last executing test programs: 1m59.541547221s ago: executing program 1 (id=155): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_emit_vhci(0x0, 0x7) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0xffffffffffffff0b) write$nbd(0xffffffffffffffff, 0x0, 0x8d) write$cgroup_pressure(r1, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x40000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000002180), &(0x7f0000002140)='./bus\x00', 0x800800, &(0x7f0000002200)=ANY=[], 0x1, 0x1cd, &(0x7f0000004c80)="$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") 1m57.301986346s ago: executing program 1 (id=156): socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() openat$autofs(0xffffffffffffff9c, 0x0, 0x40002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80) creat(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x165840, 0x2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) 1m51.973085266s ago: executing program 1 (id=165): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f00000004c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1f8, 0x20a, 0x278, 0x1f8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4917, 0xfffb, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x27, 0xe, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x1, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m49.358986969s ago: executing program 1 (id=168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() syz_io_uring_setup(0x386c, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0xfc92) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x100141, 0xa) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) pwrite64(r5, &(0x7f0000000140)="b9", 0x1, 0xe78) write(r4, &(0x7f0000000080)='4', 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000003a80)={0x0, 0x0, 0x0}, 0x24000180) 1m47.316673135s ago: executing program 1 (id=169): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r0, &(0x7f0000000400)='transport=loop,nqn=tes', 0x16) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) connect$inet6(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) write(r2, &(0x7f00000000c0)="8f2a0a65bd8c202b0304000e0580a7b6070d63e286a5cefe", 0x5ac) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r3, 0xc0606610, &(0x7f0000000040)=0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRESOCT=r1], 0x40) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r4, &(0x7f0000002140)=""/17, 0x11, 0x0) symlinkat(&(0x7f0000000180)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000001500)={0x2020}, 0xfffffe23) 1m38.805852484s ago: executing program 1 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r4, 0x0, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x0, 0x3}, 0x10) bind$tipc(r3, 0x0, 0x0) close(r3) 1m38.344744236s ago: executing program 32 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r4, 0x0, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x0, 0x3}, 0x10) bind$tipc(r3, 0x0, 0x0) close(r3) 21.0957829s ago: executing program 0 (id=266): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) mprotect(&(0x7f00008b8000/0x1000)=nil, 0x1000, 0x1000005) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x108242, 0x78e22799f4a46fa9) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0xfffffffffffffffc}) fcntl$lock(r5, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000100)=0x40, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 19.330603583s ago: executing program 0 (id=268): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000003340), 0x800, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000003400)={0x28, 0x0, 0x0, 0x0, 0x3, 0x5, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000300000000000070000ffffffbf0001"], &(0x7f0000000100)='syzkaller\x00', 0xf}, 0x94) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000200)) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000400)={'P\x00', 0x0, 0x5, 0x3, 0x7ff, 0x1, "ff9b15e5a8c80625c8c35500", '\x00\x00\a\x00', "020400", "001197ff", ["50d5c2a708000000e40000b6", "006167000000000000ffff00", "a1330700"]}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/133, 0x85, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x406, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0xc1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) r6 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r6, 0x0, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r8, 0x6f2d, 0x1) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000100)={0x4, r4, 0x1}) bind$alg(r7, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000400)="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", 0x40) 16.972686874s ago: executing program 4 (id=272): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/vm/nr_hugepages\x00', &(0x7f0000000180)={0x8080, 0x104, 0xa}, 0x18) r6 = openat(r5, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r6, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, r7, 0x40000) 13.65220253s ago: executing program 4 (id=274): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000040)={r5, 0x3}, 0x8) pipe2(0x0, 0x4000) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180), &(0x7f0000000300)=0x4) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)={0x202000, 0x18}, 0x18) open_tree(r6, &(0x7f00000002c0)='./mnt\x00', 0x1) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aab4d9aaaaaab7aaaaaaaaaa08004500001cffff000000029078ac1e0001ac1e010117009078ffffffffd74094af9b2f62aa0cb2ecbd61ae1ab42fc2ff7ae45f80308d4c4be7422720859a58bf286c84af343ad38af68889b6a9eacef11247b3eeb77f9a504f5eafa5e30fadfbaf22011a11e47039"], 0x0) 13.651830159s ago: executing program 2 (id=275): socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x150) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) recvmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0xee00) keyctl$chown(0x4, 0x0, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) 13.184512782s ago: executing program 2 (id=276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r1, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x68, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x80, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='FFFFFFFF FFFFFFFF FFFFFFFF F', 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4, @remote}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xbffffc, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0xf04, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 12.724722673s ago: executing program 2 (id=277): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1df) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='common_pid ~ 0', 0xe) 11.107537509s ago: executing program 2 (id=278): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x80) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="02000000010005000000000002000000", @ANYRES32=r0, @ANYBLOB="0400060000000000100004000000000020000700"], 0x2c, 0x1) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee00, 0x1000) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100020062b2d8ab0400000000000000100006000000000020"], 0x24, 0x3) 11.064133021s ago: executing program 0 (id=279): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x54, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) 9.923451835s ago: executing program 0 (id=281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1a001, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000000)='minix\x00', 0x2808404, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000a80)={0x0, 0x9, 0x1, [0x0, 0x4, 0x6, 0x3, 0xfffffffffffffff8], [0x6, 0x3, 0x8001, 0x8, 0x1, 0x6, 0x4, 0x7ff, 0x4, 0xc2, 0x2, 0x100000000, 0x3, 0xff, 0x2, 0x7, 0x1, 0x3, 0xfffffffffffffffd, 0xfe, 0x7, 0xc55, 0x3, 0x8, 0x7ff, 0x9, 0x2, 0xfffffffffffffffa, 0x5, 0x5, 0x5, 0x8, 0x580, 0x1, 0xafc, 0x5, 0x2, 0x9, 0x3, 0x4, 0x40, 0x3, 0x100000001, 0x7fffffffffffffff, 0x0, 0x101, 0xd8, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3, 0x1, 0xa6e9, 0x6, 0x9, 0x5, 0x3, 0xffffffffffff1644, 0x1, 0x7ff, 0x5, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x4, 0x7fff, 0x9, 0x2, 0x5, 0x1, 0x8001, 0xeae6, 0x7, 0x80, 0x4, 0x83, 0x6, 0x6, 0x9, 0x5, 0xe8, 0x6, 0x9b, 0x6, 0xd7, 0x800, 0xb, 0x7, 0x76, 0xe, 0xc, 0x100000001, 0x0, 0x9, 0x80000000, 0x6, 0x1, 0x2, 0x80000001, 0x236fe678, 0x1e3, 0x2, 0x6, 0x5ea, 0x15, 0x0, 0x8, 0x80000000, 0x9, 0x3ff, 0x9, 0x793, 0x6, 0x8000, 0xf55f, 0x9]}) ioctl$BTRFS_IOC_RESIZE(r7, 0x50009403, &(0x7f0000000ec0)={{r2}, {@val={r9}, @max}}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000180)={r8}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000140)={r8}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000600)={0x3cc, 0x13, 0x200, 0x70bd2a, 0x25dfdbfd, {0x25, 0x1, 0xf9, 0xc, {0x4e20, 0x4e24, [0x8, 0x4, 0x7], [0x5, 0x1, 0x1fe, 0x9], 0x0, [0x4, 0x1]}, 0xb7ea, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xab, 0x1, "da71b988e538ff41d9e492d5845e3ae65e0031a2019e55bebd6c752d00f225c06e60f755cadcb87dc44c4d3b32e8d34c9343ef680a4e2c30e6dea611418af1e2a215fe897cda00e7dd8b91ac1c2e19dae35fe8657f58439ecffd11f259c080b75516248eefce620fec591f1cc5f7da8ad0c7ca009fa184757643879f103d7989565a4c975d1717216e4ed072447747d1905540a8dd64429166f652eff1674af6503a59ae2b8c2b"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "67b87e3413cf75a13e3ca2fdea9e2c1968e9209657e188aeee"}, @INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "e39e71d02c81aebe76bce210cda9813ad4fa437a43ed61ea13523a42ac6f82896c6ee2abdd16"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "060578163e58866a181f4263330804ac385d846b2debb269291f993fd1bc11a52a2943ae5b651329c25c032c5b4dccf6e9dbcafe6c506da91950dad7b3b8d7bf1713257c02365afdb284c83fb90f3ef2e0d4684d627e87d8de22f56ebfd2707d7d88b51825d8e9566e08f02dd018dc186908750deca78dce5d0ddcac1f4e61acde5e4cbf713fd1bf04f73d63377d65064b4d2641ba2cff5a1e9ddc1a231a85"}, @INET_DIAG_REQ_BYTECODE={0x8b, 0x1, "a425181bcca558b313108c74c2902227758650220b2d57dc6a88a850dba702e64f53b9de538c4a86e642ed00971fffc87668db3af5c64042ecdb9eb74e3a5885134edd9f5b922bcca30ec88e47a22316f69dedfd991bfe9d1b82243245fca37dadf78e64dcd35d40fc0aee52869ed0d823d14499f035238bf07283864ffe60f51927ce3cf3f922"}, @INET_DIAG_REQ_BYTECODE={0xce, 0x1, "42164f8fb40d7bd828994d36e89f18c01e6c144865618e3b4ed37f7f30e7b37fea51f5e95520072f18d5dcb4ddc7598dafd907ea63c0d71ffcd9019556cfb764e6b549c8da87ac2dc65ca2fe19ce3d2a76d50441716a87dad129f95a81497f2bf18faeda4a20eb35dd1c0949bff0f82ef03c3f43a8d95a067a67acd037b30f99aa8f2eed237d5bb99ba369a56dd10d2c17a646b56554b331f88676f92f8083daac6fcce6eef43e54cacfd125f7806689ee794b5fd380f25b641511b53153e688df90982ef0b31f31c189"}, @INET_DIAG_REQ_BYTECODE={0x88, 0x1, "98dc7dc42229194c46e3ad3f606a81afce150a352c2ba13351749b7c9e07d9f0b2b738c244689b7b78e4127dbb7a878376e2ff67e95350ebb270df7b58b5bd15041611930af7faddc23bec8879940e9b498bdbf7f343777acab34fa21e37ec2b9529a97b546d3f49924cdee0601624def8ddc4b9548de0705fce96123a81f8fb12421a5c"}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x80}, 0x40800) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x950}, 0x0) 9.752385233s ago: executing program 2 (id=283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xf0}}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) unshare(0x2000200) unshare(0x40000200) syz_usb_connect(0x3, 0x3c, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r5 = dup(0xffffffffffffffff) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r6, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40091) 8.298500301s ago: executing program 0 (id=284): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/vm/nr_hugepages\x00', &(0x7f0000000180)={0x8080, 0x104, 0xa}, 0x18) r6 = openat(r5, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r6, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, r7, 0x40000) 8.298240501s ago: executing program 3 (id=285): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) syz_emit_vhci(0x0, 0x4) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x2c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_init_net_socket$x25(0x9, 0x5, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)='X', 0x1}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, 0x0, 0x101000, 0x41) close_range(r2, 0xffffffffffffffff, 0x0) 6.41322707s ago: executing program 4 (id=286): ioctl$KVM_CAP_PTP_KVM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) socket$inet_smc(0x2b, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x43c1, &(0x7f0000000400)={0x0, 0xfeda, 0x10000, 0x0, 0x53}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x58, 0x0, @fd, 0x8000, 0x0, 0xa3cd, 0x4, 0x1}) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$sequencer(0xffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$SNDCTL_SYNTH_INFO(r4, 0xc08c5102, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r5, &(0x7f00000001c0)='0x01', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r6, &(0x7f0000000640)='high-speed\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_sync\x00', 0x2, 0x0) write(r7, &(0x7f0000000540)='adaptive\x00', 0x9) symlinkat(&(0x7f0000000280)='./config\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') r8 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r8, &(0x7f0000000340)='dummy_', 0x6) nanosleep(&(0x7f0000000380)={0x0, 0x1dcd6500}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x15, 0x2) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, 0x0) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000480)={0x21, 0x1, 0x100, 0x600, 0x0, 0x3e8, 0x0}) 6.232531028s ago: executing program 3 (id=287): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) fcntl$setown(r0, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0xfffffff4, 0x4) 6.121181713s ago: executing program 3 (id=288): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x121602, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r6, &(0x7f0000000280)='1', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 4.69000594s ago: executing program 2 (id=289): socket$netlink(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES8=r0], 0x0, 0x9, 0xba, &(0x7f0000000480)=""/186, 0x41100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') fstat(r2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f00005cf000/0x3000)=nil, 0x3000, 0x16) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000002900)={0xfffffffffffffffa, r2, 0x0, {0x200, 0x81}, 0x4b}, 0x1) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000300)='ufs\x00', 0x2140e3, 0x0) madvise(&(0x7f0000523000/0x2000)=nil, 0x2000, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.1\x00', 0x1ff) syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.551096047s ago: executing program 4 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0xf0002010}) poll(&(0x7f0000000100)=[{r2, 0x5f4b8f9e57b39c22}], 0x1, 0x80) socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x3ff, 0x3, 0x5, 0xbb1, 0xdd13}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x1fc) write$binfmt_format(r3, &(0x7f0000000000)='1\x00', 0x2) socket(0x28, 0x5, 0x0) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x10374a2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) 2.851987837s ago: executing program 3 (id=291): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r0, 0xc) 2.57170827s ago: executing program 3 (id=292): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48}) 2.523650662s ago: executing program 4 (id=293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="6a0ac4ff0020000071109e6bd1d6020480dd43cab4000000000095000000000000"], &(0x7f0000000440)='GPL\x00'}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, 0x0, &(0x7f00000002c0), &(0x7f00000003c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r3, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80, 0x0, r4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x80) fsetxattr$system_posix_acl(r8, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="02000000010005000000000002000000", @ANYRES32=r7, @ANYBLOB="0400060000000000100004000000000020000700"], 0x2c, 0x1) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') 1.481302851s ago: executing program 3 (id=294): openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='bRequestTyp', 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, 0x0, 0x24181, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r3, &(0x7f0000000180)=0xfe5f, 0x12) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r4, 0x40186f40, &(0x7f0000000100)="ffffffff00"/24) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) 178.238642ms ago: executing program 4 (id=295): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='1\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r6, &(0x7f0000000580)='./file0\n', 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r8, &(0x7f00000006c0)='fc\n', 0x3) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r9, &(0x7f0000000740)='fc\n', 0x3) r10 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r10, &(0x7f00000007c0)='nn-0x3333333333333333:pn-0x4444444444444444\n', 0x2c) symlinkat(&(0x7f0000000800)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r11 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r11, &(0x7f00000008c0)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=testsubsys\x00', 0x86) 0s ago: executing program 0 (id=296): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='2\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1:0\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1:1\n', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r6, &(0x7f00000003c0)='0\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r7, &(0x7f0000000440)='1\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r8, &(0x7f00000004c0)='writemostly\n', 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/resync_start\x00', 0x1, 0x0) write(r9, &(0x7f0000000540)='none\n', 0x5) r10 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r10, &(0x7f00000005c0), 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 60.808325][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.825167][ T5435] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. syzkaller login: [ 81.108715][ T5762] cgroup: Unknown subsys name 'net' [ 81.250633][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.028464][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.765460][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.781808][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.801612][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.810323][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.818289][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.826122][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.870424][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.879247][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.888255][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.905959][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.962228][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.970869][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.985583][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.997636][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.997909][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.012660][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.022197][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.022419][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.032156][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.044579][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.106456][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.127695][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.149611][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.157729][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.420356][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 85.616909][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.625318][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.633675][ T5773] bridge_slave_0: entered allmulticast mode [ 85.641102][ T5773] bridge_slave_0: entered promiscuous mode [ 85.657346][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.665107][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.672533][ T5773] bridge_slave_1: entered allmulticast mode [ 85.679870][ T5773] bridge_slave_1: entered promiscuous mode [ 85.718357][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.765411][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.792299][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 85.838981][ T5773] team0: Port device team_slave_0 added [ 85.865322][ T5773] team0: Port device team_slave_1 added [ 85.980353][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 85.992973][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.000079][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.027628][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.040322][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 86.072638][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.080112][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.087711][ T5777] bridge_slave_0: entered allmulticast mode [ 86.095704][ T5777] bridge_slave_0: entered promiscuous mode [ 86.104012][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.111204][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.138329][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.177424][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.185110][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.192536][ T5777] bridge_slave_1: entered allmulticast mode [ 86.199904][ T5777] bridge_slave_1: entered promiscuous mode [ 86.256048][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.269104][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.376538][ T5777] team0: Port device team_slave_0 added [ 86.388364][ T5777] team0: Port device team_slave_1 added [ 86.437342][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.445529][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.453323][ T5778] bridge_slave_0: entered allmulticast mode [ 86.460918][ T5778] bridge_slave_0: entered promiscuous mode [ 86.477455][ T5773] hsr_slave_0: entered promiscuous mode [ 86.484442][ T5773] hsr_slave_1: entered promiscuous mode [ 86.531303][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.538913][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.552101][ T5778] bridge_slave_1: entered allmulticast mode [ 86.559898][ T5778] bridge_slave_1: entered promiscuous mode [ 86.582336][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.589887][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.600825][ T5779] bridge_slave_0: entered allmulticast mode [ 86.608109][ T5779] bridge_slave_0: entered promiscuous mode [ 86.617259][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.625018][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.632843][ T5779] bridge_slave_1: entered allmulticast mode [ 86.640848][ T5779] bridge_slave_1: entered promiscuous mode [ 86.649260][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.656992][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.683986][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.733889][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.744315][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.751879][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.778639][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.816141][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.863294][ T5085] Bluetooth: hci0: command tx timeout [ 86.877166][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.910692][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.953956][ T5778] team0: Port device team_slave_0 added [ 86.979562][ T5779] team0: Port device team_slave_0 added [ 86.988175][ T5778] team0: Port device team_slave_1 added [ 87.000152][ T5777] hsr_slave_0: entered promiscuous mode [ 87.007692][ T5777] hsr_slave_1: entered promiscuous mode [ 87.014695][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.023332][ T5777] Cannot create hsr debugfs directory [ 87.037982][ T5779] team0: Port device team_slave_1 added [ 87.075272][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.082632][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.109261][ T5085] Bluetooth: hci2: command tx timeout [ 87.109526][ T5783] Bluetooth: hci1: command tx timeout [ 87.116725][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.170333][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.178505][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.231524][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.269711][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.277034][ T5783] Bluetooth: hci3: command tx timeout [ 87.291559][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.324991][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.338936][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.352996][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.384588][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.635187][ T5779] hsr_slave_0: entered promiscuous mode [ 87.647288][ T5779] hsr_slave_1: entered promiscuous mode [ 87.654151][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.667095][ T5779] Cannot create hsr debugfs directory [ 87.729585][ T5778] hsr_slave_0: entered promiscuous mode [ 87.736676][ T5778] hsr_slave_1: entered promiscuous mode [ 87.743686][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.751388][ T5778] Cannot create hsr debugfs directory [ 87.897525][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.945510][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.989742][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.032554][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.264930][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.281111][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.301392][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.347626][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.421000][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.445677][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.474758][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.486136][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.611024][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.639700][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.653779][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.664990][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.686508][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.718476][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.760112][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.767640][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.780191][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.787804][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.801393][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.883432][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.933650][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.941252][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.952398][ T5783] Bluetooth: hci0: command tx timeout [ 88.990718][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.998165][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.118762][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.183271][ T5783] Bluetooth: hci2: command tx timeout [ 89.183593][ T5085] Bluetooth: hci1: command tx timeout [ 89.227329][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.296511][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.335818][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.343104][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.352438][ T5085] Bluetooth: hci3: command tx timeout [ 89.406061][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.413700][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.452969][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.476760][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.527285][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.534800][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.555439][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.563482][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.717249][ T5773] veth0_vlan: entered promiscuous mode [ 89.734422][ T5773] veth1_vlan: entered promiscuous mode [ 89.755092][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.889046][ T5773] veth0_macvtap: entered promiscuous mode [ 89.935593][ T5773] veth1_macvtap: entered promiscuous mode [ 89.981250][ T5777] veth0_vlan: entered promiscuous mode [ 90.024592][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.065593][ T5777] veth1_vlan: entered promiscuous mode [ 90.077478][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.144646][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.160060][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.169449][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.181175][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.242784][ T5777] veth0_macvtap: entered promiscuous mode [ 90.271388][ T5777] veth1_macvtap: entered promiscuous mode [ 90.353164][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.361861][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.374949][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.389063][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.406398][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.417658][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.430517][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.448045][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.489544][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.498859][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.508826][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.518570][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.566631][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.587144][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.638548][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.663675][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.796152][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.805700][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.829078][ T5778] veth0_vlan: entered promiscuous mode [ 90.853388][ T5779] veth0_vlan: entered promiscuous mode [ 90.892876][ T5778] veth1_vlan: entered promiscuous mode [ 90.904029][ T5779] veth1_vlan: entered promiscuous mode [ 90.936433][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.973500][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.022649][ T5085] Bluetooth: hci0: command tx timeout [ 91.029987][ T5779] veth0_macvtap: entered promiscuous mode [ 91.075901][ T5779] veth1_macvtap: entered promiscuous mode [ 91.168742][ T5778] veth0_macvtap: entered promiscuous mode [ 91.229631][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.260286][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.273710][ T5085] Bluetooth: hci2: command tx timeout [ 91.279669][ T5783] Bluetooth: hci1: command tx timeout [ 91.286596][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.298679][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.314035][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.427270][ T5085] Bluetooth: hci3: command tx timeout [ 91.476001][ T5778] veth1_macvtap: entered promiscuous mode [ 91.830322][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.901144][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.923023][ T5843] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.972275][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.011305][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.033824][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.073756][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.102440][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.130337][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.146247][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.168277][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.189785][ T5849] nvmet: adding nsid 1 to subsystem testnqn [ 92.191858][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.211512][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.228124][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.248565][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.259350][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.276463][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.324664][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.338387][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.349768][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.360805][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.371519][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.384053][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.396524][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.497432][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.509222][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.525150][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.536909][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.974418][ T5857] syz.1.8[5857]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.034885][ T5857] loop1: detected capacity change from 0 to 512 [ 93.152093][ T5085] Bluetooth: hci0: command tx timeout [ 93.341655][ T5085] Bluetooth: hci2: command tx timeout [ 93.347348][ T5085] Bluetooth: hci1: command tx timeout [ 93.837817][ T5859] Cannot find add_set index 1 as target [ 95.241506][ C0] sched: RT throttling activated [ 95.308098][ T5783] Bluetooth: hci3: command tx timeout [ 95.501294][ T5857] fscrypt: Error allocating hmac(sha512): -2 [ 95.743196][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.751207][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.926480][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.955124][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.311518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.852988][ T9] cfg80211: failed to load regulatory.db [ 97.977078][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.018726][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.110299][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.153932][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.111942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 111.671837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 112.391339][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 112.508886][ T5914] syzkaller0: entered promiscuous mode [ 112.517194][ T5914] syzkaller0: entered allmulticast mode [ 115.973832][ T5930] Zero length message leads to an empty skb [ 116.078876][ T5930] loop1: detected capacity change from 0 to 16 [ 116.145410][ T5930] erofs: (device loop1): mounted with root inode @ nid 36. [ 116.245100][ T5930] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 116.257142][ T5930] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 116.272153][ T5930] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 116.337488][ T5930] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 116.358725][ T5935] device-mapper: ioctl: Invalid ioctl structure: name , dev f800 [ 116.468727][ T28] audit: type=1800 audit(1789622386.758:2): pid=5930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.23" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 121.153651][ T5948] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 11 (only 8 groups) [ 123.358256][ T56] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.471859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.261631][ T56] usb 1-1: Using ep0 maxpacket: 32 [ 125.305149][ T56] usb 1-1: device descriptor read/all, error -71 [ 125.419703][ T5964] syzkaller0: entered promiscuous mode [ 125.425808][ T5964] syzkaller0: entered allmulticast mode [ 127.031736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 127.736585][ T5975] netlink: 36 bytes leftover after parsing attributes in process `syz.1.32'. [ 127.784385][ T5975] syzkaller0: entered promiscuous mode [ 127.796557][ T5975] syzkaller0: entered allmulticast mode [ 128.722700][ T5980] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 129.591851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 130.001878][ T5983] syzkaller0: entered promiscuous mode [ 130.007545][ T5983] syzkaller0: entered allmulticast mode [ 130.039165][ T5983] tipc: Started in network mode [ 130.051957][ T5983] tipc: Node identity a2b6b01987d9, cluster identity 4711 [ 130.059638][ T5983] tipc: Enabled bearer , priority 0 [ 130.132560][ T5983] tipc: Resetting bearer [ 130.165852][ T5982] tipc: Resetting bearer [ 130.272586][ T5982] tipc: Disabling bearer [ 131.381519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 132.129278][ T5990] loop0: detected capacity change from 0 to 512 [ 132.203953][ T5990] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 132.212246][ T5990] System zones: 1-12 [ 132.262918][ T5990] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.35: missing EA_INODE flag [ 132.334698][ T5990] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.35: error while reading EA inode 12 err=-117 [ 132.410930][ T5996] loop1: detected capacity change from 0 to 1024 [ 132.528513][ T5990] EXT4-fs (loop0): 1 orphan inode deleted [ 132.761984][ T5990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.275567][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.289798][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.496030][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.539743][ T6000] loop1: detected capacity change from 0 to 1024 [ 135.608872][ T6007] ubi0: attaching mtd0 [ 135.625398][ T6007] ubi0: scanning is finished [ 135.630113][ T6007] ubi0: empty MTD device detected [ 136.139665][ T6007] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 137.271788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 140.241707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 140.891862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 140.905480][ T6018] ima: policy update completed [ 140.919472][ T28] audit: type=1807 audit(1789622411.198:3): action=measure res=1 [ 141.221606][ T28] audit: type=1802 audit(1789622411.198:4): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.0.46" res=1 errno=0 [ 141.302377][ T28] audit: type=1800 audit(1789622411.588:5): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14738 res=0 errno=0 [ 141.381597][ T28] audit: type=1800 audit(1789622411.628:6): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14738 res=0 errno=0 [ 143.980576][ T28] audit: type=1800 audit(1789622414.268:7): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=115935 res=0 errno=0 [ 144.251514][ T28] audit: type=1800 audit(1789622414.538:8): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 144.323831][ T28] audit: type=1800 audit(1789622414.588:9): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 144.392789][ T28] audit: type=1800 audit(1789622414.648:10): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 144.456119][ T28] audit: type=1800 audit(1789622414.678:11): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 147.525934][ T28] audit: type=1800 audit(1789622417.818:12): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14738 res=0 errno=0 [ 147.618870][ T6041] loop2: detected capacity change from 0 to 164 [ 147.656563][ T6041] ======================================================= [ 147.656563][ T6041] WARNING: The mand mount option has been deprecated and [ 147.656563][ T6041] and is ignored by this kernel. Remove the mand [ 147.656563][ T6041] option from the mount to silence this warning. [ 147.656563][ T6041] ======================================================= [ 147.730799][ T28] audit: type=1800 audit(1789622418.018:13): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14738 res=0 errno=0 [ 148.222671][ T6044] loop3: detected capacity change from 0 to 2048 [ 148.508903][ T6046] rock: directory entry would overflow storage [ 148.515935][ T6046] rock: sig=0x4f50, size=4, remaining=3 [ 148.521872][ T6046] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 148.570047][ T28] audit: type=1800 audit(1789622418.848:14): pid=6042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14851 res=0 errno=0 [ 148.724158][ T6044] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 148.777720][ T6044] NILFS (loop3): mounting unchecked fs [ 148.886853][ T6042] udevd[6042]: incorrect nilfs2 checksum on /dev/loop3 [ 148.906450][ T6044] NILFS (loop3): recovery complete [ 149.003950][ T28] audit: type=1804 audit(1789622419.298:15): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="udevd" name="/sys/devices/virtual/block/loop2/uevent" dev="sysfs" ino=14738 res=1 errno=0 [ 149.073732][ T6047] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.136602][ T28] audit: type=1800 audit(1789622419.388:16): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14738 res=0 errno=0 [ 149.198623][ T6049] tipc: Started in network mode [ 149.222371][ T6049] tipc: Node identity 2000004, cluster identity 4711 [ 149.239500][ T28] audit: type=1800 audit(1789622419.528:17): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14851 res=0 errno=0 [ 149.254265][ T6049] tipc: Node number set to 33554436 [ 149.355373][ T28] audit: type=1326 audit(1789622419.648:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.3.53" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ba299e159 code=0x0 [ 149.489590][ T28] audit: type=1800 audit(1789622419.778:19): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14738 res=0 errno=0 [ 149.711598][ T28] audit: type=1800 audit(1789622419.988:20): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 150.597905][ T28] audit: type=1800 audit(1789622420.888:21): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 150.925752][ T6062] loop2: detected capacity change from 0 to 1024 [ 150.963689][ T6062] EXT4-fs: Ignoring removed orlov option [ 150.982310][ T6065] ip_tables: iptables: counters copy to user failed while replacing table [ 151.077042][ T6062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.310481][ T6061] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.637727][ T6084] overlayfs: failed to clone upperpath [ 154.651590][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 154.651610][ T28] audit: type=1800 audit(1789622424.928:26): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.63" name="file1" dev="tmpfs" ino=98 res=0 errno=0 [ 156.178102][ T28] audit: type=1800 audit(1789622426.458:27): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 159.293127][ T28] audit: type=1800 audit(1789622429.568:28): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 159.455192][ T6102] hugetlbfs: syz.1.61 (6102): Using mlock ulimits for SHM_HUGETLB is obsolete [ 160.349667][ T28] audit: type=1800 audit(1789622430.638:29): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 160.515697][ T6106] loop1: detected capacity change from 0 to 2048 [ 160.567070][ T28] audit: type=1800 audit(1789622430.828:30): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 160.654694][ T6106] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.764675][ T28] audit: type=1800 audit(1789622431.038:31): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 162.352543][ T28] audit: type=1800 audit(1789622432.648:32): pid=6042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 162.466027][ T28] audit: type=1800 audit(1789622432.758:33): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 163.006305][ T6124] No source specified [ 164.413388][ T6127] tc action pedit offset must be on 32 bit boundaries [ 164.420699][ T6127] tc action pedit offset must be on 32 bit boundaries [ 164.428304][ T6127] tc action pedit offset must be on 32 bit boundaries [ 164.435280][ T6127] tc action pedit offset must be on 32 bit boundaries [ 164.442689][ T6127] tc action pedit offset must be on 32 bit boundaries [ 164.449620][ T6127] tc action pedit offset must be on 32 bit boundaries [ 164.456544][ T6127] tc action pedit offset must be on 32 bit boundaries [ 164.463541][ T6127] tc action pedit offset must be on 32 bit boundaries [ 164.470533][ T6127] tc action pedit offset must be on 32 bit boundaries [ 164.477422][ T6127] tc action pedit offset must be on 32 bit boundaries [ 164.484499][ T6127] 0: reclassify loop, rule prio 0, protocol 800 [ 166.305174][ T28] audit: type=1800 audit(1789622436.598:34): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 169.647524][ T28] audit: type=1800 audit(1789622439.938:35): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 169.953074][ T6150] tipc: Enabling of bearer rejected, failed to enable media [ 170.303174][ T28] audit: type=1800 audit(1789622440.598:36): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 170.618555][ T28] audit: type=1800 audit(1789622440.908:37): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 170.726529][ T28] audit: type=1800 audit(1789622441.018:38): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 175.047015][ T28] audit: type=1800 audit(1789622445.338:39): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 175.264502][ T6171] syzkaller0: entered promiscuous mode [ 175.281869][ T6171] syzkaller0: entered allmulticast mode [ 175.343410][ T6171] tipc: Enabled bearer , priority 0 [ 175.392732][ T6171] tipc: Resetting bearer [ 175.415013][ T6170] tipc: Resetting bearer [ 175.512521][ T6170] tipc: Disabling bearer [ 175.684769][ T28] audit: type=1800 audit(1789622445.978:40): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 176.802240][ T28] audit: type=1800 audit(1789622447.098:41): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.83" name="file1" dev="tmpfs" ino=140 res=0 errno=0 [ 177.018724][ T6179] Device name cannot be null; rc = [-22] [ 178.071889][ T28] audit: type=1800 audit(1789622448.348:42): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.83" name="file1" dev="tmpfs" ino=140 res=0 errno=0 [ 178.177035][ T28] audit: type=1800 audit(1789622448.408:43): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 178.492109][ T28] audit: type=1800 audit(1789622448.788:44): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 179.281841][ T28] audit: type=1800 audit(1789622449.558:45): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 180.820139][ T28] audit: type=1800 audit(1789622451.018:46): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 181.047561][ T28] audit: type=1800 audit(1789622451.328:47): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 181.245044][ T28] audit: type=1800 audit(1789622451.538:48): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 181.980293][ T28] audit: type=1800 audit(1789622452.248:49): pid=6205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.94" name="resource0" dev="sysfs" ino=85049 res=0 errno=0 [ 182.852477][ T6205] x86/PAT: syz.1.94:6205 freeing invalid memtype [mem 0xfe004000-0xfe008fff] [ 184.058616][ T28] audit: type=1800 audit(1789622454.338:50): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 184.151879][ T28] audit: type=1800 audit(1789622454.438:51): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4825 res=0 errno=0 [ 184.209814][ T6205] x86/PAT: syz.1.94:6205 freeing invalid memtype [mem 0xfe000000-0xfe003fff] [ 184.344065][ T28] audit: type=1800 audit(1789622454.638:52): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 187.022204][ T6227] "syz.2.100" (6227) uses obsolete ecb(arc4) skcipher [ 187.456095][ T28] audit: type=1800 audit(1789622457.748:53): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 190.367012][ T28] audit: type=1800 audit(1789622460.408:54): pid=6241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.98" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=163 res=0 errno=0 [ 190.850707][ T28] audit: type=1800 audit(1789622460.438:55): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 192.186957][ T28] audit: type=1800 audit(1789622462.478:56): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 192.433190][ T28] audit: type=1800 audit(1789622462.698:57): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 192.492288][ T28] audit: type=1800 audit(1789622462.718:58): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 194.409835][ T28] audit: type=1800 audit(1789622464.698:59): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 194.711830][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.719456][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.922698][ T28] audit: type=1804 audit(1789622467.208:60): pid=6288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.114" name="cgroup.controllers" dev="tmpfs" ino=191 res=1 errno=0 [ 197.224057][ T6292] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 198.149248][ T28] audit: type=1800 audit(1789622468.408:61): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 201.338531][ T6326] process 'syz.2.121' launched './file0' with NULL argv: empty string added [ 201.723724][ T28] audit: type=1804 audit(1789622471.648:62): pid=6326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.121" name="file0" dev="ramfs" ino=8718 res=1 errno=0 [ 202.611592][ T28] audit: type=1800 audit(1789622472.888:63): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 203.684300][ T28] audit: type=1800 audit(1789622473.978:64): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 203.885740][ T6339] netlink: 36 bytes leftover after parsing attributes in process `syz.3.126'. [ 204.079747][ T6336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.411754][ T28] audit: type=1800 audit(1789622474.688:65): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 204.720098][ T28] audit: type=1800 audit(1789622475.008:66): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 204.875518][ T28] audit: type=1800 audit(1789622475.118:67): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 207.021020][ T28] audit: type=1800 audit(1789622477.308:68): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 207.271559][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 207.360542][ T28] audit: type=1800 audit(1789622477.628:69): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 209.884497][ T28] audit: type=1800 audit(1789622480.178:70): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 212.434454][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 212.440961][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 212.447778][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 214.947073][ T28] audit: type=1800 audit(1789622485.218:71): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 219.645001][ T28] audit: type=1800 audit(1789622489.928:72): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 219.747672][ T28] audit: type=1800 audit(1789622490.038:73): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=116360 res=0 errno=0 [ 220.971722][ T6416] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 221.091932][ T28] audit: type=1804 audit(1789622491.378:74): pid=6415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.136" name="/newroot/29/file1" dev="fuse" ino=1 res=1 errno=0 [ 221.399836][ T28] audit: type=1800 audit(1789622491.678:75): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 221.839477][ T6427] FAULT_INJECTION: forcing a failure. [ 221.839477][ T6427] name failslab, interval 1, probability 0, space 0, times 1 [ 221.852710][ T6427] CPU: 0 PID: 6427 Comm: syz.1.140 Not tainted syzkaller #0 [ 221.860233][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.870527][ T6427] Call Trace: [ 221.873848][ T6427] [ 221.877013][ T6427] dump_stack_lvl+0x18c/0x250 [ 221.881856][ T6427] ? show_regs_print_info+0x20/0x20 [ 221.887207][ T6427] ? load_image+0x420/0x420 [ 221.891773][ T6427] ? __rt6_find_exception_rcu+0x13c/0x4d0 [ 221.897556][ T6427] should_fail_ex+0x394/0x4c0 [ 221.902298][ T6427] should_failslab+0x9/0x20 [ 221.906952][ T6427] slab_pre_alloc_hook+0x59/0x300 [ 221.912396][ T6427] kmem_cache_alloc+0x5a/0x2c0 [ 221.917327][ T6427] ? dst_alloc+0x105/0x170 [ 221.922069][ T6427] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 221.927931][ T6427] dst_alloc+0x105/0x170 [ 221.932328][ T6427] ip6_pol_route+0x94f/0x1230 [ 221.937485][ T6427] ? ip6_pol_route+0x171/0x1230 [ 221.942432][ T6427] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 221.948220][ T6427] ? ip6t_do_table+0x13c4/0x1570 [ 221.953229][ T6427] fib6_rule_lookup+0x35d/0x580 [ 221.958232][ T6427] ? ip6_route_input_lookup+0xc0/0xc0 [ 221.964103][ T6427] ? fib6_lookup+0x2d0/0x2d0 [ 221.968777][ T6427] ? ip6t_do_table+0x1cb/0x1570 [ 221.973705][ T6427] ip6_route_input+0x78a/0xab0 [ 221.978631][ T6427] ? ip6_multipath_l3_keys+0x6b0/0x6b0 [ 221.984180][ T6427] ? __lock_acquire+0x7d80/0x7d80 [ 221.989543][ T6427] ? ip6_rcv_finish_core+0x21d/0x420 [ 221.995053][ T6427] ip6_rcv_finish+0x143/0x230 [ 221.999796][ T6427] NF_HOOK+0x32d/0x3b0 [ 222.004005][ T6427] ? sock_wfree+0x24f/0x600 [ 222.008650][ T6427] ? ip6_rcv_core+0x1082/0x1700 [ 222.013918][ T6427] ? net_zcopy_put_abort+0x90/0x90 [ 222.019339][ T6427] ? NF_HOOK+0x9f/0x3b0 [ 222.023631][ T6427] ? ip6_rcv_core+0x1700/0x1700 [ 222.028793][ T6427] ? net_zcopy_put_abort+0x90/0x90 [ 222.033967][ T6427] ? ip6_rcv_finish_core+0x420/0x420 [ 222.039326][ T6427] __netif_receive_skb+0xcc/0x290 [ 222.044447][ T6427] ? netif_receive_skb+0x106/0x720 [ 222.049700][ T6427] netif_receive_skb+0x1bc/0x720 [ 222.054695][ T6427] ? __bpf_trace_tasklet+0x160/0x160 [ 222.060121][ T6427] ? enqueue_to_backlog+0xe90/0xe90 [ 222.065474][ T6427] ? tun_rx_batched+0x186/0x790 [ 222.070479][ T6427] tun_rx_batched+0x1df/0x790 [ 222.075223][ T6427] ? pskb_may_pull+0xf0/0xf0 [ 222.079858][ T6427] ? __local_bh_enable_ip+0x13a/0x1c0 [ 222.085272][ T6427] ? lockdep_hardirqs_on+0x98/0x150 [ 222.090609][ T6427] ? read_lock_is_recursive+0x20/0x20 [ 222.096032][ T6427] ? __local_bh_enable_ip+0x13a/0x1c0 [ 222.101541][ T6427] ? _local_bh_enable+0xa0/0xa0 [ 222.106462][ T6427] tun_get_user+0x286c/0x3d30 [ 222.111220][ T6427] ? tun_get_user+0x667/0x3d30 [ 222.116446][ T6427] ? tun_get_user+0x2488/0x3d30 [ 222.121387][ T6427] ? rcu_read_unlock+0xa0/0xa0 [ 222.126437][ T6427] ? tun_get+0x1c/0x2e0 [ 222.130663][ T6427] ? __lock_acquire+0x7d80/0x7d80 [ 222.135837][ T6427] ? tun_get+0x1c/0x2e0 [ 222.140102][ T6427] tun_chr_write_iter+0x119/0x200 [ 222.145189][ T6427] vfs_write+0x474/0x9a0 [ 222.149493][ T6427] ? file_end_write+0x250/0x250 [ 222.154495][ T6427] ? __fget_files+0x3fc/0x460 [ 222.159322][ T6427] ? __fdget_pos+0x1d8/0x330 [ 222.163977][ T6427] ? ksys_write+0x74/0x260 [ 222.168542][ T6427] ksys_write+0x151/0x260 [ 222.172951][ T6427] ? __ia32_sys_read+0x90/0x90 [ 222.177859][ T6427] ? lockdep_hardirqs_on+0x98/0x150 [ 222.183126][ T6427] do_syscall_64+0x55/0xb0 [ 222.187680][ T6427] ? clear_bhb_loop+0x40/0x90 [ 222.192514][ T6427] ? clear_bhb_loop+0x40/0x90 [ 222.197263][ T6427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.203311][ T6427] RIP: 0033:0x7f758995e98e [ 222.207859][ T6427] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 222.227973][ T6427] RSP: 002b:00007f7587bf5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 222.236541][ T6427] RAX: ffffffffffffffda RBX: 00007f7587bf66c0 RCX: 00007f758995e98e [ 222.244750][ T6427] RDX: 0000000000000046 RSI: 0000200000000980 RDI: 00000000000000c8 [ 222.253027][ T6427] RBP: 00007f7589a3506b R08: 0000000000000000 R09: 0000000000000000 [ 222.261402][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.269676][ T6427] R13: 00007f7589c26038 R14: 00007f7589c25fa0 R15: 00007ffe9d9261e8 [ 222.277812][ T6427] [ 222.491564][ T28] audit: type=1800 audit(1789622492.768:76): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 222.587221][ T28] audit: type=1800 audit(1789622492.878:77): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 222.776573][ T6434] binder: 6432:6434 ioctl c0286687 200000000140 returned -22 [ 223.035503][ T6431] loop0: detected capacity change from 0 to 4096 [ 223.259752][ T6431] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 223.425304][ T6431] EXT4-fs (loop0): Test dummy encryption mode enabled [ 223.471643][ T28] audit: type=1800 audit(1789622493.648:78): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 223.580178][ T6431] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c1a8, mo2=0002] [ 223.589255][ T6431] System zones: 0-5 [ 223.611956][ T6431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.678508][ T28] audit: type=1800 audit(1789622493.968:79): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 224.543055][ T6444] futex_wake_op: syz.1.150 tries to shift op by 144; fix this program [ 224.567732][ T6444] loop1: detected capacity change from 0 to 256 [ 225.237045][ T28] audit: type=1800 audit(1789622495.258:80): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.147" name="pm_debug_messages" dev="sysfs" ino=1354 res=0 errno=0 [ 225.340940][ T28] audit: type=1800 audit(1789622495.568:81): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 225.369703][ T6444] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 225.530893][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.611474][ T28] audit: type=1800 audit(1789622495.868:82): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 227.797746][ T28] audit: type=1800 audit(1789622498.088:83): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=116437 res=0 errno=0 [ 229.983453][ T6466] overlayfs: failed to clone upperpath [ 230.431899][ T28] audit: type=1800 audit(1789622500.718:84): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 231.330049][ T6474] loop1: detected capacity change from 0 to 8 [ 232.157063][ T28] audit: type=1804 audit(1789622502.448:85): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="udevd" name="/sys/devices/virtual/block/loop1/uevent" dev="sysfs" ino=14625 res=1 errno=0 [ 232.207453][ T6474] squashfs image failed sanity check [ 232.390236][ T28] audit: type=1800 audit(1789622502.488:86): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 234.248060][ T28] audit: type=1800 audit(1789622504.538:87): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 234.536305][ T6487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.559467][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.597247][ T6487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.610956][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.678806][ T6489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.414065][ T28] audit: type=1800 audit(1789622506.708:88): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 236.823871][ T28] audit: type=1800 audit(1789622507.118:89): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 237.101330][ T28] audit: type=1800 audit(1789622507.198:90): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.156" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=274 res=0 errno=0 [ 239.252894][ T28] audit: type=1800 audit(1789622509.538:91): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 239.630280][ T6508] xt_HMARK: spi-set and port-set can't be combined [ 240.339080][ T28] audit: type=1800 audit(1789622510.608:92): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14625 res=0 errno=0 [ 240.366596][ T6510] overlayfs: failed to resolve './file1': -2 [ 240.413339][ T6510] Invalid ELF header magic: != ELF [ 240.424874][ T28] audit: type=1800 audit(1789622510.698:93): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.166" name="bus" dev="tmpfs" ino=262 res=0 errno=0 [ 242.548186][ T28] audit: type=1804 audit(1789622512.838:94): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.170" name="cgroup.controllers" dev="tmpfs" ino=268 res=1 errno=0 [ 244.349116][ T28] audit: type=1800 audit(1789622514.628:95): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 244.987677][ T6532] Console: switching to colour VGA+ 80x25 [ 244.996510][ T28] audit: type=1800 audit(1789622515.238:96): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.167" name="bind" dev="sysfs" ino=12650 res=0 errno=0 [ 245.342700][ T28] audit: type=1800 audit(1789622515.628:97): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 247.111819][ T28] audit: type=1800 audit(1789622517.368:98): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.174" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=217 res=0 errno=0 [ 247.756341][ T28] audit: type=1800 audit(1789622518.048:99): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 252.613538][ T28] audit: type=1800 audit(1789622522.908:100): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=116461 res=0 errno=0 [ 252.645201][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.673798][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.683343][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.692999][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.701020][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 252.721999][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.724225][ T28] audit: type=1800 audit(1789622522.968:101): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 252.852060][ T28] audit: type=1800 audit(1789622522.968:102): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=116471 res=0 errno=0 [ 253.162074][ T28] audit: type=1800 audit(1789622523.068:103): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=116490 res=0 errno=0 [ 253.974635][ T28] audit: type=1800 audit(1789622523.178:104): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=116501 res=0 errno=0 [ 254.781691][ T5783] Bluetooth: hci0: command tx timeout [ 256.562413][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.569679][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.864366][ T5775] Bluetooth: hci0: command tx timeout [ 256.881314][ T6558] chnl_net:caif_netlink_parms(): no params data found [ 257.328409][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.371608][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.387585][ T6558] bridge_slave_0: entered allmulticast mode [ 257.415469][ T6558] bridge_slave_0: entered promiscuous mode [ 257.436000][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.466509][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.479847][ T6558] bridge_slave_1: entered allmulticast mode [ 257.501121][ T6558] bridge_slave_1: entered promiscuous mode [ 257.622756][ T6558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.636799][ T6558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.687413][ T6558] team0: Port device team_slave_0 added [ 257.705591][ T6558] team0: Port device team_slave_1 added [ 257.783843][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.791234][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.849355][ T6558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.907365][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.916781][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.950886][ T6558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.059045][ T6558] hsr_slave_0: entered promiscuous mode [ 258.068050][ T6558] hsr_slave_1: entered promiscuous mode [ 258.080999][ T6558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.095243][ T6558] Cannot create hsr debugfs directory [ 258.159135][ T28] audit: type=1800 audit(1789622528.438:105): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 258.403606][ T5775] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 258.941717][ T5775] Bluetooth: hci0: command tx timeout [ 259.877837][ T28] audit: type=1800 audit(1789622529.288:106): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=23913 res=0 errno=0 [ 260.875081][ T28] audit: type=1800 audit(1789622530.228:107): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=23912 res=0 errno=0 [ 260.897309][ T28] audit: type=1800 audit(1789622530.278:108): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=123144 res=0 errno=0 [ 261.022380][ T5775] Bluetooth: hci0: command tx timeout [ 261.146134][ T28] audit: type=1800 audit(1789622531.428:109): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 261.236646][ T6558] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.255522][ T6558] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 261.290236][ T6558] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.313561][ T6558] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.104782][ T28] audit: type=1800 audit(1789622534.398:110): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 264.186898][ T6558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.404203][ T6558] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.464973][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.472335][ T5893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.589758][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.597566][ T5893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.345071][ T6635] overlayfs: failed to clone upperpath [ 265.542302][ T28] audit: type=1800 audit(1789622535.788:111): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 266.320401][ T6639] kAFS: No cell specified [ 266.483981][ T6558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.241436][ T28] audit: type=1800 audit(1789622537.478:112): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 267.733074][ T28] audit: type=1800 audit(1789622537.928:113): pid=6650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.196" name="subclass" dev="configfs" ino=9812 res=0 errno=0 [ 268.991934][ T28] audit: type=1800 audit(1789622539.238:114): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 269.053029][ T6659] netlink: 'syz.2.198': attribute type 1 has an invalid length. [ 271.281264][ T28] audit: type=1800 audit(1789622541.568:115): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 271.471739][ T6558] veth0_vlan: entered promiscuous mode [ 271.519961][ T6558] veth1_vlan: entered promiscuous mode [ 271.631317][ T6558] veth0_macvtap: entered promiscuous mode [ 271.659994][ T6558] veth1_macvtap: entered promiscuous mode [ 271.706018][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.731446][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.781442][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.801482][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.841693][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.866097][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.903483][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.954398][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.965454][ T28] audit: type=1800 audit(1789622542.248:116): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 272.021636][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.067078][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.103731][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.133936][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.171653][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.230606][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.283189][ T6558] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.331298][ T6558] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.873457][ T6676] ip_tables: iptables: counters copy to user failed while replacing table [ 273.889010][ T28] audit: type=1800 audit(1789622544.178:117): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30351 res=0 errno=0 [ 273.959967][ T6558] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.961833][ T28] audit: type=1800 audit(1789622544.238:118): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30374 res=0 errno=0 [ 274.021520][ T6558] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.234894][ T5835] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 274.297194][ T28] audit: type=1800 audit(1789622544.588:119): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=123588 res=0 errno=0 [ 274.411584][ T28] audit: type=1800 audit(1789622544.698:120): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=123723 res=0 errno=0 [ 274.418911][ T6615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.466776][ T5835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.472488][ T6615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.503531][ T5835] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 274.523497][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.542329][ T5835] usb 1-1: Product: syz [ 274.553042][ T5835] usb 1-1: Manufacturer: syz [ 274.565701][ T5835] usb 1-1: SerialNumber: syz [ 274.601573][ T5893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.610372][ T5893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.810152][ T28] audit: type=1800 audit(1789622545.098:121): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 275.454677][ T6690] binder: 6685:6690 ioctl c0306201 0 returned -14 [ 275.951650][ T28] audit: type=1800 audit(1789622546.208:122): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 276.248790][ T28] audit: type=1800 audit(1789622546.458:123): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 277.509069][ T5835] usb 1-1: can't set config #1, error -71 [ 277.519796][ T5835] usb 1-1: USB disconnect, device number 4 [ 277.617798][ T6699] loop0: detected capacity change from 0 to 4096 [ 279.685990][ T6699] NILFS (loop0): error -4 creating segctord thread [ 279.765318][ T28] audit: type=1800 audit(1789622550.048:124): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 282.798761][ T28] audit: type=1800 audit(1789622553.088:125): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14512 res=0 errno=0 [ 284.391743][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 285.290201][ T6728] rtc_cmos 00:00: Alarms can be up to one day in the future [ 285.469791][ T6731] dns_resolver: Unsupported server list version (0) [ 287.039573][ T28] audit: type=1800 audit(1789622557.328:126): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124166 res=0 errno=0 [ 287.126915][ T28] audit: type=1800 audit(1789622557.388:127): pid=6733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124073 res=0 errno=0 [ 287.313609][ T28] audit: type=1800 audit(1789622557.588:128): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 287.864181][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 288.048253][ T27] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 288.276311][ T27] usb 1-1: can't read configurations, error -71 [ 288.536274][ T28] audit: type=1800 audit(1789622558.828:129): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 291.047157][ T28] audit: type=1800 audit(1789622561.338:130): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 293.013622][ T6767] wlan0 speed is unknown, defaulting to 1000 [ 293.022771][ T6767] wlan0 speed is unknown, defaulting to 1000 [ 293.034424][ T6767] wlan0 speed is unknown, defaulting to 1000 [ 293.050515][ T6767] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 293.073228][ T6767] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 293.117482][ T6767] wlan0 speed is unknown, defaulting to 1000 [ 293.127437][ T6767] wlan0 speed is unknown, defaulting to 1000 [ 293.135548][ T6767] wlan0 speed is unknown, defaulting to 1000 [ 293.143598][ T6767] wlan0 speed is unknown, defaulting to 1000 [ 293.152038][ T6767] wlan0 speed is unknown, defaulting to 1000 [ 293.161679][ T28] audit: type=1800 audit(1789622563.438:131): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124221 res=0 errno=0 [ 293.165695][ T6770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.291645][ T28] audit: type=1800 audit(1789622563.448:132): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124236 res=0 errno=0 [ 293.400394][ T28] audit: type=1800 audit(1789622563.518:133): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124187 res=0 errno=0 [ 293.443815][ T6767] warning: `syz.0.217' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 293.541127][ T6757] xt_TPROXY: Can be used only with -p tcp or -p udp [ 294.881494][ T28] audit: type=1800 audit(1789622565.168:134): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 294.901890][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.114928][ T6789] overlayfs: failed to clone upperpath [ 301.839024][ T5775] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 301.910796][ T28] audit: type=1800 audit(1789622572.198:135): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 302.221334][ T28] audit: type=1800 audit(1789622572.508:136): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 302.624786][ T6812] syz.4.236 uses obsolete (PF_INET,SOCK_PACKET) [ 302.802558][ T28] audit: type=1800 audit(1789622573.068:137): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=22790 res=0 errno=0 [ 302.952097][ T28] audit: type=1800 audit(1789622573.128:138): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=115227 res=0 errno=0 [ 302.994823][ T6817] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 303.089882][ T28] audit: type=1800 audit(1789622573.128:139): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=115232 res=0 errno=0 [ 303.175515][ T6817] CIFS: Attempting to mount //127.0.0.1/share [ 303.211672][ T28] audit: type=1800 audit(1789622573.168:140): pid=6815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=115191 res=0 errno=0 [ 303.263180][ T6819] xt_ipcomp: unknown flags 1D [ 303.360083][ T28] audit: type=1800 audit(1789622573.188:141): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=115236 res=0 errno=0 [ 303.410918][ T6817] CIFS: VFS: Error connecting to socket. Aborting operation. [ 303.491464][ T28] audit: type=1800 audit(1789622573.188:142): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=115235 res=0 errno=0 [ 303.557374][ T6817] CIFS: VFS: cifs_mount failed w/return code = -111 [ 303.662942][ T28] audit: type=1800 audit(1789622573.188:143): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=115238 res=0 errno=0 [ 303.786108][ T28] audit: type=1800 audit(1789622573.188:144): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="address" dev="sysfs" ino=115241 res=0 errno=0 [ 308.790065][ T6848] Bluetooth: MGMT ver 1.22 [ 309.494508][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 309.494524][ T28] audit: type=1800 audit(1789622579.788:146): pid=6853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.243" name="pm_test" dev="sysfs" ino=1351 res=0 errno=0 [ 309.541965][ T6853] Bluetooth: MGMT ver 1.22 [ 309.546701][ T6853] Bluetooth: hci0: invalid length 0, exp 2 for type 26 [ 309.701537][ T28] audit: type=1800 audit(1789622579.938:147): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 309.879736][ T28] audit: type=1800 audit(1789622580.168:148): pid=6858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.244" name="file1" dev="tmpfs" ino=77 res=0 errno=0 [ 309.942510][ T6858] netlink: 84 bytes leftover after parsing attributes in process `syz.4.244'. [ 310.706935][ T28] audit: type=1800 audit(1789622580.948:149): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.244" name="wakeup_count" dev="sysfs" ino=1348 res=0 errno=0 [ 313.162999][ T28] audit: type=1800 audit(1789622583.458:150): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 313.376996][ T28] audit: type=1800 audit(1789622583.668:151): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124501 res=0 errno=0 [ 313.463355][ T28] audit: type=1800 audit(1789622583.698:152): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=124505 res=0 errno=0 [ 313.526477][ T28] audit: type=1800 audit(1789622583.758:153): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124584 res=0 errno=0 [ 313.601566][ T28] audit: type=1800 audit(1789622583.808:154): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=124588 res=0 errno=0 [ 313.800478][ T28] audit: type=1800 audit(1789622584.088:155): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 316.117118][ T6904] loop4: detected capacity change from 0 to 256 [ 316.713983][ T28] audit: type=1800 audit(1789622587.008:156): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 318.857139][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.868013][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.271333][ T6920] overlayfs: failed to clone upperpath [ 319.281488][ T28] audit: type=1800 audit(1789622589.558:157): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.256" name="file1" dev="tmpfs" ino=400 res=0 errno=0 [ 321.774866][ T28] audit: type=1800 audit(1789622592.068:158): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124674 res=0 errno=0 [ 321.901440][ T28] audit: type=1800 audit(1789622592.188:159): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124698 res=0 errno=0 [ 322.147776][ T28] audit: type=1800 audit(1789622592.358:160): pid=6944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124686 res=0 errno=0 [ 325.216325][ T28] audit: type=1800 audit(1789622595.518:161): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.262" name="power" dev="configfs" ino=11645 res=0 errno=0 [ 325.461642][ T6965] null_blk: disk nullb1 created [ 326.011598][ T28] audit: type=1800 audit(1789622595.598:162): pid=6966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.262" name="submit_queues" dev="configfs" ino=11646 res=0 errno=0 [ 326.323829][ T28] audit: type=1800 audit(1789622595.758:163): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124810 res=0 errno=0 [ 327.440973][ T28] audit: type=1800 audit(1789622596.598:164): pid=6944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124710 res=0 errno=0 [ 327.711530][ T28] audit: type=1800 audit(1789622597.718:165): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 330.439294][ T6991] wlan0 speed is unknown, defaulting to 1000 [ 330.446233][ T6991] wlan0 speed is unknown, defaulting to 1000 [ 330.453033][ T6991] wlan0 speed is unknown, defaulting to 1000 [ 330.468293][ T6991] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 330.491135][ T6991] wlan0 speed is unknown, defaulting to 1000 [ 330.498604][ T6991] wlan0 speed is unknown, defaulting to 1000 [ 330.506290][ T6991] wlan0 speed is unknown, defaulting to 1000 [ 330.513682][ T6991] wlan0 speed is unknown, defaulting to 1000 [ 330.521282][ T6991] wlan0 speed is unknown, defaulting to 1000 [ 330.551463][ T28] audit: type=1800 audit(1789622600.828:166): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124881 res=0 errno=0 [ 330.655847][ T28] audit: type=1800 audit(1789622600.828:167): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124896 res=0 errno=0 [ 330.746416][ T28] audit: type=1800 audit(1789622600.828:168): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124847 res=0 errno=0 [ 330.794893][ T6991] xt_TPROXY: Can be used only with -p tcp or -p udp [ 332.451702][ T28] audit: type=1800 audit(1789622600.938:169): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 334.011542][ T28] audit: type=1800 audit(1789622604.278:170): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 339.829833][ T28] audit: type=1800 audit(1789622610.118:171): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 341.518350][ T28] audit: type=1800 audit(1789622611.798:172): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125086 res=0 errno=0 [ 341.577567][ T28] audit: type=1800 audit(1789622611.838:173): pid=7076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125074 res=0 errno=0 [ 343.001228][ T7077] wlan0 speed is unknown, defaulting to 1000 [ 343.081207][ T5783] Bluetooth: hci0: command tx timeout [ 343.232132][ T7079] ip_tables: iptables: counters copy to user failed while replacing table [ 343.265103][ T28] audit: type=1800 audit(1789622613.548:174): pid=7086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125098 res=0 errno=0 [ 343.347151][ T28] audit: type=1800 audit(1789622613.628:175): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 343.550508][ T28] audit: type=1800 audit(1789622613.828:176): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.286" name="idVendor" dev="configfs" ino=11917 res=0 errno=0 [ 344.891710][ T28] audit: type=1800 audit(1789622613.868:177): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.286" name="idProduct" dev="configfs" ino=11918 res=0 errno=0 [ 345.010455][ T28] audit: type=1800 audit(1789622613.878:178): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.286" name="max_speed" dev="configfs" ino=11919 res=0 errno=0 [ 345.161823][ T28] audit: type=1800 audit(1789622613.898:179): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.286" name="c_sync" dev="configfs" ino=11923 res=0 errno=0 [ 345.291455][ T28] audit: type=1800 audit(1789622615.448:180): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 346.982458][ T28] audit: type=1800 audit(1789622617.278:181): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.290" name="multicast_snooping" dev="sysfs" ino=117649 res=0 errno=0 [ 347.129372][ T28] audit: type=1800 audit(1789622617.418:182): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 349.483968][ T28] audit: type=1800 audit(1789622619.778:183): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14964 res=0 errno=0 [ 349.711157][ T28] audit: type=1800 audit(1789622619.978:184): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.295" name="add_local_port" dev="sysfs" ino=20876 res=0 errno=0 [ 349.792412][ T7121] nvmet: adding nsid 1 to subsystem testsubsys [ 349.793454][ T28] audit: type=1800 audit(1789622619.998:185): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.295" name="add_target_port" dev="sysfs" ino=20880 res=0 errno=0 [ 349.850354][ T28] audit: type=1800 audit(1789622620.048:186): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.295" name="add_remote_port" dev="sysfs" ino=20878 res=0 errno=0 [ 349.878700][ T7121] [ 349.881192][ T7121] ====================================================== [ 349.888530][ T7121] WARNING: possible circular locking dependency detected [ 349.895775][ T7121] syzkaller #0 Not tainted [ 349.900479][ T7121] ------------------------------------------------------ [ 349.901619][ T28] audit: type=1800 audit(1789622620.078:187): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.295" name="attr_allow_any_host" dev="configfs" ino=10868 res=0 errno=0 [ 349.907592][ T7121] syz.4.295/7121 is trying to acquire lock: [ 349.907605][ T7121] ffff88802b6033f8 (&iint_mutex_key[depth]){+.+.}-{3:3}, at: process_measurement+0x739/0x1d50 [ 349.907665][ T7121] [ 349.907665][ T7121] but task is already holding lock: [ 349.907671][ T7121] ffff888024f96070 (&subsys->lock){+.+.}-{3:3}, at: nvmet_ns_enable+0x4d/0x8c0 [ 349.907713][ T7121] [ 349.907713][ T7121] which lock already depends on the new lock. [ 349.907713][ T7121] [ 349.907719][ T7121] [ 349.907719][ T7121] the existing dependency chain (in reverse order) is: [ 349.907726][ T7121] [ 349.907726][ T7121] -> #2 (&subsys->lock){+.+.}-{3:3}: [ 349.907752][ T7121] __mutex_lock+0x135/0xc80 [ 349.907771][ T7121] nvmet_ns_buffered_io_store+0xe2/0x200 [ 349.907791][ T7121] configfs_write_iter+0x312/0x400 [ 349.907811][ T7121] vfs_write+0x474/0x9a0 [ 349.907857][ T7121] ksys_write+0x151/0x260 [ 349.965226][ T28] audit: type=1800 audit(1789622620.118:188): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.295" name="buffered_io" dev="configfs" ino=10870 res=0 errno=0 [ 349.974090][ T7121] do_syscall_64+0x55/0xb0 [ 349.974127][ T7121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.974164][ T7121] [ 349.974164][ T7121] -> #1 (&p->frag_sem){.+.+}-{3:3}: [ 349.974198][ T7121] down_read+0x46/0x2e0 [ 349.974218][ T7121] __configfs_open_file+0xd8/0x7d0 [ 349.974240][ T7121] do_dentry_open+0x880/0x14b0 [ 349.974265][ T7121] dentry_open+0xbb/0x100 [ 350.009952][ T28] audit: type=1800 audit(1789622620.128:189): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.295" name="device_path" dev="configfs" ino=10871 res=0 errno=0 [ 350.013457][ T7121] ima_calc_file_hash+0x190/0x1960 [ 350.013490][ T7121] ima_collect_measurement+0x4d4/0xa30 [ 350.013513][ T7121] process_measurement+0x123a/0x1d50 [ 350.013534][ T7121] ima_file_check+0xcc/0x110 [ 350.030012][ T28] audit: type=1800 audit(1789622620.138:190): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.295" name="enable" dev="configfs" ino=10872 res=0 errno=0 [ 350.039442][ T7121] path_openat+0x2910/0x3270 [ 350.039471][ T7121] do_filp_open+0x1f2/0x430 [ 350.039489][ T7121] do_sys_openat2+0x134/0x1d0 [ 350.039514][ T7121] __x64_sys_openat+0x139/0x160 [ 350.165986][ T7121] do_syscall_64+0x55/0xb0 [ 350.171079][ T7121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.177646][ T7121] [ 350.177646][ T7121] -> #0 (&iint_mutex_key[depth]){+.+.}-{3:3}: [ 350.186395][ T7121] __lock_acquire+0x37ef/0x7d80 [ 350.191914][ T7121] lock_acquire+0x19e/0x420 [ 350.197094][ T7121] __mutex_lock+0x135/0xc80 [ 350.202497][ T7121] process_measurement+0x739/0x1d50 [ 350.208637][ T7121] ima_file_check+0xcc/0x110 [ 350.213885][ T7121] path_openat+0x2910/0x3270 [ 350.219540][ T7121] do_filp_open+0x1f2/0x430 [ 350.224886][ T7121] filp_open+0x180/0x1e0 [ 350.229802][ T7121] nvmet_file_ns_enable+0x74/0x330 [ 350.235842][ T7121] nvmet_ns_enable+0xf4/0x8c0 [ 350.241344][ T7121] nvmet_ns_enable_store+0xd8/0x170 [ 350.247202][ T7121] configfs_write_iter+0x312/0x400 [ 350.252921][ T7121] vfs_write+0x474/0x9a0 [ 350.258000][ T7121] ksys_write+0x151/0x260 [ 350.263161][ T7121] do_syscall_64+0x55/0xb0 [ 350.268363][ T7121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.275009][ T7121] [ 350.275009][ T7121] other info that might help us debug this: [ 350.275009][ T7121] [ 350.285541][ T7121] Chain exists of: [ 350.285541][ T7121] &iint_mutex_key[depth] --> &p->frag_sem --> &subsys->lock [ 350.285541][ T7121] [ 350.299161][ T7121] Possible unsafe locking scenario: [ 350.299161][ T7121] [ 350.306924][ T7121] CPU0 CPU1 [ 350.312644][ T7121] ---- ---- [ 350.318050][ T7121] lock(&subsys->lock); [ 350.322612][ T7121] lock(&p->frag_sem); [ 350.329677][ T7121] lock(&subsys->lock); [ 350.336677][ T7121] lock(&iint_mutex_key[depth]); [ 350.341928][ T7121] [ 350.341928][ T7121] *** DEADLOCK *** [ 350.341928][ T7121] [ 350.350292][ T7121] 6 locks held by syz.4.295/7121: [ 350.355708][ T7121] #0: ffff88802dffb9c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 350.365200][ T7121] #1: ffff88801f6fc418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 350.375474][ T7121] #2: ffff8880262eae88 (&buffer->mutex){+.+.}-{3:3}, at: configfs_write_iter+0x81/0x400 [ 350.385593][ T7121] #3: ffff88814c8fad78 (&p->frag_sem){.+.+}-{3:3}, at: configfs_write_iter+0x215/0x400 [ 350.396087][ T7121] #4: ffffffff8daef530 (nvmet_config_sem){+.+.}-{3:3}, at: nvmet_ns_enable_store+0xc9/0x170 [ 350.406816][ T7121] #5: ffff888024f96070 (&subsys->lock){+.+.}-{3:3}, at: nvmet_ns_enable+0x4d/0x8c0 [ 350.417109][ T7121] [ 350.417109][ T7121] stack backtrace: [ 350.423216][ T7121] CPU: 0 PID: 7121 Comm: syz.4.295 Not tainted syzkaller #0 [ 350.431335][ T7121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.441887][ T7121] Call Trace: [ 350.445474][ T7121] [ 350.448544][ T7121] dump_stack_lvl+0x18c/0x250 [ 350.453726][ T7121] ? load_image+0x420/0x420 [ 350.458517][ T7121] ? show_regs_print_info+0x20/0x20 [ 350.463797][ T7121] ? print_circular_bug+0x12b/0x1a0 [ 350.469430][ T7121] check_noncircular+0x2fc/0x400 [ 350.474430][ T7121] ? arch_stack_walk+0x160/0x190 [ 350.479522][ T7121] ? print_deadlock_bug+0x5d0/0x5d0 [ 350.484783][ T7121] ? lockdep_lock+0xf5/0x230 [ 350.489609][ T7121] ? _find_first_zero_bit+0xd6/0x100 [ 350.494963][ T7121] __lock_acquire+0x37ef/0x7d80 [ 350.500281][ T7121] ? __lock_acquire+0x357f/0x7d80 [ 350.505549][ T7121] ? verify_lock_unused+0x140/0x140 [ 350.510827][ T7121] ? verify_lock_unused+0x140/0x140 [ 350.516264][ T7121] lock_acquire+0x19e/0x420 [ 350.520909][ T7121] ? process_measurement+0x739/0x1d50 [ 350.526673][ T7121] ? __might_sleep+0xe0/0xe0 [ 350.531408][ T7121] ? read_lock_is_recursive+0x20/0x20 [ 350.536931][ T7121] __mutex_lock+0x135/0xc80 [ 350.542069][ T7121] ? process_measurement+0x739/0x1d50 [ 350.547689][ T7121] ? integrity_inode_get+0x440/0x540 [ 350.553125][ T7121] ? process_measurement+0x715/0x1d50 [ 350.558736][ T7121] ? process_measurement+0x739/0x1d50 [ 350.564694][ T7121] ? __lock_acquire+0x7d80/0x7d80 [ 350.569783][ T7121] ? mutex_lock_nested+0x20/0x20 [ 350.574977][ T7121] ? up_write+0x1be/0x410 [ 350.579445][ T7121] process_measurement+0x739/0x1d50 [ 350.584698][ T7121] ? __kmem_cache_free+0xba/0x1f0 [ 350.590051][ T7121] ? ima_file_mmap+0x1d0/0x1d0 [ 350.594991][ T7121] ? tomoyo_check_open_permission+0x384/0x460 [ 350.601500][ T7121] ? tomoyo_check_open_permission+0x1cf/0x460 [ 350.608601][ T7121] ? tomoyo_check_path_number_acl+0x280/0x280 [ 350.614952][ T7121] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 350.621260][ T7121] ima_file_check+0xcc/0x110 [ 350.625918][ T7121] ? ima_bprm_check+0x200/0x200 [ 350.631013][ T7121] path_openat+0x2910/0x3270 [ 350.635699][ T7121] ? kmem_cache_alloc+0x17e/0x2c0 [ 350.640959][ T7121] ? getname_kernel+0x5a/0x2f0 [ 350.645951][ T7121] ? vfs_write+0x474/0x9a0 [ 350.650476][ T7121] ? do_filp_open+0x430/0x430 [ 350.655218][ T7121] do_filp_open+0x1f2/0x430 [ 350.659786][ T7121] ? vfs_tmpfile+0x620/0x620 [ 350.664436][ T7121] ? rcu_is_watching+0x15/0xb0 [ 350.669352][ T7121] ? getname_kernel+0x146/0x2f0 [ 350.674368][ T7121] filp_open+0x180/0x1e0 [ 350.678673][ T7121] ? file_open_name+0x1c0/0x1c0 [ 350.683580][ T7121] ? mutex_lock_nested+0x20/0x20 [ 350.688654][ T7121] ? __lock_acquire+0x7d80/0x7d80 [ 350.693822][ T7121] nvmet_file_ns_enable+0x74/0x330 [ 350.699079][ T7121] nvmet_ns_enable+0xf4/0x8c0 [ 350.703902][ T7121] nvmet_ns_enable_store+0xd8/0x170 [ 350.709337][ T7121] ? nvmet_ns_enable_show+0x60/0x60 [ 350.714597][ T7121] ? down_read+0x1ac/0x2e0 [ 350.719064][ T7121] configfs_write_iter+0x312/0x400 [ 350.724224][ T7121] ? nvmet_ns_enable_show+0x60/0x60 [ 350.729603][ T7121] vfs_write+0x474/0x9a0 [ 350.733918][ T7121] ? file_end_write+0x250/0x250 [ 350.738830][ T7121] ? __fget_files+0x3fc/0x460 [ 350.743831][ T7121] ? __fdget_pos+0x2a3/0x330 [ 350.748777][ T7121] ? ksys_write+0x74/0x260 [ 350.753348][ T7121] ksys_write+0x151/0x260 [ 350.757741][ T7121] ? __ia32_sys_read+0x90/0x90 [ 350.762563][ T7121] ? lockdep_hardirqs_on+0x98/0x150 [ 350.767907][ T7121] do_syscall_64+0x55/0xb0 [ 350.772466][ T7121] ? clear_bhb_loop+0x40/0x90 [ 350.777598][ T7121] ? clear_bhb_loop+0x40/0x90 [ 350.782428][ T7121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.788501][ T7121] RIP: 0033:0x7f1d8db9e159 [ 350.792960][ T7121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.813140][ T7121] RSP: 002b:00007f1d8ea4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 350.822136][ T7121] RAX: ffffffffffffffda RBX: 00007f1d8de25fa0 RCX: 00007f1d8db9e159 [ 350.830769][ T7121] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 000000000000000a [ 350.839134][ T7121] RBP: 00007f1d8dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 350.847682][ T7121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.855802][ T7121] R13: 00007f1d8de26038 R14: 00007f1d8de25fa0 R15: 00007ffe0c864d38 [ 350.864110][ T7121] [ 350.944727][ T28] audit: type=1800 audit(1789622621.228:191): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.295" name="addr_trtype" dev="configfs" ino=10878 res=0 errno=0 [ 351.050603][ T28] audit: type=1800 audit(1789622621.238:192): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.295" name="addr_adrfam" dev="configfs" ino=10879 res=0 errno=0 [ 351.096015][ T28] audit: type=1800 audit(1789622621.238:193): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.295" name="addr_traddr" dev="configfs" ino=10880 res=0 errno=0 [ 351.137408][ T28] audit: type=1800 audit(1789622621.428:194): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125977 res=0 errno=0 [ 351.147526][ T1093] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 351.210257][ T5764] (NULL device *): {0:0} Association created [ 351.211643][ T28] audit: type=1800 audit(1789622621.498:195): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.296" name="new_array" dev="sysfs" ino=65043 res=0 errno=0 [ 351.221452][ T5764] nvmet: creating nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:0b2c94a0-9931-452b-986e-dceeae23c52c. [ 351.557452][ T28] audit: type=1800 audit(1789622621.498:196): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126094 res=0 errno=0 [ 351.619950][ T7128] ªªªªªª: renamed from vlan0 (while UP) [ 351.756314][ T1093] nvme nvme0: NVME-FC{0}: controller connect complete [ 351.853595][ T7121] nvme nvme0: NVME-FC{0}: new ctrl: NQN "testsubsys"