last executing test programs: 12m53.330030654s ago: executing program 3 (id=1111): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 12m52.291272654s ago: executing program 3 (id=1116): socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x400) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x20000840) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) 12m51.132070978s ago: executing program 3 (id=1120): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000880)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nojournal_checksum}, {@dax_inode}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@errors_remount}, {@nomblk_io_submit}]}, 0x0, 0x4f8, &(0x7f0000000200)="$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") write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x2, 0x28358d67, 0x5, 0x2, 0x4, 0x43e, 0x0, 0x0, 0x4}}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040)=0x5, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) sendmsg$nl_route(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001e000126bd7000fedbdf250700000000", @ANYRES32=0x0, @ANYBLOB="00000400080009"], 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800) recvmsg(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x400001e0) 12m47.848750346s ago: executing program 3 (id=1126): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 12m46.322981221s ago: executing program 3 (id=1131): syz_open_dev$swradio(0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX], 0x5, 0x191, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) fcntl$setsig(r1, 0xa, 0x2e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x0]}}, 0x0, 0x1c, 0x0, 0x1}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}}, 0xb, 0x1000, 0x5dc, 0x0, 0x34, 0x11000, 0x34}, 0x9c) 12m42.586091732s ago: executing program 3 (id=1136): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x67, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x181}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x253, 0x100}) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x402) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000000)={0x0, 0x5, 0x451}) 12m27.597024906s ago: executing program 32 (id=1136): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x67, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x181}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x253, 0x100}) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x402) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000000)={0x0, 0x5, 0x451}) 5.401269806s ago: executing program 4 (id=2763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mount$fuse(0x0, 0x0, 0x0, 0x10001, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1ff}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20045}, 0x10) 5.147283523s ago: executing program 4 (id=2766): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffffa, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x12, 0x82}, 0x8, 0x203ffffd, 0x300, 0x0, 0x2, 0x20000, 0x0}) 5.070744805s ago: executing program 4 (id=2768): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) syz_usb_disconnect(r0) 2.851089999s ago: executing program 5 (id=2790): pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x3) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1, 0x7, 0x2, 0x180, 0x4, 0x14, 0xf2, 0x4f, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbda], 0x4, 0x43100}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000440)=[@wr_crn={0x46, 0x20, {0x8, 0x4}}, @code={0xa, 0x60, {"b805000000b9e8d100000f01c1f045802bbdc4417f5edd66b8dc008ed8660f104c878766460f38802cf26764440f01df266743250000008066baf80cb8289d308fef66bafc0cb81c350000ef660f08"}}], 0x80}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.769236741s ago: executing program 1 (id=2791): socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000c8f000/0x1000)=nil, 0x1000}, 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES64], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x100}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x34, &(0x7f00000000c0)=ANY=[], 0x0) socket$packet(0x11, 0x3, 0x300) 2.42714229s ago: executing program 5 (id=2793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200fffe500004802800018007000100637400001c000280080001400000000208000240000000160500030000000000240001800b0001007470726f7879000014000280080002400000000e08000140000000020900010073797a30000000000900020073797a3200"], 0xa4}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.391479922s ago: executing program 5 (id=2794): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/59, 0x0, 0x54000}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) 2.354630142s ago: executing program 2 (id=2795): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r1, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 2.235279336s ago: executing program 5 (id=2796): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x80000) socket$netlink(0x10, 0x3, 0x0) fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) pipe2$9p(&(0x7f0000000240), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 2.183914318s ago: executing program 2 (id=2797): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) 1.898041416s ago: executing program 4 (id=2798): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.784988459s ago: executing program 1 (id=2799): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x106, 0x2}}, 0x20) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x8d, 0x0, 0x1}]}) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(0x3) 1.784749529s ago: executing program 4 (id=2800): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000d0d755c4c9c47528addb243700", @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf253e0000000800", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f", 0x25, 0x840, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774", 0xc}], 0x3, &(0x7f00000014c0)}}], 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.73256958s ago: executing program 2 (id=2801): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0xa, 0x6, 0x4, 0x7, 0x3, 0xe, 0x0, 0x1, 0xc, 0x3}, {0xfec00000, 0x3000, 0x8, 0x13, 0x1, 0x8, 0x7, 0x8, 0x3, 0x42, 0x2}, {0x2, 0x5001, 0x4, 0xf, 0x5, 0x6, 0xc3, 0xe7, 0x3, 0x6, 0x7, 0x3}, {0x2, 0x25000, 0xe, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x1, 0x6}, {0x40000, 0x8000000, 0xe, 0xd, 0x59, 0x4, 0x5, 0xc, 0xfc, 0x0, 0xf8, 0xfc}, {0x2, 0x8092000, 0x8, 0xbe, 0x6, 0x7, 0x10, 0x1, 0x0, 0x18, 0x2, 0x4}, {0x5000, 0x8000000, 0x4, 0x9, 0x0, 0xf, 0x0, 0x3, 0x8, 0x4, 0x80, 0xc}, {0x2, 0x41000, 0x10, 0x4, 0x8, 0x1, 0x0, 0xf9, 0x3, 0x7, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x60050018, 0x0, 0x0, 0x222, 0x100000000, 0x0, 0xdddd1000, [0x6, 0x4, 0x4000000000000009, 0x7]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4060000000003, 0xf6, 0x0, 0x7, 0x2000000, 0x0, 0x2004cc, 0x9ffffffffffffffe, 0xffff, 0xfffffffffffffffb, 0x1, 0xffffffffffffffff, 0x7fffffffffffffff, 0x200, 0x0, 0xfffffffffffffffc], 0x1, 0x4202}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.565092305s ago: executing program 2 (id=2802): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x4, 0x1f, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x6f, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x48, 0x29, 0x36, {0x5e, 0x5, '\x00', [@generic={0xff}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1f0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.009478181s ago: executing program 0 (id=2805): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 964.240922ms ago: executing program 1 (id=2806): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_clone(0x8000700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) ptrace(0x10, r0) ptrace$peek(0x2, r0, &(0x7f0000000180)) ptrace$poke(0x5, r0, &(0x7f0000000000), 0x81) 796.373087ms ago: executing program 1 (id=2807): write$9p(0xffffffffffffffff, &(0x7f0000000100)="d5", 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000140)={{0x2000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0xb, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x5, 0x7, 0x46, 0x6, 0x1, 0x4, 0xfa, 0xfc}, {0xf000, 0x200000, 0x9, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0x60000, 0xc, 0x7, 0x7f, 0x7, 0xfe, 0x0, 0xfa, 0x29, 0xd, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0xa, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x8000000, 0x1000, 0xe, 0x2, 0x7, 0x2, 0x5, 0x2, 0x1, 0xd, 0x6, 0xa}, {0x10000, 0x4, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xffff1000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x61, 0x1, 0xa800, 0x8000900, 0x1, [0x6, 0x2, 0x1, 0x1]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x43400078, 0x1000000000, 0x6, 0x41, 0x3000000, 0x3, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x40000000000000, 0x3, 0x6, 0x0, 0x3], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0x8080000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0x3000, 0xa, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x40, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0xd, 0x3, 0x3, 0x2, 0x9f, 0x20, 0x2, 0x3}, {0x10000, 0x54000, 0xc, 0x0, 0x40, 0x7, 0x8, 0x40, 0x26, 0x5, 0x0, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x130, 0x0, 0x0, 0x26000, [0x4, 0x0, 0x40000000002]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 796.249357ms ago: executing program 0 (id=2808): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) syz_clone(0x100000, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 659.157041ms ago: executing program 0 (id=2809): ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f00000000c0)={0x3, 0x1, &(0x7f0000000000)={&(0x7f0000c57000/0x2000)=nil, 0x30000, 0x2009}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) 638.819782ms ago: executing program 1 (id=2810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 616.968762ms ago: executing program 4 (id=2811): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc1", 0xce}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 522.325225ms ago: executing program 0 (id=2812): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c) 464.397556ms ago: executing program 0 (id=2813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) 428.954337ms ago: executing program 5 (id=2814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) 180.007205ms ago: executing program 2 (id=2815): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0xa, 0x6, 0x4, 0x7, 0x6, 0xe, 0x0, 0x1, 0x5, 0x3}, {0xfec00000, 0xffff1000, 0x8, 0x13, 0x1, 0x8, 0x7, 0x8, 0x3, 0x42, 0x2}, {0x2, 0x5001, 0x4, 0xf, 0x5, 0x6, 0xc3, 0x3, 0x3, 0x6, 0x8, 0x3}, {0x2, 0x0, 0x33b363f75dfd5566, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x1, 0x6}, {0x40000, 0x8000000, 0xe, 0xd, 0x59, 0x5, 0x80, 0xc, 0xfc, 0x0, 0xf7, 0xfc}, {0x2, 0xeeef0000, 0xc, 0xbe, 0x6, 0x7, 0x10, 0x1, 0x0, 0x18, 0x2, 0x4}, {0x5000, 0xb000, 0x4, 0x9, 0xff, 0xf, 0x0, 0x3, 0x8, 0x4, 0x80, 0x2}, {0x8000000, 0x4, 0x10, 0x4, 0x8, 0x1, 0x0, 0xf9, 0x3, 0x7, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x60050018, 0x0, 0x0, 0x8, 0x100000002, 0xb101, 0xdddd1000, [0x6, 0x4, 0x4000000000000009, 0x7]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000070}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x8000000000000000, 0xf6, 0x4000000000020000, 0x9, 0x2000000, 0x0, 0x2004cc, 0xfffffffffffffe8b, 0xfffc, 0xfffffffffffffffb, 0x5, 0xffffffffffffffff, 0x7ffffffffffffffe, 0x201, 0x0, 0x3], 0x1, 0x3242}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 79.732057ms ago: executing program 0 (id=2816): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x467, 0xfffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x5}) 27.237079ms ago: executing program 5 (id=2817): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000580)={{0xeeef0000, 0x2000, 0x9, 0xa4, 0xf, 0x20, 0x7f, 0x3f, 0x0, 0x0, 0x6, 0x6}, {0x30000, 0xd000, 0x3, 0x9, 0xa, 0x8, 0xa4, 0x3, 0x8, 0x9, 0x4, 0x2}, {0x8000000, 0xe6e93001, 0x0, 0x7, 0xf8, 0x7f, 0x5, 0x2, 0x9, 0x6, 0x4f, 0x1}, {0x200000, 0x1, 0x3, 0xa5, 0x40, 0x9, 0x7, 0x7f, 0x9, 0xc2, 0x0, 0x4}, {0x80a0000, 0x0, 0x10, 0x2, 0x1, 0x45, 0x5, 0x2, 0x7, 0x0, 0x4, 0x1}, {0x2d000, 0x50000, 0x3, 0x7, 0x1, 0x2a, 0x5, 0x1, 0x2, 0xa3, 0x6, 0x6}, {0xd000, 0xffff1000, 0x4, 0x81, 0x9, 0x5, 0x5, 0x2, 0x2, 0xa, 0x10}, {0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x4, 0x9, 0x0, 0x4, 0x9, 0x8, 0x5}, {0x8080000, 0x9}, {0x41000, 0x6}, 0x40004, 0x0, 0x0, 0x8, 0x7, 0xc000, 0x26000, [0x1ff, 0x4, 0x5, 0x6]}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x1, 0x9, 0x1, 0xcd, 0x9, 0x6, 0x1, 0x0, 0x3, 0x8, 0xeb}, {0x3000, 0x80a0000, 0xd, 0xe, 0x5, 0x7, 0x4, 0x14, 0x4, 0x5, 0x0, 0x1}, {0x8000000, 0x102f8000, 0x1e, 0x5, 0x6, 0x7, 0x81, 0x3, 0x80, 0x1, 0xe, 0x78}, {0xeeef0000, 0xdddd0000, 0x0, 0x3, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x0, 0x9, 0xb9, 0x6, 0x5, 0x42, 0x6, 0x5, 0x1, 0xd, 0x9}, {0xf000, 0x0, 0x0, 0x1, 0xa, 0x8, 0x4, 0x63, 0x1c, 0x5, 0x1, 0xd}, {0xdddd1000, 0x4000, 0xa, 0x23, 0xc, 0x3, 0x9, 0x4a, 0x7, 0x8, 0x43, 0x3}, {0xeeee0000, 0x5}, {0xffff1000}, 0x0, 0x0, 0xdddd0000, 0x150690, 0x3, 0x4000, 0xeeee0c00, [0x1, 0x1004, 0x4, 0x1000]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x5000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 27.098169ms ago: executing program 1 (id=2818): syz_open_dev$hidraw(&(0x7f0000000100), 0x5, 0x400) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000302"], 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 0s ago: executing program 2 (id=2819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30c) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x210) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0xff) r4 = socket(0x10, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) kernel console output (not intermixed with test programs): ytes leftover after parsing attributes in process `syz.4.1481'. [ 730.417363][T10595] loop4: detected capacity change from 0 to 7 [ 730.558568][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 730.791361][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 730.802360][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 730.965715][T10592] binder: BINDER_SET_CONTEXT_MGR already set [ 731.029658][T10592] binder: 10590:10592 ioctl 4018620d 200000000040 returned -16 [ 731.042498][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 731.053456][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 731.256388][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 731.267377][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 731.333982][T10592] netlink: 'syz.2.1480': attribute type 10 has an invalid length. [ 731.404909][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 731.415862][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 731.494850][T10605] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 731.545665][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 731.556627][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 731.584235][T10605] overlayfs: failed to look up (tracing) for ino (-66) [ 732.322259][T10612] program syz.1.1484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 733.899492][T10617] program syz.2.1487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 734.273921][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 734.405298][T10624] loop1: detected capacity change from 0 to 16 [ 734.494883][T10624] erofs: (device loop1): mounted with root inode @ nid 36. [ 735.276512][T10635] ptrace attach of "./syz-executor exec"[9057] was attempted by "./syz-executor exec"[10635] [ 735.492923][T10637] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 735.594336][T10639] program syz.2.1493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 736.659959][T10644] program syz.5.1494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 737.414905][T10637] overlayfs: failed to look up (tracing) for ino (-66) [ 737.572251][T10651] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 737.633196][T10651] overlayfs: failed to look up (tracing) for ino (-66) [ 738.475196][T10648] binder: BINDER_SET_CONTEXT_MGR already set [ 738.481218][T10648] binder: 10647:10648 ioctl 4018620d 200000000040 returned -16 [ 738.993848][T10661] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 739.055159][T10661] overlayfs: failed to look up (tracing) for ino (-66) [ 739.778175][T10664] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 739.832779][T10664] overlayfs: failed to look up (tracing) for ino (-66) [ 740.219275][T10666] program syz.5.1500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 740.371631][T10670] binder: 10669:10670 ioctl 4018620d 0 returned -22 [ 740.455600][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1504'. [ 741.432484][T10684] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 741.592365][T10684] overlayfs: failed to look up (tracing) for ino (-66) [ 741.705050][T10683] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 741.713657][T10683] overlayfs: overlapping lowerdir path [ 742.982330][T10699] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 742.991308][T10699] overlayfs: overlapping lowerdir path [ 746.396346][T10731] loop0: detected capacity change from 0 to 16 [ 746.581315][T10731] erofs: (device loop0): mounted with root inode @ nid 36. [ 746.619463][T10738] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 746.628098][T10738] overlayfs: overlapping lowerdir path [ 747.095943][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.102310][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.702293][T10751] program syz.1.1519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 749.299300][T10752] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 749.363303][T10752] overlayfs: failed to look up (tracing) for ino (-66) [ 749.703668][T10756] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 749.780072][T10756] overlayfs: failed to look up (tracing) for ino (-66) [ 751.177433][T10768] loop0: detected capacity change from 0 to 16 [ 751.520190][T10768] erofs: (device loop0): mounted with root inode @ nid 36. [ 752.419469][T10788] program syz.2.1528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 753.230440][T10791] program syz.1.1527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 754.847560][T10805] program syz.4.1531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 755.532580][T10806] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 755.541081][T10806] overlayfs: overlapping lowerdir path [ 756.293906][T10820] ptrace attach of "./syz-executor exec"[9057] was attempted by "./syz-executor exec"[10820] [ 759.739955][T10832] program syz.5.1537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 759.750235][T10833] program syz.2.1539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 761.786146][T10858] program syz.1.1544 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 765.304511][T10893] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 765.371084][T10893] overlayfs: failed to look up (tracing) for ino (-66) [ 765.725895][T10897] binder_alloc: 10896: pid 10896 spamming oneway? 2 buffers allocated for a total size of 5120 [ 765.774680][T10897] binder_alloc: 10896: pid 10896 spamming oneway? 3 buffers allocated for a total size of 5128 [ 765.815916][T10897] netlink: 'syz.2.1554': attribute type 10 has an invalid length. [ 765.835221][T10897] binder: 10896:10897 ioctl c0186e86 200000000140 returned -22 [ 766.605776][T10904] loop4: detected capacity change from 0 to 7 [ 766.620112][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 766.655860][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 766.666868][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 766.844210][T10904] loop_set_block_size: loop4 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) has still dirty pages (nrpages=1) [ 766.866792][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 766.877760][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 766.917509][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 766.928466][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 767.547402][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 767.558364][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 767.644181][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 767.655184][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 767.898233][T10923] ptrace attach of "./syz-executor exec"[4185] was attempted by "./syz-executor exec"[10923] [ 769.209691][T10924] loop1: detected capacity change from 0 to 16 [ 769.606133][T10924] erofs: (device loop1): mounted with root inode @ nid 36. [ 769.759474][T10934] loop4: detected capacity change from 0 to 7 [ 771.864460][T10944] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 771.946857][T10944] overlayfs: failed to look up (tracing) for ino (-66) [ 773.232053][T10947] binder_alloc: 10946: pid 10946 spamming oneway? 2 buffers allocated for a total size of 5120 [ 773.659242][T10948] binder_alloc: 10946: pid 10946 spamming oneway? 3 buffers allocated for a total size of 5128 [ 773.900261][T10960] binder_alloc: 10959: pid 10959 spamming oneway? 2 buffers allocated for a total size of 5120 [ 774.241964][T10970] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 774.354510][T10960] binder_alloc: 10959: pid 10959 spamming oneway? 3 buffers allocated for a total size of 5128 [ 774.625836][T10962] netlink: 'syz.2.1571': attribute type 10 has an invalid length. [ 774.794331][T10960] binder: 10959:10960 ioctl c0186e86 200000000140 returned -22 [ 774.878645][T10973] device syzkaller0 entered promiscuous mode [ 776.094856][T10983] program syz.1.1576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 776.782940][T10987] loop1: detected capacity change from 0 to 16 [ 776.885272][T10989] program syz.5.1578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 777.518050][T10991] binder: 10990:10991 ioctl 4018620d 0 returned -22 [ 777.549302][T10987] erofs: (device loop1): mounted with root inode @ nid 36. [ 777.807973][T11000] program syz.0.1581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 778.208033][T10996] binder_alloc: 10995: pid 10995 spamming oneway? 2 buffers allocated for a total size of 5120 [ 778.371873][T10996] binder_alloc: 10995: pid 10995 spamming oneway? 3 buffers allocated for a total size of 5128 [ 778.398864][T10996] netlink: 'syz.2.1582': attribute type 10 has an invalid length. [ 778.449661][T10996] binder: 10995:10996 ioctl c0186e86 200000000140 returned -22 [ 781.524585][T11026] ptrace attach of "./syz-executor exec"[4185] was attempted by "./syz-executor exec"[11026] [ 781.952175][T11031] binder_alloc: 11030: pid 11030 spamming oneway? 2 buffers allocated for a total size of 5120 [ 782.016797][T11033] binder_alloc: 11030: pid 11030 spamming oneway? 3 buffers allocated for a total size of 5128 [ 782.135927][T11031] netlink: 'syz.0.1591': attribute type 10 has an invalid length. [ 782.148239][T11035] binder_alloc: 11034: pid 11034 spamming oneway? 2 buffers allocated for a total size of 5120 [ 782.159926][T11031] binder: 11030:11031 ioctl c0186e86 200000000140 returned -22 [ 782.175272][T11035] binder_alloc: 11034: pid 11034 spamming oneway? 3 buffers allocated for a total size of 5128 [ 782.196058][T11035] netlink: 'syz.4.1592': attribute type 10 has an invalid length. [ 782.215121][T11035] binder: 11034:11035 ioctl c0186e86 200000000140 returned -22 [ 782.320927][T11040] loop0: detected capacity change from 0 to 512 [ 782.438019][T11040] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 782.555848][T11040] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0042] [ 782.625405][T11045] ptrace attach of "./syz-executor exec"[4186] was attempted by "./syz-executor exec"[11045] [ 782.681844][T11040] System zones: 1-12 [ 782.874900][T11040] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 33261: comm syz.0.1594: invalid block [ 783.260468][T11040] EXT4-fs (loop0): Remounting filesystem read-only [ 783.278756][T11044] netlink: 'syz.2.1595': attribute type 10 has an invalid length. [ 783.307636][T11040] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1594: invalid indirect mapped block 8 (level 2) [ 783.349400][T11040] EXT4-fs (loop0): Remounting filesystem read-only [ 783.356773][T11040] EXT4-fs (loop0): 1 truncate cleaned up [ 783.362604][T11040] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,nojournal_checksum,dax=inode,data_err=ignore,max_batch_time=0x0000000000000001,errors=remount-ro,nomblk_io_submit,. Quota mode: none. [ 784.288830][T11061] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 784.352460][T11061] overlayfs: failed to look up (tracing) for ino (-66) [ 785.558177][T11059] loop4: detected capacity change from 0 to 7 [ 787.282360][T11075] ptrace attach of "./syz-executor exec"[4186] was attempted by "./syz-executor exec"[11075] [ 788.134995][T11046] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 788.320963][T11077] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 788.771587][T11046] EXT4-fs (loop0): Remounting filesystem read-only [ 788.890603][T11083] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 788.944190][T11083] overlayfs: failed to look up (tracing) for ino (-66) [ 789.551636][T11082] binder: BINDER_SET_CONTEXT_MGR already set [ 789.588677][T11082] binder: 11081:11082 ioctl 4018620d 200000000040 returned -16 [ 789.733116][T11089] program syz.0.1605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 789.811866][T11084] netlink: 'syz.1.1607': attribute type 10 has an invalid length. [ 790.829563][T11100] Cannot find set identified by id 0 to match [ 791.963870][T11098] overlayfs: failed to resolve '/caches': -2 [ 792.337609][T11109] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 792.691380][T11110] overlayfs: unrecognized mount option "//vm/drop_caches" or missing value [ 793.093509][T11111] loop4: detected capacity change from 0 to 7 [ 794.937284][T11119] program syz.0.1617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 795.594591][T11120] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 795.657415][T11120] overlayfs: failed to look up (tracing) for ino (-66) [ 796.023643][T11124] device syzkaller0 entered promiscuous mode [ 796.394036][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 798.265888][T11136] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 798.342270][T11136] overlayfs: failed to look up (tracing) for ino (-66) [ 799.530371][T11149] loop4: detected capacity change from 0 to 7 [ 800.002485][T11151] overlayfs: failed to resolve '/caches': -2 [ 800.244626][T11147] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 800.391855][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 800.409919][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 800.420842][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 800.429285][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 800.440244][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 800.449671][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 800.460618][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 800.481118][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 800.492121][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 800.505485][T11156] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 800.538051][T11156] overlayfs: failed to look up (tracing) for ino (-66) [ 800.543700][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 800.555811][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 800.731479][T11167] loop4: detected capacity change from 0 to 7 [ 801.062963][T11163] binder: BINDER_SET_CONTEXT_MGR already set [ 801.112967][T11163] binder: 11162:11163 ioctl 4018620d 200000000040 returned -16 [ 801.225927][T11164] netlink: 'syz.0.1624': attribute type 10 has an invalid length. [ 801.363979][T11163] netlink: 'syz.4.1626': attribute type 10 has an invalid length. [ 802.869795][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 802.893845][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 802.904766][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 802.976485][T11184] xt_NFQUEUE: number of total queues is 0 [ 803.064432][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 803.075379][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 803.187484][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 803.198461][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 803.721351][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 803.759577][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 803.848270][T11188] ptrace attach of "./syz-executor exec"[4192] was attempted by "./syz-executor exec"[11188] [ 804.155590][T11199] Cannot find set identified by id 0 to match [ 807.849984][T11224] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 808.159379][T11232] tmpfs: Bad value for 'mpol' [ 808.793841][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.800186][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.174239][T11241] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 810.346609][T11249] program syz.5.1647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 811.136149][T11257] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 811.236000][T11260] tmpfs: Bad value for 'mpol' [ 812.212763][T11261] device syzkaller0 entered promiscuous mode [ 812.644385][T11269] loop4: detected capacity change from 0 to 7 [ 812.827574][ C1] print_req_error: 2 callbacks suppressed [ 812.827591][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 812.994945][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 813.005923][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 813.168414][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 813.179417][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 813.276889][T11275] program syz.1.1654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 814.366168][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 814.377157][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 814.493229][T11280] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 815.371157][T11282] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 815.426295][T11282] overlayfs: failed to look up (tracing) for ino (-66) [ 815.725068][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 815.736019][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 815.750445][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 815.761502][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 816.037084][T11287] Cannot find set identified by id 0 to match [ 816.636801][T11291] xt_NFQUEUE: number of total queues is 0 [ 817.088350][T11289] binder_alloc: 11288: pid 11288 spamming oneway? 2 buffers allocated for a total size of 5120 [ 817.134546][T11289] binder_alloc: 11288: pid 11288 spamming oneway? 3 buffers allocated for a total size of 5128 [ 817.364242][T11292] netlink: 'syz.5.1658': attribute type 10 has an invalid length. [ 817.416148][T11289] binder: 11288:11289 ioctl c0186e86 200000000140 returned -22 [ 817.448106][T11302] Cannot find set identified by id 0 to match [ 817.665143][T11304] Cannot find set identified by id 0 to match [ 818.379226][T11299] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 818.442722][T11299] overlayfs: failed to look up (tracing) for ino (-66) [ 818.879565][T11313] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 818.940038][T11313] overlayfs: failed to look up (tracing) for ino (-66) [ 819.516301][T11317] program syz.4.1666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 820.949478][T11327] program syz.0.1665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 820.984699][T11329] ptrace attach of "./syz-executor exec"[4192] was attempted by "./syz-executor exec"[11329] [ 822.062286][T11330] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 822.143073][T11340] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 822.200865][T11340] overlayfs: failed to look up (tracing) for ino (-66) [ 822.944863][T11344] loop2: detected capacity change from 0 to 16 [ 823.075893][T11344] erofs: (device loop2): mounted with root inode @ nid 36. [ 823.752705][T11359] program syz.4.1676 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 824.339450][T11360] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 824.353190][T11360] overlayfs: overlapping lowerdir path [ 824.794741][T11355] binder: 11352:11355 ioctl 4018620d 0 returned -22 [ 824.937383][T11368] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 825.808097][T11370] device syzkaller0 entered promiscuous mode [ 825.893532][T11378] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 825.971134][T11379] tmpfs: Bad value for 'mpol' [ 828.039760][T11392] program syz.5.1685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 830.138303][T11403] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 830.200136][T11403] overlayfs: failed to look up (tracing) for ino (-66) [ 831.191279][T11407] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 831.246902][T11407] overlayfs: failed to look up (tracing) for ino (-66) [ 831.798548][T11411] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 831.861580][T11411] overlayfs: failed to look up (tracing) for ino (-66) [ 832.694467][T11412] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 832.737048][T11412] overlayfs: failed to look up (tracing) for ino (-66) [ 832.915686][T11418] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 832.980073][T11418] overlayfs: failed to look up (tracing) for ino (-66) [ 833.839800][T11420] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 833.907651][T11420] overlayfs: failed to look up (tracing) for ino (-66) [ 834.299536][T11424] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 834.359997][T11424] overlayfs: failed to look up (tracing) for ino (-66) [ 835.355840][T11427] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 835.417593][T11427] overlayfs: failed to look up (tracing) for ino (-66) [ 836.383855][T11436] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 837.062515][T11448] ptrace attach of "./syz-executor exec"[4186] was attempted by "./syz-executor exec"[11448] [ 839.974800][T11463] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 840.084860][T11465] program syz.5.1704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 841.010569][T11472] loop1: detected capacity change from 0 to 2048 [ 841.102477][T11476] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 841.176446][T11476] overlayfs: failed to look up (tracing) for ino (-66) [ 842.167221][T11478] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 842.188932][T11472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 842.212471][T11478] overlayfs: failed to look up (tracing) for ino (-66) [ 842.520041][T11485] program syz.4.1709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 844.460204][T11491] binder: 11490:11491 ioctl 4018620d 0 returned -22 [ 844.484949][T11491] netlink: 'syz.4.1710': attribute type 10 has an invalid length. [ 844.661760][T11493] binder: 11490:11493 ioctl c0186e86 200000000140 returned -22 [ 844.692751][T11506] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 847.174145][T11529] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 847.238557][T11529] overlayfs: failed to look up (tracing) for ino (-66) [ 847.564023][T11527] loop5: detected capacity change from 0 to 512 [ 847.795913][T11527] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 848.035891][T11535] xt_NFQUEUE: number of total queues is 0 [ 848.715461][T11534] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 848.779462][T11524] overlayfs: failed to look up (tracing) for ino (-66) [ 848.855503][T11541] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 848.918950][T11541] overlayfs: failed to look up (tracing) for ino (-66) [ 849.695818][T11527] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0042] [ 849.715422][T11527] System zones: 1-12 [ 849.738340][T11527] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1717: invalid indirect mapped block 8 (level 2) [ 850.694071][T11550] Cannot find set identified by id 0 to match [ 852.695415][T11547] program syz.4.1723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 852.731600][T11527] EXT4-fs (loop5): Remounting filesystem read-only [ 852.916362][T11527] EXT4-fs (loop5): 1 truncate cleaned up [ 852.926217][T11527] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,nojournal_checksum,dax=inode,data_err=ignore,max_batch_time=0x0000000000000001,errors=remount-ro,nomblk_io_submit,. Quota mode: none. [ 853.023891][T11558] Cannot find set identified by id 0 to match [ 854.993263][T11559] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 855.066448][T11559] overlayfs: failed to look up (tracing) for ino (-66) [ 855.176991][T11567] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 855.577290][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1729'. [ 857.405069][T11593] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 857.518982][T11596] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 857.585616][T11596] overlayfs: failed to look up (tracing) for ino (-66) [ 858.833543][T11602] binder: BINDER_SET_CONTEXT_MGR already set [ 858.839573][T11602] binder: 11600:11602 ioctl 4018620d 200000000040 returned -16 [ 858.886387][T11602] binder: 11600:11602 ioctl c0186e86 200000000140 returned -22 [ 858.961249][T11607] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 859.023277][T11607] overlayfs: failed to look up (tracing) for ino (-66) [ 859.332498][T11613] loop4: detected capacity change from 0 to 512 [ 859.429954][T11615] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 859.502501][T11615] overlayfs: failed to look up (tracing) for ino (-66) [ 860.290014][T11618] binder_alloc: 11617: pid 11617 spamming oneway? 2 buffers allocated for a total size of 5120 [ 860.312679][T11618] binder_alloc: 11617: pid 11617 spamming oneway? 3 buffers allocated for a total size of 5128 [ 860.327292][T11613] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 860.327581][T11618] binder: 11617:11618 ioctl c0186e86 200000000140 returned -22 [ 860.394439][T11613] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0042] [ 860.402637][T11613] System zones: 1-12 [ 860.418656][T11613] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33261: comm syz.4.1739: invalid block [ 860.428985][T11622] binder_alloc: 11621: pid 11621 spamming oneway? 2 buffers allocated for a total size of 5120 [ 860.451062][T11622] binder_alloc: 11621: pid 11621 spamming oneway? 3 buffers allocated for a total size of 5128 [ 860.725876][T11595] xt_NFQUEUE: number of total queues is 0 [ 860.813467][T11613] EXT4-fs (loop4): Remounting filesystem read-only [ 860.830566][T11613] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1739: invalid indirect mapped block 8 (level 2) [ 860.846609][T11622] binder: 11621:11622 ioctl c0186e86 200000000140 returned -22 [ 860.873972][T11613] EXT4-fs (loop4): Remounting filesystem read-only [ 860.882059][T11613] EXT4-fs (loop4): 1 truncate cleaned up [ 860.901053][T11613] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,nojournal_checksum,dax=inode,data_err=ignore,max_batch_time=0x0000000000000001,errors=remount-ro,nomblk_io_submit,. Quota mode: none. [ 861.226528][T11628] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 861.309058][T11628] overlayfs: failed to look up (tracing) for ino (-66) [ 861.995607][T11633] binder_alloc: 11629: pid 11629 spamming oneway? 2 buffers allocated for a total size of 5120 [ 862.050414][T11633] binder_alloc: 11629: pid 11629 spamming oneway? 3 buffers allocated for a total size of 5128 [ 862.067847][T11633] binder: 11629:11633 ioctl c0186e86 200000000140 returned -22 [ 862.150016][T11645] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 862.206959][T11645] overlayfs: failed to look up (tracing) for ino (-66) [ 864.836555][T11668] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 864.903839][T11668] overlayfs: failed to look up (tracing) for ino (-66) [ 865.093497][T11623] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 865.215301][T11671] binder: BINDER_SET_CONTEXT_MGR already set [ 865.221329][T11671] binder: 11667:11671 ioctl 4018620d 200000000040 returned -16 [ 865.232578][T11671] netlink: 'syz.1.1752': attribute type 10 has an invalid length. [ 865.242375][T11671] binder: 11667:11671 ioctl c0186e86 200000000140 returned -22 [ 865.284026][T11623] EXT4-fs (loop4): Remounting filesystem read-only [ 865.354346][T11675] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 865.414911][T11675] overlayfs: failed to look up (tracing) for ino (-66) [ 866.062325][T11681] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 866.117884][T11681] overlayfs: failed to look up (tracing) for ino (-66) [ 866.417452][T11677] binder_alloc: 11676: pid 11676 spamming oneway? 2 buffers allocated for a total size of 5120 [ 866.563922][T11686] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 866.600037][T11677] binder_alloc: 11676: pid 11676 spamming oneway? 3 buffers allocated for a total size of 5128 [ 866.636721][T11686] overlayfs: failed to look up (tracing) for ino (-66) [ 866.815480][T11680] netlink: 'syz.0.1754': attribute type 10 has an invalid length. [ 866.936236][T11677] binder: 11676:11677 ioctl c0186e86 200000000140 returned -22 [ 867.515370][T11695] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 867.575344][T11695] overlayfs: failed to look up (tracing) for ino (-66) [ 868.488576][T11692] binder_alloc: 11691: pid 11691 spamming oneway? 2 buffers allocated for a total size of 5120 [ 868.595029][T11697] binder_alloc: 11691: pid 11691 spamming oneway? 3 buffers allocated for a total size of 5128 [ 868.606717][T11702] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 868.672261][T11702] overlayfs: failed to look up (tracing) for ino (-66) [ 868.815879][T11692] binder: 11691:11692 ioctl c0186e86 200000000140 returned -22 [ 869.513653][T11706] binder_alloc: 11705: pid 11705 spamming oneway? 2 buffers allocated for a total size of 5120 [ 869.545996][T11712] loop1: detected capacity change from 0 to 16 [ 869.590599][T11706] binder_alloc: 11705: pid 11705 spamming oneway? 3 buffers allocated for a total size of 5128 [ 869.604472][T11706] binder: 11705:11706 ioctl c0186e86 200000000140 returned -22 [ 869.650018][T11712] erofs: (device loop1): mounted with root inode @ nid 36. [ 869.711925][T11718] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 869.772993][T11718] overlayfs: failed to look up (tracing) for ino (-66) [ 869.976208][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.982576][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.103528][T11722] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 871.648427][T11722] overlayfs: failed to look up (tracing) for ino (-66) [ 871.782891][T11726] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 871.842396][T11726] overlayfs: failed to look up (tracing) for ino (-66) [ 872.213192][T11728] binder: BINDER_SET_CONTEXT_MGR already set [ 872.289372][T11728] binder: 11727:11728 ioctl 4018620d 200000000040 returned -16 [ 872.309606][T11736] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 872.374028][T11736] overlayfs: failed to look up (tracing) for ino (-66) [ 872.783539][T11734] binder: BINDER_SET_CONTEXT_MGR already set [ 872.899790][T11734] binder: 11733:11734 ioctl 4018620d 200000000040 returned -16 [ 873.259386][T11734] netlink: 'syz.5.1769': attribute type 10 has an invalid length. [ 873.324153][T11741] binder: 11733:11741 ioctl c0186e86 200000000140 returned -22 [ 873.442668][T11749] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 873.527955][T11751] ptrace attach of "./syz-executor exec"[4192] was attempted by "./syz-executor exec"[11751] [ 874.227032][T11749] overlayfs: failed to look up (tracing) for ino (-66) [ 874.563793][T11755] binder: BINDER_SET_CONTEXT_MGR already set [ 874.582869][T11755] binder: 11754:11755 ioctl 4018620d 200000000040 returned -16 [ 874.724294][T11765] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 874.732750][T11765] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 874.741351][T11765] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 874.973719][T11757] binder_alloc: 11756: pid 11756 spamming oneway? 2 buffers allocated for a total size of 5120 [ 875.267137][T11764] binder_alloc: 11756: pid 11756 spamming oneway? 3 buffers allocated for a total size of 5128 [ 875.764035][T11775] loop2: detected capacity change from 0 to 2048 [ 876.567065][T11775] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 876.713746][T11775] UDF-fs: error (device loop2): udf_read_inode: (ino 1410) failed !bh [ 876.885404][T11767] binder_alloc: 11760: pid 11760 spamming oneway? 2 buffers allocated for a total size of 5120 [ 876.983139][T11767] binder_alloc: 11760: pid 11760 spamming oneway? 3 buffers allocated for a total size of 5128 [ 877.031652][T11778] loop5: detected capacity change from 0 to 16 [ 877.048610][T11767] netlink: 'syz.4.1775': attribute type 10 has an invalid length. [ 877.070746][T11767] binder: 11760:11767 ioctl c0186e86 200000000140 returned -22 [ 877.249640][T11778] erofs: (device loop5): mounted with root inode @ nid 36. [ 877.326610][T11787] Cannot find set identified by id 0 to match [ 879.147223][T11792] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 879.208164][T11792] overlayfs: failed to look up (tracing) for ino (-66) [ 880.162372][T11798] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 880.240690][T11798] overlayfs: failed to look up (tracing) for ino (-66) [ 881.555388][T11807] loop0: detected capacity change from 0 to 16 [ 881.616237][T11805] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 881.625711][T11805] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 881.635317][T11805] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 881.701135][T11807] erofs: (device loop0): mounted with root inode @ nid 36. [ 881.744526][T11813] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 881.752880][T11813] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 881.761527][T11813] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 882.033746][T11818] loop2: detected capacity change from 0 to 2048 [ 882.387016][T11818] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 882.417455][T11818] UDF-fs: error (device loop2): udf_read_inode: (ino 1410) failed !bh [ 883.000152][T11822] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 883.008653][T11822] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 883.017344][T11822] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 884.381287][T11832] program syz.5.1794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 885.060051][T11834] loop5: detected capacity change from 0 to 16 [ 885.087214][T11834] erofs: (device loop5): mounted with root inode @ nid 36. [ 885.232076][T11837] loop1: detected capacity change from 0 to 16 [ 885.291226][T11837] erofs: (device loop1): mounted with root inode @ nid 36. [ 885.995220][T11847] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 886.060498][T11847] overlayfs: failed to look up (tracing) for ino (-66) [ 888.075841][T11871] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 888.084313][T11871] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 888.092838][T11871] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 889.103291][T11877] loop0: detected capacity change from 0 to 2048 [ 890.242153][T11877] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 890.274206][T11877] UDF-fs: error (device loop0): udf_read_inode: (ino 1410) failed !bh [ 890.609419][T11882] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 890.617818][T11882] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 890.626516][T11882] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 891.012520][T11891] ptrace attach of "./syz-executor exec"[4185] was attempted by "./syz-executor exec"[11891] [ 892.789795][T11908] device syzkaller0 entered promiscuous mode [ 892.937916][T11914] binder: 11912:11914 ioctl c0306201 0 returned -14 [ 893.179602][T11921] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 893.188035][T11921] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 893.197208][T11921] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 894.203031][T11924] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 894.211493][T11924] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 894.220531][T11924] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 895.312200][T11934] loop5: detected capacity change from 0 to 16 [ 895.351654][T11934] erofs: (device loop5): mounted with root inode @ nid 36. [ 895.847304][T11932] Cannot find set identified by id 0 to match [ 896.074442][T11946] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 896.151784][T11946] overlayfs: failed to look up (tracing) for ino (-66) [ 897.499753][T11954] ptrace attach of "./syz-executor exec"[4185] was attempted by "./syz-executor exec"[11954] [ 898.253669][T11956] device syzkaller0 entered promiscuous mode [ 898.480281][T11958] ptrace attach of "./syz-executor exec"[4192] was attempted by "./syz-executor exec"[11958] [ 898.525729][T11960] binder: 11959:11960 ioctl c0306201 0 returned -14 [ 899.019628][T11964] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 899.028485][T11964] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 899.037067][T11964] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 900.947447][T11984] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 900.957351][T11984] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 901.058318][T11987] program syz.2.1831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 902.208421][T11984] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 902.541753][T12002] ptrace attach of "./syz-executor exec"[4192] was attempted by "./syz-executor exec"[12002] [ 903.166444][T12001] device syzkaller0 entered promiscuous mode [ 903.357418][T12008] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 903.365810][T12008] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 903.374355][T12008] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 904.384042][T12016] Cannot find set identified by id 0 to match [ 904.640342][T12021] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 904.648809][T12021] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 904.657378][T12021] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 907.240590][T12020] ptrace attach of "./syz-executor exec"[9057] was attempted by "./syz-executor exec"[12020] [ 907.558354][T12028] loop0: detected capacity change from 0 to 2048 [ 908.764758][T12028] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 908.798481][T12028] UDF-fs: error (device loop0): udf_read_inode: (ino 1410) failed !bh [ 912.211391][T12053] loop4: detected capacity change from 0 to 32768 [ 912.920531][T12067] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 912.929147][T12067] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 912.937954][T12067] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 913.011218][T12053] XFS (loop4): Mounting V5 Filesystem [ 913.421012][T12053] XFS (loop4): Ending clean mount [ 913.488868][T12053] XFS (loop4): Quotacheck needed: Please wait. [ 913.611988][T12062] device syzkaller0 entered promiscuous mode [ 913.728567][T12053] XFS (loop4): Quotacheck: Done. [ 913.866514][ T4186] XFS (loop4): Unmounting Filesystem [ 913.993204][T12084] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 914.001668][T12084] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 914.010568][T12084] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 915.012460][T12089] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 915.021080][T12089] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 915.029804][T12089] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 916.294100][T12106] loop5: detected capacity change from 0 to 32768 [ 916.494969][T12106] XFS (loop5): Mounting V5 Filesystem [ 916.570493][T12106] XFS (loop5): Ending clean mount [ 916.582698][T12106] XFS (loop5): Quotacheck needed: Please wait. [ 916.638542][T12106] XFS (loop5): Quotacheck: Done. [ 917.007180][ T26] audit: type=1800 audit(1777470302.449:2): pid=12116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1859" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4430 res=0 errno=0 [ 917.372926][ T9057] XFS (loop5): Unmounting Filesystem [ 917.558871][T12118] loop2: detected capacity change from 0 to 32768 [ 917.753172][T12118] XFS (loop2): Mounting V5 Filesystem [ 918.015248][T12127] loop4: detected capacity change from 0 to 2048 [ 918.063774][T12127] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 918.096573][T12127] UDF-fs: error (device loop4): udf_read_inode: (ino 1410) failed !bh [ 918.711455][T12118] XFS (loop2): Ending clean mount [ 918.718816][T12118] XFS (loop2): Quotacheck needed: Please wait. [ 918.763736][T12118] XFS (loop2): Quotacheck: Done. [ 919.019826][ T26] audit: type=1800 audit(1777470304.469:3): pid=12131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1870" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 919.366490][ T4192] XFS (loop2): Unmounting Filesystem [ 920.566998][T12140] loop0: detected capacity change from 0 to 32768 [ 921.954267][T12140] XFS (loop0): Mounting V5 Filesystem [ 922.212705][T12140] XFS (loop0): Ending clean mount [ 922.220380][T12140] XFS (loop0): Quotacheck needed: Please wait. [ 923.287877][T12160] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 923.296333][T12160] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 923.304830][T12160] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 923.379773][T12167] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 923.393147][T12140] XFS (loop0): Quotacheck: Done. [ 923.453629][ T4185] XFS (loop0): Unmounting Filesystem [ 923.654579][T12172] loop4: detected capacity change from 0 to 32768 [ 924.031982][T12183] loop2: detected capacity change from 0 to 256 [ 924.391776][T12172] XFS (loop4): Mounting V5 Filesystem [ 924.517156][T12183] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 924.787687][T12193] loop5: detected capacity change from 0 to 32768 [ 924.806469][T12172] XFS (loop4): Ending clean mount [ 924.910658][T12195] loop1: detected capacity change from 0 to 32768 [ 924.943906][T12172] XFS (loop4): Quotacheck needed: Please wait. [ 924.960768][T12199] binder_alloc: 12198: pid 12198 spamming oneway? 2 buffers allocated for a total size of 5120 [ 924.988020][T12199] binder: 12198:12199 ioctl c0306201 0 returned -14 [ 925.194106][T12193] XFS (loop5): Mounting V5 Filesystem [ 925.231919][T12195] XFS (loop1): Mounting V5 Filesystem [ 925.339494][T12172] XFS (loop4): Quotacheck: Done. [ 925.750765][ T26] audit: type=1800 audit(1777470311.199:4): pid=12221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1868" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 926.034106][T12195] XFS (loop1): Ending clean mount [ 926.041431][T12195] XFS (loop1): Quotacheck needed: Please wait. [ 926.058308][T12218] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 926.072142][T12218] overlayfs: failed to look up (tracing) for ino (-66) [ 926.095863][T12193] XFS (loop5): Ending clean mount [ 926.103240][T12193] XFS (loop5): Quotacheck needed: Please wait. [ 926.116943][ T4186] XFS (loop4): Unmounting Filesystem [ 926.157732][T12193] XFS (loop5): Quotacheck: Done. [ 926.656092][T12195] XFS (loop1): Quotacheck: Done. [ 927.118219][T12229] loop0: detected capacity change from 0 to 32768 [ 927.175892][ T26] audit: type=1800 audit(1777470312.619:5): pid=12230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1874" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 927.361716][ T9057] XFS (loop5): Unmounting Filesystem [ 927.460699][ T4184] XFS (loop1): Unmounting Filesystem [ 927.562456][T12229] XFS (loop0): Mounting V5 Filesystem [ 927.708611][T12235] loop2: detected capacity change from 0 to 32768 [ 927.721600][T12229] XFS (loop0): Ending clean mount [ 927.731377][T12229] XFS (loop0): Quotacheck needed: Please wait. [ 927.884441][T12229] XFS (loop0): Quotacheck: Done. [ 928.095160][T12235] XFS (loop2): Mounting V5 Filesystem [ 928.147324][T12247] loop5: detected capacity change from 0 to 32768 [ 928.201909][ T26] audit: type=1800 audit(1777470313.649:6): pid=12250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1890" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 928.603718][T12247] XFS (loop5): Mounting V5 Filesystem [ 928.637022][ T4185] XFS (loop0): Unmounting Filesystem [ 928.689221][T12235] XFS (loop2): Ending clean mount [ 928.698929][T12235] XFS (loop2): Quotacheck needed: Please wait. [ 928.802037][T12247] XFS (loop5): Ending clean mount [ 928.809389][T12247] XFS (loop5): Quotacheck needed: Please wait. [ 928.882695][T12235] XFS (loop2): Quotacheck: Done. [ 928.986740][T12247] XFS (loop5): Quotacheck: Done. [ 929.230637][ T26] audit: type=1800 audit(1777470314.679:7): pid=12268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1881" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 929.772928][ T4192] XFS (loop2): Unmounting Filesystem [ 929.863635][ T9057] XFS (loop5): Unmounting Filesystem [ 929.963419][ T26] audit: type=1800 audit(1777470314.989:8): pid=12269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1880" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4430 res=0 errno=0 [ 930.521344][T12276] loop1: detected capacity change from 0 to 256 [ 931.124340][T12276] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 931.415835][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.422163][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.566545][T12288] binder_alloc: 12286: pid 12286 spamming oneway? 2 buffers allocated for a total size of 5120 [ 931.805656][T12285] loop1: detected capacity change from 0 to 32768 [ 932.053200][T12295] loop5: detected capacity change from 0 to 32768 [ 932.395503][T12285] XFS (loop1): Mounting V5 Filesystem [ 932.395503][T12295] XFS (loop5): Mounting V5 Filesystem [ 932.633218][T12285] XFS (loop1): Ending clean mount [ 932.650303][T12285] XFS (loop1): Quotacheck needed: Please wait. [ 932.678033][T12295] XFS (loop5): Ending clean mount [ 932.773436][T12314] loop0: detected capacity change from 0 to 32768 [ 932.786865][T12285] XFS (loop1): Quotacheck: Done. [ 932.836276][T12295] XFS (loop5): Quotacheck needed: Please wait. [ 933.120350][T12318] loop4: detected capacity change from 0 to 32768 [ 933.162564][ T26] audit: type=1800 audit(1777470318.609:9): pid=12320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1888" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 933.501106][T12295] XFS (loop5): Quotacheck: Done. [ 933.519560][T12314] XFS (loop0): Mounting V5 Filesystem [ 933.526239][T12318] XFS (loop4): Mounting V5 Filesystem [ 933.572276][ T4184] XFS (loop1): Unmounting Filesystem [ 933.739520][T12318] XFS (loop4): Ending clean mount [ 933.754480][T12318] XFS (loop4): Quotacheck needed: Please wait. [ 934.365893][T12318] XFS (loop4): Quotacheck: Done. [ 934.373899][T12314] XFS (loop0): Ending clean mount [ 934.381004][T12314] XFS (loop0): Quotacheck needed: Please wait. [ 934.494374][ T9057] XFS (loop5): Unmounting Filesystem [ 934.567259][ T26] audit: type=1800 audit(1777470320.029:10): pid=12318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1893" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 934.687353][T12314] XFS (loop0): Quotacheck: Done. [ 934.757038][ T4186] XFS (loop4): Unmounting Filesystem [ 934.979396][ T26] audit: type=1800 audit(1777470320.409:11): pid=12341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1892" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 935.146930][T12343] loop2: detected capacity change from 0 to 32768 [ 935.185446][ T4185] XFS (loop0): Unmounting Filesystem [ 935.354482][T12343] XFS (loop2): Mounting V5 Filesystem [ 935.406962][T12354] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 935.415485][T12354] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 935.424045][T12354] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 936.563276][T12343] XFS (loop2): Ending clean mount [ 936.572198][T12343] XFS (loop2): Quotacheck needed: Please wait. [ 936.678266][T12367] loop5: detected capacity change from 0 to 256 [ 937.337992][T12367] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 937.414246][T12343] XFS (loop2): Quotacheck: Done. [ 937.498080][T12366] loop4: detected capacity change from 0 to 32768 [ 937.793676][ T26] audit: type=1800 audit(1777470323.199:12): pid=12373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1897" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 938.070001][T12376] binder_alloc: 12375: pid 12375 spamming oneway? 2 buffers allocated for a total size of 5120 [ 938.201870][ T4192] XFS (loop2): Unmounting Filesystem [ 938.224228][T12366] XFS (loop4): Mounting V5 Filesystem [ 939.976281][T12396] loop1: detected capacity change from 0 to 256 [ 939.989788][T12395] loop5: detected capacity change from 0 to 256 [ 940.008364][T12366] XFS (loop4): AIL initialisation failed: error -12 [ 940.197689][T12366] XFS (loop4): log mount failed [ 940.385296][T12396] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 940.405406][T12395] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 940.810481][T12398] loop0: detected capacity change from 0 to 256 [ 940.885327][T12398] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 941.362134][T12404] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 941.425694][T12404] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 941.441927][T12404] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 942.812902][T12429] loop2: detected capacity change from 0 to 256 [ 942.873065][T12430] xt_NFQUEUE: number of total queues is 0 [ 942.910765][T12419] loop5: detected capacity change from 0 to 256 [ 943.481023][T12429] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 943.514416][T12419] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 944.574721][T12437] binder_alloc: 12436: pid 12436 spamming oneway? 2 buffers allocated for a total size of 5120 [ 945.598402][T12450] binder_alloc: 12446: pid 12446 spamming oneway? 2 buffers allocated for a total size of 5120 [ 946.018358][T12453] loop4: detected capacity change from 0 to 7 [ 946.720072][T12460] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 947.195659][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 947.506073][T12461] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 948.210365][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 948.221304][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 948.230584][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 948.241595][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 948.544282][T12473] loop1: detected capacity change from 0 to 32768 [ 948.561393][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 948.572395][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 948.622544][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 948.633582][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 948.694780][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 948.705829][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 949.019438][T12484] Cannot find set identified by id 0 to match [ 949.639108][T12473] XFS (loop1): Mounting V5 Filesystem [ 950.227751][T12496] loop5: detected capacity change from 0 to 256 [ 950.479063][T12473] XFS (loop1): Ending clean mount [ 950.839312][T12473] XFS (loop1): Quotacheck needed: Please wait. [ 950.887235][T12496] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 950.968015][T12473] XFS (loop1): Quotacheck: Done. [ 951.292106][ T26] audit: type=1800 audit(1777470286.712:13): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1924" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 952.301921][ T4184] XFS (loop1): Unmounting Filesystem [ 953.666026][T12511] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 953.674302][T12511] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 953.682756][T12511] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 953.701919][T12512] binder_alloc: 12509: pid 12509 spamming oneway? 2 buffers allocated for a total size of 5120 [ 954.767295][T12521] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 954.775565][T12521] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 954.784026][T12521] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 955.320042][T12534] xt_NFQUEUE: number of total queues is 0 [ 956.310611][T12538] loop0: detected capacity change from 0 to 32768 [ 957.365715][T12538] XFS (loop0): Mounting V5 Filesystem [ 958.336125][T12556] loop4: detected capacity change from 0 to 32768 [ 959.416044][T12569] loop1: detected capacity change from 0 to 256 [ 959.426676][T12538] XFS (loop0): Ending clean mount [ 959.442853][T12538] XFS (loop0): Quotacheck needed: Please wait. [ 959.531220][T12569] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 959.607646][T12556] XFS (loop4): Mounting V5 Filesystem [ 959.828710][T12538] XFS (loop0): Quotacheck: Done. [ 959.856021][ T4185] XFS (loop0): Unmounting Filesystem [ 960.101223][T12578] loop2: detected capacity change from 0 to 32768 [ 960.121075][T12556] XFS (loop4): Ending clean mount [ 960.129374][T12556] XFS (loop4): Quotacheck needed: Please wait. [ 960.881750][T12578] XFS (loop2): Mounting V5 Filesystem [ 961.255687][T12578] XFS (loop2): Ending clean mount [ 961.262960][T12578] XFS (loop2): Quotacheck needed: Please wait. [ 961.318394][T12556] XFS (loop4): Quotacheck: Done. [ 961.418187][T12595] Cannot find set identified by id 0 to match [ 961.474655][ T4186] XFS (loop4): Unmounting Filesystem [ 961.543173][T12597] loop5: detected capacity change from 0 to 32768 [ 961.604412][T12578] XFS (loop2): Quotacheck: Done. [ 961.888127][T12597] XFS (loop5): Mounting V5 Filesystem [ 961.963750][ T26] audit: type=1800 audit(1777470147.389:14): pid=12605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1949" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 962.506783][T12597] XFS (loop5): Ending clean mount [ 962.515262][T12597] XFS (loop5): Quotacheck needed: Please wait. [ 962.570015][T12597] XFS (loop5): Quotacheck: Done. [ 962.576078][ T4192] XFS (loop2): Unmounting Filesystem [ 963.210124][ T26] audit: type=1800 audit(1777470148.449:15): pid=12611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1951" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0 [ 963.252031][ C1] vkms_vblank_simulate: vblank timer overrun [ 963.553311][ T9057] XFS (loop5): Unmounting Filesystem [ 964.073319][T12617] loop1: detected capacity change from 0 to 256 [ 964.264611][T12617] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 964.716853][T12636] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 964.973415][T12638] loop4: detected capacity change from 0 to 256 [ 965.711335][T12640] loop2: detected capacity change from 0 to 32768 [ 965.968920][T12638] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 966.802298][T12658] loop0: detected capacity change from 0 to 256 [ 967.853795][T12658] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 967.867515][T12640] XFS (loop2): Mounting V5 Filesystem [ 968.148991][T12668] loop4: detected capacity change from 0 to 256 [ 968.636891][T12640] XFS (loop2): Ending clean mount [ 968.677411][T12640] XFS (loop2): Quotacheck needed: Please wait. [ 968.756847][T12640] XFS (loop2): Quotacheck: Done. [ 968.786637][T12668] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 968.867386][T12670] ptrace attach of "./syz-executor exec"[9057] was attempted by "./syz-executor exec"[12670] [ 969.070011][ T4192] XFS (loop2): Unmounting Filesystem [ 969.382744][T12679] loop0: detected capacity change from 0 to 256 [ 970.679260][T12679] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 970.976031][T12686] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 972.986491][T12702] loop2: detected capacity change from 0 to 256 [ 973.679552][T12702] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 975.025901][T12718] loop1: detected capacity change from 0 to 32768 [ 975.451222][T12718] XFS (loop1): Mounting V5 Filesystem [ 975.835594][T12718] XFS (loop1): Ending clean mount [ 975.843949][T12718] XFS (loop1): Quotacheck needed: Please wait. [ 975.927486][T12730] ptrace attach of "./syz-executor exec"[4186] was attempted by "./syz-executor exec"[12730] [ 976.101688][T12734] loop5: detected capacity change from 0 to 32768 [ 976.174391][T12718] XFS (loop1): Quotacheck: Done. [ 976.300402][T12743] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 976.979542][ T26] audit: type=1800 audit(1777470036.853:16): pid=12745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1975" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 977.022281][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.090670][T12743] overlayfs: failed to look up (tracing) for ino (-66) [ 977.282593][T12750] loop0: detected capacity change from 0 to 32768 [ 977.318591][T12734] XFS (loop5): Mounting V5 Filesystem [ 977.351698][ T4184] XFS (loop1): Unmounting Filesystem [ 977.383251][T12734] XFS (loop5): Ending clean mount [ 977.390262][T12734] XFS (loop5): Quotacheck needed: Please wait. [ 977.427520][T12734] XFS (loop5): Quotacheck: Done. [ 977.813615][ T26] audit: type=1800 audit(1777470038.093:17): pid=12762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1976" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0 [ 977.855746][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.093251][T12750] XFS (loop0): Mounting V5 Filesystem [ 978.107655][T12755] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 978.121788][T12755] overlayfs: failed to look up (tracing) for ino (-66) [ 978.324941][ T9057] XFS (loop5): Unmounting Filesystem [ 978.464636][T12750] XFS (loop0): Ending clean mount [ 978.472159][T12750] XFS (loop0): Quotacheck needed: Please wait. [ 978.587488][T12771] loop2: detected capacity change from 0 to 2048 [ 978.786643][T12771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 979.282060][T12772] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 979.354529][T12772] overlayfs: failed to look up (tracing) for ino (-66) [ 979.774385][T12750] XFS (loop0): Quotacheck: Done. [ 980.107629][ T26] audit: type=1800 audit(1777470040.553:18): pid=12777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1979" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 980.833810][T12786] ptrace attach of "./syz-executor exec"[4184] was attempted by "./syz-executor exec"[12786] [ 981.107795][ T4185] XFS (loop0): Unmounting Filesystem [ 981.403016][T12794] loop1: detected capacity change from 0 to 256 [ 981.565949][T12794] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 981.761593][T12801] loop4: detected capacity change from 0 to 32768 [ 982.009810][T12801] XFS (loop4): Mounting V5 Filesystem [ 982.472220][T12801] XFS (loop4): Ending clean mount [ 982.492110][T12801] XFS (loop4): Quotacheck needed: Please wait. [ 982.968520][T12801] XFS (loop4): Quotacheck: Done. [ 984.989009][T12815] loop5: detected capacity change from 0 to 256 [ 985.188184][T12815] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 985.403947][ T4186] XFS (loop4): Unmounting Filesystem [ 986.717201][T12829] loop5: detected capacity change from 0 to 2048 [ 986.747213][T12829] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 990.000146][T12856] loop5: detected capacity change from 0 to 256 [ 990.674044][T12856] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 991.106516][T12869] loop4: detected capacity change from 0 to 256 [ 992.246625][T12872] loop5: detected capacity change from 0 to 256 [ 992.942398][T12864] loop1: detected capacity change from 0 to 32768 [ 992.998407][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.010743][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.028734][T12869] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 993.136649][T12872] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 993.211928][T12864] XFS (loop1): Mounting V5 Filesystem [ 993.366123][T12864] XFS (loop1): Ending clean mount [ 993.373408][T12864] XFS (loop1): Quotacheck needed: Please wait. [ 993.571296][T12864] XFS (loop1): Quotacheck: Done. [ 994.296189][T12896] loop4: detected capacity change from 0 to 256 [ 994.862363][T12896] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 995.446132][T12906] program syz.0.2010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 996.375807][T12908] loop5: detected capacity change from 0 to 2048 [ 996.782072][T12917] loop2: detected capacity change from 0 to 2048 [ 997.833572][T12908] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 998.259071][T12917] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1000.354531][T12939] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1000.355620][ T4184] XFS (loop1): Unmounting Filesystem [ 1000.463203][T12943] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1000.471604][T12943] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1000.480189][T12943] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1003.021038][T12963] program syz.0.2023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1004.447236][T12978] loop5: detected capacity change from 0 to 2048 [ 1004.552982][T12978] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1006.487437][T12987] loop0: detected capacity change from 0 to 32768 [ 1006.772403][T12987] XFS (loop0): Mounting V5 Filesystem [ 1006.927633][T13004] loop1: detected capacity change from 0 to 256 [ 1007.516850][T12987] XFS (loop0): Ending clean mount [ 1007.612456][T13004] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1008.506882][T13016] loop2: detected capacity change from 0 to 256 [ 1009.137563][T13016] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1009.341664][T12987] XFS (loop0): Quotacheck needed: Please wait. [ 1010.162884][T12987] XFS (loop0): Quotacheck: Done. [ 1010.390542][ T4185] XFS (loop0): Unmounting Filesystem [ 1012.992048][T13046] loop5: detected capacity change from 0 to 2048 [ 1013.820370][T13046] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1014.400552][T13045] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1014.408879][T13045] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1014.417385][T13045] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1015.999036][T13066] loop1: detected capacity change from 0 to 256 [ 1016.346923][T13066] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1022.422322][T13103] loop4: detected capacity change from 0 to 2048 [ 1026.531855][T13113] loop5: detected capacity change from 0 to 32768 [ 1027.907376][T13136] loop4: detected capacity change from 0 to 32768 [ 1028.120008][T13136] XFS (loop4): Mounting V5 Filesystem [ 1030.639889][T13159] loop2: detected capacity change from 0 to 2048 [ 1031.809827][T13136] XFS (loop4): Ending clean mount [ 1031.817756][T13136] XFS (loop4): Quotacheck needed: Please wait. [ 1032.556542][T13159] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1033.793960][T13136] XFS (loop4): Quotacheck: Done. [ 1033.843967][T13136] XFS (loop4): Unmounting Filesystem [ 1039.037575][T13191] loop1: detected capacity change from 0 to 32768 [ 1040.045970][T13199] loop5: detected capacity change from 0 to 512 [ 1040.057470][T13199] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 1040.092475][T13191] XFS (loop1): Mounting V5 Filesystem [ 1040.107343][T13199] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0042] [ 1040.160287][T13199] System zones: 1-12 [ 1040.184539][T13191] XFS (loop1): Ending clean mount [ 1040.198207][T13199] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 33261: comm syz.5.2086: invalid block [ 1040.212000][T13191] XFS (loop1): Quotacheck needed: Please wait. [ 1040.287115][T13199] EXT4-fs (loop5): Remounting filesystem read-only [ 1040.306581][T13199] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2086: invalid indirect mapped block 8 (level 2) [ 1040.335323][T13191] XFS (loop1): Quotacheck: Done. [ 1040.531083][T13213] loop4: detected capacity change from 0 to 32768 [ 1040.541447][T13199] EXT4-fs (loop5): Remounting filesystem read-only [ 1040.557941][T13199] EXT4-fs (loop5): 1 truncate cleaned up [ 1040.755667][T13214] loop2: detected capacity change from 0 to 32768 [ 1040.784634][ T26] audit: type=1800 audit(1777469001.242:19): pid=13217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2085" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 1040.951933][T13199] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,nojournal_checksum,dax=inode,data_err=ignore,max_batch_time=0x0000000000000001,errors=remount-ro,nomblk_io_submit,. Quota mode: none. [ 1041.033620][ T4184] XFS (loop1): Unmounting Filesystem [ 1041.080400][T13213] XFS (loop4): Mounting V5 Filesystem [ 1041.080401][T13214] XFS (loop2): Mounting V5 Filesystem [ 1041.300738][T13214] XFS (loop2): Ending clean mount [ 1041.311153][T13214] XFS (loop2): Quotacheck needed: Please wait. [ 1041.400665][T13214] XFS (loop2): Quotacheck: Done. [ 1041.403294][T13213] XFS (loop4): Ending clean mount [ 1041.495325][T13213] XFS (loop4): Quotacheck needed: Please wait. [ 1041.673030][T13213] XFS (loop4): Quotacheck: Done. [ 1041.873630][ T26] audit: type=1800 audit(1777469002.112:20): pid=13214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2089" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 1041.915433][ C0] vkms_vblank_simulate: vblank timer overrun [ 1042.413787][T13242] loop0: detected capacity change from 0 to 32768 [ 1042.439036][ T4186] XFS (loop4): Unmounting Filesystem [ 1042.740288][T13242] XFS (loop0): Mounting V5 Filesystem [ 1042.873459][ T4192] XFS (loop2): Unmounting Filesystem [ 1042.927083][T13242] XFS (loop0): Ending clean mount [ 1042.950346][T13242] XFS (loop0): Quotacheck needed: Please wait. [ 1042.990180][T13255] loop1: detected capacity change from 0 to 256 [ 1043.127194][T13211] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 1043.180512][T13255] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1043.509171][T13211] EXT4-fs (loop5): Remounting filesystem read-only [ 1043.651108][T13242] XFS (loop0): Quotacheck: Done. [ 1043.836952][ T26] audit: type=1800 audit(1777469004.302:21): pid=13242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2091" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 1044.045369][ T4185] XFS (loop0): Unmounting Filesystem [ 1044.489549][T13273] loop4: detected capacity change from 0 to 32768 [ 1044.520922][T13275] loop1: detected capacity change from 0 to 32768 [ 1044.874716][T13275] XFS (loop1): Mounting V5 Filesystem [ 1045.044443][T13273] XFS (loop4): Mounting V5 Filesystem [ 1045.540210][T13273] XFS (loop4): Ending clean mount [ 1045.561312][T13273] XFS (loop4): Quotacheck needed: Please wait. [ 1045.732522][T13300] loop2: detected capacity change from 0 to 2048 [ 1046.108895][T13300] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1046.647418][T13275] XFS (loop1): Ending clean mount [ 1047.023042][T13309] loop5: detected capacity change from 0 to 16 [ 1047.058570][T13273] XFS (loop4): Quotacheck: Done. [ 1047.190710][T13275] XFS (loop1): Quotacheck needed: Please wait. [ 1047.831749][ T26] audit: type=1800 audit(1777468957.794:22): pid=13312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2096" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0 [ 1047.946160][T13309] erofs: (device loop5): mounted with root inode @ nid 36. [ 1048.255374][ T4186] XFS (loop4): Unmounting Filesystem [ 1048.841584][T13319] loop5: detected capacity change from 0 to 32768 [ 1048.863478][T13275] XFS (loop1): Quotacheck: Done. [ 1048.926378][ T4184] XFS (loop1): Unmounting Filesystem [ 1049.195133][T13319] XFS (loop5): Mounting V5 Filesystem [ 1050.006987][T13319] XFS (loop5): Ending clean mount [ 1050.018505][T13319] XFS (loop5): Quotacheck needed: Please wait. [ 1050.075564][T13319] XFS (loop5): Quotacheck: Done. [ 1050.289435][T13336] device syzkaller0 entered promiscuous mode [ 1050.433971][ T26] audit: type=1800 audit(1777468935.860:23): pid=13337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2104" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4430 res=0 errno=0 [ 1050.887452][ T9057] XFS (loop5): Unmounting Filesystem [ 1052.144871][T13358] ptrace attach of "./syz-executor exec"[4192] was attempted by "./syz-executor exec"[13358] [ 1052.499362][T13361] loop0: detected capacity change from 0 to 256 [ 1052.654586][T13361] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1053.345854][T13366] program syz.4.2113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1053.405601][T13364] loop1: detected capacity change from 0 to 256 [ 1053.480688][T13364] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1054.224018][T13371] program syz.0.2114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1054.304072][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.317745][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.285865][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2118'. [ 1061.141474][T13414] loop4: detected capacity change from 0 to 32768 [ 1061.227997][T13415] binder: 13410:13415 ioctl 4018620d 0 returned -22 [ 1062.119568][T13414] XFS (loop4): Mounting V5 Filesystem [ 1062.239054][T13430] loop1: detected capacity change from 0 to 256 [ 1063.230796][T13430] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1063.484098][T13414] XFS (loop4): Ending clean mount [ 1063.491383][T13414] XFS (loop4): Quotacheck needed: Please wait. [ 1063.589205][T13446] program syz.5.2132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1064.230935][T13448] binder: 13443:13448 ioctl 4018620d 0 returned -22 [ 1064.576044][T13414] XFS (loop4): Quotacheck: Done. [ 1064.623241][ T4186] XFS (loop4): Unmounting Filesystem [ 1065.529603][T13458] binder: 13456:13458 ioctl 4018620d 0 returned -22 [ 1067.696948][T13463] loop4: detected capacity change from 0 to 32768 [ 1068.755924][T13472] loop5: detected capacity change from 0 to 32768 [ 1069.881364][T13469] binder: 13467:13469 ioctl 4018620d 0 returned -22 [ 1070.042879][T13463] XFS (loop4): Mounting V5 Filesystem [ 1070.042879][T13472] XFS (loop5): Mounting V5 Filesystem [ 1070.295923][T13463] XFS (loop4): Ending clean mount [ 1070.303116][T13463] XFS (loop4): Quotacheck needed: Please wait. [ 1071.011493][T13500] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1071.041522][T13472] XFS (loop5): Ending clean mount [ 1071.054270][T13472] XFS (loop5): Quotacheck needed: Please wait. [ 1071.129616][T13500] overlayfs: failed to look up (tracing) for ino (-66) [ 1071.363699][T13472] XFS (loop5): Quotacheck: Done. [ 1071.478363][T13463] XFS (loop4): Quotacheck: Done. [ 1071.963740][ T26] audit: type=1800 audit(1777468682.151:24): pid=13508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2141" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4430 res=0 errno=0 [ 1072.005553][ C0] vkms_vblank_simulate: vblank timer overrun [ 1072.326480][ T4186] XFS (loop4): Unmounting Filesystem [ 1072.336331][ T9057] XFS (loop5): Unmounting Filesystem [ 1074.725783][T13527] loop0: detected capacity change from 0 to 16 [ 1074.869158][T13527] erofs: (device loop0): mounted with root inode @ nid 36. [ 1075.503915][T13531] binder: 13528:13531 ioctl 4018620d 0 returned -22 [ 1075.991063][T13533] device syzkaller0 entered promiscuous mode [ 1079.306065][T13565] binder: 13557:13565 ioctl 4018620d 0 returned -22 [ 1080.641570][T13569] loop2: detected capacity change from 0 to 32768 [ 1080.952860][T13575] loop1: detected capacity change from 0 to 32768 [ 1081.002973][T13569] XFS (loop2): Mounting V5 Filesystem [ 1081.115006][T13585] loop5: detected capacity change from 0 to 16 [ 1081.308172][T13575] XFS (loop1): Mounting V5 Filesystem [ 1081.309688][T13585] erofs: (device loop5): mounted with root inode @ nid 36. [ 1081.578448][T13569] XFS (loop2): Ending clean mount [ 1081.591979][T13569] XFS (loop2): Quotacheck needed: Please wait. [ 1082.332569][T13575] XFS (loop1): Ending clean mount [ 1082.363764][T13569] XFS (loop2): Quotacheck: Done. [ 1082.487220][T13575] XFS (loop1): Quotacheck needed: Please wait. [ 1083.111813][ T26] audit: type=1800 audit(1777468518.063:25): pid=13599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2162" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 1083.769514][ T4192] XFS (loop2): Unmounting Filesystem [ 1084.191567][T13575] XFS (loop1): Quotacheck: Done. [ 1084.218336][ T4184] XFS (loop1): Unmounting Filesystem [ 1084.822926][T13611] Cannot find set identified by id 0 to match [ 1085.172430][T13613] device syzkaller0 entered promiscuous mode [ 1088.342978][T13629] loop4: detected capacity change from 0 to 16 [ 1088.424946][T13629] erofs: (device loop4): mounted with root inode @ nid 36. [ 1088.437881][T13630] binder: 13626:13630 ioctl 4018620d 0 returned -22 [ 1089.813932][T13640] loop4: detected capacity change from 0 to 256 [ 1091.882629][T13643] binder: 13636:13643 ioctl 4018620d 0 returned -22 [ 1092.173014][T13640] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1093.873175][T13659] binder: 13654:13659 ioctl 4018620d 0 returned -22 [ 1095.461500][T13671] loop2: detected capacity change from 0 to 256 [ 1095.617845][T13671] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1096.235019][T13677] loop2: detected capacity change from 0 to 16 [ 1096.260172][T13677] erofs: (device loop2): mounted with root inode @ nid 36. [ 1097.412212][T13692] loop5: detected capacity change from 0 to 32768 [ 1097.659559][T13692] XFS (loop5): Mounting V5 Filesystem [ 1097.795663][T13692] XFS (loop5): Ending clean mount [ 1097.802994][T13692] XFS (loop5): Quotacheck needed: Please wait. [ 1097.925919][T13706] loop0: detected capacity change from 0 to 32768 [ 1097.976220][T13692] XFS (loop5): Quotacheck: Done. [ 1098.174854][T13708] loop2: detected capacity change from 0 to 32768 [ 1098.325182][T13708] XFS (loop2): Mounting V5 Filesystem [ 1098.533653][T13706] XFS (loop0): Mounting V5 Filesystem [ 1098.584034][T13708] XFS (loop2): Ending clean mount [ 1098.591236][T13708] XFS (loop2): Quotacheck needed: Please wait. [ 1098.702484][T13706] XFS (loop0): Ending clean mount [ 1098.712880][T13706] XFS (loop0): Quotacheck needed: Please wait. [ 1098.748679][ T9057] XFS (loop5): Unmounting Filesystem [ 1098.778266][T13708] XFS (loop2): Quotacheck: Done. [ 1098.793731][T13706] XFS (loop0): Quotacheck: Done. [ 1099.408803][ T26] audit: type=1800 audit(1777468259.879:26): pid=13727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2191" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 1099.545221][ T26] audit: type=1800 audit(1777468259.929:27): pid=13728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2190" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 1099.672994][ T4192] XFS (loop2): Unmounting Filesystem [ 1099.698552][ T4185] XFS (loop0): Unmounting Filesystem [ 1103.003773][T13749] binder: 13747:13749 ioctl 4018620d 0 returned -22 [ 1110.652669][T13796] device syzkaller0 entered promiscuous mode [ 1115.954718][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.961152][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.689500][T13850] device syzkaller0 entered promiscuous mode [ 1120.424832][T13856] device syzkaller0 entered promiscuous mode [ 1120.854731][T13868] loop5: detected capacity change from 0 to 256 [ 1122.136573][T13868] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1122.612439][T13875] loop1: detected capacity change from 0 to 32768 [ 1124.264414][T13875] XFS (loop1): Mounting V5 Filesystem [ 1125.569389][T13875] XFS (loop1): log mount failed [ 1130.741816][T13965] loop0: detected capacity change from 0 to 16 [ 1130.928695][T13965] erofs: (device loop0): mounted with root inode @ nid 36. [ 1132.219676][T13976] loop2: detected capacity change from 0 to 32768 [ 1134.132708][T13976] XFS (loop2): Mounting V5 Filesystem [ 1136.472114][T13976] XFS (loop2): Ending clean mount [ 1136.479930][T13976] XFS (loop2): Quotacheck needed: Please wait. [ 1140.938222][T13976] XFS (loop2): Quotacheck: Done. [ 1140.991070][ T4192] XFS (loop2): Unmounting Filesystem [ 1141.150344][T14022] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1145.568647][T14061] device syzkaller0 entered promiscuous mode [ 1145.930095][T14067] loop1: detected capacity change from 0 to 32768 [ 1147.320914][T14067] XFS (loop1): Mounting V5 Filesystem [ 1148.646140][T14067] XFS (loop1): Ending clean mount [ 1149.143552][T14067] XFS (loop1): Quotacheck needed: Please wait. [ 1149.176340][T14102] loop2: detected capacity change from 0 to 16 [ 1149.261278][T14098] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1149.278731][T14067] XFS (loop1): Quotacheck: Done. [ 1149.332794][ T4184] XFS (loop1): Unmounting Filesystem [ 1150.102703][T14112] ptrace attach of "./syz-executor exec"[9057] was attempted by "./syz-executor exec"[14112] [ 1154.006181][T14125] device syzkaller0 entered promiscuous mode [ 1154.359520][T14146] loop1: detected capacity change from 0 to 16 [ 1154.405965][T14151] program syz.5.2294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1154.437806][T14146] erofs: (device loop1): mounted with root inode @ nid 36. [ 1154.515266][T14144] loop4: detected capacity change from 0 to 32768 [ 1155.020829][T14144] XFS (loop4): Mounting V5 Filesystem [ 1155.482559][T14144] XFS (loop4): Ending clean mount [ 1155.489808][T14144] XFS (loop4): Quotacheck needed: Please wait. [ 1155.963301][T14144] XFS (loop4): Quotacheck: Done. [ 1156.411622][ T4186] XFS (loop4): Unmounting Filesystem [ 1156.442352][T14175] ptrace attach of "./syz-executor exec"[4184] was attempted by "./syz-executor exec"[14175] [ 1156.712182][T14180] loop2: detected capacity change from 0 to 16 [ 1156.737943][T14180] erofs: (device loop2): mounted with root inode @ nid 36. [ 1160.205874][T14206] loop0: detected capacity change from 0 to 16 [ 1160.259639][T14202] device syzkaller0 entered promiscuous mode [ 1161.046472][T14206] erofs: (device loop0): mounted with root inode @ nid 36. [ 1162.065358][T14222] Cannot find set identified by id 0 to match [ 1162.596685][T14231] loop5: detected capacity change from 0 to 16 [ 1163.527457][T14243] device syzkaller0 entered promiscuous mode [ 1165.967588][T14267] loop5: detected capacity change from 0 to 16 [ 1165.982374][T14263] device syzkaller0 entered promiscuous mode [ 1166.286145][T14267] erofs: (device loop5): mounted with root inode @ nid 36. [ 1167.440302][T14281] xt_NFQUEUE: number of total queues is 0 [ 1171.367179][T14306] loop5: detected capacity change from 0 to 16 [ 1173.941930][T14322] loop4: detected capacity change from 0 to 16 [ 1174.504684][T14322] erofs: (device loop4): mounted with root inode @ nid 36. [ 1174.523002][T14306] erofs: (device loop5): mounted with root inode @ nid 36. [ 1175.426153][T14334] Cannot find set identified by id 0 to match [ 1176.022596][T14331] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1176.038285][T14331] overlayfs: failed to look up (tracing) for ino (-66) [ 1177.167614][T14349] loop2: detected capacity change from 0 to 32768 [ 1177.176434][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.176478][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.543983][T14349] XFS (loop2): Mounting V5 Filesystem [ 1177.983910][T14349] XFS (loop2): Ending clean mount [ 1178.064534][T14349] XFS (loop2): Quotacheck needed: Please wait. [ 1178.378225][T14349] XFS (loop2): Quotacheck: Done. [ 1179.050237][ T4192] XFS (loop2): Unmounting Filesystem [ 1182.766716][T14413] device syzkaller0 entered promiscuous mode [ 1189.902350][T14453] device syzkaller0 entered promiscuous mode [ 1194.585876][T14487] loop0: detected capacity change from 0 to 512 [ 1194.802188][T14487] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 1194.845059][T14489] ptrace attach of "./syz-executor exec"[4192] was attempted by "./syz-executor exec"[14489] [ 1194.908053][T14487] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0042] [ 1194.909406][T14487] System zones: 1-12 [ 1194.976062][T14487] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 33261: comm syz.0.2376: invalid block [ 1194.978972][T14487] EXT4-fs (loop0): Remounting filesystem read-only [ 1194.979283][T14487] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2376: invalid indirect mapped block 8 (level 2) [ 1194.980267][T14487] EXT4-fs (loop0): Remounting filesystem read-only [ 1194.981625][T14487] EXT4-fs (loop0): 1 truncate cleaned up [ 1194.981687][T14487] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,nojournal_checksum,dax=inode,data_err=ignore,max_batch_time=0x0000000000000001,errors=remount-ro,nomblk_io_submit,. Quota mode: none. [ 1201.760713][T14492] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 1201.827551][T14492] EXT4-fs (loop0): Remounting filesystem read-only [ 1209.184207][T14555] device syzkaller0 entered promiscuous mode [ 1209.283920][T14563] device syzkaller0 entered promiscuous mode [ 1209.295807][T14569] loop5: detected capacity change from 0 to 512 [ 1209.324032][T14569] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 1209.370941][T14569] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0042] [ 1209.390599][T14569] System zones: 1-12 [ 1209.411855][T14569] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 33261: comm syz.5.2396: invalid block [ 1209.428002][T14569] EXT4-fs (loop5): Remounting filesystem read-only [ 1209.443928][T14569] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2396: invalid indirect mapped block 8 (level 2) [ 1209.483675][T14569] EXT4-fs (loop5): Remounting filesystem read-only [ 1209.490488][T14569] EXT4-fs (loop5): 1 truncate cleaned up [ 1209.588952][T14569] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,nojournal_checksum,dax=inode,data_err=ignore,max_batch_time=0x0000000000000001,errors=remount-ro,nomblk_io_submit,. Quota mode: none. [ 1209.984482][T14576] loop2: detected capacity change from 0 to 2048 [ 1210.325731][T14576] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1210.358116][T14575] UDF-fs: error (device loop2): udf_read_inode: (ino 1410) failed !bh [ 1210.711906][T14581] device syzkaller0 entered promiscuous mode [ 1211.644840][T14588] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2396'. [ 1211.972601][T14595] loop0: detected capacity change from 0 to 2048 [ 1212.083503][T14595] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1212.128275][T14595] UDF-fs: error (device loop0): udf_read_inode: (ino 1410) failed !bh [ 1212.848198][T14609] loop1: detected capacity change from 0 to 2048 [ 1212.963032][T14609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1213.253579][T14571] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 1213.479108][T14571] EXT4-fs (loop5): Remounting filesystem read-only [ 1215.994948][T14625] device syzkaller0 entered promiscuous mode [ 1216.249282][T14629] loop4: detected capacity change from 0 to 2048 [ 1216.443124][T14629] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1218.062959][T14639] device syzkaller0 entered promiscuous mode [ 1220.365880][T14654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2419'. [ 1220.764805][T14659] loop2: detected capacity change from 0 to 16 [ 1220.771533][T14664] loop4: detected capacity change from 0 to 16 [ 1221.121745][T14667] ptrace attach of "./syz-executor exec"[9057] was attempted by "./syz-executor exec"[14667] [ 1221.146045][T14659] erofs: (device loop2): mounted with root inode @ nid 36. [ 1221.173027][T14664] erofs: (device loop4): mounted with root inode @ nid 36. [ 1221.186625][T14671] device syzkaller0 entered promiscuous mode [ 1222.395478][T14684] loop5: detected capacity change from 0 to 16 [ 1222.436717][T14684] erofs: (device loop5): mounted with root inode @ nid 36. [ 1225.107821][T14701] binder_alloc: 14700: pid 14700 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1225.125170][T14704] device syzkaller0 entered promiscuous mode [ 1225.190205][T14701] binder_alloc: 14700: pid 14700 spamming oneway? 3 buffers allocated for a total size of 5128 [ 1226.433633][T14716] device syzkaller0 entered promiscuous mode [ 1226.579696][T14719] ptrace attach of "./syz-executor exec"[4184] was attempted by "./syz-executor exec"[14719] [ 1227.519317][T14727] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1227.533166][T14727] overlayfs: failed to look up (tracing) for ino (-66) [ 1228.466299][T14737] device syzkaller0 entered promiscuous mode [ 1228.568266][T14736] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1229.344567][T14749] device syzkaller0 entered promiscuous mode [ 1229.353009][T14755] loop2: detected capacity change from 0 to 2048 [ 1229.386757][T14757] ptrace attach of "./syz-executor exec"[4184] was attempted by "./syz-executor exec"[14757] [ 1229.794553][T14755] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1231.391370][T14755] UDF-fs: error (device loop2): udf_read_inode: (ino 1410) failed !bh [ 1232.112857][T14775] loop0: detected capacity change from 0 to 128 [ 1233.840880][T14775] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1233.852788][T14775] hpfs: filesystem error: improperly stopped [ 1233.858790][T14775] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1233.866584][T14775] hpfs: You really don't want any checks? You are crazy... [ 1233.873980][T14775] hpfs: hpfs_map_sector(): read error [ 1233.879521][T14775] hpfs: code page support is disabled [ 1233.884947][T14775] hpfs: hpfs_map_4sectors(): unaligned read [ 1233.890835][T14775] hpfs: hpfs_map_4sectors(): unaligned read [ 1233.896829][T14775] hpfs: filesystem error: unable to find root dir [ 1233.939898][T14771] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1233.958256][T14771] overlayfs: failed to look up (tracing) for ino (-66) [ 1235.377561][T14789] loop0: detected capacity change from 0 to 2048 [ 1235.406202][T14789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1235.509010][T14791] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1239.042641][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.042685][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.374454][T14818] device syzkaller0 entered promiscuous mode [ 1239.615923][T14824] loop5: detected capacity change from 0 to 16 [ 1240.440094][T14824] erofs: (device loop5): mounted with root inode @ nid 36. [ 1240.538139][T14831] loop0: detected capacity change from 0 to 16 [ 1241.289319][T14830] loop4: detected capacity change from 0 to 2048 [ 1241.323434][T14830] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1241.381638][T14827] UDF-fs: error (device loop4): udf_read_inode: (ino 1410) failed !bh [ 1241.830953][T14831] erofs: (device loop0): mounted with root inode @ nid 36. [ 1242.725156][T14840] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1242.758951][T14839] loop5: detected capacity change from 0 to 2048 [ 1242.805980][T14839] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1245.465802][T14862] loop0: detected capacity change from 0 to 16 [ 1245.730315][T14862] erofs: (device loop0): mounted with root inode @ nid 36. [ 1245.949844][T14866] loop2: detected capacity change from 0 to 32768 [ 1247.341665][T14866] XFS (loop2): Mounting V5 Filesystem [ 1247.484649][T14866] XFS (loop2): Ending clean mount [ 1247.505126][T14866] XFS (loop2): Quotacheck needed: Please wait. [ 1247.525315][T14884] device syzkaller0 entered promiscuous mode [ 1247.564378][T14866] XFS (loop2): Quotacheck: Done. [ 1247.607938][ T4192] XFS (loop2): Unmounting Filesystem [ 1247.796855][T14890] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1247.806793][T14888] loop1: detected capacity change from 0 to 2048 [ 1247.865884][T14888] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1251.051410][T14912] loop4: detected capacity change from 0 to 16 [ 1251.837467][T14912] erofs: (device loop4): mounted with root inode @ nid 36. [ 1252.516007][T14921] loop1: detected capacity change from 0 to 32768 [ 1252.644734][T14941] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1253.543304][T14921] XFS (loop1): Mounting V5 Filesystem [ 1254.927075][T14921] XFS (loop1): AIL initialisation failed: error -12 [ 1255.262491][T14921] XFS (loop1): log mount failed [ 1256.721300][T14977] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2507'. [ 1256.723266][T14976] loop2: detected capacity change from 0 to 512 [ 1256.735792][T14977] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2507'. [ 1256.785082][T14964] binder: BINDER_SET_CONTEXT_MGR already set [ 1256.791134][T14964] binder: 14963:14964 ioctl 4018620d 200000000040 returned -16 [ 1256.812788][T14964] netlink: 'syz.4.2505': attribute type 10 has an invalid length. [ 1256.841022][T14964] binder: 14963:14964 ioctl c0186e86 200000000140 returned -22 [ 1256.854107][T14976] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 1256.919395][T14980] loop0: detected capacity change from 0 to 16 [ 1256.927728][T14976] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0042] [ 1256.971714][T14976] System zones: 1-12 [ 1256.994327][T14980] erofs: (device loop0): mounted with root inode @ nid 36. [ 1257.019794][T14983] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1257.037294][T14976] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33261: comm syz.2.2506: invalid block [ 1257.155717][T14976] EXT4-fs (loop2): Remounting filesystem read-only [ 1257.199292][T14983] overlayfs: failed to look up (tracing) for ino (-66) [ 1257.223644][T14976] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2506: invalid indirect mapped block 8 (level 2) [ 1257.252341][T14985] loop5: detected capacity change from 0 to 16 [ 1257.262731][T14976] EXT4-fs (loop2): Remounting filesystem read-only [ 1257.270225][T14976] EXT4-fs (loop2): 1 truncate cleaned up [ 1257.281481][T14976] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,nojournal_checksum,dax=inode,data_err=ignore,max_batch_time=0x0000000000000001,errors=remount-ro,nomblk_io_submit,. Quota mode: none. [ 1257.298991][T14988] device syzkaller0 entered promiscuous mode [ 1257.354306][T14985] erofs: (device loop5): mounted with root inode @ nid 36. [ 1257.389653][T14990] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1258.376755][T14993] binder: BINDER_SET_CONTEXT_MGR already set [ 1258.382972][T14993] binder: 14992:14993 ioctl 4018620d 200000000040 returned -16 [ 1258.442888][T15000] loop4: detected capacity change from 0 to 16 [ 1259.707013][T15014] loop1: detected capacity change from 0 to 512 [ 1259.726606][T15000] erofs: (device loop4): mounted with root inode @ nid 36. [ 1260.764141][T15014] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1260.843110][T15025] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1260.865516][T15025] overlayfs: failed to look up (tracing) for ino (-66) [ 1260.878999][T15014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0042] [ 1260.913644][T15014] System zones: 1-12 [ 1260.950770][T15014] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2519: invalid indirect mapped block 8 (level 2) [ 1261.003915][T15014] EXT4-fs (loop1): Remounting filesystem read-only [ 1261.023858][T15014] EXT4-fs (loop1): 1 truncate cleaned up [ 1261.033649][T15014] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,nojournal_checksum,dax=inode,data_err=ignore,max_batch_time=0x0000000000000001,errors=remount-ro,nomblk_io_submit,. Quota mode: none. [ 1261.063661][T15030] device syzkaller0 entered promiscuous mode [ 1261.076587][T15012] loop5: detected capacity change from 0 to 32768 [ 1262.575370][T15012] XFS (loop5): Mounting V5 Filesystem [ 1262.582715][T15052] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1262.732972][T15012] XFS (loop5): log mount failed [ 1263.082734][T15062] ptrace attach of "./syz-executor exec"[4192] was attempted by "./syz-executor exec"[15062] [ 1264.434969][T15073] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1264.655047][T15081] loop2: detected capacity change from 0 to 16 [ 1266.030016][T15079] loop5: detected capacity change from 0 to 16 [ 1266.049336][T15081] erofs: (device loop2): mounted with root inode @ nid 36. [ 1266.210705][T15088] device syzkaller0 entered promiscuous mode [ 1266.822222][T15079] erofs: (device loop5): mounted with root inode @ nid 36. [ 1267.624032][T15108] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1268.220999][T15101] binder_alloc: 15097: pid 15097 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1268.236141][T15101] binder_alloc: 15097: pid 15097 spamming oneway? 3 buffers allocated for a total size of 5128 [ 1269.069323][T15122] ptrace attach of "./syz-executor exec"[4186] was attempted by "./syz-executor exec"[15122] [ 1270.530904][T15131] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1270.543990][T15131] overlayfs: failed to look up (tracing) for ino (-66) [ 1270.582304][T15115] loop2: detected capacity change from 0 to 32768 [ 1271.296865][T15136] loop0: detected capacity change from 0 to 2048 [ 1271.391075][T15147] program syz.1.2554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1271.429570][T15136] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1271.460646][T15136] UDF-fs: error (device loop0): udf_read_inode: (ino 1410) failed !bh [ 1271.471414][T15146] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1274.104776][T15167] binder_alloc: 15166: pid 15166 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1274.132194][T15163] loop4: detected capacity change from 0 to 16 [ 1274.357432][T15163] erofs: (device loop4): mounted with root inode @ nid 36. [ 1276.137961][T15181] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1276.150822][T15181] overlayfs: failed to look up (tracing) for ino (-66) [ 1276.270324][T15187] binder: BINDER_SET_CONTEXT_MGR already set [ 1276.323553][T15187] binder: 15185:15187 ioctl 4018620d 200000000040 returned -16 [ 1276.352098][T15192] device syzkaller0 entered promiscuous mode [ 1276.537719][T15202] program syz.0.2568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1276.745984][T15209] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1276.860386][T15210] Cannot find set identified by id 0 to match [ 1277.814139][T15221] ptrace attach of "./syz-executor exec"[9057] was attempted by "./syz-executor exec"[15221] [ 1278.738158][T15234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2580'. [ 1278.885149][T15226] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1278.899774][T15226] overlayfs: failed to look up (tracing) for ino (-66) [ 1279.042648][T15237] device syzkaller0 entered promiscuous mode [ 1280.333770][T15249] loop0: detected capacity change from 0 to 2048 [ 1280.427425][T15251] program syz.2.2585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1280.458311][T15249] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1280.514680][T15249] UDF-fs: error (device loop0): udf_read_inode: (ino 1410) failed !bh [ 1280.915009][T15253] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1281.421757][T15261] loop0: detected capacity change from 0 to 512 [ 1281.431647][T15260] ptrace attach of "./syz-executor exec"[4184] was attempted by "./syz-executor exec"[15260] [ 1282.983636][T15261] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1282.995312][T15261] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1283.240363][T15275] Cannot find set identified by id 0 to match [ 1284.471843][T15281] device syzkaller0 entered promiscuous mode [ 1284.860739][T15290] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1284.869851][T15290] overlayfs: overlapping lowerdir path [ 1285.293428][T15300] loop2: detected capacity change from 0 to 2048 [ 1286.310053][T15300] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1286.373491][T15300] UDF-fs: error (device loop2): udf_read_inode: (ino 1410) failed !bh [ 1286.693095][T15307] loop5: detected capacity change from 0 to 16 [ 1286.739969][T15306] device syzkaller0 entered promiscuous mode [ 1286.773601][T15311] loop4: detected capacity change from 0 to 16 [ 1286.793764][T15307] erofs: (device loop5): mounted with root inode @ nid 36. [ 1286.820582][T15311] erofs: (device loop4): mounted with root inode @ nid 36. [ 1289.801765][T15335] xt_NFQUEUE: number of total queues is 0 [ 1290.062079][T15337] ptrace attach of "./syz-executor exec"[4192] was attempted by "./syz-executor exec"[15337] [ 1291.803185][T15340] device syzkaller0 entered promiscuous mode [ 1292.354629][T15352] xt_NFQUEUE: number of total queues is 0 [ 1293.047137][T15346] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1293.109680][T15356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2613'. [ 1293.519094][T15346] overlayfs: overlapping lowerdir path [ 1293.832105][T15361] device syzkaller0 entered promiscuous mode [ 1296.007287][T15378] program syz.4.2620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1296.789356][T15380] loop1: detected capacity change from 0 to 128 [ 1296.871827][T15380] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1296.922376][T15380] hpfs: filesystem error: improperly stopped [ 1297.069783][T15380] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1297.077611][T15380] hpfs: You really don't want any checks? You are crazy... [ 1297.085157][T15380] hpfs: hpfs_map_sector(): read error [ 1297.091910][T15380] hpfs: code page support is disabled [ 1297.098789][T15380] hpfs: hpfs_map_4sectors(): unaligned read [ 1297.105033][T15380] hpfs: hpfs_map_4sectors(): unaligned read [ 1297.110927][T15380] hpfs: filesystem error: unable to find root dir [ 1298.024259][T15399] program syz.4.2626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1298.948029][T15405] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1298.956625][T15405] overlayfs: overlapping lowerdir path [ 1299.164277][T15406] loop5: detected capacity change from 0 to 16 [ 1299.247465][T15406] erofs: (device loop5): mounted with root inode @ nid 36. [ 1299.262286][T15408] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1299.840946][T15410] device syzkaller0 entered promiscuous mode [ 1300.155922][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.164241][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.214092][T15418] ptrace attach of "./syz-executor exec"[4186] was attempted by "./syz-executor exec"[15418] [ 1301.202979][T15429] ptrace attach of "./syz-executor exec"[4185] was attempted by "./syz-executor exec"[15429] [ 1301.753600][T15421] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1302.312687][T15421] overlayfs: failed to look up (tracing) for ino (-66) [ 1302.576367][T15434] loop5: detected capacity change from 0 to 512 [ 1302.876267][T15442] Cannot find set identified by id 0 to match [ 1304.475843][T15434] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 1304.548117][T15434] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0042] [ 1304.561026][T15434] System zones: 1-12 [ 1305.795908][T15434] EXT4-fs: error -4 creating inode table initialization thread [ 1305.845116][T15434] EXT4-fs (loop5): mount failed [ 1307.291124][T15464] device syzkaller0 entered promiscuous mode [ 1308.236137][T15476] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1308.244773][T15476] overlayfs: overlapping lowerdir path [ 1308.505184][T15478] ptrace attach of "./syz-executor exec"[9057] was attempted by "./syz-executor exec"[15478] [ 1309.312844][T15483] program syz.5.2649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1310.707371][T15514] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1310.869826][T15531] loop5: detected capacity change from 0 to 16 [ 1310.939363][T15531] erofs: (device loop5): mounted with root inode @ nid 36. [ 1312.693261][T15644] kvm [15643]: vcpu2, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010000 data 0x7ff [ 1313.078257][T15674] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1313.124049][T15674] device syzkaller0 entered promiscuous mode [ 1313.375172][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1313.382724][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1313.393037][T15689] dlm: no locking on control device [ 1313.426737][T15689] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1313.499814][T15691] binder: 15690:15691 ioctl c0306201 200000000080 returned -14 [ 1313.509508][T15691] binder: 15690:15691 ioctl c0306201 2000000003c0 returned -14 [ 1313.693736][ T4230] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1313.696712][T15694] block device autoloading is deprecated and will be removed. [ 1313.773647][ T4230] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1313.782632][ T4230] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1313.793929][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.834718][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.844827][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1313.852376][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1313.865569][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1313.895914][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.912214][ T23] usb 3-1: config 0 descriptor?? [ 1313.961517][ T4230] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1313.978300][ T4230] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1313.989320][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1314.079976][ T4230] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1314.093550][ T4230] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1314.113443][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1314.193533][ T4230] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1314.202453][ T4230] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1314.244138][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1314.324581][ T4230] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1314.347845][ T4230] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1314.385758][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1314.401092][ T23] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 1314.419655][T15707] input: syz0 as /devices/virtual/input/input7 [ 1314.467642][ T4230] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1314.493517][ T4230] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1314.512963][ T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1314.530541][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1314.623643][ T4230] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1314.643813][ T4230] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1314.694782][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1314.773647][ T4230] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1314.798107][ T4230] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1314.821259][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1314.983643][ T4230] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1314.993190][ T4230] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1315.007746][ T4230] usb 1-1: Product: syz [ 1315.018149][ T4230] usb 1-1: Manufacturer: syz [ 1315.024696][ T4230] usb 1-1: SerialNumber: syz [ 1315.031747][ T4230] usb 1-1: config 0 descriptor?? [ 1315.082586][ T4230] yurex 1-1:0.0: USB YUREX device now attached to Yurex #1 [ 1315.305184][T13769] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1315.328604][T15730] loop5: detected capacity change from 0 to 7 [ 1315.337269][ T4230] usb 1-1: USB disconnect, device number 4 [ 1315.349754][T15730] Dev loop5: unable to read RDB block 7 [ 1315.356915][T15730] loop5: AHDI p4 [ 1315.360667][T15730] loop5: partition table partially beyond EOD, truncated [ 1315.583449][T13769] usb 6-1: Using ep0 maxpacket: 8 [ 1315.713763][T13769] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1315.721993][T13769] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1315.732150][T13769] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1315.742331][T13769] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1315.753975][T13769] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1315.767443][T13769] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1315.776555][T13769] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.794061][ T4230] yurex 1-1:0.0: USB YUREX #1 now disconnected [ 1316.033662][T13769] usb 6-1: usb_control_msg returned -32 [ 1316.039311][T13769] usbtmc 6-1:16.0: can't read capabilities [ 1316.133558][ T9287] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1316.369152][T15753] netlink: 'syz.4.2742': attribute type 3 has an invalid length. [ 1316.381784][ T9287] usb 2-1: Using ep0 maxpacket: 16 [ 1316.506322][ T9287] usb 2-1: config 0 has no interfaces? [ 1316.559191][T12409] usb 3-1: USB disconnect, device number 7 [ 1316.663677][ T9287] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1316.673079][ T9287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.686242][ T9287] usb 2-1: Product: syz [ 1316.690442][ T9287] usb 2-1: Manufacturer: syz [ 1316.697195][ T9287] usb 2-1: SerialNumber: syz [ 1316.718447][ T9287] usb 2-1: config 0 descriptor?? [ 1317.464870][ T26] audit: type=1804 audit(1777467477.934:28): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2751" name="/newroot/532/file1" dev="fuse" ino=1 res=1 errno=0 [ 1317.485315][ C1] vkms_vblank_simulate: vblank timer overrun [ 1317.492531][ T26] audit: type=1800 audit(1777467477.944:29): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2751" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1318.035944][T13769] usb 6-1: USB disconnect, device number 2 [ 1318.064949][T12409] usb 2-1: USB disconnect, device number 3 [ 1318.218582][T15796] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1318.227065][T15796] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1318.624730][T13769] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1318.873452][T13769] usb 6-1: Using ep0 maxpacket: 8 [ 1319.015893][T13769] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1319.027068][T13769] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.037242][T13769] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1319.043927][T13769] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1319.052963][T13769] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.063116][T13769] usb 6-1: config 0 descriptor?? [ 1319.360705][T15756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1319.463267][T15806] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1319.546511][T13769] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 1319.561091][T13769] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 1319.568399][T13769] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 1319.576543][T13769] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 1319.584626][T13769] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 1319.591914][T13769] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1319.771332][ T23] usb 6-1: USB disconnect, device number 3 [ 1319.829071][T15824] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1320.173456][T13769] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1320.372064][T15840] device syzkaller1 entered promiscuous mode [ 1320.434548][T13769] usb 5-1: Using ep0 maxpacket: 32 [ 1320.563621][T13769] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.574718][T13769] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1320.585615][T13769] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1320.612796][T15851] netlink: 'syz.5.2774': attribute type 3 has an invalid length. [ 1320.753481][T12409] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1320.775970][T13769] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1320.785337][T13769] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.793664][T13769] usb 5-1: Product: syz [ 1320.798071][T13769] usb 5-1: Manufacturer: syz [ 1320.802902][T13769] usb 5-1: SerialNumber: syz [ 1320.850236][T13769] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1320.860099][T13769] imon 5-1:155.0: unable to initialize intf0, err -19 [ 1320.879978][T13769] imon:imon_probe: failed to initialize context! [ 1320.911006][T13769] imon 5-1:155.0: unable to register, err -19 [ 1320.946269][T15853] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1320.962936][T15853] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1321.124129][T12409] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.143037][T12409] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1321.189313][T12409] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1321.246796][T12409] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1321.263237][T15868] device syzkaller0 entered promiscuous mode [ 1321.288861][T12409] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.376547][T12409] usb 3-1: invalid MIDI out EP 0 [ 1321.516886][T12409] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 1321.565022][T14565] udevd[14565]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1321.621057][T15873] device syzkaller0 entered promiscuous mode [ 1321.813847][T15876] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1321.855202][T13769] usb 3-1: USB disconnect, device number 8 [ 1322.017891][T15889] capability: warning: `syz.5.2788' uses 32-bit capabilities (legacy support in use) [ 1322.333422][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1322.573889][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 1322.693894][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.713748][ T23] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1322.893635][ T23] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1322.907207][ T23] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1322.924296][ T23] usb 1-1: Product: syz [ 1322.932962][ T23] usb 1-1: Manufacturer: syz [ 1322.943280][ T23] usb 1-1: SerialNumber: syz [ 1322.960610][ T23] usb 1-1: config 0 descriptor?? [ 1323.005358][ T23] imon_raw 1-1:0.0: IR endpoint missing [ 1323.013427][ T9287] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1323.057917][T12409] usb 5-1: USB disconnect, device number 4 [ 1323.135995][ T26] audit: type=1326 audit(1777467483.604:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15919 comm="syz.1.2799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8fc9d3dd9 code=0x0 [ 1323.222487][ T23] usb 1-1: USB disconnect, device number 5 [ 1323.273450][ T9287] usb 6-1: Using ep0 maxpacket: 8 [ 1323.553705][ T9287] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1323.583271][ T9287] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.603636][ T9287] usb 6-1: Product: syz [ 1323.607849][ T9287] usb 6-1: Manufacturer: syz [ 1323.612457][ T9287] usb 6-1: SerialNumber: syz [ 1323.639993][ T9287] usb 6-1: config 0 descriptor?? [ 1323.685554][ T9287] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1323.700484][ T9287] dvb-usb: bulk message failed: -22 (2/0) [ 1323.733811][ T9287] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1323.784007][ T9287] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1323.802588][ T9287] usb 6-1: media controller created [ 1323.857856][ T9287] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1323.983575][ T9287] cxusb: set interface failed [ 1324.018415][ T9287] dvb-usb: bulk message failed: -22 (1/0) [ 1324.140235][ T9287] DVB: Unable to find symbol mt352_attach() [ 1324.152429][ T9287] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1324.212166][T15944] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1324.393589][ T9287] rc_core: IR keymap rc-dvico-portable not found [ 1324.408464][ T9287] Registered IR keymap rc-empty [ 1324.446524][ T9287] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1324.485140][ T9287] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input8 [ 1324.593863][ T9287] dvb-usb: schedule remote query interval to 100 msecs. [ 1324.607821][ T9287] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1324.641604][ T9287] usb 6-1: USB disconnect, device number 4 [ 1324.789301][ T9287] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1324.840451][T15968] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1324.996772][ T4200] Bluetooth: hci0: Unknown advertising packet type: 0x100 [ 1324.997040][ T4200] ================================================================== [ 1325.012628][ T4200] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12e6/0x3c90 [ 1325.020553][ T4200] Read of size 2 at addr ffff88807ae33400 by task kworker/u5:6/4200 [ 1325.028537][ T4200] [ 1325.030880][ T4200] CPU: 0 PID: 4200 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 1325.038430][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1325.048493][ T4200] Workqueue: hci0 hci_rx_work [ 1325.053265][ T4200] Call Trace: [ 1325.056545][ T4200] [ 1325.059485][ T4200] dump_stack_lvl+0x188/0x250 [ 1325.064209][ T4200] ? show_regs_print_info+0x20/0x20 [ 1325.069420][ T4200] ? load_image+0x400/0x400 [ 1325.074042][ T4200] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1325.079596][ T4200] print_address_description+0x60/0x2d0 [ 1325.085159][ T4200] ? hci_le_meta_evt+0x12e6/0x3c90 [ 1325.090277][ T4200] kasan_report+0xdf/0x130 [ 1325.094777][ T4200] ? hci_le_meta_evt+0x12e6/0x3c90 [ 1325.099924][ T4200] hci_le_meta_evt+0x12e6/0x3c90 [ 1325.104890][ T4200] ? hci_remote_host_features_evt+0x280/0x280 [ 1325.110970][ T4200] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1325.116698][ T4200] ? mark_lock+0x94/0x320 [ 1325.121107][ T4200] ? mutex_unlock+0x10/0x10 [ 1325.125628][ T4200] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1325.131686][ T4200] ? lock_chain_count+0x20/0x20 [ 1325.136552][ T4200] ? __rwlock_init+0x140/0x140 [ 1325.141328][ T4200] hci_event_packet+0xe48/0x1370 [ 1325.146276][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 1325.151518][ T4200] ? rcu_lock_release+0x20/0x20 [ 1325.156389][ T4200] ? hci_send_to_monitor+0x9c/0x4a0 [ 1325.161700][ T4200] hci_rx_work+0x255/0xa10 [ 1325.166144][ T4200] process_one_work+0x85f/0x1010 [ 1325.171170][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 1325.172120][T15973] APIC base relocation is unsupported by KVM [ 1325.176806][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 1325.176871][ T4200] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1325.176889][ T4200] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1325.176909][ T4200] ? wq_worker_running+0x97/0x170 [ 1325.176930][ T4200] worker_thread+0xaa6/0x1290 [ 1325.176973][ T4200] kthread+0x436/0x520 [ 1325.212507][ T4200] ? rcu_lock_release+0x20/0x20 [ 1325.217371][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 1325.221973][ T4200] ret_from_fork+0x1f/0x30 [ 1325.226502][ T4200] [ 1325.229533][ T4200] [ 1325.231855][ T4200] Allocated by task 15978: [ 1325.236266][ T4200] __kasan_kmalloc+0xb5/0xf0 [ 1325.240864][ T4200] __alloc_skb+0x22c/0x750 [ 1325.245369][ T4200] vhci_write+0xbc/0x450 [ 1325.249701][ T4200] vfs_write+0x745/0xd60 [ 1325.254006][ T4200] ksys_write+0x152/0x260 [ 1325.258337][ T4200] do_syscall_64+0x4c/0xa0 [ 1325.262770][ T4200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1325.268670][ T4200] [ 1325.270995][ T4200] Last potentially related work creation: [ 1325.276701][ T4200] kasan_save_stack+0x35/0x60 [ 1325.281386][ T4200] kasan_record_aux_stack+0xb8/0x100 [ 1325.286674][ T4200] insert_work+0x54/0x3d0 [ 1325.291012][ T4200] __queue_work+0x9c5/0xd50 [ 1325.295518][ T4200] queue_work_on+0x124/0x1f0 [ 1325.300109][ T4200] blk_update_request+0x876/0x1200 [ 1325.305313][ T4200] blk_mq_end_request+0x3a/0x70 [ 1325.310182][ T4200] blk_flush_complete_seq+0x5d4/0xc90 [ 1325.315540][ T4200] flush_end_io+0x7bc/0xa10 [ 1325.320029][ T4200] blk_done_softirq+0xfa/0x140 [ 1325.324777][ T4200] handle_softirqs+0x339/0x830 [ 1325.329579][ T4200] run_ksoftirqd+0xa4/0x100 [ 1325.334064][ T4200] smpboot_thread_fn+0x4f6/0x970 [ 1325.339018][ T4200] kthread+0x436/0x520 [ 1325.343070][ T4200] ret_from_fork+0x1f/0x30 [ 1325.347470][ T4200] [ 1325.349779][ T4200] The buggy address belongs to the object at ffff88807ae33000 [ 1325.349779][ T4200] which belongs to the cache kmalloc-1k of size 1024 [ 1325.363815][ T4200] The buggy address is located 0 bytes to the right of [ 1325.363815][ T4200] 1024-byte region [ffff88807ae33000, ffff88807ae33400) [ 1325.377504][ T4200] The buggy address belongs to the page: [ 1325.383122][ T4200] page:ffffea0001eb8c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ae30 [ 1325.393253][ T4200] head:ffffea0001eb8c00 order:3 compound_mapcount:0 compound_pincount:0 [ 1325.401556][ T4200] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1325.409528][ T4200] raw: 00fff00000010200 ffffea0001d71200 0000000600000006 ffff888016c41dc0 [ 1325.418092][ T4200] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1325.426651][ T4200] page dumped because: kasan: bad access detected [ 1325.433050][ T4200] page_owner tracks the page as allocated [ 1325.438745][ T4200] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4185, ts 51515761777, free_ts 51512330026 [ 1325.457823][ T4200] get_page_from_freelist+0x1bbd/0x1ca0 [ 1325.463432][ T4200] __alloc_pages+0x1ee/0x480 [ 1325.468007][ T4200] new_slab+0xc0/0x4b0 [ 1325.472061][ T4200] ___slab_alloc+0x80a/0xdd0 [ 1325.476630][ T4200] __kmalloc_node+0x200/0x3b0 [ 1325.481289][ T4200] qdisc_alloc+0x8d/0xb10 [ 1325.485669][ T4200] qdisc_create_dflt+0x5f/0x430 [ 1325.490500][ T4200] dev_activate+0x331/0x12b0 [ 1325.495071][ T4200] __dev_open+0x33b/0x430 [ 1325.499417][ T4200] __dev_change_flags+0x20d/0x6a0 [ 1325.504422][ T4200] dev_change_flags+0x82/0x1a0 [ 1325.509174][ T4200] do_setlink+0xcdb/0x3d60 [ 1325.513619][ T4200] rtnl_newlink+0x1658/0x1a50 [ 1325.518280][ T4200] rtnetlink_rcv_msg+0x844/0xf30 [ 1325.523201][ T4200] netlink_rcv_skb+0x1f5/0x440 [ 1325.527987][ T4200] netlink_unicast+0x774/0x920 [ 1325.532731][ T4200] page last free stack trace: [ 1325.537389][ T4200] free_unref_page_prepare+0x637/0x6c0 [ 1325.542832][ T4200] free_unref_page+0x8f/0x2a0 [ 1325.547491][ T4200] __unfreeze_partials+0x1a5/0x200 [ 1325.552584][ T4200] put_cpu_partial+0x12d/0x190 [ 1325.557328][ T4200] qlist_free_all+0x35/0x90 [ 1325.561815][ T4200] kasan_quarantine_reduce+0x150/0x160 [ 1325.567260][ T4200] __kasan_slab_alloc+0x2f/0xd0 [ 1325.572095][ T4200] slab_post_alloc_hook+0x4c/0x380 [ 1325.577188][ T4200] kmem_cache_alloc_node+0x12d/0x2d0 [ 1325.582457][ T4200] __alloc_skb+0xf4/0x750 [ 1325.586771][ T4200] mld_newpack+0x12f/0xb90 [ 1325.591255][ T4200] add_grhead+0x5a/0x240 [ 1325.595485][ T4200] add_grec+0x1341/0x15d0 [ 1325.599800][ T4200] mld_ifc_work+0x6e7/0xb40 [ 1325.604287][ T4200] process_one_work+0x85f/0x1010 [ 1325.609210][ T4200] worker_thread+0xaa6/0x1290 [ 1325.613873][ T4200] [ 1325.616178][ T4200] Memory state around the buggy address: [ 1325.621789][ T4200] ffff88807ae33300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1325.629832][ T4200] ffff88807ae33380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1325.637876][ T4200] >ffff88807ae33400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1325.645916][ T4200] ^ [ 1325.649961][ T4200] ffff88807ae33480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1325.658002][ T4200] ffff88807ae33500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1325.666038][ T4200] ================================================================== [ 1325.674075][ T4200] Disabling lock debugging due to kernel taint [ 1325.831589][ T4200] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1325.838822][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:6 Tainted: G B syzkaller #0 [ 1325.847761][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1325.857814][ T4200] Workqueue: hci0 hci_rx_work [ 1325.862497][ T4200] Call Trace: [ 1325.865774][ T4200] [ 1325.868697][ T4200] dump_stack_lvl+0x188/0x250 [ 1325.873371][ T4200] ? show_regs_print_info+0x20/0x20 [ 1325.878558][ T4200] ? load_image+0x400/0x400 [ 1325.883063][ T4200] panic+0x2e5/0x810 [ 1325.887049][ T4200] ? bpf_jit_dump+0xd0/0xd0 [ 1325.891553][ T4200] ? hci_le_meta_evt+0x12e6/0x3c90 [ 1325.896659][ T4200] ? check_panic_on_warn+0x6c/0xa0 [ 1325.901832][ T4200] ? hci_le_meta_evt+0x12e6/0x3c90 [ 1325.906937][ T4200] check_panic_on_warn+0x80/0xa0 [ 1325.911875][ T4200] ? hci_le_meta_evt+0x12e6/0x3c90 [ 1325.916983][ T4200] end_report+0x6d/0xf0 [ 1325.921134][ T4200] kasan_report+0x102/0x130 [ 1325.925635][ T4200] ? hci_le_meta_evt+0x12e6/0x3c90 [ 1325.930743][ T4200] hci_le_meta_evt+0x12e6/0x3c90 [ 1325.935685][ T4200] ? hci_remote_host_features_evt+0x280/0x280 [ 1325.941750][ T4200] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1325.947379][ T4200] ? mark_lock+0x94/0x320 [ 1325.951704][ T4200] ? mutex_unlock+0x10/0x10 [ 1325.956219][ T4200] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1325.962191][ T4200] ? lock_chain_count+0x20/0x20 [ 1325.967027][ T4200] ? __rwlock_init+0x140/0x140 [ 1325.971775][ T4200] hci_event_packet+0xe48/0x1370 [ 1325.976694][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 1325.981879][ T4200] ? rcu_lock_release+0x20/0x20 [ 1325.986708][ T4200] ? hci_send_to_monitor+0x9c/0x4a0 [ 1325.991889][ T4200] hci_rx_work+0x255/0xa10 [ 1325.996298][ T4200] process_one_work+0x85f/0x1010 [ 1326.001221][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 1326.006835][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 1326.012101][ T4200] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1326.017107][ T4200] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1326.022633][ T4200] ? wq_worker_running+0x97/0x170 [ 1326.027641][ T4200] worker_thread+0xaa6/0x1290 [ 1326.032310][ T4200] kthread+0x436/0x520 [ 1326.036362][ T4200] ? rcu_lock_release+0x20/0x20 [ 1326.041192][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 1326.045761][ T4200] ret_from_fork+0x1f/0x30 [ 1326.050163][ T4200] [ 1326.053467][ T4200] Kernel Offset: disabled [ 1326.057788][ T4200] Rebooting in 86400 seconds..