last executing test programs: 12.642436435s ago: executing program 1 (id=308): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x6, 0x247, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x2, 0xd3) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000400)) 11.581289365s ago: executing program 0 (id=312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) sched_setparam(r0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 10.787871792s ago: executing program 1 (id=313): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$eJzs3V1sZOdZB/DnnWPHY6e0TtNuWmjKSEXtymWj/equq0WVt3ENlbabql5X5Koef+x2FO94ZXvppkBlQAWJm4rcIG6QRYlA6gVXhEtcGqRWCAlVvSgXSJZoo1xw4YtKCFBqdM68Y493vVk3G39s8vtFzv/MmeeM34/xmWNpX58AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI++7nLp8+ko24FAHCYrk5+6fQ5n/8A8K5yze//AAAAAAAAAAAAAABw3KUo4kSkGHplM01XjzvqV1rt23emxif2PmwwRYpaFFV9+VU/c/bc+U9duDjazTc//u324Xhu8trlxrOLN28tzS8vz881ptqt2cW5+X2/wsMef7eRagAaN1+4PXf9+nLj7DPndj19Z/i1gcdPDF+6eOrCaLd2anxiYrKnpq//LX/3e9xvhcdjUUQzUrwx/HpqRkQtHn4sHvDeOWiDVSdGqk5MjU9UHVloNdsr5ZOplqtqEY2eg8a6Y3QIc/FQxiJWy+aXDR4puzd5q7nUnFmYb3yxubTSWmkttlOt09qyP42oxWiKWIuIjYF7X64/ivhopHjp9GaaiYiiOw6frBYGP7g9tQPo4z6U7Wz0R6zVHoE5O8YGooirkeJnr56M2XLM8ld8POILZb4S8XKZn4lI5RvjfMRP93gf8WjqiyL+NVIsps00V50PuueVK19ufL59fbGntnteeeQ/Hw7TMT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25Hij57+nWpdcVTr0t93afQ9z/9m75rxpx7wOmXtMxGxWtvfmtz+vHQ41cr/DqBj7Es9ivhGXv/3B0fdGAAAAAAAAAAAAAAAAAAAgHe1Ip6PFF85dTKtRe89xVvtG41rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzjsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KhbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIZyLF+vP16vFaLeJaRPx8a2ur+vqfra2tiM1y+2EddV8BAAAAAAAAAAAAAAAAAADg2EpFfCxSPPm/m6kREXeGXxt4/MTwpYunLowWUUQqS3rrn5u8drnx7OLNW0vzy8vzc42pdmt2cW5+v9+ufqXVvn1nanziQDrzQIMH3P7B+rOLt15cat346sqezw/VL88sryw1Z/d+OgajFjHdu2ekavDU+ETV6IVWs10dmmr3aWAtYmy/nQEAAAAAAAAAAAAAAAAAAODYGEpFfC5S/OQ/zqfuuvG+zpr/X+o8KrZrX/69nb8FsHBXdvX+/YD9bKf9NnSkWnjfmBqfmJjs2d3Xf29p2aaUingqUnzipQ9V6+FTDO25Nr6se29Zd/N8rhv+lbJudVdVfWRqfKJxdbF96vLCwuJsc6U5szDfmLzVnN33Hw4AAAAAAAAAAAAAAAAAAACANzGUivhRpPivv/231L3vfF7/39d51LP+/zeqJfSVetqd26q1/e+t1vZ3tt93aXToo0/fb/9BrP8v25RSEd+MFOd+9KHqfvrd9f/Td9WWdX8SKV5/+iO5rvZYWdfsdqfzitdbC/Ony9q/jBS/+ka3NqraG7n2yZ3aM2XtYKT4883dtV/NtR/YqT1b1p6MFN/7z71rP7hTe66s/Umk+Ie/aXRrh8ra3821J3Zqn5ldXJh70LCW8/+dSPHXV38rdft83/nv+fsPq3fltnvm/M233675H+7Zt5rn9Y/z/DcfMP8XIsV36h/JdZ2xn8nPP1H9f2f+PxEp/v1fdtdez7Xv36k9s99uHbVy/r8dKb77Fz/e7nOe/zyyOzPUO/+/3Lc7t98lRzT/T/TsG87tmv0Fx+LdaPnFr7/QXFiYX7Jhw4aN7Y2jPjNxGMrP/z+NFP93okjd65j8+f+ezqOd67///sbO5/+lu3LbEX3+v79n36V81dLfF1FfuXmr/6mI+vKLXz/Vutm8MX9jvn32zOlPf/rCmdNnLvQ/1r2429na99i9E5Tz/4NI8cO/++H27zG7r//2vv4fuiu3HdH8P9nbp13XNfseinelcv7/KlI88dkfb/+++WbX/93f/09+bHdu//wd0fx/oGffcG5X6xccCwAAAAAAAAAAgEfJUCrizyLFb//hr6fuGqL9/Pu/ubty2xH9+68TPfvmDmldw74HGQDgGCmv/z4YKf5x6/vba7l3X//Fr3Vre6//7uc43P8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAedSmK+P1IMfTKZlofKB931K+02rfvTI1P7H3YYIoUtSiq+vKrfubsufOfunBxtJtXBg6zGx+O5yavXW48u3jz1tL88vL8XGOq3ZpdnJvf9ys87PF3G6kGsHHzhdtz168vN84+c27X03eGXxt4/MTwpYunLox2a6fGJyYme2r6+t/yd79Hus/+x6KI70eKN4ZfT98diKjFw4/FA947B22w6sRI1Ymp8YmqIwutZnulfDLVclUtotFz0Fh3jA5hLh7KWMRq2fyywSNl9yZvNZeaMwvzjS82l1ZaK63Fdqp1Wlv2pxG1GE0RaxGxscePZH8U8c1I8dLpzfRPAxFFdxw+eXXyS6fPPbg9tQPo4z6U7Wz0R6zVHoE5O8YGooi/jxQ/e/VkfG8goi86X/HxiC+U+UrEy2V+JiKVb4zzET891FM7B6kvijgfKRbTZnp1oDwfdM8rV77c+Hz7+mJPbfe88sh/PhymY35uqkcRP6jO+Jvpn/1cAwAAAAAAAAAAAAAAABwjRaxFiq+cOpmq9cHba4pb7RuNa82Zhc6yvu7av+6a6a2tra1G6uRYzumcqznXcq7n3MgZtXx8zrGc0zlXc67lXM+5kTOKfHzOsZzTOVdzruVcz7mRM/ry8TnHck7nXM25lnM950bOOCZr9wAAAAAAAAAAAAAAAAAAgHeWWhTVXdy/9bXNtDXQub/0dHRy3f1A3/H+PwAA//8YNXNU") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffccb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x3, 0x5001) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_open_dev$sndctrl(&(0x7f0000000100), 0x78, 0xc0f00) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) rmdir(&(0x7f0000000040)='./bus\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000000203010800000000000000000100000608000340000000010900020000000005000200000800010001"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x40000) capget(&(0x7f00000002c0)={0x20071026, r0}, &(0x7f0000000300)={0x6, 0x24, 0x6, 0x1, 0x1d3, 0xa6c000}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, &(0x7f0000000080)) 9.079298413s ago: executing program 0 (id=316): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @local}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 8.29897659s ago: executing program 1 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd, 0x7ff, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x2, 0x3ff, 0x200000}, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x0, 0x1012) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x8) r5 = openat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 8.253638172s ago: executing program 0 (id=321): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x6, 0x247, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x2, 0xd3) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000400)) 6.733464503s ago: executing program 0 (id=324): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44c, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0) 6.135572412s ago: executing program 1 (id=325): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x801) close(r0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2f) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f0000000080)) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x2660) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000180000", @ANYRES32=0x1, @ANYBLOB="000000000000000096c045616070e69b0062ea", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_ublk_setup_io_uring(0x19, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 5.866877274s ago: executing program 3 (id=326): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='binder\x00', 0x200000, 0x0) 5.866239784s ago: executing program 2 (id=327): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffccb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x3, 0x5001) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_open_dev$sndctrl(&(0x7f0000000100), 0x78, 0xc0f00) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) rmdir(&(0x7f0000000040)='./bus\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000000203010800000000000000000100000608000340000000010900020000000005000200000800010001"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x40000) capget(&(0x7f00000002c0)={0x20071026, r0}, &(0x7f0000000300)={0x6, 0x24, 0x6, 0x1, 0x1d3, 0xa6c000}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, &(0x7f0000000080)) 3.377848321s ago: executing program 2 (id=328): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x727, 0x7ffffc, 0x2000000}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 3.125293403s ago: executing program 3 (id=329): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r0, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r0, 0x400c0930, 0x0) ioctl(r0, 0x933, 0x0) 2.964002081s ago: executing program 2 (id=330): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x6, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x0, 0x0, 0x1, 0x420008}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff020025", 0x11}], 0x2}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 2.613623807s ago: executing program 3 (id=331): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15f19d0a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r1}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 2.612570667s ago: executing program 2 (id=332): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x6, 0x247, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x2, 0xd3) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000400)) 2.518442232s ago: executing program 0 (id=333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd, 0x7ff, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x2, 0x3ff, 0x200000}, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x0, 0x1012) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x8) r5 = openat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 2.428051066s ago: executing program 3 (id=334): r0 = add_key$fscrypt_provisioning(&(0x7f0000003040), &(0x7f0000003080)={'syz', 0x1}, &(0x7f00000030c0)=ANY=[@ANYBLOB="02"], 0x18, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='trusted\x00', &(0x7f00000002c0)) 2.1257876s ago: executing program 3 (id=335): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xec}}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x44) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x97, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=""/151}, &(0x7f0000000580)=0x50) ptrace(0x4206, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) 2.12538426s ago: executing program 1 (id=336): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffccb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x3, 0x5001) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_open_dev$sndctrl(&(0x7f0000000100), 0x78, 0xc0f00) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) rmdir(&(0x7f0000000040)='./bus\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000000203010800000000000000000100000608000340000000010900020000000005000200000800010001"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x40000) capget(&(0x7f00000002c0)={0x20071026, r0}, &(0x7f0000000300)={0x6, 0x24, 0x6, 0x1, 0x1d3, 0xa6c000}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, &(0x7f0000000080)) 1.262723151s ago: executing program 2 (id=337): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) mkdirat(r1, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='binder\x00', 0x200000, 0x0) 897.549048ms ago: executing program 3 (id=338): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x727, 0x7ffffc, 0x2000000}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 186.626661ms ago: executing program 1 (id=339): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r1, 0x933, 0x0) 178.336522ms ago: executing program 0 (id=340): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r0, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r0, 0x400c0930, 0x0) ioctl(r0, 0x933, 0x0) 0s ago: executing program 2 (id=341): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}}, 0xb4}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bind$inet(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000008c0), 0x4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) connect$inet(r3, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.183' (ED25519) to the list of known hosts. [ 77.402016][ T5762] cgroup: Unknown subsys name 'net' [ 77.533898][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.243484][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.858538][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.878958][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.898064][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.911430][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.918185][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.919921][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.926675][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.941018][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.957941][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.961941][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.974402][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.978058][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.988942][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.989910][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.003571][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.007550][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.018847][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.028040][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.029560][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.043173][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.044052][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.066567][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.067245][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.081641][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.531901][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 81.614440][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 81.628738][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 81.695320][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 81.830120][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.840238][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.847845][ T5774] bridge_slave_0: entered allmulticast mode [ 81.854666][ T5774] bridge_slave_0: entered promiscuous mode [ 81.865150][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.872979][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.880608][ T5774] bridge_slave_1: entered allmulticast mode [ 81.887608][ T5774] bridge_slave_1: entered promiscuous mode [ 81.906009][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.913211][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.923054][ T5775] bridge_slave_0: entered allmulticast mode [ 81.929979][ T5775] bridge_slave_0: entered promiscuous mode [ 82.005503][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.013829][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.021281][ T5775] bridge_slave_1: entered allmulticast mode [ 82.029215][ T5775] bridge_slave_1: entered promiscuous mode [ 82.052077][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.076482][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.087623][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.094796][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.103039][ T5773] bridge_slave_0: entered allmulticast mode [ 82.111396][ T5773] bridge_slave_0: entered promiscuous mode [ 82.137311][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.176719][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.185290][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.194723][ T5773] bridge_slave_1: entered allmulticast mode [ 82.202522][ T5773] bridge_slave_1: entered promiscuous mode [ 82.225414][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.235095][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.257277][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.264422][ T5776] bridge_slave_0: entered allmulticast mode [ 82.279142][ T5776] bridge_slave_0: entered promiscuous mode [ 82.329130][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.369951][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.377423][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.384909][ T5776] bridge_slave_1: entered allmulticast mode [ 82.392564][ T5776] bridge_slave_1: entered promiscuous mode [ 82.403115][ T5774] team0: Port device team_slave_0 added [ 82.412853][ T5774] team0: Port device team_slave_1 added [ 82.421748][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.448366][ T5775] team0: Port device team_slave_0 added [ 82.493370][ T5775] team0: Port device team_slave_1 added [ 82.604779][ T5773] team0: Port device team_slave_0 added [ 82.620009][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.631049][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.638413][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.664441][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.686509][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.696202][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.724866][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.737573][ T5773] team0: Port device team_slave_1 added [ 82.745278][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.762943][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.771329][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.799747][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.850274][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.859811][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.885868][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.934596][ T5776] team0: Port device team_slave_0 added [ 82.948190][ T5774] hsr_slave_0: entered promiscuous mode [ 82.954452][ T5774] hsr_slave_1: entered promiscuous mode [ 82.962957][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.970051][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.997117][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.009937][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.016890][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.042896][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.056133][ T5776] team0: Port device team_slave_1 added [ 83.067867][ T5779] Bluetooth: hci1: command tx timeout [ 83.067884][ T5778] Bluetooth: hci0: command tx timeout [ 83.109222][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.116201][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.142530][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.147236][ T5779] Bluetooth: hci3: command tx timeout [ 83.153308][ T5778] Bluetooth: hci2: command tx timeout [ 83.160962][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.171100][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.197047][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.225924][ T5775] hsr_slave_0: entered promiscuous mode [ 83.233000][ T5775] hsr_slave_1: entered promiscuous mode [ 83.239471][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.247349][ T5775] Cannot create hsr debugfs directory [ 83.344482][ T5773] hsr_slave_0: entered promiscuous mode [ 83.351912][ T5773] hsr_slave_1: entered promiscuous mode [ 83.359565][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.367329][ T5773] Cannot create hsr debugfs directory [ 83.396517][ T5776] hsr_slave_0: entered promiscuous mode [ 83.403085][ T5776] hsr_slave_1: entered promiscuous mode [ 83.410194][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.417903][ T5776] Cannot create hsr debugfs directory [ 83.808946][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.822166][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.847233][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.866281][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.908699][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.921372][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.934197][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.947973][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.012241][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.027818][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.042318][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.054513][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.142537][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.155506][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.182487][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.192570][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.326450][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.346378][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.385786][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.407778][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.418046][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.425254][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.454748][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.461945][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.493134][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.504192][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.511367][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.522763][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.529960][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.583915][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.615931][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.623150][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.639719][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.646865][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.679011][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.689284][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.775920][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.871900][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.879137][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.907511][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.914638][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.042121][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.159820][ T5778] Bluetooth: hci1: command tx timeout [ 85.165295][ T5778] Bluetooth: hci0: command tx timeout [ 85.227641][ T5778] Bluetooth: hci2: command tx timeout [ 85.228008][ T5779] Bluetooth: hci3: command tx timeout [ 85.251486][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.328731][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.427979][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.449779][ T5775] veth0_vlan: entered promiscuous mode [ 85.490171][ T5774] veth0_vlan: entered promiscuous mode [ 85.522757][ T5775] veth1_vlan: entered promiscuous mode [ 85.540547][ T5774] veth1_vlan: entered promiscuous mode [ 85.560392][ T5776] veth0_vlan: entered promiscuous mode [ 85.593936][ T5776] veth1_vlan: entered promiscuous mode [ 85.604262][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.637576][ T5774] veth0_macvtap: entered promiscuous mode [ 85.646137][ T5775] veth0_macvtap: entered promiscuous mode [ 85.660776][ T5775] veth1_macvtap: entered promiscuous mode [ 85.686092][ T5774] veth1_macvtap: entered promiscuous mode [ 85.725194][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.748422][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.771745][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.783052][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.793407][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.802448][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.815212][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.826959][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.842833][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.856049][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.866680][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.886363][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.901077][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.911948][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.921747][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.932396][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.962372][ T5776] veth0_macvtap: entered promiscuous mode [ 86.000489][ T5776] veth1_macvtap: entered promiscuous mode [ 86.017762][ T5773] veth0_vlan: entered promiscuous mode [ 86.065742][ T5773] veth1_vlan: entered promiscuous mode [ 86.118695][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.132243][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.142745][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.153270][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.164535][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.210647][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.222419][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.232462][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.243045][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.255411][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.266503][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.276136][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.315424][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.329600][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.342222][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.344803][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.352782][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.368494][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.379882][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.391246][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.402805][ T5773] veth0_macvtap: entered promiscuous mode [ 86.441852][ T4779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.470468][ T4779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.476701][ T5773] veth1_macvtap: entered promiscuous mode [ 86.589100][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.638101][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.650672][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.650685][ T5845] syz.0.1[5845]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.662059][ T5845] loop0: detected capacity change from 0 to 512 [ 86.677425][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.688891][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.703672][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.716091][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.730244][ T5845] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.1: corrupted in-inode xattr: invalid ea_ino [ 86.754235][ T5845] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1: couldn't read orphan inode 15 (err -117) [ 86.778697][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.818575][ T5845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.819729][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.842548][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.853175][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.863128][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.874461][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.886663][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.936327][ T4779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.939184][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.968829][ T4779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.981208][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.992127][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.006213][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.074651][ T787] cfg80211: failed to load regulatory.db [ 87.143393][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.167264][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.230490][ T5779] Bluetooth: hci1: command tx timeout [ 87.237475][ T5779] Bluetooth: hci0: command tx timeout [ 87.307229][ T5779] Bluetooth: hci3: command tx timeout [ 87.308926][ T5778] Bluetooth: hci2: command tx timeout [ 88.061288][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.173112][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.295186][ T5863] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.595992][ T5867] loop2: detected capacity change from 0 to 256 [ 88.761849][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.786817][ T5867] ======================================================= [ 88.786817][ T5867] WARNING: The mand mount option has been deprecated and [ 88.786817][ T5867] and is ignored by this kernel. Remove the mand [ 88.786817][ T5867] option from the mount to silence this warning. [ 88.786817][ T5867] ======================================================= [ 88.935111][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.307116][ T5778] Bluetooth: hci0: command tx timeout [ 89.312682][ T5778] Bluetooth: hci1: command tx timeout [ 89.387214][ T5778] Bluetooth: hci3: command tx timeout [ 89.393222][ T5778] Bluetooth: hci2: command tx timeout [ 90.301606][ T5866] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET) [ 92.984886][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.207327][ T787] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.503410][ T787] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.518243][ T787] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.540953][ T787] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 93.550867][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.559231][ T787] usb 2-1: Product: syz [ 93.563808][ T787] usb 2-1: Manufacturer: syz [ 93.568997][ T787] usb 2-1: SerialNumber: syz [ 93.586570][ T5945] bridge0: port 3(syz_tun) entered blocking state [ 93.614417][ T787] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 93.628726][ T5945] bridge0: port 3(syz_tun) entered disabled state [ 93.644604][ T5945] syz_tun: entered allmulticast mode [ 93.662299][ T787] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 93.705369][ T5945] syz_tun: entered promiscuous mode [ 93.766167][ T5945] bridge0: port 3(syz_tun) entered blocking state [ 93.766900][ T787] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 93.772966][ T5945] bridge0: port 3(syz_tun) entered forwarding state [ 95.487909][ T787] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.913026][ T787] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 96.108269][ T5939] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 96.141207][ T787] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 96.155301][ T787] usb 1-1: Product: syz [ 96.159623][ T787] usb 1-1: Manufacturer: syz [ 96.164464][ T787] usb 1-1: SerialNumber: syz [ 96.174538][ T787] usb 1-1: config 0 descriptor?? [ 96.224268][ T23] usb 2-1: USB disconnect, device number 2 [ 96.226020][ T787] ch341 1-1:0.0: ch341-uart converter detected [ 96.238234][ T23] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 97.300108][ T23] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 97.327433][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 97.342657][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 97.351969][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 97.361202][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 97.399472][ T5960] 9pnet_virtio: no channels available for device syz [ 97.414048][ T23] ti_usb_3410_5052 2-1:2.0: device disconnected [ 97.460731][ T787] usb 1-1: failed to receive control message: -71 [ 97.469004][ T787] ch341-uart: probe of ttyUSB2 failed with error -71 [ 97.512338][ T787] usb 1-1: USB disconnect, device number 2 [ 97.538670][ T787] ch341 1-1:0.0: device disconnected [ 97.659490][ T5985] jffs2: notice: (5985) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 99.473973][ T5996] netlink: 64 bytes leftover after parsing attributes in process `syz.3.19'. [ 99.495791][ T5996] netlink: 64 bytes leftover after parsing attributes in process `syz.3.19'. [ 102.601848][ T6034] loop0: detected capacity change from 0 to 2048 [ 102.887141][ T6034] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.484632][ T6074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'. [ 103.516489][ T6074] capability: warning: `syz.0.23' uses deprecated v2 capabilities in a way that may be insecure [ 104.728681][ T6104] loop0: detected capacity change from 0 to 2048 [ 104.759230][ T6104] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.950893][ T6112] netlink: 144 bytes leftover after parsing attributes in process `syz.3.41'. [ 105.170070][ T6115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.38'. [ 108.201474][ T6157] loop2: detected capacity change from 0 to 2048 [ 108.230356][ T6157] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.241257][ T6155] misc userio: Invalid payload size [ 108.257551][ T6155] misc userio: Invalid payload size [ 108.302408][ T6155] misc userio: Invalid payload size [ 109.365273][ T6164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.54'. [ 110.888125][ T6189] process 'syz.0.61' launched './file1' with NULL argv: empty string added [ 111.020198][ T6194] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.65'. [ 111.084558][ T6196] loop0: detected capacity change from 0 to 2048 [ 111.108112][ T6196] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.489948][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 113.475962][ T6226] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.75'. [ 113.777672][ T6232] loop0: detected capacity change from 0 to 2048 [ 113.796956][ T6232] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.055327][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 115.286998][ C1] sched: RT throttling activated [ 115.873092][ T6258] Config c/1 of g1 needs at least one function. [ 115.933000][ T6258] udc dummy_udc.0: failed to start g1: -22 [ 115.973397][ T6258] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 116.048311][ T6258] UDC core: g1: couldn't find an available UDC or it's busy [ 116.143199][ T6270] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.88'. [ 116.340577][ T6277] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.369050][ T6289] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 118.376549][ T6289] udc dummy_udc.0: failed to start g1: -19 [ 118.447947][ T6289] UDC core: g1: couldn't find an available UDC or it's busy [ 118.852936][ T6303] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.99'. [ 119.272359][ T6317] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 119.304638][ T6317] udc dummy_udc.0: failed to start g1: -19 [ 119.319507][ T6317] UDC core: g1: couldn't find an available UDC or it's busy [ 120.307351][ T5779] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 120.316084][ T5779] Bluetooth: hci3: Injecting HCI hardware error event [ 120.324648][ T5779] Bluetooth: hci3: hardware error 0x00 [ 120.789038][ T6336] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 120.810389][ T6336] udc dummy_udc.0: failed to start g1: -19 [ 120.816938][ T6336] UDC core: g1: couldn't find an available UDC or it's busy [ 120.891320][ T6338] Zero length message leads to an empty skb [ 120.972542][ T6341] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.108'. [ 123.027062][ T5779] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 123.186382][ T6362] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 123.214169][ T6362] udc dummy_udc.0: failed to start g1: -19 [ 123.231224][ T6362] UDC core: g1: couldn't find an available UDC or it's busy [ 123.889871][ T6380] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.119'. [ 126.923013][ T6404] syzkaller0: entered promiscuous mode [ 127.106481][ T6404] syzkaller0: entered allmulticast mode [ 127.172256][ T6410] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 127.660063][ T6410] udc dummy_udc.0: failed to start g1: -19 [ 127.774875][ T6410] UDC core: g1: couldn't find an available UDC or it's busy [ 128.270652][ T6419] misc userio: Invalid payload size [ 128.297679][ T6419] misc userio: Invalid payload size [ 128.304875][ T6419] misc userio: Invalid payload size [ 129.146442][ T6427] loop3: detected capacity change from 0 to 2048 [ 129.329541][ T6427] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.533919][ T6459] loop2: detected capacity change from 0 to 2048 [ 132.573342][ T6459] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.557296][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.577545][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.704547][ T6466] futex_wake_op: syz.1.147 tries to shift op by 144; fix this program [ 133.724428][ T6466] loop1: detected capacity change from 0 to 256 [ 134.429645][ T6466] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 134.865813][ T6468] loop0: detected capacity change from 0 to 128 [ 134.937079][ T6468] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 135.179294][ T5788] udevd[5788]: incorrect ext4 checksum on /dev/loop0 [ 137.296875][ T6491] loop0: detected capacity change from 0 to 256 [ 137.356473][ T6491] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 137.439044][ T28] audit: type=1800 audit(1789161498.951:2): pid=6491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.157" name="file1" dev="loop0" ino=1048605 res=0 errno=0 [ 137.572501][ T6491] syz.0.157: attempt to access beyond end of device [ 137.572501][ T6491] loop0: rw=0, sector=256, nr_sectors = 8 limit=256 [ 137.615170][ T6493] loop1: detected capacity change from 0 to 2048 [ 137.741146][ T6493] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.711280][ T6499] loop0: detected capacity change from 0 to 256 [ 138.843070][ T6499] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 138.939428][ T28] audit: type=1800 audit(1789161500.451:3): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.158" name="file1" dev="loop0" ino=1048606 res=0 errno=0 [ 138.973927][ T6499] syz.0.158: attempt to access beyond end of device [ 138.973927][ T6499] loop0: rw=0, sector=256, nr_sectors = 8 limit=256 [ 139.137582][ T6505] loop2: detected capacity change from 0 to 128 [ 139.195364][ T6505] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 139.223153][ T5788] udevd[5788]: incorrect ext4 checksum on /dev/loop2 [ 140.190950][ T6513] loop0: detected capacity change from 0 to 512 [ 140.221282][ T6513] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 140.325102][ T6513] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 140.427789][ T6513] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.163: bad orphan inode 131083 [ 140.468800][ T6513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.515110][ T6520] loop1: detected capacity change from 0 to 256 [ 140.721602][ T6520] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 140.785150][ T6513] capability: warning: `syz.0.163' uses 32-bit capabilities (legacy support in use) [ 140.808010][ T28] audit: type=1800 audit(1789161502.321:4): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.166" name="file1" dev="loop1" ino=1048607 res=0 errno=0 [ 141.124100][ T6527] loop3: detected capacity change from 0 to 2048 [ 141.173360][ T6527] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.825589][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.876130][ T6540] loop1: detected capacity change from 0 to 256 [ 143.988304][ T6542] loop2: detected capacity change from 0 to 128 [ 144.038483][ T6540] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 144.058330][ T6542] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 144.566168][ T5794] udevd[5794]: incorrect ext4 checksum on /dev/loop2 [ 144.604476][ T28] audit: type=1800 audit(1789161506.081:5): pid=6540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.172" name="file1" dev="loop1" ino=1048608 res=0 errno=0 [ 144.687991][ T6540] syz.1.172: attempt to access beyond end of device [ 144.687991][ T6540] loop1: rw=0, sector=256, nr_sectors = 8 limit=256 [ 144.722074][ T5794] udevd[5794]: incorrect ext4 checksum on /dev/loop2 [ 145.834252][ T6562] loop3: detected capacity change from 0 to 256 [ 145.892183][ T6562] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 145.924298][ T6561] loop1: detected capacity change from 0 to 2048 [ 146.024063][ T28] audit: type=1800 audit(1789161507.511:6): pid=6562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.178" name="file1" dev="loop3" ino=1048622 res=0 errno=0 [ 146.045329][ T6561] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.280864][ T6594] loop1: detected capacity change from 0 to 2048 [ 148.303024][ T6594] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.630204][ T6602] netlink: 'syz.2.194': attribute type 49 has an invalid length. [ 149.218104][ T6606] loop2: detected capacity change from 0 to 4096 [ 149.268021][ T6606] EXT4-fs (loop2): Test dummy encryption mode enabled [ 149.347810][ T6606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.629556][ T6602] ip6gretap0: entered promiscuous mode [ 150.635103][ T6602] ip6gretap0: entered allmulticast mode [ 151.108569][ T6606] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 151.276414][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.502818][ T6643] loop3: detected capacity change from 0 to 2048 [ 151.619659][ T6643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.675426][ T6665] loop2: detected capacity change from 0 to 256 [ 152.854969][ T6665] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 153.347875][ T28] audit: type=1800 audit(1789161514.851:7): pid=6665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.207" name="file1" dev="loop2" ino=1048623 res=0 errno=0 [ 154.303676][ T6697] loop3: detected capacity change from 0 to 2048 [ 154.330780][ T6697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.177104][ T5825] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 156.940322][ T5825] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 10240, setting to 1024 [ 156.951544][ T5825] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 156.964301][ T5825] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 156.973415][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.981923][ T5825] usb 3-1: Product: syz [ 156.986109][ T5825] usb 3-1: Manufacturer: syz [ 156.990798][ T5825] usb 3-1: SerialNumber: syz [ 157.241565][ T5825] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 157.250951][ T6740] loop1: detected capacity change from 0 to 128 [ 157.277260][ T6740] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 157.321430][ T5788] udevd[5788]: incorrect ext4 checksum on /dev/loop1 [ 157.452724][ T5843] usb 3-1: USB disconnect, device number 2 [ 157.483974][ T5843] usblp0: removed [ 157.548309][ T6742] loop3: detected capacity change from 0 to 2048 [ 157.576151][ T6742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.227664][ T6755] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 159.234448][ T6755] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 159.290335][ T6755] vhci_hcd vhci_hcd.0: Device attached [ 159.715559][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.728027][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.741082][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.752798][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.770587][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.783318][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.796079][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.807962][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.819466][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 159.830976][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 160.018658][ T6756] vhci_hcd: connection closed [ 160.333157][ T5910] vhci_hcd: stop threads [ 160.480305][ T5910] vhci_hcd: release socket [ 160.533595][ T5910] vhci_hcd: disconnect device [ 161.032620][ T6785] futex_wake_op: syz.1.240 tries to shift op by 144; fix this program [ 161.065518][ T6785] loop1: detected capacity change from 0 to 256 [ 161.105701][ T6785] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 161.158325][ T28] audit: type=1800 audit(1789161522.651:8): pid=6785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.240" name="file1" dev="loop1" ino=1048624 res=0 errno=0 [ 162.134338][ T6793] loop3: detected capacity change from 0 to 2048 [ 162.172491][ T6793] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.246185][ T6795] loop0: detected capacity change from 0 to 512 [ 162.355980][ T6795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 162.380026][ T6795] System zones: 1-12 [ 162.449218][ T6795] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.245: missing EA_INODE flag [ 162.483197][ T6795] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.245: error while reading EA inode 12 err=-117 [ 162.497683][ T6795] EXT4-fs (loop0): 1 orphan inode deleted [ 162.606504][ T6795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.273922][ T5843] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 164.282617][ T6813] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 164.289154][ T6813] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 164.298299][ T6813] vhci_hcd vhci_hcd.0: Device attached [ 164.305155][ T6814] vhci_hcd: cannot find the pending unlink 3 [ 164.817674][ T5843] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 10240, setting to 1024 [ 164.835798][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.945606][ T5843] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 165.037344][ T6817] sctp_transport_update_pmtu: 49 callbacks suppressed [ 165.037400][ T6817] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.056278][ T6817] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.070308][ T6817] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.082642][ T6817] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.129530][ T2195] usb 40-1: SetAddress Request (2) to port 0 [ 165.140054][ T6818] FAULT_INJECTION: forcing a failure. [ 165.140054][ T6818] name failslab, interval 1, probability 0, space 0, times 0 [ 165.152993][ T6818] CPU: 0 PID: 6818 Comm: syz.3.247 Not tainted syzkaller #0 [ 165.160315][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.170399][ T6818] Call Trace: [ 165.173710][ T6818] [ 165.176668][ T6818] dump_stack_lvl+0x18c/0x250 [ 165.181396][ T6818] ? show_regs_print_info+0x20/0x20 [ 165.186631][ T6818] ? load_image+0x420/0x420 [ 165.191169][ T6818] ? __lock_acquire+0x7d80/0x7d80 [ 165.196237][ T6818] should_fail_ex+0x394/0x4c0 [ 165.200961][ T6818] should_failslab+0x9/0x20 [ 165.205515][ T6818] slab_pre_alloc_hook+0x59/0x300 [ 165.210590][ T6818] ? bpf_prog_alloc+0x3d/0x1a0 [ 165.215396][ T6818] ? bpf_prog_create_from_user+0xa6/0x420 [ 165.221156][ T6818] ? do_seccomp+0x794/0xdc0 [ 165.225704][ T6818] kmem_cache_alloc_node+0x5e/0x310 [ 165.230948][ T6818] ? alloc_vmap_area+0x1b4/0x1e50 [ 165.236028][ T6818] alloc_vmap_area+0x1b4/0x1e50 [ 165.240942][ T6818] ? vm_map_ram+0xcf0/0xcf0 [ 165.245493][ T6818] ? rcu_is_watching+0x15/0xb0 [ 165.250303][ T6818] __get_vm_area_node+0x162/0x370 [ 165.255379][ T6818] __vmalloc_node_range+0x36f/0x1320 [ 165.260708][ T6818] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 165.266293][ T6818] ? __stack_depot_save+0x1f/0x660 [ 165.271451][ T6818] ? kasan_set_track+0x5f/0x70 [ 165.276257][ T6818] ? do_syscall_64+0x55/0xb0 [ 165.280896][ T6818] ? free_vm_area+0x50/0x50 [ 165.285450][ T6818] ? __asan_memset+0x22/0x40 [ 165.290084][ T6818] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 165.295670][ T6818] __vmalloc+0x7a/0x90 [ 165.299782][ T6818] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 165.305368][ T6818] bpf_prog_alloc_no_stats+0x46/0x430 [ 165.310787][ T6818] bpf_prog_alloc+0x3d/0x1a0 [ 165.315415][ T6818] ? bpf_prog_create_from_user+0x21/0x420 [ 165.321184][ T6818] bpf_prog_create_from_user+0xa6/0x420 [ 165.326775][ T6818] ? seccomp_notify_detach+0x220/0x220 [ 165.332280][ T6818] do_seccomp+0x794/0xdc0 [ 165.336664][ T6818] ? prctl_set_seccomp+0x60/0x60 [ 165.341637][ T6818] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 165.347671][ T6818] ? lockdep_hardirqs_on+0x98/0x150 [ 165.352914][ T6818] do_syscall_64+0x55/0xb0 [ 165.357374][ T6818] ? clear_bhb_loop+0x40/0x90 [ 165.362086][ T6818] ? clear_bhb_loop+0x40/0x90 [ 165.366800][ T6818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.372732][ T6818] RIP: 0033:0x7f5aefb9e159 [ 165.377189][ T6818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.396826][ T6818] RSP: 002b:00007f5aed991028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 165.405280][ T6818] RAX: ffffffffffffffda RBX: 00007f5aefe26270 RCX: 00007f5aefb9e159 [ 165.413284][ T6818] RDX: 00002000000000c0 RSI: 0000000000000007 RDI: 0000000000000001 [ 165.421286][ T6818] RBP: 00007f5aefc3503b R08: 0000000000000000 R09: 0000000000000000 [ 165.429288][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.437290][ T6818] R13: 00007f5aefe26308 R14: 00007f5aefe26270 R15: 00007ffde88b6c28 [ 165.445316][ T6818] [ 165.450272][ T6818] syz.3.247: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 165.466824][ T6818] CPU: 0 PID: 6818 Comm: syz.3.247 Not tainted syzkaller #0 [ 165.474146][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.484226][ T6818] Call Trace: [ 165.487535][ T6818] [ 165.490493][ T6818] dump_stack_lvl+0x18c/0x250 [ 165.495217][ T6818] ? show_regs_print_info+0x20/0x20 [ 165.500455][ T6818] ? load_image+0x420/0x420 [ 165.505007][ T6818] ? __rcu_read_unlock+0x7c/0xd0 [ 165.509983][ T6818] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 165.516440][ T6818] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 165.522988][ T6818] warn_alloc+0x246/0x340 [ 165.527350][ T6818] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 165.533025][ T6818] ? zone_watermark_ok_safe+0x230/0x230 [ 165.538614][ T6818] ? __get_vm_area_node+0x33f/0x370 [ 165.543862][ T6818] __vmalloc_node_range+0x394/0x1320 [ 165.549189][ T6818] ? __stack_depot_save+0x1f/0x660 [ 165.554338][ T6818] ? kasan_set_track+0x5f/0x70 [ 165.559140][ T6818] ? do_syscall_64+0x55/0xb0 [ 165.563785][ T6818] ? free_vm_area+0x50/0x50 [ 165.568336][ T6818] ? __asan_memset+0x22/0x40 [ 165.572977][ T6818] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 165.578560][ T6818] __vmalloc+0x7a/0x90 [ 165.582672][ T6818] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 165.588293][ T6818] bpf_prog_alloc_no_stats+0x46/0x430 [ 165.593705][ T6818] bpf_prog_alloc+0x3d/0x1a0 [ 165.598333][ T6818] ? bpf_prog_create_from_user+0x21/0x420 [ 165.604096][ T6818] bpf_prog_create_from_user+0xa6/0x420 [ 165.609683][ T6818] ? seccomp_notify_detach+0x220/0x220 [ 165.615190][ T6818] do_seccomp+0x794/0xdc0 [ 165.619580][ T6818] ? prctl_set_seccomp+0x60/0x60 [ 165.624557][ T6818] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 165.630587][ T6818] ? lockdep_hardirqs_on+0x98/0x150 [ 165.635830][ T6818] do_syscall_64+0x55/0xb0 [ 165.640284][ T6818] ? clear_bhb_loop+0x40/0x90 [ 165.645003][ T6818] ? clear_bhb_loop+0x40/0x90 [ 165.649719][ T6818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.655653][ T6818] RIP: 0033:0x7f5aefb9e159 [ 165.660286][ T6818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.679940][ T6818] RSP: 002b:00007f5aed991028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 165.688401][ T6818] RAX: ffffffffffffffda RBX: 00007f5aefe26270 RCX: 00007f5aefb9e159 [ 165.696405][ T6818] RDX: 00002000000000c0 RSI: 0000000000000007 RDI: 0000000000000001 [ 165.704412][ T6818] RBP: 00007f5aefc3503b R08: 0000000000000000 R09: 0000000000000000 [ 165.712415][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.720420][ T6818] R13: 00007f5aefe26308 R14: 00007f5aefe26270 R15: 00007ffde88b6c28 [ 165.728446][ T6818] [ 165.733052][ T6818] Mem-Info: [ 165.736243][ T6818] active_anon:6147 inactive_anon:0 isolated_anon:0 [ 165.736243][ T6818] active_file:13717 inactive_file:39992 isolated_file:0 [ 165.736243][ T6818] unevictable:768 dirty:152 writeback:0 [ 165.736243][ T6818] slab_reclaimable:10210 slab_unreclaimable:91760 [ 165.736243][ T6818] mapped:25716 shmem:1373 pagetables:622 [ 165.736243][ T6818] sec_pagetables:0 bounce:0 [ 165.736243][ T6818] kernel_misc_reclaimable:0 [ 165.736243][ T6818] free:1348901 free_pcp:7837 free_cma:0 [ 165.782620][ T6818] Node 0 active_anon:24588kB inactive_anon:0kB active_file:54868kB inactive_file:159764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102864kB dirty:608kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11448kB pagetables:2488kB sec_pagetables:0kB all_unreclaimable? no [ 165.815276][ T6818] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 165.845598][ T6818] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.873300][ T6818] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 165.879315][ T6818] Node 0 DMA32 free:1489208kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:24552kB inactive_anon:0kB active_file:54868kB inactive_file:158928kB unevictable:1536kB writepending:608kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:7444kB local_pcp:1364kB free_cma:0kB [ 165.910798][ T6818] lowmem_reserve[]: 0 0 0 0 0 [ 165.915874][ T6818] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.942698][ T6818] lowmem_reserve[]: 0 0 0 0 0 [ 165.947669][ T6818] Node 1 Normal free:3891036kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23904kB local_pcp:10304kB free_cma:0kB [ 165.977268][ T6818] lowmem_reserve[]: 0 0 0 0 0 [ 165.982156][ T6818] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 165.996328][ T6818] Node 0 DMA32: 756*4kB (UME) 1493*8kB (UM) 1130*16kB (UM) 659*32kB (UME) 261*64kB (UME) 175*128kB (UME) 53*256kB (UM) 26*512kB (UM) 13*1024kB (UM) 14*2048kB (ME) 324*4096kB (M) = 1489208kB [ 166.015857][ T6818] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 166.027752][ T6818] Node 1 Normal: 217*4kB (U) 51*8kB (UME) 42*16kB (UME) 46*32kB (UME) 12*64kB (UE) 10*128kB (UME) 2*256kB (UE) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3891036kB [ 166.046195][ T6818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.055844][ T6818] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.065223][ T6818] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.074841][ T6818] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.084196][ T6818] 55082 total pagecache pages [ 166.090000][ T6818] 0 pages in swap cache [ 166.094381][ T6818] Free swap = 124996kB [ 166.098636][ T6818] Total swap = 124996kB [ 166.102831][ T6818] 2097051 pages RAM [ 166.106669][ T6818] 0 pages HighMem/MovableOnly [ 166.111411][ T6818] 416960 pages reserved [ 166.115644][ T6818] 0 pages cma reserved [ 166.131201][ T6817] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 166.143391][ T6817] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 166.155355][ T6817] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 166.167302][ T6817] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 166.179186][ T6817] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 166.192414][ T6817] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 166.277064][ T2195] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 168.259032][ T6815] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 168.280233][ T5843] usb 3-1: string descriptor 0 read error: -71 [ 168.286529][ T5843] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 168.294654][ T39] vhci_hcd: stop threads [ 168.300074][ T39] vhci_hcd: release socket [ 168.304554][ T39] vhci_hcd: disconnect device [ 168.317269][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.349719][ T5843] usb 3-1: can't set config #1, error -71 [ 168.370441][ T5843] usb 3-1: USB disconnect, device number 3 [ 168.833776][ T6843] futex_wake_op: syz.0.251 tries to shift op by 144; fix this program [ 168.898290][ T6843] loop0: detected capacity change from 0 to 256 [ 169.118413][ T6843] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 169.160323][ T28] audit: type=1800 audit(1789161530.671:9): pid=6842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.251" name="file1" dev="loop0" ino=1048625 res=0 errno=0 [ 169.779018][ T6847] syz.0.254 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 169.848601][ T6850] loop3: detected capacity change from 0 to 512 [ 169.858269][ T6852] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 169.865291][ T6852] udc dummy_udc.0: failed to start g1: -19 [ 169.944519][ T6850] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 169.944827][ T6852] UDC core: g1: couldn't find an available UDC or it's busy [ 169.994931][ T6853] loop1: detected capacity change from 0 to 2048 [ 170.007266][ T6850] System zones: 1-12 [ 170.022840][ T6850] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.256: missing EA_INODE flag [ 170.061769][ T6850] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.256: error while reading EA inode 12 err=-117 [ 170.083708][ T6850] EXT4-fs (loop3): 1 orphan inode deleted [ 170.093233][ T6850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.119168][ T6853] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.277257][ T2195] usb 40-1: device descriptor read/8, error -110 [ 174.023241][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.281361][ T6886] netlink: 220 bytes leftover after parsing attributes in process `syz.0.262'. [ 174.310238][ T2195] usb usb40-port1: attempt power cycle [ 174.323371][ T6886] tc_dump_action: action bad kind [ 175.407515][ T2195] usb usb40-port1: unable to enumerate USB device [ 175.685410][ T6906] loop0: detected capacity change from 0 to 2048 [ 175.730427][ T6900] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 175.758325][ T6900] udc dummy_udc.0: failed to start g1: -19 [ 175.768850][ T6910] loop3: detected capacity change from 0 to 512 [ 175.778577][ T6900] UDC core: g1: couldn't find an available UDC or it's busy [ 175.778839][ T6906] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.822653][ T6910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 175.838032][ T6910] System zones: 1-12 [ 175.860334][ T6910] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.269: missing EA_INODE flag [ 175.960197][ T6910] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.269: error while reading EA inode 12 err=-117 [ 176.021829][ T6910] EXT4-fs (loop3): 1 orphan inode deleted [ 176.073189][ T6910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.713411][ T6932] misc userio: Invalid payload size [ 177.756447][ T6932] misc userio: Invalid payload size [ 177.802257][ T6932] misc userio: Invalid payload size [ 178.564596][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.018607][ T6948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.278'. [ 179.250210][ T6948] syz.2.278 (6948) used greatest stack depth: 17896 bytes left [ 179.262596][ T6953] loop3: detected capacity change from 0 to 2048 [ 179.330504][ T6953] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.536173][ T6958] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 179.583365][ T6958] udc dummy_udc.0: failed to start g1: -19 [ 179.630244][ T6958] UDC core: g1: couldn't find an available UDC or it's busy [ 180.454420][ T6965] netlink: 220 bytes leftover after parsing attributes in process `syz.2.284'. [ 180.477072][ T6965] tc_dump_action: action bad kind [ 180.613011][ T6969] loop3: detected capacity change from 0 to 512 [ 180.691635][ T6969] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 180.699984][ T6969] System zones: 1-12 [ 180.737536][ T6969] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.283: missing EA_INODE flag [ 180.810732][ T6969] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.283: error while reading EA inode 12 err=-117 [ 180.875709][ T6969] EXT4-fs (loop3): 1 orphan inode deleted [ 180.890337][ T6969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.353655][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.500033][ T6996] loop0: detected capacity change from 0 to 2048 [ 183.538115][ T6996] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.440198][ T7011] loop3: detected capacity change from 0 to 128 [ 185.455772][ T7012] loop0: detected capacity change from 0 to 512 [ 185.469415][ T7011] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 185.510825][ T7012] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 185.636603][ T7012] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.296: bad orphan inode 131083 [ 185.737768][ T7012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.859202][ T7025] loop3: detected capacity change from 0 to 512 [ 186.916842][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.113361][ T7025] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 187.254294][ T7025] System zones: 1-12 [ 187.384621][ T7025] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.300: missing EA_INODE flag [ 187.568164][ T7025] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.300: error while reading EA inode 12 err=-117 [ 187.584829][ T7025] EXT4-fs (loop3): 1 orphan inode deleted [ 187.598353][ T7025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.656159][ T7039] loop1: detected capacity change from 0 to 2048 [ 188.706471][ T7039] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.082904][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.056040][ T7054] loop1: detected capacity change from 0 to 128 [ 191.116095][ T7054] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 191.172275][ T5787] udevd[5787]: incorrect ext4 checksum on /dev/loop1 [ 191.355424][ T7059] loop2: detected capacity change from 0 to 512 [ 191.430250][ T7059] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 192.363939][ T7059] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.310: bad orphan inode 131083 [ 192.423766][ T7059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.217195][ T7075] futex_wake_op: syz.0.312 tries to shift op by 144; fix this program [ 193.247148][ T7075] loop0: detected capacity change from 0 to 256 [ 193.644665][ T7073] loop1: detected capacity change from 0 to 2048 [ 193.669641][ T7075] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 193.681230][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.710630][ T28] audit: type=1800 audit(1789161555.211:10): pid=7074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.312" name="file1" dev="loop0" ino=1048652 res=0 errno=0 [ 193.751480][ T7073] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.563965][ T7088] netlink: 220 bytes leftover after parsing attributes in process `syz.2.317'. [ 194.614072][ T7088] tc_dump_action: action bad kind [ 194.647673][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.654037][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.849653][ T7092] loop0: detected capacity change from 0 to 128 [ 194.880188][ T7092] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 195.349333][ T5788] udevd[5788]: incorrect ext4 checksum on /dev/loop0 [ 197.031668][ T7105] loop0: detected capacity change from 0 to 512 [ 197.045821][ T7105] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 197.167102][ T7105] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.324: bad orphan inode 131083 [ 197.196649][ T7105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.472416][ T7113] loop2: detected capacity change from 0 to 2048 [ 197.588862][ T7113] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.853207][ T7122] netlink: 220 bytes leftover after parsing attributes in process `syz.2.328'. [ 199.917404][ T7122] tc_dump_action: action bad kind [ 200.516900][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.550715][ T7132] loop2: detected capacity change from 0 to 128 [ 200.601774][ T7132] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 201.072510][ T5794] udevd[5794]: incorrect ext4 checksum on /dev/loop2 [ 201.981887][ T7146] loop1: detected capacity change from 0 to 2048 [ 202.048518][ T7146] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.977925][ T7157] netlink: 220 bytes leftover after parsing attributes in process `syz.3.338'. [ 203.001752][ T7157] tc_dump_action: action bad kind [ 203.051231][ T7158] ------------[ cut here ]------------ [ 203.057511][ T7158] kobject: '(null)' (ffff888025828060): is not initialized, yet kobject_get() is being called. [ 204.992103][ T7158] WARNING: CPU: 1 PID: 7158 at lib/kobject.c:642 kobject_add_internal+0x115/0xc90 [ 205.002527][ T7158] Modules linked in: [ 205.006466][ T7158] CPU: 1 PID: 7158 Comm: syz.1.339 Not tainted syzkaller #0 [ 205.014155][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.024305][ T7158] RIP: 0010:kobject_add_internal+0x115/0xc90 [ 205.030384][ T7158] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 fe 5a 64 f7 49 8b 34 24 48 c7 c7 00 7e ea 8b 4c 89 e2 e8 2b a6 d5 f6 <0f> 0b e9 e5 00 00 00 e8 5f d9 0b f7 b8 fe ff ff ff e9 f0 06 00 00 [ 205.050161][ T7158] RSP: 0018:ffffc9000388f8c8 EFLAGS: 00010246 [ 205.056274][ T7158] RAX: e357eedaf8e66f00 RBX: ffff88807d348878 RCX: 0000000000080000 [ 205.064359][ T7158] RDX: ffffc9000eb70000 RSI: 0000000000009a89 RDI: 0000000000009a8a [ 205.072437][ T7158] RBP: 0000000000000000 R08: ffffc9000388f4c7 R09: 1ffff92000711e98 [ 205.080518][ T7158] R10: dffffc0000000000 R11: fffff52000711e99 R12: ffff888025828060 [ 205.088599][ T7158] R13: dffffc0000000000 R14: ffff88802582809c R15: dffffc0000000000 [ 205.096610][ T7158] FS: 00007f68dd1f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 205.106026][ T7158] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.112801][ T7158] CR2: 00007f231d21b450 CR3: 0000000024e5a000 CR4: 00000000003506e0 [ 205.120894][ T7158] Call Trace: [ 205.124209][ T7158] [ 205.127231][ T7158] ? kfree+0x31/0x1a0 [ 205.131273][ T7158] kobject_add+0x164/0x240 [ 205.135753][ T7158] ? kobject_init+0x1d0/0x1d0 [ 205.140558][ T7158] ? mddev_create_serial_pool+0x210/0x470 [ 205.146331][ T7158] bind_rdev_to_array+0xb4e/0x1260 [ 205.151648][ T7158] ? bind_rdev_to_array+0x5fb/0x1260 [ 205.157028][ T7158] ? md_import_device+0x7b0/0x7b0 [ 205.162093][ T7158] md_add_new_disk+0xe2e/0x17a0 [ 205.167085][ T7158] md_ioctl+0x214c/0x24d0 [ 205.171445][ T7158] ? blkdev_common_ioctl+0x10ee/0x2580 [ 205.176909][ T7158] ? md_release+0x1e0/0x1e0 [ 205.181499][ T7158] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 205.187288][ T7158] ? blkdev_bszset+0x1f0/0x1f0 [ 205.192113][ T7158] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 205.197688][ T7158] ? md_release+0x1e0/0x1e0 [ 205.202243][ T7158] blkdev_ioctl+0x5b2/0x730 [ 205.207226][ T7158] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 205.212748][ T7158] ? bpf_lsm_file_ioctl+0x9/0x10 [ 205.217868][ T7158] ? security_file_ioctl+0x80/0xa0 [ 205.223033][ T7158] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 205.228751][ T7158] __se_sys_ioctl+0xfd/0x170 [ 205.233398][ T7158] do_syscall_64+0x55/0xb0 [ 205.237934][ T7158] ? clear_bhb_loop+0x40/0x90 [ 205.242656][ T7158] ? clear_bhb_loop+0x40/0x90 [ 205.247445][ T7158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.253515][ T7158] RIP: 0033:0x7f68def9e159 [ 205.258122][ T7158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.277877][ T7158] RSP: 002b:00007f68dd1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.286302][ T7158] RAX: ffffffffffffffda RBX: 00007f68df226090 RCX: 00007f68def9e159 [ 205.294369][ T7158] RDX: 0000200000000420 RSI: 0000000040140921 RDI: 0000000000000004 [ 205.302436][ T7158] RBP: 00007f68df03503b R08: 0000000000000000 R09: 0000000000000000 [ 205.310899][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.319078][ T7158] R13: 00007f68df226128 R14: 00007f68df226090 R15: 00007ffd6a0a66f8 [ 205.327154][ T7158] [ 205.330195][ T7158] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 205.337472][ T7158] CPU: 1 PID: 7158 Comm: syz.1.339 Not tainted syzkaller #0 [ 205.344754][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.355604][ T7158] Call Trace: [ 205.358892][ T7158] [ 205.361821][ T7158] dump_stack_lvl+0x18c/0x250 [ 205.366503][ T7158] ? show_regs_print_info+0x20/0x20 [ 205.371702][ T7158] ? load_image+0x420/0x420 [ 205.376215][ T7158] panic+0x2ca/0x720 [ 205.380122][ T7158] ? bpf_jit_dump+0xd0/0xd0 [ 205.384638][ T7158] __warn+0x2e0/0x470 [ 205.388625][ T7158] ? kobject_add_internal+0x115/0xc90 [ 205.394004][ T7158] ? kobject_add_internal+0x115/0xc90 [ 205.399382][ T7158] report_bug+0x2be/0x4f0 [ 205.403727][ T7158] ? kobject_add_internal+0x115/0xc90 [ 205.409110][ T7158] ? kobject_add_internal+0x115/0xc90 [ 205.414508][ T7158] ? kobject_add_internal+0x117/0xc90 [ 205.419880][ T7158] handle_bug+0xcf/0x120 [ 205.424125][ T7158] exc_invalid_op+0x1a/0x50 [ 205.428627][ T7158] asm_exc_invalid_op+0x1a/0x20 [ 205.433476][ T7158] RIP: 0010:kobject_add_internal+0x115/0xc90 [ 205.439472][ T7158] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 fe 5a 64 f7 49 8b 34 24 48 c7 c7 00 7e ea 8b 4c 89 e2 e8 2b a6 d5 f6 <0f> 0b e9 e5 00 00 00 e8 5f d9 0b f7 b8 fe ff ff ff e9 f0 06 00 00 [ 205.459106][ T7158] RSP: 0018:ffffc9000388f8c8 EFLAGS: 00010246 [ 205.465175][ T7158] RAX: e357eedaf8e66f00 RBX: ffff88807d348878 RCX: 0000000000080000 [ 205.473146][ T7158] RDX: ffffc9000eb70000 RSI: 0000000000009a89 RDI: 0000000000009a8a [ 205.481117][ T7158] RBP: 0000000000000000 R08: ffffc9000388f4c7 R09: 1ffff92000711e98 [ 205.489088][ T7158] R10: dffffc0000000000 R11: fffff52000711e99 R12: ffff888025828060 [ 205.497072][ T7158] R13: dffffc0000000000 R14: ffff88802582809c R15: dffffc0000000000 [ 205.505069][ T7158] ? kobject_add_internal+0x115/0xc90 [ 205.510449][ T7158] ? kfree+0x31/0x1a0 [ 205.514439][ T7158] kobject_add+0x164/0x240 [ 205.518861][ T7158] ? kobject_init+0x1d0/0x1d0 [ 205.523544][ T7158] ? mddev_create_serial_pool+0x210/0x470 [ 205.529274][ T7158] bind_rdev_to_array+0xb4e/0x1260 [ 205.534400][ T7158] ? bind_rdev_to_array+0x5fb/0x1260 [ 205.539698][ T7158] ? md_import_device+0x7b0/0x7b0 [ 205.544753][ T7158] md_add_new_disk+0xe2e/0x17a0 [ 205.549608][ T7158] md_ioctl+0x214c/0x24d0 [ 205.553940][ T7158] ? blkdev_common_ioctl+0x10ee/0x2580 [ 205.559411][ T7158] ? md_release+0x1e0/0x1e0 [ 205.563918][ T7158] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 205.569553][ T7158] ? blkdev_bszset+0x1f0/0x1f0 [ 205.574319][ T7158] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 205.579794][ T7158] ? md_release+0x1e0/0x1e0 [ 205.584302][ T7158] blkdev_ioctl+0x5b2/0x730 [ 205.588809][ T7158] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 205.594271][ T7158] ? bpf_lsm_file_ioctl+0x9/0x10 [ 205.599217][ T7158] ? security_file_ioctl+0x80/0xa0 [ 205.604327][ T7158] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 205.609790][ T7158] __se_sys_ioctl+0xfd/0x170 [ 205.614413][ T7158] do_syscall_64+0x55/0xb0 [ 205.618891][ T7158] ? clear_bhb_loop+0x40/0x90 [ 205.623574][ T7158] ? clear_bhb_loop+0x40/0x90 [ 205.628259][ T7158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.634162][ T7158] RIP: 0033:0x7f68def9e159 [ 205.638578][ T7158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.658196][ T7158] RSP: 002b:00007f68dd1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.666612][ T7158] RAX: ffffffffffffffda RBX: 00007f68df226090 RCX: 00007f68def9e159 [ 205.674580][ T7158] RDX: 0000200000000420 RSI: 0000000040140921 RDI: 0000000000000004 [ 205.682552][ T7158] RBP: 00007f68df03503b R08: 0000000000000000 R09: 0000000000000000 [ 205.690519][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.698488][ T7158] R13: 00007f68df226128 R14: 00007f68df226090 R15: 00007ffd6a0a66f8 [ 205.706465][ T7158] [ 205.709617][ T7158] Kernel Offset: disabled [ 205.713993][ T7158] Rebooting in 86400 seconds..