last executing test programs: 7m53.097510176s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 7m52.062650052s ago: executing program 1 (id=8): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 7m51.674020541s ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/kernel/watchdog_thresh\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) unshare(0x2a020480) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) memfd_secret(0x80000) write(r0, &(0x7f0000000280)='2', 0x1) 7m51.31403627s ago: executing program 1 (id=14): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ac0)={{r0}, &(0x7f0000001a40), &(0x7f0000001a80)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 7m36.137129933s ago: executing program 32 (id=14): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ac0)={{r0}, &(0x7f0000001a40), &(0x7f0000001a80)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 7m27.891176591s ago: executing program 0 (id=103): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, &(0x7f0000000040), 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x841, 0x43) setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7, 0x4, 0x1, 0x2, 0x7]}, &(0x7f0000000200)=0x78) 7m27.748899485s ago: executing program 0 (id=104): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x40}, 0x40000002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00\x00'], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 7m23.634931989s ago: executing program 0 (id=121): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) openat$null(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000440)='@\n', 0xfdef}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000080)="9451", 0xffffffd2}], 0x1}}], 0x2, 0x8000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 7m23.441029963s ago: executing program 0 (id=122): bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x200000, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 7m23.118009262s ago: executing program 0 (id=124): keyctl$clear(0x7, 0xfffffffffffffffb) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) recvfrom$inet_nvme(r0, 0x0, 0x0, 0x10001, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x1, @remote}}, 0x80) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x158104100, 0x0, &(0x7f0000000240), 0x0, {0xd}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000300)) 7m21.839756794s ago: executing program 0 (id=129): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2010410, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x4, 0x2ae, &(0x7f0000000d00)="$eJzs3TFrU1sAB/DTtKWPPlo6PZ4uHnRyCbWzQ4u0WAwo2ggqCLf0VkOuScnNkBSHOrsIDg5+A3F0E8Qv0MXP4FaE0qmTlXpb2xScmjZDf78l/+SfczjnXjh3vFs337yor+bl1aQdSrNDoTQbQml3KEyFUji0Ea6/ffX+9YNHj+/MVSrz92NcmFu6MRNjnLzy5cnLj1e/tv99+Gny81jYnHq6tT3zffO/zUtbP5ee1/JYy2Oj2Y5JXG4228lylsaVWl4vx3gvS5M8jbVGnrZ6+tWsubbWjUljZWJ8rZXmeUwa3VhPu7HdjO1WNybPklojlsvlODEeOI3qh929vbC9Vxj0ajh/7v/FduxQ/yeEnY1OtVMtPot+YbEyPx1/Gz0atdPpVIdD+DZUfC362NuPhvGD8TMn+8NHy7Wi3+9u3a2cGD8WVs526wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxg5fjH1NGvO51Odbjoy3/ri7SwWJmfPvhDbz8SLo+c2zYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FTy7no9ybK01Zdwuw/zlPq4nt7wLoRwJjPvX8gzWrMgDCYM+mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA89f7EnsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuqry7Xk+yLG31K/z4v5j4WDXoPQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAaf0KAAD//0eSZmc=") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f00000009c0)='./bus\x00', 0x200000, &(0x7f0000000a00)={[{@test_dummy_encryption_v1}, {@init_itable}, {@dioread_lock}]}, 0x3, 0x46a, &(0x7f0000001680)="$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") syz_mount_image$vfat(&(0x7f0000001b00), &(0x7f0000001b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000001c40)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x4) getdents(r0, 0x0, 0x54) 7m15.196089862s ago: executing program 5 (id=158): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a428040000000000140035007465616d30000000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 7m13.852294996s ago: executing program 5 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000680)={0x2101}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 7m13.584649312s ago: executing program 5 (id=164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x88c5, 0x44105}}, 0x20}}, 0x40040000) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000300)={0x11, 0x300, r2}, 0x14) setsockopt$sock_int(r4, 0x1, 0xc, &(0x7f0000000340)=0x10001, 0x4) write(r4, &(0x7f0000000380)='\x00', 0x1) 7m13.030198736s ago: executing program 5 (id=166): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f6", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000004"], 0x20, 0x40801}, 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x4, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x7a}, 0x8) 7m12.327701244s ago: executing program 5 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x144) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 7m11.31079226s ago: executing program 5 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00ee"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 7m6.461160472s ago: executing program 33 (id=129): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2010410, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x4, 0x2ae, &(0x7f0000000d00)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f00000009c0)='./bus\x00', 0x200000, &(0x7f0000000a00)={[{@test_dummy_encryption_v1}, {@init_itable}, {@dioread_lock}]}, 0x3, 0x46a, &(0x7f0000001680)="$eJzs281vFOUfAPDvTF/49VewFfENfKmikfjSUkDl4EGNJh4wMdGDHjw0bSFIAUNrIoTEYgyejDHxbjz6L3jSizGeTLzq3ZAQw0XwtGZ2ZtrdZbt0t7tdZD+fZOD7zEuf57szz+4z8+wGMLCmsn+SiJ0R8XtETOTF+h2m8v+uX7s4f+PaxfkkKpW3/0qq+/197eJ8uWt53HhROJBGpJ8lsa9JvcvnL5yaW1paPFeUZ1ZOfzizfP7CcydPz51YPLF45tDRo0cOz774wqHnu5LneKRF9MZ7X7157Iu6/Bvy6JKpVhufrFS6XF1/7aqJk+E+NoS2DEVEdrpGqv1/IoZi/eRNxOuf9rVxQE9VKpXK+MabVyvAHSyJ+nLe5S/VvD8Ad6bygz67/y2XxkHAy70ZetwWrr6S3wBleV8vlnzL8NoTg5GG+9tumoqId1f/+SZbojfPIQAA6vyQjX+ezUY7jeO/NO6r2e+uYm5oMiLujojdEXFPnIk9EXFvRHXf+yPigTbrb5wkuXn8k17pKLFNysZ/LxVzW/Xjv3L0F5NDRWlXNf+R5PjJpcWD+WvyfjGMXpxtUcePr/325Ubbasd/2ZLVX44Fi3ZcGd5Rf8zC3MrcVnKudfVSxN7hZvknazMBSUQ8GBF7O6zj5NPfPbTRtlvn30IX5pkq30Y8lZ//1WjIv5S0np+c+V8sLR6cKa+Km/3y6+W3Nqp/S/l3QXb+/9/0+l/LfzKpna9dbr+Oy398vuE9TafX/2jyTjUeLdZ9PLeycm42YjQ5lje6dv2h9WPLcrl/lv+B/c37/+5YfyX2RUR2ET8cEY9ExKNF2x+LiMcjYn+L/H9+9YkPGteNbTr/3sryX2jr/K8Ho9G4pnkwdOqn7+sqnVwPi/xvtD7/R6rRgWLNZt7/NtOuzq5mAAAA+O9JI2JnJOn0Wpym09P5d/j3RKRLZ5dXnjl+9qMzC/lvBCZjJC2fdE3UPA+dLW7r8/KliMi/WlBuP1w8N/56aKxanp4/u7TQ7+RhwI1v0P+zwp9D/W4d0HN+rwWDq63+n/SuHcD28/kPg6u9/r+jZ+0AtttIs/4/1o+WANuv2ef/J31oB7D9Gvq/aT8YIJ7/weDS/2Fw6f8wkJbH4tY/km8ZlH+pw8PzYLLT2k/t2FLjexjEyG3RjJ4Fkfap9tWtXmyCzQT9fV8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoln8DAAD//wzH2bU=") syz_mount_image$vfat(&(0x7f0000001b00), &(0x7f0000001b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000001c40)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x4) getdents(r0, 0x0, 0x54) 6m56.131509332s ago: executing program 34 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00ee"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 26.043921113s ago: executing program 6 (id=1644): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x0, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0x10, 0x7}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 24.9836074s ago: executing program 6 (id=1645): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0x1337}, @nested_amd_stgi={0x17e, 0x10}, @uexit={0x0, 0x18, 0xface}], 0x80}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0x1337) ioctl$KVM_NMI(r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xface) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 24.600036049s ago: executing program 6 (id=1648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 23.306915462s ago: executing program 6 (id=1651): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) r2 = getpid() syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x1008413, &(0x7f00000001c0)={[{@resgid}, {@barrier}, {@errors_remount}, {@noblock_validity}]}, 0x0, 0x526, &(0x7f0000001380)="$eJzs3U1vI2cdAPD/eON9S7ZJgQNUoi20KLuCtZNGbSMOpUgITpWAcl9C4kRRnHgVO+0mqmhWfAAkhACJE1y4IPEBQKgSF44IqRKcQYBACLZwAIl20NjjNC9jJ9312tnk95Nm53nxzP95kp3xPDOTmQDOrZfz6b00TW9ExGReXsqnT2aZ3YinI+Kde28sZlMSafrqP5JI8rLuutK2SzHeWaS9gq9+KeIbydG4ze2dtYV6vbaZ56ut9dvV5vbOzdX1hZXaSm1jbm72hfkX55+fn3mQ7i2P54lrEfHSF/7yvW//5Isv/fIzr//x1t+ufzPptPnNw/34gMb6VXZ+nuW4vK8si7d5n8FOo9K+ecGvutDd/L8IAADDlR2Xfig/zr8Rk3Gh/+EsAAAA8AhKPzcR/0u61+6OuNijHAAAAHiElCJiIpJSJb9/cyJKpUol2vfwfiSuluqNZuvTy42tjaWsLmIqyqXl1XptJr+3dSrKSZafzdK/eDdN8/xz7br36+ci4vGI+O7klXa+stioL4365AcAAACcE+OHxv//nuyM/wEAAIAzZqq4+NKw2wEAAAA8PD3G/wAAAMAZYvwPAAAAZ9qXX3klm9Lu+6+XXtveWmu8dnOp1lyrrG8tVhYbm7crK43GSvuZfet9V7b36sCNrTvVVq3Zqja3d26tN7Y2WrdWD7wCGwAAABiix5966/dJROx+9kp7ylzcV//f/D0BI2sg8NDsnbKLJJ9fPPqhPzzWmf95SI0ChuLCqBsAjMzYqBsAjEx51A0ARi45pr7nzTu/yeefGGx7AACAwZv+WO/r/6W+S+72rwZOPRsxnF+u/8P51b7+X3DLXyEHC3CmlB0BwLn3wNf/j+VviAAAYNQm2lNSquSn9yaiVKpUIq61XwtQTpZX67WZiHgsIn43Wb6U5WfbSybHjhkAAAAAAAAAAAAAAAAAAAAAAAAAgI40TSIFAAAAzrSI0l+TX3We5T89+ezE4fMDF5P/TEb+itDXf/jq9+8stFqbs1n5P/fKWz/Iy58bxRkMAAAA4LDuOL07jgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAQXrn3huL3WmYcf/++YiYKoo/Fpfb88tRjoir/0pibN9ySURcGED83bsR8dGi+EnWrL2QRfGvPPz4MZX/FIrijw8gPpxnb2X7n5eLtr9SPN2eF29/YxEH8ver9/4v9vZ/F3ps/9dOGOOJt39W7Rn/bsQTY8X7n278pEf8Z04Y/+tf29npVZf+KGK68PsnORCr2lq/XW1u79xcXV9Yqa3UNubmZl+Yf3H++fmZ6vLq1Vr2b702UxjjOx//+Xv9+n+1R/ypY/r/7An7/+7bd+59uJMsF8W//kxB/F//OP/E0fil/LvvU3k6q5/upnc76f2e/Olvn+zX/6Ue/T/u93/9hP2/8ZVv/emEHwUAhqC5vbO2UK/XNvNE7EYcLHnUE9ko/RQ0Q+IUJt48WvVU9FwqSfqvME3TNNumHqBhSe/ow0kkeyWj3jMBAACD9v7R/6hbAgAAAAAAAAAAAAAAAAAAAOfXMJ4rdjjm7l4qGcQjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuL/AQAA//8ef+pg") sched_setscheduler(r2, 0x2, &(0x7f00000018c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001900), 0x0, 0x0) read$msr(r3, &(0x7f0000001940)=""/102392, 0x18ff8) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) 21.437302739s ago: executing program 6 (id=1654): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[], 0x2c, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, r3}}, 0x18) 18.568422811s ago: executing program 7 (id=1661): socket$kcm(0x10, 0x2, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r2], 0xfe33) 18.327016037s ago: executing program 7 (id=1662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x10001, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x2}, {0xffff, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x400, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x20000000) 17.965307347s ago: executing program 7 (id=1664): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="8c", 0xffe3}], 0x1}}], 0x1, 0x4000800) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000680)={[{@umask={'umask', 0x3d, 0x81}}, {@utf8}, {@utf8}, {@namecase}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@discard}, {@errors_continue}, {@namecase}]}, 0x1, 0x1555, &(0x7f0000002140)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000505000/0x4000)=nil, 0x4000, 0x0) 17.955405557s ago: executing program 6 (id=1665): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) 17.378343311s ago: executing program 35 (id=1665): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) 17.347266872s ago: executing program 7 (id=1667): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0xc, &(0x7f0000000300), 0x2, 0x53a, &(0x7f00000011c0)="$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") mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x84) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x40000004, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='7', 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 16.128449223s ago: executing program 7 (id=1672): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x40000, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 13.033778381s ago: executing program 3 (id=1678): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, 0x0, 0x40}, 0x20000000) epoll_create1(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/15, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 12.825777486s ago: executing program 3 (id=1680): socket$inet6(0xa, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) semget(0x1, 0x5, 0x6b4) 11.845817711s ago: executing program 7 (id=1681): ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864ce, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.753097763s ago: executing program 3 (id=1682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xfffd, 0xe9, @mcast1, 0x5}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 10.366915538s ago: executing program 36 (id=1681): ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864ce, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.31944847s ago: executing program 3 (id=1684): r0 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000700)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x138, 0x138, 0x0, 0x368, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x32}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x62}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) syz_usb_connect$midi(0x5, 0x47, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0x931b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35, 0x1, 0x1, 0x18, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x6, [@midi_out_jack={0x7, 0x24, 0x3, 0x3, 0x5, 0x0, [], 0xf}], [{{0x9, 0x5, 0x8e, 0xb, 0x20, 0xf, 0xd7, 0x2, {0x13, 0x25, 0x1, 0xf, "26cc9892f3a2007744ac05b6ce8ec9"}}}]}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2e, 0x0, &(0x7f00000005c0)) 4.154026365s ago: executing program 2 (id=1694): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000d80)={&(0x7f0000000940)={{@hyper, 0x80}, {@host, 0x6d9d}, 0x400, "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"}, 0x418, 0x2}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r2, r2, r2}, &(0x7f0000000280)=""/126, 0x7e, &(0x7f0000000240)={&(0x7f0000000140)={'sha224-ssse3\x00'}}) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(r3, &(0x7f0000001340)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x400000000000126, 0xc040) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={0x0, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}, 0x8000, 0x6}, &(0x7f0000000300)=0x90) 3.396630884s ago: executing program 3 (id=1695): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0)=0x4553, 0x4) sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvfrom(r3, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 3.313612946s ago: executing program 4 (id=1696): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x801) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x1002f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x74a0, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.103063512s ago: executing program 2 (id=1697): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) close(0x4) 2.937218226s ago: executing program 4 (id=1698): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) r2 = eventfd2(0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0xe0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x612d, 0x0, 0x3, 0xbd}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x20000322}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10d5, 0x200, 0x0, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20020, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2000, 0x2, 0x24c}}], 0x1, &(0x7f0000000340)={0x2e, 0x4c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x658, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) shutdown(r0, 0x0) 2.907959916s ago: executing program 3 (id=1699): unshare(0x60040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x6c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7fffffff}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000640)='U', 0x1}], 0x1) r4 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000140)={0xa, 0xa, 0x4, @mcast2}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001080)="671723d7c6012c", 0x7}, {&(0x7f0000000200)="9efef5abfd2a00000000000600"/33, 0x21}], 0x2}, 0x20028b88) 2.828301769s ago: executing program 2 (id=1700): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x1000, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.35617136s ago: executing program 2 (id=1701): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd(0xb03c) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000140)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) 1.077922003s ago: executing program 4 (id=1702): socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x40000, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 854.396668ms ago: executing program 4 (id=1703): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x845, 0x0, 0x0) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x502}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 804.54846ms ago: executing program 2 (id=1704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xf, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf95}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) epoll_create1(0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES16=r1], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0) 523.935206ms ago: executing program 4 (id=1705): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x404c094) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x1, 0x0, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)=0x14) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r4}) 138.311006ms ago: executing program 2 (id=1706): mkdir(&(0x7f0000000000)='./trace\x00', 0x16c) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)='1', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, 0x0, 0x0) 0s ago: executing program 4 (id=1707): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x1000000000000053}, 0xfffe}], 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) epoll_create1(0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket(0x10, 0x803, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) kernel console output (not intermixed with test programs): 7421] ? __lock_acquire+0x7ea0/0x7ea0 [ 257.802845][ T7421] should_fail_ex+0x390/0x4c0 [ 257.802874][ T7421] should_failslab+0x5/0x20 [ 257.802891][ T7421] slab_pre_alloc_hook+0x59/0x300 [ 257.802911][ T7421] ? key_user_lookup+0x1b8/0x450 [ 257.802932][ T7421] kmem_cache_alloc+0x56/0x2f0 [ 257.802949][ T7421] ? key_alloc+0x302/0x1030 [ 257.802971][ T7421] key_alloc+0x302/0x1030 [ 257.802993][ T7421] ? clear_nonspinnable+0x60/0x60 [ 257.803019][ T7421] keyring_alloc+0x41/0xa0 [ 257.803040][ T7421] keyctl_get_persistent+0x4a0/0x780 [ 257.803069][ T7421] ? futex_wait_setup+0x270/0x270 [ 257.803090][ T7421] ? proc_key_users_show+0x310/0x310 [ 257.803134][ T7421] __se_sys_keyctl+0x59f/0x870 [ 257.803159][ T7421] ? __x64_sys_keyctl+0xc0/0xc0 [ 257.803180][ T7421] ? do_futex+0x310/0x320 [ 257.803200][ T7421] ? __ia32_sys_get_robust_list+0x100/0x100 [ 257.813362][ T7421] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 257.813397][ T7421] ? lock_chain_count+0x20/0x20 [ 257.823099][ T7421] ? lockdep_hardirqs_on+0x94/0x140 [ 257.823125][ T7421] ? __x64_sys_keyctl+0x1c/0xc0 [ 257.823149][ T7421] do_syscall_64+0x4c/0xa0 [ 257.832341][ T7421] ? clear_bhb_loop+0x60/0xb0 [ 257.832366][ T7421] ? clear_bhb_loop+0x60/0xb0 [ 257.832388][ T7421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.839529][ T7415] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 257.842326][ T7421] RIP: 0033:0x7f59c3b9e1d9 [ 257.842353][ T7421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.842368][ T7421] RSP: 002b:00007f59c4a94028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 257.842388][ T7421] RAX: ffffffffffffffda RBX: 00007f59c3e25fa0 RCX: 00007f59c3b9e1d9 [ 257.842402][ T7421] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 257.906819][ T7421] RBP: 00007f59c3c35888 R08: 0000000000000000 R09: 0000000000000000 [ 257.926130][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.926147][ T7421] R13: 00007f59c3e26038 R14: 00007f59c3e25fa0 R15: 00007ffd37f54c88 [ 257.926179][ T7421] [ 258.025664][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 258.251230][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 258.349575][ T7439] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.361529][ T7437] loop7: detected capacity change from 0 to 256 [ 258.383488][ T7442] xt_socket: unknown flags 0x4 [ 258.480424][ T7437] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 258.527340][ T7437] FAT-fs (loop7): Filesystem has been set read-only [ 258.559948][ T7447] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 258.779538][ T7456] device syzkaller0 entered promiscuous mode [ 258.802523][ T127] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 258.819169][ T7458] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 258.842347][ C0] net_ratelimit: 38 callbacks suppressed [ 258.992461][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 259.000505][ T127] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.013300][ T127] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.034306][ T7466] loop6: detected capacity change from 0 to 128 [ 259.062213][ T127] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.084401][ T7466] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 259.094491][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.113101][ T127] usb 5-1: Product: syz [ 259.120045][ T127] usb 5-1: Manufacturer: syz [ 259.136974][ T7466] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.146748][ T127] usb 5-1: SerialNumber: syz [ 259.175373][ T127] cdc_mbim 5-1:1.0: skipping garbage [ 259.180811][ T127] usb 5-1: selecting invalid altsetting 1 [ 259.547897][ T7473] loop6: detected capacity change from 0 to 8 [ 260.636007][ T127] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 260.642243][ T127] cdc_mbim 5-1:1.0: bind() failure [ 261.243012][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 261.243024][ T26] audit: type=1326 audit(1791828154.733:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.6.706" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b059e1d9 code=0x7ffc0000 [ 261.259551][ T26] audit: type=1326 audit(1791828154.733:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.6.706" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b059e1d9 code=0x7ffc0000 [ 261.440115][ T26] audit: type=1326 audit(1791828154.733:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.6.706" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b059e1d9 code=0x7ffc0000 [ 261.536053][ T26] audit: type=1326 audit(1791828154.733:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.6.706" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f93b059e1d9 code=0x7ffc0000 [ 261.624554][ T26] audit: type=1326 audit(1791828154.733:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.6.706" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b059e1d9 code=0x7ffc0000 [ 261.828804][ T26] audit: type=1326 audit(1791828154.733:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.6.706" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b059e1d9 code=0x7ffc0000 [ 262.072929][ T26] audit: type=1326 audit(1791828154.733:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.6.706" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b059e1d9 code=0x7ffc0000 [ 262.558409][ T26] audit: type=1326 audit(1791828154.733:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.6.706" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f93b059e1d9 code=0x7ffc0000 [ 262.591522][ T26] audit: type=1326 audit(1791828154.733:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.6.706" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b059e1d9 code=0x7ffc0000 [ 262.630013][ T26] audit: type=1326 audit(1791828154.733:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.6.706" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b059e1d9 code=0x7ffc0000 [ 262.814185][ T7517] netlink: 'syz.3.714': attribute type 1 has an invalid length. [ 262.908140][ T4319] usb 5-1: USB disconnect, device number 6 [ 263.153110][ T7517] device macvlan2 entered promiscuous mode [ 263.184002][ T7517] device bond2 entered promiscuous mode [ 263.219928][ T7517] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 263.246229][ T7517] device bond2 left promiscuous mode [ 263.405801][ T7531] device team0 entered promiscuous mode [ 263.415401][ T7531] device team_slave_0 entered promiscuous mode [ 263.421966][ T7531] device team_slave_1 entered promiscuous mode [ 263.437373][ T7531] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 263.459806][ T7531] bond0: (slave macvlan2): Enslaving as a backup interface with a down link [ 263.531705][ T7539] loop7: detected capacity change from 0 to 16 [ 263.546892][ T7539] erofs: (device loop7): mounted with root inode @ nid 36. [ 263.597547][ T7539] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 263.608582][ T7533] bridge0: port 4(vlan2) entered blocking state [ 263.615560][ T7533] bridge0: port 4(vlan2) entered disabled state [ 263.622065][ T7539] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 263.635144][ T7533] device vlan2 entered promiscuous mode [ 263.641498][ T7539] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 263.653588][ T7533] device bond0 entered promiscuous mode [ 263.660611][ T7539] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 263.671218][ T7533] device macvlan2 entered promiscuous mode [ 263.680762][ T7539] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 263.711277][ T7529] device syzkaller0 left promiscuous mode [ 263.738366][ T7543] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 263.754966][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.7.719'. [ 263.788435][ T7543] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 263.872408][ C0] net_ratelimit: 54 callbacks suppressed [ 265.417727][ T7584] loop7: detected capacity change from 0 to 512 [ 265.451822][ T7584] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.497985][ T7584] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 265.855105][ T4314] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 266.082895][ T4314] usb 5-1: Using ep0 maxpacket: 16 [ 266.122047][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 266.159524][ T4314] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 266.285765][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.389213][ T4314] usb 5-1: Product: syz [ 266.439893][ T4314] usb 5-1: Manufacturer: syz [ 266.497332][ T4314] usb 5-1: SerialNumber: syz [ 266.639721][ T4314] usb 5-1: config 0 descriptor?? [ 266.837170][ T4314] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 266.943767][ T4314] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 267.407048][ T4314] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 267.680995][ T7598] loop2: detected capacity change from 0 to 2048 [ 268.019287][ T7598] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 268.075192][ T7598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.113729][ T4314] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 268.181566][ T4314] em28xx 5-1:0.0: board has no eeprom [ 268.326921][ T7095] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 268.428089][ T7095] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 268.525302][ T7613] device syzkaller0 entered promiscuous mode [ 269.072945][ C0] net_ratelimit: 57 callbacks suppressed [ 269.322464][ T7586] em28xx 5-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 269.382537][ T4314] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 269.400888][ T4314] em28xx 5-1:0.0: dvb set to bulk mode. [ 269.474107][ T4314] usb 5-1: USB disconnect, device number 7 [ 269.506684][ T127] em28xx 5-1:0.0: Binding DVB extension [ 269.515570][ T4314] em28xx 5-1:0.0: Disconnecting em28xx [ 269.649720][ T127] em28xx 5-1:0.0: Registering input extension [ 269.676568][ T4314] em28xx 5-1:0.0: Closing input extension [ 269.827717][ T4314] em28xx 5-1:0.0: Freeing device [ 270.887826][ T26] kauditd_printk_skb: 79 callbacks suppressed [ 270.887840][ T26] audit: type=1326 audit(1791828164.373:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.2.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c3b9e1d9 code=0x7ffc0000 [ 270.902141][ T26] audit: type=1326 audit(1791828164.383:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.2.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c3b9e1d9 code=0x7ffc0000 [ 270.973696][ T7651] loop6: detected capacity change from 0 to 1024 [ 270.992020][ T26] audit: type=1326 audit(1791828164.443:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.2.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c3b9e1d9 code=0x7ffc0000 [ 271.051872][ T26] audit: type=1326 audit(1791828164.443:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.2.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c3b9e1d9 code=0x7ffc0000 [ 271.101298][ T26] audit: type=1326 audit(1791828164.443:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.2.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f59c3b9e1d9 code=0x7ffc0000 [ 271.154014][ T7096] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 271.193724][ T26] audit: type=1326 audit(1791828164.443:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.2.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c3b9e1d9 code=0x7ffc0000 [ 271.241133][ T26] audit: type=1326 audit(1791828164.443:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.2.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c3b9e1d9 code=0x7ffc0000 [ 271.288444][ T26] audit: type=1326 audit(1791828164.443:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.2.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c3b9e1d9 code=0x7ffc0000 [ 271.372435][ T7096] usb 5-1: Using ep0 maxpacket: 16 [ 271.385433][ T7096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 271.727689][ T7096] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 271.927356][ T7096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.976416][ T7096] usb 5-1: Product: syz [ 271.980677][ T7096] usb 5-1: Manufacturer: syz [ 271.985815][ T26] audit: type=1326 audit(1791828164.443:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.2.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c3b9e1d9 code=0x7ffc0000 [ 272.081234][ T7096] usb 5-1: SerialNumber: syz [ 272.133439][ T7096] usb 5-1: config 0 descriptor?? [ 272.198471][ T7096] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 272.238332][ T26] audit: type=1326 audit(1791828164.443:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.2.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f59c3b5ea0e code=0x7ffc0000 [ 272.322474][ T7096] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 272.818614][ T7096] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 273.001124][ T7685] device veth1_to_bond entered promiscuous mode [ 273.008869][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.7.761'. [ 273.480825][ T7096] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 273.564166][ T7096] em28xx 5-1:0.0: board has no eeprom [ 273.851555][ T7685] device veth1_to_bond left promiscuous mode [ 273.962542][ T7096] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 274.007509][ T7096] em28xx 5-1:0.0: dvb set to bulk mode. [ 274.023192][ T7685] bond0: (slave bond_slave_1): Releasing backup interface [ 274.045098][ T7093] em28xx 5-1:0.0: Binding DVB extension [ 274.085090][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 274.279741][ T6387] net_ratelimit: 42 callbacks suppressed [ 274.660381][ T7712] loop7: detected capacity change from 0 to 128 [ 274.723830][ T7717] loop2: detected capacity change from 0 to 512 [ 274.767675][ T7717] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 274.778915][ T7712] FAT-fs (loop7): Directory bread(block 32) failed [ 274.794051][ T7712] FAT-fs (loop7): Directory bread(block 33) failed [ 274.801070][ T7712] FAT-fs (loop7): Directory bread(block 34) failed [ 274.842532][ T7712] FAT-fs (loop7): Directory bread(block 35) failed [ 274.845031][ T7717] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.770: invalid indirect mapped block 4294967295 (level 0) [ 274.864375][ T7712] FAT-fs (loop7): Directory bread(block 36) failed [ 274.888159][ T7712] FAT-fs (loop7): Directory bread(block 37) failed [ 274.919382][ T7689] em28xx 5-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 274.924275][ T7712] FAT-fs (loop7): Directory bread(block 38) failed [ 274.940845][ T127] usb 5-1: USB disconnect, device number 8 [ 274.980037][ T127] em28xx 5-1:0.0: Disconnecting em28xx [ 275.014880][ T7712] FAT-fs (loop7): Directory bread(block 39) failed [ 275.042875][ T7717] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.770: invalid indirect mapped block 4294967295 (level 1) [ 275.052154][ T7712] FAT-fs (loop7): Directory bread(block 40) failed [ 275.068185][ T7717] EXT4-fs (loop2): 1 orphan inode deleted [ 275.078238][ T7093] em28xx 5-1:0.0: Registering input extension [ 275.086293][ T127] em28xx 5-1:0.0: Closing input extension [ 275.086326][ T7717] EXT4-fs (loop2): 1 truncate cleaned up [ 275.103007][ T7712] FAT-fs (loop7): Directory bread(block 41) failed [ 275.134156][ T7717] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 275.194335][ T127] em28xx 5-1:0.0: Freeing device [ 275.240265][ T7722] loop3: detected capacity change from 0 to 1024 [ 275.385623][ T7722] hfsplus: request for non-existent node 33554434 in B*Tree [ 275.407068][ T7722] hfsplus: request for non-existent node 33554434 in B*Tree [ 275.455218][ T7725] hfsplus: request for non-existent node 33554434 in B*Tree [ 275.492461][ T7725] hfsplus: request for non-existent node 33554434 in B*Tree [ 275.638419][ T4435] hfsplus: request for non-existent node 33554434 in B*Tree [ 275.666624][ T4435] hfsplus: request for non-existent node 33554434 in B*Tree [ 276.455374][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 276.607217][ T7737] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.614948][ T7737] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.430312][ T7737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.514914][ T7737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.192895][ T7737] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.201848][ T7737] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.212889][ T7737] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.221824][ T7737] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.425536][ T7770] loop2: detected capacity change from 0 to 128 [ 278.478814][ T7770] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 278.510338][ T7770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.703219][ T7780] binder: 7778:7780 ioctl c0306201 200000000080 returned -14 [ 278.813195][ T7093] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 278.852624][ T14] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 279.032494][ T7093] usb 5-1: Using ep0 maxpacket: 32 [ 279.042173][ T7093] usb 5-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 279.059336][ T7093] usb 5-1: config 0 interface 0 has no altsetting 0 [ 279.062720][ T14] usb 7-1: Using ep0 maxpacket: 16 [ 279.071713][ T7093] usb 5-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 279.083611][ T14] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 279.085080][ T7093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.091807][ T14] usb 7-1: config 1 has no interface number 0 [ 279.091861][ T14] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 279.091886][ T14] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 279.091908][ T14] usb 7-1: config 1 interface 105 has no altsetting 0 [ 279.153366][ T7093] usb 5-1: config 0 descriptor?? [ 279.199226][ T14] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 279.209378][ T14] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 279.218041][ T14] usb 7-1: Product: syz [ 279.222397][ T14] usb 7-1: Manufacturer: syz [ 279.227059][ T14] usb 7-1: SerialNumber: syz [ 279.269114][ T7777] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 279.283487][ T7777] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 279.332697][ T127] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 279.384194][ T7775] loop4: detected capacity change from 0 to 256 [ 279.402319][ C0] net_ratelimit: 51 callbacks suppressed [ 279.432149][ T7775] FAT-fs (loop4): Unrecognized mount option "shortºÍ?=winnt" or missing value [ 279.552535][ T127] usb 4-1: Using ep0 maxpacket: 16 [ 279.561593][ T127] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.600105][ T127] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.634795][ T127] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.652874][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.671152][ T127] usb 4-1: Product: syz [ 279.675644][ T127] usb 4-1: Manufacturer: syz [ 279.680313][ T127] usb 4-1: SerialNumber: syz [ 279.704340][ T7093] wacom 0003:056A:0336.0002: hidraw0: USB HID vff.fc Device [HID 056a:0336] on usb-dummy_hcd.4-1/input0 [ 279.723267][ T7777] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 279.743461][ T7777] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 279.995023][ T127] usb 4-1: 0:2 : does not exist [ 280.039005][ T127] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 280.069328][ T7768] usb 5-1: USB disconnect, device number 9 [ 280.222836][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.251356][ T127] usb 4-1: USB disconnect, device number 3 [ 280.530743][ T14] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 280.551810][ T14] aqc111: probe of 7-1:1.105 failed with error -71 [ 280.566202][ T7097] udevd[7097]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.649847][ T14] usb 7-1: USB disconnect, device number 3 [ 281.284061][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 281.284077][ T26] audit: type=1804 audit(1791828174.763:495): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.800" name="/newroot/131/file0" dev="fuse" ino=1 res=1 errno=0 [ 281.488385][ T26] audit: type=1804 audit(1791828174.973:496): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.800" name="/newroot/131/file0" dev="fuse" ino=1 res=1 errno=0 [ 283.502047][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.548090][ T7864] input: syz0 as /devices/virtual/input/input11 [ 284.512541][ T4436] net_ratelimit: 35 callbacks suppressed [ 285.299310][ T7883] device syzkaller0 entered promiscuous mode [ 286.062679][ T7896] device syzkaller0 entered promiscuous mode [ 286.121298][ T7868] syz.4.808 (7868): drop_caches: 2 [ 287.596328][ T26] audit: type=1800 audit(1791828181.083:497): pid=7917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.820" name="syzkaller0" dev="sda1" ino=2056 res=0 errno=0 [ 287.626684][ T7913] loop6: detected capacity change from 0 to 128 [ 287.701534][ T7913] FAT-fs (loop6): Directory bread(block 32) failed [ 287.724211][ T7913] FAT-fs (loop6): Directory bread(block 33) failed [ 287.737402][ T7913] FAT-fs (loop6): Directory bread(block 34) failed [ 287.754368][ T7913] FAT-fs (loop6): Directory bread(block 35) failed [ 287.776864][ T7913] FAT-fs (loop6): Directory bread(block 36) failed [ 287.823792][ T7913] FAT-fs (loop6): Directory bread(block 37) failed [ 287.852930][ T7913] FAT-fs (loop6): Directory bread(block 38) failed [ 287.859504][ T7913] FAT-fs (loop6): Directory bread(block 39) failed [ 287.918083][ T7913] FAT-fs (loop6): Directory bread(block 40) failed [ 287.939467][ T7913] FAT-fs (loop6): Directory bread(block 41) failed [ 288.462376][ T127] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 288.697759][ T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.788430][ T127] usb 4-1: config 0 has no interfaces? [ 288.914912][ T127] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 288.925790][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.090791][ T127] usb 4-1: Product: syz [ 289.163590][ T127] usb 4-1: Manufacturer: syz [ 289.169023][ T127] usb 4-1: SerialNumber: syz [ 289.261361][ T7941] syz.2.827 (7941) used greatest stack depth: 16816 bytes left [ 289.314709][ T127] usb 4-1: config 0 descriptor?? [ 289.616260][ T7955] lo: Caught tx_queue_len zero misconfig [ 289.632466][ T5294] net_ratelimit: 39 callbacks suppressed [ 289.660899][ T7955] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 291.194267][ T7768] usb 4-1: USB disconnect, device number 4 [ 291.478517][ T7985] loop3: detected capacity change from 0 to 2048 [ 291.520514][ T7989] loop7: detected capacity change from 0 to 512 [ 291.541645][ T7985] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 291.626262][ T7989] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 291.637467][ T7985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.769479][ T7989] loop7: detected capacity change from 0 to 512 [ 291.860439][ T7989] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.836: Invalid block bitmap block 0 in block_group 0 [ 291.944330][ T7989] EXT4-fs (loop7): Remounting filesystem read-only [ 291.980795][ T7989] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 292.037752][ T7989] EXT4-fs (loop7): Remounting filesystem read-only [ 292.072559][ T7768] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 292.081029][ T7989] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.836: attempt to clear invalid blocks 983261 len 1 [ 292.162820][ T7989] EXT4-fs (loop7): Remounting filesystem read-only [ 292.200011][ T7989] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.836: invalid indirect mapped block 2683928664 (level 0) [ 292.265007][ T7989] EXT4-fs (loop7): Remounting filesystem read-only [ 292.295475][ T7989] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.836: Invalid inode table block 0 in block_group 0 [ 292.312743][ T7768] usb 3-1: Using ep0 maxpacket: 16 [ 292.319939][ T7768] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.361824][ T7768] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.371672][ T7989] EXT4-fs (loop7): Remounting filesystem read-only [ 292.371745][ T7989] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 292.400821][ T7989] EXT4-fs (loop7): Remounting filesystem read-only [ 292.412957][ T7989] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 292.453851][ T7989] EXT4-fs (loop7): Remounting filesystem read-only [ 292.460398][ T7989] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.836: Invalid inode table block 0 in block_group 0 [ 292.506669][ T7768] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.537285][ T7989] EXT4-fs (loop7): Remounting filesystem read-only [ 292.546937][ T7989] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 292.549000][ T7768] usb 3-1: config 0 interface 0 has no altsetting 0 [ 292.576881][ T7768] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 292.586577][ T7768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.607576][ T7989] EXT4-fs (loop7): Remounting filesystem read-only [ 292.626965][ T7989] EXT4-fs error (device loop7): ext4_truncate:4325: inode #13: comm syz.7.836: mark_inode_dirty error [ 292.638181][ T7768] usb 3-1: config 0 descriptor?? [ 292.653261][ T7989] EXT4-fs (loop7): Remounting filesystem read-only [ 292.673995][ T7989] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 292.711807][ T7989] EXT4-fs (loop7): Remounting filesystem read-only [ 292.721303][ T7989] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.836: Invalid inode table block 0 in block_group 0 [ 292.764569][ T7989] EXT4-fs (loop7): Remounting filesystem read-only [ 292.771446][ T7989] EXT4-fs (loop7): 1 truncate cleaned up [ 292.813472][ T7989] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 293.061432][ T5364] EXT4-fs (loop7): unmounting filesystem. [ 293.450654][ T7768] usbhid 3-1:0.0: can't add hid device: -71 [ 293.475112][ T7768] usbhid: probe of 3-1:0.0 failed with error -71 [ 293.500874][ T7768] usb 3-1: USB disconnect, device number 5 [ 293.777426][ T8028] loop4: detected capacity change from 0 to 1024 [ 293.827386][ T8028] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 293.838305][ T8030] loop6: detected capacity change from 0 to 512 [ 294.251908][ T4315] kernel write not supported for file /sequencer2 (pid: 4315 comm: kworker/0:4) [ 294.672323][ C1] net_ratelimit: 32 callbacks suppressed [ 294.798189][ T8030] device ip6gre1 entered promiscuous mode [ 295.008656][ T8039] loop7: detected capacity change from 0 to 1024 [ 295.046401][ T8037] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 295.069624][ T8039] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 295.195484][ T8039] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 295.401197][ T8046] 0: reclassify loop, rule prio 0, protocol 03 [ 295.503447][ T8051] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 295.546171][ T8051] EXT4-fs error (device loop7) in ext4_setattr:5695: error 28 [ 295.614315][ T8048] loop4: detected capacity change from 0 to 1024 [ 295.772031][ T5364] EXT4-fs (loop7): unmounting filesystem. [ 296.860417][ T7093] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 297.038796][ T8071] tipc: New replicast peer: 255.255.255.255 [ 297.046919][ T8071] tipc: Enabled bearer , priority 10 [ 297.112381][ T7093] usb 8-1: Using ep0 maxpacket: 32 [ 297.119762][ T7093] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 297.161937][ T7093] usb 8-1: config 0 has no interface number 0 [ 297.179446][ T8075] futex_wake_op: syz.3.863 tries to shift op by 144; fix this program [ 297.187832][ T8074] device syzkaller0 entered promiscuous mode [ 297.203713][ T7093] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 297.233257][ T7093] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.257554][ T7093] usb 8-1: Product: syz [ 297.261752][ T7093] usb 8-1: Manufacturer: syz [ 297.261771][ T7093] usb 8-1: SerialNumber: syz [ 297.458503][ T7093] usb 8-1: config 0 descriptor?? [ 297.469851][ T7093] smsc95xx v2.0.0 [ 298.368684][ T8083] bond0 speed is unknown, defaulting to 1000 [ 298.404351][ T7093] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 298.428170][ T7093] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 298.495332][ T8089] loop3: detected capacity change from 0 to 2048 [ 298.563593][ T8089] loop3: p4 < > [ 298.612462][ T7096] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 298.698738][ T8089] EXT4-fs (loop3p4): unable to read superblock [ 298.822386][ T7096] usb 3-1: Using ep0 maxpacket: 16 [ 298.830088][ T7096] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 298.874378][ T7096] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 298.948771][ T7096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.996259][ T7096] usb 3-1: Product: syz [ 299.009731][ T7096] usb 3-1: Manufacturer: syz [ 299.028931][ T7096] usb 3-1: SerialNumber: syz [ 299.054740][ T7096] usb 3-1: config 0 descriptor?? [ 299.096599][ T7096] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 299.129734][ T7096] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 299.537857][ C1] hrtimer: interrupt took 33435 ns [ 300.270309][ T7096] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 300.276839][ C1] net_ratelimit: 51 callbacks suppressed [ 300.615937][ T7093] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 300.710125][ T7093] smsc95xx: probe of 8-1:0.67 failed with error -71 [ 300.756079][ T7093] usb 8-1: USB disconnect, device number 3 [ 300.837189][ T7096] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 300.886632][ T7096] em28xx 3-1:0.0: board has no eeprom [ 300.937170][ T8093] loop6: detected capacity change from 0 to 512 [ 302.004678][ T8118] futex_wake_op: syz.7.875 tries to shift op by 144; fix this program [ 302.043774][ T8085] em28xx 3-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 302.112434][ T7096] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 302.132388][ T7096] em28xx 3-1:0.0: dvb set to bulk mode. [ 302.138644][ T7093] em28xx 3-1:0.0: Binding DVB extension [ 302.224913][ T7096] usb 3-1: USB disconnect, device number 6 [ 302.286085][ T7096] em28xx 3-1:0.0: Disconnecting em28xx [ 302.492470][ T7093] em28xx 3-1:0.0: Registering input extension [ 302.517092][ T7096] em28xx 3-1:0.0: Closing input extension [ 302.565556][ T7096] em28xx 3-1:0.0: Freeing device [ 303.019638][ T26] audit: type=1804 audit(2000000017.229:498): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.881" name="/newroot/123/file0" dev="fuse" ino=1 res=1 errno=0 [ 303.462926][ T26] audit: type=1804 audit(2000000017.229:499): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.881" name="/newroot/123/file0" dev="fuse" ino=1 res=1 errno=0 [ 303.854719][ T8122] loop3: detected capacity change from 0 to 40427 [ 303.987205][ T8122] F2FS-fs (loop3): Found nat_bits in checkpoint [ 304.224082][ T8122] F2FS-fs (loop3): Start checkpoint disabled! [ 304.298794][ T8122] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 304.330969][ T8163] netlink: 'syz.7.887': attribute type 12 has an invalid length. [ 304.345472][ T8155] loop2: detected capacity change from 0 to 8192 [ 305.272449][ T5697] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 305.472578][ T5697] usb 7-1: Using ep0 maxpacket: 16 [ 305.478810][ C1] net_ratelimit: 40 callbacks suppressed [ 305.490411][ T5697] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 305.549652][ T5697] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 305.573876][ T5697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.581970][ T5697] usb 7-1: Product: syz [ 305.616933][ T5697] usb 7-1: Manufacturer: syz [ 305.623879][ T5697] usb 7-1: SerialNumber: syz [ 305.624668][ T2931] kworker/u4:5: attempt to access beyond end of device [ 305.624668][ T2931] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 305.689636][ T5697] usb 7-1: config 0 descriptor?? [ 305.727566][ T5697] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 305.781016][ T5697] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 306.333774][ T5697] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 306.827099][ T8210] CIFS: Attempting to mount \\127.0.0.1\share [ 307.243731][ T8224] device syzkaller0 entered promiscuous mode [ 307.625607][ T8210] CIFS: VFS: Error connecting to socket. Aborting operation. [ 307.667173][ T8210] CIFS: VFS: cifs_mount failed w/return code = -4 [ 307.866344][ T5697] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 307.888262][ T5697] em28xx 7-1:0.0: board has no eeprom [ 308.007736][ T8239] tipc: Started in network mode [ 308.139790][ T7096] kernel write not supported for file /sequencer2 (pid: 7096 comm: kworker/1:17) [ 308.235136][ T8238] loop4: detected capacity change from 0 to 512 [ 308.359219][ T8239] tipc: Node identity 4, cluster identity 4711 [ 308.590312][ T8239] tipc: Node number set to 4 [ 308.888555][ T8238] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.993345][ T8179] em28xx 7-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 309.062713][ T5697] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 309.082811][ T5697] em28xx 7-1:0.0: dvb set to bulk mode. [ 309.090578][ T4439] tipc: Subscription rejected, illegal request [ 309.105763][ T5697] usb 7-1: USB disconnect, device number 4 [ 309.113249][ T5697] em28xx 7-1:0.0: Disconnecting em28xx [ 309.122549][ T7093] em28xx 7-1:0.0: Binding DVB extension [ 309.140105][ T8238] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.907: corrupted in-inode xattr [ 309.242989][ T8238] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.907: couldn't read orphan inode 15 (err -117) [ 309.311005][ T8238] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 309.355694][ T7093] em28xx 7-1:0.0: Registering input extension [ 309.362113][ T5697] em28xx 7-1:0.0: Closing input extension [ 309.391758][ T5697] em28xx 7-1:0.0: Freeing device [ 309.574237][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 310.752312][ C0] net_ratelimit: 32 callbacks suppressed [ 311.092840][ T7093] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 311.335571][ T7093] usb 4-1: Using ep0 maxpacket: 16 [ 311.371360][ T7093] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 311.559718][ T7093] usb 4-1: config 0 has no interface number 0 [ 311.569794][ T7093] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 311.580078][ T7093] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 311.635544][ T7093] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 311.693959][ T7093] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.716743][ T7093] usb 4-1: Product: syz [ 311.720963][ T7093] usb 4-1: Manufacturer: syz [ 311.733397][ T7093] usb 4-1: SerialNumber: syz [ 311.741415][ T7093] usb 4-1: config 0 descriptor?? [ 311.757546][ T8267] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 311.772057][ T8267] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 312.034132][ T8267] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 312.041455][ T8267] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 312.247038][ T8279] device syzkaller0 entered promiscuous mode [ 312.320842][ T7093] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 312.586222][ T8284] 0x7073726500000000-0x7073726500306e61 : "" [ 312.592963][ T8284] mtd: partition "" is out of reach -- disabled [ 312.767283][ T8284] ftl_cs: FTL header not found. [ 314.753737][ T7093] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 314.792459][ T7093] asix: probe of 4-1:0.34 failed with error -71 [ 314.852620][ T7093] usb 4-1: USB disconnect, device number 5 [ 315.585561][ T8328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.931'. [ 315.872326][ C0] net_ratelimit: 34 callbacks suppressed [ 317.157980][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.164472][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.106327][ T8343] loop6: detected capacity change from 0 to 128 [ 318.176633][ T8343] FAT-fs (loop6): Unrecognized mount option "0" or missing value [ 319.583983][ T8371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.943'. [ 319.664692][ T8369] tipc: Started in network mode [ 319.679289][ T8374] loop7: detected capacity change from 0 to 512 [ 319.692633][ T8369] tipc: Node identity da5cb980cd6, cluster identity 4711 [ 319.786104][ T8369] tipc: Enabled bearer , priority 0 [ 320.846908][ T5686] tipc: Node number set to 389855616 [ 321.002356][ C0] net_ratelimit: 38 callbacks suppressed [ 322.561129][ T8400] loop7: detected capacity change from 0 to 256 [ 322.629299][ T8400] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 322.879277][ T3933] device veth0_vlan left promiscuous mode [ 322.928327][ T3933] device veth0_vlan entered promiscuous mode [ 322.959559][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.979623][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.028573][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.106302][ T8407] raw_sendmsg: syz.6.954 forgot to set AF_INET. Fix it! [ 323.540159][ T8422] netlink: 27 bytes leftover after parsing attributes in process `syz.6.956'. [ 323.623560][ T8427] loop7: detected capacity change from 0 to 512 [ 323.689859][ T8427] device ip6gre1 entered promiscuous mode [ 324.893926][ T127] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.413576][ T127] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.440169][ T4315] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.643030][ T7768] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.798181][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.966'. [ 326.112712][ T6051] net_ratelimit: 33 callbacks suppressed [ 326.542849][ T4315] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 326.581449][ T8469] device bond2 entered promiscuous mode [ 326.739224][ T8469] 8021q: adding VLAN 0 to HW filter on device bond2 [ 326.882190][ T8472] device erspan1 entered promiscuous mode [ 326.989027][ T8472] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 327.092162][ T8487] CIFS mount error: No usable UNC path provided in device string! [ 327.092162][ T8487] [ 327.103007][ T8487] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 327.812853][ T6051] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 328.091960][ T8492] device ip6gre1 entered promiscuous mode [ 328.585152][ T4315] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 328.669736][ T4315] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 328.797499][ T127] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 328.931824][ T8492] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 329.202566][ T4315] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 331.312331][ C1] net_ratelimit: 35 callbacks suppressed [ 332.338109][ T8540] loop3: detected capacity change from 0 to 512 [ 332.359265][ T8540] EXT4-fs: Ignoring removed i_version option [ 332.413759][ T8540] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 332.470495][ T8540] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 332.602429][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 332.602449][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.901149][ T8540] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 333.060925][ T8540] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.244545][ T26] audit: type=1800 audit(2000000047.439:500): pid=8540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.983" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 333.728247][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 333.748971][ T8560] netlink: 24 bytes leftover after parsing attributes in process `syz.7.998'. [ 333.762543][ T7093] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 333.903756][ T8561] netlink: 24 bytes leftover after parsing attributes in process `syz.7.998'. [ 333.935692][ T8569] loop3: detected capacity change from 0 to 512 [ 333.975987][ T7093] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.013347][ T7093] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.070005][ T7093] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.092471][ T7768] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 334.100020][ T7093] usb 7-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 334.123014][ T7093] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.151865][ T7093] usb 7-1: config 0 descriptor?? [ 334.178862][ T8575] loop7: detected capacity change from 0 to 512 [ 334.228627][ T8575] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 334.282637][ T7768] usb 3-1: Using ep0 maxpacket: 32 [ 334.314533][ T7768] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.325569][ T8569] device ip6gre2 entered promiscuous mode [ 334.358192][ T7768] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 334.382646][ T7768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.401259][ T7768] usb 3-1: Product: syz [ 334.417395][ T7768] usb 3-1: Manufacturer: syz [ 334.422164][ T7768] usb 3-1: SerialNumber: syz [ 334.430586][ T7768] usb 3-1: config 0 descriptor?? [ 334.449461][ T7768] usb 3-1: bad CDC descriptors [ 334.460590][ T7768] usb 3-1: unsupported MDLM descriptors [ 334.594381][ T7093] wacom 0003:056A:002A.0003: ignoring exceeding usage max [ 334.617650][ T7093] wacom 0003:056A:002A.0003: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 334.638200][ T7093] wacom 0003:056A:002A.0003: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.6-1/input0 [ 334.653996][ T7093] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:002A.0003/input/input14 [ 334.667032][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.993'. [ 334.689487][ T4315] usb 3-1: USB disconnect, device number 7 [ 335.108642][ T8590] bond3: (slave veth3): Enslaving as an active interface with an up link [ 335.178047][ T7096] usb 7-1: USB disconnect, device number 5 [ 336.432333][ C0] net_ratelimit: 38 callbacks suppressed [ 336.757477][ T8619] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1001'. [ 338.272434][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 338.691098][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 338.913349][ T8634] sp0: Synchronizing with TNC [ 339.821011][ T8657] loop7: detected capacity change from 0 to 128 [ 339.937518][ T8661] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1016'. [ 339.952701][ T7093] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 339.994292][ T8657] syz.7.1015: attempt to access beyond end of device [ 339.994292][ T8657] loop7: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 340.144756][ T7093] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.192408][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 340.210906][ T8668] overlayfs: missing 'lowerdir' [ 340.270254][ T8669] overlayfs: bad mount option "redirect_dir=nofollow:/" [ 341.330138][ T8657] syz.7.1015: attempt to access beyond end of device [ 341.330138][ T8657] loop7: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 341.426317][ T8673] syz.7.1015: attempt to access beyond end of device [ 341.426317][ T8673] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 341.442704][ C1] net_ratelimit: 32 callbacks suppressed [ 341.449040][ T7093] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.458872][ T7093] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.471941][ T7093] usb 4-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 341.515868][ T8675] syz.7.1015: attempt to access beyond end of device [ 341.515868][ T8675] loop7: rw=0, sector=150, nr_sectors = 1 limit=128 [ 341.601123][ T8673] syz.7.1015: attempt to access beyond end of device [ 341.601123][ T8673] loop7: rw=0, sector=145, nr_sectors = 1 limit=128 [ 341.632477][ T7093] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.645303][ T7093] usb 4-1: config 0 descriptor?? [ 341.739236][ T8673] Buffer I/O error on dev loop7, logical block 145, async page read [ 341.777844][ T8673] syz.7.1015: attempt to access beyond end of device [ 341.777844][ T8673] loop7: rw=0, sector=146, nr_sectors = 1 limit=128 [ 341.842777][ T8673] Buffer I/O error on dev loop7, logical block 146, async page read [ 341.850952][ T8673] syz.7.1015: attempt to access beyond end of device [ 341.850952][ T8673] loop7: rw=0, sector=147, nr_sectors = 1 limit=128 [ 341.981086][ T8673] Buffer I/O error on dev loop7, logical block 147, async page read [ 342.758317][ T8673] syz.7.1015: attempt to access beyond end of device [ 342.758317][ T8673] loop7: rw=0, sector=148, nr_sectors = 1 limit=128 [ 342.808057][ T8673] Buffer I/O error on dev loop7, logical block 148, async page read [ 342.904431][ T8673] syz.7.1015: attempt to access beyond end of device [ 342.904431][ T8673] loop7: rw=0, sector=149, nr_sectors = 1 limit=128 [ 342.924675][ T7093] wacom 0003:056A:002A.0004: ignoring exceeding usage max [ 342.938450][ T7093] wacom 0003:056A:002A.0004: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 342.964528][ T7093] wacom 0003:056A:002A.0004: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.3-1/input0 [ 343.181114][ T8673] Buffer I/O error on dev loop7, logical block 149, async page read [ 343.231372][ T8673] syz.7.1015: attempt to access beyond end of device [ 343.231372][ T8673] loop7: rw=0, sector=150, nr_sectors = 1 limit=128 [ 343.648198][ T8673] Buffer I/O error on dev loop7, logical block 150, async page read [ 343.660197][ T7093] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:002A.0004/input/input17 [ 343.668065][ T8673] Buffer I/O error on dev loop7, logical block 151, async page read [ 343.680984][ T8673] Buffer I/O error on dev loop7, logical block 152, async page read [ 343.784432][ T7093] usb 4-1: USB disconnect, device number 6 [ 345.038548][ T8703] fido_id[8703]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 346.189847][ T8763] loop3: detected capacity change from 0 to 512 [ 346.258152][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1039'. [ 346.593568][ T4438] net_ratelimit: 44 callbacks suppressed [ 347.008720][ T8763] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1040'. [ 347.060849][ T8772] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 347.118877][ T8742] loop7: detected capacity change from 0 to 32768 [ 347.167555][ T8772] FAT-fs (loop3): Filesystem has been set read-only [ 347.232503][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 347.255920][ T8763] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 347.418945][ T8742] (syz.7.1034,8742,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 347.762690][ T7096] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 347.922173][ T8742] (syz.7.1034,8742,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 348.080657][ T8742] JBD2: Ignoring recovery information on journal [ 348.172726][ T7096] usb 4-1: Using ep0 maxpacket: 16 [ 348.188125][ T7096] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 349.052666][ T7096] usb 4-1: config 1 has no interface number 0 [ 349.058838][ T7096] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 349.068945][ T7096] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 24896, setting to 1024 [ 349.068968][ T8742] JBD2: recovery failed [ 349.080304][ T7096] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 349.080336][ T7096] usb 4-1: config 1 interface 105 has no altsetting 0 [ 349.110591][ T7096] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 349.134946][ T7096] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 349.202325][ T7096] usb 4-1: Product: syz [ 349.206552][ T7096] usb 4-1: Manufacturer: syz [ 349.211159][ T7096] usb 4-1: SerialNumber: syz [ 349.232433][ T8742] (syz.7.1034,8742,0):ocfs2_journal_load:1135 ERROR: Failed to load journal! [ 349.270170][ T8742] (syz.7.1034,8742,0):ocfs2_check_volume:2431 ERROR: ocfs2 journal load failed! -5 [ 349.318007][ T8800] loop2: detected capacity change from 0 to 512 [ 349.327376][ T7096] usb 4-1: can't set config #1, error -71 [ 349.367458][ T8742] (syz.7.1034,8742,0):ocfs2_check_volume:2487 ERROR: status = -5 [ 349.411040][ T7096] usb 4-1: USB disconnect, device number 7 [ 349.412457][ T8742] (syz.7.1034,8742,0):ocfs2_mount_volume:1821 ERROR: status = -5 [ 349.451012][ T8800] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 349.570620][ T8742] (syz.7.1034,8742,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 349.579544][ T8800] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1048: invalid indirect mapped block 9 (level 0) [ 349.637792][ T8800] EXT4-fs (loop2): 1 truncate cleaned up [ 349.671062][ T8800] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 351.449235][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 351.985423][ C1] net_ratelimit: 42 callbacks suppressed [ 353.366390][ T4315] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 353.570209][ T4315] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.751199][ T4315] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.028623][ T8844] block nbd3: shutting down sockets [ 354.039079][ T4315] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.056253][ T4315] usb 8-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 354.065881][ T4315] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.087215][ T4315] usb 8-1: config 0 descriptor?? [ 354.103471][ T8846] bond0 speed is unknown, defaulting to 1000 [ 354.743817][ T8865] loop6: detected capacity change from 0 to 256 [ 356.445410][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.453595][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 357.043564][ C1] net_ratelimit: 33 callbacks suppressed [ 357.058057][ T4315] wacom 0003:056A:002A.0005: ignoring exceeding usage max [ 357.071508][ T4315] wacom 0003:056A:002A.0005: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 357.127892][ T4315] wacom 0003:056A:002A.0005: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.7-1/input0 [ 357.154929][ T4315] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:002A.0005/input/input20 [ 357.377102][ T4315] usb 8-1: USB disconnect, device number 4 [ 357.569751][ T8872] netlink: 'syz.4.1064': attribute type 1 has an invalid length. [ 357.664886][ T8872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.675487][ T8873] Illegal XDP return value 105566736 on prog (id 88) dev syz_tun, expect packet loss! [ 357.740016][ T8869] fido_id[8869]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 357.858091][ T8874] bond2: (slave veth3): Enslaving as an active interface with a down link [ 357.925148][ T8872] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 357.969447][ T8872] bond2: (slave batadv1): making interface the new active one [ 358.011592][ T8872] device batadv1 entered promiscuous mode [ 358.021749][ T8872] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 358.321775][ T8879] bond2: (slave veth5): Enslaving as an active interface with a down link [ 358.567030][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 359.189071][ T8891] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1068'. [ 362.124847][ T4436] net_ratelimit: 32 callbacks suppressed [ 362.397428][ T8915] device syzkaller0 entered promiscuous mode [ 363.399351][ T8908] syz.2.1074 (8908): drop_caches: 2 [ 363.442651][ T8914] syz.2.1074 (8914): drop_caches: 2 [ 363.872436][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 366.493743][ T8943] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 366.598017][ T8958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1086'. [ 366.913368][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1086'. [ 367.136833][ T8972] __vm_enough_memory: pid: 8972, comm: syz.3.1089, no enough memory for the allocation [ 367.472333][ C0] net_ratelimit: 49 callbacks suppressed [ 368.214601][ T5686] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 368.427937][ T8983] loop3: detected capacity change from 0 to 128 [ 368.478543][ T5686] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 368.495117][ T5686] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.538003][ T5686] usb 8-1: Product: syz [ 368.551208][ T5686] usb 8-1: Manufacturer: syz [ 368.568020][ T5686] usb 8-1: SerialNumber: syz [ 368.687286][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1096'. [ 368.754380][ T8991] bio_check_eod: 2 callbacks suppressed [ 368.754396][ T8991] syz.3.1092: attempt to access beyond end of device [ 368.754396][ T8991] loop3: rw=2049, sector=145, nr_sectors = 664 limit=128 [ 368.961612][ T8990] bond3: (slave veth5): Enslaving as an active interface with an up link [ 368.984830][ T8983] syz.3.1092: attempt to access beyond end of device [ 368.984830][ T8983] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 369.044475][ T8991] syz.3.1092: attempt to access beyond end of device [ 369.044475][ T8991] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 369.092918][ T8991] syz.3.1092: attempt to access beyond end of device [ 369.092918][ T8991] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 369.140109][ T8983] syz.3.1092: attempt to access beyond end of device [ 369.140109][ T8983] loop3: rw=0, sector=150, nr_sectors = 1 limit=128 [ 369.241125][ T8991] syz.3.1092: attempt to access beyond end of device [ 369.241125][ T8991] loop3: rw=0, sector=145, nr_sectors = 1 limit=128 [ 369.308445][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'. [ 369.332464][ T5686] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 369.333248][ T8991] Buffer I/O error on dev loop3, logical block 145, async page read [ 369.366046][ T5686] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 369.422196][ T5686] lan78xx: probe of 8-1:1.0 failed with error -71 [ 369.444776][ T8991] syz.3.1092: attempt to access beyond end of device [ 369.444776][ T8991] loop3: rw=0, sector=146, nr_sectors = 1 limit=128 [ 369.488120][ T5686] usb 8-1: USB disconnect, device number 5 [ 369.538624][ T8991] Buffer I/O error on dev loop3, logical block 146, async page read [ 369.571020][ T8991] syz.3.1092: attempt to access beyond end of device [ 369.571020][ T8991] loop3: rw=0, sector=147, nr_sectors = 1 limit=128 [ 369.636488][ T8991] Buffer I/O error on dev loop3, logical block 147, async page read [ 369.667943][ T8991] syz.3.1092: attempt to access beyond end of device [ 369.667943][ T8991] loop3: rw=0, sector=148, nr_sectors = 1 limit=128 [ 369.713541][ T8991] Buffer I/O error on dev loop3, logical block 148, async page read [ 369.722014][ T8991] syz.3.1092: attempt to access beyond end of device [ 369.722014][ T8991] loop3: rw=0, sector=149, nr_sectors = 1 limit=128 [ 369.737919][ T8991] Buffer I/O error on dev loop3, logical block 149, async page read [ 369.746661][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'. [ 369.748205][ T8991] Buffer I/O error on dev loop3, logical block 150, async page read [ 369.795333][ T8991] Buffer I/O error on dev loop3, logical block 151, async page read [ 369.823775][ T8991] Buffer I/O error on dev loop3, logical block 152, async page read [ 370.627703][ T9016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.213345][ T9016] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.421994][ T8986] bond0 speed is unknown, defaulting to 1000 [ 372.004808][ T9037] device syzkaller0 left promiscuous mode [ 372.645359][ C1] net_ratelimit: 36 callbacks suppressed [ 374.384789][ T6051] device batadv1 left promiscuous mode [ 374.482857][ T7093] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 374.714572][ T7093] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 374.741267][ T9065] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1115'. [ 374.747702][ T7093] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.810627][ T7093] usb 3-1: Product: syz [ 374.826244][ T9067] loop6: detected capacity change from 0 to 1024 [ 374.839777][ T7093] usb 3-1: Manufacturer: syz [ 374.845160][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 374.865314][ T7093] usb 3-1: SerialNumber: syz [ 374.876455][ T9067] EXT4-fs: Ignoring removed bh option [ 375.011439][ T9067] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 375.564861][ T7093] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 375.582753][ T7093] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 375.595497][ T7093] lan78xx: probe of 3-1:1.0 failed with error -71 [ 375.623711][ T7093] usb 3-1: USB disconnect, device number 8 [ 377.544821][ T5135] EXT4-fs (loop6): unmounting filesystem. [ 377.961723][ C1] net_ratelimit: 41 callbacks suppressed [ 378.166892][ T9102] loop2: detected capacity change from 0 to 1024 [ 378.375660][ T5697] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 378.655395][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.673156][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.965107][ T9102] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 379.174767][ T5697] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 379.219051][ T9102] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 379.242414][ T5697] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 379.320720][ T5697] usb 4-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 379.372462][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.411127][ T5697] usb 4-1: Product: syz [ 379.416137][ T5697] usb 4-1: Manufacturer: syz [ 379.420743][ T5697] usb 4-1: SerialNumber: syz [ 379.450830][ T9115] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1127'. [ 379.471893][ T9115] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 379.627214][ T9118] loop6: detected capacity change from 0 to 512 [ 379.693527][ T9118] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 379.866155][ T9118] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 379.882928][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 379.913229][ T5697] usb 4-1: Can't get UAC3 power state for id 10 [ 379.933471][ T9118] System zones: 1-12 [ 379.977957][ T9118] EXT4-fs error (device loop6): ext4_orphan_get:1435: comm syz.6.1128: bad orphan inode 131072 [ 380.074578][ T5697] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 380.088094][ T9118] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 380.196544][ T5697] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 380.245516][ T9118] EXT4-fs (loop6): shut down requested (0) [ 380.305891][ T9113] loop7: detected capacity change from 0 to 32768 [ 380.541898][ T9113] (syz.7.1125,9113,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 381.110192][ T9113] (syz.7.1125,9113,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 381.198858][ T9113] JBD2: Ignoring recovery information on journal [ 381.258904][ T5697] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 381.276539][ T5697] usb 4-1: USB disconnect, device number 8 [ 381.437970][ T9113] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 381.449005][ T5135] EXT4-fs (loop6): unmounting filesystem. [ 381.721469][ T9124] udevd[9124]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.478173][ T9162] loop2: detected capacity change from 0 to 256 [ 382.485742][ T9162] exfat: Deprecated parameter 'namecase' [ 382.491487][ T9162] exfat: Deprecated parameter 'namecase' [ 382.532020][ T9162] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 382.864680][ T5364] ocfs2: Unmounting device (7,7) on (node local) [ 383.201092][ T9178] device syzkaller0 entered promiscuous mode [ 383.392309][ C1] net_ratelimit: 34 callbacks suppressed [ 384.656135][ T9189] bridge0: port 3(dummy0) entered blocking state [ 384.664716][ T9189] bridge0: port 3(dummy0) entered forwarding state [ 384.710182][ T9205] loop3: detected capacity change from 0 to 164 [ 385.031082][ T9189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.377806][ T9189] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.474558][ T6051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 385.632510][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 385.836283][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1154'. [ 386.053506][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'. [ 386.071635][ T9213] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.080711][ T9213] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.089547][ T9213] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.098382][ T9213] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.178359][ T9213] IPv6: ADDRCONF(NETDEV_CHANGE): @: link becomes ready [ 387.185520][ T9213] IPv6: ADDRCONF(NETDEV_CHANGE): @: link becomes ready [ 387.600343][ T9233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.512342][ C1] net_ratelimit: 30 callbacks suppressed [ 388.527930][ T9248] loop6: detected capacity change from 0 to 512 [ 388.558709][ T9248] EXT4-fs (loop6): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 388.583943][ T9248] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 388.633997][ T9248] EXT4-fs (loop6): The Hurd can't support 64-bit file systems [ 388.958143][ T9256] fuse: Bad value for 'fd' [ 389.025140][ T9126] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 390.112509][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 391.296276][ T9283] bond0 speed is unknown, defaulting to 1000 [ 391.303442][ T9283] bond0 speed is unknown, defaulting to 1000 [ 391.311068][ T9283] bond0 speed is unknown, defaulting to 1000 [ 391.322399][ T9283] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 391.338189][ T9283] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 391.708500][ T9283] bond0 speed is unknown, defaulting to 1000 [ 391.716734][ T9283] bond0 speed is unknown, defaulting to 1000 [ 391.724048][ T9283] bond0 speed is unknown, defaulting to 1000 [ 391.731174][ T9283] bond0 speed is unknown, defaulting to 1000 [ 391.738417][ T9283] bond0 speed is unknown, defaulting to 1000 [ 391.763575][ T9283] bond0 speed is unknown, defaulting to 1000 [ 393.388786][ T9298] device syzkaller0 entered promiscuous mode [ 394.205178][ C0] net_ratelimit: 32 callbacks suppressed [ 394.295748][ T9312] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 394.303908][ T9312] IPv6: NLM_F_CREATE should be set when creating new route [ 394.706366][ T9318] Bluetooth: MGMT ver 1.22 [ 394.776440][ T9319] device syzkaller0 entered promiscuous mode [ 395.700514][ T9332] loop3: detected capacity change from 0 to 128 [ 395.817997][ T9337] batman_adv: batadv0: Adding interface: veth0 [ 395.849671][ T9336] bio_check_eod: 3 callbacks suppressed [ 395.849688][ T9336] syz.3.1186: attempt to access beyond end of device [ 395.849688][ T9336] loop3: rw=2049, sector=145, nr_sectors = 640 limit=128 [ 395.855629][ T9337] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.950446][ T9337] batman_adv: batadv0: Interface activated: veth0 [ 396.000564][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 396.041768][ T9346] batman_adv: batadv0: Interface deactivated: veth0 [ 396.052569][ T9346] batman_adv: batadv0: Removing interface: veth0 [ 396.086851][ T9346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.132708][ T9346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.168519][ T9346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.252551][ T9346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.400884][ T9366] loop6: detected capacity change from 0 to 512 [ 397.590043][ T9333] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 397.792522][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 398.645235][ T9382] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 399.146372][ T9380] bond0 speed is unknown, defaulting to 1000 [ 399.202476][ T5697] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 399.387030][ T9380] bond0 speed is unknown, defaulting to 1000 [ 399.394203][ C0] net_ratelimit: 54 callbacks suppressed [ 399.403270][ T5697] usb 8-1: Using ep0 maxpacket: 16 [ 399.415718][ T5697] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 399.441180][ T5697] usb 8-1: config 0 has no interface number 0 [ 399.461587][ T5697] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 399.499901][ T5697] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.530439][ T5697] usb 8-1: Product: syz [ 399.543968][ T5697] usb 8-1: Manufacturer: syz [ 399.568783][ T5697] usb 8-1: SerialNumber: syz [ 399.605928][ T5697] usb 8-1: config 0 descriptor?? [ 399.638262][ T5697] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 400.208680][ T9412] device syzkaller0 entered promiscuous mode [ 400.241408][ T9412] tipc: Enabling of bearer rejected, already enabled [ 400.506779][ T5697] gspca_spca1528: reg_w err -71 [ 400.532638][ T5697] spca1528: probe of 8-1:0.1 failed with error -71 [ 400.568364][ T5697] usb 8-1: USB disconnect, device number 6 [ 401.826203][ T9437] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1214'. [ 401.966773][ T9437] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1214'. [ 402.152420][ T9443] fuse: Bad value for 'fd' [ 402.462040][ T9451] loop6: detected capacity change from 0 to 512 [ 402.513813][ T9451] EXT4-fs: Ignoring removed mblk_io_submit option [ 402.575127][ T9449] device syzkaller0 entered promiscuous mode [ 402.589553][ T9451] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 402.643573][ T9451] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 402.644459][ T9449] tipc: Enabled bearer , priority 0 [ 402.704707][ T9451] EXT4-fs (loop6): orphan cleanup on readonly fs [ 402.758505][ T9451] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.1217: Invalid block bitmap block 0 in block_group 0 [ 402.785163][ T9448] tipc: Resetting bearer [ 402.836557][ T9451] Quota error (device loop6): write_blk: dquota write failed [ 402.843658][ T9448] tipc: Disabling bearer [ 402.844608][ T9451] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 402.866619][ T9451] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.1217: Failed to acquire dquot type 1 [ 402.888106][ T9451] EXT4-fs (loop6): 1 orphan inode deleted [ 403.077402][ T76] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 403.098845][ T9465] loop3: detected capacity change from 0 to 128 [ 403.102149][ T76] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 1 [ 403.227507][ T9451] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 403.305986][ T9465] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 403.465710][ T9465] ext4 filesystem being mounted at /247/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 404.519267][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 404.682347][ C1] net_ratelimit: 32 callbacks suppressed [ 404.800973][ T5135] EXT4-fs (loop6): unmounting filesystem. [ 405.275657][ T9491] loop6: detected capacity change from 0 to 256 [ 405.994160][ T9491] FAT-fs (loop6): Unrecognized mount option "" or missing value [ 406.413289][ T9499] tipc: Failed to remove unknown binding: 66,0,0/4:4161502490/4161502492 [ 406.433139][ T9499] tipc: Failed to remove unknown binding: 66,0,0/4:4161502490/4161502491 [ 406.469135][ T9499] tipc: Failed to remove unknown binding: 66,0,0/4:4161502490/4161502492 [ 406.537729][ T9499] tipc: Failed to remove unknown binding: 66,0,0/4:4161502490/4161502491 [ 408.897089][ T9515] loop3: detected capacity change from 0 to 1024 [ 409.231402][ T9508] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 409.266939][ T9508] hfsplus: xattr searching failed [ 409.428310][ T9508] syz.3.1232: attempt to access beyond end of device [ 409.428310][ T9508] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 409.464322][ T9508] Buffer I/O error on dev loop3, logical block 458752, async page read [ 409.482169][ T9508] hfsplus: unable to mark blocks free: error -5 [ 409.488684][ T9508] hfsplus: can't free extent [ 409.952439][ C0] net_ratelimit: 36 callbacks suppressed [ 410.153602][ T9515] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 410.212663][ T9508] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 410.239534][ T9508] syz.3.1232: attempt to access beyond end of device [ 410.239534][ T9508] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 410.286714][ T9508] Buffer I/O error on dev loop3, logical block 458752, async page read [ 410.312918][ T9508] syz.3.1232: attempt to access beyond end of device [ 410.312918][ T9508] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 410.336814][ T9534] device syzkaller0 entered promiscuous mode [ 410.343357][ T5697] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 410.382888][ T9508] Buffer I/O error on dev loop3, logical block 458752, async page read [ 410.964984][ T5697] usb 8-1: no configurations [ 411.003844][ T5697] usb 8-1: can't read configurations, error -22 [ 411.456029][ T9547] x86/PAT: syz.2.1244:9547 freeing invalid memtype [mem 0xfe005000-0xfe005fff] [ 411.492468][ T5697] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 412.318787][ T9558] loop6: detected capacity change from 0 to 512 [ 412.363556][ T5697] usb 8-1: no configurations [ 412.368295][ T5697] usb 8-1: can't read configurations, error -22 [ 412.376987][ T9558] EXT4-fs: Ignoring removed nobh option [ 412.385230][ T5697] usb usb8-port1: attempt power cycle [ 412.460968][ T9558] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 412.489832][ T9558] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61 [ 412.527549][ T9558] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #13: comm syz.6.1248: inode has both inline data and extents flags [ 412.562474][ T9558] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1248: couldn't read orphan inode 13 (err -117) [ 412.623137][ T9558] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 412.701784][ T26] audit: type=1326 audit(2000000126.909:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.3.1254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398d79e1d9 code=0x7ffc0000 [ 412.737743][ T9563] loop2: detected capacity change from 0 to 32768 [ 412.776411][ T26] audit: type=1326 audit(2000000126.949:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.3.1254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f398d79e1d9 code=0x7ffc0000 [ 412.784042][ T9563] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 412.803077][ T26] audit: type=1326 audit(2000000126.949:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.3.1254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398d79e1d9 code=0x7ffc0000 [ 412.844255][ T26] audit: type=1326 audit(2000000126.949:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.3.1254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f398d79e1d9 code=0x7ffc0000 [ 412.844701][ T5697] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 412.888430][ T26] audit: type=1326 audit(2000000126.949:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.3.1254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398d79e1d9 code=0x7ffc0000 [ 412.961522][ T5697] usb 8-1: no configurations [ 412.971758][ T5135] EXT4-fs (loop6): unmounting filesystem. [ 412.978532][ T26] audit: type=1326 audit(2000000126.959:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.3.1254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f398d79e1d9 code=0x7ffc0000 [ 412.979949][ T5697] usb 8-1: can't read configurations, error -22 [ 413.124067][ T26] audit: type=1326 audit(2000000126.959:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.3.1254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398d79e1d9 code=0x7ffc0000 [ 413.216109][ T9381] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 413.243119][ T26] audit: type=1326 audit(2000000126.959:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.3.1254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f398d79e1d9 code=0x7ffc0000 [ 413.269199][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1255'. [ 413.281935][ T9580] loop7: detected capacity change from 0 to 512 [ 413.362387][ T26] audit: type=1326 audit(2000000126.959:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.3.1254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398d79e1d9 code=0x7ffc0000 [ 413.469116][ T26] audit: type=1326 audit(2000000126.959:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.3.1254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f398d79e1d9 code=0x7ffc0000 [ 413.645558][ T9580] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 413.702654][ T9580] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.434877][ T5364] EXT4-fs (loop7): unmounting filesystem. [ 415.152978][ T6052] net_ratelimit: 29 callbacks suppressed [ 415.409041][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1262'. [ 416.905810][ T9649] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 416.915774][ T9649] ALSA: mixer_oss: invalid OSS volume '' [ 418.077121][ T9656] loop2: detected capacity change from 0 to 128 [ 418.507965][ T9660] loop7: detected capacity change from 0 to 256 [ 418.534077][ T9660] exfat: Deprecated parameter 'utf8' [ 418.621034][ T9660] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 420.202380][ C1] net_ratelimit: 28 callbacks suppressed [ 420.638499][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1281'. [ 424.591787][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 425.230146][ T5697] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 425.283049][ C1] net_ratelimit: 25 callbacks suppressed [ 426.666622][ T5697] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 426.874699][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 427.446530][ T9740] jffs2: notice: (9740) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 429.443285][ T9757] loop2: detected capacity change from 0 to 1024 [ 430.241673][ T6051] hfsplus: b-tree write err: -5, ino 25 [ 430.251602][ T6051] hfsplus: b-tree write err: -5, ino 4 [ 430.284972][ T6051] hfsplus: b-tree write err: -5, ino 2 [ 430.297559][ C0] net_ratelimit: 27 callbacks suppressed [ 431.625745][ T9779] bridge0: port 3(dummy0) entered disabled state [ 431.856702][ T9779] device gre1 left promiscuous mode [ 431.888821][ T9779] device team0 left promiscuous mode [ 431.907220][ T9779] device team_slave_0 left promiscuous mode [ 431.917854][ T9779] device team_slave_1 left promiscuous mode [ 431.973133][ T9779] device bond2 left promiscuous mode [ 431.999072][ T9779] device erspan1 left promiscuous mode [ 432.074181][ T9779] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.083345][ T9779] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.093161][ T9779] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.102101][ T9779] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.163955][ T9779] device syzkaller0 left promiscuous mode [ 434.002187][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 434.002197][ T26] audit: type=1800 audit(2000000148.209:525): pid=9826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1321" name="syzkaller1" dev="sda1" ino=2059 res=0 errno=0 [ 434.022750][ T26] audit: type=1800 audit(2000000148.229:526): pid=9826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1321" name="syzkaller1" dev="sda1" ino=2059 res=0 errno=0 [ 434.149406][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1324'. [ 434.254893][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1325'. [ 434.736752][ T9840] bond3 (unregistering): Released all slaves [ 435.289090][ T9851] netlink: 'syz.7.1329': attribute type 1 has an invalid length. [ 435.465348][ T9851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.492002][ T9856] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 435.622528][ T9857] device bond1 entered promiscuous mode [ 435.831052][ T9851] device macvlan2 entered promiscuous mode [ 435.862886][ T9851] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 435.952301][ C1] net_ratelimit: 30 callbacks suppressed [ 437.504190][ T9882] xt_CONNSECMARK: invalid mode: 0 [ 438.563549][ T9892] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 439.444733][ T9907] netlink: 'syz.4.1344': attribute type 1 has an invalid length. [ 439.457418][ T9887] loop2: detected capacity change from 0 to 256 [ 439.483226][ T9887] exfat: Deprecated parameter 'utf8' [ 439.501536][ T9887] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 439.711023][ T9907] 8021q: adding VLAN 0 to HW filter on device bond3 [ 439.860801][ T9907] device macvlan2 entered promiscuous mode [ 439.890252][ T9907] device bond3 entered promiscuous mode [ 439.896419][ T9907] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 439.916209][ T9907] device bond3 left promiscuous mode [ 440.037160][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.044564][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.567411][ T9909] bond3: (slave veth0_to_bond): making interface the new active one [ 440.594033][ T9909] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 440.804790][ T9916] device bond3 entered promiscuous mode [ 440.810595][ T9916] device veth0_to_bond entered promiscuous mode [ 440.860422][ T9912] bond0 speed is unknown, defaulting to 1000 [ 440.930697][ T9929] loop7: detected capacity change from 0 to 512 [ 441.025612][ T9929] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 441.037777][ T9929] System zones: 1-12 [ 441.070428][ T9929] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.1349: missing EA_INODE flag [ 441.127264][ T9929] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1349: error while reading EA inode 12 err=-117 [ 441.158003][ T9929] EXT4-fs (loop7): 1 orphan inode deleted [ 441.163861][ C1] net_ratelimit: 31 callbacks suppressed [ 441.180447][ T9929] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 441.998057][ T9912] bond0 speed is unknown, defaulting to 1000 [ 442.190420][ T5364] EXT4-fs (loop7): unmounting filesystem. [ 443.864905][ T9967] loop6: detected capacity change from 0 to 1024 [ 444.435133][ T6051] hfsplus: b-tree write err: -5, ino 25 [ 444.440941][ T6051] hfsplus: b-tree write err: -5, ino 4 [ 445.152444][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.331763][ T6051] hfsplus: b-tree write err: -5, ino 2 [ 445.365917][ T9976] loop7: detected capacity change from 0 to 1024 [ 445.444448][ T9976] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 445.496916][ T9976] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 445.620052][ T9976] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 445.725709][ T9976] System zones: [ 445.765817][ T9976] 0-1, 3-36 [ 445.772216][ T9976] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 446.352404][ C0] net_ratelimit: 18 callbacks suppressed [ 446.734713][ T5364] EXT4-fs (loop7): unmounting filesystem. [ 447.937346][ T26] audit: type=1326 audit(2000000162.149:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766a59e1d9 code=0x7ffc0000 [ 447.980783][ T26] audit: type=1326 audit(2000000162.179:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766a59e1d9 code=0x7ffc0000 [ 448.025385][ T26] audit: type=1326 audit(2000000162.179:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766a59e1d9 code=0x7ffc0000 [ 448.090852][ T26] audit: type=1326 audit(2000000162.179:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766a59e1d9 code=0x7ffc0000 [ 448.159382][ T26] audit: type=1326 audit(2000000162.179:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f766a59e1d9 code=0x7ffc0000 [ 448.295923][ T26] audit: type=1326 audit(2000000162.179:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766a59e1d9 code=0x7ffc0000 [ 448.462485][ T26] audit: type=1326 audit(2000000162.179:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766a59e1d9 code=0x7ffc0000 [ 448.528435][ T26] audit: type=1326 audit(2000000162.179:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766a59e1d9 code=0x7ffc0000 [ 448.564747][ T26] audit: type=1326 audit(2000000162.179:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766a59e1d9 code=0x7ffc0000 [ 449.224237][ T26] audit: type=1326 audit(2000000162.179:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f766a59e1d9 code=0x7ffc0000 [ 449.425826][T10022] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 449.539994][T10010] null_blk: disk nullb1 created [ 450.994201][T10040] loop7: detected capacity change from 0 to 7 [ 451.036034][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.045261][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 451.053411][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.062674][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 451.125566][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.134842][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 451.183783][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.193042][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 451.247365][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.256662][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 451.292790][T10049] netlink: 'syz.4.1380': attribute type 8 has an invalid length. [ 451.309268][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.318507][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 451.350890][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.360186][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 451.371097][ T9915] ldm_validate_partition_table(): Disk read failed. [ 451.487598][T10053] loop3: detected capacity change from 0 to 1024 [ 451.659730][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.669001][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 451.690051][ T30] net_ratelimit: 34 callbacks suppressed [ 452.075265][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.084524][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.106924][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.116330][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.155674][ T9915] Dev loop7: unable to read RDB block 0 [ 452.181469][ T9915] loop7: unable to read partition table [ 452.224092][ T9915] loop7: partition table beyond EOD, truncated [ 452.441117][T10040] ldm_validate_partition_table(): Disk read failed. [ 452.448670][T10040] Dev loop7: unable to read RDB block 0 [ 452.462360][T10040] loop7: unable to read partition table [ 452.468968][T10040] loop7: partition table beyond EOD, truncated [ 452.492600][T10040] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 452.524616][ T4413] hfsplus: b-tree write err: -5, ino 25 [ 452.530405][ T4413] hfsplus: b-tree write err: -5, ino 4 [ 452.557196][ T4413] hfsplus: b-tree write err: -5, ino 2 [ 452.558849][ T3638] ldm_validate_partition_table(): Disk read failed. [ 452.678609][ T3638] Dev loop7: unable to read RDB block 0 [ 452.726334][ T3638] loop7: unable to read partition table [ 452.743883][ T3638] loop7: partition table beyond EOD, truncated [ 452.829043][T10069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1384'. [ 453.551157][T10073] bridge1: port 1(erspan0) entered blocking state [ 453.559663][T10073] bridge1: port 1(erspan0) entered disabled state [ 453.606467][T10073] device erspan0 entered promiscuous mode [ 453.649621][T10073] bridge1: port 1(erspan0) entered blocking state [ 453.656215][T10073] bridge1: port 1(erspan0) entered forwarding state [ 454.487829][T10078] sctp: [Deprecated]: syz.7.1386 (pid 10078) Use of struct sctp_assoc_value in delayed_ack socket option. [ 454.487829][T10078] Use struct sctp_sack_info instead [ 455.392406][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 455.497129][T10094] loop2: detected capacity change from 0 to 512 [ 456.408740][T10094] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 456.492935][T10094] FAT-fs (loop2): Filesystem has been set read-only [ 456.536630][T10111] FAULT_INJECTION: forcing a failure. [ 456.536630][T10111] name failslab, interval 1, probability 0, space 0, times 0 [ 456.578565][T10111] CPU: 1 PID: 10111 Comm: syz.7.1394 Not tainted syzkaller #0 [ 456.586277][T10111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 456.596343][T10111] Call Trace: [ 456.596354][T10111] [ 456.596363][T10111] dump_stack_lvl+0x188/0x24e [ 456.607812][T10111] ? show_regs_print_info+0x12/0x12 [ 456.613048][T10111] ? load_image+0x410/0x410 [ 456.617582][T10111] ? __might_sleep+0xd0/0xd0 [ 456.622193][T10111] ? __lock_acquire+0x7ea0/0x7ea0 [ 456.627251][T10111] should_fail_ex+0x390/0x4c0 [ 456.631978][T10111] should_failslab+0x5/0x20 [ 456.636514][T10111] slab_pre_alloc_hook+0x59/0x300 [ 456.641571][T10111] kmem_cache_alloc+0x56/0x2f0 [ 456.646360][T10111] ? create_new_namespaces+0x34/0x700 [ 456.651777][T10111] create_new_namespaces+0x34/0x700 [ 456.657001][T10111] ? apparmor_capable+0x12c/0x190 [ 456.662066][T10111] ? bpf_lsm_capable+0x5/0x10 [ 456.666778][T10111] ? security_capable+0x85/0xb0 [ 456.671670][T10111] unshare_nsproxy_namespaces+0x116/0x160 [ 456.677436][T10111] ksys_unshare+0x4f6/0x8e0 [ 456.681970][T10111] ? sighand_ctor+0x40/0x40 [ 456.686500][T10111] ? lock_chain_count+0x20/0x20 [ 456.691385][T10111] ? syscall_enter_from_user_mode+0x21/0x80 [ 456.697326][T10111] __x64_sys_unshare+0x34/0x40 [ 456.702117][T10111] do_syscall_64+0x4c/0xa0 [ 456.706567][T10111] ? clear_bhb_loop+0x60/0xb0 [ 456.711272][T10111] ? clear_bhb_loop+0x60/0xb0 [ 456.715965][T10111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.721894][T10111] RIP: 0033:0x7f766a59e1d9 [ 456.726339][T10111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.746044][T10111] RSP: 002b:00007f766b4ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 456.754557][T10111] RAX: ffffffffffffffda RBX: 00007f766a825fa0 RCX: 00007f766a59e1d9 [ 456.754575][T10111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 456.754587][T10111] RBP: 00007f766a635888 R08: 0000000000000000 R09: 0000000000000000 [ 456.754597][T10111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.754608][T10111] R13: 00007f766a826038 R14: 00007f766a825fa0 R15: 00007ffdb76baa18 [ 456.754635][T10111] [ 456.754810][ C1] net_ratelimit: 24 callbacks suppressed [ 456.931577][T10117] ip_tables: iptables: counters copy to user failed while replacing table [ 457.383166][T10125] device syzkaller0 entered promiscuous mode [ 460.271812][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1412'. [ 460.365640][T10173] device bond4 entered promiscuous mode [ 462.080319][T10197] xt_CONNSECMARK: invalid mode: 0 [ 462.432382][ C1] net_ratelimit: 44 callbacks suppressed [ 463.955497][T10215] loop3: detected capacity change from 0 to 16 [ 464.092975][T10215] erofs: (device loop3): mounted with root inode @ nid 36. [ 465.632447][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 465.687366][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1428'. [ 465.711274][T10237] device ip6gre2 entered promiscuous mode [ 466.047287][ T4315] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 466.812351][ T4315] usb 8-1: device descriptor read/64, error -71 [ 466.911397][T10252] loop2: detected capacity change from 0 to 64 [ 467.082341][ T4315] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 467.144182][T10259] netlink: 'syz.4.1436': attribute type 8 has an invalid length. [ 467.178975][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1436'. [ 467.221151][T10259] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.228670][T10259] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.245931][ T4315] usb 8-1: device descriptor read/64, error -71 [ 467.373180][ T4315] usb usb8-port1: attempt power cycle [ 467.872383][ C0] net_ratelimit: 33 callbacks suppressed [ 468.425789][T10275] netlink: 'syz.6.1442': attribute type 4 has an invalid length. [ 468.451912][T10275] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1442'. [ 468.486905][ T4315] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 468.526380][ T4315] usb 8-1: device descriptor read/8, error -71 [ 468.802440][ T4315] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 469.022550][ T4315] usb 8-1: device not accepting address 14, error -71 [ 469.139747][ T4315] usb usb8-port1: unable to enumerate USB device [ 469.751130][T10293] loop6: detected capacity change from 0 to 128 [ 471.848846][ T4436] kworker/u4:10: attempt to access beyond end of device [ 471.848846][ T4436] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 472.912350][ C0] net_ratelimit: 31 callbacks suppressed [ 474.049801][T10340] loop6: detected capacity change from 0 to 256 [ 474.120455][T10343] loop2: detected capacity change from 0 to 512 [ 474.136089][T10340] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 474.470031][T10343] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 474.861143][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 474.861157][ T26] audit: type=1800 audit(2000000189.069:599): pid=10340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1467" name="file1" dev="loop6" ino=1048722 res=0 errno=0 [ 474.974295][T10343] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 475.090007][T10343] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1457: bg 0: block 248: padding at end of block bitmap is not set [ 475.105593][ T26] audit: type=1800 audit(2000000189.279:600): pid=10340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1467" name="file1" dev="loop6" ino=1048722 res=0 errno=0 [ 475.192825][T10343] Quota error (device loop2): write_blk: dquota write failed [ 475.222811][T10343] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 475.244252][T10343] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1457: Failed to acquire dquot type 1 [ 475.300433][T10343] EXT4-fs (loop2): 1 truncate cleaned up [ 475.329125][T10343] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 475.953523][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 476.923476][T10358] loop7: detected capacity change from 0 to 4096 [ 477.077125][T10369] x86/PAT: syz.6.1463:10369 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 477.297409][T10358] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 477.952341][ C1] net_ratelimit: 30 callbacks suppressed [ 478.259942][T10416] loop2: detected capacity change from 0 to 128 [ 478.978418][ T5364] EXT4-fs (loop7): unmounting filesystem. [ 479.019055][T10216] blk_print_req_error: 40 callbacks suppressed [ 479.019067][T10216] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 479.230694][T10430] loop6: detected capacity change from 0 to 512 [ 479.410842][T10430] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 479.473644][T10430] FAT-fs (loop6): Filesystem has been set read-only [ 479.729141][T10443] bond0 speed is unknown, defaulting to 1000 [ 480.850591][T10443] bond0 speed is unknown, defaulting to 1000 [ 483.002339][ C1] net_ratelimit: 29 callbacks suppressed [ 483.224271][T10478] netlink: 'syz.3.1493': attribute type 1 has an invalid length. [ 484.024818][T10478] 8021q: adding VLAN 0 to HW filter on device bond4 [ 484.113493][T10481] netlink: 'syz.7.1494': attribute type 1 has an invalid length. [ 484.284981][T10487] bond4: (slave geneve2): making interface the new active one [ 484.318266][T10487] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 484.393200][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 484.548627][T10512] loop2: detected capacity change from 0 to 2048 [ 484.678899][T10512] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 485.982507][T10537] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1504'. [ 486.689647][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 486.990860][T10549] syz.2.1509: attempt to access beyond end of device [ 486.990860][T10549] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 487.004629][T10549] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 488.691830][ C0] net_ratelimit: 23 callbacks suppressed [ 490.350683][T10582] loop7: detected capacity change from 0 to 1024 [ 490.982918][ T4437] hfsplus: b-tree write err: -5, ino 25 [ 490.988703][ T4437] hfsplus: b-tree write err: -5, ino 4 [ 491.022461][ T4437] hfsplus: b-tree write err: -5, ino 2 [ 491.225143][T10594] netlink: 'syz.2.1524': attribute type 2 has an invalid length. [ 491.512588][ T7096] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 492.476991][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1527'. [ 494.047946][T10656] loop2: detected capacity change from 0 to 1024 [ 494.129905][ C1] net_ratelimit: 37 callbacks suppressed [ 494.660453][ T7096] usb 8-1: unable to get BOS descriptor or descriptor too short [ 494.703608][ T7096] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 494.725855][ T47] hfsplus: b-tree write err: -5, ino 25 [ 494.731592][ T47] hfsplus: b-tree write err: -5, ino 4 [ 494.741790][ T7096] usb 8-1: can't read configurations, error -71 [ 494.779626][ T47] hfsplus: b-tree write err: -5, ino 2 [ 496.877216][T10683] syz.2.1541 (10683): drop_caches: 2 [ 497.098962][T10697] loop2: detected capacity change from 0 to 512 [ 497.148222][T10697] EXT4-fs: Ignoring removed orlov option [ 497.205789][T10700] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 497.254938][T10697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 497.293556][T10697] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.420617][T10713] loop7: detected capacity change from 0 to 512 [ 497.503027][T10713] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 497.630882][T10710] bond5: (slave veth5): Enslaving as an active interface with a down link [ 497.688318][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 498.721294][T10738] loop6: detected capacity change from 0 to 512 [ 498.749301][T10738] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 499.402245][ C0] net_ratelimit: 37 callbacks suppressed [ 499.434487][T10738] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 499.484729][ T5364] EXT4-fs (loop7): unmounting filesystem. [ 500.051979][T10761] loop7: detected capacity change from 0 to 128 [ 500.200320][T10763] syz.7.1561: attempt to access beyond end of device [ 500.200320][T10763] loop7: rw=2049, sector=145, nr_sectors = 160 limit=128 [ 500.332715][T10761] syz.7.1561: attempt to access beyond end of device [ 500.332715][T10761] loop7: rw=524288, sector=145, nr_sectors = 160 limit=128 [ 500.416027][T10761] syz.7.1561: attempt to access beyond end of device [ 500.416027][T10761] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 500.452564][T10761] syz.7.1561: attempt to access beyond end of device [ 500.452564][T10761] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 500.542480][T10761] syz.7.1561: attempt to access beyond end of device [ 500.542480][T10761] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 500.581875][T10761] syz.7.1561: attempt to access beyond end of device [ 500.581875][T10761] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 500.641328][T10761] syz.7.1561: attempt to access beyond end of device [ 500.641328][T10761] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 500.695933][T10761] syz.7.1561: attempt to access beyond end of device [ 500.695933][T10761] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 500.778157][T10761] syz.7.1561: attempt to access beyond end of device [ 500.778157][T10761] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 500.778238][T10761] syz.7.1561: attempt to access beyond end of device [ 500.778238][T10761] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 500.852826][T10769] netlink: 'syz.4.1562': attribute type 4 has an invalid length. [ 500.887398][T10769] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1562'. [ 502.003947][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.010245][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.247031][T10796] tipc: Enabling of bearer rejected, failed to enable media [ 503.508852][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 503.589813][T10798] bond0 speed is unknown, defaulting to 1000 [ 504.432827][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 504.593097][ T4331] net_ratelimit: 29 callbacks suppressed [ 504.857332][T10798] bond0 speed is unknown, defaulting to 1000 [ 505.161056][T10813] bond0 speed is unknown, defaulting to 1000 [ 505.633598][T10813] bond0 speed is unknown, defaulting to 1000 [ 510.112321][ C1] net_ratelimit: 33 callbacks suppressed [ 512.351295][ T26] audit: type=1800 audit(2000000023.870:601): pid=10872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1589" name="cpuset.effective_cpus" dev="sda1" ino=2057 res=0 errno=0 [ 512.692963][T10891] loop7: detected capacity change from 0 to 8 [ 512.985628][T10897] loop6: detected capacity change from 0 to 2048 [ 513.046653][T10897] EXT4-fs: Ignoring removed i_version option [ 513.088129][T10897] EXT4-fs: quotafile must be on filesystem root [ 513.341507][T10900] loop6: detected capacity change from 0 to 1024 [ 513.420716][T10900] hfsplus: invalid extent btree flag [ 513.447789][T10900] hfsplus: failed to load extents file [ 513.780480][T10906] loop2: detected capacity change from 0 to 512 [ 513.925696][T10906] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 513.945139][T10906] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.783101][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 515.552725][T10828] net_ratelimit: 37 callbacks suppressed [ 517.304856][T10963] loop2: detected capacity change from 0 to 512 [ 517.418989][T10963] futex_wake_op: syz.2.1611 tries to shift op by 144; fix this program [ 517.440597][T10963] futex_wake_op: syz.2.1611 tries to shift op by 144; fix this program [ 518.545124][T10974] loop2: detected capacity change from 0 to 256 [ 518.594066][T10899] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 519.005722][T10983] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1617'. [ 519.214903][T10991] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 520.592385][ C0] net_ratelimit: 33 callbacks suppressed [ 520.616131][T11012] loop7: detected capacity change from 0 to 256 [ 520.805018][T10995] loop6: detected capacity change from 0 to 40427 [ 520.876602][T10995] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 520.943011][T10995] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 521.168204][T10995] F2FS-fs (loop6): invalid crc value [ 521.219100][T10995] F2FS-fs (loop6): Found nat_bits in checkpoint [ 521.556238][T10995] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 521.582360][T10995] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 521.688520][T11028] loop2: detected capacity change from 0 to 512 [ 521.743504][T11028] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 521.900224][T11028] EXT4-fs (loop2): 1 truncate cleaned up [ 521.937371][T11028] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 522.254991][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 522.578158][T11045] xt_cgroup: path and classid specified [ 523.788600][T11058] netlink: 'syz.6.1642': attribute type 30 has an invalid length. [ 523.821108][T11058] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1642'. [ 523.859791][T11060] loop7: detected capacity change from 0 to 2048 [ 523.938814][T11060] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 523.963805][T11060] UDF-fs: Scanning with blocksize 512 failed [ 524.022629][T11060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 525.297514][T11071] loop2: detected capacity change from 0 to 1024 [ 525.672667][ C1] net_ratelimit: 41 callbacks suppressed [ 526.192388][T11082] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1649'. [ 526.845546][T11083] device vlan2 left promiscuous mode [ 526.851631][T11083] device bond0 left promiscuous mode [ 526.888416][T11087] loop6: detected capacity change from 0 to 512 [ 526.900653][T11087] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 526.910816][T11087] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 526.920767][T11087] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 526.931680][T11083] device macvlan2 left promiscuous mode [ 526.951877][T11087] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 526.960019][T11087] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e02c, mo2=0000] [ 526.968739][T11087] EXT4-fs (loop6): orphan cleanup on readonly fs [ 526.975216][T11087] EXT4-fs error (device loop6): ext4_quota_enable:7045: comm syz.6.1651: Bad quota inum: 2, type: 1 [ 526.988480][T11087] EXT4-fs (loop6): Remounting filesystem read-only [ 526.991813][T11083] bridge0: port 4(vlan2) entered disabled state [ 526.995150][T11087] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 527.016909][T11087] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 527.023795][T11087] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 528.029356][ T5135] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 3: comm syz-executor: path /310/file0: bad entry in directory: rec_len % 4 != 0 - offset=76, inode=4294818832, rec_len=255, size=4096 fake=0 [ 528.199281][ T5135] EXT4-fs error (device loop6): ext4_lookup:1864: inode #2: comm syz-executor: deleted inode referenced: 12 [ 528.336641][ T5135] EXT4-fs error (device loop6): ext4_lookup:1864: inode #2: comm syz-executor: deleted inode referenced: 12 [ 529.021345][T11083] device dummy0 left promiscuous mode [ 529.073546][T11083] bridge0: port 3(dummy0) entered disabled state [ 529.153076][T11083] device bridge_slave_1 left promiscuous mode [ 529.183739][T11083] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.287502][T11083] device bridge_slave_0 left promiscuous mode [ 529.334990][T11083] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.541594][T11086] netlink: 'syz.4.1652': attribute type 13 has an invalid length. [ 529.570168][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'. [ 529.583439][T11086] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 531.020573][T11092] EXT4-fs (loop6): unmounting filesystem. [ 531.029321][ C0] net_ratelimit: 33 callbacks suppressed [ 531.230541][T11108] loop7: detected capacity change from 0 to 512 [ 531.594807][T11112] netlink: 'syz.7.1661': attribute type 3 has an invalid length. [ 531.610995][T11112] netlink: 11575 bytes leftover after parsing attributes in process `syz.7.1661'. [ 532.157506][T11120] loop7: detected capacity change from 0 to 256 [ 532.175161][T11120] exfat: Deprecated parameter 'utf8' [ 532.245963][T11120] exfat: Deprecated parameter 'utf8' [ 532.251328][T11120] exfat: Deprecated parameter 'namecase' [ 532.257359][T11120] exfat: Deprecated parameter 'namecase' [ 532.307754][T11120] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0x917246c7, utbl_chksum : 0xe619d30d) [ 532.793790][T11131] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.821469][T11130] loop7: detected capacity change from 0 to 512 [ 532.851206][T11131] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.861197][T11131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.894482][T11116] ceph: No mds server is up or the cluster is laggy [ 532.930828][T11130] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 532.952474][T11130] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.099376][T11131] team0: Port device bridge0 added [ 533.135373][T11132] bridge1: port 1(erspan0) entered disabled state [ 533.154623][T11137] FAULT_INJECTION: forcing a failure. [ 533.154623][T11137] name fail_futex, interval 1, probability 0, space 0, times 1 [ 533.206677][T11132] team0: Failed to send port change of device bridge0 via netlink (err -105) [ 533.220654][T11137] CPU: 0 PID: 11137 Comm: syz.7.1667 Not tainted syzkaller #0 [ 533.228187][T11137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 533.238272][T11137] Call Trace: [ 533.241571][T11137] [ 533.244528][T11137] dump_stack_lvl+0x188/0x24e [ 533.249248][T11137] ? lockdep_hardirqs_on+0x94/0x140 [ 533.254496][T11137] ? show_regs_print_info+0x12/0x12 [ 533.259739][T11137] ? load_image+0x410/0x410 [ 533.259769][T11137] ? __schedule+0x1087/0x4030 [ 533.259799][T11137] should_fail_ex+0x390/0x4c0 [ 533.259828][T11137] get_futex_key+0x1b1/0x1000 [ 533.259854][T11137] ? futex_setup_timer+0xc0/0xc0 [ 533.259870][T11137] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 533.259895][T11137] ? __lock_acquire+0x7ea0/0x7ea0 [ 533.259915][T11137] ? preempt_schedule+0xbc/0xd0 [ 533.259936][T11137] futex_wait_setup+0xb8/0x270 [ 533.259956][T11137] ? futex_wait_multiple+0x920/0x920 [ 533.259974][T11137] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 533.278540][T11137] ? _raw_spin_unlock+0x40/0x40 [ 533.278580][T11137] futex_wait+0x1b8/0x5c0 [ 533.278607][T11137] ? futex_wait_setup+0x270/0x270 [ 533.294572][T11137] do_futex+0x310/0x320 [ 533.294606][T11137] ? __ia32_sys_get_robust_list+0x100/0x100 [ 533.294627][T11137] ? __sys_bind+0x328/0x3e0 [ 533.304231][T11137] __se_sys_futex+0x381/0x410 [ 533.304261][T11137] ? __x64_sys_futex+0xf0/0xf0 [ 533.304285][T11137] ? __x64_sys_futex+0x1d/0xf0 [ 533.333883][T11137] do_syscall_64+0x4c/0xa0 [ 533.333913][T11137] ? clear_bhb_loop+0x60/0xb0 [ 533.353914][T11137] ? clear_bhb_loop+0x60/0xb0 [ 533.353950][T11137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.353971][T11137] RIP: 0033:0x7f766a59e1d9 [ 533.353989][T11137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.354004][T11137] RSP: 002b:00007f766b4ce0e8 EFLAGS: 00000246 [ 533.363191][T11137] ORIG_RAX: 00000000000000ca [ 533.363207][T11137] RAX: ffffffffffffffda RBX: 00007f766a826098 RCX: 00007f766a59e1d9 [ 533.363220][T11137] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f766a826098 [ 533.363233][T11137] RBP: 00007f766a826090 R08: 0000000000000000 R09: 0000000000000000 [ 533.363244][T11137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.363254][T11137] R13: 00007f766a826128 R14: 00007ffdb76ba930 R15: 00007ffdb76baa18 [ 533.363279][T11137] [ 533.501533][T11132] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.559400][T11132] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 533.593120][T11132] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 533.627602][T11132] device ip6gre2 left promiscuous mode [ 533.642936][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 533.656382][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 533.667771][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 533.703488][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 533.712958][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 533.721873][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 533.956240][ T5364] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 534.034278][ T5364] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 534.091521][ T5364] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 534.138081][ T5364] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 534.173626][ T5364] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 534.206802][ T5364] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 534.243914][ T5364] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 534.276421][ T5364] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 534.319642][ T5364] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 535.793714][T11141] Bluetooth: hci3: command 0x0409 tx timeout [ 535.882832][ T5364] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 536.598879][T10825] net_ratelimit: 28 callbacks suppressed [ 536.674527][T11139] bond0 speed is unknown, defaulting to 1000 [ 536.869709][T11157] netlink: 'syz.2.1675': attribute type 1 has an invalid length. [ 536.905992][T11158] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1675'. [ 536.927984][T11159] netlink: 'syz.2.1675': attribute type 1 has an invalid length. [ 537.048917][T11139] bond0 speed is unknown, defaulting to 1000 [ 537.872558][T11141] Bluetooth: hci3: command 0x041b tx timeout [ 537.911749][ T5364] EXT4-fs (loop7): unmounting filesystem. [ 539.513076][T11164] loop2: detected capacity change from 0 to 32768 [ 539.604817][T11164] JBD2: Ignoring recovery information on journal [ 539.962383][T11141] Bluetooth: hci3: command 0x040f tx timeout [ 540.091895][T11164] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 540.759740][T11139] chnl_net:caif_netlink_parms(): no params data found [ 540.775671][ T4270] ocfs2: Unmounting device (7,2) on (node local) [ 541.712732][ T4413] net_ratelimit: 42 callbacks suppressed [ 542.032466][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 542.703442][T11198] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 542.732063][T11198] CIFS: Attempting to mount \\127.0.0.1\share [ 542.739071][T11198] CIFS: VFS: No username specified [ 543.778106][T11141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 543.928213][T11141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 543.968132][T11141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 543.992189][T11141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 544.016166][T11141] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 544.028353][T11141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 544.550444][T11219] loop2: detected capacity change from 0 to 1024 [ 544.570796][T11219] hfsplus: unable to parse mount options [ 544.778479][T11207] bond0 speed is unknown, defaulting to 1000 [ 545.004077][T11227] xt_TPROXY: Can be used only with -p tcp or -p udp [ 545.425114][T10834] tipc: Left network mode [ 545.499984][T11139] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.603943][T11139] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.714111][T11139] device bridge_slave_0 entered promiscuous mode [ 546.354427][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 546.736259][ C0] net_ratelimit: 32 callbacks suppressed [ 546.954460][T11139] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.976135][T11139] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.033671][T11139] device bridge_slave_1 entered promiscuous mode [ 547.070802][T11207] bond0 speed is unknown, defaulting to 1000 [ 547.393541][T11139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.443268][T11261] device ip6gre3 entered promiscuous mode [ 547.494452][T11139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.747304][ T5697] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 547.762203][ T5697] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 547.793479][ T7093] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 547.859452][T11256] bond0 speed is unknown, defaulting to 1000 [ 548.187328][T11139] team0: Port device team_slave_0 added [ 548.305870][T11139] team0: Port device team_slave_1 added [ 548.332605][ T5697] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 548.340893][T11256] bond0 speed is unknown, defaulting to 1000 [ 548.432415][T11141] Bluetooth: hci2: command 0x041b tx timeout [ 548.576248][T11139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.618894][T11139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.672741][ T5697] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 548.716894][T11139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.873847][T11139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.880821][T11139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.944846][T11139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.329190][T11278] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 549.350565][T11278] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.357938][T11278] bridge0: port 2(bridge_slave_1) entered listening state [ 549.367509][T11278] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.374801][T11278] bridge0: port 1(bridge_slave_0) entered listening state [ 549.588322][T10834] bond0: (slave wlan1): Releasing backup interface [ 549.693291][T11280] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.702135][T11280] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.711059][T11280] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.720179][T11280] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.732964][T11280] bond0: (slave vxlan0): Enslaving as a backup interface with an up link [ 549.808705][T11139] device hsr_slave_0 entered promiscuous mode [ 549.826562][T11139] device hsr_slave_1 entered promiscuous mode [ 549.845280][T11139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.862555][T11139] Cannot create hsr debugfs directory [ 550.083758][T10834] ------------[ cut here ]------------ [ 550.090283][T10834] WARNING: CPU: 0 PID: 10834 at net/mac80211/iface.c:532 ieee80211_do_stop+0x1b35/0x2060 [ 550.100279][T10834] Modules linked in: [ 550.104244][T10834] CPU: 0 PID: 10834 Comm: kworker/u4:28 Not tainted syzkaller #0 [ 550.111969][T10834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 550.122198][T10834] Workqueue: netns cleanup_net [ 550.127385][T10834] RIP: 0010:ieee80211_do_stop+0x1b35/0x2060 [ 550.133373][T10834] Code: f7 49 81 c4 98 06 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 ef 04 00 00 41 ff 0c 24 e9 f9 f5 ff ff e8 7b 22 d4 f7 <0f> 0b e9 f0 e8 ff ff e8 6f 22 d4 f7 48 c7 c7 c0 25 a7 8b 89 de e8 [ 550.153313][T10834] RSP: 0018:ffffc900037873e0 EFLAGS: 00010293 [ 550.159569][T10834] RAX: ffffffff89ae2405 RBX: 0000000000000001 RCX: ffff888026e71e00 [ 550.167742][T10834] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 550.167767][T10834] RBP: ffffc900037875c8 R08: ffffc90003787287 R09: 1ffff920006f0e50 [ 550.167781][T10834] R10: dffffc0000000000 R11: fffff520006f0e51 R12: ffffc90003787530 [ 550.191807][T10834] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880678ca760 [ 550.199940][T10834] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 550.208928][T10834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 550.215584][T10834] CR2: 00007ffd4993dc5c CR3: 000000007c96d000 CR4: 00000000003506f0 [ 550.223629][T10834] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 550.231720][T10834] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 550.239762][T10834] Call Trace: [ 550.243158][T10834] [ 550.246110][T10834] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 550.246148][T10834] ? rcu_is_watching+0x11/0xa0 [ 550.246179][T10834] ? __mutex_lock+0x1ab/0xae0 [ 550.262224][T10834] ? ieee80211_sdata_stop+0x80/0x80 [ 550.267541][T10834] ? mutex_lock_nested+0x10/0x10 [ 550.272596][T10834] ? __local_bh_enable_ip+0x136/0x1c0 [ 550.278022][T10834] ? dev_deactivate_many+0xb49/0xcd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 550.283396][T10834] ieee80211_stop+0x41f/0x490 [ 550.288116][T10834] ? dev_deactivate_many+0x242/0xcd0 [ 550.293476][T10834] ? ieee80211_open+0x200/0x200 [ 550.298364][T10834] __dev_close_many+0x1d1/0x2b0 [ 550.303270][T10834] ? dev_close_many+0x400/0x400 [ 550.308123][T10834] ? __schedule+0x1087/0x4030 [ 550.312851][T10834] dev_close_many+0x21c/0x400 [ 550.317564][T10834] ? __dev_open+0x430/0x430 [ 550.317592][T10834] ? __lock_acquire+0x7ea0/0x7ea0 [ 550.327103][T10834] ? do_raw_spin_lock+0x128/0x2f0 [ 550.327132][T10834] dev_close+0x154/0x210 [ 550.336372][T10834] ? __dev_close_many+0x2b0/0x2b0 [ 550.336398][T10834] ? do_raw_spin_unlock+0x11d/0x230 [ 550.346627][T10834] cfg80211_shutdown_all_interfaces+0xab/0x1c0 [ 550.353237][T10834] ieee80211_remove_interfaces+0x192/0x700 [ 550.353268][T10834] ? ieee80211_unregister_hw+0x51/0x290 [ 550.353295][T10834] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 550.365001][T10834] ? ieee80211_do_stop+0x2060/0x2060 [ 550.365041][T10834] ? atomic_notifier_chain_unregister+0xf1/0x100 [ 550.365064][T10834] ieee80211_unregister_hw+0x59/0x290 [ 550.377040][T10834] mac80211_hwsim_del_radio+0x285/0x480 [ 550.388745][T10834] ? rhashtable_remove_fast+0xc50/0xc50 [ 550.400042][T10834] hwsim_exit_net+0x589/0x650 [ 550.404849][T10834] ? hwsim_init_net+0x80/0x80 [ 550.409555][T10834] ? __ip_vs_dev_cleanup_batch+0x234/0x250 [ 550.415430][T10834] cleanup_net+0x703/0xba0 [ 550.419886][T10834] ? ops_free_list+0x3b0/0x3b0 [ 550.424696][T10834] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 550.430624][T10834] ? _raw_spin_unlock+0x40/0x40 [ 550.435550][T10834] ? _raw_spin_unlock_irq+0x1f/0x40 [ 550.440796][T10834] ? process_one_work+0x7b4/0x1160 [ 550.445980][T10834] process_one_work+0x8ab/0x1160 [ 550.450960][T10834] ? worker_detach_from_pool+0x240/0x240 [ 550.456669][T10834] ? _raw_spin_lock_irq+0xb7/0xf0 [ 550.461728][T10834] ? _raw_spin_lock_irqsave+0x100/0x100 [ 550.467348][T10834] ? wq_worker_running+0x97/0x190 [ 550.472435][T10834] worker_thread+0xaf5/0x12a0 [ 550.477173][T10834] kthread+0x29d/0x330 [ 550.481279][T10834] ? worker_clr_flags+0x1a0/0x1a0 [ 550.486368][T10834] ? kthread_blkcg+0xd0/0xd0 [ 550.490992][T10834] ret_from_fork+0x1f/0x30 [ 550.495542][T10834] [ 550.498603][T10834] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 550.505901][T10834] CPU: 0 PID: 10834 Comm: kworker/u4:28 Not tainted syzkaller #0 [ 550.512493][T11141] Bluetooth: hci2: command 0x040f tx timeout [ 550.512510][T11141] hci2: err 0x6e [ 550.512570][T11141] hci2 cmd_cnt 1 cmd queued 1 [ 550.512585][T11141] hci2: skb ffff88802a78d280 [ 550.512613][T11141] hci2 type 1 len 13 [ 550.520159][ T4258] nf_conntrack: normal packet for ffff888077cc2000 [ 550.520182][ T4258] tcp_conntracks: [ 550.520189][ T4258] syn=0 ack=1 fin=1 rst=0 old=4 new=6 [ 550.520272][ T4258] No more buffers in queue [ 550.520282][ T4258] eth0: xmit ffff88805e8c7770 42:01:0a:80:00:01 [ 550.520302][ T4258] Added buffer head 23 to ffff888027e40600 [ 550.520335][ C1] virtqueue callback for ffff888027e40600 (ffffffff858ab890) [ 550.520358][ C1] Sent skb ffff88805e8c7770 [ 550.520371][ C1] No more buffers in queue [ 550.524245][ T4269] kcov: kcov_task_exit: t = ffff88801b3c9e00, kcov->t = ffff88801b3c9e00 [ 550.527093][T11125] kcov: kcov_task_exit: t = ffff888074068000, kcov->t = ffff888074068000 [ 550.546157][ T4257] tcp_conntracks: [ 550.546170][ T4257] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 550.546252][ T4257] No more buffers in queue [ 550.546261][ T4257] eth0: xmit ffff88805e8c79f0 42:01:0a:80:00:01 [ 550.546281][ T4257] Added buffer head 23 to ffff888027e40600 [ 550.546313][ C1] virtqueue callback for ffff888027e40600 (ffffffff858ab890) [ 550.546337][ C1] Sent skb ffff88805e8c79f0 [ 550.546349][ C1] No more buffers in queue [ 550.546455][ T4257] tcp_conntracks: [ 550.546462][ T4257] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 550.546515][ T4257] No more buffers in queue [ 550.546522][ T4257] eth0: xmit ffff88805e8c6370 42:01:0a:80:00:01 [ 550.546581][ T4257] Added buffer head 23 to ffff888027e40600 [ 550.547058][ C1] virtqueue callback for ffff888027e40600 (ffffffff858ab890) [ 550.547078][ C1] Sent skb ffff88805e8c6370 [ 550.547090][ C1] No more buffers in queue [ 550.562331][ C1] tcp_conntracks: [ 550.562344][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 550.562429][ C1] No more buffers in queue [ 550.562438][ C1] eth0: xmit ffff88805e8c6370 42:01:0a:80:00:01 [ 550.562459][ C1] Added buffer head 23 to ffff888027e40600 [ 550.562490][ C1] virtqueue callback for ffff888027e40600 (ffffffff858ab890) [ 550.564395][ C1] Sent skb ffff88805e8c6370 [ 550.564411][ C1] No more buffers in queue [ 550.592567][ T5697] nf_conntrack: normal packet for ffff888075703800 [ 550.733176][T10834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 550.743232][T10834] Workqueue: netns cleanup_net [ 550.747998][T10834] Call Trace: [ 550.751281][T10834] [ 550.754209][T10834] dump_stack_lvl+0x188/0x24e [ 550.758886][T10834] ? memcpy+0x3c/0x60 [ 550.762868][T10834] ? show_regs_print_info+0x12/0x12 [ 550.768096][T10834] ? load_image+0x410/0x410 [ 550.772609][T10834] panic+0x2d3/0x710 [ 550.776516][T10834] ? bpf_jit_dump+0xd0/0xd0 [ 550.781044][T10834] ? ret_from_fork+0x1f/0x30 [ 550.785640][T10834] __warn+0x2f8/0x4f0 [ 550.789625][T10834] ? ieee80211_do_stop+0x1b35/0x2060 [ 550.794912][T10834] ? ieee80211_do_stop+0x1b35/0x2060 [ 550.800198][T10834] report_bug+0x2ba/0x4f0 [ 550.804534][T10834] ? ieee80211_do_stop+0x1b35/0x2060 [ 550.809832][T10834] handle_bug+0x3a/0x70 [ 550.813987][T10834] exc_invalid_op+0x16/0x40 [ 550.818488][T10834] asm_exc_invalid_op+0x16/0x20 [ 550.823338][T10834] RIP: 0010:ieee80211_do_stop+0x1b35/0x2060 [ 550.829230][T10834] Code: f7 49 81 c4 98 06 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 ef 04 00 00 41 ff 0c 24 e9 f9 f5 ff ff e8 7b 22 d4 f7 <0f> 0b e9 f0 e8 ff ff e8 6f 22 d4 f7 48 c7 c7 c0 25 a7 8b 89 de e8 [ 550.848843][T10834] RSP: 0018:ffffc900037873e0 EFLAGS: 00010293 [ 550.854933][T10834] RAX: ffffffff89ae2405 RBX: 0000000000000001 RCX: ffff888026e71e00 [ 550.862917][T10834] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 550.870885][T10834] RBP: ffffc900037875c8 R08: ffffc90003787287 R09: 1ffff920006f0e50 [ 550.878852][T10834] R10: dffffc0000000000 R11: fffff520006f0e51 R12: ffffc90003787530 [ 550.886854][T10834] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880678ca760 [ 550.894854][T10834] ? ieee80211_do_stop+0x1b35/0x2060 [ 550.900155][T10834] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 550.906139][T10834] ? rcu_is_watching+0x11/0xa0 [ 550.910929][T10834] ? __mutex_lock+0x1ab/0xae0 [ 550.915611][T10834] ? ieee80211_sdata_stop+0x80/0x80 [ 550.920817][T10834] ? mutex_lock_nested+0x10/0x10 [ 550.925755][T10834] ? __local_bh_enable_ip+0x136/0x1c0 [ 550.931155][T10834] ? dev_deactivate_many+0xb49/0xcd0 [ 550.936448][T10834] ieee80211_stop+0x41f/0x490 [ 550.941133][T10834] ? dev_deactivate_many+0x242/0xcd0 [ 550.946424][T10834] ? ieee80211_open+0x200/0x200 [ 550.951269][T10834] __dev_close_many+0x1d1/0x2b0 [ 550.956115][T10834] ? dev_close_many+0x400/0x400 [ 550.960957][T10834] ? __schedule+0x1087/0x4030 [ 550.965635][T10834] dev_close_many+0x21c/0x400 [ 550.970310][T10834] ? __dev_open+0x430/0x430 [ 550.974809][T10834] ? __lock_acquire+0x7ea0/0x7ea0 [ 550.979827][T10834] ? do_raw_spin_lock+0x128/0x2f0 [ 550.984846][T10834] dev_close+0x154/0x210 [ 550.989087][T10834] ? __dev_close_many+0x2b0/0x2b0 [ 550.994105][T10834] ? do_raw_spin_unlock+0x11d/0x230 [ 550.999300][T10834] cfg80211_shutdown_all_interfaces+0xab/0x1c0 [ 551.005454][T10834] ieee80211_remove_interfaces+0x192/0x700 [ 551.011254][T10834] ? ieee80211_unregister_hw+0x51/0x290 [ 551.016796][T10834] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 551.022684][T10834] ? ieee80211_do_stop+0x2060/0x2060 [ 551.027973][T10834] ? atomic_notifier_chain_unregister+0xf1/0x100 [ 551.034296][T10834] ieee80211_unregister_hw+0x59/0x290 [ 551.039666][T10834] mac80211_hwsim_del_radio+0x285/0x480 [ 551.045212][T10834] ? rhashtable_remove_fast+0xc50/0xc50 [ 551.050756][T10834] hwsim_exit_net+0x589/0x650 [ 551.055434][T10834] ? hwsim_init_net+0x80/0x80 [ 551.060112][T10834] ? __ip_vs_dev_cleanup_batch+0x234/0x250 [ 551.065920][T10834] cleanup_net+0x703/0xba0 [ 551.070336][T10834] ? ops_free_list+0x3b0/0x3b0 [ 551.075117][T10834] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 551.081011][T10834] ? _raw_spin_unlock+0x40/0x40 [ 551.085877][T10834] ? _raw_spin_unlock_irq+0x1f/0x40 [ 551.091075][T10834] ? process_one_work+0x7b4/0x1160 [ 551.096186][T10834] process_one_work+0x8ab/0x1160 [ 551.101138][T10834] ? worker_detach_from_pool+0x240/0x240 [ 551.106767][T10834] ? _raw_spin_lock_irq+0xb7/0xf0 [ 551.111788][T10834] ? _raw_spin_lock_irqsave+0x100/0x100 [ 551.117429][T10834] ? wq_worker_running+0x97/0x190 [ 551.122462][T10834] worker_thread+0xaf5/0x12a0 [ 551.127162][T10834] kthread+0x29d/0x330 [ 551.131224][T10834] ? worker_clr_flags+0x1a0/0x1a0 [ 551.136249][T10834] ? kthread_blkcg+0xd0/0xd0 [ 551.140835][T10834] ret_from_fork+0x1f/0x30 [ 551.145261][T10834] [ 551.148571][T10834] Kernel Offset: disabled [ 551.153027][T10834] Rebooting in 86400 seconds..