last executing test programs: 16m46.047357752s ago: executing program 0 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$fscrypt_v1(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"]) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) keyctl$chown(0x4, r3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x14, &(0x7f0000000140)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) 16m34.570928883s ago: executing program 0 (id=150): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f00000004c0)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000194c0)={0x40000000, 0x0, &(0x7f0000019500)={&(0x7f0000019540)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f0000019580)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f00000195c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000019600)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffa, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r4, &(0x7f0000019700), 0x800001d, 0x1c) 16m30.795361495s ago: executing program 0 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) prlimit64(r1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x9) socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019500)={0x0, 0x0, 0x0}, 0x4004045) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = add_key(&(0x7f0000019600)='big_key\x00', &(0x7f0000019640)={'syz', 0x0}, &(0x7f0000019680)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000196c0)=""/4096, 0x1000) keyctl$read(0xb, r4, &(0x7f000001a6c0)=""/4096, 0x1000) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 16m16.899520132s ago: executing program 0 (id=178): socket$inet(0x2, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x18, r4, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(r5, &(0x7f0000000540)='1', 0x1) 16m11.025794396s ago: executing program 0 (id=184): ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x22000) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = memfd_create(&(0x7f0000000e00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b80), 0x10106, 0x2, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x8000) ioctl$TIOCGSERIAL(r3, 0x541e, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in6=@local, 0x4e28, 0x0, 0x4e20, 0xf000, 0x2}, {0x5, 0x802, 0x913e, 0x0, 0xfffffffffffffffc, 0xfffefffffffff207, 0x5}, {0x0, 0x401, 0x1000, 0x7}, 0x3, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@loopback, 0x4d6, 0x33}, 0x0, @in6=@local, 0x3507, 0x0, 0x2, 0x4, 0x6, 0x1000, 0xfffffffa}}, 0xe8) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) userfaultfd(0x80001) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001140)={0x0, 0x400, 0x0, 'queue0\x00', 0x800000}) write$sndseq(0xffffffffffffffff, &(0x7f0000001200)=[{0x22, 0x0, 0x0, 0x0, @tick=0x2000, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) 10m11.09934802s ago: executing program 1 (id=573): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 10m6.397393466s ago: executing program 1 (id=585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCFLSH(0xffffffffffffffff, 0x800455cc, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x34}}, 0x0) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x3, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f00000003c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x2, 0x3}, "ef135044a7a4"}}}}}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x5, 0xf4, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000440), 0x101000) 10m3.844168635s ago: executing program 1 (id=579): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='utf8,sbsector=0x000000007fffffff,map=normal,check=strict,cruft,norock,session=0x000000000000002c,cruft,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,map=off,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c2cd4362430010845e1b9ec7176abd28b48bec636a87350b332c49a0841157d2d46675e9057189078afc98a81ec76778f8cc2db0478c1bb137d2727841d312faaf95dbeb068f1704de54e3235836018016effbff0e32366d751d23d0f0232dc962c5ab672049862ddd8a0721fa2c59e695f7dddf2f9c63a45f2c0591fc8223990da9c21172bb96989ee816bb90dd87ef66b2e94980991698e45197f30d11c078a95fe683fa3171b0b8e516745"], 0x1, 0x9d7, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', 0x0, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003d40)=ANY=[@ANYBLOB="240000001e008d2a"], 0x24}}, 0x4044) write$P9_RMKNOD(r0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, 0x0) ioctl$TIOCPKT(r2, 0x5420, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x2000c12, &(0x7f0000000ec0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,session=0x0000000000000023,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRES32=r2, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303004332c0091386ba63f775915b6b981669f99a6758fc6130e2e181f075ed46c0b97ee8c6ce2d08017924dd527144bf683e31335a3b7f24e5a1a93da15e92a08550215ecc4070da2db21d6ac07dadb5cb173d0b41818198ff783f10620b9875eeda06e2edde06600000000"], 0x1, 0xa4c, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, 0x0, 0x40080, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000001ac0)='./sys\x00', 0x1ff) setns(0xc9, 0x0) mount(0x0, &(0x7f0000001b00)='./proc\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001b40)='./proc\x00', 0x410402, 0x0) read$FUSE(r3, &(0x7f0000001b80)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000003bc0)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) socket$inet6(0xa, 0x1, 0x5) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000003c00), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000003c40)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46, 0x43, 0x50, 0x50, 0x46, 0x4f, 0x4f]}, 0x3a) 10m0.303635083s ago: executing program 1 (id=583): openat$kvm(0xffffffffffffff9c, 0x0, 0x171840, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x143102) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000600)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0x1c3902, 0x0) r4 = fsopen(&(0x7f0000000740)='nfs\x00', 0x0) r5 = syz_open_dev$audion(&(0x7f0000000780), 0x0, 0x101100) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f00000007c0)={0x0, 0x6, {}, {}, 0x7f, 0x7}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000800)='addr\x00', 0x0, 0x0) sendfile(r3, r3, 0x0, 0x200000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x3}}}, 0xb8}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000008c0)={0x2, 0x3, 0x1, 0xa, 0x1, [0x3ff, 0xffff, 0x5, 0x3]}) 9m55.923872947s ago: executing program 1 (id=592): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sched_setparam(r0, &(0x7f0000000180)=0x1ff) r4 = socket(0x40000000015, 0x5, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000380)='./md0\x00', 0x6180, 0x0) r5 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000440)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r5, 0x40480923, 0x0) ioctl$STOP_ARRAY(r5, 0x932, 0x0) ioctl$RUN_ARRAY(r5, 0x400c0930, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x4004810) ioctl$STOP_ARRAY(r5, 0x932, 0x0) getsockname$netlink(r4, 0x0, 0x0) 9m53.588690683s ago: executing program 33 (id=592): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sched_setparam(r0, &(0x7f0000000180)=0x1ff) r4 = socket(0x40000000015, 0x5, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000380)='./md0\x00', 0x6180, 0x0) r5 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000440)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r5, 0x40480923, 0x0) ioctl$STOP_ARRAY(r5, 0x932, 0x0) ioctl$RUN_ARRAY(r5, 0x400c0930, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x4004810) ioctl$STOP_ARRAY(r5, 0x932, 0x0) getsockname$netlink(r4, 0x0, 0x0) 6m14.933544798s ago: executing program 2 (id=836): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000000440)=""/102400, 0x19000) socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0x87) socket(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000019740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019800)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000019840)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000019880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x200, 0x1, 0xffffffff, 0x0, r6}}], 0x1, 0x0, 0x0) 6m10.853892901s ago: executing program 2 (id=841): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001000)=@ublk_del_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) 6m5.649780108s ago: executing program 2 (id=846): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00'}) io_setup(0x8, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) pselect6(0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002d80)={0x4, 0x0, r2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000002dc0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002e00)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000002e80)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_pool='delete 0'}}) 6m4.470526997s ago: executing program 2 (id=848): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, r0, 0xd6d18000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f00000004c0)=""/102392, 0x18ff8) getpgid(r1) mkdir(&(0x7f00000194c0)='./cgroup/../file0\x00', 0x0) syz_open_dev$sndpcmp(&(0x7f0000019500), 0xae, 0x800) stat(&(0x7f0000019540)='./cgroup/../file0\x00', 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000019600), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000019640)=0x79, 0x4) bind$inet(r0, &(0x7f0000019680)={0x2, 0x4e23, @multicast1}, 0x10) setrlimit(0xd, &(0x7f00000196c0)={0xc800, 0xffffffff}) sendto$inet(r0, 0x0, 0x8b, 0x240467bc, &(0x7f0000019700)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000019740)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6c", 0x94, 0x10000485, 0x0, 0x0) 6m2.400815187s ago: executing program 2 (id=850): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)='n', 0x1}], 0x1}, 0x0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000640)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019640)=0x7) poll(0x0, 0x0, 0x9) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000005c0)={0x0, 0xd, 0x7a8, 0x6, 0x5}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000600)=@gcm_128={{0x304}, "a442d382c54ada46", "a052c19af1989723e07ff96da3c03220", "858b4cd4", "3cbd06915516da56"}, 0x28) 5m55.862002599s ago: executing program 2 (id=858): sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket(0x18, 0x5, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e26, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) io_getevents(0x0, 0x2e5, 0x0, &(0x7f0000000280), &(0x7f0000000300)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x10000, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)=""/146, &(0x7f00000004c0)=0x92) r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x141102) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000880)) r3 = syz_open_pts(r2, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000008c0)=0xf) ioctl$TCSBRK(r3, 0x400455c8, 0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000900)=0x1) 5m39.612314535s ago: executing program 34 (id=858): sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket(0x18, 0x5, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e26, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) io_getevents(0x0, 0x2e5, 0x0, &(0x7f0000000280), &(0x7f0000000300)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x10000, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)=""/146, &(0x7f00000004c0)=0x92) r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x141102) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000880)) r3 = syz_open_pts(r2, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000008c0)=0xf) ioctl$TCSBRK(r3, 0x400455c8, 0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000900)=0x1) 5m6.957861162s ago: executing program 3 (id=896): mount(&(0x7f0000000180)=@filename='none\x00', 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x143102) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) fsopen(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}, 0x24008054) sendmsg$tipc(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000800)={0x0, [[0xffffffff, 0xffffffff, 0x12e, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x1, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xfffffffc, 0xffffffff], [0xffffffff, 0x1, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x80, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x3, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000a80)=0x4) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000ac0)=0x4) 5m5.329145257s ago: executing program 3 (id=899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0xdf80, &(0x7f0000000080)={0x0, 0x3, 0xd}) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@stripe={'stripe', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5bc, &(0x7f0000001600)="$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") socket$unix(0x1, 0x1, 0x0) 5m2.284394555s ago: executing program 3 (id=901): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000100)={0x0, &(0x7f0000000180)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) rt_sigqueueinfo(r0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) sendmmsg$unix(r6, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048010}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c, 0x117}}], 0x20}}], 0x2, 0x1) request_key(&(0x7f0000000280)='syzkaller\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', 0xfffffffffffffffe) 5m0.283143378s ago: executing program 3 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x20040400) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000080)={@my=0x0}) flock(r1, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r5, 0x1) 4m58.225285446s ago: executing program 3 (id=906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300), 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000340)='dns_resolver\x00', 0x0, &(0x7f0000000480)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335ab", 0x2f, r3) keyctl$search(0xa, r3, &(0x7f0000000540)='dns_resolver\x00', &(0x7f0000000580)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) keyctl$read(0xb, r3, &(0x7f00000005c0)=""/17, 0x11) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000840)={0x28, 0x2, r5, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r5, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000100)={0x28, 0x7, r6, r5, 0xa0, 0x6fff, 0x3ffe}) 4m56.198140912s ago: executing program 3 (id=915): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) unshare(0x44040000) signalfd(0xffffffffffffffff, &(0x7f000000e240)={[0x7]}, 0x8) socket$netlink(0x10, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x446240, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x40000) recvmsg$unix(r0, 0x0, 0x40000002) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$vim2m(&(0x7f000000e580), 0x40001029d9c892, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0xa, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f000000e600)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r2], 0x7) 4m40.855780825s ago: executing program 35 (id=915): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) unshare(0x44040000) signalfd(0xffffffffffffffff, &(0x7f000000e240)={[0x7]}, 0x8) socket$netlink(0x10, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x446240, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x40000) recvmsg$unix(r0, 0x0, 0x40000002) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$vim2m(&(0x7f000000e580), 0x40001029d9c892, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0xa, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f000000e600)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r2], 0x7) 2m18.272023616s ago: executing program 5 (id=1065): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x9, 0x0, &(0x7f00000000c0)) clock_gettime(0x7, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x403, 0x1ffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r2}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) 2m17.694877264s ago: executing program 5 (id=1068): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0xff) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2m11.999116571s ago: executing program 5 (id=1073): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) openat$drirender128(0xffffffffffffff9c, 0x0, 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000000480)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x3, 0x9) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./debug\x00', 0x1ff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') write$binfmt_script(r4, &(0x7f0000019480)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000280), 0x4003) r5 = gettid() ptrace$getsig(0x4202, r5, 0x8, &(0x7f00000002c0)) sendmmsg$inet6(r3, &(0x7f0000000280), 0x40000000000017d, 0x888) 2m9.315071323s ago: executing program 5 (id=1075): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2m6.685035919s ago: executing program 5 (id=1082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000400)=0xfffffffe) mount(&(0x7f0000000680)=@filename='./dev/sda1\x00', &(0x7f0000000780)='./mnt\x00', &(0x7f00000007c0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000800)='./mnt\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file2\x00', 0x18d042, 0x15) move_mount(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') umount2(&(0x7f0000000380)='./file0\x00', 0x8) pwrite64(r4, &(0x7f0000000880)="ff", 0x58200, 0xfb2200) 2m2.518272101s ago: executing program 5 (id=1085): syz_mount_image$udf(&(0x7f0000002080), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x43, 0x495, &(0x7f0000000540)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x20, 0x3, 0x208, 0x98, 0xa, 0x148, 0x98, 0x10, 0x2c8, 0x2a8, 0x2a8, 0x2c8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff000000, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0x70, 0x98, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x6}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'pimreg1\x00', 'tunl0\x00', {}, {}, 0x20, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x7, 0x9, 0x1, '\x00', 'syz0\x00', {0x7fffffffffffffff}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x268) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r5 = fanotify_init(0x40, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000380)=""/245) fanotify_mark(r5, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) 1m45.388508836s ago: executing program 36 (id=1085): syz_mount_image$udf(&(0x7f0000002080), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x43, 0x495, &(0x7f0000000540)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x20, 0x3, 0x208, 0x98, 0xa, 0x148, 0x98, 0x10, 0x2c8, 0x2a8, 0x2a8, 0x2c8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff000000, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0x70, 0x98, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x6}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'pimreg1\x00', 'tunl0\x00', {}, {}, 0x20, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x7, 0x9, 0x1, '\x00', 'syz0\x00', {0x7fffffffffffffff}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x268) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r5 = fanotify_init(0x40, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000380)=""/245) fanotify_mark(r5, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) 19.400404335s ago: executing program 6 (id=1263): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="000020060520052a3e261690df7754ea6804f72e882b2a5c49c1c7a367918ed00c717f202fa06726f0dbf980"], 0xb) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) prlimit64(r0, 0x3, &(0x7f0000000200)={0xa, 0x8}, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000680)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000800), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000019840)=0x6) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) gettid() r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000019880), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r5, 0x43403d0e, 0x0) pipe2(0x0, 0x80000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) process_vm_writev(r1, &(0x7f0000000340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1, &(0x7f0000001880)=[{0x0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/45, 0x2d}, {&(0x7f0000000100)=""/95, 0x5f}], 0x4, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000580)={0x3, &(0x7f0000000540)=[{0x2, 0x9, 0x4, 0x4}, {0x95c3, 0x2, 0x8, 0x4}, {0x5, 0x9, 0x2}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 17.615666045s ago: executing program 6 (id=1264): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) openat$drirender128(0xffffffffffffff9c, 0x0, 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') 16.975908801s ago: executing program 8 (id=1265): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x50, 0x20}, {0x20, 0x0, 0x0, 0x8000b98}, {0x6}]}, 0x10) r0 = io_uring_setup(0x76fc, &(0x7f0000000080)={0x0, 0x3c3b, 0x1000, 0x5, 0x2d2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000004c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./trace\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, 0x0) acct(&(0x7f0000000800)='./trace/trace\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x10, 0x5, &(0x7f0000000640)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, &(0x7f0000000680)='GPL\x00'}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000005e00cb7b27bd", @ANYRES32=0x0, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x8d33864195c5c22f}, 0x60400c0) r4 = io_uring_setup(0x7625, &(0x7f0000000140)={0x0, 0x653f, 0x10000, 0x0, 0x28e, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f00000001c0)=[r0], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34d30}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 15.819960297s ago: executing program 8 (id=1267): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000540)=[{&(0x7f0000000580)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x18, 0x14001}], 0x1, 0x4044040) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r4 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./pipefs\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x0, 0x0) bind$unix(r4, &(0x7f0000000200)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r4, 0x5) write(0xffffffffffffffff, &(0x7f00000002c0)='1', 0x1) 15.487969351s ago: executing program 6 (id=1269): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000380)=0x4) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4403, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000040)) fsopen(&(0x7f0000000000)='overlay\x00', 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 14.717956279s ago: executing program 8 (id=1270): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000540)=[{&(0x7f0000000580)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x18, 0x14001}], 0x1, 0x4044040) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r4 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./pipefs\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x0, 0x0) bind$unix(r4, &(0x7f0000000200)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r4, 0x5) write(0xffffffffffffffff, &(0x7f00000002c0)='1', 0x1) 13.683697394s ago: executing program 7 (id=1272): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/time_for_children\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB], 0x40}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x5, 0x0) getsockopt$bt_hci(r5, 0x84, 0x1, &(0x7f0000000480)=""/4052, &(0x7f0000001480)=0xfd4) r6 = syz_open_dev$vim2m(&(0x7f00000014c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000001500)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000001540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 12.312454013s ago: executing program 6 (id=1273): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x169802, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002380)='./tracing\x00', 0x1ff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000023c0)='./tracing\x00', &(0x7f0000002600)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002640)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x141880, 0x134) dup(r2) openat$snapshot(0xffffffffffffff9c, 0x0, 0x121001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) read$char_usb(r2, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x2000, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)={0x78, 0x0, 0x7, {0x0, 0x0, 0x0, {0xfffdffffffffffff, 0x8, 0x3, 0x8, 0x2, 0x0, 0x200800, 0x0, 0x0, 0x4000, 0xbca4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000002400)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000024c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 12.292660265s ago: executing program 8 (id=1274): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000001940)=""/102392, 0x18ff8) r4 = epoll_create1(0x80000) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000280)=0x5, 0x4) r6 = socket(0x1, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f00000001c0)={0x10000001}) setns(0xc9, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000430001000200000000000000020000000e"], 0x3c}}, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000200)={0x60000008}) 12.034194961s ago: executing program 4 (id=1275): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, r4, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 10.694783396s ago: executing program 7 (id=1276): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000003c0)='./debug\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/lru_gen\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000480), 0x100, 0x3f00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200000, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000540)='cgroup.controllers\x00', 0x0, 0x0) read(r5, &(0x7f0000000580)=""/100, 0x64) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r6) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r8, &(0x7f00000001c0)='m', 0x1) 10.693667557s ago: executing program 4 (id=1277): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) openat$drirender128(0xffffffffffffff9c, 0x0, 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') 7.352217325s ago: executing program 7 (id=1278): r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000200)={0x200000000000000, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000480)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0x0, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 7.20739022s ago: executing program 8 (id=1279): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, r4, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 7.137877167s ago: executing program 4 (id=1280): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x9, 0x0, &(0x7f00000000c0)) clock_gettime(0x7, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x403, 0x1ffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r2}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1df) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uac2.0/p_chmask\x00', 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) write(r3, &(0x7f00000005c0)='0', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='dummy_udc.0', 0xb) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) 7.136946057s ago: executing program 6 (id=1281): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, r0, 0xd6d18000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f00000004c0)=""/102392, 0x18ff8) getpgid(r1) mkdir(&(0x7f00000194c0)='./cgroup/../file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) stat(&(0x7f0000019540)='./cgroup/../file0\x00', 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000019600), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000019640)=0x79, 0x4) bind$inet(r0, &(0x7f0000019680)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet6(0xa, 0x80002, 0x0) setrlimit(0xd, &(0x7f00000196c0)={0xc800, 0xffffffff}) setreuid(0x0, 0xee01) sendto$inet(r0, 0x0, 0x8b, 0x240467bc, &(0x7f0000019700)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000019740)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) 5.457018197s ago: executing program 7 (id=1282): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000540)=[{&(0x7f0000000580)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x18, 0x14001}], 0x1, 0x4044040) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r4 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./pipefs\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x0, 0x0) bind$unix(r4, &(0x7f0000000200)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r5, &(0x7f00000002c0)='1', 0x1) 5.386472544s ago: executing program 6 (id=1283): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(0x0, &(0x7f00000000c0)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) close(r3) r4 = epoll_create1(0x0) poll(&(0x7f0000000a80)=[{r4, 0x251}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) shutdown(r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x2000200b}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 5.058020448s ago: executing program 4 (id=1284): syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0x2e1c11, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_io_uring_setup(0x31c5, 0x0, &(0x7f0000000340), 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3c5f, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000500)=""/92, 0x5c, 0x4000000000000f3) r4 = socket$kcm(0x23, 0x5, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40c0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000640)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1000, 0x0) acct(0x0) 4.126036702s ago: executing program 7 (id=1285): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x9, 0x0, &(0x7f00000000c0)) clock_gettime(0x7, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x403, 0x1ffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r2}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1df) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uac2.0/p_chmask\x00', 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) execve(0x0, &(0x7f00000004c0)={[&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', &(0x7f0000000740)='%]:-%0j\x92\x80\xf0\x91\x87\\\x84', &(0x7f0000000440)='%]:-%0j\x92\x80\xf0\x91\x87\\\x84']}, &(0x7f00000006c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='dummy_udc.0', 0xb) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) 3.264785939s ago: executing program 4 (id=1286): ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00'}) io_setup(0x8, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) pselect6(0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0) ioctl$DM_DEV_SUSPEND(0xffffffffffffffff, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000d40)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002d80)={0x4, 0x0, r1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000002dc0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002e00)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000002e80)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$DM_TARGET_MSG(0xffffffffffffffff, 0xc138fd0e, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_pool='delete 0'}}) 2.95751735s ago: executing program 4 (id=1287): socket(0x18, 0x3, 0x0) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000080)='./file0\x00') socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x3, 0x76) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x3, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8) close(r1) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x8, 0x2, 0x158}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r6, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2.718406574s ago: executing program 7 (id=1288): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) openat$drirender128(0xffffffffffffff9c, 0x0, 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') 0s ago: executing program 8 (id=1289): mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000001080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000010c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001240), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001280)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000012c0)={'rti802\x00', [0x100, 0x4, 0x13600, 0x4, 0x0, 0x10005, 0x79, 0x0, 0x80008, 0x8, 0x2, 0x64, 0x5, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0x6, 0xca9f, 0x9, 0x20001e58, 0x3, 0xf39e, 0x7ff, 0x1539b804, 0x7, 0x801, 0x2]}) sched_setscheduler(0x0, 0x2, &(0x7f0000001380)=0x6) mount$tmpfs(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400), 0x400, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000014c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000001500)={0x0, 0xfffffffffffffe26, &(0x7f0000001540)={&(0x7f0000001580)={0x2c, r4, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) r7 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r7, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) ioctl$ADD_NEW_DISK(r7, 0x40140921, &(0x7f0000000300)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r7, 0x40140921, &(0x7f0000000340)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r7, 0x400c0930, &(0x7f0000000380)) kernel console output (not intermixed with test programs): 072516][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 574.938167][ T8708] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 577.777309][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 577.789500][ T6284] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 578.092980][ T8736] device-mapper: thin: Data device (ram5) discard unsupported: Disabling discard passdown. [ 579.341501][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 579.352652][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 583.596978][ T6468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 583.611530][ T6286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 587.798445][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'. [ 587.809825][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'. [ 589.182133][ T6284] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 589.295439][ T6284] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 589.431029][ T8810] loop3: detected capacity change from 0 to 1024 [ 592.329104][ T8810] EXT4-fs: Ignoring removed i_version option [ 592.406989][ T8810] EXT4-fs: Ignoring removed bh option [ 592.451379][ T8810] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 592.992482][ T8810] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 593.838655][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'. [ 593.849586][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'. [ 596.128113][ T28] audit: type=1400 audit(1794295294.729:189): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8831 comm="syz.1.558" [ 596.175148][ T2977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 596.175956][ T2997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 596.234415][ T8838] fuse: Unknown parameter 'user_i00000000000000000000' [ 596.603268][ T8838] loop2: detected capacity change from 0 to 8192 [ 596.673466][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 596.685219][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 596.703922][ T8838] loop2: p1 p2 p3 p4[EZD] [ 596.734785][ T8838] loop2: partition table partially beyond EOD, truncated [ 596.742122][ T8838] loop2: p1 start 16384 is beyond EOD, truncated [ 596.769192][ T8838] loop2: p2 size 150994944 extends beyond EOD, truncated [ 596.788474][ T8838] loop2: p3 start 67108864 is beyond EOD, truncated [ 596.802993][ T8838] loop2: p4 size 33555584 extends beyond EOD, truncated [ 596.924597][ T2184] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 597.136327][ T2184] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.160215][ T2184] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 597.189351][ T2184] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 597.208380][ T2184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.228569][ T2184] usb 3-1: Product: syz [ 597.232809][ T2184] usb 3-1: Manufacturer: syz [ 597.243477][ T2184] usb 3-1: SerialNumber: syz [ 597.370256][ T2184] usb 3-1: config 0 descriptor?? [ 598.899738][ T5852] usb 3-1: USB disconnect, device number 2 [ 599.276195][ T8871] loop3: detected capacity change from 0 to 736 [ 600.932837][ T8846] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 600.996052][ T8876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.586328][ T6286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 601.633827][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 601.645943][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 604.725325][ T8891] loop2: detected capacity change from 0 to 128 [ 605.355558][ T8891] syz.2.570: attempt to access beyond end of device [ 605.355558][ T8891] loop2: rw=2049, sector=145, nr_sectors = 208 limit=128 [ 605.442458][ T6468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 606.002740][ T8891] syz.2.570: attempt to access beyond end of device [ 606.002740][ T8891] loop2: rw=524288, sector=145, nr_sectors = 208 limit=128 [ 606.032800][ T8891] syz.2.570: attempt to access beyond end of device [ 606.032800][ T8891] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 606.053800][ T8891] syz.2.570: attempt to access beyond end of device [ 606.053800][ T8891] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 606.078160][ T8891] syz.2.570: attempt to access beyond end of device [ 606.078160][ T8891] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 608.317869][ T8909] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 609.395477][ T2977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 612.102338][ T6468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 613.308511][ T8923] loop1: detected capacity change from 0 to 1764 [ 613.524848][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 613.583943][ T8929] loop4: detected capacity change from 0 to 128 [ 613.667955][ T8929] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 613.683376][ T8929] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 613.701165][ T8926] loop1: detected capacity change from 0 to 1764 [ 613.759515][ T8923] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 613.804827][ T8926] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 614.708299][ T8936] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 615.015672][ T2997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 615.170319][ T6997] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 615.596743][ T5790] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 615.658350][ T5790] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 615.706762][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'. [ 615.923100][ T8947] Bluetooth: MGMT ver 1.22 [ 617.359747][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 617.370555][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 617.644570][ T28] audit: type=1326 audit(1794295317.299:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.2.587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f95a8f19 code=0x7ffc0000 [ 617.735862][ T28] audit: type=1326 audit(1794295317.299:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.2.587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f95a8f19 code=0x7ffc0000 [ 617.824130][ T28] audit: type=1326 audit(1794295317.299:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.2.587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f95a8f19 code=0x7ffc0000 [ 617.829446][ T8957] device-mapper: thin: Data device (ram9) discard unsupported: Disabling discard passdown. [ 617.884777][ T28] audit: type=1326 audit(1794295317.309:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.2.587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f31f95a8f19 code=0x7ffc0000 [ 617.933149][ T28] audit: type=1326 audit(1794295317.309:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.2.587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f95a8f19 code=0x7ffc0000 [ 617.995730][ T28] audit: type=1326 audit(1794295317.309:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.2.587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f95a8f19 code=0x7ffc0000 [ 618.070648][ T28] audit: type=1326 audit(1794295317.309:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.2.587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f95a8f19 code=0x7ffc0000 [ 618.106197][ T6286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 618.125830][ T28] audit: type=1326 audit(1794295317.309:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.2.587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f95a8f19 code=0x7ffc0000 [ 618.183496][ T28] audit: type=1326 audit(1794295317.339:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.2.587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f95a8f19 code=0x7ffc0000 [ 618.235021][ T28] audit: type=1326 audit(1794295317.339:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.2.587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f95a8f19 code=0x7ffc0000 [ 618.524109][ T8543] Bluetooth: hci2: ISO packet for unknown connection handle 201 [ 619.274621][ T5873] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 619.494559][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 619.722995][ T8543] Bluetooth: hci4: command 0x0406 tx timeout [ 619.905080][ T5873] usb 3-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 619.916917][ T5873] usb 3-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 619.929991][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 619.937162][ T5873] usb 3-1: New USB device found, idVendor=056a, idProduct=ffff, bcdDevice= 0.00 [ 619.947220][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.961064][ T5873] usb 3-1: config 0 descriptor?? [ 620.152239][ T8981] netlink: 64 bytes leftover after parsing attributes in process `syz.3.591'. [ 620.211549][ T6286] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.655278][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 622.159440][ T5873] wacom 0003:056A:FFFF.0001: Unknown device_type for 'HID 056a:ffff'. Ignoring. [ 622.249224][ T6286] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.428895][ T6286] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.452403][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 622.463306][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 622.472738][ T5848] usb 3-1: USB disconnect, device number 3 [ 622.678490][ T6286] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.811059][ T8999] device-mapper: thin: Data device (ram9) discard unsupported: Disabling discard passdown. [ 622.931775][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 623.159935][ T9007] loop3: detected capacity change from 0 to 512 [ 624.160027][ T2977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 624.511631][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.571964][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.682112][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 624.699877][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 624.726714][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 624.736038][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 624.757013][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 624.764388][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 625.275905][ T9016] rxe_eth0 speed is unknown, defaulting to 1000 [ 625.414047][ T9027] loop3: detected capacity change from 0 to 256 [ 626.362498][ T9027] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 626.375053][ T9027] exFAT-fs (loop3): failed to load alloc-bitmap [ 626.381449][ T9027] exFAT-fs (loop3): failed to recognize exfat type [ 626.727300][ T9023] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 626.738059][ T9023] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 626.864834][ T5789] Bluetooth: hci0: command tx timeout [ 627.056802][ T6468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 627.425350][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 627.436079][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 629.044609][ T5789] Bluetooth: hci0: command tx timeout [ 630.428451][ T6466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 631.056136][ T5789] Bluetooth: hci0: command tx timeout [ 631.332977][ T9016] chnl_net:caif_netlink_parms(): no params data found [ 631.732956][ T9061] loop2: detected capacity change from 0 to 1024 [ 631.740138][ T9061] EXT4-fs: Ignoring removed orlov option [ 631.746103][ T9061] EXT4-fs: Invalid want_extra_isize 221 [ 632.102865][ T9062] __vm_enough_memory: pid: 9062, comm: syz.2.608, not enough memory for the allocation [ 633.454520][ T5789] Bluetooth: hci0: command tx timeout [ 633.494554][ T8966] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 633.793610][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.835234][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.842517][ T9016] bridge_slave_0: entered allmulticast mode [ 633.878578][ T9016] bridge_slave_0: entered promiscuous mode [ 634.104938][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.113327][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.144835][ T9016] bridge_slave_1: entered allmulticast mode [ 634.152396][ T9016] bridge_slave_1: entered promiscuous mode [ 634.306479][ T28] kauditd_printk_skb: 347 callbacks suppressed [ 634.306495][ T28] audit: type=1326 audit(1794295333.979:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.4.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806fba8f19 code=0x7ffc0000 [ 634.394271][ T9016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.416661][ T28] audit: type=1326 audit(1794295334.009:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.4.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806fba8f19 code=0x7ffc0000 [ 634.476478][ T28] audit: type=1326 audit(1794295334.009:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.4.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806fba8f19 code=0x7ffc0000 [ 634.569446][ T9016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.610449][ T28] audit: type=1326 audit(1794295334.019:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.4.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f806fba8f19 code=0x7ffc0000 [ 634.669353][ T28] audit: type=1326 audit(1794295334.019:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.4.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806fba8f19 code=0x7ffc0000 [ 634.694023][ T28] audit: type=1326 audit(1794295334.019:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.4.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806fba8f19 code=0x7ffc0000 [ 634.718155][ T28] audit: type=1326 audit(1794295334.019:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.4.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806fba8f19 code=0x7ffc0000 [ 634.763553][ T28] audit: type=1326 audit(1794295334.019:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.4.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f806fba8f19 code=0x7ffc0000 [ 634.802853][ T28] audit: type=1326 audit(1794295334.019:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.4.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806fba8f19 code=0x7ffc0000 [ 634.842537][ T28] audit: type=1326 audit(1794295334.019:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.4.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806fba8f19 code=0x7ffc0000 [ 634.865858][ T9076] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 634.984796][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.614'. [ 635.036934][ T9016] team0: Port device team_slave_0 added [ 635.075200][ T9016] team0: Port device team_slave_1 added [ 635.378965][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.404672][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.486189][ T5852] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 635.498534][ T9016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.575134][ T6286] hsr_slave_0: left promiscuous mode [ 635.581290][ T6286] hsr_slave_1: left promiscuous mode [ 635.619619][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.764734][ T5852] usb 5-1: Using ep0 maxpacket: 8 [ 635.833374][ T6286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.873644][ T5852] usb 5-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 636.017490][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 636.037150][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.066950][ T5852] usb 5-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 636.393458][ T5852] usb 5-1: config 0 interface 0 has no altsetting 0 [ 636.403417][ T5852] usb 5-1: New USB device found, idVendor=056a, idProduct=ffff, bcdDevice= 0.00 [ 636.412594][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.431627][ T5852] usb 5-1: config 0 descriptor?? [ 636.481073][ T6286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.542388][ T6286] bridge_slave_1: left allmulticast mode [ 636.558416][ T6286] bridge_slave_1: left promiscuous mode [ 636.582902][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.609877][ T6286] bridge_slave_0: left allmulticast mode [ 638.420851][ T6286] bridge_slave_0: left promiscuous mode [ 638.444918][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.498512][ T5852] usbhid 5-1:0.0: can't add hid device: -71 [ 638.532925][ T5852] usbhid: probe of 5-1:0.0 failed with error -71 [ 638.533034][ T6286] veth1_macvtap: left promiscuous mode [ 638.564732][ T5852] usb 5-1: USB disconnect, device number 5 [ 638.564764][ T6286] veth0_macvtap: left promiscuous mode [ 638.599073][ T6286] veth1_vlan: left promiscuous mode [ 638.604378][ T6286] veth0_vlan: left promiscuous mode [ 638.968240][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 638.982705][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 642.145978][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 645.243155][ T6286] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 646.430453][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 648.114035][ T28] kauditd_printk_skb: 110 callbacks suppressed [ 648.114055][ T28] audit: type=1400 audit(1794295346.729:667): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9119 comm="syz.4.619" [ 648.144333][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 648.367593][ T9124] loop2: detected capacity change from 0 to 2048 [ 648.460391][ T9124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 648.992308][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.617'. [ 649.037187][ T9130] x_tables: duplicate underflow at hook 1 [ 649.045808][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.617'. [ 649.272881][ T6286] team0 (unregistering): Port device team_slave_1 removed [ 649.437904][ T6286] team0 (unregistering): Port device team_slave_0 removed [ 649.536255][ T6286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.812698][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'. [ 649.827661][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'. [ 650.630598][ T6286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.860640][ T9143] device-mapper: thin: Data device (ram5) discard unsupported: Disabling discard passdown. [ 653.605708][ T6466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 653.626951][ T6571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 653.739840][ T6286] bond0 (unregistering): Released all slaves [ 653.831320][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.840272][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.868045][ T9016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.232562][ T9016] hsr_slave_0: entered promiscuous mode [ 654.255878][ T9016] hsr_slave_1: entered promiscuous mode [ 654.275843][ T9016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 654.324544][ T9016] Cannot create hsr debugfs directory [ 655.477059][ T6286] IPVS: stop unused estimator thread 0... [ 657.966159][ T28] audit: type=1400 audit(1794295356.609:668): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9175 comm="syz.2.627" [ 658.085271][ T9178] device-mapper: thin: Data device (ram9) discard unsupported: Disabling discard passdown. [ 658.181793][ T9187] loop3: detected capacity change from 0 to 2048 [ 658.250665][ T9016] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 658.280251][ T9187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 658.308822][ T9016] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 658.319842][ T9016] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 658.342056][ T9016] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 658.563066][ T9191] x_tables: duplicate underflow at hook 1 [ 659.057047][ T6450] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 659.072728][ T6283] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 659.390309][ T28] audit: type=1400 audit(1794295359.059:669): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9193 comm="syz.4.639" [ 659.466235][ T9016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.537232][ T9016] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.562344][ T6450] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.569604][ T6450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.767364][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.774626][ T6450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.763036][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'. [ 661.773877][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'. [ 663.640783][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'. [ 665.415382][ T6571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 665.417643][ T6466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 665.520515][ T9016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.102622][ T9244] loop4: detected capacity change from 0 to 2048 [ 666.217987][ T9244] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 666.412127][ T9016] veth0_vlan: entered promiscuous mode [ 666.536154][ T9016] veth1_vlan: entered promiscuous mode [ 667.476929][ T9016] veth0_macvtap: entered promiscuous mode [ 667.513337][ T9016] veth1_macvtap: entered promiscuous mode [ 667.605865][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.620597][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'. [ 667.633903][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'. [ 667.654465][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.664312][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.703995][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.724493][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.744495][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.768995][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.808819][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.832037][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.855290][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.890094][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.911399][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.464491][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.533327][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.044226][ T9016] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.053094][ T9016] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.062045][ T9016] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.070835][ T9016] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.476963][ T6283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.506233][ T6466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.525051][ T6283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.555151][ T6466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.585715][ T28] audit: type=1400 audit(1794295369.239:670): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9284 comm="syz.4.652" [ 670.583756][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 670.596395][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 672.209055][ T6286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 672.209055][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 672.482346][ T9300] loop4: detected capacity change from 0 to 764 [ 674.989358][ T9316] device-mapper: table: 248:6: thin-pool: Error opening metadata block device (-ENOENT) [ 675.024675][ T9316] device-mapper: ioctl: error adding target to table [ 675.127049][ T9318] device-mapper: ioctl: The device has no table. [ 677.953371][ T6450] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 677.965340][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 679.836634][ T28] audit: type=1400 audit(1794295379.506:671): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9325 comm="syz.4.654" [ 681.326490][ T9340] loop5: detected capacity change from 0 to 256 [ 681.365516][ T9340] exfat: Unknown parameter '0x0000000000000000' [ 681.456779][ T9342] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 682.764393][ T9349] tty tty31: ldisc open failed (-12), clearing slot 30 [ 683.503079][ T6450] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 683.514928][ T6571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 683.901435][ T9361] i2c i2c-0: new_device: Missing parameters [ 685.944978][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.951357][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.051664][ T9371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.659'. [ 686.062308][ T9371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.659'. [ 687.728855][ T28] audit: type=1400 audit(1794295387.386:672): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9372 comm="syz.4.663" [ 688.195021][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.661'. [ 688.209562][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.661'. [ 689.114960][ T9384] device-mapper: thin: Data device (ram5) discard unsupported: Disabling discard passdown. [ 689.135679][ T2977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 689.156176][ T6466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 690.111461][ T9384] device-mapper: thin: Deletion of thin device 0 failed. [ 691.841015][ T9419] bridge0: port 3(wlan1) entered blocking state [ 691.945268][ T9419] bridge0: port 3(wlan1) entered disabled state [ 692.083319][ T9419] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 692.083529][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 692.167856][ T9419] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 692.306048][ T9413] bridge0: port 3(wlan1) entered disabled state [ 692.400598][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 693.076858][ T9428] xt_connbytes: Forcing CT accounting to be enabled [ 693.990025][ T9413] mac80211_hwsim hwsim15 wlan1 (unregistering): left allmulticast mode [ 694.196262][ T9413] mac80211_hwsim hwsim15 wlan1 (unregistering): left promiscuous mode [ 694.235639][ T9413] bridge0: port 3(wlan1) entered disabled state [ 694.934706][ T6466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 694.951757][ T2977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 697.175729][ T9449] device-mapper: table: 248:6: thin-pool: Error opening metadata block device (-ENOENT) [ 697.207872][ T9449] device-mapper: ioctl: error adding target to table [ 697.247223][ T9449] device-mapper: ioctl: The device has no table. [ 697.531726][ T28] audit: type=1800 audit(1794295398.196:673): pid=9455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.676" name="idVendor" dev="configfs" ino=22354 res=0 errno=0 [ 697.589639][ T28] audit: type=1800 audit(1794295398.256:674): pid=9455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.676" name="idProduct" dev="configfs" ino=22568 res=0 errno=0 [ 697.620894][ T9455] CIFS: Attempting to mount //172.20.20.170/share [ 697.657199][ T9455] CIFS: VFS: Error connecting to socket. Aborting operation. [ 697.685576][ T9455] CIFS: VFS: cifs_mount failed w/return code = -111 [ 697.714465][ T28] audit: type=1800 audit(1794295398.376:675): pid=9458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.676" name="report_length" dev="configfs" ino=22575 res=0 errno=0 [ 698.098928][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 698.111810][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 700.709640][ T6466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 700.732234][ T2977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 700.794710][ T9471] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.802103][ T9471] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.844820][ T9471] bridge0: entered allmulticast mode [ 700.886798][ T9479] bridge_slave_1: left allmulticast mode [ 700.904535][ T9479] bridge_slave_1: left promiscuous mode [ 702.611899][ T9479] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.665384][ T9479] bridge_slave_0: left allmulticast mode [ 702.681924][ T9479] bridge_slave_0: left promiscuous mode [ 702.706312][ T9479] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.744633][ T5852] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 702.810048][ T9479] bond0: (slave bridge0): Releasing backup interface [ 704.567558][ T28] audit: type=1400 audit(1794295404.236:676): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9500 comm="syz.4.683" [ 704.869297][ T9509] device-mapper: thin: Data device (ram5) discard unsupported: Disabling discard passdown. [ 704.945032][ T9509] device-mapper: thin: Deletion of thin device 0 failed. [ 705.612407][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'. [ 705.636148][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'. [ 705.746070][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.687'. [ 705.760168][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.687'. [ 706.426277][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 706.437588][ T6571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 708.235924][ T28] audit: type=1800 audit(1794295407.910:677): pid=9540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.689" name="idVendor" dev="configfs" ino=22455 res=0 errno=0 [ 708.267310][ T9540] CIFS: Attempting to mount //172.20.20.170/share [ 708.282671][ T28] audit: type=1800 audit(1794295407.930:678): pid=9540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.689" name="idProduct" dev="configfs" ino=22456 res=0 errno=0 [ 708.803013][ T9540] CIFS: VFS: Error connecting to socket. Aborting operation. [ 708.939478][ T28] audit: type=1800 audit(1794295408.470:679): pid=9544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.689" name="report_length" dev="configfs" ino=22741 res=0 errno=0 [ 709.083335][ T9540] CIFS: VFS: cifs_mount failed w/return code = -111 [ 710.904475][ T28] audit: type=1400 audit(1794295409.610:680): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9548 comm="syz.3.692" [ 710.953396][ T9547] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.963942][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.994747][ T9547] bridge0: entered allmulticast mode [ 711.041363][ T9553] bridge_slave_1: left allmulticast mode [ 711.064705][ T9553] bridge_slave_1: left promiscuous mode [ 711.070579][ T9553] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.339273][ T9553] bridge_slave_0: left allmulticast mode [ 711.345523][ T9553] bridge_slave_0: left promiscuous mode [ 712.075408][ T9553] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.144556][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 712.176184][ T6466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 712.185124][ T6571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 712.843538][ T23] usb 6-1: unable to read config index 0 descriptor/all [ 712.851215][ T23] usb 6-1: can't read configurations, error -71 [ 712.966418][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 712.980037][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 715.722983][ T9596] loop4: detected capacity change from 0 to 8 [ 718.173865][ T28] audit: type=1400 audit(1794295416.690:681): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9599 comm="syz.2.702" [ 718.203409][ T6286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 718.215719][ T6466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 722.549013][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 722.562775][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 723.748476][ T6571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.276621][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.704'. [ 724.288933][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.704'. [ 726.119651][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.719'. [ 726.131783][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.719'. [ 727.689156][ T28] audit: type=1400 audit(1794295426.390:682): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9692 comm="syz.3.712" [ 727.710503][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.657184][ T6468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 732.986409][ T9729] device-mapper: thin: Data device (ram7) discard unsupported: Disabling discard passdown. [ 733.020625][ T9729] device-mapper: thin: Deletion of thin device 0 failed. [ 733.349859][ T9736] i2c i2c-0: new_device: Missing parameters [ 733.597884][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 735.552708][ T28] audit: type=1400 audit(1794295434.230:683): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9744 comm="syz.5.721" [ 737.682645][ T2997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 739.055149][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 742.814860][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 743.176804][ T9784] loop5: detected capacity change from 0 to 2048 [ 743.252057][ T9784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 745.011686][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 746.876148][ T28] audit: type=1400 audit(1794295445.600:684): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9795 comm="syz.5.733" [ 748.456345][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.459892][ T6571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 748.462783][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.864937][ T9817] device-mapper: thin: Data device (ram5) discard unsupported: Disabling discard passdown. [ 748.922179][ T9817] device-mapper: thin: Deletion of thin device 0 failed. [ 749.390723][ T9828] device-mapper: thin: Deletion of thin device 0 failed. [ 750.311962][ T9839] loop3: detected capacity change from 0 to 1024 [ 750.388532][ T9839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 751.929886][ T6571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 753.932456][ T2997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.653309][ T28] audit: type=1800 audit(1794295454.310:685): pid=9867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.741" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 755.275124][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.418823][ T6466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 758.714191][ T9888] device-mapper: thin: Deletion of thin device 0 failed. [ 758.719660][ T9883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.556298][ T6571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 759.709447][ T9901] device-mapper: thin: Data device (ram9) discard unsupported: Disabling discard passdown. [ 759.815856][ T9901] device-mapper: thin: Deletion of thin device 0 failed. [ 762.167865][ T28] audit: type=1400 audit(1794295460.890:686): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9907 comm="syz.2.742" [ 764.125655][ T6286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 766.761897][ T8543] Bluetooth: hci0: command 0x0406 tx timeout [ 767.245812][ T9924] loop3: detected capacity change from 0 to 2048 [ 767.294282][ T9924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 767.375299][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.754'. [ 767.461522][ T9933] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 767.588430][ T9933] loop5: detected capacity change from 0 to 4096 [ 769.355980][ T9933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.780549][ T6466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 769.965611][ T9016] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.299484][ T9948] device-mapper: table: 248:6: thin-pool: Error opening metadata block device (-ENOENT) [ 771.372656][ T9948] device-mapper: ioctl: error adding target to table [ 771.769377][ T9950] device-mapper: ioctl: The device has no table. [ 772.735450][ T9961] netlink: 'syz.3.757': attribute type 10 has an invalid length. [ 772.839371][ T9947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 772.915973][ T9961] team0: Port device geneve1 added [ 772.935330][ T9962] netlink: 'syz.3.757': attribute type 10 has an invalid length. [ 773.019963][ T9964] device-mapper: thin: Deletion of thin device 0 failed. [ 774.663491][ T9962] team0: Port device geneve1 removed [ 774.702974][ T9962] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 774.903307][ T28] audit: type=1800 audit(1794295474.520:687): pid=9973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.763" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 775.816751][ T6450] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 780.922990][ T2997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 781.118902][ T9984] loop4: detected capacity change from 0 to 512 [ 782.745475][ T2977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 782.846335][ T9989] loop3: detected capacity change from 0 to 128 [ 784.365628][T10003] device-mapper: thin: Deletion of thin device 0 failed. [ 785.346501][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 787.672811][ T6286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 787.693378][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 788.126302][T10013] device-mapper: thin: Data device (ram9) discard unsupported: Disabling discard passdown. [ 789.650159][ T2977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 793.472930][ T6571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 796.015464][ T6466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 798.737753][T10068] loop2: detected capacity change from 0 to 128 [ 798.752686][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 798.994682][T10069] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 799.107773][T10069] loop3: detected capacity change from 0 to 4096 [ 799.522625][ T6466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 799.855767][T10068] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 800.131391][T10069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.965847][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.067671][T10080] fuse: Unknown parameter 'user_i00000000000000000000' [ 801.346817][T10084] loop5: detected capacity change from 0 to 8192 [ 801.991584][ T28] audit: type=1800 audit(1794295501.630:688): pid=10090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.783" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 802.309675][ T2997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 802.795968][T10084] loop5: p1 p2 p3 p4[EZD] [ 802.800461][T10084] loop5: partition table partially beyond EOD, truncated [ 802.844732][T10084] loop5: p1 start 16384 is beyond EOD, truncated [ 802.851134][T10084] loop5: p2 size 150994944 extends beyond EOD, truncated [ 802.905850][T10084] loop5: p3 start 67108864 is beyond EOD, truncated [ 802.954483][T10084] loop5: p4 size 33555584 extends beyond EOD, truncated [ 803.266560][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.794'. [ 803.277587][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.794'. [ 803.981913][ T5852] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 805.733315][ T6468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 806.490221][T10120] loop2: detected capacity change from 0 to 512 [ 806.504767][T10120] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 806.523317][T10120] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 806.719635][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'. [ 807.686661][T10135] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 807.924542][ T28] audit: type=1326 audit(1794295507.280:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.5.796" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f073a5a8f19 code=0x0 [ 807.992003][T10135] loop4: detected capacity change from 0 to 4096 [ 808.193862][ T6466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 808.581149][T10135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.629521][T10123] device-mapper: thin: Data device (ram7) discard unsupported: Disabling discard passdown. [ 808.820712][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.024620][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.025969][T10129] device-mapper: thin: Deletion of thin device 0 failed. [ 809.152603][ T6997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.269741][T10144] device-mapper: table: 248:6: thin-pool: Error opening metadata block device (-ENOENT) [ 809.319393][T10144] device-mapper: ioctl: error adding target to table [ 809.385759][T10142] device-mapper: ioctl: The device has no table. [ 809.410049][T10146] loop4: detected capacity change from 0 to 1764 [ 809.615621][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 810.155323][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 810.172862][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 810.346189][T10150] loop4: detected capacity change from 0 to 1764 [ 810.373846][T10146] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 810.398539][T10146] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 811.379541][ T6283] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 814.840628][ T28] audit: type=1400 audit(1794295513.270:690): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=10169 comm="syz.2.807" [ 814.928714][ T6466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 817.135196][ T6450] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 817.200897][T10189] device-mapper: table: 248:6: thin-pool: Error opening metadata block device (-ENOENT) [ 817.258048][T10189] device-mapper: ioctl: error adding target to table [ 817.354798][T10189] device-mapper: ioctl: The device has no table. [ 817.808611][T10196] loop5: detected capacity change from 0 to 512 [ 817.970787][T10197] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 820.335577][ T6466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 821.093263][T10213] loop5: detected capacity change from 0 to 2048 [ 821.164703][T10213] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 822.496241][T10219] device-mapper: thin: Data device (ram5) discard unsupported: Disabling discard passdown. [ 822.544269][T10219] device-mapper: thin: Deletion of thin device 0 failed. [ 822.590243][T10222] device-mapper: thin: Data device (ram9) discard unsupported: Disabling discard passdown. [ 822.677049][T10222] device-mapper: thin: Deletion of thin device 0 failed. [ 822.895385][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 823.008054][T10230] loop4: detected capacity change from 0 to 512 [ 823.035844][T10230] EXT4-fs: Ignoring removed nobh option [ 823.100234][T10230] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.818: invalid indirect mapped block 256 (level 2) [ 823.223570][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.815'. [ 823.234992][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.815'. [ 823.294754][T10230] EXT4-fs (loop4): 2 truncates cleaned up [ 823.327719][T10230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.734590][T10234] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 824.211954][T10241] x_tables: ip_tables: CT.1 target: invalid size 72 (kernel) != (user) 0 [ 825.052925][T10243] loop2: detected capacity change from 0 to 512 [ 826.741311][ T6450] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 826.779213][ T6997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.877618][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.821'. [ 826.924647][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.821'. [ 827.676572][T10259] loop2: detected capacity change from 0 to 256 [ 827.877971][T10259] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 827.892501][T10259] exFAT-fs (loop2): failed to load alloc-bitmap [ 827.899444][T10259] exFAT-fs (loop2): failed to recognize exfat type [ 828.594976][T10263] device-mapper: thin: Data device (ram9) discard unsupported: Disabling discard passdown. [ 828.663860][ T2977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 828.687110][T10263] device-mapper: thin: Deletion of thin device 0 failed. [ 830.246685][ T28] audit: type=1800 audit(1794295529.220:691): pid=10275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.828" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 830.781141][T10283] loop2: detected capacity change from 0 to 128 [ 832.991462][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 835.697306][ T2977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 836.398986][T10306] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 838.255681][ T6466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 839.564762][T10318] device-mapper: thin: Deletion of thin device 0 failed. [ 839.770453][T10324] loop4: detected capacity change from 0 to 256 [ 840.437308][T10324] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 840.454403][T10324] exFAT-fs (loop4): failed to load alloc-bitmap [ 840.461494][T10324] exFAT-fs (loop4): failed to recognize exfat type [ 841.746969][ T6468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 844.934746][ T6468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 847.653119][ T28] audit: type=1400 audit(1794295546.190:692): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=10348 comm="syz.5.842" [ 847.683337][ T6283] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 848.016869][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.837'. [ 848.068489][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.837'. [ 849.089394][T10367] block device autoloading is deprecated and will be removed. [ 849.161440][T10374] loop5: detected capacity change from 0 to 2048 [ 849.199764][T10374] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 850.373245][T10379] device-mapper: thin: Data device (ram5) discard unsupported: Disabling discard passdown. [ 850.474147][T10386] loop4: detected capacity change from 0 to 512 [ 850.581303][T10379] device-mapper: thin: Deletion of thin device 0 failed. [ 850.648050][T10386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.671247][T10386] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 850.825374][T10393] loop5: detected capacity change from 0 to 256 [ 851.053772][T10393] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 851.068993][T10393] exFAT-fs (loop5): failed to load alloc-bitmap [ 851.076188][T10393] exFAT-fs (loop5): failed to recognize exfat type [ 851.516339][T10386] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.615030][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 853.649314][T10401] device-mapper: table: 248:6: thin-pool: Error opening metadata block device (-ENOENT) [ 853.692218][T10401] device-mapper: ioctl: error adding target to table [ 853.736238][T10404] device-mapper: ioctl: The device has no table. [ 855.592353][ T28] audit: type=1400 audit(1794295554.040:693): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=10403 comm="syz.3.851" [ 855.632939][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 856.059324][T10412] syz.5.855 (10412): /proc/10411/oom_adj is deprecated, please use /proc/10411/oom_score_adj instead. [ 859.780874][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 860.397876][T10425] lo speed is unknown, defaulting to 1000 [ 860.410311][T10425] lo speed is unknown, defaulting to 1000 [ 860.511872][T10425] lo speed is unknown, defaulting to 1000 [ 860.633822][T10422] capability: warning: `syz.5.856' uses 32-bit capabilities (legacy support in use) [ 860.660623][T10425] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 860.754104][T10425] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 861.300179][ T6571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 861.802065][T10425] lo speed is unknown, defaulting to 1000 [ 861.835936][T10425] lo speed is unknown, defaulting to 1000 [ 861.842964][T10425] lo speed is unknown, defaulting to 1000 [ 861.856048][T10425] lo speed is unknown, defaulting to 1000 [ 865.255609][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 867.888436][ T6468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 870.265113][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.271634][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.457189][ T6283] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 876.113171][ T6286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 876.128672][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 878.302905][T10484] netlink: 48 bytes leftover after parsing attributes in process `syz.3.871'. [ 879.567862][T10481] loop5: detected capacity change from 0 to 512 [ 879.944860][T10481] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 880.048605][T10481] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.869: invalid indirect mapped block 256 (level 1) [ 880.166517][T10481] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.869: invalid indirect mapped block 2683928664 (level 1) [ 880.277604][T10481] EXT4-fs (loop5): 1 truncate cleaned up [ 880.381282][T10481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 880.805413][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 880.834652][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 880.854641][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 880.892804][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 880.901518][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 880.909158][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 881.209857][T10495] rxe_eth0 speed is unknown, defaulting to 1000 [ 881.840320][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 881.852119][ T6283] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 882.299373][ T9016] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.305454][ T5789] Bluetooth: hci1: command tx timeout [ 884.860434][T10495] lo speed is unknown, defaulting to 1000 [ 885.910631][ T6571] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.053892][T10495] chnl_net:caif_netlink_parms(): no params data found [ 886.209542][ T6571] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.406298][ T5789] Bluetooth: hci1: command tx timeout [ 887.407362][ T6571] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.704440][ T5789] Bluetooth: hci1: command tx timeout [ 889.739234][ T6466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 889.776536][ T2997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 890.121199][ T6571] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.059617][ T5789] Bluetooth: hci1: command tx timeout [ 892.225830][T10495] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.233127][T10495] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.264690][T10495] bridge_slave_0: entered allmulticast mode [ 892.272318][T10495] bridge_slave_0: entered promiscuous mode [ 892.340694][T10495] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.364834][T10495] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.372131][T10495] bridge_slave_1: entered allmulticast mode [ 892.396789][T10495] bridge_slave_1: entered promiscuous mode [ 892.589288][T10495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.628213][T10495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.881948][T10495] team0: Port device team_slave_0 added [ 892.921177][T10495] team0: Port device team_slave_1 added [ 893.513753][T10556] rxe_eth0 speed is unknown, defaulting to 1000 [ 893.864955][T10556] lo speed is unknown, defaulting to 1000 [ 894.106603][T10495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.121323][T10495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.154157][T10495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.244570][T10495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.251718][T10495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.384547][T10495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.632755][ T6571] tipc: Left network mode [ 895.215481][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 895.237718][ T6466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 895.325865][T10495] hsr_slave_0: entered promiscuous mode [ 897.371286][T10495] hsr_slave_1: entered promiscuous mode [ 897.476916][T10495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 897.524522][T10495] Cannot create hsr debugfs directory [ 899.186779][T10584] loop5: detected capacity change from 0 to 4096 [ 901.087738][ T6468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 901.919326][T10495] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 902.145988][T10615] ip_tables: iptables: counters copy to user failed while replacing table [ 902.189458][T10495] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 902.258218][T10495] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 903.549730][ T6571] hsr_slave_0: left promiscuous mode [ 903.588145][T10627] loop3: detected capacity change from 0 to 1024 [ 903.615920][T10627] EXT4-fs: Ignoring removed bh option [ 903.624676][ T6571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.654477][ T6571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.672452][T10627] EXT4-fs (loop3): stripe (54450) is not aligned with cluster size (16), stripe is disabled [ 903.960133][ T6571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 904.644524][ T6571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.653357][ T6571] bridge_slave_1: left allmulticast mode [ 904.660414][T10627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.668406][ T6571] bridge_slave_1: left promiscuous mode [ 904.716543][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.775593][ T6571] bridge_slave_0: left allmulticast mode [ 904.794430][ T6571] bridge_slave_0: left promiscuous mode [ 904.811348][ T6571] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.569684][ T6571] veth1_macvtap: left promiscuous mode [ 905.578769][ T6571] veth0_macvtap: left promiscuous mode [ 905.601471][ T6571] veth1_vlan: left promiscuous mode [ 905.617548][ T6571] veth0_vlan: left promiscuous mode [ 907.374880][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 907.933833][ T6571] team0 (unregistering): Port device team_slave_1 removed [ 907.999119][ T6571] team0 (unregistering): Port device team_slave_0 removed [ 908.063849][ T6571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 908.122227][ T6571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 908.605678][ T6571] bond0 (unregistering): Released all slaves [ 908.692337][T10495] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 908.793216][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.895'. [ 908.932035][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.206952][T10656] device-mapper: table: 248:6: thin-pool: Error opening metadata block device (-ENOENT) [ 909.293477][T10656] device-mapper: ioctl: error adding target to table [ 910.125182][T10656] device-mapper: ioctl: The device has no table. [ 910.286595][T10495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.392387][T10495] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.451181][ T6283] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.458420][ T6283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.520727][ T6466] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.527955][ T6466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.217030][T10672] loop3: detected capacity change from 0 to 512 [ 913.246894][T10672] EXT4-fs (loop3): Test dummy encryption mode enabled [ 913.275684][ T6283] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 913.357596][T10672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 913.809375][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.092952][T10495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.425157][ T6468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.617501][T10696] loop3: detected capacity change from 0 to 16 [ 915.155494][T10696] erofs: (device loop3): mounted with root inode @ nid 36. [ 915.235774][T10693] syz.3.901: attempt to access beyond end of device [ 915.235774][T10693] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 915.262730][T10693] trusted_key: syz.3.901 sent an empty control message without MSG_MORE. [ 916.331453][T10495] veth0_vlan: entered promiscuous mode [ 916.463584][T10495] veth1_vlan: entered promiscuous mode [ 916.812492][T10495] veth0_macvtap: entered promiscuous mode [ 916.911579][T10495] veth1_macvtap: entered promiscuous mode [ 916.971105][T10495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.001573][T10495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.033201][T10495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.055217][T10495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.089991][T10495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.110912][T10495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.161719][T10495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.207087][T10495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.228308][T10495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.250807][T10495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.280561][T10495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.300033][T10495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.311320][T10495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.333662][T10495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.400506][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.904'. [ 917.411464][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.904'. [ 917.586542][T10495] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.644597][T10495] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.683560][T10495] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.728681][T10495] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.019126][T10730] loop5: detected capacity change from 0 to 1024 [ 918.097119][T10730] EXT4-fs: Ignoring removed bh option [ 918.410007][T10730] EXT4-fs (loop5): stripe (54450) is not aligned with cluster size (16), stripe is disabled [ 918.739665][T10730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 918.892090][ T6571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.902901][ T6571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.910955][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 919.403868][ T6468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.448033][ T6468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.549340][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 919.799806][ T9016] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.053526][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.868'. [ 920.829240][T10749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.905797][T10758] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 921.163862][T10758] loop6: detected capacity change from 0 to 4096 [ 921.823930][T10758] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 922.382939][T10754] rxe_eth0 speed is unknown, defaulting to 1000 [ 923.461434][T10495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.005113][T10777] loop5: detected capacity change from 0 to 16 [ 924.296880][T10777] erofs: (device loop5): mounted with root inode @ nid 36. [ 924.324997][T10777] syz.5.910: attempt to access beyond end of device [ 924.324997][T10777] loop5: rw=0, sector=8, nr_sectors = 32 limit=16 [ 924.666523][ T6468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 925.380245][T10783] loop6: detected capacity change from 0 to 512 [ 926.685884][T10783] EXT4-fs (loop6): Test dummy encryption mode enabled [ 926.764498][ T6468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 926.959624][T10783] EXT4-fs warning (device loop6): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop6. [ 927.122891][T10754] lo speed is unknown, defaulting to 1000 [ 927.155450][T10765] siw: device registration error -23 [ 927.829316][T10791] rxe_eth0 speed is unknown, defaulting to 1000 [ 928.197122][T10791] lo speed is unknown, defaulting to 1000 [ 929.905913][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 930.109312][ T23] usb 7-1: unable to get BOS descriptor or descriptor too short [ 930.171412][ T23] usb 7-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 930.212058][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.353851][ T23] usb 7-1: Product: syz [ 930.415715][ T6286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 930.432089][ T23] usb 7-1: Manufacturer: syz [ 930.527768][ T23] usb 7-1: SerialNumber: syz [ 930.904962][ T23] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 932.980177][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.986738][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.010074][ T23] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 933.019867][ T23] usb 7-1: unit 2 not found! [ 933.033435][ T6283] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 933.058068][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.920'. [ 933.108677][ T23] usb 7-1: USB disconnect, device number 2 [ 933.317540][T10654] udevd[10654]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 936.265907][T10841] ip_tables: iptables: counters copy to user failed while replacing table [ 936.423038][T10842] hub 5-0:1.0: USB hub found [ 936.434465][T10842] hub 5-0:1.0: 1 port detected [ 936.703015][ T6286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 937.681499][ T6571] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.890523][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.921'. [ 937.901339][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.921'. [ 938.439728][ T6571] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.453988][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 938.466675][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 938.494820][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 938.505109][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 938.513191][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 938.521240][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 940.477007][ T6571] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.561893][T10856] rxe_eth0 speed is unknown, defaulting to 1000 [ 940.646576][ T5789] Bluetooth: hci2: command tx timeout [ 941.758672][ T6571] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.787162][T10877] loop5: detected capacity change from 0 to 4096 [ 942.563827][T10856] lo speed is unknown, defaulting to 1000 [ 942.730148][ T5789] Bluetooth: hci2: command tx timeout [ 945.626224][ T28] audit: type=1400 audit(1794295644.677:694): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=10889 comm="syz.6.934" [ 945.642787][ T5789] Bluetooth: hci2: command tx timeout [ 945.739384][ T5789] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 946.003979][T10885] ALSA: mixer_oss: invalid OSS volume '' [ 946.697894][ T6571] tipc: Left network mode [ 947.859226][ T5789] Bluetooth: hci2: command tx timeout [ 948.161319][T10902] jffs2: notice: (10902) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 948.985627][T10856] chnl_net:caif_netlink_parms(): no params data found [ 950.525344][T10856] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.571543][T10856] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.603844][T10856] bridge_slave_0: entered allmulticast mode [ 950.653719][T10856] bridge_slave_0: entered promiscuous mode [ 950.705458][T10856] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.786912][T10856] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.794231][T10856] bridge_slave_1: entered allmulticast mode [ 950.881662][T10856] bridge_slave_1: entered promiscuous mode [ 951.815849][T10856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.891704][T10856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.958366][T10856] team0: Port device team_slave_0 added [ 952.008897][T10856] team0: Port device team_slave_1 added [ 952.501894][T10856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.524782][T10932] block device autoloading is deprecated and will be removed. [ 952.813238][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.134553][T10856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.150341][T10856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.157352][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.430259][T10856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.207347][T10965] tipc: Started in network mode [ 956.212731][T10965] tipc: Node identity 4, cluster identity 4711 [ 956.218954][T10965] tipc: Node number set to 4 [ 956.435371][T10856] hsr_slave_0: entered promiscuous mode [ 956.453095][T10856] hsr_slave_1: entered promiscuous mode [ 956.487122][T10856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 956.511437][T10856] Cannot create hsr debugfs directory [ 959.726853][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.6.946'. [ 959.742278][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.6.946'. [ 960.145510][ T6571] hsr_slave_0: left promiscuous mode [ 960.167390][ T6571] hsr_slave_1: left promiscuous mode [ 960.176837][ T6571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.192053][ T6571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.211291][ T6571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.219396][ T6571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.263792][ T6571] veth1_macvtap: left promiscuous mode [ 960.271795][ T6571] veth0_macvtap: left promiscuous mode [ 960.277931][ T6571] veth1_vlan: left promiscuous mode [ 960.288552][ T6571] veth0_vlan: left promiscuous mode [ 960.490920][ T6571] bond1 (unregistering): Released all slaves [ 960.583004][ T6571] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 961.153190][T11000] device-mapper: ioctl: The device has no table. [ 961.668632][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.955'. [ 961.694819][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.955'. [ 964.291179][ T6571] team0 (unregistering): Port device team_slave_1 removed [ 964.565500][ T6571] team0 (unregistering): Port device team_slave_0 removed [ 965.439401][ T6571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.077489][ T6571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.728498][ T6571] bond0 (unregistering): Released all slaves [ 967.789021][ T28] audit: type=1326 audit(1794295665.736:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.4.953" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f806fba8f19 code=0x0 [ 967.846581][T11004] rxe_eth0 speed is unknown, defaulting to 1000 [ 968.242970][T11004] lo speed is unknown, defaulting to 1000 [ 968.626394][T11031] binder: 11028:11031 ioctl 5000940a 2000000028c0 returned -22 [ 969.734366][T10856] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 969.781066][T10856] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 971.268496][T10856] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 973.539619][T10856] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 973.772554][ T6571] IPVS: stop unused estimator thread 0... [ 974.557816][T10856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.677673][T10856] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.732835][ T6468] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.740092][ T6468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.872371][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.879640][ T6283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.577070][T10856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 976.593131][T10856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.138360][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.960'. [ 978.238140][T11084] No source specified [ 979.914283][T11090] binder: 11087:11090 ioctl 5000940a 2000000028c0 returned -22 [ 982.508900][T10856] veth0_vlan: entered promiscuous mode [ 982.837675][T10856] veth1_vlan: entered promiscuous mode [ 983.065987][T10856] veth0_macvtap: entered promiscuous mode [ 983.090046][T10856] veth1_macvtap: entered promiscuous mode [ 984.941229][ T28] audit: type=1400 audit(1794295680.693:696): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11110 comm="syz.6.966" [ 985.216747][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.291196][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.301161][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.368354][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.399819][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.489562][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.544846][T10856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.680701][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.702750][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.000944][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.011748][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.022459][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.106999][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.441698][T10856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 986.491327][T10856] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.566705][T10856] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.616907][T10856] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.669850][T10856] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.046602][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.083639][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.440524][ T6283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.532608][ T6283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.075826][T11148] md: md4 stopped. [ 990.928842][T11156] loop7: detected capacity change from 0 to 512 [ 991.043490][T11156] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 991.058791][T11156] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.924: invalid indirect mapped block 256 (level 1) [ 991.090146][T11156] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.924: invalid indirect mapped block 2683928664 (level 1) [ 991.137687][T11156] EXT4-fs (loop7): 1 truncate cleaned up [ 991.155644][T11156] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.185285][T11166] loop5: detected capacity change from 0 to 1024 [ 992.306736][T11180] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:478: comm syz.7.924: Invalid block bitmap block 3 in block_group 0 [ 992.384697][T11180] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:478: comm syz.7.924: Invalid block bitmap block 3 in block_group 0 [ 992.402663][T11180] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:478: comm syz.7.924: Invalid block bitmap block 3 in block_group 0 [ 992.479003][T11177] EXT4-fs error (device loop7): ext4_find_dest_de:2117: inode #2: block 13: comm syz.7.924: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 992.770270][ T23] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 992.800597][T10856] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.945629][ T23] usb 6-1: device descriptor read/64, error -71 [ 993.246616][T11190] loop6: detected capacity change from 0 to 128 [ 993.917178][ T23] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 994.124254][ T9034] IPVS: starting estimator thread 0... [ 994.276016][ T23] usb 6-1: device descriptor read/64, error -71 [ 994.299579][T11193] IPVS: using max 18 ests per chain, 43200 per kthread [ 994.386985][T11195] syz_tun: entered promiscuous mode [ 994.400090][T11195] bridge0: port 3(syz_tun) entered blocking state [ 994.407330][T11195] bridge0: port 3(syz_tun) entered disabled state [ 994.417057][T11195] syz_tun: entered allmulticast mode [ 994.438781][T11195] bridge0: port 3(syz_tun) entered blocking state [ 994.445619][T11195] bridge0: port 3(syz_tun) entered forwarding state [ 994.887499][ T23] usb usb6-port1: attempt power cycle [ 995.114429][T11199] bridge0: port 3(netdevsim0) entered blocking state [ 995.122346][T11199] bridge0: port 3(netdevsim0) entered disabled state [ 995.130961][T11199] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 995.146745][T11199] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 995.157013][T11199] bridge0: port 3(netdevsim0) entered blocking state [ 995.163965][T11199] bridge0: port 3(netdevsim0) entered forwarding state [ 997.658543][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.665033][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1001.516937][T11224] sd 0:0:1:0: device reset [ 1002.590314][T11230] ip_tables: iptables: counters copy to user failed while replacing table [ 1004.531200][T11241] usb usb7: usbfs: process 11241 (syz.7.986) did not claim interface 0 before use [ 1007.210675][T11260] device-mapper: table: 248:7: thin-pool: Error opening metadata block device (-ENOENT) [ 1007.227072][T11260] device-mapper: ioctl: error adding target to table [ 1007.495832][T11262] device-mapper: ioctl: The device has no table. [ 1007.989972][T11270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.106763][T11274] loop7: detected capacity change from 0 to 4096 [ 1008.184131][T11221] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1008.216035][T11270] bridge_slave_0: left allmulticast mode [ 1008.252717][T11270] bridge_slave_0: left promiscuous mode [ 1008.327316][T11270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.031883][ C0] hrtimer: interrupt took 36560 ns [ 1010.677095][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 1013.220471][T10261] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1013.441283][T10261] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1013.459098][T10261] usb 8-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 1013.468387][T10261] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.502082][T10261] usb 8-1: Product: syz [ 1013.506444][T10261] usb 8-1: Manufacturer: syz [ 1013.509464][ T5850] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1013.511347][T10261] usb 8-1: SerialNumber: syz [ 1013.744330][ T5850] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1013.768406][ T5850] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1013.815319][ T5850] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 1013.837742][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.845805][ T5850] usb 6-1: Product: syz [ 1013.882350][ T5850] usb 6-1: Manufacturer: syz [ 1013.892457][T10261] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1013.924770][T10261] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1013.970930][T10261] usb 8-1: unit 2 not found! [ 1014.096845][T10261] usb 8-1: USB disconnect, device number 2 [ 1014.120386][ T5850] usb 6-1: SerialNumber: syz [ 1014.148165][T11309] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1014.169948][T11309] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1014.937444][ T5850] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1014.948810][ T5850] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1014.975862][ T5850] usbserial_generic 6-1:1.0: generic converter detected [ 1015.055554][ T5850] usb 6-1: generic converter now attached to ttyUSB0 [ 1015.117401][ T5850] usb 6-1: USB disconnect, device number 8 [ 1015.178427][T11325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.996'. [ 1015.269126][ T5850] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 1015.277974][ T5850] usbserial_generic 6-1:1.0: device disconnected [ 1016.969049][ T5850] IPVS: starting estimator thread 0... [ 1017.197634][T11346] IPVS: using max 19 ests per chain, 45600 per kthread [ 1019.619726][T11365] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.629203][T11365] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.638049][T11365] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.647505][T11365] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.050803][T11371] FAULT_INJECTION: forcing a failure. [ 1020.050803][T11371] name failslab, interval 1, probability 5, space 0, times 0 [ 1020.144120][T11371] CPU: 1 PID: 11371 Comm: syz.6.1006 Not tainted syzkaller #0 [ 1020.151685][T11371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1020.161812][T11371] Call Trace: [ 1020.165137][T11371] [ 1020.168122][T11371] dump_stack_lvl+0x18c/0x250 [ 1020.172952][T11371] ? show_regs_print_info+0x20/0x20 [ 1020.178212][T11371] ? load_image+0x420/0x420 [ 1020.182801][T11371] ? __might_sleep+0xe0/0xe0 [ 1020.187512][T11371] ? __lock_acquire+0x7eb0/0x7eb0 [ 1020.192629][T11371] should_fail_ex+0x394/0x4c0 [ 1020.197411][T11371] should_failslab+0x9/0x20 [ 1020.201983][T11371] slab_pre_alloc_hook+0x59/0x300 [ 1020.207103][T11371] ? __rb_allocate_pages+0x197/0x6b0 [ 1020.212456][T11371] ? __rb_allocate_pages+0x197/0x6b0 [ 1020.217794][T11371] __kmem_cache_alloc_node+0x53/0x260 [ 1020.223228][T11371] ? __rb_allocate_pages+0x197/0x6b0 [ 1020.228567][T11371] __kmalloc_node+0xa6/0x240 [ 1020.233233][T11371] __rb_allocate_pages+0x197/0x6b0 [ 1020.238402][T11371] ? __init_waitqueue_head+0xa8/0x140 [ 1020.243845][T11371] rb_allocate_cpu_buffer+0x64b/0xa10 [ 1020.249340][T11371] ? rb_wake_up_waiters+0x1b0/0x1b0 [ 1020.254594][T11371] ? __ring_buffer_alloc+0x1d6/0x550 [ 1020.259941][T11371] ? __ring_buffer_alloc+0x1d6/0x550 [ 1020.265274][T11371] ? __kmalloc+0xe5/0x240 [ 1020.269683][T11371] __ring_buffer_alloc+0x283/0x550 [ 1020.274853][T11371] allocate_trace_buffers+0x70/0x290 [ 1020.280190][T11371] ? __raw_spin_lock_init+0x45/0x100 [ 1020.285534][T11371] trace_array_create_systems+0x311/0xc70 [ 1020.291306][T11371] instance_mkdir+0xd1/0x130 [ 1020.295952][T11371] tracefs_syscall_mkdir+0x128/0x1a0 [ 1020.301371][T11371] vfs_mkdir+0x2a5/0x470 [ 1020.305680][T11371] do_mkdirat+0x1dc/0x450 [ 1020.310080][T11371] ? vfs_mkdir+0x470/0x470 [ 1020.314566][T11371] __x64_sys_mkdirat+0x89/0xa0 [ 1020.319390][T11371] do_syscall_64+0x55/0xb0 [ 1020.323862][T11371] ? clear_bhb_loop+0x40/0x90 [ 1020.328738][T11371] ? clear_bhb_loop+0x40/0x90 [ 1020.333482][T11371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1020.339465][T11371] RIP: 0033:0x7fe493ba8f19 [ 1020.343930][T11371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.363632][T11371] RSP: 002b:00007fe494ae1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1020.372105][T11371] RAX: ffffffffffffffda RBX: 00007fe493e26270 RCX: 00007fe493ba8f19 [ 1020.380130][T11371] RDX: 00000000000001ff RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1020.388157][T11371] RBP: 00007fe493c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 1020.396182][T11371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.404204][T11371] R13: 00007fe493e26308 R14: 00007fe493e26270 R15: 00007fff57123e98 [ 1020.412250][T11371] [ 1021.213441][T11385] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1009'. [ 1023.979829][T11386] netlink: 'syz.5.1008': attribute type 10 has an invalid length. [ 1024.070896][T11393] device-mapper: table: 248:8: thin-pool: Error opening metadata block device (-ENOENT) [ 1024.150274][T11393] device-mapper: ioctl: error adding target to table [ 1025.993645][T11399] device-mapper: ioctl: The device has no table. [ 1029.636438][ T28] audit: type=1800 audit(1794295722.796:697): pid=11442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1018" name="p_chmask" dev="configfs" ino=29604 res=0 errno=0 [ 1029.671803][ T28] audit: type=1800 audit(1794295722.833:698): pid=11442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1018" name="UDC" dev="configfs" ino=29605 res=0 errno=0 [ 1029.702040][T11442] ip_tables: iptables: counters copy to user failed while replacing table [ 1033.463523][ T28] audit: type=1800 audit(1794295725.158:699): pid=11466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1021" name="file2" dev="sda1" ino=2054 res=0 errno=0 [ 1034.765644][T11475] tipc: Started in network mode [ 1034.770605][T11475] tipc: Node identity 4, cluster identity 4711 [ 1034.776930][T11475] tipc: Node number set to 4 [ 1035.751382][T11475] rxe_eth0 speed is unknown, defaulting to 1000 [ 1036.146937][T11475] lo speed is unknown, defaulting to 1000 [ 1038.835655][ T5098] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 1039.997776][T11495] loop6: detected capacity change from 0 to 1024 [ 1041.232622][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 1041.673229][T11510] xt_cgroup: invalid path, errno=-2 [ 1047.460413][T11547] loop6: detected capacity change from 0 to 2048 [ 1047.480855][T11547] UDF-fs: bad mount option "fscontext=root" or missing value [ 1047.726929][T11547] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10495] was attempted by " \x22CiG 3ox\x07'9 l/Eߍ۷;N7WNO})*Q˿GGn\x0b乓S\x0bK˳3fAHͿ}eїG6}zӇ'Fխ= OEߌAGD%\x0dF_하h\x5c\x5c)L\x5cQYh#Ћd,Zߩr&KsJc*іSJňh{=x(XV:E^<3з\x0bVx\x0czQ_DNŅWy?+eq[)۩1+'X\x22~)R+t{]y[כzjەnm>6Eoo\x0b E4Rܜ!-F9ڹQckyjd-PαgsN\x5cy-7ry+j9[9?g-PαgsN\x5cy-7ry+j9[9yO [ 1048.289946][T11550] dump_stack_lvl+0x18c/0x250 [ 1048.294683][T11550] ? show_regs_print_info+0x20/0x20 [ 1048.299934][T11550] ? load_image+0x420/0x420 [ 1048.304505][T11550] ? __might_sleep+0xe0/0xe0 [ 1048.309138][T11550] ? __lock_acquire+0x7eb0/0x7eb0 [ 1048.314225][T11550] should_fail_ex+0x394/0x4c0 [ 1048.318998][T11550] should_failslab+0x9/0x20 [ 1048.323552][T11550] slab_pre_alloc_hook+0x59/0x300 [ 1048.328624][T11550] ? pcpu_alloc+0x11e7/0x1880 [ 1048.333370][T11550] ? percpu_ref_init+0xc3/0x340 [ 1048.338317][T11550] __kmem_cache_alloc_node+0x53/0x260 [ 1048.343752][T11550] ? percpu_ref_init+0xc3/0x340 [ 1048.348664][T11550] ? blk_timeout_work+0x10/0x10 [ 1048.353606][T11550] kmalloc_trace+0x2a/0xe0 [ 1048.358088][T11550] percpu_ref_init+0xc3/0x340 [ 1048.362838][T11550] blk_alloc_queue+0x369/0x4c0 [ 1048.367672][T11550] __blk_alloc_disk+0x19/0x80 [ 1048.372462][T11550] dm_create+0x46f/0xf90 [ 1048.376825][T11550] dev_create+0x1f8/0x400 [ 1048.381265][T11550] ? list_devices+0x8a0/0x8a0 [ 1048.386002][T11550] ? __might_fault+0xaa/0x120 [ 1048.390733][T11550] ? __might_fault+0xc6/0x120 [ 1048.395465][T11550] ? __might_fault+0xaa/0x120 [ 1048.400204][T11550] ? list_devices+0x8a0/0x8a0 [ 1048.404933][T11550] dm_ctl_ioctl+0x975/0xd00 [ 1048.409500][T11550] ? list_devices+0x8a0/0x8a0 [ 1048.414314][T11550] ? dm_poll+0x120/0x120 [ 1048.418681][T11550] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1048.423710][T11550] ? security_file_ioctl+0x80/0xa0 [ 1048.428922][T11550] ? dm_poll+0x120/0x120 [ 1048.433224][T11550] __se_sys_ioctl+0xfd/0x170 [ 1048.437891][T11550] do_syscall_64+0x55/0xb0 [ 1048.442372][T11550] ? clear_bhb_loop+0x40/0x90 [ 1048.447105][T11550] ? clear_bhb_loop+0x40/0x90 [ 1048.451842][T11550] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1048.457996][T11550] RIP: 0033:0x7f10b0ba8f19 [ 1048.462460][T11550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.482112][T11550] RSP: 002b:00007f10b1a3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1048.490582][T11550] RAX: ffffffffffffffda RBX: 00007f10b0e25fa0 RCX: 00007f10b0ba8f19 [ 1048.498683][T11550] RDX: 0000200000000740 RSI: 00000000c138fd03 RDI: 000000000000000a [ 1048.506699][T11550] RBP: 00007f10b0c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 1048.514714][T11550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.522736][T11550] R13: 00007f10b0e26038 R14: 00007f10b0e25fa0 R15: 00007ffe5f8fdd18 [ 1048.530783][T11550] [ 1054.309210][T11583] xt_connbytes: Forcing CT accounting to be enabled [ 1061.069149][T11668] loop7: detected capacity change from 0 to 128 [ 1061.112648][T11668] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1061.217003][T11668] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1061.316192][T11668] No such timeout policy "syz0" [ 1064.207302][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.214292][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.409703][ T28] audit: type=1400 audit(1794295754.759:700): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11684 comm="syz.6.1049" [ 1068.594005][T11713] loop7: detected capacity change from 0 to 1024 [ 1069.478961][ T5853] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1069.944996][ T5853] usb 8-1: device descriptor read/64, error -71 [ 1070.259201][ T5853] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1071.527824][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 1071.983511][T11745] loop7: detected capacity change from 0 to 64 [ 1075.635801][T11750] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1076.093453][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'. [ 1081.347082][T11789] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1069'. [ 1088.506301][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1077'. [ 1088.524487][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1077'. [ 1090.802867][T11858] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1090'. [ 1090.813802][T11858] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1090'. [ 1091.486601][T11863] xt_cgroup: invalid path, errno=-2 [ 1098.280233][T11893] device-mapper: table: 248:8: thin-pool: Error opening metadata block device (-ENOENT) [ 1098.364550][T11893] device-mapper: ioctl: error adding target to table [ 1098.438347][T11887] device-mapper: ioctl: The device has no table. [ 1104.044943][ T5098] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 1104.628282][T11943] device-mapper: table: 248:8: thin-pool: Error opening metadata block device (-ENOENT) [ 1104.821038][T11943] device-mapper: ioctl: error adding target to table [ 1105.507391][T11941] device-mapper: ioctl: The device has no table. [ 1106.009600][T11953] loop7: detected capacity change from 0 to 128 [ 1106.130630][T11953] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1106.512693][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1108'. [ 1107.539974][ T6450] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1107.931243][ T28] audit: type=1800 audit(1794295795.034:701): pid=11969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1110" name="p_chmask" dev="configfs" ino=28572 res=0 errno=0 [ 1109.814288][ T28] audit: type=1400 audit(1794295796.778:702): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11973 comm="syz.7.1111" [ 1111.302228][T11991] device-mapper: table: 248:8: thin-pool: Error opening metadata block device (-ENOENT) [ 1111.442645][T11991] device-mapper: ioctl: error adding target to table [ 1111.573455][T11991] device-mapper: ioctl: The device has no table. [ 1112.104838][T12010] batman_adv: batadv0: Adding interface: dummy0 [ 1112.158337][T12010] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.310722][T12010] batman_adv: batadv0: Interface activated: dummy0 [ 1112.732459][T12016] batadv0: mtu less than device minimum [ 1112.745044][T12016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1112.758453][T12016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1112.771038][T12016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1112.783386][T12016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1112.795865][T12016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1112.808407][T12016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1112.820875][T12016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1112.833187][T12016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1112.845747][T12016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1113.064704][T12015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.184350][T12029] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1113.269665][T12029] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1113.285334][T12029] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1113.334785][T12029] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1113.367649][T12029] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1113.378525][T12029] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1113.724147][T12024] rxe_eth0 speed is unknown, defaulting to 1000 [ 1114.106417][T12037] jffs2: notice: (12037) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1116.023427][ T5098] Bluetooth: hci3: command tx timeout [ 1116.113187][T12024] lo speed is unknown, defaulting to 1000 [ 1116.334143][ T28] audit: type=1400 audit(1794295802.804:703): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=12045 comm="syz.7.1123" [ 1117.399894][T12024] chnl_net:caif_netlink_parms(): no params data found [ 1118.248797][ T5098] Bluetooth: hci3: command tx timeout [ 1119.027174][ T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.081896][ T5098] Bluetooth: hci3: command tx timeout [ 1121.125141][ T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.395918][T12024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.439281][T12024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.468423][T12024] bridge_slave_0: entered allmulticast mode [ 1121.490251][ T28] audit: type=1800 audit(1794295807.555:704): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1132" name="p_chmask" dev="configfs" ino=30526 res=0 errno=0 [ 1121.512723][T12024] bridge_slave_0: entered promiscuous mode [ 1123.209241][ T28] audit: type=1800 audit(1794295807.583:705): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1132" name="UDC" dev="configfs" ino=30527 res=0 errno=0 [ 1123.237819][T12024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.277464][ T5098] Bluetooth: hci3: command tx timeout [ 1123.345829][T12024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.353084][T12024] bridge_slave_1: entered allmulticast mode [ 1123.461838][T12024] bridge_slave_1: entered promiscuous mode [ 1124.874952][ T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.825310][ T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.993216][T12130] tipc: Started in network mode [ 1127.998272][T12130] tipc: Node identity 4, cluster identity 4711 [ 1128.004619][T12130] tipc: Node number set to 4 [ 1128.015754][T12133] rxe_eth0 speed is unknown, defaulting to 1000 [ 1128.832267][T12024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.882593][T12024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.321686][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1138'. [ 1129.332938][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1138'. [ 1130.078055][T12133] lo speed is unknown, defaulting to 1000 [ 1130.227754][T12024] team0: Port device team_slave_0 added [ 1130.307220][T12024] team0: Port device team_slave_1 added [ 1130.313660][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1130.320080][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1130.530132][T12024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.537161][T12024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.583774][T12024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.614016][T12024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.630998][T12024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.668829][T12024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.010158][T12024] hsr_slave_0: entered promiscuous mode [ 1131.027296][T12024] hsr_slave_1: entered promiscuous mode [ 1131.128342][ T60] tipc: Left network mode [ 1132.007750][T12024] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1132.038857][T12024] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1132.073057][T12024] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1132.132047][T12024] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1133.978404][T12024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.275753][T12024] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.310326][T12199] device-mapper: table: 248:8: thin-pool: Error opening metadata block device (-ENOENT) [ 1134.320163][T12199] device-mapper: ioctl: error adding target to table [ 1134.352223][T12199] device-mapper: ioctl: The device has no table. [ 1136.263528][ T6286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.270790][ T6286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.640682][ T6286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.647890][ T6286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.249879][ T60] hsr_slave_0: left promiscuous mode [ 1137.269186][ T60] hsr_slave_1: left promiscuous mode [ 1137.275483][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1137.290648][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.313216][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1137.320669][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.393628][ T60] veth1_macvtap: left promiscuous mode [ 1137.400316][ T60] veth0_macvtap: left promiscuous mode [ 1137.406671][ T60] veth1_vlan: left promiscuous mode [ 1137.418477][ T60] veth0_vlan: left promiscuous mode [ 1138.327870][ T60] team0 (unregistering): Port device team_slave_1 removed [ 1138.382436][ T60] team0 (unregistering): Port device team_slave_0 removed [ 1138.443912][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1138.499055][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1138.931602][ T60] bond0 (unregistering): Released all slaves [ 1139.010697][ T2184] infiniband syz0: ib_query_port failed (-19) [ 1139.064325][T12024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.386438][ T60] IPVS: stop unused estimator thread 0... [ 1139.542923][T12024] veth0_vlan: entered promiscuous mode [ 1139.564311][T12024] veth1_vlan: entered promiscuous mode [ 1139.617214][T12024] veth0_macvtap: entered promiscuous mode [ 1139.638868][T12024] veth1_macvtap: entered promiscuous mode [ 1139.665449][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.676002][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.685900][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.696380][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.707164][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.717971][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.736113][T12024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1139.759388][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.775528][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.788462][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.802402][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.813774][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.826965][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.841413][T12024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.857924][T12024] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.871009][T12024] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.879771][T12024] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.889986][T12024] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.021061][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.041030][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.060580][ T6466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.070052][ T6466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.560903][T12318] bridge0: port 1(syz_tun) entered blocking state [ 1143.595466][T12318] bridge0: port 1(syz_tun) entered disabled state [ 1143.617914][T12318] syz_tun: entered allmulticast mode [ 1143.646597][T12320] loop7: detected capacity change from 0 to 512 [ 1143.672076][T12318] syz_tun: entered promiscuous mode [ 1143.700801][T12318] bridge0: port 1(syz_tun) entered blocking state [ 1143.707512][T12318] bridge0: port 1(syz_tun) entered listening state [ 1143.860305][T12320] EXT4-fs error (device loop7): ext4_orphan_get:1408: inode #15: comm syz.7.1153: inode has both inline data and extents flags [ 1144.007522][T12320] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.1153: couldn't read orphan inode 15 (err -117) [ 1144.361265][T12320] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1144.774931][T10856] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.345896][T12357] device-mapper: table: 248:8: thin-pool: Error opening metadata block device (-ENOENT) [ 1146.411027][T12357] device-mapper: ioctl: error adding target to table [ 1146.465300][T12351] device-mapper: ioctl: The device has no table. [ 1149.944264][T12391] loop7: detected capacity change from 0 to 512 [ 1149.965100][T12391] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1150.101408][T12394] net_ratelimit: 10 callbacks suppressed [ 1150.101426][T12394] ip_tables: iptables: counters copy to user failed while replacing table [ 1150.132536][T12391] EXT4-fs (loop7): 1 truncate cleaned up [ 1150.181090][T12391] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1150.352080][T12401] loop8: detected capacity change from 0 to 128 [ 1150.533882][T12401] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1150.546467][T12401] hpfs: filesystem error: improperly stopped [ 1150.552581][T12401] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1150.560526][T12401] hpfs: You really don't want any checks? You are crazy... [ 1150.568141][T12401] hpfs: Code page index out of array [ 1150.573512][T12401] hpfs: code page support is disabled [ 1150.597790][T12401] hpfs: hpfs_map_4sectors(): unaligned read [ 1150.611983][T12401] hpfs: hpfs_map_4sectors(): unaligned read [ 1150.618094][T12401] hpfs: filesystem error: unable to find root dir [ 1151.936909][T10856] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.080086][T12422] loop7: detected capacity change from 0 to 2048 [ 1153.213672][T12422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1154.625199][T12441] x_tables: duplicate underflow at hook 1 [ 1154.783621][ T28] audit: type=1800 audit(1794295838.272:706): pid=12436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1176" name="file1" dev="loop7" ino=1415 res=0 errno=0 [ 1154.844439][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1180'. [ 1154.857811][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1180'. [ 1155.700053][T12445] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1181'. [ 1155.740272][T12445] loop8: detected capacity change from 0 to 512 [ 1155.796307][T12445] EXT4-fs (loop8): 1 truncate cleaned up [ 1155.810966][T12445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1156.138505][T12456] ip_tables: iptables: counters copy to user failed while replacing table [ 1156.296773][T12445] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm syz.8.1181: bg 0: block 465: padding at end of block bitmap is not set [ 1156.873248][T12445] EXT4-fs (loop8): Remounting filesystem read-only [ 1158.104573][T12024] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.054572][T12488] Invalid ELF header magic: != ELF [ 1159.062917][T12488] overlayfs: overlapping lowerdir path [ 1159.713449][ T28] audit: type=1800 audit(1794295842.821:707): pid=12490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1189" name="p_chmask" dev="configfs" ino=31711 res=0 errno=0 [ 1159.721008][T12490] ip_tables: iptables: counters copy to user failed while replacing table [ 1159.744104][ T28] audit: type=1800 audit(1794295842.821:708): pid=12490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1189" name="UDC" dev="configfs" ino=31712 res=0 errno=0 [ 1160.139591][ C0] bridge0: port 1(syz_tun) entered learning state [ 1160.813868][T12506] x_tables: duplicate underflow at hook 1 [ 1161.101642][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1192'. [ 1161.116453][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1192'. [ 1163.013675][T12541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1163.612309][T12544] loop7: detected capacity change from 0 to 128 [ 1163.752387][T12544] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1163.764740][T12544] hpfs: filesystem error: improperly stopped [ 1163.771053][T12544] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1163.779125][T12544] hpfs: You really don't want any checks? You are crazy... [ 1163.786494][T12544] hpfs: Code page index out of array [ 1163.791991][T12544] hpfs: code page support is disabled [ 1163.807113][T12544] hpfs: hpfs_map_4sectors(): unaligned read [ 1163.813893][T12544] hpfs: hpfs_map_4sectors(): unaligned read [ 1163.820019][T12544] hpfs: filesystem error: unable to find root dir [ 1164.206032][T12552] ip_tables: iptables: counters copy to user failed while replacing table [ 1166.558621][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1208'. [ 1166.572664][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1208'. [ 1169.211056][T12595] loop7: detected capacity change from 0 to 512 [ 1170.915636][T12610] netlink: 'syz.6.1217': attribute type 153 has an invalid length. [ 1171.443912][T12593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1172.133825][T12621] device-mapper: ioctl: The device has no table. [ 1172.524957][T12029] Bluetooth: hci3: command tx timeout [ 1173.103365][T12638] loop8: detected capacity change from 0 to 512 [ 1173.121046][T12638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1173.130325][T12638] ext4: Unknown parameter 'fsname' [ 1174.028371][T12596] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1176.772692][ C0] bridge0: port 1(syz_tun) entered forwarding state [ 1176.779379][ C0] bridge0: topology change detected, propagating [ 1177.015583][T12670] Illegal XDP return value 4294967199 on prog (id 94) dev N/A, expect packet loss! [ 1177.799202][ T28] audit: type=1800 audit(1794295859.503:709): pid=12678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1232" name="p_chmask" dev="configfs" ino=32981 res=0 errno=0 [ 1177.826118][T12678] ip_tables: iptables: counters copy to user failed while replacing table [ 1177.998014][T12679] loop8: detected capacity change from 0 to 512 [ 1179.622311][T12699] Invalid ELF header magic: != ELF [ 1179.774430][T12699] overlayfs: failed to clone lowerpath [ 1180.325989][T12679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1181.280122][ T5098] Bluetooth: hci3: command tx timeout [ 1182.145157][T12724] loop8: detected capacity change from 0 to 512 [ 1182.200886][T12724] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1182.253614][T12722] bridge0: port 4(wlan1) entered blocking state [ 1182.285517][T12722] bridge0: port 4(wlan1) entered disabled state [ 1182.292161][T12722] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 1182.302320][T12722] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 1182.325403][T12724] EXT4-fs (loop8): 1 truncate cleaned up [ 1182.348192][T12724] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1182.399207][T12722] bridge0: port 4(wlan1) entered disabled state [ 1182.492538][T12722] mac80211_hwsim hwsim19 wlan1 (unregistering): left allmulticast mode [ 1182.522288][T12722] mac80211_hwsim hwsim19 wlan1 (unregistering): left promiscuous mode [ 1182.553104][T12722] bridge0: port 4(wlan1) entered disabled state [ 1183.393170][T12024] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.517701][T12741] ip_tables: iptables: counters copy to user failed while replacing table [ 1183.526521][ T28] audit: type=1800 audit(1794295864.791:710): pid=12741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1242" name="p_chmask" dev="configfs" ino=32518 res=0 errno=0 [ 1195.620662][T12837] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1262'. [ 1196.953524][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1196.960063][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1199.354128][T12880] fuse: Bad value for 'fd' [ 1207.122711][T12928] tipc: Started in network mode [ 1207.127623][T12928] tipc: Node identity 7f000001, cluster identity 4711 [ 1207.134888][T12928] tipc: New replicast peer: 127.0.0.1 [ 1207.140988][T12928] tipc: Enabled bearer , priority 10 [ 1207.481794][T12930] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1274'. [ 1208.474765][ T5850] tipc: Node number set to 2130706433 [ 1210.615701][T12945] ip_tables: iptables: counters copy to user failed while replacing table [ 1212.943436][ T28] audit: type=1800 audit(1794295891.936:711): pid=12963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1285" name="p_chmask" dev="configfs" ino=33300 res=0 errno=0 [ 1212.970918][T12963] ip_tables: iptables: counters copy to user failed while replacing table [ 1213.023093][ T28] audit: type=1800 audit(1794295891.936:712): pid=12963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1285" name="UDC" dev="configfs" ino=33301 res=0 errno=0 [ 1213.080572][T12968] 9pnet_virtio: no channels available for device syz [ 1216.185754][T12989] block device autoloading is deprecated and will be removed. [ 1216.210964][T12989] [ 1216.213411][T12989] ====================================================== [ 1216.220471][T12989] WARNING: possible circular locking dependency detected [ 1216.227519][T12989] syzkaller #0 Not tainted [ 1216.231983][T12989] ------------------------------------------------------ [ 1216.239009][T12989] syz.8.1289/12989 is trying to acquire lock: [ 1216.245098][T12989] ffffffff8e7b3808 (major_names_lock){+.+.}-{3:3}, at: blk_request_module+0x35/0x290 [ 1216.254711][T12989] [ 1216.254711][T12989] but task is already holding lock: [ 1216.262090][T12989] ffff88806a8f8360 (&mddev->reconfig_mutex){+.+.}-{3:3}, at: md_ioctl+0x72d/0x24e0 [ 1216.271498][T12989] [ 1216.271498][T12989] which lock already depends on the new lock. [ 1216.271498][T12989] [ 1216.281924][T12989] [ 1216.281924][T12989] the existing dependency chain (in reverse order) is: [ 1216.290953][T12989] [ 1216.290953][T12989] -> #4 (&mddev->reconfig_mutex){+.+.}-{3:3}: [ 1216.299235][T12989] __mutex_lock+0x135/0xce0 [ 1216.304367][T12989] array_state_store+0x2ef/0xb00 [ 1216.309855][T12989] md_attr_store+0x19c/0x390 [ 1216.314999][T12989] kernfs_fop_write_iter+0x3a4/0x520 [ 1216.320870][T12989] vfs_write+0x474/0x9a0 [ 1216.325663][T12989] ksys_write+0x151/0x260 [ 1216.330559][T12989] do_syscall_64+0x55/0xb0 [ 1216.335542][T12989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1216.342017][T12989] [ 1216.342017][T12989] -> #3 (kn->active#68){++++}-{0:0}: [ 1216.349526][T12989] kernfs_drain+0x31e/0x6d0 [ 1216.354591][T12989] __kernfs_remove+0x426/0x830 [ 1216.359909][T12989] kernfs_remove_by_name_ns+0xdc/0x150 [ 1216.365912][T12989] sysfs_remove_group+0x101/0x290 [ 1216.371520][T12989] sysfs_remove_groups+0x54/0xa0 [ 1216.377006][T12989] __kobject_del+0x83/0x2e0 [ 1216.382108][T12989] kobject_put+0x233/0x450 [ 1216.387072][T12989] process_scheduled_works+0xa60/0x1600 [ 1216.393187][T12989] worker_thread+0xa5e/0xfe0 [ 1216.398327][T12989] kthread+0x2fa/0x390 [ 1216.402940][T12989] ret_from_fork+0x48/0x80 [ 1216.408022][T12989] ret_from_fork_asm+0x11/0x20 [ 1216.413407][T12989] [ 1216.413407][T12989] -> #2 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}: [ 1216.422815][T12989] process_scheduled_works+0x9ab/0x1600 [ 1216.428921][T12989] worker_thread+0xa5e/0xfe0 [ 1216.434057][T12989] kthread+0x2fa/0x390 [ 1216.438683][T12989] ret_from_fork+0x48/0x80 [ 1216.443654][T12989] ret_from_fork_asm+0x11/0x20 [ 1216.448969][T12989] [ 1216.448969][T12989] -> #1 ((wq_completion)md_misc){+.+.}-{0:0}: [ 1216.457263][T12989] __flush_workqueue+0x169/0x1380 [ 1216.462868][T12989] md_alloc+0x33/0xe90 [ 1216.467509][T12989] md_alloc_and_put+0x1a/0x1b0 [ 1216.472844][T12989] blk_request_module+0x272/0x290 [ 1216.478431][T12989] blkdev_get_no_open+0x37/0xc0 [ 1216.483841][T12989] blkdev_get_by_dev+0x64/0x610 [ 1216.489250][T12989] blkdev_open+0x14e/0x360 [ 1216.494233][T12989] do_dentry_open+0x880/0x14b0 [ 1216.499553][T12989] path_openat+0x284f/0x3270 [ 1216.504703][T12989] do_filp_open+0x1f2/0x430 [ 1216.509773][T12989] do_sys_openat2+0x134/0x1d0 [ 1216.515000][T12989] __x64_sys_openat+0x139/0x160 [ 1216.520412][T12989] do_syscall_64+0x55/0xb0 [ 1216.525395][T12989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1216.531854][T12989] [ 1216.531854][T12989] -> #0 (major_names_lock){+.+.}-{3:3}: [ 1216.539615][T12989] __lock_acquire+0x3a07/0x7eb0 [ 1216.545011][T12989] lock_acquire+0x19e/0x420 [ 1216.550070][T12989] __mutex_lock+0x135/0xce0 [ 1216.555122][T12989] blk_request_module+0x35/0x290 [ 1216.560605][T12989] blkdev_get_no_open+0x37/0xc0 [ 1216.566004][T12989] blkdev_get_by_dev+0x64/0x610 [ 1216.571420][T12989] md_import_device+0x398/0x7b0 [ 1216.576833][T12989] md_add_new_disk+0x39d/0x17b0 [ 1216.582245][T12989] md_ioctl+0x2152/0x24e0 [ 1216.587128][T12989] blkdev_ioctl+0x5b2/0x730 [ 1216.592188][T12989] __se_sys_ioctl+0xfd/0x170 [ 1216.597350][T12989] do_syscall_64+0x55/0xb0 [ 1216.602322][T12989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1216.608766][T12989] [ 1216.608766][T12989] other info that might help us debug this: [ 1216.608766][T12989] [ 1216.619012][T12989] Chain exists of: [ 1216.619012][T12989] major_names_lock --> kn->active#68 --> &mddev->reconfig_mutex [ 1216.619012][T12989] [ 1216.632642][T12989] Possible unsafe locking scenario: [ 1216.632642][T12989] [ 1216.640121][T12989] CPU0 CPU1 [ 1216.645497][T12989] ---- ---- [ 1216.650885][T12989] lock(&mddev->reconfig_mutex); [ 1216.655939][T12989] lock(kn->active#68); [ 1216.662748][T12989] lock(&mddev->reconfig_mutex); [ 1216.670330][T12989] lock(major_names_lock); [ 1216.674859][T12989] [ 1216.674859][T12989] *** DEADLOCK *** [ 1216.674859][T12989] [ 1216.683024][T12989] 1 lock held by syz.8.1289/12989: [ 1216.688153][T12989] #0: ffff88806a8f8360 (&mddev->reconfig_mutex){+.+.}-{3:3}, at: md_ioctl+0x72d/0x24e0 [ 1216.697945][T12989] [ 1216.697945][T12989] stack backtrace: [ 1216.703856][T12989] CPU: 0 PID: 12989 Comm: syz.8.1289 Not tainted syzkaller #0 [ 1216.711338][T12989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1216.721433][T12989] Call Trace: [ 1216.724732][T12989] [ 1216.727704][T12989] dump_stack_lvl+0x18c/0x250 [ 1216.732436][T12989] ? load_image+0x420/0x420 [ 1216.736965][T12989] ? show_regs_print_info+0x20/0x20 [ 1216.742199][T12989] ? print_circular_bug+0x12b/0x1a0 [ 1216.747430][T12989] check_noncircular+0x2fc/0x400 [ 1216.752427][T12989] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1216.758523][T12989] ? print_deadlock_bug+0x5d0/0x5d0 [ 1216.763764][T12989] ? lockdep_lock+0xf5/0x230 [ 1216.768379][T12989] ? _find_first_zero_bit+0xd6/0x100 [ 1216.773696][T12989] __lock_acquire+0x3a07/0x7eb0 [ 1216.778583][T12989] ? lock_chain_count+0x20/0x20 [ 1216.783504][T12989] ? verify_lock_unused+0x140/0x140 [ 1216.788749][T12989] ? finish_task_switch+0x262/0x8f0 [ 1216.793985][T12989] ? lockdep_hardirqs_on+0x98/0x150 [ 1216.799285][T12989] ? finish_task_switch+0x262/0x8f0 [ 1216.804519][T12989] ? __schedule+0x1577/0x4720 [ 1216.809253][T12989] lock_acquire+0x19e/0x420 [ 1216.813778][T12989] ? blk_request_module+0x35/0x290 [ 1216.818909][T12989] ? __might_sleep+0xe0/0xe0 [ 1216.823518][T12989] ? read_lock_is_recursive+0x20/0x20 [ 1216.828915][T12989] __mutex_lock+0x135/0xce0 [ 1216.833440][T12989] ? blk_request_module+0x35/0x290 [ 1216.838572][T12989] ? preempt_schedule+0xc0/0xd0 [ 1216.843452][T12989] ? preempt_schedule_common+0x82/0xc0 [ 1216.848938][T12989] ? blk_request_module+0x35/0x290 [ 1216.854085][T12989] ? mutex_lock_nested+0x20/0x20 [ 1216.859047][T12989] ? __lock_acquire+0x7eb0/0x7eb0 [ 1216.864095][T12989] ? __rwlock_init+0x150/0x150 [ 1216.868913][T12989] ? preempt_schedule_thunk+0x1a/0x30 [ 1216.874321][T12989] blk_request_module+0x35/0x290 [ 1216.879278][T12989] blkdev_get_no_open+0x37/0xc0 [ 1216.884166][T12989] blkdev_get_by_dev+0x64/0x610 [ 1216.889078][T12989] ? badblocks_init+0x133/0x210 [ 1216.893951][T12989] md_import_device+0x398/0x7b0 [ 1216.898845][T12989] md_add_new_disk+0x39d/0x17b0 [ 1216.903719][T12989] md_ioctl+0x2152/0x24e0 [ 1216.908080][T12989] ? blkdev_common_ioctl+0x10ee/0x2580 [ 1216.913560][T12989] ? memset+0x4/0x20 [ 1216.917514][T12989] ? md_release+0x1e0/0x1e0 [ 1216.922105][T12989] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 1216.927772][T12989] ? blkdev_bszset+0x1f0/0x1f0 [ 1216.932554][T12989] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1216.938074][T12989] ? md_release+0x1e0/0x1e0 [ 1216.942606][T12989] blkdev_ioctl+0x5b2/0x730 [ 1216.947131][T12989] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 1216.952611][T12989] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1216.957589][T12989] ? security_file_ioctl+0x80/0xa0 [ 1216.962726][T12989] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 1216.968211][T12989] __se_sys_ioctl+0xfd/0x170 [ 1216.972835][T12989] do_syscall_64+0x55/0xb0 [ 1216.977280][T12989] ? clear_bhb_loop+0x40/0x90 [ 1216.981997][T12989] ? clear_bhb_loop+0x40/0x90 [ 1216.986791][T12989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1216.992710][T12989] RIP: 0033:0x7f343d3a8f19 [ 1216.997146][T12989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.016773][T12989] RSP: 002b:00007f343e212028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1217.025232][T12989] RAX: ffffffffffffffda RBX: 00007f343d626180 RCX: 00007f343d3a8f19 [ 1217.033232][T12989] RDX: 0000200000000300 RSI: 0000000040140921 RDI: 0000000000000007 [ 1217.041235][T12989] RBP: 00007f343d437f6d R08: 0000000000000000 R09: 0000000000000000 [ 1217.049230][T12989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1217.057241][T12989] R13: 00007f343d626218 R14: 00007f343d626180 R15: 00007ffe9de198c8 [ 1217.065264][T12989] [ 1217.234436][T12989] block device autoloading is deprecated and will be removed. [ 1217.242294][T12989] md: invalid raid superblock magic on ram16 [ 1217.248336][T12989] md: ram16 does not have a valid v0.0 superblock, not importing! [ 1217.256494][T12989] md: md_import_device returned -22 [ 1217.482483][T12990] block device autoloading is deprecated and will be removed. [ 1217.490206][T12990] md: invalid raid superblock magic on ram17 [ 1217.496271][T12990] md: ram17 does not have a valid v0.0 superblock, not importing! [ 1217.504208][T12990] md: md_import_device returned -22