last executing test programs: 6m6.168581931s ago: executing program 1 (id=619): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x1fa) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000300)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1e, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f00000003c0)=0x10) getpeername$inet6(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 6m4.087942253s ago: executing program 1 (id=623): syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f00000000c0)) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',volume=0000000000000006,\x00\x00\x00\x00\x00'], 0x1, 0x489, &(0x7f0000000580)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0xb) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000380)={'nat\x00', 0x2, [{}, {}]}, 0x48) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 6m2.865732913s ago: executing program 1 (id=627): mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840)={0x100000, 0x70}, 0x20) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000380)=[{&(0x7f00000003c0)="390000001300034700bb65e1c3e4ffff01000000010000005600e79c76a60000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 6m1.736581441s ago: executing program 1 (id=631): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x5, &(0x7f0000000240)) inotify_init() syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x10000000, 0xfffffffe}) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) 6m0.286741387s ago: executing program 1 (id=637): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x2, 0x7fff) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, 0x0, 0x0) sched_setaffinity(r3, 0x47, &(0x7f0000019380)=0x7) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000001c0)={0xb, {0x1, 0xa, 0x6, 0x5, 0x5, 0x7}}) dup3(r4, r4, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000019400)={0x6, 0xa, &(0x7f00000194c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}]}, &(0x7f0000019540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019580)={r6, 0x0, 0xe, 0x0, &(0x7f0000019600)="030d099b688bbf0f5a5400000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 5m56.327401845s ago: executing program 1 (id=641): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000440), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x3, &(0x7f0000000780)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x14}}, &(0x7f00000007c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000800)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r2 = openat$sysfs(0xffffff9c, 0x0, 0x1c9a82, 0x38) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_SET_SUINFO(r3, 0x40186e8d, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, r4, 0x1, 0x8000, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x44) sendfile(r2, 0xffffffffffffffff, 0x0, 0xbc44) 5m40.611321404s ago: executing program 32 (id=641): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000440), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x3, &(0x7f0000000780)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x14}}, &(0x7f00000007c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000800)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r2 = openat$sysfs(0xffffff9c, 0x0, 0x1c9a82, 0x38) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_SET_SUINFO(r3, 0x40186e8d, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, r4, 0x1, 0x8000, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x44) sendfile(r2, 0xffffffffffffffff, 0x0, 0xbc44) 1m8.253307881s ago: executing program 0 (id=1128): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x5, &(0x7f0000000240)) inotify_init() r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r4, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x5b, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2020000}, 0x20000000) setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) capset(&(0x7f0000000080)={0x19980330}, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) 1m4.25230676s ago: executing program 0 (id=1132): syz_open_dev$vbi(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x5, &(0x7f0000000240)) inotify_init() syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x10000000, 0xfffffffe}) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) 58.58319655s ago: executing program 2 (id=1139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000680)={0xaf76, 0x3, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5455a3247e500f61669905db88235f8a5447dd2a2ed6e91626f158881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb7bc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a825782f14eee686be0e358e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39e1aefe363590d1f600"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x1000000, &(0x7f00000008c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x1, 0x0, 0x0) read$FUSE(r3, &(0x7f0000003f80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000005fc0)={0x50, 0x0, r4, {0x7, 0x2b, 0x7, 0x800, 0x101, 0x2, 0x2, 0x3ff, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000006040)="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", 0x2000, &(0x7f0000008040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008100)={0x78, 0x0, 0x6, {0x3ff, 0x100, 0x0, {0x4, 0x8000000000000001, 0xfffffffffffffc01, 0x2000000000000, 0x1cc2f0c3, 0x101, 0x4, 0x6, 0x8150, 0x1000, 0x9, r5, r6, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r7) add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$KEYCTL_MOVE(0x1e, r7, 0x0, 0x0, 0x0) 56.96748992s ago: executing program 2 (id=1141): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000440)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102) writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f00000019c0), 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, &(0x7f0000001b00)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) shutdown(r4, 0x0) syz_mount_image$udf(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x47, 0xc2b, &(0x7f00000008c0)="$eJzs3V1sXOlZB/DnnWOvHW9pvd0220K3jFTURi6J8tXEVVDldF1DpTRb1XFhr+rxR9LROnZkOzRboDKggsRNxd4gbpBFWYHUC65YLnHpIrVCSKjqRblAskS72gsufFEJAdpOdc68Y48dJ/Em64/s/n4r7//MmeeM34/xmWMpr08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGf/dzl02fSYbcCADhIV8e/dPpcinAJAADvHtf8/g8AAAAAAAAAAAAAAEddiiKOR4qBVzfSZGwtA+y/0py/fWdidGz3w46lSFGLoqovv/rPnD13/lMXLg538v7Hv90+HM+PX7tcf27h5q3F2aWl2Zn6xHxzemFmds+v8KjH7zRUDUD95ou3Z65fX6qfPXVu29N3Bl/ve/L44KWLJy8Md2onRsfGxrtqenof+rvf5V4rPJ6IIhqR4s3BN1IjImrx6GPxgPfOfjtWdWKo6sTE6FjVkblmY365fDLVclUtot510EhnjA5gLh7JSMRK2fyywUNl98ZvNRYbU3Oz9S82Fpeby82F+VRrt7bsTz1qMZwiViNive/ul+uNIj4aKV4+vZGmIqLojMMnq4XBD25PbR/6uAdlO+u9Eau1x2DOjrC+KOJqpPjZaydiuhyz/BUfj/hCma9GvFLmZyJS+cY4H/HTXd5HPJ56ooh/ixQLaSPNVOeDznnlypfrn5+/vtBV2zmvPPafDwfpiJ+b+qOIqeqMv5Ee/mIHAAAAAAAAAAAAAAAAgLfbsSji25Hij5/93WpdcVTr0t93afg9L/xm95rxZx7wOmXtqYhYqe1tTW5vXjqcauV/D938337oI6n0RxHfyOv//vCwGwMAAAAAAAAAAAAAAAAAAPCuVsQLkeIrJ0+k1ei+p3hz/kb9WmNqrn1X2M69fzv3TG+1Wq16audIzsmcKzlXc67lXM8ZtXx8zpGckzlXcq7mXMu5njOKfHzOkZyTOVdyruZcy7meM3ry8TlHck7mXMm5mnMt53rOOCL37gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCepRRE/jxTf+tpGihQRIxGT0c61vsNuHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ6k9FnIoUay/0V49XaxHXIuLnrVar+vrfVqsVsVFuP6rD7isAAAAAAAAAAAAAAAAAAAAcWamIj0WKp/9vI9Uj4s7g631PHh+8dPHkheEiikhlSXf98+PXLtefW7h5a3F2aWl2pj4x35xemJnd67frv9Kcv31nYnRsXzrzQMf2uf3H+p9buPXSYvPGV5d3fX6g//LU0vJiY3r3p+NY1CImu/cMVQ2eGB2rGj3XbMxXh6baPRpYixjZa2cAAAAAAAAAAAAAAAAAAAA4MgZSEZ+LFD/5z/Ops268p73m/5faj4rN2ld+f+tvAcztyI7uvx+wl+2014YOVQvv6xOjY2PjXbt7eu8uLduUUhHPRIpPvPyhaj18ioFd18aXde8t626ez3WDv1LWrWyr6h+aGB2rX12YP3l5bm5hurHcmJqbrY/fakzv+Q8HAAAAAAAAAAAAAAAAAAAAwH0MpCJ+FCn+++/+PXXuO5/X//e0H3Wt//+Nagl9pT9tz03V2v73Vmv729vvuzQ88NFn77V/P9b/l21KqYhvRopzP/pQdT/9zvr/yR21Zd2fRoo3nv1Irqs9UdY1Ot1pv+L15tzs6bL2ryLFr77ZqY2q9kaufXqr9kxZeyxS/MXG9tqv5toPbNWeLWtPRIrv/dfutR/cqj1X1v4kUvzj39Y7tQNl7e/l2uNbtaemF+ZmHjSs5fx/J1L8zdXfSp0+33P+u/7+w8qO3HTXnN9/++2a/8GufSt5Xv8kz3/jAfN/IVJ8p/8jua499lP5+aeq/2/N/ycixX/86/ba67n2/Vu1Z/barcNWzv+3I8V3//LHm33O859HdmuGuuf/l3u25+a75JDm/6mufYO5XdNvcSzejZZe+vqLjbm52UUb99nIb/I4Ku2xYWO/Nw75xMSBKD///yxS/P/xInWuY/Ln/3vaj7au//7nG1uf/5d25KZD+vx/f9e+S/mqpbcnon/55q3eZyL6l176+snmzcaN2Ruz82fPnP70py+cOX3mQu8TnYu7ra09j907QTn/P4gUP/z7H27+HrP9+m/36/+BHbnpkOb/6e4+bbuu2fNQvCuV8//XkeKpz/548/fN+13/d37/P/Gx7bn583dI8/+Brn2DuV3NtzgWAAAAAAAAAAAAj5OBVMSfR4rf+aNfT501RHv5938zO3LTIf37r+Nd+2YOaF3DngcZAOAIKa//Phgp/qn1/c213Nuv/+LXOrXd13/3chTu/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+7FEX8QaQYeHUjrfWVj9v6rzTnb9+ZGB3b/bBjKVLUoqjqy6/+M2fPnf/UhYvDnbzSd5Dd+HA8P37tcv25hZu3FmeXlmZn6hPzzemFmdk9v8KjHr/TUDWA9Zsv3p65fn2pfvbUufb+VjvuDL7e9+TxwUsXT14Y7tROjI6NjXe9RE/vQ3/3u6R77H8iivh+pHhz8I303b6IWjz6WDzgvbPfjlWdGKo6MTE6VnVkrtmYXy6fTLVcVYuodx000hmjA5iLRzISsVI2v2zwUNm98VuNxcbU3Gz9i43F5eZyc2E+1dqtLftTj1oMp4jViFjf5UeyN4r4ZqR4+fRG+ue+iKIzDp+8Ov6l0+ce3J7aPvRxD8p21nsjVmuPwZwdYX1RxD9Eip+9diK+1xfRE+2v+HjEF8p8NeKVMj8Tkco3xvmInx7oqZ391BNFnI8UC2kjvdZXng8655UrX65/fv76Qldt57zy2H8+HKQjfm7qjyJ+UJ3xN9K/7Pi5Lg6rUQAAAAAAAAAAAAAAAABUq7xWI8VXTp5I1frgzTXFzfkb9WuNqbn2sr7O2r/OmulWq9Wqp3aO5JzMuZJzNedazvWcUcvH5xzJOZlzJedqzrWc6zmjyMfnHMk5mXMl52rOtZzrOaMnH59zJOdkzpWcqznXcq7njCOydg8AAAAAAAAAAAAAAAAAAHhnqUVR3cX9W1/bSK2+9v2lJ6Oda+7z+473iwAAAP//u01xPQ==") creat(0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000001540)='2', 0xfdef, 0xe7c) 56.753067306s ago: executing program 0 (id=1142): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=@in6={0xa, 0x4e23, 0xd, @mcast1, 0x6}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000480)) bind$inet6(r2, &(0x7f00000004c0)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000500)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='f', 0x1) 55.530495766s ago: executing program 2 (id=1144): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)={@multicast2, @loopback, 0x1, 0x1, [@broadcast]}, 0x20000) syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f0000000340)='./cgroup/../file0\x00', 0x810082, &(0x7f00000001c0), 0x1, 0xbaf, &(0x7f0000002f00)="$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") mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9, 0xfffffffd) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) getdents(r2, &(0x7f0000003ac0)=""/4096, 0x1000) r3 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x11, 0x1, 0x0, &(0x7f0000001400)) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) unshare(0x2020600) r4 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) r5 = epoll_create(0x45d) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) lseek(r6, 0x5, 0x1) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x2102) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12) 53.569039614s ago: executing program 2 (id=1149): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, &(0x7f0000000240)) inotify_init() writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x5b, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2020000}, 0x20000000) setresuid(0xee01, 0x0, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) 49.130643555s ago: executing program 2 (id=1153): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f00000002c0)=""/102392, 0x18ff8) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000192c0), 0x802, 0x0) timer_getoverrun(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$uinput_user_dev(r5, &(0x7f0000019340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c) r6 = openat$binfmt_format(0xffffff9c, &(0x7f00000197c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r6, &(0x7f0000019800)='-1\x00', 0x2) ioctl$UI_DEV_CREATE(r5, 0x5501) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) 47.2866479s ago: executing program 2 (id=1155): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000440)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102) writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f00000019c0), 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, &(0x7f0000001b00)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) shutdown(r4, 0x0) syz_mount_image$udf(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x47, 0xc2b, &(0x7f00000008c0)="$eJzs3V1sXOlZB/DnnWOvHW9pvd0220K3jFTURi6J8tXEVVDldF1DpTRb1XFhr+rxR9LROnZkOzRboDKggsRNxd4gbpBFWYHUC65YLnHpIrVCSKjqRblAskS72gsufFEJAdpOdc68Y48dJ/Em64/s/n4r7//MmeeM34/xmWMpr08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGf/dzl02fSYbcCADhIV8e/dPpcinAJAADvHtf8/g8AAAAAAAAAAAAAAEddiiKOR4qBVzfSZGwtA+y/0py/fWdidGz3w46lSFGLoqovv/rPnD13/lMXLg538v7Hv90+HM+PX7tcf27h5q3F2aWl2Zn6xHxzemFmds+v8KjH7zRUDUD95ou3Z65fX6qfPXVu29N3Bl/ve/L44KWLJy8Md2onRsfGxrtqenof+rvf5V4rPJ6IIhqR4s3BN1IjImrx6GPxgPfOfjtWdWKo6sTE6FjVkblmY365fDLVclUtot510EhnjA5gLh7JSMRK2fyywUNl98ZvNRYbU3Oz9S82Fpeby82F+VRrt7bsTz1qMZwiViNive/ul+uNIj4aKV4+vZGmIqLojMMnq4XBD25PbR/6uAdlO+u9Eau1x2DOjrC+KOJqpPjZaydiuhyz/BUfj/hCma9GvFLmZyJS+cY4H/HTXd5HPJ56ooh/ixQLaSPNVOeDznnlypfrn5+/vtBV2zmvPPafDwfpiJ+b+qOIqeqMv5Ee/mIHAAAAAAAAAAAAAAAAgLfbsSji25Hij5/93WpdcVTr0t93afg9L/xm95rxZx7wOmXtqYhYqe1tTW5vXjqcauV/D938337oI6n0RxHfyOv//vCwGwMAAAAAAAAAAAAAAAAAAPCuVsQLkeIrJ0+k1ei+p3hz/kb9WmNqrn1X2M69fzv3TG+1Wq16audIzsmcKzlXc67lXM8ZtXx8zpGckzlXcq7mXMu5njOKfHzOkZyTOVdyruZcy7meM3ry8TlHck7mXMm5mnMt53rOOCL37gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCepRRE/jxTf+tpGihQRIxGT0c61vsNuHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ6k9FnIoUay/0V49XaxHXIuLnrVar+vrfVqsVsVFuP6rD7isAAAAAAAAAAAAAAAAAAAAcWamIj0WKp/9vI9Uj4s7g631PHh+8dPHkheEiikhlSXf98+PXLtefW7h5a3F2aWl2pj4x35xemJnd67frv9Kcv31nYnRsXzrzQMf2uf3H+p9buPXSYvPGV5d3fX6g//LU0vJiY3r3p+NY1CImu/cMVQ2eGB2rGj3XbMxXh6baPRpYixjZa2cAAAAAAAAAAAAAAAAAAAA4MgZSEZ+LFD/5z/Ops268p73m/5faj4rN2ld+f+tvAcztyI7uvx+wl+2014YOVQvv6xOjY2PjXbt7eu8uLduUUhHPRIpPvPyhaj18ioFd18aXde8t626ez3WDv1LWrWyr6h+aGB2rX12YP3l5bm5hurHcmJqbrY/fakzv+Q8HAAAAAAAAAAAAAAAAAAAAwH0MpCJ+FCn+++/+PXXuO5/X//e0H3Wt//+Nagl9pT9tz03V2v73Vmv729vvuzQ88NFn77V/P9b/l21KqYhvRopzP/pQdT/9zvr/yR21Zd2fRoo3nv1Irqs9UdY1Ot1pv+L15tzs6bL2ryLFr77ZqY2q9kaufXqr9kxZeyxS/MXG9tqv5toPbNWeLWtPRIrv/dfutR/cqj1X1v4kUvzj39Y7tQNl7e/l2uNbtaemF+ZmHjSs5fx/J1L8zdXfSp0+33P+u/7+w8qO3HTXnN9/++2a/8GufSt5Xv8kz3/jAfN/IVJ8p/8jua499lP5+aeq/2/N/ycixX/86/ba67n2/Vu1Z/barcNWzv+3I8V3//LHm33O859HdmuGuuf/l3u25+a75JDm/6mufYO5XdNvcSzejZZe+vqLjbm52UUb99nIb/I4Ku2xYWO/Nw75xMSBKD///yxS/P/xInWuY/Ln/3vaj7au//7nG1uf/5d25KZD+vx/f9e+S/mqpbcnon/55q3eZyL6l176+snmzcaN2Ruz82fPnP70py+cOX3mQu8TnYu7ra09j907QTn/P4gUP/z7H27+HrP9+m/36/+BHbnpkOb/6e4+bbuu2fNQvCuV8//XkeKpz/548/fN+13/d37/P/Gx7bn583dI8/+Brn2DuV3NtzgWAAAAAAAAAAAAj5OBVMSfR4rf+aNfT501RHv5938zO3LTIf37r+Nd+2YOaF3DngcZAOAIKa//Phgp/qn1/c213Nuv/+LXOrXd13/3chTu/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+7FEX8QaQYeHUjrfWVj9v6rzTnb9+ZGB3b/bBjKVLUoqjqy6/+M2fPnf/UhYvDnbzSd5Dd+HA8P37tcv25hZu3FmeXlmZn6hPzzemFmdk9v8KjHr/TUDWA9Zsv3p65fn2pfvbUufb+VjvuDL7e9+TxwUsXT14Y7tROjI6NjXe9RE/vQ3/3u6R77H8iivh+pHhz8I303b6IWjz6WDzgvbPfjlWdGKo6MTE6VnVkrtmYXy6fTLVcVYuodx000hmjA5iLRzISsVI2v2zwUNm98VuNxcbU3Gz9i43F5eZyc2E+1dqtLftTj1oMp4jViFjf5UeyN4r4ZqR4+fRG+ue+iKIzDp+8Ov6l0+ce3J7aPvRxD8p21nsjVmuPwZwdYX1RxD9Eip+9diK+1xfRE+2v+HjEF8p8NeKVMj8Tkco3xvmInx7oqZ391BNFnI8UC2kjvdZXng8655UrX65/fv76Qldt57zy2H8+HKQjfm7qjyJ+UJ3xN9K/7Pi5Lg6rUQAAAAAAAAAAAAAAAABUq7xWI8VXTp5I1frgzTXFzfkb9WuNqbn2sr7O2r/OmulWq9Wqp3aO5JzMuZJzNedazvWcUcvH5xzJOZlzJedqzrWc6zmjyMfnHMk5mXMl52rOtZzrOaMnH59zJOdkzpWcqznXcq7njCOydg8AAAAAAAAAAAAAAAAAAHhnqUVR3cX9W1/bSK2+9v2lJ6Oda+7z+473iwAAAP//u01xPQ==") creat(0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000001540)='2', 0xfdef, 0xe7c) 42.236661454s ago: executing program 0 (id=1160): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000300)='ecryptfs\x00', 0x0, &(0x7f0000000340)='ecryptfs_sig=0123456789abcdef,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_passthrough\x00') 41.020470925s ago: executing program 0 (id=1161): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001440)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x10000, 0x1, 0x44, "4f7ad0a9c5e53371311819a29e66e61f325afc587b22fda9e2481d451ec655d0", 0x31303453}) sched_setscheduler(r1, 0x2, &(0x7f00000014c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000001500), 0x0, 0x0) read$msr(r4, &(0x7f0000001540)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000000), 0x80) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 38.529867176s ago: executing program 0 (id=1165): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) 32.131940615s ago: executing program 33 (id=1155): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000440)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102) writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f00000019c0), 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, &(0x7f0000001b00)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) shutdown(r4, 0x0) syz_mount_image$udf(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f6164696e6963622c6e6f7374726963742c6d6f64653d30300030303030303030303030b7a130303068303030342c7569643d666f726754742c6e6f6164696e69d4fe2c756d61736b3d30bc3030060000000000000030303034303030323030302c6c617374726c6f636b3d30303030303030303030303030303030303031332c756eb77b6c6574652c70619c746974696f6e3d303030303830303030303030303030303030303505eba6ae15bfbe90e5f5d5d90aea08280068a228214313c7db8efb74a8c7a30e8bc291d6e93e0d40c1272acda59360ccde27abe29c73ed7312b5f838eb8bff0f84bc3c89a8a79e39a8c520544b8a4174c69b98849c74ee0471e33a2648814f53577e6d0437705a40ce8e033f78747cf5e858aec11bb7240a97de01d88a207b4520a7289db7e3cf3170c67cc1af0200000000000000000000006d95d7bea12a20216dfa4d781d77706b0ea701ec4eddc03768663dea20f4a919d93ef79423ec6962eccc48c759cbfd87245403469c72255c2617c320036aa3f6f669e11226503d7707fd3789789fa1a92ab639014cbc78ee03fdb0e0208b2f40e2b90f1627", @ANYRESHEX], 0x47, 0xc2b, &(0x7f00000008c0)="$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") creat(0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000001540)='2', 0xfdef, 0xe7c) 23.215682825s ago: executing program 34 (id=1165): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) 23.201404966s ago: executing program 4 (id=1182): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, &(0x7f0000000240)) inotify_init() writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x5b, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2020000}, 0x20000000) setresuid(0xee01, 0x0, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) 15.981012564s ago: executing program 4 (id=1188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000001c000a20000000000a03000000000000000000070000000900010073797a300000000094000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f50001280200001800e000100636f6e6e6c696d69740000000c000280080001400000a45e6001ba5d05dd01007061796c6f616400100001800c0001007061796c6f6164000c0001800800010064757000080003400000010614"], 0xdc}}, 0x20050800) 13.017778218s ago: executing program 3 (id=1191): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4000001) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) prlimit64(r0, 0xe, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./cifs\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000340)='cifs\x00', 0x0, 0x0) 11.244453651s ago: executing program 3 (id=1192): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000002400)={0x60, 0xfffffffffffffff5, 0x0, {{0x8, 0x4, 0x10000, 0xa, 0x0, 0x3, 0x7f, 0x400}}}, 0x60) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008a000000b70000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@loopback, 0x4e23, 0xb, 0x4e23, 0x7, 0xa, 0xa0, 0xa0, 0x17}, {0x4, 0x9d, 0x101, 0x8, 0x3, 0x0, 0x1}, {0xfffffffffffffffa, 0x0, 0x709e, 0x3}, 0x6, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x34ff, 0x4, 0x1, 0x0, 0x2, 0x7, 0x5}}, 0xe8) mount(0x0, &(0x7f00000004c0)='./debug\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000640)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0) read$msr(r3, &(0x7f0000002480)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001b480)=0x410000002) r4 = syz_open_procfs$namespace(0x0, &(0x7f000001b4c0)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f000001b540)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f000001b580)={0x2020}, 0x2020) inotify_init1(0x0) 11.065587126s ago: executing program 4 (id=1194): syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x166, &(0x7f0000000380)="$eJzs2j9Lw0AYBvA3KCgdHZ0KlSpokzTRuuoobu4Opeba4MWWRJB20U2cBIVz8EsIfgI/gWR006WDXyJyzaFpVAj+aRp4fksfeNvrm7v2prfmd706C2pEa72rveGC3/XKDXuzxeqsSbEdIirLEEbRjU6fPL/Xw4j0L96Qr6XX+LWy0ha7F8zljpV3SwAAAAAAAAAAAAAAAAAAAAAAkFG1pEKpI7xz5nKnnqgG/cFhk3PHD4jmc+owX9WymuEiJvit3B97bCtWZd6SyRXbvqyb45+/VmG5I/hLen+NY69nBP1BzfWabaftHFmW3TDXTXPDMkZrGekVq3eqJwqjezMxTqY/7tuynpg3e8oyb6bOf3bRFZcn6W/7OP+ihtPpaOOPgkb/sLJGdCYPe+KPo03JrhYvaES/+yVEM/Ef/MdtZLs9C2B0/w2JaM6uPMj7T291+YEqTuIw8318APjOWwAAAP//14QzQA==") chdir(0x0) syz_mount_image$fuse(0x0, &(0x7f0000008840)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) 10.46166424s ago: executing program 4 (id=1195): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file3\x00', 0x64042, 0x49) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x6549bfc8e202b0dd, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 10.358204283s ago: executing program 3 (id=1196): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, &(0x7f0000000240)) inotify_init() writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x5b, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2020000}, 0x20000000) setresuid(0xee01, 0x0, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) 8.722373024s ago: executing program 3 (id=1198): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000300)='ecryptfs\x00', 0x0, &(0x7f0000000340)='ecryptfs_sig=0123456789abcdef,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_passthrough\x00') 8.416794981s ago: executing program 5 (id=1199): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x5, &(0x7f0000000240)) inotify_init() r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2020000}, 0x20000000) setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) capset(&(0x7f0000000080)={0x19980330}, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) 7.806416086s ago: executing program 4 (id=1200): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4000001) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) prlimit64(r0, 0xe, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./cifs\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000340)='cifs\x00', 0x0, 0x0) 6.277789914s ago: executing program 5 (id=1201): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x8000, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x1, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x208f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x3, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7ffd, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 4.957290247s ago: executing program 4 (id=1202): r0 = socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x2, 0x7fff) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019380)=0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) dup3(r4, r4, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) 2.579123576s ago: executing program 3 (id=1203): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x52cd, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000001440), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r0, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x48885) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 2.375167971s ago: executing program 5 (id=1204): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000002400)={0x60, 0xfffffffffffffff5, 0x0, {{0x8, 0x4, 0x10000, 0xa, 0x0, 0x3, 0x7f, 0x400}}}, 0x60) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008a000000b70000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@loopback, 0x4e23, 0xb, 0x4e23, 0x7, 0xa, 0xa0, 0xa0, 0x17}, {0x4, 0x9d, 0x101, 0x8, 0x3, 0x0, 0x1}, {0xfffffffffffffffa, 0x0, 0x709e, 0x3}, 0x6, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x34ff, 0x4, 0x1, 0x0, 0x2, 0x7, 0x5}}, 0xe8) mount(0x0, &(0x7f00000004c0)='./debug\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000640)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0) read$msr(r3, &(0x7f0000002480)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001b480)=0x410000002) r4 = syz_open_procfs$namespace(0x0, &(0x7f000001b4c0)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f000001b540)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f000001b580)={0x2020}, 0x2020) inotify_init1(0x0) 2.347400632s ago: executing program 3 (id=1205): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x108, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xcc, 0x2, [@TCA_BPF_ACT={0xc8, 0x1, [@m_tunnel_key={0x74, 0x5, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x50, 0xc05, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xfffffffa, 0x4, 0x7268, 0x3a}, 0xab}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x18, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.646726789s ago: executing program 5 (id=1206): pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socket(0x40000000015, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000002380), 0x1, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000024c0)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000002500)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x1f) 1.57716987s ago: executing program 5 (id=1207): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, &(0x7f0000000240)) inotify_init() writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x5b, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2020000}, 0x20000000) setresuid(0xee01, 0x0, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=1208): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a000000000000095"], &(0x7f0000000100)='GPL\x00', 0xa, 0xffad, &(0x7f0000000140)=""/133}, 0x94) r0 = socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/md0\x00', 0x2, 0x0) ioctl(r2, 0x40480923, &(0x7f00000004c0)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010") ioctl(r2, 0x40140921, 0x0) ioctl(r2, 0x40140921, &(0x7f0000000540)="010000000100000001000000010000") ioctl(r2, 0x40140921, &(0x7f0000000580)="020000000100000002000000020000") ioctl(r2, 0x400c0930, 0x0) read(r2, &(0x7f0000000600)=""/4096, 0x1000) sendmmsg$inet_sctp(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00'], 0x30}], 0x1, 0x0) kernel console output (not intermixed with test programs): 30691][ T4463] RSP: 002b:00007fa63ecb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.239149][ T4463] RAX: ffffffffffffffda RBX: 00007fa63e025fa0 RCX: 00007fa63dd9e559 [ 95.247176][ T4463] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 95.255198][ T4463] RBP: 00007fa63de358b0 R08: 0000000000000000 R09: 0000000000000000 [ 95.263211][ T4463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.271218][ T4463] R13: 00007fa63e026038 R14: 00007fa63e025fa0 R15: 00007ffd9bb48978 [ 95.279250][ T4463] [ 95.346526][ T4468] ip_tables: iptables: counters copy to user failed while replacing table [ 95.584079][ T4476] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 95.623416][ T4476] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 95.653932][ T4476] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 95.682739][ T4476] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 95.759057][ T4472] loop4: detected capacity change from 0 to 4096 [ 95.886240][ T4472] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 98.596914][ T4472] ntfs3: Cannot use different iocharset when remounting! [ 100.802458][ T4498] loop3: detected capacity change from 0 to 2048 [ 101.337380][ T4498] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.467094][ T4510] siw: device registration error -23 [ 103.390268][ T4537] ip_tables: iptables: counters copy to user failed while replacing table [ 103.425877][ T4533] loop0: detected capacity change from 0 to 4096 [ 103.566114][ T4533] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 103.909760][ T4542] loop1: detected capacity change from 0 to 4096 [ 104.070862][ T4542] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 104.332917][ T4542] ntfs3: Cannot use different iocharset when remounting! [ 105.643516][ T4548] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 107.721537][ T4565] loop0: detected capacity change from 0 to 3904 [ 107.839333][ T4566] loop0: [ 108.699351][ T4569] siw: device registration error -23 [ 113.279301][ T4585] loop3: detected capacity change from 0 to 32768 [ 113.319700][ T4585] XFS (loop3): Mounting V5 Filesystem [ 113.439910][ T4585] XFS (loop3): Ending clean mount [ 113.454074][ T4585] XFS (loop3): Quotacheck needed: Please wait. [ 113.759583][ T4585] XFS (loop3): Quotacheck: Done. [ 113.909979][ T4595] ip_tables: iptables: counters copy to user failed while replacing table [ 114.059203][ T27] audit: type=1800 audit(1792144417.791:3): pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.42" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 114.450067][ T4274] XFS (loop3): Unmounting Filesystem [ 116.236165][ T4616] loop4: detected capacity change from 0 to 2048 [ 116.527838][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.589815][ T4616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.668944][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.695294][ T4624] loop3: detected capacity change from 0 to 512 [ 117.003670][ T4624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.012006][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.024328][ T4624] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 117.080126][ T4618] device bridge_slave_0 left promiscuous mode [ 117.118774][ T4624] EXT4-fs (loop3): 1 truncate cleaned up [ 117.185706][ T4624] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 117.190437][ T4618] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.138881][ T4640] siw: device registration error -23 [ 119.905720][ T4618] device bridge_slave_1 left promiscuous mode [ 119.917531][ T4618] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.997584][ T4618] bond0: (slave bond_slave_0): Releasing backup interface [ 120.109485][ T4618] bond0: (slave bond_slave_1): Releasing backup interface [ 120.160957][ T4644] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.203838][ T4618] team0: Port device team_slave_0 removed [ 120.226526][ T4618] team0: Port device team_slave_1 removed [ 120.259765][ T4618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.272267][ T4618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.294158][ T4618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.301724][ T4618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.362426][ T4622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 120.421981][ T4625] tipc: Started in network mode [ 120.447608][ T4625] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 120.478594][ T4625] tipc: Enabled bearer , priority 0 [ 120.611955][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 120.645016][ T4514] tipc: Resetting bearer [ 121.022198][ T4651] loop4: detected capacity change from 0 to 32768 [ 121.263652][ T4649] ip_tables: iptables: counters copy to user failed while replacing table [ 121.504021][ T4384] tipc: Node number set to 11578026 [ 121.584089][ T4651] XFS (loop4): Mounting V5 Filesystem [ 123.343301][ T4651] XFS (loop4): Ending clean mount [ 123.352146][ T4651] XFS (loop4): Quotacheck needed: Please wait. [ 123.402446][ T4651] XFS (loop4): Quotacheck: Done. [ 123.843149][ T27] audit: type=1800 audit(1792144427.411:4): pid=4670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.56" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 124.064917][ T4276] XFS (loop4): Unmounting Filesystem [ 125.298528][ T4674] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 125.422435][ T4674] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 125.490156][ T4677] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 125.542312][ T4674] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 127.241085][ T4683] loop1: detected capacity change from 0 to 4096 [ 127.562963][ T4683] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 127.854634][ T4683] ntfs3: Cannot use different iocharset when remounting! [ 128.568567][ T4703] siw: device registration error -23 [ 133.232827][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.239494][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.318135][ T4721] loop4: detected capacity change from 0 to 2048 [ 133.368111][ T4721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.313670][ T4737] loop4: detected capacity change from 0 to 4096 [ 137.349051][ T4737] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 140.678494][ T4753] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 140.742489][ T4753] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 140.792694][ T4753] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 140.823443][ T4753] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 148.486481][ T4797] ip_tables: iptables: counters copy to user failed while replacing table [ 148.498124][ T4800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.94'. [ 148.973121][ T4807] loop3: detected capacity change from 0 to 32768 [ 149.076971][ T4807] XFS (loop3): Mounting V5 Filesystem [ 149.141024][ T4807] XFS (loop3): Ending clean mount [ 149.150556][ T4807] XFS (loop3): Quotacheck needed: Please wait. [ 149.248996][ T4807] XFS (loop3): Quotacheck: Done. [ 149.862944][ T27] audit: type=1800 audit(1792144453.271:5): pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.95" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 150.104341][ T4827] siw: device registration error -23 [ 150.581336][ T4274] XFS (loop3): Unmounting Filesystem [ 151.916622][ T4835] Zero length message leads to an empty skb [ 152.427144][ T4839] ubi0: attaching mtd0 [ 152.463364][ T4839] ubi0: scanning is finished [ 152.468162][ T4839] ubi0: empty MTD device detected [ 153.303497][ T4839] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 154.055509][ T4857] loop2: detected capacity change from 0 to 2048 [ 154.113737][ T4857] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.644977][ T4878] loop0: detected capacity change from 0 to 32768 [ 159.749283][ T4878] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.111 (4878) [ 159.779222][ T4880] ip_tables: iptables: counters copy to user failed while replacing table [ 159.796774][ T4878] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.807563][ T4878] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 159.816329][ T4878] BTRFS info (device loop0): use no compression [ 159.822616][ T4878] BTRFS info (device loop0): force zlib compression, level 3 [ 159.830187][ T4878] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 159.839598][ T4878] BTRFS info (device loop0): use lzo compression, level 0 [ 159.846797][ T4878] BTRFS info (device loop0): enabling auto defrag [ 159.853299][ T4878] BTRFS info (device loop0): using free space tree [ 160.566962][ T4897] ip_tables: iptables: counters copy to user failed while replacing table [ 160.576112][ T4878] BTRFS info (device loop0): enabling ssd optimizations [ 161.681922][ T4273] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.938736][ T4914] loop1: detected capacity change from 0 to 32768 [ 162.034254][ T4920] netlink: 56 bytes leftover after parsing attributes in process `syz.4.116'. [ 162.277971][ T4914] XFS (loop1): Mounting V5 Filesystem [ 163.042514][ T4914] XFS (loop1): Ending clean mount [ 163.078570][ T4914] XFS (loop1): Quotacheck needed: Please wait. [ 163.106875][ T4914] XFS (loop1): Quotacheck: Done. [ 163.421154][ T27] audit: type=1800 audit(1792144467.171:6): pid=4941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.109" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 166.273520][ T4275] XFS (loop1): Unmounting Filesystem [ 167.554960][ T4958] ip_tables: iptables: counters copy to user failed while replacing table [ 168.344316][ T4964] ip_tables: iptables: counters copy to user failed while replacing table [ 171.074332][ T4971] siw: device registration error -23 [ 171.594499][ T4974] netlink: 56 bytes leftover after parsing attributes in process `syz.2.128'. [ 171.913691][ T4977] loop0: detected capacity change from 0 to 3904 [ 172.187321][ T4980] loop2: detected capacity change from 0 to 32768 [ 172.847239][ T4977] loop0: [ 172.900725][ T4980] XFS (loop2): Mounting V5 Filesystem [ 172.951594][ T4980] XFS (loop2): Ending clean mount [ 172.959509][ T4980] XFS (loop2): Quotacheck needed: Please wait. [ 172.988568][ T4980] XFS (loop2): Quotacheck: Done. [ 173.261382][ T27] audit: type=1800 audit(1792144477.001:7): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.131" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 173.886891][ T4271] XFS (loop2): Unmounting Filesystem [ 175.852444][ T5017] siw: device registration error -23 [ 181.273713][ T4287] Bluetooth: hci4: command 0x0405 tx timeout [ 181.675499][ T5051] netlink: 'syz.2.145': attribute type 4 has an invalid length. [ 181.688920][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 182.227238][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.239094][ T5053] loop3: detected capacity change from 0 to 32768 [ 182.278163][ T5055] tipc: Resetting bearer [ 182.286388][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.294804][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.350385][ T5064] netlink: 56 bytes leftover after parsing attributes in process `syz.0.142'. [ 182.370820][ T5055] tipc: Enabling of bearer rejected, already enabled [ 182.383143][ T5053] XFS (loop3): Mounting V5 Filesystem [ 182.549865][ T5053] XFS (loop3): Ending clean mount [ 182.557312][ T5053] XFS (loop3): Quotacheck needed: Please wait. [ 182.621260][ T5053] XFS (loop3): Quotacheck: Done. [ 182.886970][ T27] audit: type=1800 audit(1792144486.631:8): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.146" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 183.438093][ T4274] XFS (loop3): Unmounting Filesystem [ 184.387111][ T5087] ip_tables: iptables: counters copy to user failed while replacing table [ 188.400464][ T5114] netlink: 'syz.2.158': attribute type 4 has an invalid length. [ 188.816874][ T5115] netlink: 56 bytes leftover after parsing attributes in process `syz.3.159'. [ 189.013350][ T5107] Can't find ip_set type hash:ip,port,ne [ 190.042465][ T5121] siw: device registration error -23 [ 194.176048][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.183226][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.344184][ T5149] loop0: detected capacity change from 0 to 32768 [ 196.397254][ T5149] XFS (loop0): Mounting V5 Filesystem [ 196.481330][ T5149] XFS (loop0): Ending clean mount [ 196.489650][ T5149] XFS (loop0): Quotacheck needed: Please wait. [ 196.598707][ T5149] XFS (loop0): Quotacheck: Done. [ 196.929260][ T27] audit: type=1800 audit(1792144500.671:9): pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.163" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 197.439587][ T4273] XFS (loop0): Unmounting Filesystem [ 198.191998][ T5174] netlink: 'syz.2.171': attribute type 4 has an invalid length. [ 200.553411][ T5176] Can't find ip_set type hash:ip,port,ne [ 200.998314][ T5201] loop0: detected capacity change from 0 to 2048 [ 201.025214][ T5201] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.152294][ T127] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 202.362153][ T127] usb 4-1: Using ep0 maxpacket: 16 [ 202.382412][ T127] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 202.425858][ T127] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 202.452179][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.479102][ T127] usb 4-1: Product: syz [ 202.490223][ T127] usb 4-1: Manufacturer: syz [ 202.505248][ T127] usb 4-1: SerialNumber: syz [ 202.543495][ T127] usb 4-1: config 0 descriptor?? [ 202.572348][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 202.578438][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 202.584755][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 202.590798][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 202.597097][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 203.337204][ T5212] loop0: detected capacity change from 0 to 32768 [ 204.996359][ T5212] XFS (loop0): Mounting V5 Filesystem [ 205.007575][ T4341] usb 4-1: USB disconnect, device number 2 [ 205.141955][ T5212] XFS (loop0): log mount failed [ 205.323620][ T5235] netlink: 'syz.3.184': attribute type 4 has an invalid length. [ 205.346794][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 208.949187][ T5254] siw: device registration error -23 [ 215.696747][ T5279] loop3: detected capacity change from 0 to 32768 [ 216.535486][ T5279] XFS (loop3): Mounting V5 Filesystem [ 216.728314][ T5279] XFS (loop3): Ending clean mount [ 216.752781][ T5300] loop4: detected capacity change from 0 to 2048 [ 216.792615][ T5300] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.944820][ T5279] XFS (loop3): Quotacheck needed: Please wait. [ 217.263039][ T5279] XFS (loop3): Quotacheck: Done. [ 217.680676][ T5309] loop2: detected capacity change from 0 to 4096 [ 217.736692][ T5309] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 217.906901][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 218.021566][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.062307][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.104449][ T5313] device bridge_slave_0 left promiscuous mode [ 218.138547][ T5313] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.165136][ T5313] device bridge_slave_1 left promiscuous mode [ 218.179127][ T5313] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.200272][ T5313] bond0: (slave bond_slave_0): Releasing backup interface [ 219.074009][ T5313] bond0: (slave bond_slave_1): Releasing backup interface [ 219.121908][ T27] audit: type=1800 audit(1792144522.871:10): pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.197" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 219.184956][ T5328] ip_tables: iptables: counters copy to user failed while replacing table [ 219.568237][ T5313] team0: Port device team_slave_0 removed [ 219.868072][ T5313] team0: Port device team_slave_1 removed [ 220.037385][ T5313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.120122][ T5313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.171941][ T5313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.216373][ T5313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.301860][ T5314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.202'. [ 220.342261][ T5315] tipc: Started in network mode [ 220.347176][ T5315] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 220.374561][ T5315] tipc: Enabled bearer , priority 0 [ 220.442972][ T4514] tipc: Resetting bearer [ 221.964832][ T3598] tipc: Node number set to 11578026 [ 222.076035][ T5336] loop0: detected capacity change from 0 to 3904 [ 224.910638][ T4274] XFS (loop3): Unmounting Filesystem [ 226.253400][ T5363] loop3: detected capacity change from 0 to 256 [ 226.262768][ T5363] exfat: Deprecated parameter 'utf8' [ 226.268255][ T5363] exfat: Deprecated parameter 'utf8' [ 226.427251][ T5364] loop1: detected capacity change from 0 to 2048 [ 226.497964][ T5363] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 226.538806][ T5364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.168193][ T5392] ip_tables: iptables: counters copy to user failed while replacing table [ 234.820638][ T5403] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 234.848796][ T5403] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 234.865972][ T5403] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 234.879090][ T5403] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 235.226579][ T5407] loop3: detected capacity change from 0 to 4096 [ 235.296072][ T5407] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 236.625651][ T5426] loop4: detected capacity change from 0 to 32768 [ 236.644516][ T5426] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.233 (5426) [ 236.662543][ T5426] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 236.672824][ T5426] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 236.681604][ T5426] BTRFS info (device loop4): use no compression [ 236.688011][ T5426] BTRFS info (device loop4): force zlib compression, level 3 [ 236.695494][ T5426] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 236.705649][ T5426] BTRFS info (device loop4): use lzo compression, level 0 [ 236.712935][ T5426] BTRFS info (device loop4): enabling auto defrag [ 236.719410][ T5426] BTRFS info (device loop4): using free space tree [ 238.559338][ T5449] ubi0: attaching mtd0 [ 238.564651][ T5449] ubi0: scanning is finished [ 238.694831][ T5449] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 238.702584][ T5449] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 238.709876][ T5449] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 238.717139][ T5449] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 238.724679][ T5449] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 238.731547][ T5449] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 238.739777][ T5449] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2390422554 [ 238.750478][ T5449] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 238.902086][ T5454] ubi0: background thread "ubi_bgt0d" started, PID 5454 [ 239.031741][ T5426] BTRFS info (device loop4): enabling ssd optimizations [ 239.344131][ T5459] loop3: detected capacity change from 0 to 32768 [ 239.525359][ T4276] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 239.545566][ T5459] XFS (loop3): Mounting V5 Filesystem [ 239.636446][ T5477] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 239.806132][ T5477] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 239.825663][ T5430] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (5430) [ 239.862782][ T5477] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 239.900141][ T5459] XFS (loop3): Ending clean mount [ 239.911413][ T5459] XFS (loop3): Quotacheck needed: Please wait. [ 239.964933][ T5459] XFS (loop3): Quotacheck: Done. [ 240.430622][ T27] audit: type=1800 audit(1792144544.181:11): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.238" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 241.803226][ T5504] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 241.864319][ T5504] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 243.575074][ T5504] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 247.375098][ T5535] ubi: mtd0 is already attached to ubi0 [ 248.324005][ T5540] ip_tables: iptables: counters copy to user failed while replacing table [ 248.632685][ T4274] XFS (loop3): Unmounting Filesystem [ 254.041837][ T5569] syz.2.264 (5569) used greatest stack depth: 20816 bytes left [ 255.053412][ T5583] ip_tables: iptables: counters copy to user failed while replacing table [ 255.683078][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.696767][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.427778][ T5585] loop2: detected capacity change from 0 to 32768 [ 256.569267][ T5585] XFS (loop2): Mounting V5 Filesystem [ 256.900473][ T5585] XFS (loop2): Ending clean mount [ 257.013880][ T5585] XFS (loop2): Quotacheck needed: Please wait. [ 257.690097][ T5610] loop3: detected capacity change from 0 to 32768 [ 257.710207][ T5610] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 257.736579][ T5585] XFS (loop2): Quotacheck: Done. [ 257.887212][ T5615] loop1: detected capacity change from 0 to 2048 [ 257.917388][ T5615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.409379][ T4271] XFS (loop2): Unmounting Filesystem [ 260.561044][ T5633] siw: device registration error -23 [ 261.664472][ T5638] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 261.744591][ T5638] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 261.760264][ T5640] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 261.803124][ T5641] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 261.833950][ T5640] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 261.885512][ T5638] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 261.931628][ T5640] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 264.484112][ T5665] loop4: detected capacity change from 0 to 32768 [ 264.499600][ T5665] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 264.509882][ T5665] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 264.518725][ T5665] BTRFS info (device loop4): use no compression [ 264.525102][ T5665] BTRFS info (device loop4): force zlib compression, level 3 [ 264.532581][ T5665] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 264.541845][ T5665] BTRFS info (device loop4): use lzo compression, level 0 [ 264.549085][ T5665] BTRFS info (device loop4): enabling auto defrag [ 264.556501][ T5665] BTRFS info (device loop4): using free space tree [ 264.748641][ T5665] BTRFS info (device loop4): enabling ssd optimizations [ 265.013284][ T5687] loop0: detected capacity change from 0 to 2048 [ 265.038677][ T5687] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.773325][ T4276] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 266.670016][ T5606] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (5606) [ 267.605260][ T5697] siw: device registration error -23 [ 268.861341][ T5707] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 268.885421][ T5707] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 268.907662][ T5707] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 271.351797][ T5742] loop0: detected capacity change from 0 to 32768 [ 271.519603][ T5742] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 273.447329][ T5614] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 273.470827][ T5757] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 273.500940][ T5757] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 273.541580][ T5757] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 275.054819][ T5754] loop2: detected capacity change from 0 to 32768 [ 275.066316][ T5775] netlink: 56 bytes leftover after parsing attributes in process `syz.0.312'. [ 275.323046][ T5754] XFS (loop2): Mounting V5 Filesystem [ 275.759911][ T5754] XFS (loop2): Ending clean mount [ 275.805627][ T5754] XFS (loop2): Quotacheck needed: Please wait. [ 275.905496][ T5754] XFS (loop2): Quotacheck: Done. [ 275.964769][ T5788] FAULT_INJECTION: forcing a failure. [ 275.964769][ T5788] name fail_futex, interval 1, probability 0, space 0, times 1 [ 276.102152][ T5788] CPU: 1 PID: 5788 Comm: syz.1.313 Not tainted syzkaller #0 [ 276.109636][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 276.119738][ T5788] Call Trace: [ 276.123084][ T5788] [ 276.126063][ T5788] dump_stack_lvl+0x188/0x24e [ 276.130822][ T5788] ? show_regs_print_info+0x12/0x12 [ 276.136086][ T5788] ? load_image+0x410/0x410 [ 276.140655][ T5788] should_fail_ex+0x390/0x4c0 [ 276.145400][ T5788] get_futex_key+0x1b1/0x1000 [ 276.150128][ T5788] ? verify_lock_unused+0x140/0x140 [ 276.155386][ T5788] ? futex_setup_timer+0xc0/0xc0 [ 276.160370][ T5788] futex_wake+0x123/0x4f0 [ 276.164758][ T5788] ? futex_wake_mark+0x150/0x150 [ 276.169745][ T5788] ? __fget_files+0x28/0x460 [ 276.174397][ T5788] ? __lock_acquire+0x7ea0/0x7ea0 [ 276.179481][ T5788] do_futex+0x2e2/0x320 [ 276.183693][ T5788] ? __ia32_sys_get_robust_list+0x100/0x100 [ 276.189647][ T5788] __se_sys_futex+0x381/0x410 [ 276.194385][ T5788] ? __x64_sys_futex+0xf0/0xf0 [ 276.199201][ T5788] ? __x64_sys_futex+0x1d/0xf0 [ 276.204022][ T5788] do_syscall_64+0x4c/0xa0 [ 276.208490][ T5788] ? clear_bhb_loop+0x60/0xb0 [ 276.213250][ T5788] ? clear_bhb_loop+0x60/0xb0 [ 276.218002][ T5788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.223961][ T5788] RIP: 0033:0x7f9e0479e559 [ 276.228458][ T5788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.248133][ T5788] RSP: 002b:00007f9e055c10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 276.256619][ T5788] RAX: ffffffffffffffda RBX: 00007f9e04a25fa8 RCX: 00007f9e0479e559 [ 276.264638][ T5788] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9e04a25fac [ 276.272680][ T5788] RBP: 00007f9e04a25fa0 R08: 0035d2c4b9f04038 R09: 0000000000000000 [ 276.280709][ T5788] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 276.288727][ T5788] R13: 00007f9e04a26038 R14: 00007fffe0ce6ba0 R15: 00007fffe0ce6c88 [ 276.296753][ T5788] [ 276.561166][ T5794] loop0: detected capacity change from 0 to 32768 [ 276.581628][ T5794] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 277.225966][ T4271] XFS (loop2): Unmounting Filesystem [ 277.374648][ T5614] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 279.391878][ T5824] netlink: 56 bytes leftover after parsing attributes in process `syz.3.325'. [ 281.050320][ T5832] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 281.114233][ T5832] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 281.161831][ T5832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.180503][ T5835] FAULT_INJECTION: forcing a failure. [ 281.180503][ T5835] name fail_futex, interval 1, probability 0, space 0, times 0 [ 281.227454][ T5832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.240617][ T5835] CPU: 1 PID: 5835 Comm: syz.4.328 Not tainted syzkaller #0 [ 281.247989][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 281.258097][ T5835] Call Trace: [ 281.261429][ T5835] [ 281.264451][ T5835] dump_stack_lvl+0x188/0x24e [ 281.269190][ T5835] ? show_regs_print_info+0x12/0x12 [ 281.274454][ T5835] ? load_image+0x410/0x410 [ 281.279022][ T5835] should_fail_ex+0x390/0x4c0 [ 281.280149][ T5832] device bridge_slave_0 left promiscuous mode [ 281.283739][ T5835] get_futex_key+0x1b1/0x1000 [ 281.283764][ T5835] ? verify_lock_unused+0x140/0x140 [ 281.283799][ T5835] ? futex_setup_timer+0xc0/0xc0 [ 281.283826][ T5835] futex_wake+0x123/0x4f0 [ 281.283870][ T5835] ? futex_wake_mark+0x150/0x150 [ 281.314176][ T5835] ? __fget_files+0x28/0x460 [ 281.318817][ T5835] ? __lock_acquire+0x7ea0/0x7ea0 [ 281.323946][ T5835] do_futex+0x2e2/0x320 [ 281.328161][ T5835] ? __ia32_sys_get_robust_list+0x100/0x100 [ 281.334144][ T5835] __se_sys_futex+0x381/0x410 [ 281.338871][ T5835] ? __x64_sys_futex+0xf0/0xf0 [ 281.343681][ T5835] ? __x64_sys_futex+0x1d/0xf0 [ 281.348500][ T5835] do_syscall_64+0x4c/0xa0 [ 281.351022][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.352949][ T5835] ? clear_bhb_loop+0x60/0xb0 [ 281.352978][ T5835] ? clear_bhb_loop+0x60/0xb0 [ 281.353005][ T5835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.375421][ T5835] RIP: 0033:0x7f340259e559 [ 281.379887][ T5835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.399541][ T5835] RSP: 002b:00007f34034530e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 281.408004][ T5835] RAX: ffffffffffffffda RBX: 00007f3402825fa8 RCX: 00007f340259e559 [ 281.416024][ T5835] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3402825fac [ 281.424043][ T5835] RBP: 00007f3402825fa0 R08: 0006bc539a624e2e R09: 0000000000000000 [ 281.432080][ T5835] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 281.440103][ T5835] R13: 00007f3402826038 R14: 00007ffce86508c0 R15: 00007ffce86509a8 [ 281.448132][ T5835] [ 281.478127][ T5832] device bridge_slave_1 left promiscuous mode [ 281.498140][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.535509][ T5832] bond0: (slave bond_slave_0): Releasing backup interface [ 281.589737][ T5832] bond0: (slave bond_slave_1): Releasing backup interface [ 281.748133][ T5832] team0: Port device team_slave_0 removed [ 282.019700][ T5840] loop1: detected capacity change from 0 to 32768 [ 282.295313][ T5840] XFS (loop1): Mounting V5 Filesystem [ 282.335269][ T5832] team0: Port device team_slave_1 removed [ 282.384168][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.414210][ T5840] XFS (loop1): Ending clean mount [ 282.433205][ T5840] XFS (loop1): Quotacheck needed: Please wait. [ 282.466067][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.483807][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.491293][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.541296][ T5834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.326'. [ 282.558331][ T5840] XFS (loop1): Quotacheck: Done. [ 282.592149][ T5836] tipc: Started in network mode [ 282.597110][ T5836] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 282.702800][ T5836] tipc: Enabled bearer , priority 0 [ 282.740292][ T4514] tipc: Resetting bearer [ 282.963546][ T27] audit: type=1800 audit(1792144586.721:12): pid=5840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.329" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 284.311325][ T5480] tipc: Node number set to 11578026 [ 287.547983][ T5877] netlink: 56 bytes leftover after parsing attributes in process `syz.0.337'. [ 287.603142][ T4275] XFS (loop1): Unmounting Filesystem [ 288.149240][ T5880] loop2: detected capacity change from 0 to 32768 [ 288.157316][ T5880] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 288.335033][ T5884] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 288.625552][ T5889] FAULT_INJECTION: forcing a failure. [ 288.625552][ T5889] name failslab, interval 1, probability 0, space 0, times 0 [ 288.702184][ T5889] CPU: 0 PID: 5889 Comm: syz.2.343 Not tainted syzkaller #0 [ 288.709563][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 288.719665][ T5889] Call Trace: [ 288.722985][ T5889] [ 288.725958][ T5889] dump_stack_lvl+0x188/0x24e [ 288.730692][ T5889] ? show_regs_print_info+0x12/0x12 [ 288.735941][ T5889] ? load_image+0x410/0x410 [ 288.740504][ T5889] should_fail_ex+0x390/0x4c0 [ 288.745246][ T5889] should_failslab+0x5/0x20 [ 288.749803][ T5889] slab_pre_alloc_hook+0x59/0x300 [ 288.754916][ T5889] ? read_lock_is_recursive+0x10/0x10 [ 288.760355][ T5889] ? nfc_genl_rcv_nl_event+0xa4/0x2a0 [ 288.765796][ T5889] __kmem_cache_alloc_node+0x4f/0x270 [ 288.771222][ T5889] ? nfc_genl_rcv_nl_event+0xa4/0x2a0 [ 288.776640][ T5889] kmalloc_trace+0x26/0xe0 [ 288.781086][ T5889] nfc_genl_rcv_nl_event+0xa4/0x2a0 [ 288.786321][ T5889] blocking_notifier_call_chain+0x103/0x1b0 [ 288.792254][ T5889] netlink_release+0x1115/0x19b0 [ 288.797225][ T5889] ? netlink_release+0xf2/0x19b0 [ 288.802202][ T5889] ? netlink_sock_destruct+0x190/0x190 [ 288.807735][ T5889] sock_close+0xbf/0x210 [ 288.812036][ T5889] ? sock_mmap+0x90/0x90 [ 288.816322][ T5889] __fput+0x20a/0x8b0 [ 288.820347][ T5889] task_work_run+0x1d0/0x260 [ 288.824977][ T5889] ? task_work_cancel+0x220/0x220 [ 288.830045][ T5889] ? exit_to_user_mode_loop+0x3b/0x110 [ 288.835557][ T5889] exit_to_user_mode_loop+0xe6/0x110 [ 288.840893][ T5889] exit_to_user_mode_prepare+0xee/0x180 [ 288.846480][ T5889] syscall_exit_to_user_mode+0x16/0x40 [ 288.851974][ T5889] do_syscall_64+0x58/0xa0 [ 288.856426][ T5889] ? clear_bhb_loop+0x60/0xb0 [ 288.861130][ T5889] ? clear_bhb_loop+0x60/0xb0 [ 288.865867][ T5889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.871802][ T5889] RIP: 0033:0x7f4d61d9e559 [ 288.876250][ T5889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.895893][ T5889] RSP: 002b:00007f4d62c29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 288.904350][ T5889] RAX: 0000000000000000 RBX: 00007f4d62025fa0 RCX: 00007f4d61d9e559 [ 288.912352][ T5889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 288.920348][ T5889] RBP: 00007f4d61e358b0 R08: 0000000000000000 R09: 0000000000000000 [ 288.928351][ T5889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.936348][ T5889] R13: 00007f4d62026038 R14: 00007f4d62025fa0 R15: 00007ffe7596c238 [ 288.944364][ T5889] [ 289.135239][ T5892] device veth1_macvtap left promiscuous mode [ 289.161642][ T5892] device macsec0 entered promiscuous mode [ 289.630943][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 289.939826][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 289.978710][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.005599][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.018185][ T5899] device bridge_slave_0 left promiscuous mode [ 290.034497][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.063613][ T5899] device bridge_slave_1 left promiscuous mode [ 290.081088][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.114573][ T5899] bond0: (slave bond_slave_0): Releasing backup interface [ 290.151170][ T5899] bond0: (slave bond_slave_1): Releasing backup interface [ 290.225671][ T5899] team0: Port device team_slave_0 removed [ 290.271735][ T5899] team0: Port device team_slave_1 removed [ 290.296309][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.324726][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.338806][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.356830][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.395540][ T5904] tipc: Started in network mode [ 290.412052][ T5904] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 290.442435][ T5904] tipc: Enabled bearer , priority 0 [ 290.498686][ T47] tipc: Resetting bearer [ 290.518604][ T5480] bond0 speed is unknown, defaulting to 1000 [ 291.445665][ T5921] loop2: detected capacity change from 0 to 32768 [ 291.512332][ T5480] tipc: Node number set to 11578026 [ 291.548547][ T5921] XFS (loop2): Mounting V5 Filesystem [ 291.783232][ T5921] XFS (loop2): Ending clean mount [ 292.373436][ T5921] XFS (loop2): Quotacheck needed: Please wait. [ 292.398695][ T5939] netlink: 'syz.4.351': attribute type 4 has an invalid length. [ 292.410543][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 293.266813][ T5921] XFS (loop2): Quotacheck: Done. [ 293.477037][ T27] audit: type=1800 audit(1792144597.231:13): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.350" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 295.126557][ T5945] loop3: detected capacity change from 0 to 4096 [ 295.155594][ T5945] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 295.624806][ T4271] XFS (loop2): Unmounting Filesystem [ 295.757078][ T5953] loop1: detected capacity change from 0 to 32768 [ 295.772834][ T5953] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 295.913164][ T5964] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 296.415348][ T5966] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 296.483867][ T5966] tipc: Resetting bearer [ 296.541536][ T5966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.993070][ T5966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 298.175239][ T5967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.359'. [ 298.208412][ T5972] tipc: Enabling of bearer rejected, already enabled [ 298.450155][ T5980] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 298.490420][ T5980] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 298.529319][ T5980] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 298.958943][ T5990] loop3: detected capacity change from 0 to 4096 [ 300.393417][ T5990] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 301.394394][ T6001] siw: device registration error -23 [ 303.601107][ T6010] loop3: detected capacity change from 0 to 32768 [ 303.649860][ T6010] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 303.952776][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.370'. [ 304.119630][ T6013] device syz_tun entered promiscuous mode [ 304.129119][ T6015] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 304.154095][ T6013] device macvlan2 entered promiscuous mode [ 304.161782][ T6015] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 304.204743][ T6013] device syz_tun left promiscuous mode [ 304.436991][ T6019] netlink: 'syz.3.372': attribute type 4 has an invalid length. [ 305.375813][ T6025] loop0: detected capacity change from 0 to 4096 [ 305.384352][ T6025] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 309.537112][ T6050] loop0: detected capacity change from 0 to 4096 [ 309.781581][ T6050] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 311.126367][ T6068] ntfs3: Cannot use different iocharset when remounting! [ 311.650442][ T6070] loop4: detected capacity change from 0 to 32768 [ 311.713174][ T6070] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 311.723701][ T6070] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 311.732521][ T6070] BTRFS info (device loop4): use no compression [ 311.738806][ T6070] BTRFS info (device loop4): force zlib compression, level 3 [ 311.746266][ T6070] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 311.755577][ T6070] BTRFS info (device loop4): use lzo compression, level 0 [ 311.763292][ T6070] BTRFS info (device loop4): enabling auto defrag [ 311.769760][ T6070] BTRFS info (device loop4): using free space tree [ 312.185672][ T6070] BTRFS info (device loop4): enabling ssd optimizations [ 312.979357][ T6102] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 313.006473][ T6102] tipc: Resetting bearer [ 313.071855][ T6102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.096141][ T6099] loop3: detected capacity change from 0 to 2048 [ 313.104540][ T6102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.087209][ T6099] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 315.106917][ T6099] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 315.146953][ T6103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.374'. [ 315.166148][ T6106] tipc: Enabling of bearer rejected, already enabled [ 315.294564][ T4276] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 315.349439][ T6099] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 315.433472][ T6099] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.068048][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.074517][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.098623][ T6118] netlink: 'syz.1.393': attribute type 4 has an invalid length. [ 317.111413][ T6118] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready syzkaller syzkaller login: [ 318.770545][ T6139] loop2: detected capacity change from 0 to 256 [ 318.823519][ T6139] exfat: Deprecated parameter 'utf8' [ 318.829642][ T6139] exfat: Deprecated parameter 'utf8' [ 318.949862][ T6139] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 320.066103][ T6145] ip_tables: iptables: counters copy to user failed while replacing table [ 320.346841][ T6147] loop2: detected capacity change from 0 to 4096 [ 320.591220][ T6147] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 321.839093][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 321.897097][ T6163] ntfs3: Cannot use different iocharset when remounting! [ 321.936009][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 322.014798][ T6162] tipc: Resetting bearer [ 322.078819][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.101424][ T6167] ip_tables: iptables: counters copy to user failed while replacing table [ 322.903595][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 322.961310][ T6159] siw: device registration error -23 [ 323.082440][ T6165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.404'. [ 323.102120][ T6168] tipc: Enabling of bearer rejected, already enabled [ 325.407368][ T6188] loop3: detected capacity change from 0 to 256 [ 326.782888][ T6188] exfat: Deprecated parameter 'utf8' [ 326.788323][ T6188] exfat: Deprecated parameter 'utf8' [ 326.929000][ T6188] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 327.032804][ T6196] loop0: detected capacity change from 0 to 4096 [ 327.094614][ T6196] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 328.389442][ T6209] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 328.399025][ T6209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.406786][ T6209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.419698][ T6209] device bridge_slave_0 left promiscuous mode [ 328.427016][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.504899][ T6205] ip_tables: iptables: counters copy to user failed while replacing table [ 328.658809][ T6209] device bridge_slave_1 left promiscuous mode [ 328.715216][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.873233][ T6209] bond0: (slave bond_slave_0): Releasing backup interface [ 328.980785][ T6209] bond0: (slave bond_slave_1): Releasing backup interface [ 329.102044][ T6110] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 329.104703][ T6209] team0: Port device team_slave_0 removed [ 329.237967][ T6209] team0: Port device team_slave_1 removed [ 329.257341][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.302071][ T6110] usb 3-1: Using ep0 maxpacket: 32 [ 329.307500][ T6209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.330166][ T6110] usb 3-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 329.353599][ T6110] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 329.407859][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.432220][ T6110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.439185][ T6209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.539880][ T6214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.419'. [ 329.628903][ T6217] tipc: Started in network mode [ 329.634290][ T6217] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 329.659733][ T6217] tipc: Enabled bearer , priority 0 [ 329.828040][ T6211] siw: device registration error -23 [ 330.924151][ T4343] tipc: Node number set to 11578026 [ 331.139504][ T6237] TC_ACT_REPEAT abuse ? [ 332.739945][ T5480] usb 3-1: USB disconnect, device number 2 [ 332.873803][ T6243] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 332.924983][ T6243] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 332.973101][ T6243] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 333.000017][ T6243] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 333.428454][ T6245] loop2: detected capacity change from 0 to 4096 [ 333.604391][ T6245] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 335.804579][ T6258] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 335.837469][ T6258] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 335.852548][ T6258] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 336.098746][ T6263] ntfs3: Cannot use different iocharset when remounting! [ 336.999304][ T6265] TC_ACT_REPEAT abuse ? [ 338.426654][ T6274] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 338.458082][ T6274] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 338.486246][ T6274] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 338.508601][ T6274] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 338.799643][ T6276] ip_tables: iptables: counters copy to user failed while replacing table [ 338.981794][ T6281] ip_tables: iptables: counters copy to user failed while replacing table [ 340.805539][ T6304] Cannot find set identified by id 0 to match [ 344.683284][ T6320] loop1: detected capacity change from 0 to 2048 [ 344.705166][ T6320] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.233131][ T6325] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 345.285985][ T6327] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 345.329032][ T6327] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 345.369234][ T6327] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 346.087782][ T6335] loop1: detected capacity change from 0 to 128 [ 346.171499][ T6335] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 346.236578][ T6335] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.608482][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 347.346236][ T6349] ip_tables: iptables: counters copy to user failed while replacing table [ 347.888684][ T6361] loop4: detected capacity change from 0 to 4096 [ 347.926069][ T6361] NILFS (loop4): invalid segment: Checksum error in segment payload [ 347.934646][ T6361] NILFS (loop4): trying rollback from an earlier position [ 347.991157][ T6361] NILFS (loop4): recovery complete [ 348.055329][ T6362] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 348.163879][ T6361] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 32 already freed [ 348.179960][ T6361] NILFS (loop4): nilfs_sufile_do_free: segment 13 is already clean [ 349.139250][ T6369] netlink: 'syz.3.464': attribute type 4 has an invalid length. [ 349.737351][ T6372] loop1: detected capacity change from 0 to 2048 [ 349.922820][ T6372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 353.972990][ T6402] siw: device registration error -23 [ 355.402094][ T6418] loop1: detected capacity change from 0 to 2048 [ 355.446526][ T6418] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)                                                 syzkaller syzkaller login: [ 364.591723][ T6463] loop0: detected capacity change from 0 to 4096 [ 364.628972][ T6463] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 365.223492][ T6478] loop1: detected capacity change from 0 to 2048 [ 365.243202][ T6478] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)             syzkaller syzkaller login: [ 372.423392][ T6517] loop0: detected capacity change from 0 to 4096 [ 373.051004][ T6517] NILFS (loop0): invalid segment: Checksum error in segment payload [ 373.059207][ T6517] NILFS (loop0): trying rollback from an earlier position [ 373.109176][ T6517] NILFS (loop0): recovery complete [ 373.155502][ T6529] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 374.297375][ T6537] loop3: detected capacity change from 0 to 2048 [ 374.541410][ T6537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)                                                 syzkaller syzkaller login: [ 379.984725][ T4273] XFS (loop0): Unmounting Filesystem [ 382.874390][ T6596] siw: device registration error -23                      syzkaller syzkaller login: [ 387.690762][ T6628] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 387.866321][ T6628] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 387.967560][ T6628] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 388.122873][ T6628] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 388.445940][ T6637] loop4: detected capacity change from 0 to 2048 [ 388.472627][ T6637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)             syzkaller syzkaller login: [ 395.311314][ T6696] loop3: detected capacity change from 0 to 2048 [ 395.334287][ T6696] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 397.776140][ T6716] ip_tables: iptables: counters copy to user failed while replacing table [ 397.810721][ T6713] loop0: detected capacity change from 0 to 4096 [ 397.849392][ T6713] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 397.875638][ T6722] netlink: 'syz.1.555': attribute type 4 has an invalid length. [ 399.185649][ T6719] loop4: detected capacity change from 0 to 32768 [ 399.214797][ T6719] XFS: ikeep mount option is deprecated. [ 399.852682][ T6719] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 399.863259][ T6719] XFS (loop4): Mounting V5 Filesystem [ 399.968861][ T6751] loop1: detected capacity change from 0 to 256 [ 400.089249][ T6751] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 400.231826][ T6751] rxe_eth0 speed is unknown, defaulting to 1000 [ 400.680208][ T6751] bond0 speed is unknown, defaulting to 1000 [ 400.800623][ T6719] XFS (loop4): AIL initialisation failed: error -12 [ 400.852282][ T6719] XFS (loop4): log mount failed [ 402.125067][ T6767] netlink: 'syz.3.571': attribute type 4 has an invalid length. [ 402.159885][ T6763] loop1: detected capacity change from 0 to 4096 [ 402.446294][ T6769] loop0: detected capacity change from 0 to 4096 [ 402.502530][ T6769] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 402.747669][ T6763] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 403.428785][ T6776] ntfs3: Cannot use different iocharset when remounting! [ 406.964243][ T6794] loop2: detected capacity change from 0 to 512 [ 407.034823][ T6794] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 407.119571][ T6798] loop4: detected capacity change from 0 to 4096 [ 407.282086][ T6794] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.578: bad orphan inode 13 [ 407.503653][ T6794] ext4_test_bit(bit=12, block=18) = 1 [ 407.648961][ T6798] NILFS (loop4): invalid segment: Checksum error in segment payload [ 407.664160][ T6794] is_bad_inode(inode)=0 [ 407.749233][ T6794] NEXT_ORPHAN(inode)=0 [ 407.818794][ T6798] NILFS (loop4): trying rollback from an earlier position [ 407.833497][ T6794] max_ino=32 [ 407.900521][ T6794] i_nlink=1 [ 407.969540][ T6794] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 408.016938][ T6794] Quota error (device loop2): do_check_range: Getting block 1536 out of range 0-5 [ 408.044348][ T6798] NILFS (loop4): recovery complete [ 408.088133][ T6810] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 409.015653][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 410.607848][ T6832] loop0: detected capacity change from 0 to 2048 [ 410.636461][ T6832] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 412.462410][ T6846] loop3: detected capacity change from 0 to 512 [ 412.564377][ T6846] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.592: casefold flag without casefold feature [ 412.578444][ T6846] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.592: couldn't read orphan inode 15 (err -117) [ 412.592818][ T6846] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 414.598571][ T6856] loop4: detected capacity change from 0 to 4096 [ 414.972180][ T6848] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 415.600462][ T6856] NILFS (loop4): invalid segment: Checksum error in segment payload [ 415.608651][ T6856] NILFS (loop4): trying rollback from an earlier position [ 415.651819][ T6856] NILFS (loop4): recovery complete [ 415.690981][ T6861] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 415.724001][ T6856] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 32 already freed [ 415.733709][ T6856] NILFS (loop4): nilfs_sufile_do_free: segment 13 is already clean [ 415.849618][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 416.232230][ T5480] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 416.484088][ T5480] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 416.584406][ T5480] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.728841][ T5480] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 416.837096][ T5480] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.976103][ T5480] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 417.034052][ T6860] loop1: detected capacity change from 0 to 4096 [ 417.074191][ T5480] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 417.207024][ T5480] usb 1-1: Product: syz [ 417.273020][ T5480] usb 1-1: Manufacturer: syz [ 417.511631][ T5480] cdc_wdm 1-1:1.0: skipping garbage [ 417.582644][ T5480] cdc_wdm 1-1:1.0: skipping garbage [ 418.798209][ T6860] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 418.815217][ T5480] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 418.821254][ T5480] cdc_wdm 1-1:1.0: Unknown control protocol [ 418.913381][ T5480] usb 1-1: USB disconnect, device number 2 [ 419.166235][ T6875] ip_tables: iptables: counters copy to user failed while replacing table [ 419.339426][ T6878] loop2: detected capacity change from 0 to 4096 [ 419.381616][ T6878] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 421.752146][ T6894] loop0: detected capacity change from 0 to 32768 [ 421.767240][ T6894] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.608 (6894) [ 421.782661][ T6894] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 421.792938][ T6894] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 421.801837][ T6894] BTRFS info (device loop0): use no compression [ 421.808242][ T6894] BTRFS info (device loop0): force zlib compression, level 3 [ 421.815733][ T6894] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 421.825043][ T6894] BTRFS info (device loop0): use lzo compression, level 0 [ 421.832295][ T6894] BTRFS info (device loop0): enabling auto defrag [ 421.838818][ T6894] BTRFS info (device loop0): using free space tree [ 421.906977][ T6896] loop2: detected capacity change from 0 to 4096 [ 422.040004][ T6896] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 422.659234][ T6919] ntfs3: Cannot use different iocharset when remounting! [ 422.842527][ T6894] BTRFS info (device loop0): enabling ssd optimizations [ 423.334050][ T4273] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 425.064903][ T6935] netlink: 'syz.1.614': attribute type 4 has an invalid length. [ 425.527319][ T6941] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 426.585544][ T6941] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 426.696179][ T6941] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 426.865357][ T6949] loop3: detected capacity change from 0 to 4096 [ 426.959882][ T6949] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 428.692543][ T6959] loop0: detected capacity change from 0 to 3904 [ 428.801127][ T6959] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 428.873386][ T6959] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 428.920888][ T6959] loop0: [ 429.047587][ T6967] loop1: detected capacity change from 0 to 128 [ 429.113173][ T6967] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 429.164390][ T6967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 430.486764][ T6990] netlink: 'syz.1.627': attribute type 4 has an invalid length. [ 431.327162][ T6996] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 431.370503][ T6996] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 432.378174][ T7008] ip_tables: iptables: counters copy to user failed while replacing table [ 433.542705][ T7016] loop0: detected capacity change from 0 to 3904 [ 433.617977][ T7016] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 433.642633][ T7021] loop2: detected capacity change from 0 to 128 [ 433.657475][ T7016] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 433.687518][ T7021] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 433.707283][ T7016] loop0: [ 433.757882][ T7021] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 437.226157][ T7045] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 438.098213][ T7054] loop4: detected capacity change from 0 to 2048 [ 438.129732][ T7054] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 438.783651][ T7045] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 438.840260][ T7044] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 440.880851][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.887200][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.151187][ T7068] loop0: detected capacity change from 0 to 3904 [ 441.368898][ T7068] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 441.443361][ T7068] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 441.466113][ T7072] FAULT_INJECTION: forcing a failure. [ 441.466113][ T7072] name failslab, interval 1, probability 0, space 0, times 0 [ 441.475230][ T7068] loop0: [ 441.765050][ T7072] CPU: 1 PID: 7072 Comm: syz.4.651 Not tainted syzkaller #0 [ 441.772460][ T7072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 441.782562][ T7072] Call Trace: [ 441.785938][ T7072] [ 441.788924][ T7072] dump_stack_lvl+0x188/0x24e [ 441.793755][ T7072] ? show_regs_print_info+0x12/0x12 [ 441.798987][ T7072] ? load_image+0x410/0x410 [ 441.803529][ T7072] ? __might_sleep+0xd0/0xd0 [ 441.808186][ T7072] ? __lock_acquire+0x7ea0/0x7ea0 [ 441.813268][ T7072] ? trace_contention_end+0x5f/0x170 [ 441.818583][ T7072] should_fail_ex+0x390/0x4c0 [ 441.823347][ T7072] should_failslab+0x5/0x20 [ 441.827914][ T7072] slab_pre_alloc_hook+0x59/0x300 [ 441.832968][ T7072] ? misc_open+0x55/0x390 [ 441.837362][ T7072] ? vmci_host_open+0x4b/0xe0 [ 441.842136][ T7072] __kmem_cache_alloc_node+0x4f/0x270 [ 441.847548][ T7072] ? vmci_host_open+0x4b/0xe0 [ 441.852247][ T7072] kmalloc_trace+0x26/0xe0 [ 441.856697][ T7072] vmci_host_open+0x4b/0xe0 [ 441.861221][ T7072] ? vmci_host_unlocked_ioctl+0x2710/0x2710 [ 441.867175][ T7072] misc_open+0x31f/0x390 [ 441.871474][ T7072] chrdev_open+0x585/0x5f0 [ 441.875997][ T7072] ? cd_forget+0x160/0x160 [ 441.880435][ T7072] ? fsnotify_perm+0x39b/0x550 [ 441.885281][ T7072] ? cd_forget+0x160/0x160 [ 441.889720][ T7072] do_dentry_open+0x7dd/0x10b0 [ 441.894562][ T7072] path_openat+0x2674/0x2f10 [ 441.899234][ T7072] ? kasan_set_track+0x60/0x70 [ 441.904027][ T7072] ? verify_lock_unused+0x140/0x140 [ 441.909248][ T7072] ? do_sys_openat2+0xdd/0x4f0 [ 441.914064][ T7072] ? do_filp_open+0x420/0x420 [ 441.918778][ T7072] do_filp_open+0x1ee/0x420 [ 441.923305][ T7072] ? vfs_tmpfile+0x470/0x470 [ 441.927941][ T7072] ? _raw_spin_unlock+0x24/0x40 [ 441.932899][ T7072] ? alloc_fd+0x590/0x640 [ 441.937277][ T7072] do_sys_openat2+0x14b/0x4f0 [ 441.941996][ T7072] ? do_sys_open+0xe0/0xe0 [ 441.946441][ T7072] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 441.952457][ T7072] ? lock_chain_count+0x20/0x20 [ 441.957337][ T7072] __x64_sys_openat+0x135/0x160 [ 441.962219][ T7072] do_syscall_64+0x4c/0xa0 [ 441.966667][ T7072] ? clear_bhb_loop+0x60/0xb0 [ 441.971372][ T7072] ? clear_bhb_loop+0x60/0xb0 [ 441.976081][ T7072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.982015][ T7072] RIP: 0033:0x7f340259e559 [ 441.986532][ T7072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.006239][ T7072] RSP: 002b:00007f3403453028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 442.014747][ T7072] RAX: ffffffffffffffda RBX: 00007f3402825fa0 RCX: 00007f340259e559 [ 442.022761][ T7072] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 00000000ffffff9c [ 442.030752][ T7072] RBP: 00007f34026358b0 R08: 0000000000000000 R09: 0000000000000000 [ 442.038783][ T7072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.046786][ T7072] R13: 00007f3402826038 R14: 00007f3402825fa0 R15: 00007ffce86509a8 [ 442.054801][ T7072] [ 446.920108][ T7105] tmpfs: Bad value for 'mpol' [ 447.374898][ T7109] loop0: detected capacity change from 0 to 16 [ 447.415527][ T7109] erofs: (device loop0): mounted with root inode @ nid 36. [ 447.544272][ T4285] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 447.558400][ T7109] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 447.593857][ T27] audit: type=1800 audit(1792144751.351:15): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.656" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 447.632398][ T7109] syz.0.656 (7109) used greatest stack depth: 20544 bytes left [ 450.292324][ T7128] ip_tables: iptables: counters copy to user failed while replacing table [ 452.691315][ T7144] loop2: detected capacity change from 0 to 2048 [ 452.717961][ T7144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 453.802910][ T7151] loop0: detected capacity change from 0 to 1024 [ 453.837989][ T7151] hfsplus: invalid length 1280 has been corrected to 255 [ 453.845947][ T7151] hfsplus: invalid length 1280 has been corrected to 255 [ 453.853452][ T7151] hfsplus: invalid length 1280 has been corrected to 255 [ 453.862278][ T7151] hfsplus: invalid length 1280 has been corrected to 255 [ 453.869647][ T7151] hfsplus: invalid length 1280 has been corrected to 255 [ 453.877120][ T7151] hfsplus: invalid length 1280 has been corrected to 255 [ 454.182502][ T7157] loop0: detected capacity change from 0 to 3904 [ 454.285888][ T7157] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 2.0. Aborting. [ 454.285915][ T7157] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 454.285962][ T7157] loop0: [ 454.537347][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 454.539073][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 454.539763][ T4277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 454.541067][ T4277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 454.541586][ T4277] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 454.541852][ T4277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 454.573928][ T7162] rxe_eth0 speed is unknown, defaulting to 1000 [ 456.572093][ T4285] Bluetooth: hci5: command 0x0409 tx timeout [ 458.652222][ T4277] Bluetooth: hci5: command 0x041b tx timeout [ 458.715097][ T7162] bond0 speed is unknown, defaulting to 1000 [ 458.723348][ T7161] siw: device registration error -23 [ 460.064281][ T4384] hid-generic 0005:0B57:4155.0001: unknown main item tag 0x0 [ 461.422626][ T4277] Bluetooth: hci5: command 0x040f tx timeout [ 461.436870][ T7162] chnl_net:caif_netlink_parms(): no params data found [ 461.486354][ T4384] hid-generic 0005:0B57:4155.0001: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 461.614120][ T7162] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.682937][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.728710][ T7162] device bridge_slave_0 entered promiscuous mode [ 461.756873][ T7162] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.780017][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.806578][ T7162] device bridge_slave_1 entered promiscuous mode [ 461.934710][ T7162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.967199][ T7193] fido_id[7193]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 461.994577][ T7162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.100102][ T7162] team0: Port device team_slave_0 added [ 462.165756][ T7162] team0: Port device team_slave_1 added [ 462.248576][ T7162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.271940][ T7162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.359317][ T7162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.404092][ T7162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.431560][ T7162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.488361][ T7162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.626137][ T7162] device hsr_slave_0 entered promiscuous mode [ 462.690203][ T7203] loop0: detected capacity change from 0 to 512 [ 462.702509][ T7162] device hsr_slave_1 entered promiscuous mode [ 462.722633][ T7162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.730258][ T7162] Cannot create hsr debugfs directory [ 462.793673][ T7203] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 463.101095][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'. [ 463.156103][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 464.084044][ T7216] input: syz1 as /devices/virtual/input/input6 [ 464.750021][ T4277] Bluetooth: hci5: command 0x0419 tx timeout [ 465.027278][ T7162] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 465.067175][ T7162] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 465.111822][ T7162] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 465.159931][ T7162] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 465.416020][ T7222] loop0: detected capacity change from 0 to 32768 [ 465.457452][ T7162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.508577][ T7222] (syz.0.687,7222,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 465.556836][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 465.578984][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 465.615684][ T7222] (syz.0.687,7222,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 465.640303][ T7162] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.700324][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 465.743117][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 465.794249][ T4415] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.801455][ T4415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.824346][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 465.862886][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 465.881722][ T7222] JBD2: Ignoring recovery information on journal [ 465.984423][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 466.113379][ T7] hid-generic 0005:0B57:4155.0002: unknown main item tag 0x0 [ 466.166900][ T4415] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.174103][ T4415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.342669][ T7] hid-generic 0005:0B57:4155.0002: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 466.454581][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 466.554594][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 466.605570][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 466.636251][ T7222] JBD2: recovery failed [ 466.640470][ T7222] (syz.0.687,7222,1):ocfs2_journal_load:1135 ERROR: Failed to load journal! [ 466.659513][ T7222] (syz.0.687,7222,1):ocfs2_check_volume:2431 ERROR: ocfs2 journal load failed! -5 [ 466.679749][ T7222] (syz.0.687,7222,1):ocfs2_check_volume:2487 ERROR: status = -5 [ 466.697062][ T7222] (syz.0.687,7222,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 466.732105][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 466.741710][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 466.786747][ T7222] (syz.0.687,7222,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 466.796734][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 466.842939][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 466.882477][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 466.932549][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 467.007464][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 467.041548][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 467.224932][ T7248] loop4: detected capacity change from 0 to 4096 [ 467.307655][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 467.337078][ T7248] NILFS (loop4): invalid segment: Checksum error in segment payload [ 467.345428][ T7248] NILFS (loop4): trying rollback from an earlier position [ 467.437453][ T7248] NILFS (loop4): recovery complete [ 467.486557][ T7250] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 467.522576][ T7248] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 32 already freed [ 467.533262][ T7248] NILFS (loop4): nilfs_sufile_do_free: segment 13 is already clean [ 471.459974][ T7162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.519911][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 471.551182][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 472.447062][ T7287] ip_tables: iptables: counters copy to user failed while replacing table [ 472.899158][ T7298] loop2: detected capacity change from 0 to 2048 [ 472.920420][ T7298] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 473.612036][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 474.940649][ T4930] hid-generic 0005:0B57:4155.0003: unknown main item tag 0x0 [ 475.068175][ T7313] loop0: detected capacity change from 0 to 512 [ 476.663902][ T7313] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 476.673280][ T7313] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.693954][ T4930] hid-generic 0005:0B57:4155.0003: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 477.326012][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 477.620710][ T7331] loop3: detected capacity change from 0 to 4096 [ 477.645623][ T7331] NILFS (loop3): invalid segment: Checksum error in segment payload [ 477.654445][ T7331] NILFS (loop3): trying rollback from an earlier position [ 477.703391][ T7331] NILFS (loop3): recovery complete [ 477.770715][ T7332] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 478.702741][ T7322] fido_id[7322]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 479.226640][ T7341] loop0: detected capacity change from 0 to 512 [ 480.479028][ T7341] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.712: casefold flag without casefold feature [ 480.493183][ T7341] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.712: couldn't read orphan inode 15 (err -117) [ 480.506298][ T7341] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 480.774275][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'. [ 480.905874][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 480.944325][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 480.954273][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 481.288962][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 481.322899][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 481.380194][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 481.388485][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 481.403026][ T7162] device veth0_vlan entered promiscuous mode [ 481.444919][ T7354] can0: slcan on ptm0. [ 481.901680][ T7162] device veth1_vlan entered promiscuous mode [ 482.134055][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 483.073977][ T7162] device veth0_macvtap entered promiscuous mode [ 483.142366][ T7162] device veth1_macvtap entered promiscuous mode [ 483.166156][ T7353] can0 (unregistered): slcan off ptm0. [ 483.205466][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 483.214656][ T7381] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 483.233878][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 483.237504][ T7381] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 483.263136][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 483.276963][ T7381] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 483.292800][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 483.315658][ T7381] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 483.348896][ T7162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.396317][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 483.414384][ T7381] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 483.433618][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 483.455456][ T7379] device syzkaller0 entered promiscuous mode [ 483.476013][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 483.511264][ T7162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.582573][ T4828] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 483.597643][ T7392] loop4: detected capacity change from 0 to 512 [ 483.679287][ T7392] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.729: casefold flag without casefold feature [ 483.696496][ T7392] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.729: couldn't read orphan inode 15 (err -117) [ 483.711068][ T7392] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 483.749909][ T4828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 483.950335][ T7162] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.119600][ T7162] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.284939][ T7162] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.434871][ T7162] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.782863][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 484.997878][ T4461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.015571][ T7409] loop3: detected capacity change from 0 to 256 [ 485.030260][ T4461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.188904][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.199107][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.334036][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 485.361184][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 485.792045][ T127] hid-generic 0005:0B57:4155.0004: unknown main item tag 0x0 [ 485.877772][ T127] hid-generic 0005:0B57:4155.0004: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 486.758024][ T7427] input: syz1 as /devices/virtual/input/input7 [ 487.690820][ T7426] fido_id[7426]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 488.114236][ T7433] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 488.127413][ T7433] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 488.141100][ T7433] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 488.156695][ T7433] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 488.186341][ T7433] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 488.685985][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'. [ 488.797493][ T7438] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 488.851715][ T7438] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 488.882595][ T7438] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 489.156434][ T7457] netlink: 'syz.3.742': attribute type 4 has an invalid length. [ 491.799540][ T7481] input: syz1 as /devices/virtual/input/input8 [ 493.169806][ T7] hid-generic 0005:0B57:4155.0005: unknown main item tag 0x0 [ 494.218622][ T7] hid-generic 0005:0B57:4155.0005: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 494.333558][ T7503] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 494.345305][ T7504] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 494.393096][ T7504] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 494.404682][ T7503] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 494.432667][ T7504] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 494.462456][ T7507] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 494.563868][ T7511] netlink: 'syz.0.755': attribute type 4 has an invalid length. [ 494.584686][ T7511] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 495.343503][ T7503] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 495.362847][ T7503] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 495.422222][ T7506] fido_id[7506]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 495.513552][ T7514] IPVS: Error joining to the multicast group [ 496.324383][ T7493] siw: device registration error -23 [ 496.439923][ T7521] loop3: detected capacity change from 0 to 2048 [ 496.539596][ T7521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 499.927376][ T7548] loop4: detected capacity change from 0 to 1024 [ 500.162117][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 500.229003][ T5478] hid-generic 0005:0B57:4155.0006: unknown main item tag 0x0 [ 500.377038][ T5478] hid-generic 0005:0B57:4155.0006: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 500.946487][ T7] usb 3-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 500.980138][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 501.107171][ T7] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 501.376258][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.384760][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.578567][ T7] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 501.591048][ T7] usb 3-1: Product: syz [ 501.596384][ T7] usb 3-1: Manufacturer: syz [ 501.601505][ T7] usb 3-1: SerialNumber: syz [ 501.768012][ T7] usb 3-1: config 0 descriptor?? [ 501.799734][ T7552] fido_id[7552]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 503.325603][ T7562] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 503.333985][ T7] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 503.343348][ T7562] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 503.394606][ T7] usb 3-1: USB disconnect, device number 3 [ 503.455733][ T7562] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 503.516773][ T7571] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 503.544985][ T7562] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 503.628693][ T7547] udevd[7547]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.857028][ T7578] input: syz1 as /devices/virtual/input/input9 [ 507.192899][ T127] hid-generic 0005:0B57:4155.0007: unknown main item tag 0x0 [ 507.326084][ T127] hid-generic 0005:0B57:4155.0007: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 507.958493][ T7613] ip_tables: iptables: counters copy to user failed while replacing table [ 509.987515][ T7610] fido_id[7610]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 510.216591][ T7622] loop3: detected capacity change from 0 to 4096 [ 510.225583][ T7622] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 510.270951][ T7625] netlink: 'syz.5.774': attribute type 10 has an invalid length. [ 510.287404][ T7625] netlink: 40 bytes leftover after parsing attributes in process `syz.5.774'. [ 510.304583][ T7625] device caif0 entered promiscuous mode [ 510.310255][ T7625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 512.601197][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 512.639084][ T7646] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 512.659264][ T7646] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 512.679372][ T7646] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 512.730060][ T7646] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 512.762618][ T7646] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 513.304513][ T7655] loop5: detected capacity change from 0 to 2048 [ 513.359582][ T7655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 513.901055][ T7660] loop5: detected capacity change from 0 to 4096 [ 513.963550][ T7660] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 515.392296][ T5692] hid-generic 0005:0B57:4155.0008: unknown main item tag 0x0 [ 515.495375][ T5692] hid-generic 0005:0B57:4155.0008: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 517.249260][ T7698] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 517.259423][ T7698] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 517.269592][ T7698] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 517.279733][ T7698] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 517.290488][ T7698] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 517.598499][ T7706] loop3: detected capacity change from 0 to 2048 [ 518.480232][ T7706] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 520.643781][ T5692] hid-generic 0005:0B57:4155.0009: unknown main item tag 0x0 [ 520.714622][ T5692] hid-generic 0005:0B57:4155.0009: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 522.298357][ T7728] fido_id[7728]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 522.987089][ T7746] input: syz1 as /devices/virtual/input/input10 [ 527.383931][ T7772] ip_tables: iptables: counters copy to user failed while replacing table [ 529.655904][ T7776] loop3: detected capacity change from 0 to 512 [ 529.954884][ T7776] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 529.964090][ T7776] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.488750][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 533.218158][ T5479] hid-generic 0005:0B57:4155.000A: unknown main item tag 0x0 [ 533.276674][ T5479] hid-generic 0005:0B57:4155.000A: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 533.657172][ T7827] ip_tables: iptables: counters copy to user failed while replacing table [ 537.455031][ T7844] input: syz1 as /devices/virtual/input/input11 [ 538.251529][ T7] hid-generic 0005:0B57:4155.000B: unknown main item tag 0x0 [ 538.592985][ T7] hid-generic 0005:0B57:4155.000B: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 539.063219][ T7857] loop3: detected capacity change from 0 to 4096 [ 539.212874][ T7865] loop5: detected capacity change from 0 to 4096 [ 539.252689][ T7865] NILFS (loop5): invalid segment: Checksum error in segment payload [ 539.260789][ T7865] NILFS (loop5): trying rollback from an earlier position [ 539.309038][ T7865] NILFS (loop5): recovery complete [ 539.337670][ T7866] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 539.373612][ T7865] NILFS (loop5): nilfs_palloc_freev (ino=3): entry number 32 already freed [ 539.383398][ T7865] NILFS (loop5): nilfs_sufile_do_free: segment 13 is already clean [ 539.871453][ T7857] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 545.731548][ T7892] loop0: detected capacity change from 0 to 2048 [ 545.806917][ T7892] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.901147][ T7912] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 546.916539][ T7912] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 546.930242][ T7912] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 547.200520][ T6110] hid-generic 0005:0B57:4155.000C: unknown main item tag 0x0 [ 547.319568][ T6110] hid-generic 0005:0B57:4155.000C: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 552.209424][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 552.245784][ T7944] ip_tables: iptables: counters copy to user failed while replacing table [ 553.335923][ T7953] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 553.355299][ T7953] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 553.366750][ T7953] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 555.146557][ T7972] input: syz1 as /devices/virtual/input/input12 [ 557.878303][ T7981] ip_tables: iptables: counters copy to user failed while replacing table [ 562.252886][ T7995] ip_tables: iptables: counters copy to user failed while replacing table [ 562.359258][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 562.817721][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.824295][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.294352][ T7998] loop0: detected capacity change from 0 to 3904 [ 563.395441][ T7998] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 563.481601][ T7998] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 563.649861][ T7998] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 563.787641][ T7998] loop0: [ 563.985519][ T8005] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 564.171798][ T8005] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 564.223419][ T8011] device syzkaller0 entered promiscuous mode [ 564.242537][ T8009] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 565.207657][ T8021] loop4: detected capacity change from 0 to 128 [ 565.236771][ T8021] EXT4-fs: inline encryption not supported [ 565.312042][ T8021] ext2: Unknown parameter 'func' [ 566.532584][ T8022] I/O error, dev loop0, sector 3712 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 567.440758][ T8033] input: syz1 as /devices/virtual/input/input13 [ 569.492523][ T8052] ip_tables: iptables: counters copy to user failed while replacing table [ 572.462996][ T8063] loop0: detected capacity change from 0 to 3904 [ 572.589047][ T8065] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 572.608757][ T8065] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 572.628759][ T8065] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 572.650464][ T8065] loop0: [ 581.063092][ T8103] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 581.124411][ T8103] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 581.273199][ T8103] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 583.988388][ T8124] loop0: detected capacity change from 0 to 3904 [ 586.505597][ T8143] loop4: detected capacity change from 0 to 2048 [ 587.259193][ T8143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 592.667598][ T8163] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 592.703907][ T8163] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 592.738027][ T8163] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 592.866918][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 593.574797][ T8171] loop0: detected capacity change from 0 to 3904 [ 593.835350][ T8176] loop5: detected capacity change from 0 to 32768 [ 594.728119][ T8175] siw: device registration error -23 [ 594.768002][ T8176] (syz.5.928,8176,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 594.782323][ T8176] (syz.5.928,8176,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 594.974484][ T8176] JBD2: Ignoring recovery information on journal [ 595.143790][ T8176] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 595.968442][ T8186] loop3: detected capacity change from 0 to 4096 [ 596.008795][ T8186] NILFS (loop3): invalid segment: Checksum error in segment payload [ 596.017021][ T8186] NILFS (loop3): trying rollback from an earlier position [ 596.049257][ T8186] NILFS (loop3): recovery complete [ 596.087120][ T8188] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 596.121951][ T8186] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 32 already freed [ 596.132187][ T8186] NILFS (loop3): nilfs_sufile_do_free: segment 13 is already clean [ 598.282011][ T7162] ocfs2: Unmounting device (7,5) on (node local) [ 608.994601][ T8232] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 609.022955][ T8232] CIFS: Attempting to mount \\127.0.0.1\share [ 609.032994][ T8232] CIFS: VFS: No username specified [ 611.039732][ T8235] siw: device registration error -23 [ 611.893136][ T8251] loop0: detected capacity change from 0 to 32768 [ 611.974820][ T8251] XFS (loop0): Mounting V5 Filesystem [ 612.079259][ T8251] XFS (loop0): Ending clean mount [ 612.087227][ T8251] XFS (loop0): Quotacheck needed: Please wait. [ 612.152162][ T8251] XFS (loop0): Quotacheck: Done. [ 612.452590][ T27] audit: type=1800 audit(1792144916.191:16): pid=8264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.957" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 612.885278][ T4273] XFS (loop0): Unmounting Filesystem [ 613.051341][ T8266] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 613.073754][ T8266] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 613.122836][ T8266] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 616.786091][ T8285] input: syz1 as /devices/virtual/input/input14 [ 617.719389][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 619.750441][ T8301] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 620.185945][ T8301] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 620.365766][ T8301] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 622.723056][ T8316] ip_tables: iptables: counters copy to user failed while replacing table [ 624.255868][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.262461][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.787256][ T8333] siw: device registration error -23 [ 627.827721][ T8326] loop2: detected capacity change from 0 to 2048 [ 627.903567][ T8326] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 628.130899][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 628.398041][ T8344] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 628.424436][ T8344] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 628.442620][ T8344] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 631.011873][ T8341] loop2: detected capacity change from 0 to 32768 [ 631.206380][ T8341] (syz.2.979,8341,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 631.312223][ T8341] (syz.2.979,8341,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 631.339295][ T8341] (syz.2.979,8341,1):ocfs2_initialize_super:2284 ERROR: status = -12 [ 631.389319][ T8341] (syz.2.979,8341,0):ocfs2_fill_super:1176 ERROR: status = -12 [ 633.030960][ T8373] loop4: detected capacity change from 0 to 512 [ 633.253802][ T8373] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 634.326288][ T8373] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.987: bad orphan inode 13 [ 634.469549][ T8373] ext4_test_bit(bit=12, block=18) = 1 [ 634.501979][ T8373] is_bad_inode(inode)=0 [ 634.506219][ T8373] NEXT_ORPHAN(inode)=0 [ 634.510377][ T8373] max_ino=32 [ 634.522032][ T8373] i_nlink=1 [ 634.525997][ T8373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 634.753161][ T8390] Quota error (device loop4): do_check_range: Getting block 1536 out of range 0-5 [ 635.373570][ T8385] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 636.001072][ T8399] input: syz1 as /devices/virtual/input/input15 [ 637.043253][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 637.272897][ T8403] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 637.315361][ T8403] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 637.352807][ T8403] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 637.565176][ T8408] loop0: detected capacity change from 0 to 512 [ 637.644848][ T8408] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.995: casefold flag without casefold feature [ 637.662784][ T8408] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.995: couldn't read orphan inode 15 (err -117) [ 637.676494][ T8408] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 640.423312][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 642.520459][ T8430] siw: device registration error -23 [ 642.923240][ T8426] loop5: detected capacity change from 0 to 32768 [ 642.998982][ T8426] (syz.5.999,8426,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 643.020360][ T8432] loop2: detected capacity change from 0 to 2048 [ 643.030255][ T8426] (syz.5.999,8426,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 643.089449][ T8426] JBD2: Ignoring recovery information on journal [ 643.115178][ T8432] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 643.259127][ T8426] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 645.242675][ T7162] ocfs2: Unmounting device (7,5) on (node local) [ 645.272318][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 645.487378][ T22] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 645.511108][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.539956][ T22] usb 3-1: Product: syz [ 645.557608][ T22] usb 3-1: Manufacturer: syz [ 645.576321][ T22] usb 3-1: SerialNumber: syz [ 645.938381][ T8465] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 645.989752][ T8465] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 646.058923][ T8466] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 647.267865][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 647.365263][ T22] rtl8150 3-1:1.0: couldn't reset the device [ 647.371731][ T22] rtl8150: probe of 3-1:1.0 failed with error -5 [ 647.404134][ T22] usb 3-1: USB disconnect, device number 4 [ 647.520329][ T8472] device syzkaller0 entered promiscuous mode [ 648.421618][ T8478] Bluetooth: MGMT ver 1.22 [ 648.643846][ T8481] loop2: detected capacity change from 0 to 4096 [ 649.959110][ T8481] NILFS (loop2): invalid segment: Checksum error in segment payload [ 649.967432][ T8481] NILFS (loop2): trying rollback from an earlier position [ 650.016937][ T8481] NILFS (loop2): recovery complete [ 650.046620][ T8482] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 650.079816][ T8481] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 32 already freed [ 650.089612][ T8481] NILFS (loop2): nilfs_sufile_do_free: segment 13 is already clean [ 651.089775][ T8485] siw: device registration error -23 [ 653.592778][ T8497] input: syz1 as /devices/virtual/input/input17 [ 655.075844][ T8504] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 655.120638][ T8504] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 655.152652][ T8504] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 655.555411][ T8509] ip_tables: iptables: counters copy to user failed while replacing table [ 658.168273][ T8515] tipc: Enabling of bearer rejected, failed to enable media [ 660.782449][ T8532] device syzkaller0 entered promiscuous mode [ 662.956759][ T8540] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 663.035070][ T8540] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 663.112504][ T8540] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 663.378918][ T8549] loop3: detected capacity change from 0 to 32768 [ 663.547995][ T8549] XFS (loop3): Mounting V5 Filesystem [ 663.773006][ T8549] XFS (loop3): Ending clean mount [ 663.783449][ T8549] XFS (loop3): Quotacheck needed: Please wait. [ 663.883141][ T8549] XFS (loop3): Quotacheck: Done. [ 664.173159][ T27] audit: type=1800 audit(1792144967.921:17): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1035" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 664.544362][ T4274] XFS (loop3): Unmounting Filesystem [ 667.464239][ T8589] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 667.503592][ T8589] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 667.542711][ T8589] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 673.372269][ T4285] Bluetooth: hci5: command 0x0406 tx timeout [ 673.837492][ T8624] loop3: detected capacity change from 0 to 2048 [ 675.028645][ T8624] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 675.678579][ T8627] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 675.715932][ T8629] loop4: detected capacity change from 0 to 256 [ 675.723195][ T8627] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 675.749610][ T8627] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 677.109228][ T8639] loop4: detected capacity change from 0 to 1024 [ 677.128451][ T8639] EXT4-fs: Ignoring removed bh option [ 677.179779][ T8639] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 677.512186][ T27] audit: type=1804 audit(1792144981.271:18): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1062" name="/newroot/226/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 680.019174][ T8659] loop3: detected capacity change from 0 to 1024 [ 680.104976][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 680.139103][ T8659] EXT4-fs: Ignoring removed bh option [ 680.251780][ T8659] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 680.765630][ T8659] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 681.095680][ T8667] process 'syz.5.1066' launched './file2' with NULL argv: empty string added [ 681.225800][ T8674] loop2: detected capacity change from 0 to 4096 [ 681.269828][ T8674] EXT4-fs: Ignoring removed mblk_io_submit option [ 683.546069][ T8674] fscrypt: Error allocating hmac(sha512): -2 [ 683.584144][ T8678] loop4: detected capacity change from 0 to 2048 [ 683.659265][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 683.754914][ T8678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 683.961497][ T8690] ip_tables: iptables: counters copy to user failed while replacing table [ 685.704648][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.711134][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.822650][ T8714] input: syz1 as /devices/virtual/input/input21 [ 692.281917][ T5479] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 692.474448][ T5479] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 692.495329][ T5479] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.518676][ T5479] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 692.551902][ T5479] usb 1-1: config 0 interface 0 has no altsetting 0 [ 692.570811][ T5479] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 692.604091][ T5479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.693528][ T8731] ip_tables: iptables: counters copy to user failed while replacing table [ 694.367255][ T5479] usb 1-1: config 0 descriptor?? [ 694.688771][ T5479] usb 1-1: can't set config #0, error -71 [ 694.712150][ T5479] usb 1-1: USB disconnect, device number 3 [ 697.321359][ T8744] ip_tables: iptables: counters copy to user failed while replacing table [ 700.986350][ T8765] input: syz1 as /devices/virtual/input/input22 [ 705.125106][ T5479] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 705.285400][ T8791] CIFS: Attempting to mount \\127.0.0.1\share [ 705.293583][ T8791] CIFS: VFS: No username specified [ 705.409521][ T5479] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 705.456324][ T5479] usb 1-1: config 0 has no interface number 0 [ 705.769090][ T5479] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 707.678558][ T5479] usb 1-1: string descriptor 0 read error: -71 [ 707.698837][ T5479] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 707.749698][ T5479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.822640][ T5479] usb 1-1: config 0 descriptor?? [ 707.863392][ T5479] usb 1-1: can't set config #0, error -71 [ 708.040401][ T5479] usb 1-1: USB disconnect, device number 4 [ 709.943813][ T8812] input: syz1 as /devices/virtual/input/input23 [ 718.473686][ T8836] loop2: detected capacity change from 0 to 2048 [ 718.574518][ T8836] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 719.455924][ T8850] loop5: detected capacity change from 0 to 512 [ 719.607693][ T8850] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.1116: casefold flag without casefold feature [ 719.625730][ T8850] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1116: couldn't read orphan inode 15 (err -117) [ 719.640567][ T8850] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 721.380023][ T7162] EXT4-fs (loop5): unmounting filesystem. [ 724.312680][ T8879] Device name cannot be null; rc = [-22] [ 727.511616][ T8897] siw: device registration error -23 [ 728.408182][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1129'. [ 731.521582][ T8919] loop5: detected capacity change from 0 to 4096 [ 733.029093][ T8919] NILFS (loop5): invalid segment: Checksum error in segment payload [ 733.038182][ T8919] NILFS (loop5): trying rollback from an earlier position [ 733.129319][ T8919] NILFS (loop5): recovery complete [ 733.164156][ T8921] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 733.192003][ T8919] NILFS (loop5): nilfs_palloc_freev (ino=3): entry number 32 already freed [ 733.201463][ T8919] NILFS (loop5): nilfs_sufile_do_free: segment 13 is already clean [ 736.071898][ T5692] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 736.526416][ T8951] loop2: detected capacity change from 0 to 2048 [ 736.661290][ T8951] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 737.142377][ T5692] usb 5-1: config 0 has no interfaces? [ 737.147913][ T5692] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 737.210431][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.412623][ T5692] usb 5-1: config 0 descriptor?? [ 737.422779][ T5692] usb 5-1: can't set config #0, error -71 [ 737.462019][ T5692] usb 5-1: USB disconnect, device number 2 [ 739.159059][ T8963] loop2: detected capacity change from 0 to 4096 [ 739.192997][ T8963] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 739.707473][ T8972] ip_tables: iptables: counters copy to user failed while replacing table [ 744.508663][ T8988] input: syz1 as /devices/virtual/input/input24 [ 747.135063][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.141495][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.915035][ T9015] Device name cannot be null; rc = [-22] [ 754.627395][ T9030] ip_tables: iptables: counters copy to user failed while replacing table [ 756.418882][ T9036] ip_tables: iptables: counters copy to user failed while replacing table [ 757.412356][ T9041] loop2: detected capacity change from 0 to 2048 [ 757.446255][ T9041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 764.456123][ T9066] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 764.473387][ T9066] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 764.482552][ T9066] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 764.492185][ T9066] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 764.499842][ T9066] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 764.507850][ T9066] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 764.629709][ T9062] rxe_eth0 speed is unknown, defaulting to 1000 [ 764.645935][ T9073] Device name cannot be null; rc = [-22] [ 764.781989][ T5692] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 764.991160][ T9062] bond0 speed is unknown, defaulting to 1000 [ 765.016111][ T5692] usb 6-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 765.063720][ T5692] usb 6-1: config 0 interface 0 has no altsetting 0 [ 765.088072][ T5692] usb 6-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 766.530660][ T5692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.551032][ T5692] usb 6-1: config 0 descriptor?? [ 766.571946][ T9066] Bluetooth: hci3: command 0x0409 tx timeout [ 766.770721][ T4346] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.981305][ T4346] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.045151][ T5692] hid-led 0003:1294:1320.000D: hidraw0: USB HID v10.01 Device [HID 1294:1320] on usb-dummy_hcd.5-1/input0 [ 767.128361][ T5692] hid-led 0003:1294:1320.000D: Riso Kagaku Webmail Notifier initialized [ 767.273721][ T6110] usb 6-1: USB disconnect, device number 2 [ 767.297673][ T5479] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 767.312787][ T4346] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.325056][ T5479] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 767.336979][ T9093] fido_id[9093]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 767.353213][ T5479] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 767.489202][ T4346] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.681868][ T9062] chnl_net:caif_netlink_parms(): no params data found [ 767.750372][ T9096] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 767.769980][ T9096] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 767.800003][ T9096] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 767.960581][ T9101] loop3: detected capacity change from 0 to 512 [ 768.053091][ T9101] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 768.159066][ T9101] ext4 filesystem being mounted at /238/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 768.164398][ T9062] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.656026][ T9066] Bluetooth: hci3: command 0x041b tx timeout [ 769.701972][ T9062] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.710420][ T9062] device bridge_slave_0 entered promiscuous mode [ 769.793543][ T4346] tipc: Disabling bearer [ 769.902734][ T4346] tipc: Left network mode [ 769.902958][ T9062] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.948073][ T9062] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.983136][ T9062] device bridge_slave_1 entered promiscuous mode [ 770.119945][ T9062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.168826][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 771.693662][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 771.995886][ T9062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.772412][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 774.875838][ T9062] team0: Port device team_slave_0 added [ 775.224027][ T9066] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 775.235253][ T9066] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 775.245026][ T9066] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 775.253680][ T9066] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 775.272501][ T9066] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 775.280139][ T9066] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 776.894801][ T9062] team0: Port device team_slave_1 added [ 777.343289][ T9138] rxe_eth0 speed is unknown, defaulting to 1000 [ 777.372067][ T9066] Bluetooth: hci0: command 0x0409 tx timeout [ 777.562769][ T9062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.602851][ T9062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.719359][ T9062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.881214][ T9161] ip_tables: iptables: counters copy to user failed while replacing table [ 777.908080][ T9062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.929019][ T9062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.229058][ T9062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.516705][ T9138] bond0 speed is unknown, defaulting to 1000 [ 779.951295][ T9066] Bluetooth: hci0: command 0x041b tx timeout [ 781.364542][ T9178] CIFS: Attempting to mount \\127.0.0.1\share [ 781.370961][ T9178] CIFS: VFS: No username specified [ 781.937030][ T9183] loop4: detected capacity change from 0 to 24 [ 781.950877][ T9183] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 781.992128][ T9183] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 782.016625][ T9066] Bluetooth: hci0: command 0x040f tx timeout [ 782.469550][ T9062] device hsr_slave_0 entered promiscuous mode [ 782.525503][ T9062] device hsr_slave_1 entered promiscuous mode [ 782.556068][ T9062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 782.622402][ T9062] Cannot create hsr debugfs directory [ 782.708341][ T9195] loop4: detected capacity change from 0 to 512 [ 784.091888][ T9066] Bluetooth: hci0: command 0x0419 tx timeout [ 784.122873][ T9195] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 784.168336][ T9203] Bluetooth: MGMT ver 1.22 [ 784.314907][ T9195] EXT4-fs (loop4): 1 truncate cleaned up [ 784.320650][ T9195] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 784.829219][ T27] audit: type=1800 audit(1792145088.511:19): pid=9212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1195" name="file3" dev="loop4" ino=16 res=0 errno=0 [ 786.604968][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 787.167665][ T9138] chnl_net:caif_netlink_parms(): no params data found [ 787.199590][ T9221] CIFS: Attempting to mount \\127.0.0.1\share [ 787.206705][ T9221] CIFS: VFS: No username specified [ 787.973953][ T4346] device hsr_slave_0 left promiscuous mode [ 787.994318][ T4346] device hsr_slave_1 left promiscuous mode [ 789.522741][ T4346] device veth1_macvtap left promiscuous mode [ 789.544953][ T4346] device veth0_macvtap left promiscuous mode [ 789.568537][ T4346] device veth1_vlan left promiscuous mode [ 789.608163][ T9233] Device name cannot be null; rc = [-22] [ 789.650916][ T4346] device veth0_vlan left promiscuous mode [ 790.566179][ T4346] bond1 (unregistering): Released all slaves [ 793.669524][ T9259] ------------[ cut here ]------------ [ 793.675624][ T9259] kobject: '(null)' (ffff8880782b8060): is not initialized, yet kobject_get() is being called. [ 793.689158][ T9259] WARNING: CPU: 1 PID: 9259 at lib/kobject.c:634 kobject_add_internal+0x115/0xca0 [ 793.698649][ T9259] Modules linked in: [ 793.702768][ T9259] CPU: 1 PID: 9259 Comm: syz.5.1208 Not tainted syzkaller #0 [ 793.710223][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 793.720422][ T9259] RIP: 0010:kobject_add_internal+0x115/0xca0 [ 793.726905][ T9259] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 ae bf b3 f7 49 8b 34 24 48 c7 c7 80 ed b1 8b 4c 89 e2 e8 eb d6 2d f7 <0f> 0b e9 e5 00 00 00 e8 9f 63 62 f7 b8 fe ff ff ff e9 eb 06 00 00 [ 793.746819][ T9259] RSP: 0018:ffffc90003697808 EFLAGS: 00010246 [ 793.752974][ T9259] RAX: 93ced9ff3deae200 RBX: ffff88802929e878 RCX: 0000000000080000 [ 793.761027][ T9259] RDX: ffffc9001c9f9000 RSI: 000000000000a70a RDI: 000000000000a70b [ 793.769111][ T9259] RBP: 0000000000000000 R08: ffffc90003697487 R09: 1ffff920006d2e90 [ 793.777190][ T9259] R10: dffffc0000000000 R11: fffff520006d2e91 R12: ffff8880782b8060 [ 793.785532][ T9259] R13: dffffc0000000000 R14: ffff8880782b809c R15: dffffc0000000000 [ 793.793620][ T9259] FS: 00007f51c838b6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 793.802740][ T9259] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 793.809390][ T9259] CR2: 0000000000000000 CR3: 000000002cd47000 CR4: 00000000003506e0 [ 793.817511][ T9259] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 793.826027][ T9259] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 793.834648][ T9259] Call Trace: [ 793.838026][ T9259] [ 793.841049][ T9259] ? kfree+0x30/0x1a0 [ 793.845158][ T9259] kobject_add+0x160/0x230 [ 793.849646][ T9259] ? bind_rdev_to_array+0x5fd/0x1260 [ 793.855205][ T9259] ? kobject_init+0x1c0/0x1c0 [ 793.859972][ T9259] ? mddev_create_serial_pool+0x20f/0x470 [ 793.865910][ T9259] bind_rdev_to_array+0xb50/0x1260 [ 793.871120][ T9259] ? bind_rdev_to_array+0x5fd/0x1260 [ 793.876517][ T9259] ? md_import_device+0x800/0x800 [ 793.881623][ T9259] ? kobject_init+0x7b/0x1c0 [ 793.886445][ T9259] ? md_import_device+0x633/0x800 [ 793.891862][ T9259] md_add_new_disk+0xe43/0x17b0 [ 793.897035][ T9259] md_ioctl+0x24f5/0x2880 [ 793.901490][ T9259] ? tomoyo_path_number_perm+0x205/0x650 [ 793.907310][ T9259] ? md_release+0xa0/0xa0 [ 793.911736][ T9259] ? __lock_acquire+0x7ea0/0x7ea0 [ 793.916917][ T9259] ? slab_free_freelist_hook+0x133/0x1b0 [ 793.922850][ T9259] ? tomoyo_path_number_perm+0x4fb/0x650 [ 793.928601][ T9259] ? blkdev_common_ioctl+0x6c1/0x2090 [ 793.934398][ T9259] ? tomoyo_path_number_perm+0x205/0x650 [ 793.940107][ T9259] ? tomoyo_path_number_perm+0x5a4/0x650 [ 793.945848][ T9259] ? blkdev_bszset+0x200/0x200 [ 793.950680][ T9259] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 793.956326][ T9259] ? md_release+0xa0/0xa0 [ 793.960740][ T9259] blkdev_ioctl+0x37b/0x740 [ 793.965364][ T9259] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 793.970910][ T9259] ? bpf_lsm_file_ioctl+0x5/0x10 [ 793.976093][ T9259] ? security_file_ioctl+0x7c/0xa0 [ 793.981378][ T9259] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 793.986994][ T9259] __se_sys_ioctl+0xfa/0x170 [ 793.991651][ T9259] do_syscall_64+0x4c/0xa0 [ 793.996196][ T9259] ? clear_bhb_loop+0x60/0xb0 [ 794.000944][ T9259] ? clear_bhb_loop+0x60/0xb0 [ 794.005842][ T9259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 794.011856][ T9259] RIP: 0033:0x7f51c759e559 [ 794.016678][ T9259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.036763][ T9259] RSP: 002b:00007f51c838b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.045294][ T9259] RAX: ffffffffffffffda RBX: 00007f51c7826090 RCX: 00007f51c759e559 [ 794.053391][ T9259] RDX: 0000200000000540 RSI: 0000000040140921 RDI: 0000000000000005 [ 794.061424][ T9259] RBP: 00007f51c76358b0 R08: 0000000000000000 R09: 0000000000000000 [ 794.069495][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.077765][ T9259] R13: 00007f51c7826128 R14: 00007f51c7826090 R15: 00007ffed58707e8 [ 794.085862][ T9259] [ 794.092282][ T9259] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 794.099623][ T9259] CPU: 1 PID: 9259 Comm: syz.5.1208 Not tainted syzkaller #0 [ 794.107102][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 794.118081][ T9259] Call Trace: [ 794.121444][ T9259] [ 794.124445][ T9259] dump_stack_lvl+0x188/0x24e [ 794.129299][ T9259] ? memcpy+0x3c/0x60 [ 794.133426][ T9259] ? show_regs_print_info+0x12/0x12 [ 794.138736][ T9259] ? load_image+0x410/0x410 [ 794.143429][ T9259] panic+0x2d3/0x710 [ 794.147459][ T9259] ? bpf_jit_dump+0xd0/0xd0 [ 794.152051][ T9259] __warn+0x2f8/0x4f0 [ 794.156113][ T9259] ? kobject_add_internal+0x115/0xca0 [ 794.161644][ T9259] ? kobject_add_internal+0x115/0xca0 [ 794.167076][ T9259] report_bug+0x2ba/0x4f0 [ 794.171473][ T9259] ? kobject_add_internal+0x115/0xca0 [ 794.177002][ T9259] handle_bug+0x3a/0x70 [ 794.181263][ T9259] exc_invalid_op+0x16/0x40 [ 794.185799][ T9259] asm_exc_invalid_op+0x16/0x20 [ 794.190683][ T9259] RIP: 0010:kobject_add_internal+0x115/0xca0 [ 794.196891][ T9259] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 ae bf b3 f7 49 8b 34 24 48 c7 c7 80 ed b1 8b 4c 89 e2 e8 eb d6 2d f7 <0f> 0b e9 e5 00 00 00 e8 9f 63 62 f7 b8 fe ff ff ff e9 eb 06 00 00 [ 794.216552][ T9259] RSP: 0018:ffffc90003697808 EFLAGS: 00010246 [ 794.222794][ T9259] RAX: 93ced9ff3deae200 RBX: ffff88802929e878 RCX: 0000000000080000 [ 794.230823][ T9259] RDX: ffffc9001c9f9000 RSI: 000000000000a70a RDI: 000000000000a70b [ 794.238831][ T9259] RBP: 0000000000000000 R08: ffffc90003697487 R09: 1ffff920006d2e90 [ 794.247264][ T9259] R10: dffffc0000000000 R11: fffff520006d2e91 R12: ffff8880782b8060 [ 794.255442][ T9259] R13: dffffc0000000000 R14: ffff8880782b809c R15: dffffc0000000000 [ 794.263478][ T9259] ? kobject_add_internal+0x115/0xca0 [ 794.268910][ T9259] ? kfree+0x30/0x1a0 [ 794.272923][ T9259] kobject_add+0x160/0x230 [ 794.277381][ T9259] ? bind_rdev_to_array+0x5fd/0x1260 [ 794.282707][ T9259] ? kobject_init+0x1c0/0x1c0 [ 794.287436][ T9259] ? mddev_create_serial_pool+0x20f/0x470 [ 794.293199][ T9259] bind_rdev_to_array+0xb50/0x1260 [ 794.298365][ T9259] ? bind_rdev_to_array+0x5fd/0x1260 [ 794.303698][ T9259] ? md_import_device+0x800/0x800 [ 794.308757][ T9259] ? kobject_init+0x7b/0x1c0 [ 794.313502][ T9259] ? md_import_device+0x633/0x800 [ 794.318702][ T9259] md_add_new_disk+0xe43/0x17b0 [ 794.323733][ T9259] md_ioctl+0x24f5/0x2880 [ 794.328128][ T9259] ? tomoyo_path_number_perm+0x205/0x650 [ 794.333888][ T9259] ? md_release+0xa0/0xa0 [ 794.338264][ T9259] ? __lock_acquire+0x7ea0/0x7ea0 [ 794.343429][ T9259] ? slab_free_freelist_hook+0x133/0x1b0 [ 794.349118][ T9259] ? tomoyo_path_number_perm+0x4fb/0x650 [ 794.354886][ T9259] ? blkdev_common_ioctl+0x6c1/0x2090 [ 794.360303][ T9259] ? tomoyo_path_number_perm+0x205/0x650 [ 794.365995][ T9259] ? tomoyo_path_number_perm+0x5a4/0x650 [ 794.371662][ T9259] ? blkdev_bszset+0x200/0x200 [ 794.376550][ T9259] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 794.382070][ T9259] ? md_release+0xa0/0xa0 [ 794.386483][ T9259] blkdev_ioctl+0x37b/0x740 [ 794.391120][ T9259] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 794.396637][ T9259] ? bpf_lsm_file_ioctl+0x5/0x10 [ 794.401626][ T9259] ? security_file_ioctl+0x7c/0xa0 [ 794.406776][ T9259] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 794.412282][ T9259] __se_sys_ioctl+0xfa/0x170 [ 794.417092][ T9259] do_syscall_64+0x4c/0xa0 [ 794.422081][ T9259] ? clear_bhb_loop+0x60/0xb0 [ 794.426801][ T9259] ? clear_bhb_loop+0x60/0xb0 [ 794.432358][ T9259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 794.438308][ T9259] RIP: 0033:0x7f51c759e559 [ 794.442768][ T9259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.463118][ T9259] RSP: 002b:00007f51c838b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.471618][ T9259] RAX: ffffffffffffffda RBX: 00007f51c7826090 RCX: 00007f51c759e559 [ 794.479738][ T9259] RDX: 0000200000000540 RSI: 0000000040140921 RDI: 0000000000000005 [ 794.487749][ T9259] RBP: 00007f51c76358b0 R08: 0000000000000000 R09: 0000000000000000 [ 794.495754][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.504018][ T9259] R13: 00007f51c7826128 R14: 00007f51c7826090 R15: 00007ffed58707e8 [ 794.512951][ T9259] [ 794.516184][ T9259] Kernel Offset: disabled [ 794.520725][ T9259] Rebooting in 86400 seconds..