [ 139.075988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.292387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.323079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.408553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.456206][ T4899] loop0: detected capacity change from 0 to 64 [ 139.505140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.598638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.878080][ T26] audit: type=1800 audit(1786467838.514:5): pid=4924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.131" name="nexus" dev="configfs" ino=36120 res=0 errno=0 [ 141.986859][ T9] kworker/u4:0: attempt to access beyond end of device [ 141.986859][ T9] loop0: rw=1, sector=16777216, nr_sectors = 2 limit=64 [ 142.086584][ T9] Buffer I/O error on dev loop0, logical block 8388608, lost async page write [ 142.108372][ T4931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.125'. [ 142.937776][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.946473][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.971806][ T4938] loop3: detected capacity change from 0 to 128 [ 143.159255][ T4938] ======================================================= [ 143.159255][ T4938] WARNING: The mand mount option has been deprecated and [ 143.159255][ T4938] and is ignored by this kernel. Remove the mand [ 143.159255][ T4938] option from the mount to silence this warning. [ 143.159255][ T4938] ======================================================= [ 144.067825][ T4570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.281344][ T4938] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 144.919170][ T4938] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 145.022981][ T4964] sg_write: data in/out 163806/20 bytes for SCSI command 0x0-- guessing data in; [ 145.022981][ T4964] program syz.4.130 not setting count and/or reply_len properly [ 146.585581][ T4973] netlink: 96 bytes leftover after parsing attributes in process `syz.0.133'. [ 146.736445][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 149.671625][ T5008] device syzkaller0 entered promiscuous mode [ 150.609043][ T5012] tipc: Started in network mode [ 150.616747][ T5012] tipc: Node identity d2e0f12bb354, cluster identity 4711 [ 151.156262][ T5012] tipc: Enabled bearer , priority 0 [ 152.359155][ T5024] tipc: Resetting bearer [ 152.432840][ T4317] tipc: Node number set to 1639248171 [ 152.456907][ T5007] tipc: Resetting bearer [ 152.608800][ T5007] tipc: Disabling bearer [ 153.588848][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.609356][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.505172][ T5051] loop4: detected capacity change from 0 to 2048 [ 154.588967][ T5051] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.664202][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.713399][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.746552][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.790923][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.826624][ T4570] device veth0_vlan entered promiscuous mode [ 156.656898][ T4570] device veth1_vlan entered promiscuous mode [ 157.413465][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.442949][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.246522][ T4570] device veth0_macvtap entered promiscuous mode [ 158.297917][ T4570] device veth1_macvtap entered promiscuous mode [ 158.369811][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.512098][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.112735][ T4570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.112737][ T5092] loop3: detected capacity change from 0 to 1024 [ 160.112755][ T4570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.112763][ T4570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.200561][ T4570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.211901][ T5092] EXT4-fs: Ignoring removed bh option [ 160.217654][ T4570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.230491][ T4570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.242442][ T4570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.491534][ T5101] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4279] was attempted by " [ 160.933255][ T5102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 161.111407][ T5102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.167'. [ 161.469184][ T5092] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 161.511504][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.734569][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.004796][ T4281] EXT4-fs error (device loop3): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /32/file2/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 162.254534][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 162.264638][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 162.272745][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 162.281952][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 162.289472][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 162.296920][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 162.370677][ T4281] EXT4-fs error (device loop3): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /32/file2/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 162.651551][ T5082] EXT4-fs (loop3): unmounting filesystem. [ 163.007264][ T4425] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 163.122845][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 163.225464][ T4425] usb 1-1: Using ep0 maxpacket: 8 [ 163.253778][ T4425] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 163.283262][ T4425] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.331173][ T4425] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.363945][ T4425] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.394037][ T4425] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.434150][ T4425] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 163.443245][ T4425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.630596][ T4329] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.694566][ T4425] usb 1-1: usb_control_msg returned -32 [ 163.700552][ T4425] usbtmc 1-1:16.0: can't read capabilities [ 163.803301][ T4329] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.831647][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.856843][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.895682][ T5117] device bridge_slave_0 entered promiscuous mode [ 163.938185][ T4329] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.961867][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.971860][ T4320] usb 1-1: USB disconnect, device number 2 [ 163.977896][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.987020][ T5117] device bridge_slave_1 entered promiscuous mode [ 164.043029][ T4329] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.072252][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.097366][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.134036][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.149860][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.158774][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.172628][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.180777][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 164.188117][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.228920][ T5117] team0: Port device team_slave_0 added [ 164.238588][ T5117] team0: Port device team_slave_1 added [ 164.263227][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.270709][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.297040][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.309637][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.316691][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.343399][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.353955][ T4288] Bluetooth: hci5: command 0x0409 tx timeout [ 164.396891][ T5117] device hsr_slave_0 entered promiscuous mode [ 164.405019][ T5117] device hsr_slave_1 entered promiscuous mode [ 164.412014][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.420072][ T5117] Cannot create hsr debugfs directory [ 164.700309][ T5144] chnl_net:caif_netlink_parms(): no params data found [ 164.807718][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.827252][ T5144] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.837549][ T5144] device bridge_slave_0 entered promiscuous mode [ 164.869181][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.876648][ T5144] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.885478][ T5144] device bridge_slave_1 entered promiscuous mode [ 164.937512][ T5144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.951032][ T5144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.981285][ T5144] team0: Port device team_slave_0 added [ 164.995085][ T5144] team0: Port device team_slave_1 added [ 165.074304][ T5144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.081307][ T5144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.117779][ T5144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.157750][ T5144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.165430][ T5144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.192126][ T5144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.240760][ T5144] device hsr_slave_0 entered promiscuous mode [ 165.249140][ T5144] device hsr_slave_1 entered promiscuous mode [ 165.256302][ T5144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.264236][ T5144] Cannot create hsr debugfs directory [ 165.271263][ T5117] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 165.281899][ T5117] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 165.291448][ T5117] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 165.300471][ T5117] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 165.538972][ T5144] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 165.574814][ T5144] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 165.599612][ T5144] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 165.627694][ T5144] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 165.658298][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.758589][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.768664][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.783787][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.840718][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.850614][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.861498][ T4359] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.868769][ T4359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.884359][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.893286][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.911320][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.918646][ T4359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.928079][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.975618][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.017371][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.045906][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.058119][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.068995][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.079058][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.101304][ T5144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.139075][ T5117] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.149692][ T5117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.162444][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.172622][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.181601][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.191489][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.200832][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.248476][ T5144] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.257563][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.266729][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.274172][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 166.282500][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.332095][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.352443][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.369038][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.376201][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.386307][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.395103][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.403532][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.410676][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.418495][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.428387][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.434014][ T4288] Bluetooth: hci5: command 0x041b tx timeout [ 166.442764][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.481140][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.492031][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.521287][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.548847][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.565309][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.599463][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.608994][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.631160][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.639526][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.666194][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.676886][ T5144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.705992][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.730192][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.745007][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.132827][ T4329] device hsr_slave_0 left promiscuous mode [ 167.157352][ T4329] device hsr_slave_1 left promiscuous mode [ 167.167093][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.176987][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.185674][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.193572][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.211309][ T4329] device bridge_slave_1 left promiscuous mode [ 167.218114][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.228129][ T4329] device bridge_slave_0 left promiscuous mode [ 167.244134][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.284852][ T4329] device veth1_macvtap left promiscuous mode [ 167.290951][ T4329] device veth0_macvtap left promiscuous mode [ 167.297710][ T4329] device veth1_vlan left promiscuous mode [ 167.304255][ T4329] device veth0_vlan left promiscuous mode [ 167.874299][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 167.915986][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 167.953100][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.993706][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.263708][ T4329] bond0 (unregistering): Released all slaves [ 168.354282][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 168.393587][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.403123][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.481611][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.497344][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.510413][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.518459][ T4288] Bluetooth: hci5: command 0x040f tx timeout [ 168.542246][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.556248][ T5117] device veth0_vlan entered promiscuous mode [ 168.596465][ T5117] device veth1_vlan entered promiscuous mode [ 168.619703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.634812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.643505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.653271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.665675][ T5117] device veth0_macvtap entered promiscuous mode [ 168.681415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.694777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.702398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.712522][ T5117] device veth1_macvtap entered promiscuous mode [ 168.740247][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.751098][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.761930][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.773240][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.783547][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.795091][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.822932][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.837875][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.847687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.857175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.878395][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.890016][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.901198][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.918037][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.929952][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.940878][ T5144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.955522][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.969990][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.998647][ T5117] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.014406][ T5117] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.023156][ T5117] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.041089][ T5117] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.184446][ T4424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.192350][ T4424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.227449][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 169.260813][ T4359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.276401][ T4359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.291300][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.434026][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 170.627023][ T4288] Bluetooth: hci5: command 0x0419 tx timeout [ 171.377536][ T5262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 171.388200][ T5262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'. [ 171.489717][ T4316] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 172.107953][ T4316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.134178][ T4316] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 172.140196][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.170219][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.174089][ T4316] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 172.248540][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.310379][ T4316] usb 5-1: config 0 descriptor?? [ 172.482860][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.514429][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 172.516486][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.562092][ T5144] device veth0_vlan entered promiscuous mode [ 172.589337][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.600016][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.621935][ T5144] device veth1_vlan entered promiscuous mode [ 172.784560][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.819674][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.849200][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.869152][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.870577][ T4316] usb 5-1: Direct firmware load for ar3k/AthrBT_0xd3674841.dfu failed with error -2 [ 172.890929][ T5144] device veth0_macvtap entered promiscuous mode [ 172.937854][ T4316] usb 5-1: Falling back to sysfs fallback for: ar3k/AthrBT_0xd3674841.dfu [ 172.959216][ T5144] device veth1_macvtap entered promiscuous mode [ 173.111841][ T5144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.161427][ T5144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.193994][ T5144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.245169][ T5144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.275867][ T5144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.323885][ T5144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.343866][ T5144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.374218][ T5144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.429020][ T5144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.455125][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.480576][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.508999][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.536769][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.681146][ T4329] device hsr_slave_0 left promiscuous mode [ 174.734154][ T4329] device hsr_slave_1 left promiscuous mode [ 175.306632][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.315853][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.327788][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.338171][ T4329] device bridge_slave_1 left promiscuous mode [ 175.784074][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.809767][ T4329] device bridge_slave_0 left promiscuous mode [ 175.824272][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.377572][ T4329] device veth1_macvtap left promiscuous mode [ 176.385673][ T4329] device veth0_macvtap left promiscuous mode [ 176.392427][ T4329] device veth1_vlan left promiscuous mode [ 176.418624][ T4329] device veth0_vlan left promiscuous mode [ 177.305880][ T5321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 177.315219][ T5321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 179.679042][ T5334] loop5: detected capacity change from 0 to 512 [ 179.737645][ T5334] EXT4-fs (loop5): 1 truncate cleaned up [ 179.743354][ T5334] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 179.921642][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 179.963022][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 180.030580][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.110763][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.633620][ T5117] EXT4-fs (loop5): unmounting filesystem. [ 180.852764][ T4329] bond0 (unregistering): Released all slaves [ 180.966625][ T5144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.977534][ T5144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.992868][ T5144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.082123][ T5144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.147443][ T5144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.198776][ T5144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.298845][ T5144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.592910][ T5342] xt_CT: No such helper "snmp_trap" [ 181.698264][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.707706][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.718494][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 181.761289][ T5144] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.784011][ T5144] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.800471][ T5144] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.820498][ T5350] loop2: detected capacity change from 0 to 128 [ 181.828945][ T5144] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.929456][ T5171] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 183.168201][ T5358] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 183.195642][ T5358] udc usbip-vudc.0: failed to start g1: -19 [ 183.223425][ T5361] fuse: Unknown parameter 'GPL' [ 183.236612][ T4547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.296464][ T5358] UDC core: g1: couldn't find an available UDC or it's busy [ 183.310303][ T4547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.360126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.418537][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.444468][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.522591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.277659][ T5418] device syzkaller0 entered promiscuous mode [ 190.958741][ T5421] tipc: Enabled bearer , priority 0 [ 191.011597][ T5417] tipc: Resetting bearer [ 191.067516][ T5417] tipc: Disabling bearer [ 191.313947][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 191.320187][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 191.986073][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 192.219459][ T5434] loop2: detected capacity change from 0 to 2048 [ 192.674285][ T5434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.292082][ T5452] ip6t_rpfilter: unknown options [ 194.953331][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.959747][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.579929][ T5473] tipc: Enabled bearer , priority 0 [ 196.644564][ T5465] tipc: Resetting bearer [ 196.699346][ T5458] tipc: Disabling bearer [ 197.282171][ T5480] process 'syz.2.227' launched './file0/file0/..' with NULL argv: empty string added [ 201.110508][ T5505] device syzkaller0 entered promiscuous mode [ 201.315389][ T5511] loop5: detected capacity change from 0 to 4096 [ 201.795436][ T5511] ntfs: volume version 3.1. [ 202.370739][ T5530] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4275] was attempted by " [ 205.175417][ T5541] Invalid option length (1047276) for dns_resolver key [ 205.729223][ T5542] loop5: detected capacity change from 0 to 2048 [ 205.825190][ T5542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.464071][ T5558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.230'. [ 208.091875][ T5585] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4282] was attempted by " [ 208.493853][ T4288] Bluetooth: hci1: command 0x040a tx timeout [ 211.206724][ T26] audit: type=1800 audit(1786467907.864:6): pid=5606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.245" name="nexus" dev="configfs" ino=39562 res=0 errno=0 [ 214.532689][ T5641] loop6: detected capacity change from 0 to 1024 [ 217.827859][ T5661] zram0: detected capacity change from 0 to 8 [ 218.011781][ T5650] fuse: Bad value for 'fd' [ 218.019849][ T5673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.256'. [ 218.186990][ T26] audit: type=1800 audit(1786467914.854:7): pid=5676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.259" name="nexus" dev="configfs" ino=39663 res=0 errno=0 [ 218.364863][ T4318] libceph: connect (1)[c::]:6789 error -101 [ 218.381242][ T4318] libceph: mon0 (1)[c::]:6789 connect error [ 218.409952][ T5679] ceph: No mds server is up or the cluster is laggy [ 218.493504][ T5673] team0: Port device team_slave_0 removed [ 220.704914][ T5706] xt_CT: No such helper "snmp_trap" [ 223.312674][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 224.048764][ T5732] ip6t_rpfilter: unknown options [ 225.033474][ T22] libceph: connect (1)[c::]:6789 error -101 [ 225.633265][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 225.865817][ T5744] ceph: No mds server is up or the cluster is laggy [ 228.304522][ T5754] fuse: Bad value for 'fd' [ 229.402969][ T5778] netlink: 44 bytes leftover after parsing attributes in process `syz.0.279'. [ 230.139909][ T5780] loop5: detected capacity change from 0 to 256 [ 230.211941][ T5780] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 233.689973][ T5800] ip6t_rpfilter: unknown options [ 235.235930][ T4316] Bluetooth: Patch file not found ar3k/AthrBT_0xd3674841.dfu [ 235.255890][ T4316] Bluetooth: Loading patch file failed [ 235.261437][ T4316] ath3k: probe of 5-1:0.0 failed with error -110 [ 235.366457][ T5819] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 235.393392][ T4316] usb 5-1: USB disconnect, device number 2 [ 236.246965][ T5833] netlink: 44 bytes leftover after parsing attributes in process `syz.2.290'. [ 237.063989][ T26] audit: type=1800 audit(1786467933.714:8): pid=5836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.292" name="nexus" dev="configfs" ino=40088 res=0 errno=0 [ 237.733939][ T26] audit: type=1326 audit(1786467934.384:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.0.293" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c1819e0d9 code=0x0 [ 237.794370][ T4278] Bluetooth: hci0: command 0x0405 tx timeout [ 239.627863][ T5866] ip6t_rpfilter: unknown options [ 240.976150][ T26] audit: type=1800 audit(1786467937.634:10): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.301" name="scan_secs" dev="configfs" ino=40236 res=0 errno=0 [ 240.988977][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 241.094320][ T5891] loop6: detected capacity change from 0 to 512 [ 241.128955][ T5891] EXT4-fs: test_dummy_encryption requires encrypt feature [ 241.679322][ T5894] netlink: 44 bytes leftover after parsing attributes in process `syz.4.302'. [ 248.261156][ T5943] ip6t_rpfilter: unknown options [ 251.222004][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.317'. [ 251.231108][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.5.317'. [ 251.809970][ T5952] syz.4.316 (5952): drop_caches: 2 [ 253.417642][ T4317] libceph: connect (1)[c::]:6789 error -101 [ 253.440986][ T4317] libceph: mon0 (1)[c::]:6789 connect error [ 253.449993][ T5984] ceph: No mds server is up or the cluster is laggy [ 254.314471][ T4318] libceph: connect (1)[c::]:6789 error -101 [ 254.352024][ T4318] libceph: mon0 (1)[c::]:6789 connect error [ 254.589009][ T5995] ip6t_rpfilter: unknown options [ 254.903359][ T6014] virt_wifi0 speed is unknown, defaulting to 1000 [ 254.910663][ T6014] virt_wifi0 speed is unknown, defaulting to 1000 [ 254.928297][ T6014] virt_wifi0 speed is unknown, defaulting to 1000 [ 254.971685][ T6014] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 255.008638][ T6014] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 255.071799][ T26] audit: type=1326 audit(1786467951.614:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.6.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 255.125439][ T6014] virt_wifi0 speed is unknown, defaulting to 1000 [ 255.139180][ T6014] virt_wifi0 speed is unknown, defaulting to 1000 [ 255.151822][ T6014] virt_wifi0 speed is unknown, defaulting to 1000 [ 255.164797][ T6014] virt_wifi0 speed is unknown, defaulting to 1000 [ 255.177330][ T6014] virt_wifi0 speed is unknown, defaulting to 1000 [ 255.389139][ T26] audit: type=1326 audit(1786467951.614:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.6.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 255.975997][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.331'. [ 255.984895][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.6.331'. [ 256.013751][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.027237][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.979070][ T6036] netlink: 'syz.0.333': attribute type 2 has an invalid length. [ 257.524888][ T26] audit: type=1326 audit(1786467951.614:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.6.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 257.838041][ T26] audit: type=1326 audit(1786467951.614:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.6.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 258.781751][ T26] audit: type=1326 audit(1786467951.614:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.6.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 258.887877][ T26] audit: type=1326 audit(1786467951.614:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.6.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 259.083627][ T26] audit: type=1326 audit(1786467951.614:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.6.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 260.529213][ T26] audit: type=1326 audit(1786467951.614:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.6.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 260.569095][ T26] audit: type=1326 audit(1786467951.614:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.6.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 261.247334][ T26] audit: type=1326 audit(1786467951.614:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.6.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 261.402430][ T26] audit: type=1326 audit(1786467951.614:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.6.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 262.363925][ T26] audit: type=1326 audit(1786467951.614:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.6.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 262.394095][ T26] audit: type=1326 audit(1786467951.614:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.6.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 262.661284][ T26] audit: type=1326 audit(1786467951.614:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.6.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 263.481756][ T26] audit: type=1326 audit(1786467951.614:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.6.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 263.628569][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 263.641460][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 263.652388][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 263.663697][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 263.673226][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 263.850386][ T26] audit: type=1326 audit(1786467951.614:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.6.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 264.321794][ T26] audit: type=1326 audit(1786467951.614:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.6.328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 266.882956][ T6106] loop4: detected capacity change from 0 to 40427 [ 266.894561][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 266.926514][ T6106] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 268.224775][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 268.248023][ T7] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 268.282510][ T7] usb 1-1: config 0 has too many interfaces: 92, using maximum allowed: 32 [ 268.312019][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.342889][ T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 92 [ 268.531594][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 269.293915][ T7] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 269.303011][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.483453][ T7] usb 1-1: config 0 descriptor?? [ 269.557732][ T7] usb 1-1: can't set config #0, error -71 [ 270.568780][ T6136] loop5: detected capacity change from 0 to 40427 [ 270.629988][ T7] usb 1-1: USB disconnect, device number 3 [ 270.636068][ T6136] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 270.643317][ T6136] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 270.680836][ T6136] F2FS-fs (loop5): invalid crc value [ 270.689249][ T6136] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 270.758073][ T6136] F2FS-fs (loop5): Start checkpoint disabled! [ 270.798699][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 270.811703][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 270.822393][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 270.834066][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 270.843575][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 271.013650][ T6136] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 271.021740][ T6136] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 271.103621][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 271.115866][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 271.126820][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 271.137036][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 271.146436][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 271.627465][ T6147] loop4: detected capacity change from 0 to 512 [ 271.681396][ T6147] EXT4-fs: Ignoring removed i_version option [ 272.084068][ T6147] EXT4-fs: Ignoring removed nobh option [ 272.122677][ T11] kworker/u4:1: attempt to access beyond end of device [ 272.122677][ T11] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 273.711768][ T6147] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 273.872683][ T6147] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 274.971379][ T6147] EXT4-fs: failed to create workqueue [ 275.012374][ T6147] EXT4-fs (loop4): mount failed [ 275.107184][ T6176] loop2: detected capacity change from 0 to 512 [ 275.825349][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.369'. [ 276.587690][ T6176] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.368: Unrecognised inode hash code 255 [ 276.656023][ T6176] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.368: Corrupt directory, running e2fsck is recommended [ 276.673307][ T6176] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 277.145798][ T6176] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.368: corrupted in-inode xattr [ 277.416513][ T6176] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.368: couldn't read orphan inode 15 (err -117) [ 277.456390][ T6176] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 277.548480][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 277.560079][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 277.570059][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 277.580421][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 277.589892][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 278.033972][ T6193] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 278.659586][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 279.331306][ T6212] ip6t_rpfilter: unknown options [ 281.092325][ T6241] 9pnet_virtio: no channels available for device 127.0.0.1 [ 281.615706][ T6250] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 281.907385][ T6164] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 281.963242][ T6258] loop4: detected capacity change from 0 to 512 [ 282.117592][ T6258] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 282.392195][ T6164] usb 3-1: Using ep0 maxpacket: 32 [ 282.468583][ T6258] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.388: corrupted xattr entries [ 282.879824][ T6164] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 282.888265][ T6258] EXT4-fs (loop4): Remounting filesystem read-only [ 282.903335][ T6164] usb 3-1: config 0 has too many interfaces: 92, using maximum allowed: 32 [ 282.912476][ T6164] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.923028][ T6164] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 92 [ 282.932496][ T6164] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 282.943229][ T6258] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 282.980605][ T6164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.021413][ T6258] EXT4-fs (loop4): 1 truncate cleaned up [ 283.028005][ T6164] usb 3-1: config 0 descriptor?? [ 283.134573][ T6258] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 283.209957][ T7] libceph: connect (1)[c::]:6789 error -101 [ 283.217534][ T6262] ceph: No mds server is up or the cluster is laggy [ 283.224701][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 283.559148][ T6252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.572793][ T6252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.875064][ T7] usb 3-1: USB disconnect, device number 2 [ 284.002336][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 284.731358][ T6285] loop6: detected capacity change from 0 to 4096 [ 284.763540][ T6285] ntfs: volume version 3.1. [ 286.346214][ T6296] 9pnet_fd: p9_fd_create_tcp (6296): problem connecting socket to 127.0.0.1 [ 287.033279][ T6307] ip6t_rpfilter: unknown options [ 287.272885][ T6306] loop2: detected capacity change from 0 to 8192 [ 287.627355][ T6319] tmpfs: Bad value for 'mpol' [ 288.575376][ T4278] Bluetooth: hci5: command 0x0406 tx timeout [ 289.086951][ T26] audit: type=1800 audit(1786467985.744:28): pid=6327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.401" name="nexus" dev="configfs" ino=41746 res=0 errno=0 [ 289.374458][ T4319] libceph: connect (1)[c::]:6789 error -101 [ 289.380587][ T4319] libceph: mon0 (1)[c::]:6789 connect error [ 289.420842][ T6329] ceph: No mds server is up or the cluster is laggy [ 291.045563][ T6348] loop5: detected capacity change from 0 to 512 [ 291.173338][ T6348] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 291.202877][ T6348] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.735184][ T5117] EXT4-fs (loop5): unmounting filesystem. [ 294.855562][ T6389] loop5: detected capacity change from 0 to 2048 [ 295.785476][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.412'. [ 295.797456][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.412'. [ 295.808171][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.412'. [ 295.819568][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.412'. [ 295.829109][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.412'. [ 296.130627][ T6435] wlan0 speed is unknown, defaulting to 1000 [ 296.136833][ T6435] wlan0 speed is unknown, defaulting to 1000 [ 296.143217][ T6435] wlan0 speed is unknown, defaulting to 1000 [ 296.157400][ T6435] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 296.183964][ T6435] wlan0 speed is unknown, defaulting to 1000 [ 296.191515][ T6435] wlan0 speed is unknown, defaulting to 1000 [ 296.201808][ T6435] wlan0 speed is unknown, defaulting to 1000 [ 296.211775][ T6435] wlan0 speed is unknown, defaulting to 1000 [ 296.222638][ T6435] wlan0 speed is unknown, defaulting to 1000 [ 297.065883][ T6389] EXT4-fs: error -4 creating inode table initialization thread [ 297.074220][ T6389] EXT4-fs (loop5): mount failed [ 297.456651][ T6453] tmpfs: Bad value for 'mpol' [ 298.646986][ T6459] loop2: detected capacity change from 0 to 512 [ 298.775128][ T6459] EXT4-fs: Ignoring removed i_version option [ 298.781223][ T6459] EXT4-fs: Ignoring removed bh option [ 298.857905][ T6463] loop6: detected capacity change from 0 to 1024 [ 298.941339][ T6459] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.418: inode #13: comm syz.2.418: iget: illegal inode # [ 298.969755][ T6463] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 299.004598][ T6459] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.418: couldn't read orphan inode 13 (err -117) [ 299.074126][ T6459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 299.811498][ T6484] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 301.616755][ T6467] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 426: padding at end of block bitmap is not set [ 301.714832][ T5144] EXT4-fs (loop6): unmounting filesystem. [ 302.602859][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 302.655665][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 302.671699][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 302.683103][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 302.694108][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 302.780565][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 304.299020][ T6519] ip6t_rpfilter: unknown options [ 305.740540][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 306.679612][ T6496] wlan0 speed is unknown, defaulting to 1000 [ 308.826794][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.433'. [ 310.053102][ T6570] loop4: detected capacity change from 0 to 256 [ 310.313185][ T6570] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 314.173504][ T6612] loop5: detected capacity change from 0 to 256 [ 314.197561][ T6612] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 314.266807][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 316.415969][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'. [ 317.158069][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.200473][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.522969][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.452'. [ 320.746529][ T6660] loop2: detected capacity change from 0 to 512 [ 320.957214][ T6660] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 321.081139][ T6660] EXT4-fs (loop2): 1 truncate cleaned up [ 321.116335][ T6660] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 323.028256][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 323.138036][ T6684] loop2: detected capacity change from 0 to 128 [ 323.215086][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.459'. [ 324.140953][ T6684] FAT-fs (loop2): bogus number of FAT structure [ 324.245418][ T6684] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 324.255156][ T6684] FAT-fs (loop2): Can't find a valid FAT filesystem [ 325.480348][ T6707] loop2: detected capacity change from 0 to 1024 [ 325.584657][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.463'. [ 326.164372][ T6707] hfsplus: xattr searching failed [ 326.454373][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 327.493756][ T6729] netlink: 52 bytes leftover after parsing attributes in process `syz.6.468'. [ 329.477087][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.6.472'. [ 330.062189][ T6755] dummy_hcd dummy_hcd.0: remove, state 4 [ 330.118533][ T6755] usb usb1: USB disconnect, device number 1 [ 331.066422][ T6755] dummy_hcd dummy_hcd.0: stopped [ 331.071550][ T6755] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 331.167826][ T6771] loop4: detected capacity change from 0 to 1024 [ 331.332450][ T6771] hfsplus: unable to parse mount options [ 335.966480][ T6859] tmpfs: Bad value for 'mpol' [ 336.797072][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 336.809539][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 336.818628][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 336.827606][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 336.836553][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 336.994927][ T6866] loop2: detected capacity change from 0 to 256 [ 337.018299][ T6866] FAT-fs (loop2): "posix" option is obsolete, not supported now [ 337.913548][ T6876] netlink: 23 bytes leftover after parsing attributes in process `syz.5.489'. [ 338.327156][ T955] libceph: connect (1)[c::]:6789 error -101 [ 338.333328][ T955] libceph: mon0 (1)[c::]:6789 connect error [ 338.394764][ T6876] ceph: No mds server is up or the cluster is laggy [ 339.254645][ T955] libceph: connect (1)[c::]:6789 error -101 [ 339.260720][ T955] libceph: mon0 (1)[c::]:6789 connect error [ 339.873947][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 339.877674][ T38] libceph: connect (1)[c::]:6789 error -101 [ 340.431423][ T38] libceph: mon0 (1)[c::]:6789 connect error [ 340.583461][ T4271] libceph: connect (1)[c::]:6789 error -101 [ 340.600777][ T4271] libceph: mon0 (1)[c::]:6789 connect error [ 340.606844][ T6902] ceph: No mds server is up or the cluster is laggy [ 341.492013][ T6921] tmpfs: Bad value for 'mpol' [ 341.834432][ T6935] loop6: detected capacity change from 0 to 128 [ 341.895130][ T5171] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 343.405412][ T6950] ip6t_rpfilter: unknown options [ 343.596888][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 343.614498][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 343.623533][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 343.632937][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 343.642076][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 345.292557][ T26] audit: type=1800 audit(1786468041.944:29): pid=7002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.506" name="nexus" dev="configfs" ino=42722 res=0 errno=0 [ 350.282560][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.516'. [ 350.293743][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.516'. [ 350.302934][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.516'. [ 350.315018][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.516'. [ 350.324683][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.516'. [ 350.948427][ T7055] ceph: No mds server is up or the cluster is laggy [ 350.958420][ T4361] libceph: connect (1)[c::]:6789 error -101 [ 351.293356][ T4361] libceph: mon0 (1)[c::]:6789 connect error [ 353.125248][ T7066] ip6t_rpfilter: unknown options [ 353.131831][ T4361] libceph: connect (1)[c::]:6789 error -101 [ 353.138364][ T4361] libceph: mon0 (1)[c::]:6789 connect error [ 357.489742][ T7101] loop4: detected capacity change from 0 to 1024 [ 361.477604][ T7146] ip6t_rpfilter: unknown options [ 366.137239][ T7193] loop6: detected capacity change from 0 to 128 [ 368.352389][ T7219] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 370.519061][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 370.528705][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 370.538530][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 370.547531][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 370.556793][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 371.309666][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.551'. [ 371.484068][ T4319] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 371.686055][ T4319] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8 has an invalid bInterval 0, changing to 4 [ 371.727804][ T4319] usb 3-1: config 0 interface 0 has no altsetting 0 [ 371.778304][ T4319] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 371.817809][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 371.841093][ T4319] usb 3-1: Product: syz [ 371.850324][ T4319] usb 3-1: Manufacturer: syz [ 371.873043][ T4319] usb 3-1: SerialNumber: syz [ 372.043374][ T4319] usb 3-1: config 0 descriptor?? [ 372.061665][ T7232] team0: Port device team_slave_0 removed [ 373.607232][ T7271] sctp: [Deprecated]: syz.4.560 (pid 7271) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.607232][ T7271] Use struct sctp_sack_info instead [ 375.441303][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.563'. [ 375.454598][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.563'. [ 375.463748][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.563'. [ 375.990785][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.563'. [ 375.999818][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.563'. [ 377.096136][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 377.119290][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 377.128664][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 377.137720][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 377.146715][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 377.599963][ T4352] libceph: connect (1)[c::]:6789 error -101 [ 377.606859][ T4352] libceph: mon0 (1)[c::]:6789 connect error [ 377.617693][ T7307] ceph: No mds server is up or the cluster is laggy [ 378.554898][ T6145] libceph: connect (1)[c::]:6789 error -101 [ 378.563591][ T4319] usb 3-1: can't set config #0, error -110 [ 378.598375][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.604786][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.657615][ T6145] libceph: mon0 (1)[c::]:6789 connect error [ 378.786860][ T26] audit: type=1800 audit(1786468075.434:30): pid=7318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.569" name="nexus" dev="configfs" ino=44282 res=0 errno=0 [ 379.773964][ T4316] usb 3-1: USB disconnect, device number 3 [ 380.097349][ T7326] loop4: detected capacity change from 0 to 40427 [ 380.121330][ T7326] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 380.128685][ T7326] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 380.140100][ T7326] F2FS-fs (loop4): invalid crc value [ 380.147858][ T7326] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 380.216370][ T7326] F2FS-fs (loop4): Start checkpoint disabled! [ 380.236727][ T7326] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 380.244025][ T7326] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 380.418895][ T26] audit: type=1800 audit(1786468077.074:31): pid=7328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.572" name="nexus" dev="configfs" ino=45062 res=0 errno=0 [ 383.318744][ T4734] kworker/u4:16: attempt to access beyond end of device [ 383.318744][ T4734] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 383.775645][ T7367] 9pnet_virtio: no channels available for device 127.0.0.1 [ 386.281082][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 386.290701][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 386.299958][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 386.309016][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 386.317940][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 386.583400][ T26] audit: type=1800 audit(1786468083.234:32): pid=7398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.584" name="nexus" dev="configfs" ino=44371 res=0 errno=0 [ 386.734794][ T7399] ceph: No mds server is up or the cluster is laggy [ 386.753082][ T4425] libceph: connect (1)[c::]:6789 error -101 [ 386.803759][ T4425] libceph: mon0 (1)[c::]:6789 connect error [ 387.382984][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 387.392708][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 387.401883][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 387.410907][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 387.419866][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 387.687680][ T7412] vivid-004: disconnect [ 388.706575][ T7407] vivid-004: reconnect [ 390.810645][ T26] audit: type=1800 audit(1786468087.464:33): pid=7439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.594" name="nexus" dev="configfs" ino=45255 res=0 errno=0 [ 391.822383][ T26] audit: type=1800 audit(1786468088.474:34): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.596" name="nexus" dev="configfs" ino=45265 res=0 errno=0 [ 392.218079][ T7453] netlink: 'syz.5.597': attribute type 2 has an invalid length. [ 392.925064][ T7454] ceph: No mds server is up or the cluster is laggy [ 392.945089][ T4321] libceph: connect (1)[c::]:6789 error -101 [ 393.051332][ T7456] __nla_validate_parse: 10 callbacks suppressed [ 393.051364][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 393.067648][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 393.076696][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 393.085985][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 393.094968][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 393.134632][ T4321] libceph: mon0 (1)[c::]:6789 connect error [ 393.488321][ T7466] virt_wifi0 speed is unknown, defaulting to 1000 [ 393.495592][ T7466] virt_wifi0 speed is unknown, defaulting to 1000 [ 393.504611][ T7466] virt_wifi0 speed is unknown, defaulting to 1000 [ 393.557584][ T7466] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 393.602699][ T26] audit: type=1326 audit(1786468090.194:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.4.600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8664f9e0d9 code=0x7ffc0000 [ 394.745239][ T4321] libceph: connect (1)[c::]:6789 error -101 [ 394.753036][ T7466] virt_wifi0 speed is unknown, defaulting to 1000 [ 394.760448][ T7466] virt_wifi0 speed is unknown, defaulting to 1000 [ 394.768000][ T7466] virt_wifi0 speed is unknown, defaulting to 1000 [ 394.775395][ T7466] virt_wifi0 speed is unknown, defaulting to 1000 [ 394.782778][ T7466] virt_wifi0 speed is unknown, defaulting to 1000 [ 394.797668][ T4321] libceph: mon0 (1)[c::]:6789 connect error [ 394.891569][ T26] audit: type=1326 audit(1786468090.194:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.4.600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8664f9e0d9 code=0x7ffc0000 [ 395.132984][ T26] audit: type=1326 audit(1786468090.204:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.4.600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f8664f9e0d9 code=0x7ffc0000 [ 395.266099][ T26] audit: type=1326 audit(1786468090.204:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.4.600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8664f9e0d9 code=0x7ffc0000 [ 395.432566][ T7479] file system registered [ 396.045554][ T26] audit: type=1326 audit(1786468090.204:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.4.600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8664f9e0d9 code=0x7ffc0000 [ 396.103966][ T26] audit: type=1326 audit(1786468090.204:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.4.600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f8664f9e0d9 code=0x7ffc0000 [ 397.291567][ T26] audit: type=1326 audit(1786468090.204:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.4.600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8664f9e0d9 code=0x7ffc0000 [ 397.316481][ T26] audit: type=1326 audit(1786468090.204:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.4.600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8664f9e0d9 code=0x7ffc0000 [ 397.352687][ T26] audit: type=1326 audit(1786468090.204:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.4.600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8664f9e0d9 code=0x7ffc0000 [ 397.459528][ T7499] loop6: detected capacity change from 0 to 40427 [ 397.467543][ T26] audit: type=1326 audit(1786468090.204:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.4.600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8664f9e0d9 code=0x7ffc0000 [ 397.502474][ T7499] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 397.509829][ T7499] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 398.272938][ T26] audit: type=1326 audit(1786468090.204:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.4.600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8664f9e0d9 code=0x7ffc0000 [ 398.314214][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 398.323932][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 398.332905][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 398.341980][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 398.351014][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 398.381455][ T7499] F2FS-fs (loop6): invalid crc value [ 398.388244][ T7499] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 398.390884][ T26] audit: type=1326 audit(1786468090.204:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.4.600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8664f9e0d9 code=0x7ffc0000 [ 398.442749][ T7499] F2FS-fs (loop6): Start checkpoint disabled! [ 398.505927][ T26] audit: type=1326 audit(1786468090.204:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.4.600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8664f9e0d9 code=0x7ffc0000 [ 398.542313][ T7499] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 398.549569][ T7499] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 398.593385][ T26] audit: type=1326 audit(1786468090.204:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.4.600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8664f9e0d9 code=0x7ffc0000 [ 399.198268][ T26] audit: type=1326 audit(1786468090.204:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.4.600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8664f9e0d9 code=0x7ffc0000 [ 399.226860][ T6833] kworker/u4:29: attempt to access beyond end of device [ 399.226860][ T6833] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 399.244253][ T26] audit: type=1326 audit(1786468090.204:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.4.600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8664f9e0d9 code=0x7ffc0000 [ 400.548842][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 400.563598][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 400.572654][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 400.581925][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 400.590850][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 406.240066][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.621'. [ 407.895189][ T7575] loop2: detected capacity change from 0 to 40427 [ 407.912026][ T7575] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 407.919469][ T7575] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 407.934862][ T7575] F2FS-fs (loop2): invalid crc value [ 407.941565][ T7575] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 407.995747][ T7575] F2FS-fs (loop2): Start checkpoint disabled! [ 408.051402][ T7575] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 408.058603][ T7575] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 408.964973][ T6443] kworker/u4:26: attempt to access beyond end of device [ 408.964973][ T6443] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 410.372479][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 410.388307][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 410.397642][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 410.406624][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 410.415532][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 413.631336][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 413.649721][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 413.658878][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 413.668174][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 413.677140][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 418.003462][ T7651] sctp: [Deprecated]: syz.0.636 (pid 7651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.003462][ T7651] Use struct sctp_sack_info instead [ 419.155207][ T7669] futex_wake_op: syz.0.639 tries to shift op by 144; fix this program [ 419.195182][ T7657] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 419.455990][ T7676] 9pnet_fd: p9_fd_create_tcp (7676): problem connecting socket to 127.0.0.1 [ 420.482307][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.646'. [ 420.491870][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.646'. [ 420.501020][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.646'. [ 420.510048][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.646'. [ 420.519072][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.646'. [ 422.030482][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 422.323934][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 422.340948][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 423.364403][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 423.525303][ T4361] libceph: connect (1)[c::]:6789 error -101 [ 423.531551][ T4361] libceph: mon0 (1)[c::]:6789 connect error [ 423.559790][ T7700] ceph: No mds server is up or the cluster is laggy [ 423.780351][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 424.514696][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 424.525356][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 424.558988][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 424.769170][ T4361] libceph: connect (1)[c::]:6789 error -101 [ 424.799410][ T4361] libceph: mon0 (1)[c::]:6789 connect error [ 424.910654][ T7719] ceph: No mds server is up or the cluster is laggy [ 424.936846][ T4361] libceph: connect (1)[c::]:6789 error -101 [ 425.012034][ T4361] libceph: mon0 (1)[c::]:6789 connect error [ 425.059466][ T7723] loop4: detected capacity change from 0 to 512 [ 426.150929][ T4352] libceph: connect (1)[c::]:6789 error -101 [ 426.160822][ T4352] libceph: mon0 (1)[c::]:6789 connect error [ 426.229995][ T7723] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 426.276574][ T7723] EXT4-fs (loop4): 1 truncate cleaned up [ 426.282283][ T7723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 427.226702][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 427.291469][ T7738] ceph: No mds server is up or the cluster is laggy [ 427.300025][ T6164] libceph: connect (1)[c::]:6789 error -101 [ 427.326246][ T6164] libceph: mon0 (1)[c::]:6789 connect error [ 428.200097][ T7747] vivid-002: disconnect [ 428.567321][ T22] libceph: connect (1)[c::]:6789 error -101 [ 428.576282][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 428.724282][ T7742] vivid-002: reconnect [ 430.597224][ T4352] libceph: connect (1)[c::]:6789 error -101 [ 430.667715][ T4352] libceph: mon0 (1)[c::]:6789 connect error [ 430.803000][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.659'. [ 430.820281][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.659'. [ 430.840980][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.659'. [ 430.853067][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.659'. [ 430.863527][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.659'. [ 431.621824][ T7757] ceph: No mds server is up or the cluster is laggy [ 431.876715][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.660'. [ 431.886295][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.660'. [ 431.895679][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.660'. [ 431.904674][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.660'. [ 431.913539][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.660'. [ 431.942717][ T4361] libceph: connect (1)[c::]:6789 error -101 [ 432.065869][ T4361] libceph: mon0 (1)[c::]:6789 connect error [ 432.870580][ T7794] wlan0 speed is unknown, defaulting to 1000 [ 432.878508][ T7794] wlan0 speed is unknown, defaulting to 1000 [ 432.885171][ T7794] wlan0 speed is unknown, defaulting to 1000 [ 432.899276][ T7794] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 432.926424][ T7794] wlan0 speed is unknown, defaulting to 1000 [ 432.935246][ T7794] wlan0 speed is unknown, defaulting to 1000 [ 432.944489][ T7794] wlan0 speed is unknown, defaulting to 1000 [ 432.952100][ T7794] wlan0 speed is unknown, defaulting to 1000 [ 432.959412][ T7794] wlan0 speed is unknown, defaulting to 1000 [ 434.180042][ T4318] libceph: connect (1)[c::]:6789 error -101 [ 434.369222][ T4318] libceph: mon0 (1)[c::]:6789 connect error [ 434.864241][ T7805] ceph: No mds server is up or the cluster is laggy [ 434.875596][ T6164] libceph: connect (1)[c::]:6789 error -101 [ 435.883510][ T6164] libceph: mon0 (1)[c::]:6789 connect error [ 435.885293][ T7821] __nla_validate_parse: 6 callbacks suppressed [ 435.885308][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 436.034178][ T7823] netlink: 23 bytes leftover after parsing attributes in process `syz.6.674'. [ 436.049522][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 436.080484][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 437.088269][ T7823] ceph: No mds server is up or the cluster is laggy [ 437.115261][ T4316] libceph: connect (1)[c::]:6789 error -101 [ 437.149337][ T4316] libceph: mon0 (1)[c::]:6789 connect error [ 437.161608][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 438.342424][ T4316] libceph: connect (1)[c::]:6789 error -101 [ 438.367466][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 438.367652][ T4316] libceph: mon0 (1)[c::]:6789 connect error [ 439.937979][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.676'. [ 439.949467][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.676'. [ 439.959531][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.676'. [ 439.969239][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.676'. [ 440.036932][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.043600][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.947843][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 441.947933][ T26] audit: type=1800 audit(1786468138.604:52): pid=7855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.681" name="nexus" dev="configfs" ino=45013 res=0 errno=0 [ 442.237298][ T7860] loop5: detected capacity change from 0 to 512 [ 442.529325][ T7860] EXT4-fs: test_dummy_encryption requires encrypt feature [ 442.943507][ T7862] __nla_validate_parse: 1 callbacks suppressed [ 442.943536][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 442.962403][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 442.972327][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 442.982122][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 442.991491][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 447.427308][ T7894] netlink: 28 bytes leftover after parsing attributes in process `syz.5.691'. [ 449.399867][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.692'. [ 450.454001][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.698'. [ 450.465461][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.698'. [ 450.475402][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.698'. [ 450.485191][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.698'. [ 450.494719][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.698'. [ 455.040595][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 456.444812][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 456.493354][ T7951] loop6: detected capacity change from 0 to 512 [ 456.527106][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 456.537265][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 456.559591][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 456.618362][ T7951] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.706: Unrecognised inode hash code 255 [ 456.630315][ T7951] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.706: Corrupt directory, running e2fsck is recommended [ 456.645951][ T7951] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 456.723616][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.707'. [ 456.735496][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.707'. [ 456.745792][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.707'. [ 456.755807][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.707'. [ 456.765898][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.707'. [ 457.594037][ T7951] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.706: corrupted in-inode xattr [ 457.791928][ T7951] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.706: couldn't read orphan inode 15 (err -117) [ 458.442578][ T7951] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 458.933565][ T7969] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.706: Unrecognised inode hash code 255 [ 458.945203][ T7969] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.706: Corrupt directory, running e2fsck is recommended [ 458.960628][ T7969] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 4: comm syz.6.706: path /97/file0: bad entry in directory: rec_len % 4 != 0 - offset=512, inode=4294967295, rec_len=65535, size=1024 fake=0 [ 459.315419][ T5144] EXT4-fs (loop6): unmounting filesystem. [ 461.217547][ T7987] __nla_validate_parse: 5 callbacks suppressed [ 461.217573][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 461.239940][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 461.249951][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 461.259766][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 461.269162][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 463.512872][ T7997] loop4: detected capacity change from 0 to 64 [ 465.898818][ T8012] siw: device registration error -23 [ 466.399664][ T26] audit: type=1326 audit(1786468162.564:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1819e0d9 code=0x7ffc0000 [ 466.685995][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.718'. [ 466.709312][ T26] audit: type=1326 audit(1786468162.564:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f8c1819e0d9 code=0x7ffc0000 [ 466.734059][ T26] audit: type=1326 audit(1786468162.564:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1819e0d9 code=0x7ffc0000 [ 466.758181][ T26] audit: type=1326 audit(1786468162.564:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f8c1819e0d9 code=0x7ffc0000 [ 466.782949][ T26] audit: type=1326 audit(1786468162.564:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1819e0d9 code=0x7ffc0000 [ 467.497078][ T26] audit: type=1326 audit(1786468162.574:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8c1819e0d9 code=0x7ffc0000 [ 468.612872][ T26] audit: type=1326 audit(1786468162.574:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1819e0d9 code=0x7ffc0000 [ 468.669507][ T26] audit: type=1326 audit(1786468162.574:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c1819e0d9 code=0x7ffc0000 [ 468.704106][ T26] audit: type=1326 audit(1786468162.594:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1819e0d9 code=0x7ffc0000 [ 468.823879][ T26] audit: type=1326 audit(1786468162.594:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c1819e0d9 code=0x7ffc0000 [ 468.922838][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.723'. [ 471.032126][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 471.045032][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 471.055349][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 471.065124][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 471.074610][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 472.380521][ T8048] loop4: detected capacity change from 0 to 1024 [ 473.749258][ T8060] loop5: detected capacity change from 0 to 64 [ 473.760838][ T8048] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 474.444010][ T8068] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 475.445451][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 475.689797][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 476.188446][ T8078] vivid-000: disconnect [ 476.755590][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 476.766947][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 476.777063][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 476.786890][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 476.797718][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 477.607324][ T8075] vivid-000: reconnect [ 477.691538][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.738'. [ 477.704471][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.738'. [ 477.714461][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.738'. [ 477.724647][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.738'. [ 480.096613][ T8100] loop5: detected capacity change from 0 to 512 [ 480.137474][ T8100] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 480.231018][ T8100] EXT4-fs error (device loop5): xattr_find_entry:297: inode #15: comm syz.5.752: corrupted xattr entries [ 480.299611][ T8100] EXT4-fs (loop5): Remounting filesystem read-only [ 480.313256][ T8100] EXT4-fs (loop5): 1 truncate cleaned up [ 480.323163][ T8100] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 480.583761][ T8108] loop4: detected capacity change from 0 to 4096 [ 480.958921][ T8108] __ntfs_error: 2 callbacks suppressed [ 480.958939][ T8108] ntfs: (device loop4): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 480.976697][ T8108] ntfs: (device loop4): ntfs_fill_super(): Unsupported NTFS filesystem. [ 481.254684][ T8116] futex_wake_op: syz.6.744 tries to shift op by 144; fix this program [ 481.685556][ T5117] EXT4-fs (loop5): unmounting filesystem. [ 482.678838][ T8127] __nla_validate_parse: 6 callbacks suppressed [ 482.678865][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.746'. [ 484.894270][ T8145] loop2: detected capacity change from 0 to 1024 [ 485.028869][ T8145] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 485.434829][ T8154] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 486.598009][ T8157] vivid-003: disconnect [ 487.047094][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 488.191607][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.754'. [ 488.588146][ T8152] vivid-003: reconnect [ 491.998653][ T8191] atomic_op ffff88802399e998 conn xmit_atomic 0000000000000000 [ 492.891617][ T8199] loop2: detected capacity change from 0 to 7 [ 492.917533][ T8199] Dev loop2: unable to read RDB block 7 [ 492.923384][ T8199] loop2: AHDI p1 p2 p3 [ 492.928355][ T8199] loop2: partition table partially beyond EOD, truncated [ 492.936539][ T8199] loop2: p1 start 1601398130 is beyond EOD, truncated [ 492.951508][ T8200] capability: warning: `syz.4.765' uses deprecated v2 capabilities in a way that may be insecure [ 492.963267][ T8199] loop2: p2 start 1702059890 is beyond EOD, truncated [ 493.392081][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.767'. [ 493.450129][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.767'. [ 493.460039][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.767'. [ 493.469698][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.767'. [ 493.479325][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.767'. [ 494.351874][ T8198] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 494.925822][ T8211] bridge0: port 3(syz_tun) entered blocking state [ 494.933222][ T8211] bridge0: port 3(syz_tun) entered disabled state [ 494.957940][ T8211] device syz_tun entered promiscuous mode [ 494.967904][ T8211] bridge0: port 3(syz_tun) entered blocking state [ 494.974926][ T8211] bridge0: port 3(syz_tun) entered forwarding state [ 495.015025][ T8212] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 497.734800][ T8224] loop6: detected capacity change from 0 to 512 [ 497.796610][ T8224] EXT4-fs: Ignoring removed i_version option [ 497.900335][ T8224] EXT4-fs: Ignoring removed bh option [ 497.954421][ T4351] libceph: connect (1)[c::]:6789 error -101 [ 497.981012][ T4351] libceph: mon0 (1)[c::]:6789 connect error [ 498.071556][ T8224] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.782: inode #13: comm syz.6.782: iget: illegal inode # [ 498.165945][ T8232] ceph: No mds server is up or the cluster is laggy [ 498.211522][ T8224] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.782: couldn't read orphan inode 13 (err -117) [ 498.425997][ T4361] libceph: connect (1)[c::]:6789 error -101 [ 498.437493][ T4361] libceph: mon0 (1)[c::]:6789 connect error [ 498.878224][ T8224] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 499.082491][ T5144] EXT4-fs (loop6): unmounting filesystem. [ 499.263123][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.5.777'. [ 499.889081][ T8264] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 499.896488][ T8264] /dev/nullb0: Can't open blockdev [ 500.682530][ T8265] netlink: 88 bytes leftover after parsing attributes in process `syz.0.779'. [ 501.007817][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.780'. [ 501.026136][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.780'. [ 501.038058][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.780'. [ 501.064008][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.780'. [ 501.074684][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.780'. [ 501.835561][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.841927][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.606451][ T8289] loop5: detected capacity change from 0 to 1024 [ 503.988129][ T8296] loop2: detected capacity change from 0 to 8 [ 504.015153][ T8294] virt_wifi0 speed is unknown, defaulting to 1000 [ 504.022361][ T8294] wlan0 speed is unknown, defaulting to 1000 [ 506.538186][ T8289] EXT4-fs: failed to create workqueue [ 506.588457][ T8289] EXT4-fs (loop5): mount failed [ 506.820789][ T8312] ceph: No mds server is up or the cluster is laggy [ 506.830207][ T6164] libceph: connect (1)[c::]:6789 error -101 [ 506.870074][ T6164] libceph: mon0 (1)[c::]:6789 connect error [ 513.166395][ T8345] loop7: detected capacity change from 0 to 16384 [ 513.453446][ T8353] loop2: detected capacity change from 0 to 7 [ 514.488584][ T4278] Bluetooth: hci2: command 0x0409 tx timeout [ 514.504534][ T8353] Dev loop2: unable to read RDB block 7 [ 514.510200][ T8353] loop2: AHDI p1 p2 p3 [ 514.514498][ T8353] loop2: partition table partially beyond EOD, truncated [ 514.521624][ T8353] loop2: p1 start 1601398130 is beyond EOD, truncated [ 514.528404][ T8353] loop2: p2 start 1702059890 is beyond EOD, truncated [ 514.896213][ T8347] loop7: detected capacity change from 16384 to 0 [ 516.340211][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.806'. [ 516.351609][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.806'. [ 516.362116][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.806'. [ 516.375902][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.806'. [ 516.385369][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.806'. [ 518.204414][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.6.800'. [ 518.213760][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.6.800'. [ 518.223342][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.6.800'. [ 518.232449][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.6.800'. [ 518.241543][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.6.800'. [ 520.290640][ T8382] loop5: detected capacity change from 0 to 16 [ 520.323728][ T8382] erofs: Unknown parameter 'ãé' [ 520.631551][ T8388] atomic_op ffff888023503998 conn xmit_atomic 0000000000000000 [ 521.992821][ T8395] __nla_validate_parse: 1 callbacks suppressed [ 521.992870][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.813'. [ 522.011393][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.813'. [ 522.021407][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.813'. [ 522.031894][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.813'. [ 522.041250][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.813'. [ 523.452361][ T26] audit: type=1800 audit(1786468221.103:65): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.815" name="nexus" dev="configfs" ino=46962 res=0 errno=0 [ 523.473232][ T8397] Missing 'naa.' prefix [ 525.036954][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.819'. [ 525.203242][ T8410] loop4: detected capacity change from 0 to 128 [ 525.325989][ T8414] vivid-000: disconnect [ 526.593090][ T8407] vivid-000: reconnect [ 526.618362][ T8416] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 527.798622][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.823'. [ 527.809719][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.823'. [ 527.819552][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.823'. [ 527.829189][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.823'. [ 527.838519][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.823'. [ 528.688766][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 528.707442][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 528.717867][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 528.727468][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 528.737039][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 531.379387][ T26] audit: type=1800 audit(1786468229.033:66): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.827" name="nexus" dev="configfs" ino=47052 res=0 errno=0 [ 531.546090][ T8443] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 531.922826][ T26] audit: type=1800 audit(1786468229.573:67): pid=8453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.841" name="nexus" dev="configfs" ino=47633 res=0 errno=0 [ 535.206989][ T8488] __nla_validate_parse: 5 callbacks suppressed [ 535.207048][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.837'. [ 537.088115][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 537.286622][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 537.324520][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 537.434621][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 537.457859][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 538.398956][ T26] audit: type=1800 audit(1786468236.053:68): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.843" name="nexus" dev="configfs" ino=47788 res=0 errno=0 [ 542.040530][ T4288] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 543.286662][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 543.298335][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 543.309268][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 543.319490][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 543.329124][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 544.180074][ T8556] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[5144] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8556] [ 545.001623][ T8554] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 546.667102][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.856'. [ 546.979924][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.857'. [ 546.998794][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.857'. [ 547.012769][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.857'. [ 547.024570][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.857'. [ 548.164481][ T8585] Mass Storage Function, version: 2009/09/11 [ 548.170890][ T8585] LUN: removable file: (no medium) [ 548.192443][ T8585] LUN: removable file: (no medium) [ 549.501595][ T8595] virt_wifi0 speed is unknown, defaulting to 1000 [ 549.509066][ T8595] wlan0 speed is unknown, defaulting to 1000 [ 550.232501][ T8599] __nla_validate_parse: 1 callbacks suppressed [ 550.232550][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.6.865'. [ 550.253747][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.6.865'. [ 550.264389][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.6.865'. [ 550.275209][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.6.865'. [ 550.284841][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.6.865'. [ 551.504500][ T8611] 9pnet_virtio: no channels available for device syz [ 553.692635][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 553.705289][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 553.715398][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 553.725349][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 553.734943][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 555.851903][ T8625] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 555.898009][ T8625] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 555.962478][ T8625] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 556.078423][ T8625] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 557.081689][ T8625] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 557.165806][ T8625] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 557.532025][ T8625] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 557.721660][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.880'. [ 558.379756][ T26] audit: type=1800 audit(1786468256.033:69): pid=8666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.882" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 558.488971][ T8666] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 558.516049][ T8666] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 558.587133][ T8666] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 559.518352][ T8666] syz.0.882 (8666) used greatest stack depth: 20160 bytes left [ 559.634537][ T8681] ceph: No mds server is up or the cluster is laggy [ 559.651896][ T4320] libceph: connect (1)[c::]:6789 error -101 [ 559.710654][ T4320] libceph: mon0 (1)[c::]:6789 connect error [ 559.776650][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 559.789098][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 559.800178][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 559.810661][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 559.820302][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 560.136798][ T4320] libceph: connect (1)[c::]:6789 error -101 [ 560.167522][ T4320] libceph: mon0 (1)[c::]:6789 connect error [ 561.800425][ T4352] libceph: connect (1)[c::]:6789 error -101 [ 561.814112][ T4352] libceph: mon0 (1)[c::]:6789 connect error [ 563.076087][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.082637][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.495754][ T8746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.332882][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.902'. [ 569.344516][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.902'. [ 569.354578][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.902'. [ 569.364341][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.902'. [ 569.373630][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.902'. [ 572.295817][ T8772] 9pnet_virtio: no channels available for device syz [ 573.214479][ T4288] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 573.999676][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.907'. [ 574.011054][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.907'. [ 574.020964][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.907'. [ 574.031260][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.907'. [ 574.040682][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.907'. [ 575.446939][ T8809] loop6: detected capacity change from 0 to 8 [ 576.091865][ T8809] SQUASHFS error: zlib decompression failed, data probably corrupt [ 576.100377][ T8809] SQUASHFS error: Failed to read block 0x9b: -5 [ 576.106886][ T8809] SQUASHFS error: Unable to read metadata cache entry [99] [ 576.114532][ T8809] SQUASHFS error: Unable to read inode 0x127 [ 579.368594][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.914'. [ 579.379761][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.914'. [ 579.389808][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.914'. [ 579.399479][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.914'. [ 579.408880][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.914'. [ 580.669033][ T8847] 9pnet_virtio: no channels available for device syz [ 581.504901][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 581.516677][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 581.526664][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 581.536686][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 581.546718][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 584.912011][ T8865] bond0: option use_carrier: invalid value (9) [ 587.024245][ T8870] __nla_validate_parse: 5 callbacks suppressed [ 587.024262][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.923'. [ 590.483121][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'. [ 590.496538][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'. [ 590.508067][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'. [ 590.519531][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'. [ 590.529008][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'. [ 592.138468][ T8901] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 592.192077][ T8903] loop2: detected capacity change from 0 to 256 [ 592.226755][ T26] audit: type=1800 audit(1786468289.883:70): pid=8901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.922" name="attr_allow_any_host" dev="configfs" ino=48991 res=0 errno=0 [ 592.250628][ T8901] nvmet: adding nsid 1 to subsystem testnqn [ 592.468445][ T26] audit: type=1800 audit(1786468290.123:71): pid=8901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.922" name="addr_trtype" dev="configfs" ino=48996 res=0 errno=0 [ 593.201517][ T26] audit: type=1800 audit(1786468290.843:72): pid=8909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.922" name="addr_adrfam" dev="configfs" ino=49001 res=0 errno=0 [ 594.144830][ T8905] nvmet: transport type 0 not supported [ 595.786408][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 597.129074][ T8943] loop4: detected capacity change from 0 to 512 [ 597.159977][ T8943] EXT4-fs: inline encryption not supported [ 597.214057][ T8943] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 597.435304][ T8943] EXT4-fs (loop4): 1 truncate cleaned up [ 597.515731][ T8943] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 597.656252][ T8951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.944'. [ 597.665338][ T8951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.944'. [ 597.674365][ T8951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.944'. [ 600.706332][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 601.142164][ T26] audit: type=1326 audit(1786468298.753:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.6.939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 601.189188][ T26] audit: type=1326 audit(1786468298.753:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.6.939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 601.260721][ T26] audit: type=1326 audit(1786468298.753:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.6.939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 601.393317][ T26] audit: type=1326 audit(1786468298.753:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.6.939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 601.964877][ T26] audit: type=1326 audit(1786468298.753:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.6.939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 602.061852][ T8970] bridge0: port 3(syz_tun) entered blocking state [ 602.069022][ T8970] bridge0: port 3(syz_tun) entered disabled state [ 602.080107][ T8970] device syz_tun entered promiscuous mode [ 602.088090][ T8970] bridge0: port 3(syz_tun) entered blocking state [ 602.094749][ T8970] bridge0: port 3(syz_tun) entered forwarding state [ 602.132047][ T8970] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 602.458014][ T26] audit: type=1326 audit(1786468298.753:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.6.939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 602.482005][ T26] audit: type=1326 audit(1786468298.753:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.6.939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 603.615400][ T26] audit: type=1326 audit(1786468298.753:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.6.939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 603.641023][ T26] audit: type=1326 audit(1786468298.753:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.6.939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 603.704229][ T26] audit: type=1326 audit(1786468298.763:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.6.939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932a19e0d9 code=0x7ffc0000 [ 603.895317][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 605.239898][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'. [ 605.251772][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'. [ 605.262797][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'. [ 605.272663][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'. [ 605.283675][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'. [ 606.378215][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 607.542586][ T9001] syz.5.955 (9001) used greatest stack depth: 16304 bytes left [ 607.698223][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 607.710357][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 607.721592][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 608.228863][ T9006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.404612][ T9022] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 621.607863][ T9084] __nla_validate_parse: 2 callbacks suppressed [ 621.607938][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 621.632097][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 621.643843][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 621.698556][ T9085] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 621.710547][ T9085] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 621.719246][ T9085] CPU: 1 PID: 9085 Comm: syz.5.974 Not tainted syzkaller #0 [ 621.726635][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 621.736693][ T9085] RIP: 0010:dummy_set_selfpowered+0xb7/0x150 [ 621.742999][ T9085] Code: 94 c0 4d 8d b4 c6 38 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 03 b2 53 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ea b1 53 fb 41 be 30 12 00 00 4d [ 621.762773][ T9085] RSP: 0018:ffffc900033277e0 EFLAGS: 00010246 [ 621.768888][ T9085] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 621.776855][ T9085] RDX: ffff88802cb80000 RSI: 0000000000000003 RDI: 0000000000000005 [ 621.784818][ T9085] RBP: 0000000000000003 R08: ffff8880174734df R09: 1ffff11002e8e69b [ 621.792798][ T9085] R10: dffffc0000000000 R11: ffffed1002e8e69c R12: dffffc0000000000 [ 621.801498][ T9085] R13: ffff888056e1c4a8 R14: ffff888143f5d238 R15: 0000000000000000 [ 621.809478][ T9085] FS: 00007ff3472e26c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 621.818846][ T9085] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 621.825429][ T9085] CR2: 000000110c2de455 CR3: 0000000077421000 CR4: 00000000003506e0 [ 621.833403][ T9085] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 621.841383][ T9085] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 621.849349][ T9085] Call Trace: [ 621.852692][ T9085] [ 621.855679][ T9085] ? dummy_wakeup+0x260/0x260 [ 621.860405][ T9085] usb_gadget_set_selfpowered+0x6a/0x2b0 [ 621.866048][ T9085] composite_dev_prepare+0x2f3/0x310 [ 621.871333][ T9085] configfs_composite_bind+0xa1/0xf60 [ 621.876706][ T9085] ? os_desc_qw_sign_store+0x100/0x100 [ 621.882170][ T9085] ? os_desc_qw_sign_store+0x100/0x100 [ 621.887628][ T9085] gadget_bind_driver+0x2af/0x760 [ 621.893611][ T9085] ? driver_sysfs_add+0x1c7/0x260 [ 621.898712][ T9085] ? gadget_match_driver+0x130/0x130 [ 621.903999][ T9085] really_probe+0x24a/0xb40 [ 621.908676][ T9085] ? pm_runtime_barrier+0x147/0x1c0 [ 621.914025][ T9085] __driver_probe_device+0x1f5/0x390 [ 621.919310][ T9085] driver_probe_device+0x4f/0x420 [ 621.924331][ T9085] __driver_attach+0x43d/0x6c0 [ 621.929085][ T9085] ? driver_attach+0x40/0x40 [ 621.933668][ T9085] bus_for_each_dev+0x182/0x1f0 [ 621.938511][ T9085] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 621.944236][ T9085] ? bus_remove_file+0xd0/0xd0 [ 621.948997][ T9085] ? driver_attach+0x40/0x40 [ 621.953585][ T9085] bus_add_driver+0x324/0x5d0 [ 621.958262][ T9085] driver_register+0x32d/0x430 [ 621.963027][ T9085] usb_gadget_register_driver_owner+0xf5/0x260 [ 621.969181][ T9085] gadget_dev_desc_UDC_store+0x1c3/0x2e0 [ 621.974817][ T9085] configfs_write_iter+0x30b/0x400 [ 621.979989][ T9085] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 621.985635][ T9085] vfs_write+0x482/0x9a0 [ 621.989957][ T9085] ? file_end_write+0x250/0x250 [ 621.994806][ T9085] ? __fget_files+0x3fc/0x460 [ 621.999500][ T9085] ? __fdget_pos+0x2ae/0x360 [ 622.004086][ T9085] ? ksys_write+0x70/0x260 [ 622.008506][ T9085] ksys_write+0x14d/0x260 [ 622.012841][ T9085] ? __ia32_sys_read+0x80/0x80 [ 622.017605][ T9085] ? lockdep_hardirqs_on+0x94/0x140 [ 622.022801][ T9085] do_syscall_64+0x4c/0xa0 [ 622.027241][ T9085] ? clear_bhb_loop+0x60/0xb0 [ 622.031925][ T9085] ? clear_bhb_loop+0x60/0xb0 [ 622.036598][ T9085] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.042503][ T9085] RIP: 0033:0x7ff34639e0d9 [ 622.047180][ T9085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.066787][ T9085] RSP: 002b:00007ff3472e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 622.075260][ T9085] RAX: ffffffffffffffda RBX: 00007ff346626180 RCX: 00007ff34639e0d9 [ 622.083314][ T9085] RDX: 000000000000000c RSI: 0000200000000680 RDI: 0000000000000004 [ 622.091276][ T9085] RBP: 00007ff346435024 R08: 0000000000000000 R09: 0000000000000000 [ 622.099243][ T9085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.107297][ T9085] R13: 00007ff346626218 R14: 00007ff346626180 R15: 00007fffd1cca7e8 [ 622.115269][ T9085] [ 622.118287][ T9085] Modules linked in: [ 622.123175][ T9085] ---[ end trace 0000000000000000 ]--- [ 622.128866][ T9085] RIP: 0010:dummy_set_selfpowered+0xb7/0x150 [ 622.134920][ T9085] Code: 94 c0 4d 8d b4 c6 38 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 03 b2 53 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ea b1 53 fb 41 be 30 12 00 00 4d [ 622.154690][ T9085] RSP: 0018:ffffc900033277e0 EFLAGS: 00010246 [ 622.160822][ T9085] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 622.168857][ T9085] RDX: ffff88802cb80000 RSI: 0000000000000003 RDI: 0000000000000005 [ 622.176890][ T9085] RBP: 0000000000000003 R08: ffff8880174734df R09: 1ffff11002e8e69b [ 622.184921][ T9085] R10: dffffc0000000000 R11: ffffed1002e8e69c R12: dffffc0000000000 [ 622.192928][ T9085] R13: ffff888056e1c4a8 R14: ffff888143f5d238 R15: 0000000000000000 [ 622.200965][ T9085] FS: 00007ff3472e26c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 622.210056][ T9085] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 622.216731][ T9085] CR2: 000000110c2de455 CR3: 0000000077421000 CR4: 00000000003506e0 [ 622.224771][ T9085] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 622.232793][ T9085] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 622.240921][ T9085] Kernel panic - not syncing: Fatal exception [ 622.247324][ T9085] Kernel Offset: disabled [ 622.251645][ T9085] Rebooting in 86400 seconds..