last executing test programs: 25m11.433446388s ago: executing program 32 (id=57): socket$inet_smc(0x2b, 0x1, 0x0) rseq(0x0, 0x0, 0x10000, 0x0) r0 = io_uring_setup(0x937, &(0x7f0000000280)={0x0, 0x32b9, 0x80, 0x1, 0x35d}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000700300801280102d52a000000010902"], 0x0) r2 = msgget$private(0x0, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x1}) r4 = socket(0x25, 0xa, 0x3ff) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) pipe2(0x0, 0x80000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRES16=r5], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) futex(&(0x7f0000000240), 0x6, 0x0, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) readlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000001300)=""/4096, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000200)={@rand_addr=0x64010102}}) msgrcv(r2, 0x0, 0x0, 0x2, 0x2800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 23m26.325585688s ago: executing program 0 (id=153): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000060000002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b0073697b000600010002000000080005"], 0xc4}}, 0x0) 23m25.597818409s ago: executing program 0 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r5, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) 23m20.466310642s ago: executing program 0 (id=161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') ioctl$NS_GET_USERNS(r1, 0x8008b70d, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) close_range(r5, 0xffffffffffffffff, 0x0) 23m18.124754798s ago: executing program 0 (id=162): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r2, 0x6145, 0x7721, 0x17, 0x0, 0x0) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, 0x0) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0xfc8, 0xb}}) listen(0xffffffffffffffff, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) connect$unix(r7, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 23m16.795689125s ago: executing program 0 (id=163): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x76421000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r5}, 0x20) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000006c0)={&(0x7f0000000700)={{@local, 0xd9}, {@any, 0x7}, 0x400, "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"}, 0x418, 0x823}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000b40)={0x0, 0x0, 0x9}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af25, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 23m14.029211703s ago: executing program 0 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x236af4, 0x3f}) 23m5.890760771s ago: executing program 33 (id=159): syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x0, 0x8, 0x55, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x7, 0x6, 0x2}}) futex(&(0x7f0000000240)=0x2, 0x10b, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) keyctl$update(0x2, r2, &(0x7f0000000d00)="ae", 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf200000000000001600060038e873a23d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 22m58.711885281s ago: executing program 34 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x236af4, 0x3f}) 20m3.099656686s ago: executing program 6 (id=307): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, 0x0, &(0x7f0000004880)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r6, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) 19m53.857228887s ago: executing program 6 (id=315): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x7}]}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e, 0x5f]}}, 0x0, 0x33, 0x0, 0x1}, 0x28) 19m49.62569455s ago: executing program 6 (id=319): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3c0, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64011101}, 0xc) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 19m47.877583844s ago: executing program 6 (id=320): pipe(&(0x7f0000000140)) r0 = fsopen(0x0, 0x0) fsmount(r0, 0x0, 0x2) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe16, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) 19m37.17725888s ago: executing program 6 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)}, 0x22) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r6, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) 19m33.906958333s ago: executing program 6 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_FPEXC(0xc, 0x10000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x80085665, 0x0) 19m17.364850813s ago: executing program 35 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_FPEXC(0xc, 0x10000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x80085665, 0x0) 18m43.02300531s ago: executing program 4 (id=373): syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x0, 0x8, 0x55, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x7, 0x6, 0x2}}) futex(&(0x7f0000000240)=0x2, 0x10b, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) keyctl$update(0x2, r1, &(0x7f0000000d00)="ae", 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf200000000000001600060038e873a23d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 18m40.861944628s ago: executing program 4 (id=376): pipe(&(0x7f0000000140)) r0 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsmount(r0, 0x0, 0x2) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe16, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) 18m36.952200651s ago: executing program 4 (id=378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r1, &(0x7f0000002e00), 0x0, 0x0, 0x0) write(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) keyctl$restrict_keyring(0x10, 0xfffffffffffffff8, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0xfc49}, 0x1, 0x0, 0x0, 0x400c080}, 0x24004151) recvmsg(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/228, 0xe4}, {&(0x7f00000001c0)=""/26, 0x1a}], 0x2}, 0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) 18m33.537950868s ago: executing program 4 (id=382): r0 = socket$nl_generic(0x11, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpgrp(r1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(r3, &(0x7f0000000400)=[{&(0x7f0000000300)=""/55, 0x37}], 0x1, &(0x7f0000000580)=[{&(0x7f0000000440)=""/209, 0xd1}], 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x14, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0xf}, @remote, @loopback, 0xfffffff8, 0x7e, 0x3, 0x400, 0x8, 0x320000}) 18m31.665695636s ago: executing program 4 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x2, 0x0, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000002000000", @ANYRES32=0x1], 0x50) socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r5, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000023c0)="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", 0xc41}, {0x0}], 0x2}}], 0x2, 0x0) 18m31.198533942s ago: executing program 7 (id=384): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20044185) socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1001) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f00000007c0), &(0x7f0000000640)}, 0x20) 18m28.69326149s ago: executing program 7 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x2, 0x0, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000002000000", @ANYRES32=0x1], 0x50) socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r5, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000023c0)="26c636a0f520a55c31f9723fde1f016e20b01c3e0c1b63cda7c38a60040e3f7325be7415c92900b75c1c0146b10a1c3fceace8dc58d7d623b6c21c41324d5339fa88d3f1e0865d62637a0265099f76569b1747bf00cfaccd69407db0729c9fc9e45a3cbd7b1c92de5f5d436d9f2162d595b5956d9057531b8c740ab049b2542edb504e4bdace7f1efc3e5fae239af29db0a862df279c77cd56ab676a2789c24ccf69dce2587847d4b454dc5517fccf95c49ff67c79dc272d727bdb2bd95604f9eb421979bd59af8d108eba65997e98eb7383e0025e5f6f5507c898707ccf8d090c69368a10677d055fb80181597f8722ea69c7a4fe79c2845379e20caec5a61627fe125efcf8ae2c20660abb003f48f445ad62a18062d75d6491aad66901b810cbb6cb3afb5be14edb665c68e7eb9428b6964df49e85fd6c12ecaf1cd0b616bf8001b988bff26f9e7d35165d61111db8d8c9f722643e86b07ff0562963e8dd2a41fdc5d840a52b595bcdbcfeb7a6dd11c08f44d66fd677132354ecb6d34b1e4589fb9b5b40f528f1be2bbc5e89ec56db28f62dc36923719d1796d92368f4a1116c8e14650d8b5478897ca31759fd887e109a593f30b046a2eb03917d5758193d7f122f79069ab3ffe9229c2960b2d8b5f64172ab607926223033c7676a1694e4eee1c9d466c0fa6995be6d5af7d11fdf828d35ffbd8e2c3a2bc480b724f96a2d8646cff08f94a7bd1366fb059f84dc66524afb39bc04d2058dea85010e4977c463e6d9477a8c5585147e36311265fe3ef8a7bdea8c9596f49c36a141674440b564a4e70b8e79909b66d0574dd2ba85fa6162fea2ef6b8e001b69f2962b87da437e0e6aed43099bb8aaf22f34496456feda5d3bd2f4a373d31ce62ec10df61903cf35a40e006f8ed430259b9dc0f08bedf172d7f3331719deb3da6cefabdc265064fbe80d4ac786d41819fbe2c3de4b3c29b34d1434b958bdb9072d16b4f8c76cd84d58d45cc28ea7ff2e70319eb92daef31580bfd059b63f73f3d2e6dbb5e1b406448d4d79e098236090e1eb015cb4448c50c0f070dd8d5014fd2995e3ba1def495e708e770463e18e081997b4f38f2ecc7cc349ccb7c21a38ef92d45ca37ec8a96bc3b8926c92e39448501f80a634eb4743e838a6eae15c4dacefb3009f6f0aa82e31ce51099bf6ac9db8fbc0ee672a1e2c49e68550fee41549dd061278d1adf873c1fb9a9d98af672524f3d5737c1ff0e0b0ea4f1a66004954c99936017522b4a697372dd5f24e39794f16aca11ecf991d294393fddca0c1df416b53d7af0beeabfa96e6a2b69614ca37ce01c994ff1a5c1d4c4cd07805c46e435fcaa0098c3aee8c8eba6013b48b7606e4bc920a87fc1d24c7abd3d5b2faece4447dbdffb7a98e70c0b5f84b746b30525cd3329009ab3308f770ea7dafb93ab34ae0a36e21d3a0b5cd7bc55617cdb81583936c382e8aa29da03ebea74ee5208670efcd310f41fcf5c9e380b6ab3cd518f387355974091b172332b98ec3175bb0ba35158a22cd10174ef8a153771bbb06e784207ff198de2eef5c7e43c6ba2d55ddf42b1cee71ee1cd97b2c0e114b104e7c8befdf23f7f3ad7e006da2259aec27323c4d37df05ca272a77a49f7b7f8085dbff35406dc9729123ccc4ca8e85dabab65bec5683748128b8bc24994271182c1426d9d1106eed4ee90174a3d10007616356db0c130e84496155e88822f8f4a38cc4219ee3e975c080312d33309aba3713dad695d9bca12c243639a805d79689a53408abf0298182a4d7ced7ff4fd81ffd39fa82f504934152bef6bf96c8b51d76282be097d521b5ea87d483101ffbcec97b5ad8117be277fa62cd65a77d5551252a1d7c2424c1bcc6239ac0299e0fbbf4a869ea60b997689103cadcef53f847b217ea5a17738d00882c86f168744551eaa1a110c850086ca6f4bf60d1cfd4c409d0845ae96a3437e9903d464601dde5ab2009b7888fbaac3fea9351366dea0ba8d971397f23ed03ce155801ed276e33867b6f40e89cfb40e32c68ba762b3dd57aa5c31775b0be68ad09bb09ae8b4e1f3f8cf786ca8430e9e9879a240af724fa36d6d2fbfdf4be6f997bbce8d277c18eda8e3943538a81adee56247b6ca9e9d0e3b4f9a62ff6e6e4c02113da69e41901dd7ce414999c231868468d65ecc986a721c7cdf99d5222df8e2236fc84050c14e71731b81a8662af6f4a9b880e8625df8b5b86e2d42f9fa922cd387f6093629acee229d426b3948271bf6f0e2b5af06b8f2639729594c28ed97b8179952907432755850b2db7295b7c4d839ebf2089c8e456dad09a6aeea9ab659b0e45f15544b4d702939be560fe1b6a47e8831c19d06ce07a7ec1a4a6dedef9795668921da441bd649407903a3cfc7068d01ca82e55b8a7fa60d8c6cbeb9d61702e74a4801acaa6c1b18963cddacbaa2f6b1b7ebe31aee95629bfbef71e5737840eb201c71ce9e63d1b376753fc9d8d0fcea70dc51ca57ab220b2004764a02bd00a7d1ab01f9fa1e4bb554c82112d28b64ef58287eb0d1adde95e65f32ae9fdfdd3e108219c833576ab59f579a898d909b515a19047e3e19c7dcb22c8be38ba61d8609e755bc3e05c753d57f63207cfd78d1afea835385a40966e5d047aeea489a92e7728d5144cd03b17424b467e6c53351de14f6d13e350d093bebaef52433f2fec4b7ce1e80c78ca428b9b437a6fd15326b85da22622b52a718793d80e78d5cadb37590c37e2a8d568aa61dacfbc2c177b079591c3698262d14461f918f75ab7c2b1e13372df5cc241fd48688aeb4f00aa1bbd9ab72821215ece32a485ecb4e7f3aa396a71997da8602da803c731a9be8dd5efcbebfe3f3f085ed6868318fc4fb7440906ffd2e26d97de3e1dde45eee87f2dd919cda85cee69e19aa151b91f3d1979b370d494b401f4568aed61c0d0f8d1d6c69035fff25f7dd0b6078226124d09a0233d35390518ea750c99a2ecb3071f57855a1be5f337df2270f8fa84b3e627b621c09d7fe7a58338e4ab9bb5728346819a08633783cdc01c4e5f2e959e0b50a343fedc5d7ed9df1ae39a7aaec921031cea2604b644f82ad6ed35115d98a67ad94ddf14e591c456cb78fe6734b148606ff9e7e6b363226b91b2a402254138453330f00d11ec2121f2ce2ade6fd22a512c9f8bdfd77b6b0733528d1c61ede39b907bbbb6216f09a57ae80210666732a9975117486a12d411f34b4d4584953dc51d102cc75b670f5cb08c2c3f2a125d287e10f5a3614210e23b5f59e885069f71e3fa70fca7c0294228bc654c80253abcd7aa625a2bbe73bfeb74e125e6ce82fa98f2b076731a29c7d0cc549592f5ba5bcfbcc8b7e85ab81831d9acc573f73122d07624fb00a0498361349d20b1d3a86eaea12fda7b69460a7662cea99889548b671d1e3edae3dcc239c5e738374bb4ade0ea26e078db4afca8d91c54db9e2ac07978ae07612c824f21f2f504e8ebb2a4220f863a547cff225a4567a3f0dee0bf89440e34b6ef7b64b6d83111555a5f1994a044d45ee180dfdbe1206d1d9ebf75ce0e879758a2bef6a276cdfceeb5149bf932a2dd6c4ce0913852f67be630426a02a488faf1407a7f72cd1b09719c10455aafd3954abd3853beaaa52499e1d50e0ab282d40023840e2ba4ea443785b1bb2e7eb1981e045b603d3d3ecbf4c91ff774cc4252016819e5f5421cfbd7d31ea167ef3b13cea45c58e964deaeb6b222889e57506d91e1acff64d5bb9b9955f297574eb8f1b35b775efbe944cc57ee0a2b1e03855740eeed22211f76c38e7c5d9c9564c48f79915a2a51f7521d303960ac7940480d4b855554d01d2060e690c5c008417b0808e3be8145d49494fa990ba5c019ed7ab8d41269c6e2ad0521f9ff370706e11d167324615a91a846b783af98b21606c7af61aa025d937ca25337c19bc3765cce373fa2db60f4133ddb50cd94e4d8882a959530ede8d947886f30a2ab0937ba2a2d2e90b163e98b3c5d13ab0c3117cf404ba9e144764bbce4826bdf2b21e88814f7c33302ae95915a506b2ab761b8c14b321a214137ea34d207276e99df77dda8b93311b1360d8a860dabe412edb534c0a80c697a68152b3916c50fd315ca977a80ef0a2b0f59791cddaa372df7b0373df853cc5a586be6ec8d803132e78450067c7aabc4cd8379a182023c49117689aa5dfc8bf31d016ec6385a013179cdd5da0306e0241199d508bb9fa9f699b506ee0039058ef769cf9434441d6cd95d399e4d6042c10bf5bc286f6804769ad5af7aa66aff8c7e78d082299346e85d994f3e13630e8bec8473f57d9d336974dfca376d61ff1b530ffb756a5ea0ee87dadd7115473952fd6e139b056e53fdf170daaa080dee19f6721d412cd97762e56328249baac376e5ba1f1bc6024bbb0c4256a6b2b6390111", 0xc41}, {0x0}], 0x2}}], 0x2, 0x0) 18m26.919922096s ago: executing program 7 (id=387): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 18m24.419255024s ago: executing program 7 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000002180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) time(0x0) iopl(0x1) 18m22.534242313s ago: executing program 4 (id=391): pipe(&(0x7f0000000140)) r0 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsmount(r0, 0x0, 0x2) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe16, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) 18m21.534184475s ago: executing program 7 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x2, 0x0, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000002000000", @ANYRES32=0x1], 0x50) socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r5, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000023c0)="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", 0xc41}, {0x0}], 0x2}}], 0x2, 0x0) 18m18.269280508s ago: executing program 7 (id=395): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x4000084) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x7) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x4, 0xfffffffc, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) gettid() r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r6, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) 18m5.800467909s ago: executing program 36 (id=391): pipe(&(0x7f0000000140)) r0 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsmount(r0, 0x0, 0x2) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe16, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) 18m3.187052261s ago: executing program 37 (id=395): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x4000084) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x7) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x4, 0xfffffffc, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) gettid() r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r6, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) 8m24.461812008s ago: executing program 8 (id=915): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x59, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c80)}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x207}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8m22.256609907s ago: executing program 8 (id=916): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3c0, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64011101}, 0xc) 8m20.587381389s ago: executing program 8 (id=918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) userfaultfd(0x80001) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r3) 8m13.522041281s ago: executing program 8 (id=922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) userfaultfd(0x80001) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300"], 0x3c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r4) 8m4.785414575s ago: executing program 8 (id=929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) userfaultfd(0x80001) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087"], 0x3c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r4) 8m0.460201621s ago: executing program 8 (id=932): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @dev}}, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/125}, {&(0x7f0000000080)}, {&(0x7f0000000340)}], 0x0, &(0x7f0000000d40)=""/19}, 0x4}, {{&(0x7f0000000d80)=@ethernet={0x0, @remote}, 0x0, &(0x7f0000000f80)=[{&(0x7f0000001b00)=""/4096}, {&(0x7f0000000e00)=""/69}, {&(0x7f0000000e80)=""/252}], 0x0, &(0x7f0000000fc0)=""/193}}], 0x3fffffffffffe10, 0x4000002b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 7m44.910502009s ago: executing program 38 (id=932): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @dev}}, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/125}, {&(0x7f0000000080)}, {&(0x7f0000000340)}], 0x0, &(0x7f0000000d40)=""/19}, 0x4}, {{&(0x7f0000000d80)=@ethernet={0x0, @remote}, 0x0, &(0x7f0000000f80)=[{&(0x7f0000001b00)=""/4096}, {&(0x7f0000000e00)=""/69}, {&(0x7f0000000e80)=""/252}], 0x0, &(0x7f0000000fc0)=""/193}}], 0x3fffffffffffe10, 0x4000002b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6m6.340943803s ago: executing program 2 (id=1051): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) 6m4.717227054s ago: executing program 2 (id=1052): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x20000880) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x87, 0x1130, &(0x7f0000002380)="$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") 6m1.909268143s ago: executing program 2 (id=1053): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x59, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c80)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc", 0xb9}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x207}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6m0.116140859s ago: executing program 2 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 5m55.802623004s ago: executing program 2 (id=1060): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r6, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) 5m49.256879499s ago: executing program 2 (id=1066): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0xfff, 0x40840) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f00000001c0)={0x1, 0x0, {0x1, 0xfffffffd, 0x7f, 0x7}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) syz_io_uring_setup(0x30da, &(0x7f0000000400)={0x0, 0x4ddb, 0x10000, 0x1, 0x2cd}, &(0x7f0000000100), &(0x7f0000000140), 0x0) r5 = mq_open(&(0x7f00000000c0)='eth0\x00', 0x42, 0x1, 0x0) lseek(r5, 0x3, 0x1) 5m33.770393866s ago: executing program 39 (id=1066): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0xfff, 0x40840) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f00000001c0)={0x1, 0x0, {0x1, 0xfffffffd, 0x7f, 0x7}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) syz_io_uring_setup(0x30da, &(0x7f0000000400)={0x0, 0x4ddb, 0x10000, 0x1, 0x2cd}, &(0x7f0000000100), &(0x7f0000000140), 0x0) r5 = mq_open(&(0x7f00000000c0)='eth0\x00', 0x42, 0x1, 0x0) lseek(r5, 0x3, 0x1) 24.064591356s ago: executing program 3 (id=1480): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2c8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64011101}, 0xc) 19.819483248s ago: executing program 1 (id=1486): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x40000000000007c, 0x2000c044) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x714f, 0x0) 17.958807082s ago: executing program 3 (id=1487): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4108, 0x100c}], 0x1, 0x0, 0x0, 0x407006}, 0x104) syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000003200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x30}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e06010300000000000000000100000005000100070000000900020073797a30004000008afc5f122e950fa143b605622d955d900b2b0fd286fab4fceb439ded350ae7a00c47f9f7f3be7f554ab71292df1961629b71d9d67042d8f74f367478a874c482ef86c32f16aceffeb88b34a9bf81ca19c8c75efd3b4f15fc3d907561e101066caaec128afe145c4237082a25c8d181"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x6400c804) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000380)='.\x00', 0x2042023, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 17.823934576s ago: executing program 1 (id=1488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r4) 15.232500031s ago: executing program 1 (id=1491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20) 14.197232031s ago: executing program 5 (id=1492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev\x00') r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r2, 0x40106e8c, 0x0) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x22040, 0x0) ioctl$PPPIOCATTACH(r5, 0x4004743d, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000000)=""/241, 0xf1}], 0x1, 0xffffbdea, 0x0) 13.936905038s ago: executing program 1 (id=1493): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x22) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r6, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) 12.573713398s ago: executing program 1 (id=1495): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2c8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64011101}, 0xc) 12.232885447s ago: executing program 9 (id=1497): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61ed", 0xa8, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf998", 0xe0, 0x5, 0xffffffff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2", 0x37, 0x100, 0x9}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a6", 0xce, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb660", 0xb1}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.543555537s ago: executing program 9 (id=1498): fanotify_init(0x0, 0x101000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ca000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x140c, 0x20, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x2000c045) 11.387686052s ago: executing program 5 (id=1499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r4) 10.653532173s ago: executing program 9 (id=1500): openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013"], 0x64}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x29, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) close(r5) r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000040)={0x0, 0x3136564e, 0x1, @discrete={0xff, 0x1}}) 9.428277409s ago: executing program 9 (id=1501): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20) 9.35500103s ago: executing program 3 (id=1502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd06, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 8.696019289s ago: executing program 9 (id=1503): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x22) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r6, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) 6.913190411s ago: executing program 9 (id=1504): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf25"], 0x2c}, 0x1, 0x0, 0x0, 0x48854}, 0x24000040) 6.243830971s ago: executing program 5 (id=1505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000001c0), 0x0, &(0x7f0000000480)="fef0ed", 0x3, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r6, r5}, &(0x7f00000000c0)=""/83, 0x53, 0x0) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x108c0, &(0x7f0000000140), 0xdd, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") 4.713886395s ago: executing program 5 (id=1506): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61ed", 0xa8, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf998", 0xe0, 0x5, 0xffffffff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2", 0x37, 0x100, 0x9}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a6", 0xce, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb660", 0xb1}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.329056455s ago: executing program 3 (id=1507): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000700)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/212, 0xd4, 0xba) 3.634564826s ago: executing program 3 (id=1508): fanotify_init(0x0, 0x101000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ca000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x140c, 0x20, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x2000c045) 3.348966694s ago: executing program 5 (id=1509): openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r1) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408c1}, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x29, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) close(r4) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000040)={0x0, 0x3136564e, 0x1, @discrete={0xff, 0x1}}) 730.30504ms ago: executing program 5 (id=1510): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0x1, 0xffff0000, 0x2, 0x6, 0x7, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r4, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x4, 0xe, 0x1}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r0, 0x36, 0x0, 0x1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@fallback, r0, 0x36, 0x0, 0x0, @void, @value=r0, @void, @void, r7}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb8", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 698.216111ms ago: executing program 1 (id=1511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20) 0s ago: executing program 3 (id=1512): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4d0d8) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040c4}, 0x4c004) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): , using maximum allowed: 30 [ 849.317528][ T5814] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 849.331189][ T5814] usb 9-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 849.343909][ T5814] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 849.672983][ T5814] usb 9-1: config 168 interface 0 has no altsetting 0 [ 849.682749][ T5814] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 849.698952][ T5814] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 849.732562][ T5814] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 849.797104][ T5814] usb 9-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 849.820576][ T5814] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 849.865168][ T5814] usb 9-1: config 168 interface 0 has no altsetting 0 [ 849.969785][ T5814] usb 9-1: string descriptor 0 read error: -22 [ 849.976178][ T5814] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 850.022934][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.096049][ T5814] adutux 9-1:168.0: interrupt endpoints not found [ 852.133945][ T8696] usb 9-1: USB disconnect, device number 3 [ 870.097747][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.104148][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.557083][ T5813] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 872.937099][ T5813] usb 10-1: Using ep0 maxpacket: 8 [ 872.982145][ T5813] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 873.000173][ T5813] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 873.027846][ T5813] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 873.063272][ T5813] usb 10-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 873.094786][ T5813] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 873.117593][ T5813] usb 10-1: config 168 interface 0 has no altsetting 0 [ 873.136490][ T5813] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 873.177384][ T5813] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 873.225586][ T5813] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 873.269260][ T5813] usb 10-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 873.329734][ T5813] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 873.387365][ T5813] usb 10-1: config 168 interface 0 has no altsetting 0 [ 873.457270][ T5813] usb 10-1: unable to read config index 2 descriptor/start: -71 [ 873.483036][ T5813] usb 10-1: can't read configurations, error -71 [ 895.176620][T10117] input: syz1 as /devices/virtual/input/input6 [ 897.960238][T10130] input: syz1 as /devices/virtual/input/input7 [ 913.751756][T10218] input: syz1 as /devices/virtual/input/input8 [ 932.963854][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.970372][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.633388][T10341] input: syz1 as /devices/virtual/input/input9 [ 949.736754][T10401] input: syz1 as /devices/virtual/input/input10 [ 956.264217][T10444] input: syz1 as /devices/virtual/input/input11 [ 961.932156][T10465] input: syz1 as /devices/virtual/input/input12 [ 963.376491][T10485] input: syz1 as /devices/virtual/input/input13 [ 968.519335][T10498] input: syz1 as /devices/virtual/input/input14 [ 981.573948][T10532] input: syz1 as /devices/virtual/input/input15 [ 994.425533][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.432246][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.980719][T10625] process 'syz.9.732' launched './file0' with NULL argv: empty string added [ 1008.844380][T10645] input: syz1 as /devices/virtual/input/input16 [ 1012.432873][T10658] input: syz1 as /devices/virtual/input/input17 [ 1013.868244][T10662] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10663] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10662] [ 1021.437850][T10684] input: syz1 as /devices/virtual/input/input18 [ 1023.867551][T10696] input: syz1 as /devices/virtual/input/input19 [ 1028.643090][T10730] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10731] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10730] [ 1038.339531][T10766] input: syz1 as /devices/virtual/input/input20 [ 1040.494288][T10773] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10773] [ 1050.545032][T10824] input: syz1 as /devices/virtual/input/input21 [ 1051.938379][T10832] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10833] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10832] [ 1054.152171][T10850] input: syz1 as /devices/virtual/input/input22 [ 1054.671155][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.680270][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.925265][T10863] input: syz1 as /devices/virtual/input/input23 [ 1060.657905][T10888] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1061.579199][T10880] input: syz1 as /devices/virtual/input/input24 [ 1064.409142][T10901] input: syz1 as /devices/virtual/input/input25 [ 1077.508509][T10948] input: syz1 as /devices/virtual/input/input26 [ 1083.859856][T10970] syz.9.815[10970]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1084.092904][T10970] loop9: detected capacity change from 0 to 512 [ 1085.029196][T10979] input: syz1 as /devices/virtual/input/input27 [ 1086.273639][T10970] EXT4-fs: error -4 creating inode table initialization thread [ 1086.318508][T10970] EXT4-fs (loop9): mount failed [ 1089.504881][T10995] loop9: detected capacity change from 0 to 512 [ 1090.024485][T10995] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1090.218837][T10995] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.346477][T11015] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1093.708460][ T9452] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1093.767268][ T9452] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1093.767268][ T9452] [ 1093.797361][ T9452] EXT4-fs (loop9): Total free blocks count 0 [ 1093.823510][ T9452] EXT4-fs (loop9): Free/Dirty block details [ 1093.842020][ T9452] EXT4-fs (loop9): free_blocks=65280 [ 1093.867238][ T9452] EXT4-fs (loop9): dirty_blocks=1 [ 1093.872346][ T9452] EXT4-fs (loop9): Block reservation details [ 1093.915628][ T9452] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 1095.533269][ T8458] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.467097][ T2177] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1096.699227][ T2177] usb 9-1: Using ep0 maxpacket: 16 [ 1096.728292][ T2177] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 1096.748622][ T2177] usb 9-1: config 0 has no interface number 0 [ 1096.774868][ T2177] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1096.784324][ T2177] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.792758][ T2177] usb 9-1: Product: syz [ 1096.799693][ T2177] usb 9-1: Manufacturer: syz [ 1096.804301][ T2177] usb 9-1: SerialNumber: syz [ 1096.840068][ T2177] usb 9-1: config 0 descriptor?? [ 1096.870350][ T2177] hub 9-1:0.132: bad descriptor, ignoring hub [ 1096.887114][ T2177] hub: probe of 9-1:0.132 failed with error -5 [ 1096.905883][ T2177] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.132/input/input29 [ 1098.238145][ T5812] usb 9-1: USB disconnect, device number 4 [ 1099.225535][T11058] input: syz1 as /devices/virtual/input/input30 [ 1104.890706][T11082] input: syz1 as /devices/virtual/input/input31 [ 1110.113846][T11102] loop5: detected capacity change from 0 to 512 [ 1110.419530][T11102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1110.577121][T11102] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1110.720325][T11105] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1113.267775][ T49] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1113.311392][ T49] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1113.311392][ T49] [ 1113.367002][ T49] EXT4-fs (loop5): Total free blocks count 0 [ 1113.386971][ T49] EXT4-fs (loop5): Free/Dirty block details [ 1113.392936][ T49] EXT4-fs (loop5): free_blocks=65280 [ 1113.416980][ T49] EXT4-fs (loop5): dirty_blocks=1 [ 1113.432324][ T49] EXT4-fs (loop5): Block reservation details [ 1113.440081][ T49] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1113.480566][ T7093] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.380216][T11123] input: syz1 as /devices/virtual/input/input32 [ 1115.857505][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.863880][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.547429][T11135] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[11137] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11135] [ 1124.493620][T11175] input: syz1 as /devices/virtual/input/input33 [ 1125.354233][T11180] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[11181] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11180] [ 1128.518688][T11187] loop8: detected capacity change from 0 to 512 [ 1128.624553][T11187] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1128.678281][T11187] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1129.997665][ T28] audit: type=1800 audit(1779754380.334:2): pid=11187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.864" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1130.247877][ T8445] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.938078][T11202] input: syz1 as /devices/virtual/input/input34 [ 1133.070356][T11207] input: syz1 as /devices/virtual/input/input35 [ 1142.576029][T11239] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[11240] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11239] [ 1155.643546][T11284] input: syz1 as /devices/virtual/input/input36 [ 1156.735566][T11291] input: syz1 as /devices/virtual/input/input37 [ 1160.617261][T11318] loop8: detected capacity change from 0 to 64 [ 1172.954900][T11380] input: syz1 as /devices/virtual/input/input38 [ 1177.921792][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.928154][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.649561][T11406] input: syz1 as /devices/virtual/input/input39 [ 1196.826915][T11454] input: syz1 as /devices/virtual/input/input40 [ 1209.755698][T11499] input: syz1 as /devices/virtual/input/input41 [ 1210.399652][ T5138] Dev loop2: unable to read RDB block 7 [ 1210.524825][ T5138] loop2: unable to read partition table [ 1210.531231][ T5138] loop2: partition table beyond EOD, truncated [ 1222.608052][T11577] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1222.619574][T11577] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1222.637549][T11577] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1222.677900][T11577] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1222.698103][T11577] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1222.718072][T11577] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1223.498633][T11575] chnl_net:caif_netlink_parms(): no params data found [ 1224.021974][T11575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.131941][T11575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.162462][T11575] bridge_slave_0: entered allmulticast mode [ 1224.178560][T11575] bridge_slave_0: entered promiscuous mode [ 1224.200147][T11575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.268005][T11575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.275230][T11575] bridge_slave_1: entered allmulticast mode [ 1224.319048][T11575] bridge_slave_1: entered promiscuous mode [ 1224.433680][T11575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.510442][T11575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.692089][T11575] team0: Port device team_slave_0 added [ 1224.738546][T11575] team0: Port device team_slave_1 added [ 1224.810092][ T8002] Bluetooth: hci2: command tx timeout [ 1224.861958][T11575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.870488][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1224.925645][T11575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.005945][T11575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.029857][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.121770][T11575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1226.887193][ T8002] Bluetooth: hci2: command tx timeout [ 1227.008704][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.299236][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.421253][T11575] hsr_slave_0: entered promiscuous mode [ 1227.453899][T11575] hsr_slave_1: entered promiscuous mode [ 1227.512519][T11575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1227.551705][T11575] Cannot create hsr debugfs directory [ 1227.568356][T11602] tipc: Started in network mode [ 1227.579441][T11602] tipc: Node identity b2776794286f, cluster identity 4711 [ 1227.601515][T11602] tipc: Enabled bearer , priority 0 [ 1227.699027][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.928864][T11597] tipc: Disabling bearer [ 1228.266806][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.615909][T11605] loop5: detected capacity change from 0 to 64 [ 1229.020180][ T8002] Bluetooth: hci2: command tx timeout [ 1230.069934][T11611] loop9: detected capacity change from 0 to 64 [ 1230.427986][ T8696] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1230.980461][ T8696] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1230.995928][ T8696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.049220][ T8002] Bluetooth: hci2: command tx timeout [ 1231.051857][ T8696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.064876][ T8696] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1231.138597][ T8696] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1231.176908][ T8696] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1231.185163][ T8696] usb 6-1: Manufacturer: syz [ 1231.244805][ T8696] usb 6-1: config 0 descriptor?? [ 1231.719833][ T8696] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 1231.764186][ T8696] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 1231.955540][ T8696] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1233.457395][T11161] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 1234.374742][ T8696] usb 6-1: USB disconnect, device number 7 [ 1238.254231][T11668] input: syz1 as /devices/virtual/input/input42 [ 1239.326683][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.333790][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.874919][ T12] hsr_slave_0: left promiscuous mode [ 1239.888890][ T12] hsr_slave_1: left promiscuous mode [ 1239.967061][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1239.974543][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1240.086987][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1240.094476][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1240.172548][ T12] bridge_slave_1: left allmulticast mode [ 1241.863971][ T12] bridge_slave_1: left promiscuous mode [ 1241.887836][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.943535][ T12] bridge_slave_0: left allmulticast mode [ 1241.990044][ T12] bridge_slave_0: left promiscuous mode [ 1242.011801][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.231950][ T12] veth1_macvtap: left promiscuous mode [ 1242.243067][ T12] veth0_macvtap: left promiscuous mode [ 1242.277085][ T12] veth1_vlan: left promiscuous mode [ 1242.283272][ T12] veth0_vlan: left promiscuous mode [ 1248.774130][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1249.068690][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1249.288424][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.767968][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.093761][T11738] loop9: detected capacity change from 0 to 64 [ 1255.929630][ T12] bond0 (unregistering): Released all slaves [ 1256.401553][T11748] loop5: detected capacity change from 0 to 64 [ 1259.456784][T11575] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1259.578753][T11575] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1259.642303][T11575] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1259.693971][T11575] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1260.093674][T11575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1260.222063][T11575] 8021q: adding VLAN 0 to HW filter on device team0 [ 1260.296308][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.303571][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1260.410564][ T9259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.417812][ T9259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.867974][T11575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.384115][T11789] input: syz1 as /devices/virtual/input/input43 [ 1263.701683][T11575] veth0_vlan: entered promiscuous mode [ 1263.710626][T11783] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1263.751909][T11575] veth1_vlan: entered promiscuous mode [ 1263.868748][T11575] veth0_macvtap: entered promiscuous mode [ 1263.910406][T11575] veth1_macvtap: entered promiscuous mode [ 1263.940593][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1263.954359][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.964700][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1263.990309][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.017347][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.042629][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.075935][T11575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.131817][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.175023][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.205358][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.257018][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.276889][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.296063][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.349064][T11575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1264.379002][T11575] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.408974][T11575] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.420078][T11575] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.440149][T11575] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.844205][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.869393][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.980044][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.016162][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.241535][T11819] tipc: Enabling of bearer rejected, failed to enable media [ 1266.402197][T11835] input: syz1 as /devices/virtual/input/input44 [ 1267.519267][ T5812] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1267.847032][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 1267.867862][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1267.909696][ T5812] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1267.942309][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.993012][ T5812] usb 3-1: Product: syz [ 1268.017030][ T5812] usb 3-1: Manufacturer: syz [ 1268.021708][ T5812] usb 3-1: SerialNumber: syz [ 1268.111448][ T5812] usb 3-1: config 0 descriptor?? [ 1268.140509][ T5812] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1269.073733][ T5812] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1269.745160][ T5812] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1269.872175][ T5812] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1269.911674][ T5812] em28xx 3-1:0.0: board has no eeprom [ 1270.141263][ T5812] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1270.797120][ T5812] em28xx 3-1:0.0: dvb set to bulk mode. [ 1270.803176][ T5814] em28xx 3-1:0.0: Binding DVB extension [ 1270.917753][ T5812] usb 3-1: USB disconnect, device number 6 [ 1270.924649][ T5812] em28xx 3-1:0.0: Disconnecting em28xx [ 1272.806103][ T5814] em28xx 3-1:0.0: Registering input extension [ 1272.852615][ T5812] em28xx 3-1:0.0: Closing input extension [ 1273.254443][T11865] input: syz1 as /devices/virtual/input/input46 [ 1273.556954][ T5812] em28xx 3-1:0.0: Freeing device [ 1275.295374][T11879] syzkaller0: entered promiscuous mode [ 1275.321883][T11879] syzkaller0: entered allmulticast mode [ 1279.556458][T11907] tipc: Enabling of bearer rejected, failed to enable media [ 1283.827182][ T5812] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1284.047007][ T5812] usb 6-1: Using ep0 maxpacket: 16 [ 1284.346034][ T5812] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1284.429183][ T5812] usb 6-1: config 0 has no interface number 0 [ 1284.445980][ T5812] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1284.455719][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.513170][ T5812] usb 6-1: Product: syz [ 1284.524626][ T5812] usb 6-1: Manufacturer: syz [ 1284.557441][ T5812] usb 6-1: SerialNumber: syz [ 1284.597650][ T5812] usb 6-1: config 0 descriptor?? [ 1284.627018][ T2177] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1284.688337][ T5812] hub 6-1:0.132: bad descriptor, ignoring hub [ 1284.701008][ T5812] hub: probe of 6-1:0.132 failed with error -5 [ 1284.717814][ T5812] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input49 [ 1284.856927][ T2177] usb 3-1: Using ep0 maxpacket: 16 [ 1284.892037][ T2177] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1284.946966][ T2177] usb 3-1: config 0 has no interface number 0 [ 1285.014409][ T2177] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1285.067137][ T2177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.119826][ T2177] usb 3-1: Product: syz [ 1285.138787][ T2177] usb 3-1: Manufacturer: syz [ 1285.165321][ T2177] usb 3-1: SerialNumber: syz [ 1285.192957][ T2177] usb 3-1: config 0 descriptor?? [ 1285.226082][ T2177] hub 3-1:0.132: bad descriptor, ignoring hub [ 1285.350126][ T2177] hub: probe of 3-1:0.132 failed with error -5 [ 1285.370639][ T2177] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input50 [ 1285.433300][ T2177] input: failed to attach handler mousedev to device input50, error: -2 [ 1287.793689][ T23] usb 3-1: USB disconnect, device number 7 [ 1290.058366][T12000] loop2: detected capacity change from 0 to 128 [ 1295.195201][ T5812] usb 6-1: USB disconnect, device number 8 [ 1295.203662][T12031] loop2: detected capacity change from 0 to 128 [ 1297.343548][T12043] tipc: Started in network mode [ 1297.461631][T12043] tipc: Node identity 4, cluster identity 4711 [ 1297.596223][T12043] tipc: Node number set to 4 [ 1299.136103][T12064] loop5: detected capacity change from 0 to 128 [ 1299.258917][ T2177] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1299.477117][ T2177] usb 2-1: Using ep0 maxpacket: 16 [ 1299.738705][ T2177] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1300.055921][ T2177] usb 2-1: config 0 has no interface number 0 [ 1300.079193][ T2177] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1300.123350][ T2177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.158527][ T2177] usb 2-1: Product: syz [ 1300.162768][ T2177] usb 2-1: Manufacturer: syz [ 1300.173398][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.179991][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.209396][ T2177] usb 2-1: SerialNumber: syz [ 1300.218613][ T2177] usb 2-1: config 0 descriptor?? [ 1300.227691][ T2177] hub 2-1:0.132: bad descriptor, ignoring hub [ 1300.234095][ T2177] hub: probe of 2-1:0.132 failed with error -5 [ 1300.381395][ T2177] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input52 [ 1302.667698][ T2177] usb 2-1: USB disconnect, device number 20 [ 1302.824086][T12079] loop5: detected capacity change from 0 to 128 [ 1302.839164][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'. [ 1306.251046][T12097] loop5: detected capacity change from 0 to 8192 [ 1306.354985][T12097] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1306.368589][T12097] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 1306.378572][T12097] REISERFS (device loop5): using ordered data mode [ 1306.385803][T12097] reiserfs: using flush barriers [ 1306.402721][T12097] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1306.420106][T12097] REISERFS (device loop5): checking transaction log (loop5) [ 1306.454857][T12097] REISERFS (device loop5): Using rupasov hash to sort names [ 1306.465979][T12097] REISERFS (device loop5): using 3.5.x disk format [ 1306.479852][T12097] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1306.493399][T12097] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1306.504781][T12097] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1306.516112][T12097] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1307.345879][T12115] loop9: detected capacity change from 0 to 128 [ 1309.088448][T12126] loop1: detected capacity change from 0 to 8192 [ 1309.417872][T12126] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1309.430970][T12126] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1309.440334][T12126] REISERFS (device loop1): using ordered data mode [ 1309.447009][T12126] reiserfs: using flush barriers [ 1309.455113][T12126] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1309.472504][T12126] REISERFS (device loop1): checking transaction log (loop1) [ 1309.485071][T12126] REISERFS (device loop1): Using r5 hash to sort names [ 1309.492067][T12126] REISERFS (device loop1): using 3.5.x disk format [ 1309.499198][T12126] REISERFS warning (device loop1): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 1309.512356][T12126] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1310.452891][T12135] tipc: Started in network mode [ 1310.458670][T12135] tipc: Node identity 4, cluster identity 4711 [ 1310.464951][T12135] tipc: Node number set to 4 [ 1317.619810][T12181] syzkaller0: entered promiscuous mode [ 1317.672621][T12181] syzkaller0: entered allmulticast mode [ 1317.860521][T12183] tipc: Enabled bearer , priority 0 [ 1317.955794][T12178] tipc: Resetting bearer [ 1318.260594][T12178] tipc: Disabling bearer [ 1318.567181][ T23] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1318.807003][ T23] usb 10-1: Using ep0 maxpacket: 16 [ 1318.839318][ T23] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1318.958855][ T23] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1318.982163][ T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.007312][ T23] usb 10-1: Product: syz [ 1319.016963][ T23] usb 10-1: Manufacturer: syz [ 1319.021745][ T23] usb 10-1: SerialNumber: syz [ 1319.072849][ T23] usb 10-1: config 0 descriptor?? [ 1319.116476][ T23] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1319.161067][ T23] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1319.743741][ T23] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1320.242512][ T23] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1320.284917][ T23] em28xx 10-1:0.0: board has no eeprom [ 1320.789933][T12213] loop2: detected capacity change from 0 to 8192 [ 1322.466085][T12213] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1322.470667][ T23] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1322.479199][T12213] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1322.496390][T12213] REISERFS (device loop2): using ordered data mode [ 1322.497394][T12191] em28xx 10-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 1322.502996][T12213] reiserfs: using flush barriers [ 1322.526634][T12213] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1322.543431][T12213] REISERFS (device loop2): checking transaction log (loop2) [ 1322.579508][T12213] REISERFS (device loop2): Using rupasov hash to sort names [ 1322.586927][T12213] REISERFS (device loop2): using 3.5.x disk format [ 1322.593668][T12213] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1322.604850][T12213] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1322.615822][ T23] em28xx 10-1:0.0: dvb set to bulk mode. [ 1322.618154][ T5812] em28xx 10-1:0.0: Binding DVB extension [ 1322.621976][T12213] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1322.638521][T12213] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1322.840793][ T9387] usb 10-1: USB disconnect, device number 4 [ 1322.890983][ T9387] em28xx 10-1:0.0: Disconnecting em28xx [ 1323.065816][ T5812] em28xx 10-1:0.0: Registering input extension [ 1323.096898][ T9387] em28xx 10-1:0.0: Closing input extension [ 1323.198377][ T9387] em28xx 10-1:0.0: Freeing device [ 1324.895620][T12234] loop9: detected capacity change from 0 to 128 [ 1325.227018][ T9387] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1329.459684][ T9387] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1329.525377][ T9387] usb 2-1: can't read configurations, error -71 [ 1329.909196][T12259] loop9: detected capacity change from 0 to 8192 [ 1330.299329][T12259] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1330.313288][T12259] REISERFS (device loop9): found reiserfs format "3.5" with non-standard journal [ 1330.324533][T12259] REISERFS (device loop9): using ordered data mode [ 1330.331895][T12259] reiserfs: using flush barriers [ 1330.392312][T12259] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1330.420787][T12259] REISERFS (device loop9): checking transaction log (loop9) [ 1330.496941][T12259] REISERFS (device loop9): Using rupasov hash to sort names [ 1330.506522][T12259] REISERFS (device loop9): using 3.5.x disk format [ 1330.521938][T12259] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1330.535370][T12259] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1330.549559][T12259] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1330.561996][T12259] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 1333.763672][T12272] loop9: detected capacity change from 0 to 128 [ 1334.420685][ T2177] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1335.127055][ T2177] usb 2-1: Using ep0 maxpacket: 16 [ 1335.164962][ T2177] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1335.207163][ T2177] usb 2-1: config 0 has no interface number 0 [ 1335.240431][ T2177] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1335.286946][ T2177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.309377][ T2177] usb 2-1: Product: syz [ 1335.313571][ T2177] usb 2-1: Manufacturer: syz [ 1335.356870][ T2177] usb 2-1: SerialNumber: syz [ 1335.377692][ T2177] usb 2-1: config 0 descriptor?? [ 1335.544298][ T2177] hub 2-1:0.132: bad descriptor, ignoring hub [ 1335.564670][ T2177] hub: probe of 2-1:0.132 failed with error -5 [ 1335.667689][ T2177] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input55 [ 1336.390178][ T2177] usb 2-1: USB disconnect, device number 23 [ 1337.849617][T12300] loop9: detected capacity change from 0 to 8192 [ 1337.880703][T12298] loop5: detected capacity change from 0 to 8192 [ 1337.913375][T12300] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1337.927354][T12300] REISERFS (device loop9): found reiserfs format "3.5" with non-standard journal [ 1337.936640][T12300] REISERFS (device loop9): using ordered data mode [ 1337.943486][T12300] reiserfs: using flush barriers [ 1337.949931][T12298] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1337.952579][T12300] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1337.963016][T12298] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 1337.963131][T12298] REISERFS (device loop5): using ordered data mode [ 1337.963141][T12298] reiserfs: using flush barriers [ 1337.968542][T12298] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1337.981194][T12300] REISERFS (device loop9): checking transaction log (loop9) [ 1337.990196][T12298] REISERFS (device loop5): checking transaction log (loop5) [ 1338.005259][T12300] REISERFS (device loop9): Using r5 hash to sort names [ 1338.039490][T12300] REISERFS (device loop9): using 3.5.x disk format [ 1338.046295][T12300] REISERFS warning (device loop9): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 1338.059136][T12300] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 1338.084986][T12298] REISERFS (device loop5): Using r5 hash to sort names [ 1338.092091][T12298] REISERFS (device loop5): using 3.5.x disk format [ 1338.098963][T12298] REISERFS warning (device loop5): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 1338.111771][T12298] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1345.161402][T12331] loop5: detected capacity change from 0 to 8192 [ 1345.199482][T12331] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1345.212565][T12331] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 1345.221881][T12331] REISERFS (device loop5): using ordered data mode [ 1345.228430][T12331] reiserfs: using flush barriers [ 1345.234678][T12331] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1345.251196][T12331] REISERFS (device loop5): checking transaction log (loop5) [ 1345.260211][T12331] REISERFS (device loop5): Using rupasov hash to sort names [ 1345.267592][T12331] REISERFS (device loop5): using 3.5.x disk format [ 1345.274316][T12331] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1345.285687][T12331] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1345.298030][T12331] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1345.309367][T12331] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1347.326283][T12355] loop5: detected capacity change from 0 to 128 [ 1348.100070][T12366] loop9: detected capacity change from 0 to 8192 [ 1348.158807][T12366] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1348.172679][T12366] REISERFS (device loop9): found reiserfs format "3.5" with non-standard journal [ 1348.182222][T12366] REISERFS (device loop9): using ordered data mode [ 1348.188858][T12366] reiserfs: using flush barriers [ 1348.197404][T12366] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1348.214142][T12366] REISERFS (device loop9): checking transaction log (loop9) [ 1348.229181][T12366] REISERFS (device loop9): Using rupasov hash to sort names [ 1348.236528][T12366] REISERFS (device loop9): using 3.5.x disk format [ 1348.243287][T12366] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1348.254760][T12366] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1348.266806][T12366] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1348.278006][T12366] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 1348.889209][T11577] Bluetooth: hci2: command 0x0406 tx timeout [ 1352.471062][ T9377] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.841160][ T9377] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.015136][T11577] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1353.037352][T11577] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1353.049678][T11577] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1353.111640][T11577] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1353.152493][T11577] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1353.191391][T11577] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1353.229387][ T9377] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.521055][ T9377] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.550461][T12418] Bluetooth: MGMT ver 1.22 [ 1354.575188][ T9377] tipc: Left network mode [ 1354.597927][T12414] chnl_net:caif_netlink_parms(): no params data found [ 1355.287035][ T8002] Bluetooth: hci2: command tx timeout [ 1355.987765][T12464] syz.5.1089 uses obsolete (PF_INET,SOCK_PACKET) [ 1356.157499][T12452] syzkaller0: entered promiscuous mode [ 1356.175674][T12452] syzkaller0: entered allmulticast mode [ 1358.126858][T11577] Bluetooth: hci2: command tx timeout [ 1360.167135][T11577] Bluetooth: hci2: command tx timeout [ 1361.364390][T12503] fuse: Unknown parameter '00000000000000000000' [ 1361.631937][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.638391][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.111160][T12414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.126618][T12414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.157363][T12414] bridge_slave_0: entered allmulticast mode [ 1362.164925][T12414] bridge_slave_0: entered promiscuous mode [ 1362.246048][T12414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.257436][T11577] Bluetooth: hci2: command tx timeout [ 1362.264400][T12414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.290474][T12414] bridge_slave_1: entered allmulticast mode [ 1362.304906][T12414] bridge_slave_1: entered promiscuous mode [ 1362.590825][T12414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.685267][T12414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1363.450414][T12414] team0: Port device team_slave_0 added [ 1363.620317][T12517] loop1: detected capacity change from 0 to 4096 [ 1363.649886][T12414] team0: Port device team_slave_1 added [ 1363.709311][T12517] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1363.818761][T12414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.862977][T12414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.936319][T12517] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1363.962619][T12414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.995823][T12517] ntfs3: loop1: Failed to load $Extend (-2). [ 1364.010413][T12517] ntfs3: loop1: Failed to initialize $Extend. [ 1364.023297][ T9377] hsr_slave_0: left promiscuous mode [ 1364.097093][ T9377] hsr_slave_1: left promiscuous mode [ 1364.122551][ T9377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.142293][ T9377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1364.183446][ T9377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1364.203788][ T9377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1364.232015][ T9377] bridge_slave_1: left allmulticast mode [ 1364.254538][ T9377] bridge_slave_1: left promiscuous mode [ 1364.273754][ T9377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.336273][ T9377] bridge_slave_0: left allmulticast mode [ 1364.355686][ T9377] bridge_slave_0: left promiscuous mode [ 1364.377066][ T9377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.539046][ T9377] veth1_macvtap: left promiscuous mode [ 1364.546513][ T9377] veth0_macvtap: left promiscuous mode [ 1364.574748][ T9377] veth1_vlan: left promiscuous mode [ 1364.597289][ T9377] veth0_vlan: left promiscuous mode [ 1366.728558][ T9377] team0 (unregistering): Port device team_slave_1 removed [ 1366.845649][ T9377] team0 (unregistering): Port device team_slave_0 removed [ 1366.928210][ T9377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1367.000488][ T9377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1367.759429][ T9377] bond0 (unregistering): Released all slaves [ 1367.887552][T12414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1367.901736][T12414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1367.937816][T12414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1368.146065][T12414] hsr_slave_0: entered promiscuous mode [ 1368.186508][T12414] hsr_slave_1: entered promiscuous mode [ 1368.268625][T12414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1368.299267][T12414] Cannot create hsr debugfs directory [ 1368.492469][T12594] loop1: detected capacity change from 0 to 32768 [ 1368.634095][T12594] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1368.821440][T12593] syzkaller0: entered promiscuous mode [ 1368.846916][T12593] syzkaller0: entered allmulticast mode [ 1369.580742][ T28] audit: type=1800 audit(1779754619.864:3): pid=12607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1110" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 1369.836075][T12594] syz.1.1110 (12594) used greatest stack depth: 18768 bytes left [ 1370.152824][ T5779] ocfs2: Unmounting device (7,1) on (node local) [ 1372.827140][T12654] loop1: detected capacity change from 0 to 32768 [ 1372.899101][T12654] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1373.588510][ T28] audit: type=1800 audit(1779754623.974:4): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1115" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 1374.217342][ T5779] ocfs2: Unmounting device (7,1) on (node local) [ 1374.702066][T12665] input: syz1 as /devices/virtual/input/input56 [ 1376.805503][T12674] kvm: pic: non byte write [ 1378.143217][T12700] loop1: detected capacity change from 0 to 32768 [ 1379.337350][T12700] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1379.758584][ T28] audit: type=1800 audit(1779754630.184:5): pid=12710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1123" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 1380.585738][ T5779] ocfs2: Unmounting device (7,1) on (node local) [ 1381.470181][T12414] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1381.498438][T12414] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1381.544353][T12414] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1381.594715][T12414] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1381.666978][T12724] loop9: detected capacity change from 0 to 32768 [ 1381.810013][T12414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.822264][T12724] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1381.852055][T12414] 8021q: adding VLAN 0 to HW filter on device team0 [ 1381.890811][ T9451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.898004][ T9451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1382.108577][ T9451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.115871][ T9451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1382.278421][ T28] audit: type=1800 audit(1779754632.694:6): pid=12731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1127" name="file1" dev="loop9" ino=17059 res=0 errno=0 [ 1382.958731][T12414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1383.037572][ T8458] ocfs2: Unmounting device (7,9) on (node local) [ 1385.047637][T12414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1385.174641][T12414] veth0_vlan: entered promiscuous mode [ 1385.218823][T12414] veth1_vlan: entered promiscuous mode [ 1385.313972][T12414] veth0_macvtap: entered promiscuous mode [ 1385.358319][T12414] veth1_macvtap: entered promiscuous mode [ 1385.419119][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1385.455174][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.475961][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1385.499482][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.510510][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1132'. [ 1385.521292][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1385.756066][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.780677][T12414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1385.892315][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1385.948070][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.009345][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1386.075378][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.162258][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1386.400451][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.483490][T12414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1386.588496][T12414] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.744600][T12414] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.852286][T12414] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.872586][T12414] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.067660][T12777] loop5: detected capacity change from 0 to 32768 [ 1387.091306][T12777] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1388.772095][ T28] audit: type=1800 audit(1779754639.204:7): pid=12785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1134" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 1389.918012][ T7093] ocfs2: Unmounting device (7,5) on (node local) [ 1390.057216][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.065129][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.199833][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.227021][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.122799][T12819] loop9: detected capacity change from 0 to 32768 [ 1396.258367][T12819] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1397.126928][ T28] audit: type=1800 audit(1779754647.144:8): pid=12828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1135" name="file1" dev="loop9" ino=17059 res=0 errno=0 [ 1397.517448][ T8458] ocfs2: Unmounting device (7,9) on (node local) [ 1398.069822][T12839] loop5: detected capacity change from 0 to 32768 [ 1399.020886][T12839] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1400.567382][ T28] audit: type=1800 audit(1779754650.994:9): pid=12857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1144" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 1401.528721][ T7093] ocfs2: Unmounting device (7,5) on (node local) [ 1402.887985][T12868] loop5: detected capacity change from 0 to 32768 [ 1403.119040][T12868] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1403.593836][ T28] audit: type=1800 audit(1779754654.014:10): pid=12874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1148" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 1405.411852][ T7093] ocfs2: Unmounting device (7,5) on (node local) [ 1406.046989][T12882] loop5: detected capacity change from 0 to 32768 [ 1406.070496][T12882] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1407.217007][ T28] audit: type=1800 audit(1779754657.254:11): pid=12893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1152" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 1407.534178][ T7093] ocfs2: Unmounting device (7,5) on (node local) [ 1408.837433][T12914] loop5: detected capacity change from 0 to 32768 [ 1409.035033][T12914] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1409.698358][ T28] audit: type=1800 audit(1779754660.064:12): pid=12919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1155" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 1410.470122][ T7093] ocfs2: Unmounting device (7,5) on (node local) [ 1410.790808][T12909] loop1: detected capacity change from 0 to 32768 [ 1410.931366][T12926] loop5: detected capacity change from 0 to 32768 [ 1411.045368][T12926] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1411.847676][ T28] audit: type=1800 audit(1779754662.194:13): pid=12939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1156" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 1412.451463][ T7093] ocfs2: Unmounting device (7,5) on (node local) [ 1414.101344][T12961] loop9: detected capacity change from 0 to 32768 [ 1414.213783][T12961] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1414.485233][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 1416.130744][ T28] audit: type=1800 audit(1779754666.534:14): pid=12976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1162" name="file1" dev="loop9" ino=17058 res=0 errno=0 [ 1416.703964][ T8458] ocfs2: Unmounting device (7,9) on (node local) [ 1416.783397][T12991] loop3: detected capacity change from 0 to 764 [ 1421.158921][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 1422.391845][T13039] loop1: detected capacity change from 0 to 32768 [ 1422.486486][T13039] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1422.974116][ T28] audit: type=1800 audit(1779754673.394:15): pid=13046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1175" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 1423.053956][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.060484][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.770573][ T5779] ocfs2: Unmounting device (7,1) on (node local) [ 1424.474756][T13056] loop9: detected capacity change from 0 to 4096 [ 1424.713809][T13061] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1424.971231][ T28] audit: type=1800 audit(1779754675.404:16): pid=13056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1177" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1425.237009][T12717] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1425.900886][T12717] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1425.929551][T12717] usb 10-1: no configurations [ 1425.934337][T12717] usb 10-1: can't read configurations, error -22 [ 1430.943714][T13106] input: syz1 as /devices/virtual/input/input57 [ 1432.999250][T13127] loop3: detected capacity change from 0 to 32768 [ 1433.174360][T13127] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1433.792763][ T28] audit: type=1800 audit(1779754684.174:17): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1185" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 1434.471676][T12414] ocfs2: Unmounting device (7,3) on (node local) [ 1435.587186][T13138] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1436.182034][T13146] loop9: detected capacity change from 0 to 1024 [ 1437.427253][T13146] EXT4-fs (loop9): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 1439.046370][T13146] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1439.059171][T13146] EXT4-fs: failed to create workqueue [ 1439.166798][T13146] EXT4-fs (loop9): mount failed [ 1439.380059][T13164] loop1: detected capacity change from 0 to 128 [ 1440.795470][T13175] loop1: detected capacity change from 0 to 1024 [ 1440.860386][T13175] EXT4-fs (loop1): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 1442.341862][T13175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1442.542050][T13190] loop9: detected capacity change from 0 to 1024 [ 1442.569940][T13192] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1442.617850][T13192] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1442.618016][T13190] EXT4-fs: Ignoring removed bh option [ 1442.692038][T13190] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1442.768879][T13192] 9pnet_fd: Insufficient options for proto=fd [ 1442.778703][ T28] audit: type=1326 audit(1779754693.214:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.1.1201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e299ce59 code=0x7ffc0000 [ 1442.898501][ T28] audit: type=1326 audit(1779754693.264:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.1.1201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f17e299ce59 code=0x7ffc0000 [ 1443.023220][ T28] audit: type=1326 audit(1779754693.264:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.1.1201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e299ce59 code=0x7ffc0000 [ 1443.127738][ T28] audit: type=1326 audit(1779754693.264:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.1.1201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17e299ce59 code=0x7ffc0000 [ 1443.183303][ T8458] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.214597][ T28] audit: type=1326 audit(1779754693.264:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.1.1201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e299ce59 code=0x7ffc0000 [ 1444.387511][ T28] audit: type=1326 audit(1779754693.264:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.1.1201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17e299ce59 code=0x7ffc0000 [ 1444.426919][ T28] audit: type=1326 audit(1779754693.264:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.1.1201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e299ce59 code=0x7ffc0000 [ 1444.460887][ T28] audit: type=1326 audit(1779754693.284:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.1.1201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17e299ce59 code=0x7ffc0000 [ 1444.600756][ T1304] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 1444.615963][ T28] audit: type=1326 audit(1779754693.284:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.1.1201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e299ce59 code=0x7ffc0000 [ 1444.646889][ T1304] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1444.646889][ T1304] [ 1444.656586][ T1304] EXT4-fs (loop1): Total free blocks count 0 [ 1444.723210][ T1304] EXT4-fs (loop1): Free/Dirty block details [ 1444.731026][ T28] audit: type=1326 audit(1779754693.284:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.1.1201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e299ce59 code=0x7ffc0000 [ 1444.777129][ T1304] EXT4-fs (loop1): free_blocks=20480 [ 1444.782493][ T1304] EXT4-fs (loop1): dirty_blocks=16 [ 1444.823360][ T1304] EXT4-fs (loop1): Block reservation details [ 1444.836800][ T1304] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 1444.878857][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1446.304766][T13207] loop9: detected capacity change from 0 to 32768 [ 1446.433714][T13223] lo speed is unknown, defaulting to 1000 [ 1446.447977][T13223] lo speed is unknown, defaulting to 1000 [ 1446.468106][T13223] lo speed is unknown, defaulting to 1000 [ 1446.487676][T13207] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.1204 (13207) [ 1446.511981][T13223] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1446.567100][T13223] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1446.782548][T13223] lo speed is unknown, defaulting to 1000 [ 1446.798908][T13223] lo speed is unknown, defaulting to 1000 [ 1446.817263][T13223] lo speed is unknown, defaulting to 1000 [ 1446.860444][T13223] lo speed is unknown, defaulting to 1000 [ 1447.077921][T13226] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1447.178844][T13207] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1447.237507][T13207] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 1447.287199][T13207] BTRFS warning (device loop9): excessive commit interval 3581 [ 1447.294859][T13207] BTRFS info (device loop9): metadata ratio 107050 [ 1447.467084][T13207] BTRFS info (device loop9): turning on flush-on-commit [ 1447.474170][T13207] BTRFS info (device loop9): max_inline at 4096 [ 1448.169603][T13207] BTRFS info (device loop9): using free space tree [ 1448.309426][T13207] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1448.353486][T13207] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1448.812051][T13207] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1448.826501][T13207] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1449.043666][T13207] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1449.289656][T13207] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1449.548655][T13207] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1449.587735][T13207] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1449.977961][T13207] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1450.057913][T13207] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1450.131016][T13207] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1450.241392][T13207] BTRFS error (device loop9): open_ctree failed: -12 [ 1453.767721][T13299] siw: device registration error -23 [ 1454.401795][T13298] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1454.423680][T13294] loop1: detected capacity change from 0 to 1024 [ 1454.474134][T13294] EXT4-fs: Ignoring removed bh option [ 1454.751367][T13294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1455.077949][T13318] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1221'. [ 1456.759057][T13326] loop9: detected capacity change from 0 to 1024 [ 1457.158951][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1457.171740][T13304] loop5: detected capacity change from 0 to 32768 [ 1457.204483][T13334] netlink: 'syz.9.1222': attribute type 1 has an invalid length. [ 1457.241071][T13334] netlink: 'syz.9.1222': attribute type 3 has an invalid length. [ 1457.250972][T13334] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1222'. [ 1457.361545][T13304] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1457.419120][T13334] NCSI netlink: No device for ifindex 0 [ 1457.671360][T13343] loop1: detected capacity change from 0 to 1024 [ 1457.714800][T13343] EXT4-fs: Ignoring removed bh option [ 1457.813263][T13343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1458.082717][ T7093] ocfs2: Unmounting device (7,5) on (node local) [ 1458.930512][T13354] loop9: detected capacity change from 0 to 1024 [ 1458.961106][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.997154][T13354] EXT4-fs (loop9): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 1459.065902][T13354] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1460.179741][T13370] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1460.303087][T13354] 9pnet_fd: Insufficient options for proto=fd [ 1460.333238][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1460.333253][ T28] audit: type=1326 audit(1779754710.764:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13353 comm="syz.9.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b9b9ce59 code=0x7ffc0000 [ 1460.372707][T13373] loop3: detected capacity change from 0 to 1024 [ 1460.416600][T13373] EXT4-fs: Ignoring removed bh option [ 1460.422822][ T28] audit: type=1326 audit(1779754710.764:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13353 comm="syz.9.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b9b9ce59 code=0x7ffc0000 [ 1460.479243][ T28] audit: type=1326 audit(1779754710.814:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13353 comm="syz.9.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fd9b9b9ce59 code=0x7ffc0000 [ 1460.527939][T13377] loop1: detected capacity change from 0 to 1024 [ 1460.540455][T13377] EXT4-fs: Ignoring removed bh option [ 1460.541829][ T28] audit: type=1326 audit(1779754710.814:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13353 comm="syz.9.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b9b9ce59 code=0x7ffc0000 [ 1460.571335][ T28] audit: type=1326 audit(1779754710.814:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13353 comm="syz.9.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b9b9ce59 code=0x7ffc0000 [ 1460.596418][ T28] audit: type=1326 audit(1779754710.814:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13353 comm="syz.9.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9b9b9ce59 code=0x7ffc0000 [ 1460.620799][T13373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1460.718138][ T28] audit: type=1326 audit(1779754710.814:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13353 comm="syz.9.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b9b9ce59 code=0x7ffc0000 [ 1460.796625][ T8458] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1460.819838][ T28] audit: type=1326 audit(1779754710.814:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13353 comm="syz.9.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b9b9ce59 code=0x7ffc0000 [ 1460.900511][T13377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1460.935387][ T28] audit: type=1326 audit(1779754710.824:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13353 comm="syz.9.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9b9b9ce59 code=0x7ffc0000 [ 1460.960001][ T28] audit: type=1326 audit(1779754710.824:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13353 comm="syz.9.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b9b9ce59 code=0x7ffc0000 [ 1461.314236][T12414] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.132222][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.181055][T13407] loop5: detected capacity change from 0 to 1024 [ 1463.213454][T13407] EXT4-fs: Ignoring removed bh option [ 1463.281708][T13407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1465.469423][ T7093] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1465.658773][T13426] loop9: detected capacity change from 0 to 1024 [ 1465.676190][T13426] EXT4-fs: Ignoring removed bh option [ 1465.739570][T13426] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1466.703173][T13446] lo speed is unknown, defaulting to 1000 [ 1466.709293][T13446] lo speed is unknown, defaulting to 1000 [ 1466.717565][T13446] lo speed is unknown, defaulting to 1000 [ 1466.760800][T13446] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1466.829089][T13446] lo speed is unknown, defaulting to 1000 [ 1466.839863][T13446] lo speed is unknown, defaulting to 1000 [ 1466.851485][T13446] lo speed is unknown, defaulting to 1000 [ 1466.862194][T13446] lo speed is unknown, defaulting to 1000 [ 1467.199315][T13442] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1467.273140][T13444] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1467.410589][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1243'. [ 1468.263403][T13450] loop3: detected capacity change from 0 to 1024 [ 1468.413524][ T8458] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1469.976589][T13467] loop3: detected capacity change from 0 to 1024 [ 1470.009335][T13467] EXT4-fs (loop3): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 1470.112559][T13467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1470.430286][T13480] 9pnet_fd: Insufficient options for proto=fd [ 1470.549408][T13479] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1470.590490][T13485] loop1: detected capacity change from 0 to 1024 [ 1470.598250][T13485] EXT4-fs: Ignoring removed bh option [ 1470.679293][T13485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1471.174414][ T5954] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 1471.226773][ T5954] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1471.226773][ T5954] [ 1471.245468][ T5954] EXT4-fs (loop3): Total free blocks count 0 [ 1471.253766][ T5954] EXT4-fs (loop3): Free/Dirty block details [ 1471.264316][ T5954] EXT4-fs (loop3): free_blocks=20480 [ 1471.269947][ T5954] EXT4-fs (loop3): dirty_blocks=16 [ 1471.275190][ T5954] EXT4-fs (loop3): Block reservation details [ 1471.313256][ T5954] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 1471.363839][T12414] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.483053][T13477] loop9: detected capacity change from 0 to 32768 [ 1471.671789][T13477] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1471.714271][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1472.002623][ T8458] ocfs2: Unmounting device (7,9) on (node local) [ 1472.149670][T13504] loop5: detected capacity change from 0 to 1024 [ 1472.218578][T13504] EXT4-fs (loop5): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 1472.298643][T13504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1472.305268][T13508] loop3: detected capacity change from 0 to 1024 [ 1472.389099][T13508] EXT4-fs (loop3): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 1472.431144][T13516] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1472.478656][T13508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1472.575588][T13516] 9pnet_fd: Insufficient options for proto=fd [ 1472.607152][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 1472.607170][ T28] audit: type=1326 audit(1779754723.034:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13502 comm="syz.5.1246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a5d9ce59 code=0x7ffc0000 [ 1472.667074][ T28] audit: type=1326 audit(1779754723.094:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13502 comm="syz.5.1246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a5d9ce59 code=0x7ffc0000 [ 1472.756129][ T28] audit: type=1326 audit(1779754723.094:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13502 comm="syz.5.1246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47a5d9ce59 code=0x7ffc0000 [ 1472.981370][T13522] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1473.056952][ T28] audit: type=1326 audit(1779754723.094:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13502 comm="syz.5.1246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a5d9ce59 code=0x7ffc0000 [ 1473.274497][T13508] 9pnet_fd: Insufficient options for proto=fd [ 1473.285822][ T28] audit: type=1326 audit(1779754723.094:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13502 comm="syz.5.1246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a5d9ce59 code=0x7ffc0000 [ 1473.389585][T13508] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1253'. [ 1473.411446][ T28] audit: type=1326 audit(1779754723.094:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13502 comm="syz.5.1246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47a5d9ce59 code=0x7ffc0000 [ 1473.461410][ T28] audit: type=1326 audit(1779754723.384:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13502 comm="syz.5.1246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a5d9ce59 code=0x7ffc0000 [ 1474.635531][ T28] audit: type=1326 audit(1779754723.444:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13502 comm="syz.5.1246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a5d9ce59 code=0x7ffc0000 [ 1474.697179][ T28] audit: type=1326 audit(1779754723.714:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13507 comm="syz.3.1253" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868399ce59 code=0x7ffc0000 [ 1474.721415][ T28] audit: type=1326 audit(1779754723.714:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13507 comm="syz.3.1253" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868399ce59 code=0x7ffc0000 [ 1474.824824][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 1474.856253][ T11] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1474.856253][ T11] [ 1474.877241][ T11] EXT4-fs (loop5): Total free blocks count 0 [ 1474.887302][ T11] EXT4-fs (loop5): Free/Dirty block details [ 1474.893556][ T11] EXT4-fs (loop5): free_blocks=20480 [ 1474.919421][T12414] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.931730][ T11] EXT4-fs (loop5): dirty_blocks=16 [ 1474.964314][ T11] EXT4-fs (loop5): Block reservation details [ 1475.007475][ T11] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1475.034398][ T7093] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1475.204057][T13538] loop3: detected capacity change from 0 to 1024 [ 1475.254761][T13538] EXT4-fs (loop3): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 1475.312850][T13538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1475.491822][T13545] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1475.600711][T13538] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 1475.614555][T13538] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1475.614555][T13538] [ 1475.645455][T13538] EXT4-fs (loop3): Total free blocks count 0 [ 1475.646284][T13545] 9pnet_fd: Insufficient options for proto=fd [ 1475.695110][T13538] EXT4-fs (loop3): Free/Dirty block details [ 1475.747734][T13545] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1258'. [ 1475.787296][T13538] EXT4-fs (loop3): free_blocks=20480 [ 1475.798688][T13538] EXT4-fs (loop3): dirty_blocks=64 [ 1475.803880][T13538] EXT4-fs (loop3): Block reservation details [ 1475.891823][T13538] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 1476.708472][ T8485] Bluetooth: hci2: command 0x0406 tx timeout [ 1476.893415][T12414] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1478.705047][T13570] loop1: detected capacity change from 0 to 1024 [ 1478.731714][T13570] EXT4-fs: Ignoring removed bh option [ 1478.834559][T13570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1478.966334][T13554] loop9: detected capacity change from 0 to 32768 [ 1479.500304][T13554] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 1479.500795][T13554] (syz.9.1260,13554,0):ocfs2_initialize_super:2285 ERROR: status = -12 [ 1479.569395][T13557] loop5: detected capacity change from 0 to 32768 [ 1479.601954][T13554] (syz.9.1260,13554,0):ocfs2_fill_super:1178 ERROR: status = -12 [ 1479.614166][T13557] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1262 (13557) [ 1479.699849][T13557] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1479.743798][T13557] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1479.779005][T13557] BTRFS warning (device loop5): excessive commit interval 3581 [ 1479.786667][T13557] BTRFS info (device loop5): metadata ratio 107050 [ 1479.800563][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1479.886988][T13557] BTRFS info (device loop5): turning on flush-on-commit [ 1479.894610][T13557] BTRFS info (device loop5): max_inline at 4096 [ 1479.949822][T13557] BTRFS info (device loop5): using free space tree [ 1479.995151][T13557] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1479.998094][T13557] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1480.053136][T13557] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1480.067594][T13557] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1480.212117][T13591] loop9: detected capacity change from 0 to 8192 [ 1480.294183][T13557] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1480.294827][T13557] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1480.387030][T13557] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1480.398970][T13591] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1480.421489][T13591] REISERFS (device loop9): found reiserfs format "3.5" with non-standard journal [ 1480.430848][T13591] REISERFS (device loop9): using ordered data mode [ 1480.437483][T13591] reiserfs: using flush barriers [ 1480.471444][T13591] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1480.488316][T13591] REISERFS (device loop9): checking transaction log (loop9) [ 1480.518177][T13591] REISERFS (device loop9): Using rupasov hash to sort names [ 1480.525583][T13591] REISERFS (device loop9): using 3.5.x disk format [ 1480.532413][T13591] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1480.543542][T13591] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1480.554681][T13591] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1480.566914][T13591] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 1481.158618][T13557] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1481.159495][T13557] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1481.230691][T13557] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1481.315562][T13557] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1481.348609][T13557] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1481.448236][T13557] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1481.505822][T13557] BTRFS error (device loop5): open_ctree failed: -12 [ 1482.597066][ T1188] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1482.624261][T13593] loop1: detected capacity change from 0 to 32768 [ 1482.668562][T13593] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1265 (13593) [ 1482.769471][T13593] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1482.796879][ T1188] usb 4-1: Using ep0 maxpacket: 16 [ 1482.811615][ T1188] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1482.823204][T13593] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1482.831399][ T1188] usb 4-1: config 0 has no interface number 0 [ 1482.854249][ T1188] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1482.874213][T13593] BTRFS warning (device loop1): excessive commit interval 3581 [ 1482.884150][ T1188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.910010][ T1188] usb 4-1: Product: syz [ 1482.920374][T13639] loop5: detected capacity change from 0 to 1024 [ 1482.925393][ T1188] usb 4-1: Manufacturer: syz [ 1482.928603][T13593] BTRFS info (device loop1): metadata ratio 107050 [ 1482.947083][ T1188] usb 4-1: SerialNumber: syz [ 1482.956942][T13593] BTRFS info (device loop1): turning on flush-on-commit [ 1482.968526][T13639] EXT4-fs (loop5): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 1482.987388][T13593] BTRFS info (device loop1): max_inline at 4096 [ 1482.994921][ T1188] usb 4-1: config 0 descriptor?? [ 1483.024549][T13593] BTRFS info (device loop1): using free space tree [ 1483.038999][T13639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1483.040186][ T1188] hub 4-1:0.132: bad descriptor, ignoring hub [ 1483.096182][T13593] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1483.097182][T13593] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1483.127040][ T1188] hub: probe of 4-1:0.132 failed with error -5 [ 1483.198395][T13593] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1483.199090][T13593] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1483.230432][T13639] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1483.278285][T13593] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1483.278949][T13593] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1483.314191][ T1188] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input59 [ 1483.338573][T13593] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1483.339241][T13593] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1483.539223][T13593] BTRFS error (device loop1): open_ctree failed: -12 [ 1483.628195][ T9452] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 1483.645407][T13625] loop9: detected capacity change from 0 to 32768 [ 1483.656580][T13625] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.1268 (13625) [ 1483.677270][ T9452] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1483.677270][ T9452] [ 1483.713519][T13625] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1483.725220][ T9452] EXT4-fs (loop5): Total free blocks count 0 [ 1483.747140][T13625] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 1483.769534][ T9452] EXT4-fs (loop5): Free/Dirty block details [ 1483.775550][ T9452] EXT4-fs (loop5): free_blocks=20480 [ 1483.781391][T13625] BTRFS warning (device loop9): excessive commit interval 3581 [ 1483.789533][ T9452] EXT4-fs (loop5): dirty_blocks=16 [ 1483.794963][T13625] BTRFS info (device loop9): metadata ratio 107050 [ 1483.803885][ T9452] EXT4-fs (loop5): Block reservation details [ 1483.827871][T13625] BTRFS info (device loop9): turning on flush-on-commit [ 1483.837199][ T9452] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1483.856915][T13625] BTRFS info (device loop9): max_inline at 4096 [ 1483.888357][T13625] BTRFS info (device loop9): using free space tree [ 1483.896285][ T7093] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1483.984773][T11720] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (11720) [ 1484.471170][T13625] BTRFS info (device loop9): enabling ssd optimizations [ 1488.158048][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1488.166412][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.178876][ T8458] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1490.217869][T13702] loop5: detected capacity change from 0 to 1024 [ 1490.262818][T13702] EXT4-fs: Ignoring removed bh option [ 1490.428182][T13702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1491.805455][ T7093] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1495.029909][ T1188] usb 4-1: USB disconnect, device number 6 [ 1501.247629][T13758] tipc: Cannot configure node identity twice [ 1502.537433][T13773] siw: device registration error -23 [ 1504.665655][T13777] siw: device registration error -23 [ 1504.892168][T13775] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1505.455588][T13791] loop3: detected capacity change from 0 to 8192 [ 1506.327061][T13791] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1506.340334][T13791] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1506.350176][T13791] REISERFS (device loop3): using ordered data mode [ 1506.356795][T13791] reiserfs: using flush barriers [ 1506.363583][T13791] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1506.389604][T13791] REISERFS (device loop3): checking transaction log (loop3) [ 1506.415756][T13791] REISERFS (device loop3): Using rupasov hash to sort names [ 1506.447490][T13791] REISERFS (device loop3): using 3.5.x disk format [ 1506.457864][T13791] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1506.470997][T13791] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1506.483618][T13791] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1506.497086][T13791] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1506.713761][T13791] lo speed is unknown, defaulting to 1000 [ 1508.482118][T13802] loop1: detected capacity change from 0 to 8192 [ 1508.564994][T13804] loop5: detected capacity change from 0 to 8192 [ 1508.639079][T13804] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1508.652297][T13804] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 1508.661621][T13804] REISERFS (device loop5): using ordered data mode [ 1508.668219][T13804] reiserfs: using flush barriers [ 1508.704623][T13804] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1508.721771][T13804] REISERFS (device loop5): checking transaction log (loop5) [ 1508.749970][T13802] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1508.763221][T13802] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1508.773808][T13802] REISERFS (device loop1): using ordered data mode [ 1508.780424][T13802] reiserfs: using flush barriers [ 1508.788168][T13802] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1508.805052][T13802] REISERFS (device loop1): checking transaction log (loop1) [ 1508.818006][T13802] REISERFS (device loop1): Using rupasov hash to sort names [ 1508.825424][T13802] REISERFS (device loop1): using 3.5.x disk format [ 1508.833144][T13802] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1508.844440][T13802] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1508.855840][T13802] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1508.866991][T13802] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1508.891617][T13802] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1508.903252][T13802] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1508.922253][T13804] REISERFS (device loop5): Using rupasov hash to sort names [ 1508.929718][T13804] REISERFS (device loop5): using 3.5.x disk format [ 1508.937213][T13804] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1508.948518][T13804] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1508.959817][T13804] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1508.970996][T13804] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1509.045497][T13802] lo speed is unknown, defaulting to 1000 [ 1509.446022][T13818] siw: device registration error -23 [ 1510.878256][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1298'. [ 1511.957572][T13827] loop9: detected capacity change from 0 to 32768 [ 1511.995058][T13827] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.1297 (13827) [ 1512.055076][T13827] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1512.068924][T13827] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 1512.077852][T13827] BTRFS warning (device loop9): excessive commit interval 3581 [ 1512.087243][T13827] BTRFS info (device loop9): metadata ratio 107050 [ 1512.115168][T13827] BTRFS info (device loop9): turning on flush-on-commit [ 1512.130735][T13827] BTRFS info (device loop9): max_inline at 4096 [ 1512.146933][T13827] BTRFS info (device loop9): using free space tree [ 1512.301820][T13862] loop3: detected capacity change from 0 to 1024 [ 1512.395243][T13862] EXT4-fs: Ignoring removed bh option [ 1512.415556][T13827] BTRFS info (device loop9): enabling ssd optimizations [ 1512.497619][T13862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1512.992947][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 1512.992962][ T28] audit: type=1800 audit(1779754763.424:90): pid=13827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1297" name="file1" dev="loop9" ino=260 res=0 errno=0 [ 1514.269981][ T8458] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1514.411702][T13891] loop1: detected capacity change from 0 to 8192 [ 1514.642462][T13891] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1514.655900][T13891] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1514.666355][T13891] REISERFS (device loop1): using ordered data mode [ 1514.673103][T13891] reiserfs: using flush barriers [ 1514.702267][T13891] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1514.724164][T13891] REISERFS (device loop1): checking transaction log (loop1) [ 1514.752676][T13891] REISERFS (device loop1): Using rupasov hash to sort names [ 1514.760365][T13891] REISERFS (device loop1): using 3.5.x disk format [ 1514.768764][T13891] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1514.780254][T13891] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1514.791900][T13891] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1514.803390][T13891] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1514.900781][T13891] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1514.912506][T13891] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1515.581899][T13893] lo speed is unknown, defaulting to 1000 [ 1515.691889][T12414] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1515.998887][T11720] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop9 scanned by udevd (11720) [ 1516.387341][T13903] loop5: detected capacity change from 0 to 8192 [ 1516.476601][T13903] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1516.491685][T13903] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 1516.501551][T13903] REISERFS (device loop5): using ordered data mode [ 1516.508933][T13903] reiserfs: using flush barriers [ 1516.533940][T13903] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1516.552738][T13903] REISERFS (device loop5): checking transaction log (loop5) [ 1516.587845][T13903] REISERFS (device loop5): Using rupasov hash to sort names [ 1516.595327][T13903] REISERFS (device loop5): using 3.5.x disk format [ 1516.605525][T13903] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1516.617937][T13903] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1516.630090][T13903] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1516.641624][T13903] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1516.917065][T13905] lo speed is unknown, defaulting to 1000 [ 1517.465266][T13912] siw: device registration error -23 [ 1518.564298][T13921] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1307'. [ 1521.290553][T13938] loop1: detected capacity change from 0 to 8192 [ 1521.649163][T13938] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1521.662372][T13938] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1521.671789][T13938] REISERFS (device loop1): using ordered data mode [ 1521.678429][T13938] reiserfs: using flush barriers [ 1521.685867][T13938] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1521.702553][T13938] REISERFS (device loop1): checking transaction log (loop1) [ 1521.728453][T13938] REISERFS (device loop1): Using r5 hash to sort names [ 1521.736210][T13938] REISERFS (device loop1): using 3.5.x disk format [ 1521.743042][T13938] REISERFS warning (device loop1): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 1521.755859][T13938] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1522.857941][T13954] loop5: detected capacity change from 0 to 8192 [ 1524.340811][T13954] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1524.356797][T13954] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 1524.366096][T13954] REISERFS (device loop5): using ordered data mode [ 1524.372772][T13954] reiserfs: using flush barriers [ 1524.391273][T13954] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1524.409016][T13954] REISERFS (device loop5): checking transaction log (loop5) [ 1524.452569][T13954] REISERFS (device loop5): Using rupasov hash to sort names [ 1524.460099][T13954] REISERFS (device loop5): using 3.5.x disk format [ 1524.467013][T13954] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1524.478196][T13954] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1524.490226][T13954] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1524.501958][T13954] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1524.555932][T13951] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1524.567134][T13951] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1524.602660][T13951] lo speed is unknown, defaulting to 1000 [ 1525.318577][T13968] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1526.445446][ T5154] IPVS: starting estimator thread 0... [ 1526.547103][T13979] IPVS: using max 17 ests per chain, 40800 per kthread [ 1527.107917][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1317'. [ 1527.629005][T13987] loop5: detected capacity change from 0 to 128 [ 1527.639760][T13961] loop1: detected capacity change from 0 to 32768 [ 1527.688005][T13961] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 1528.232442][T13992] loop3: detected capacity change from 0 to 8192 [ 1528.271026][T13992] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1528.285070][T13992] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1528.297149][T13992] REISERFS (device loop3): using ordered data mode [ 1528.303796][T13992] reiserfs: using flush barriers [ 1528.429463][T13992] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1528.447219][T13992] REISERFS (device loop3): checking transaction log (loop3) [ 1528.478815][T13992] REISERFS (device loop3): Using r5 hash to sort names [ 1528.485793][T13992] REISERFS (device loop3): using 3.5.x disk format [ 1528.493404][T13992] REISERFS warning (device loop3): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 1528.506410][T13992] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1531.380185][T11746] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 1536.256195][T14038] lo speed is unknown, defaulting to 1000 [ 1537.458230][T14049] siw: device registration error -23 [ 1543.885923][T14091] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1545.933526][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.954058][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.274402][T14097] loop3: detected capacity change from 0 to 32768 [ 1546.360941][T14097] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1546.585045][T14097] XFS (loop3): Ending clean mount [ 1547.777421][T14097] XFS (loop3): Quotacheck needed: Please wait. [ 1547.916657][T14097] XFS (loop3): Quotacheck: Done. [ 1548.711480][ T9387] IPVS: starting estimator thread 0... [ 1548.775713][T12414] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1548.869800][T14115] IPVS: using max 18 ests per chain, 43200 per kthread [ 1550.783880][T14133] loop1: detected capacity change from 0 to 8192 [ 1552.297512][T14133] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1552.310773][T14133] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1552.320127][T14133] REISERFS (device loop1): using ordered data mode [ 1552.326668][T14133] reiserfs: using flush barriers [ 1552.333443][T14133] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1552.350970][T14133] REISERFS (device loop1): checking transaction log (loop1) [ 1552.360125][T14133] REISERFS (device loop1): Using rupasov hash to sort names [ 1552.367528][T14133] REISERFS (device loop1): using 3.5.x disk format [ 1552.374249][T14133] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1552.385627][T14133] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1552.396923][T14133] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1552.408081][T14133] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1552.469161][T14132] lo speed is unknown, defaulting to 1000 [ 1553.698851][T14151] loop3: detected capacity change from 0 to 8192 [ 1555.312896][T14151] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1555.326820][T14151] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1555.336073][T14151] REISERFS (device loop3): using ordered data mode [ 1555.342824][T14151] reiserfs: using flush barriers [ 1555.358091][T14151] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1555.375138][T14151] REISERFS (device loop3): checking transaction log (loop3) [ 1555.486957][T14151] REISERFS (device loop3): Using rupasov hash to sort names [ 1555.494337][T14151] REISERFS (device loop3): using 3.5.x disk format [ 1555.501051][T14151] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1555.512135][T14151] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1555.524027][T14151] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1555.535277][T14151] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1555.680110][T14150] lo speed is unknown, defaulting to 1000 [ 1558.209646][T14171] loop5: detected capacity change from 0 to 8192 [ 1558.254203][T14171] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1558.267456][T14171] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 1558.276802][T14171] REISERFS (device loop5): using ordered data mode [ 1558.283356][T14171] reiserfs: using flush barriers [ 1558.307650][T14171] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1558.324522][T14171] REISERFS (device loop5): checking transaction log (loop5) [ 1558.347488][T14171] REISERFS (device loop5): Using rupasov hash to sort names [ 1558.354918][T14171] REISERFS (device loop5): using 3.5.x disk format [ 1558.362500][T14171] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1558.374020][T14171] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1558.385618][T14171] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1558.397963][T14171] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1558.637641][T14174] lo speed is unknown, defaulting to 1000 [ 1560.506397][T14180] loop9: detected capacity change from 0 to 2048 [ 1560.659426][T14178] netlink: 'syz.9.1352': attribute type 2 has an invalid length. [ 1560.729980][T14180] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1562.272417][T14196] loop9: detected capacity change from 0 to 32768 [ 1562.333531][T14196] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1563.399654][T14196] XFS (loop9): Ending clean mount [ 1563.455731][T14196] XFS (loop9): Quotacheck needed: Please wait. [ 1563.657313][T14196] XFS (loop9): Quotacheck: Done. [ 1564.492310][ T8458] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1565.001773][T14226] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1355'. [ 1566.094214][T14234] netlink: 'syz.9.1358': attribute type 2 has an invalid length. [ 1566.294563][T14235] loop9: detected capacity change from 0 to 2048 [ 1566.345980][T14235] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1566.667825][T14244] loop1: detected capacity change from 0 to 8192 [ 1568.104366][T14246] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1568.202592][T14244] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1568.215646][T14244] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1568.225415][T14244] REISERFS (device loop1): using ordered data mode [ 1568.231965][T14244] reiserfs: using flush barriers [ 1568.238978][T14244] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1568.255534][T14244] REISERFS (device loop1): checking transaction log (loop1) [ 1568.627120][T14244] REISERFS (device loop1): Using rupasov hash to sort names [ 1568.635335][T14244] REISERFS (device loop1): using 3.5.x disk format [ 1568.642267][T14244] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1568.653610][T14244] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1568.664718][T14244] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1568.675739][T14244] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1568.716364][T14242] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1568.727538][T14242] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1571.956945][ T8696] IPVS: starting estimator thread 0... [ 1572.076903][T14269] IPVS: using max 19 ests per chain, 45600 per kthread [ 1574.638190][T14295] input: syz1 as /devices/virtual/input/input61 [ 1574.782553][T14295] input: failed to attach handler evdev to device input61, error: -4 [ 1576.741304][T14317] loop3: detected capacity change from 0 to 8192 [ 1576.814566][T14317] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1576.828557][T14317] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1576.838440][T14317] REISERFS (device loop3): using ordered data mode [ 1576.845040][T14317] reiserfs: using flush barriers [ 1576.871505][T14317] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1576.890472][T14317] REISERFS (device loop3): checking transaction log (loop3) [ 1576.967123][T14317] REISERFS (device loop3): Using rupasov hash to sort names [ 1576.974639][T14317] REISERFS (device loop3): using 3.5.x disk format [ 1576.982299][T14317] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1576.993893][T14317] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1577.005528][T14317] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1577.017110][T14317] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1577.194489][T14319] lo speed is unknown, defaulting to 1000 [ 1577.500754][T14315] loop5: detected capacity change from 0 to 1024 [ 1577.524758][T14315] EXT4-fs (loop5): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 1577.654384][T14315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1577.840739][T14326] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1579.493465][T14326] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 1579.543829][T14326] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1579.543829][T14326] [ 1579.587880][T14326] EXT4-fs (loop5): Total free blocks count 0 [ 1579.608612][T14326] EXT4-fs (loop5): Free/Dirty block details [ 1579.614623][T14326] EXT4-fs (loop5): free_blocks=20480 [ 1579.656969][T14326] EXT4-fs (loop5): dirty_blocks=80 [ 1579.734278][T14326] EXT4-fs (loop5): Block reservation details [ 1579.766738][T14326] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 1579.971929][ T145] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 1580.947436][T14343] loop9: detected capacity change from 0 to 1024 [ 1580.971848][T14343] EXT4-fs (loop9): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 1581.058156][T14343] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1581.199239][T14343] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1581.282119][T14343] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 1581.316811][T14343] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1581.316811][T14343] [ 1581.342791][T14343] EXT4-fs (loop9): Total free blocks count 0 [ 1581.446718][T14343] EXT4-fs (loop9): Free/Dirty block details [ 1581.491681][T14343] EXT4-fs (loop9): free_blocks=20480 [ 1581.506539][T14343] EXT4-fs (loop9): dirty_blocks=80 [ 1581.519174][T14343] EXT4-fs (loop9): Block reservation details [ 1581.552165][T14343] EXT4-fs (loop9): i_reserved_data_blocks=4 [ 1581.885408][ T5954] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 1582.297250][T14362] siw: device registration error -23 [ 1582.698304][T14382] loop9: detected capacity change from 0 to 32768 [ 1582.825558][T14382] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1582.955748][T14382] XFS (loop9): Ending clean mount [ 1583.028362][T14382] XFS (loop9): Quotacheck needed: Please wait. [ 1583.127730][T14382] XFS (loop9): Quotacheck: Done. [ 1584.651451][ T8458] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1588.583498][T14429] warning: `syz.9.1385' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1590.997931][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1389'. [ 1594.154263][T14451] netlink: 'syz.9.1392': attribute type 2 has an invalid length. [ 1594.600057][T14451] loop9: detected capacity change from 0 to 2048 [ 1595.154887][T14460] netlink: 'syz.1.1394': attribute type 2 has an invalid length. [ 1595.181989][T14451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1595.432253][T14463] loop1: detected capacity change from 0 to 2048 [ 1595.490104][T14463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1596.556157][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'. [ 1598.616083][T11619] IPVS: starting estimator thread 0... [ 1599.036830][T14496] IPVS: using max 21 ests per chain, 50400 per kthread [ 1600.738224][T14521] netlink: 'syz.3.1405': attribute type 2 has an invalid length. [ 1601.049696][T14531] siw: device registration error -23 [ 1601.714170][T14527] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1601.722836][T14526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1407'. [ 1601.869724][T14525] loop3: detected capacity change from 0 to 2048 [ 1601.910782][T14529] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1601.991960][T14525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1602.016914][T14537] loop1: detected capacity change from 0 to 128 [ 1606.545533][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1416'. [ 1606.892256][T14572] netlink: 'syz.1.1417': attribute type 2 has an invalid length. [ 1607.817988][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.824438][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.890909][T14573] loop1: detected capacity change from 0 to 2048 [ 1607.975473][T14573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1608.618697][T14581] loop9: detected capacity change from 0 to 1024 [ 1608.949115][T14581] EXT4-fs (loop9): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 1609.043565][T14581] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1609.260078][T14581] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1609.312599][T14581] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 1609.345115][T14581] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1609.345115][T14581] [ 1610.869314][T14573] syz.1.1417 (14573) used greatest stack depth: 17896 bytes left [ 1610.877386][T14581] EXT4-fs (loop9): Total free blocks count 0 [ 1610.916789][T14581] EXT4-fs (loop9): Free/Dirty block details [ 1610.923661][T14581] EXT4-fs (loop9): free_blocks=20480 [ 1610.966772][T14581] EXT4-fs (loop9): dirty_blocks=80 [ 1610.971976][T14581] EXT4-fs (loop9): Block reservation details [ 1611.066952][T14581] EXT4-fs (loop9): i_reserved_data_blocks=4 [ 1611.390255][ T11] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 1611.557775][T14605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 1611.886054][T14608] loop9: detected capacity change from 0 to 1024 [ 1611.995805][T14608] EXT4-fs (loop9): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 1612.284227][T14608] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1612.513633][T14617] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1612.864303][T14625] tipc: Started in network mode [ 1612.870320][T14625] tipc: Node identity 4, cluster identity 4711 [ 1612.876576][T14625] tipc: Node number set to 4 [ 1613.749109][ T11] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 1613.804189][ T11] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1613.804189][ T11] [ 1613.824381][ T11] EXT4-fs (loop9): Total free blocks count 0 [ 1613.830796][ T11] EXT4-fs (loop9): Free/Dirty block details [ 1613.847665][ T11] EXT4-fs (loop9): free_blocks=20480 [ 1613.853031][ T11] EXT4-fs (loop9): dirty_blocks=16 [ 1613.866112][T14629] loop3: detected capacity change from 0 to 128 [ 1613.866818][ T11] EXT4-fs (loop9): Block reservation details [ 1613.915681][ T11] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 1613.931317][ T8458] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1620.322808][T14683] loop9: detected capacity change from 0 to 32768 [ 1620.401305][T14683] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1620.499463][T14683] XFS (loop9): Ending clean mount [ 1620.513694][T14683] XFS (loop9): Quotacheck needed: Please wait. [ 1620.784728][T14699] loop5: detected capacity change from 0 to 32768 [ 1620.805284][T14683] XFS (loop9): Quotacheck: Done. [ 1620.917466][T14699] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1622.253030][ T8458] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1625.298803][ T7093] ocfs2: Unmounting device (7,5) on (node local) [ 1633.363839][T14784] loop9: detected capacity change from 0 to 128 [ 1633.369793][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1446'. [ 1634.422269][T14786] syzkaller0: entered promiscuous mode [ 1634.456892][T14786] syzkaller0: entered allmulticast mode [ 1637.333081][T14810] input: syz1 as /devices/virtual/input/input62 [ 1642.236008][T14835] loop9: detected capacity change from 0 to 8192 [ 1642.343369][T14835] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1642.526924][T14835] REISERFS (device loop9): found reiserfs format "3.5" with non-standard journal [ 1642.603798][T14835] REISERFS (device loop9): using ordered data mode [ 1642.651216][T14835] reiserfs: using flush barriers [ 1642.694862][T14835] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1642.794434][T14835] REISERFS (device loop9): checking transaction log (loop9) [ 1642.848118][T14835] REISERFS (device loop9): Using rupasov hash to sort names [ 1642.917021][T14835] REISERFS (device loop9): using 3.5.x disk format [ 1642.923852][T14835] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1642.996236][T14835] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1644.174476][T14835] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1644.186745][T14835] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 1644.759142][T14835] lo speed is unknown, defaulting to 1000 [ 1646.807067][T14870] syzkaller0: entered promiscuous mode [ 1646.846383][T14870] syzkaller0: entered allmulticast mode [ 1648.461278][T14881] loop3: detected capacity change from 0 to 32768 [ 1648.517218][T14881] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 1648.835255][T11720] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 1648.907376][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'. [ 1649.861510][T14934] loop9: detected capacity change from 0 to 8192 [ 1649.960226][T14934] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1649.973459][T14934] REISERFS (device loop9): found reiserfs format "3.5" with non-standard journal [ 1649.983270][T14934] REISERFS (device loop9): using ordered data mode [ 1649.990058][T14934] reiserfs: using flush barriers [ 1650.006846][T14934] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1650.025686][T14934] REISERFS (device loop9): checking transaction log (loop9) [ 1650.072804][T14934] REISERFS (device loop9): Using rupasov hash to sort names [ 1650.080431][T14934] REISERFS (device loop9): using 3.5.x disk format [ 1650.088204][T14934] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1650.099727][T14934] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1650.111266][T14934] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1650.122753][T14934] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 1654.506255][T14956] input: syz1 as /devices/virtual/input/input63 [ 1656.787378][T14973] syzkaller0: entered promiscuous mode [ 1656.792996][T14973] syzkaller0: entered allmulticast mode [ 1661.891218][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1481'. [ 1667.733649][T15040] loop5: detected capacity change from 0 to 128 [ 1668.920908][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.930803][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.675483][T15052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1490'. [ 1669.874760][T15054] syzkaller0: entered promiscuous mode [ 1670.596093][T15054] syzkaller0: entered allmulticast mode [ 1673.249660][T15067] loop3: detected capacity change from 0 to 32768 [ 1673.333667][T15067] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1674.207996][T15067] XFS (loop3): Ending clean mount [ 1674.415765][T15109] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1500'. [ 1677.979553][T12414] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1679.342339][T15135] loop5: detected capacity change from 0 to 8192 [ 1679.699196][T15135] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1679.712485][T15135] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 1679.722385][T15135] REISERFS (device loop5): using ordered data mode [ 1679.728952][T15135] reiserfs: using flush barriers [ 1679.738075][T15135] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1679.754652][T15135] REISERFS (device loop5): checking transaction log (loop5) [ 1679.776988][T15135] REISERFS (device loop5): Using r5 hash to sort names [ 1679.783912][T15135] REISERFS (device loop5): using 3.5.x disk format [ 1679.790919][T15135] REISERFS warning (device loop5): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 1679.803950][T15135] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1679.900258][T15139] syzkaller0: entered promiscuous mode [ 1679.911207][T15139] syzkaller0: entered allmulticast mode [ 1685.823205][T15180] ================================================================== [ 1685.831346][T15180] BUG: KASAN: slab-use-after-free in dvb_device_open+0xca/0x370 [ 1685.839122][T15180] Read of size 8 at addr ffff8880273e2a18 by task syz.5.1510/15180 [ 1685.847045][T15180] [ 1685.849408][T15180] CPU: 0 PID: 15180 Comm: syz.5.1510 Not tainted syzkaller #0 [ 1685.856895][T15180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1685.866994][T15180] Call Trace: [ 1685.870313][T15180] [ 1685.873275][T15180] dump_stack_lvl+0x18c/0x250 [ 1685.878101][T15180] ? __lock_acquire+0x7d40/0x7d40 [ 1685.883205][T15180] ? show_regs_print_info+0x20/0x20 [ 1685.888433][T15180] ? load_image+0x420/0x420 [ 1685.893008][T15180] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1685.898582][T15180] ? __virt_addr_valid+0x18c/0x540 [ 1685.903751][T15180] ? __virt_addr_valid+0x469/0x540 [ 1685.908898][T15180] print_report+0xa8/0x210 [ 1685.913366][T15180] ? dvb_device_open+0xca/0x370 [ 1685.918254][T15180] kasan_report+0x117/0x150 [ 1685.922832][T15180] ? dvb_device_open+0xca/0x370 [ 1685.927729][T15180] dvb_device_open+0xca/0x370 [ 1685.932468][T15180] chrdev_open+0x5cc/0x6a0 [ 1685.936925][T15180] ? cd_forget+0x160/0x160 [ 1685.941380][T15180] ? fsnotify_perm+0x3ed/0x5e0 [ 1685.946215][T15180] ? cd_forget+0x160/0x160 [ 1685.950669][T15180] do_dentry_open+0x8c6/0x1500 [ 1685.955481][T15180] path_openat+0x27f1/0x3230 [ 1685.960146][T15180] ? do_sys_openat2+0xda/0x1d0 [ 1685.964953][T15180] ? verify_lock_unused+0x140/0x140 [ 1685.970207][T15180] ? do_filp_open+0x430/0x430 [ 1685.974930][T15180] ? __virt_addr_valid+0x18c/0x540 [ 1685.980084][T15180] do_filp_open+0x1f5/0x430 [ 1685.984623][T15180] ? vfs_tmpfile+0x490/0x490 [ 1685.989263][T15180] ? _raw_spin_unlock+0x28/0x40 [ 1685.994153][T15180] ? alloc_fd+0x58f/0x630 [ 1685.998533][T15180] do_sys_openat2+0x134/0x1d0 [ 1686.003249][T15180] ? do_sys_open+0xe0/0xe0 [ 1686.007709][T15180] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1686.013729][T15180] ? lock_chain_count+0x20/0x20 [ 1686.018617][T15180] __x64_sys_openat+0x139/0x160 [ 1686.023502][T15180] do_syscall_64+0x55/0xb0 [ 1686.027953][T15180] ? clear_bhb_loop+0x40/0x90 [ 1686.032800][T15180] ? clear_bhb_loop+0x40/0x90 [ 1686.037516][T15180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1686.043465][T15180] RIP: 0033:0x7f47a5d5d68e [ 1686.047914][T15180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1686.067565][T15180] RSP: 002b:00007f47a6c4ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1686.076015][T15180] RAX: ffffffffffffffda RBX: 00007f47a6c4b6c0 RCX: 00007f47a5d5d68e [ 1686.084019][T15180] RDX: 0000000000040002 RSI: 00007f47a6c4ac00 RDI: ffffffffffffff9c [ 1686.092019][T15180] RBP: 00007f47a6c4ac00 R08: 0000000000000000 R09: 0000000000000000 [ 1686.100019][T15180] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1686.108022][T15180] R13: 00007f47a6016128 R14: 00007f47a6016090 R15: 00007ffede136c78 [ 1686.116030][T15180] [ 1686.119074][T15180] [ 1686.121422][T15180] Allocated by task 14932: [ 1686.125856][T15180] kasan_set_track+0x4e/0x70 [ 1686.130565][T15180] __kasan_kmalloc+0x8f/0xa0 [ 1686.135184][T15180] __kmalloc+0xb4/0x230 [ 1686.139415][T15180] iter_file_splice_write+0x1a4/0xcb0 [ 1686.144835][T15180] direct_splice_actor+0xe8/0x130 [ 1686.149895][T15180] splice_direct_to_actor+0x304/0x8c0 [ 1686.155301][T15180] do_splice_direct+0x1d5/0x2f0 [ 1686.160193][T15180] do_sendfile+0x5f2/0xef0 [ 1686.164642][T15180] __se_sys_sendfile64+0x145/0x1a0 [ 1686.169789][T15180] do_syscall_64+0x55/0xb0 [ 1686.174239][T15180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1686.180174][T15180] [ 1686.182529][T15180] The buggy address belongs to the object at ffff8880273e2a00 [ 1686.182529][T15180] which belongs to the cache kmalloc-256 of size 256 [ 1686.196615][T15180] The buggy address is located 24 bytes inside of [ 1686.196615][T15180] freed 256-byte region [ffff8880273e2a00, ffff8880273e2b00) [ 1686.210359][T15180] [ 1686.212713][T15180] The buggy address belongs to the physical page: [ 1686.219162][T15180] page:ffffea00009cf880 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880273e2a00 pfn:0x273e2 [ 1686.230651][T15180] head:ffffea00009cf880 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1686.239619][T15180] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1686.247642][T15180] page_type: 0xffffffff() [ 1686.252007][T15180] raw: 00fff00000000840 ffff888017c41b40 ffffea0001ac0c10 ffffea0001a20810 [ 1686.260622][T15180] raw: ffff8880273e2a00 000000000010000f 00000001ffffffff 0000000000000000 [ 1686.269230][T15180] page dumped because: kasan: bad access detected [ 1686.275742][T15180] page_owner tracks the page as allocated [ 1686.281484][T15180] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15085982416, free_ts 0 [ 1686.301240][T15180] post_alloc_hook+0x1c1/0x200 [ 1686.306049][T15180] get_page_from_freelist+0x1951/0x19e0 [ 1686.311622][T15180] __alloc_pages+0x1f0/0x460 [ 1686.316243][T15180] alloc_page_interleave+0x24/0x1e0 [ 1686.321473][T15180] alloc_slab_page+0x5d/0x160 [ 1686.326182][T15180] new_slab+0x87/0x2d0 [ 1686.330292][T15180] ___slab_alloc+0xc5d/0x12f0 [ 1686.335017][T15180] __kmem_cache_alloc_node+0x19e/0x250 [ 1686.340534][T15180] kmalloc_trace+0x2a/0xe0 [ 1686.344987][T15180] bus_add_driver+0x162/0x630 [ 1686.349740][T15180] driver_register+0x23a/0x310 [ 1686.354537][T15180] usb_register_driver+0x206/0x3d0 [ 1686.359713][T15180] do_one_initcall+0x242/0x790 [ 1686.364533][T15180] do_initcall_level+0x137/0x1f0 [ 1686.369558][T15180] do_initcalls+0x69/0xd0 [ 1686.373934][T15180] kernel_init_freeable+0x3ed/0x580 [ 1686.379171][T15180] page_owner free stack trace missing [ 1686.384564][T15180] [ 1686.386908][T15180] Memory state around the buggy address: [ 1686.392604][T15180] ffff8880273e2900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1686.400697][T15180] ffff8880273e2980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1686.408787][T15180] >ffff8880273e2a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1686.416868][T15180] ^ [ 1686.421733][T15180] ffff8880273e2a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1686.429831][T15180] ffff8880273e2b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1686.437925][T15180] ================================================================== [ 1686.446022][ C0] vkms_vblank_simulate: vblank timer overrun [ 1686.453475][T15180] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1686.460724][T15180] CPU: 0 PID: 15180 Comm: syz.5.1510 Not tainted syzkaller #0 [ 1686.468221][T15180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1686.478303][T15180] Call Trace: [ 1686.481634][T15180] [ 1686.484600][T15180] dump_stack_lvl+0x18c/0x250 [ 1686.489319][T15180] ? show_regs_print_info+0x20/0x20 [ 1686.494559][T15180] ? load_image+0x420/0x420 [ 1686.499124][T15180] panic+0x2dc/0x730 [ 1686.503066][T15180] ? bpf_jit_dump+0xd0/0xd0 [ 1686.507611][T15180] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1686.513287][T15180] ? dvb_device_open+0xca/0x370 [ 1686.518185][T15180] ? check_panic_on_warn+0x70/0xa0 [ 1686.523371][T15180] ? dvb_device_open+0xca/0x370 [ 1686.528265][T15180] check_panic_on_warn+0x84/0xa0 [ 1686.533245][T15180] ? dvb_device_open+0xca/0x370 [ 1686.538136][T15180] end_report+0x6f/0x130 [ 1686.542412][T15180] kasan_report+0x128/0x150 [ 1686.546956][T15180] ? dvb_device_open+0xca/0x370 [ 1686.551846][T15180] dvb_device_open+0xca/0x370 [ 1686.556585][T15180] chrdev_open+0x5cc/0x6a0 [ 1686.561042][T15180] ? cd_forget+0x160/0x160 [ 1686.565494][T15180] ? fsnotify_perm+0x3ed/0x5e0 [ 1686.570293][T15180] ? cd_forget+0x160/0x160 [ 1686.574742][T15180] do_dentry_open+0x8c6/0x1500 [ 1686.579552][T15180] path_openat+0x27f1/0x3230 [ 1686.584189][T15180] ? do_sys_openat2+0xda/0x1d0 [ 1686.588991][T15180] ? verify_lock_unused+0x140/0x140 [ 1686.594225][T15180] ? do_filp_open+0x430/0x430 [ 1686.598946][T15180] ? __virt_addr_valid+0x18c/0x540 [ 1686.604103][T15180] do_filp_open+0x1f5/0x430 [ 1686.608640][T15180] ? vfs_tmpfile+0x490/0x490 [ 1686.613274][T15180] ? _raw_spin_unlock+0x28/0x40 [ 1686.618169][T15180] ? alloc_fd+0x58f/0x630 [ 1686.622543][T15180] do_sys_openat2+0x134/0x1d0 [ 1686.627256][T15180] ? do_sys_open+0xe0/0xe0 [ 1686.631706][T15180] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1686.637722][T15180] ? lock_chain_count+0x20/0x20 [ 1686.642607][T15180] __x64_sys_openat+0x139/0x160 [ 1686.647492][T15180] do_syscall_64+0x55/0xb0 [ 1686.651942][T15180] ? clear_bhb_loop+0x40/0x90 [ 1686.656657][T15180] ? clear_bhb_loop+0x40/0x90 [ 1686.661375][T15180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1686.667305][T15180] RIP: 0033:0x7f47a5d5d68e [ 1686.671750][T15180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1686.691398][T15180] RSP: 002b:00007f47a6c4ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1686.699853][T15180] RAX: ffffffffffffffda RBX: 00007f47a6c4b6c0 RCX: 00007f47a5d5d68e [ 1686.707867][T15180] RDX: 0000000000040002 RSI: 00007f47a6c4ac00 RDI: ffffffffffffff9c [ 1686.715887][T15180] RBP: 00007f47a6c4ac00 R08: 0000000000000000 R09: 0000000000000000 [ 1686.723911][T15180] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1686.731925][T15180] R13: 00007f47a6016128 R14: 00007f47a6016090 R15: 00007ffede136c78 [ 1686.739936][T15180] [ 1686.743572][T15180] Kernel Offset: disabled [ 1686.747907][T15180] Rebooting in 86400 seconds..