last executing test programs: 21m28.959158934s ago: executing program 32 (id=232): setns(0xc9, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)={0x3c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040845, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221800"], 0x0}, 0x0) tkill(0x0, 0x12) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 21m19.374312805s ago: executing program 33 (id=270): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file1/file0\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x4, 0x346, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x120) mount(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='ramfs\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000c80), &(0x7f0000000cc0)='./file0\x00', 0x30160f8, &(0x7f0000000d00)=ANY=[], 0x81, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000dc0)='./file0\x00', 0x0, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x20, r1, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) write$P9_RSTATFS(r2, &(0x7f00000000c0)={0x43, 0x9, 0x1, {0x800, 0x1, 0x1, 0x6, 0x3, 0x9, 0x116, 0x4, 0x10}}, 0x43) fsync(r2) 20m43.961632447s ago: executing program 34 (id=372): r0 = socket(0xa, 0x801, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x810800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 20m5.050250644s ago: executing program 1 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x104) io_setup(0x81, 0x0) io_setup(0x80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x138) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000006c0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r0, &(0x7f0000000700)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001940)) syz_open_procfs(0xffffffffffffffff, 0x0) 20m3.606134328s ago: executing program 35 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x104) io_setup(0x81, 0x0) io_setup(0x80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x138) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000006c0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r0, &(0x7f0000000700)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001940)) syz_open_procfs(0xffffffffffffffff, 0x0) 18m21.386900459s ago: executing program 8 (id=732): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r1, r1, 0x0, 0x40000000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 18m20.868296791s ago: executing program 8 (id=734): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x300000b, 0x110, 0xffffffffffffffff, 0xec776000) socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) keyctl$read(0x1d, 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) stat(0x0, 0x0) 18m20.808084873s ago: executing program 8 (id=735): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000280)='L', 0x1) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000200), 0xa, 0x62080) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$uac2(0x3, 0xa8, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) 18m17.58516226s ago: executing program 8 (id=743): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x1000, 0x800000000000000) splice(r2, 0x0, r6, 0x0, 0x80, 0x8) write$tun(r3, &(0x7f00000033c0)=ANY=[], 0x107c) openat(0xffffffffffffff9c, 0x0, 0x88882, 0x0) 18m16.028295537s ago: executing program 36 (id=705): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) r1 = io_uring_setup(0x3450, &(0x7f0000000000)={0x0, 0x1539, 0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000cc0)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20) 18m15.982658118s ago: executing program 8 (id=749): mmap$IORING_OFF_PBUF_RING(0x0, 0x0, 0x300000a, 0x11, 0xffffffffffffffff, 0x82397a24) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000140)=""/147, &(0x7f0000000280)=0x93) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x0, 0xfffffffffffffffe}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000007000/0x2000)=nil) 18m14.866521745s ago: executing program 8 (id=750): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000840)={[{@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@noblock_validity}, {@nogrpid}, {@mblk_io_submit}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x65cf}}], [], 0x3d}, 0x65, 0x51c, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 17m59.72784407s ago: executing program 37 (id=750): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000840)={[{@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@noblock_validity}, {@nogrpid}, {@mblk_io_submit}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x65cf}}], [], 0x3d}, 0x65, 0x51c, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 16m44.069869184s ago: executing program 5 (id=922): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x4}}, 0x50) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 16m39.584041652s ago: executing program 5 (id=928): remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) remap_file_pages(&(0x7f0000229000/0x4000)=nil, 0x4000, 0x0, 0xfffffffffffff81e, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) listen(r1, 0x3) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000940)="480000001400190d09004beafd0d36020a845c000b4e230f00000000a2bc560119d7004f19dfb7f393d73590310300000101ff45c00e030802000000ffff015d3382ff48c91fff25", 0x48}], 0x1) 16m38.815601111s ago: executing program 5 (id=931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 16m37.520328792s ago: executing program 5 (id=933): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) pivot_root(&(0x7f00000005c0)='.\x00', &(0x7f0000000600)='.\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x0, 0xc9, 0x0, 0x3}}}, 0x9) 16m35.427324432s ago: executing program 5 (id=937): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, 0x0, 0x0) listen(r2, 0x8) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone3(&(0x7f0000003240)={0x8004000, 0x0, 0x0, 0xfffffffffffffffd, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16m33.911229489s ago: executing program 5 (id=941): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000001380)=[@reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, &(0x7f00000012c0)={@fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1e}, @fda={0x66646185, 0x9, 0x1, 0x31}}}}]}) 16m18.50016427s ago: executing program 38 (id=941): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000001380)=[@reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, &(0x7f00000012c0)={@fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1e}, @fda={0x66646185, 0x9, 0x1, 0x31}}}}]}) 16m12.67307631s ago: executing program 4 (id=992): r0 = inotify_init() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 16m3.870446432s ago: executing program 4 (id=1005): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) rseq(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000003, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) syz_usb_connect(0x3, 0x4e, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x4, 0x208002) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'erspan0\x00', {0x1}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000240)={0x0, 'bridge_slave_1\x00', {0x4}, 0x3ff8}) 16m2.663649261s ago: executing program 4 (id=1011): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x1}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 16m1.620735426s ago: executing program 4 (id=1014): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001d00)='./file1\x00', 0x42, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000021) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = creat(&(0x7f0000001780)='./bus\x00', 0x182) mount(&(0x7f00000017c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000001800)='./bus\x00', 0x0, 0x1084, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./bus\x00', 0x8840, 0xa2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001880)='./bus\x00', 0x1c1002, 0x12) write(r3, &(0x7f00000018c0)="d422", 0x2) sendfile(r3, r2, 0x0, 0x3ffff) fallocate(r1, 0x0, 0x0, 0x2000402) socket$can_raw(0x1d, 0x3, 0x1) write$P9_RREADLINK(r0, &(0x7f0000001f00)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 16m0.319815177s ago: executing program 4 (id=1018): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 15m58.891028422s ago: executing program 4 (id=1021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) recvmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b33000000000300f1000500000008000300", @ANYRES32=r3], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 15m58.495269201s ago: executing program 39 (id=1021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) recvmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b33000000000300f1000500000008000300", @ANYRES32=r3], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 14m30.488989457s ago: executing program 9 (id=1225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000) 14m29.353033034s ago: executing program 9 (id=1226): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68010}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000700)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000840)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x4000090) 14m27.261868824s ago: executing program 9 (id=1232): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) 14m24.876847211s ago: executing program 9 (id=1235): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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") syz_read_part_table(0x5e1, &(0x7f0000000600)="$eJzs27uLXFUYAPDvPubFrox/gODINqLgKnbiwlrout0i2gnaWizIWojVzKIg+PgD7G1cBdk+gQTCEpI06UJg2RQhpE+RNJsT7pm5d5Ii1YY84Pcr7v3uPd8535x7zpQneLWl8cPUxqM2qMsPqog418TjiNj/5pOI1+dtvUVOEWV8dfDpZ9uTnWLQvSsiYpajiGpZpd8OHJPcnMM/D7Z+zeEsipjGIozef4Oom4Q07/fXY792pStU5RxesPpCirpb3vJO7BZVs/iDiP28VaphbllvwpRSXuZZ3mpV1+0M/t84up6y0fLlZuTNPP2tSO8vXvWiySljutYmVRFvfLy+t3hKVZuXL8N2em12Sqm3Ou/bbPyuYfe0Xy+ePrx8axr7w270SOXyJx2PIr4//uK9iN581uXynwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMvj7R/euVi2D5v5WnTx5/9EuUydxZtdPBk+o/orG0fjn3/ZK+Onje9urMbtrbtxLyKqqnoy79t5wcPf863O17eK6sz1d0/L/r9/Xxp1E50P3XyEK2s3H6S2wvHi/uNH0X2i9gYAAAAAAAAAAAAAAAAAAABndRjbk50yvjx/UsTXsTzun2IYUXQH3IcRKaV0P2Xt4f9rddt+9SSKplOkoiiiOzW/GTF+LSIN/ng3in43dkp1LtF7TpPkqR4FAAD//7ygZWg=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$inet6(0xa, 0x3, 0xff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x5}) syz_io_uring_complete(0x0, 0x0) getdents64(r0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000480)='./file2\x00') 14m24.666499346s ago: executing program 9 (id=1236): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102392, 0x18ff8) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000019400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000019480)=0x800001c) 14m23.481669084s ago: executing program 9 (id=1237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 14m7.673333842s ago: executing program 40 (id=1237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 13m33.84657116s ago: executing program 1 (id=1272): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000400), 0x8, 0x9a, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507dfff03814006090587", @ANYRESHEX], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40e0000000000007911b8000000000085000000310000009500740000000000"], &(0x7f0000000740)='GPL\x00', 0x2, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x61, '\x00', r0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000900)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = getpid() sched_getaffinity(r3, 0x8, &(0x7f0000000a40)) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d2b2dbd7000fddbdf25010000000400018010000280"], 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840), &(0x7f0000000880), 0x1006, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000008c0)={r4, &(0x7f0000000900), &(0x7f0000000940)=""/31}, 0x20) 13m27.489786362s ago: executing program 1 (id=1362): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x5}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x20000400, 0x1, 0xffffffffffffffff, 0x1fffffffffffffff, 0xb3, 0x91], 0xeeee8000, 0x2018d3}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x9, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x3, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x4, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m26.853716338s ago: executing program 1 (id=1364): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000019}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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") r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) 13m25.095815629s ago: executing program 1 (id=1369): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x4076cbba9945d516, &(0x7f0000000500)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x74) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="2f0000008db22f30"], 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vlan0\x00'}) 13m20.571953787s ago: executing program 1 (id=1381): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) dup3(r2, r0, 0x80000) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 13m18.282867732s ago: executing program 41 (id=1381): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) dup3(r2, r0, 0x80000) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 17.420537364s ago: executing program 0 (id=3372): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x101, 0x2e4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x20000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000480), 0x56) sendmsg$kcm(r0, 0x0, 0x0) 16.162458064s ago: executing program 0 (id=3376): gettid() fcntl$lock(0xffffffffffffffff, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() socket(0x840000000002, 0x3, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x1, {{@in6=@private0, @in6=@private1}, {@in=@dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2}}]}, 0x154}}, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={{}, 0x7fffffffffffffff, 0x4, 0x7ffffffdfffffffc}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40) 9.375989736s ago: executing program 2 (id=3395): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000001280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000012c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001300)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001340)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000013c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001440), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001480), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240880c0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getrandom(&(0x7f0000001040)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 9.374778106s ago: executing program 6 (id=3396): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x100000000e2) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/diskstats\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000980)=""/221, 0xdd}], 0x1, 0x804, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000840)={0x3, 0x0, &(0x7f0000000880)={&(0x7f0000000a80)={0x2, 0x4, 0x0, 0x6, 0x4, 0x0, 0x270bd2a, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xd8, 0x0, 0xe0000000}]}, 0x20}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0xfffffffffffffe8c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000b00)={0x0, 0xb006}, 0x4) 7.681267837s ago: executing program 0 (id=3397): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 6.886662996s ago: executing program 6 (id=3398): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x101, 0x2e4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x20000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000480), 0x56) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="27030200d1eb14120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 6.840013367s ago: executing program 2 (id=3399): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usbip_server_init(0x4) socket$tipc(0x1e, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_emit_ethernet(0xfeb8, &(0x7f00000000c0)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 6.655626741s ago: executing program 0 (id=3400): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x108) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502002f00040600666c616773000702000000000200030000", 0x35) 5.86906054s ago: executing program 0 (id=3404): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x102, 0x60, 0x19}, 0x18) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x108) write(r3, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502002f00040600666c616773000702000000000200030000", 0x35) write(0xffffffffffffffff, &(0x7f0000000400)='PASV\r\n', 0x6) r4 = accept4(r1, 0x0, 0x0, 0x800) write(r4, &(0x7f0000000500)="32323720456e746572696e283132372c30cdc34fdcc2ad4d786e01990f392c00"/46, 0x2e) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 5.43200335s ago: executing program 2 (id=3406): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x1c8983, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./dev\x00', &(0x7f00000007c0)='devtmpfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000a00)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r2, 0xc138fd09, &(0x7f0000000a40)="0400000000000000000000009001000038010000010000000000000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x20, 0x2, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004885}, 0x20000800) 4.110026662s ago: executing program 0 (id=3408): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x43}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES32=r3], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x1214040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x11, 0x0, 0x9}, 0x50) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x24, &(0x7f0000000140)={[{@data_err_abort}, {@noblock_validity}, {@data_err_ignore}, {@errors_remount}, {@lazytime, 0x0}, {@sb={'sb', 0x3d, 0x80000000}}, {@noload}, {@journal_checksum}, {@stripe={'stripe', 0x3d, 0x1b}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@data_ordered}, {@journal_dev={'journal_dev', 0x3d, 0x769}}, {@norecovery}, {@grpid}, {@dax_never}, {@dax_inode}], [{@fowner_lt}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '\xc6\x92\f\f\xc2\x8d\xafa\bj\xecR]O\xe7\x80\xad\fs*n|\xcf\x97|\'\x06r\x81\xdd\x80*\xd9K\xad\x9b\xe6\x95\xa6\a\xb8Di\xc9\xdc\xd6\xcf\x9f\'L\xc8\x84E$\xce\x84\bp\a\x00N\xacN7\v\x03p\x96\xb2\xcd\x18\x87.\xd2\x81$\x85\xac\xd3\x8fj\xc8\x16\xcf\x16\xaf\xb2\xa5\x8c]\xd9N\x92\x06\xe9\xbd\xd1\x04\xee\xe5U\x91Y\xfa&$z\xb4\xb2J\xcbP\x88\xa5,\xfb\xafS\xef,\xa5\xd7\x12\xbc\x00'/151}}, {@context={'context', 0x3d, 'root'}}, {@measure}], 0x2c}, 0xa, 0x526, &(0x7f00000007c0)="$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") 4.020135504s ago: executing program 3 (id=3409): syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f00000002c0)={0x3, [0x0, 0x0, 0x0]}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) 3.984075365s ago: executing program 6 (id=3410): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 3.926401006s ago: executing program 7 (id=3411): socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$xdp(0x2c, 0x3, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3908, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.016010878s ago: executing program 3 (id=3412): move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0xd) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)={0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) open(&(0x7f0000000000)='./file0\x00', 0x1e5240, 0x141) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000001c0)={r2, 0x3, r3, 0x3, 0x80000}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, 0x0) 3.014273528s ago: executing program 6 (id=3413): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x400000000008d}, 0x0) ptrace$poke(0x5, 0x0, 0x0, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000540), 0x10106, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={0x0, 0xeafbff3, &(0x7f00000007c0)=[{&(0x7f0000000800)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000d6500010000000000000000000fff47b94ce5b470fe0b2bee51c9556c3677c77b822bf39a33b1d85c87694329860e40d091346c3d109f409e8ac81bc55bb9f8e77b927424734cf6121779213910f55a2f9bc254cabfa4b1e8098c64a6d718e0232d4d2e27926d29e4d29e757047980e522d38859f9c0e7fa2e2fc0b7b0047690a4c10af6b7de1a8a645c5f33a521609cde0c44e605d2dae61475eb3dd9672ff4e47a33d1231dc41f9b0b7b"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 2.979114979s ago: executing program 2 (id=3414): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x108) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502002f00040600666c616773000702000000000200030000", 0x35) 2.874178981s ago: executing program 7 (id=3415): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 2.568120879s ago: executing program 2 (id=3416): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x102, 0x60, 0x19}, 0x18) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x108) write(r4, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502002f00040600666c616773000702000000000200030000", 0x35) r5 = accept4(r1, 0x0, 0x0, 0x800) write(r5, &(0x7f0000000500)="32323720456e746572696e283132372c30cdc34fdcc2ad4d786e01990f392c00"/46, 0x2e) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 2.393415843s ago: executing program 7 (id=3417): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x102, 0x60, 0x19}, 0x18) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502002f00040600666c616773000702000000000200030000", 0x35) write(r1, &(0x7f0000000400)='PASV\r\n', 0x6) r2 = accept4(r0, 0x0, 0x0, 0x800) write(r2, &(0x7f0000000500)="32323720456e746572696e283132372c30cdc34fdcc2ad4d786e01990f392c00"/46, 0x2e) 1.733480099s ago: executing program 3 (id=3418): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x102, 0x60, 0x19}, 0x18) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x108) write(r4, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502002f00040600666c616773000702000000000200030000", 0x35) write(r3, &(0x7f0000000400)='PASV\r\n', 0x6) r5 = accept4(r1, 0x0, 0x0, 0x800) write(r5, &(0x7f0000000500)="32323720456e746572696e283132372c30cdc34fdcc2ad4d786e01990f392c00"/46, 0x2e) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 1.600131522s ago: executing program 6 (id=3419): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) mount(0x0, 0x0, &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) write(r1, &(0x7f0000000400)='PASV\r\n', 0x6) 1.445644426s ago: executing program 7 (id=3420): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x101, 0x2e4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x20000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000480), 0x56) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="27030200d1eb14120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 865.503869ms ago: executing program 7 (id=3421): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 719.176103ms ago: executing program 2 (id=3422): socket$tipc(0x1e, 0x2, 0x0) syz_io_uring_setup(0xf08, &(0x7f0000000240)={0x0, 0xfffffffe, 0x800, 0x3, 0x800000c3}, 0x0, &(0x7f0000000300), &(0x7f0000000340)) syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x200000b1, 0x8a681) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0x4c08, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000082, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x288, 0xf0, 0xf0, 0xf0, 0xf0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x7fffffe, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x29}, 0xffffff00, 0xffffff00, 'pimreg\x00', 'vcan0\x00', {0xff}, {0xff}, 0x84, 0x1, 0x94}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x3, 0x1, 0x1, 0x0, 0x3], 0x4, 0x7}, {0x2, [0x3, 0x1, 0x6, 0x0, 0x4, 0x5], 0x0, 0x4}}}}, {{@ip={@rand_addr=0x64010100, @local, 0xff000000, 0x0, 'bond0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x1, 0x4}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x188}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) unshare(0x6a060000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001840)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wlc\x00', 0x1, 0xa88, 0x8}, 0x2c) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80000) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000080)=[0x0], 0x1, 0x80}) 681.129604ms ago: executing program 3 (id=3423): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 647.450705ms ago: executing program 7 (id=3424): epoll_create1(0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000440)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002140)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f000001b140)=0x7) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) connect$inet6(r0, &(0x7f000001b300)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) sendmmsg$inet(r0, &(0x7f000001b340), 0x4000000000000e7, 0x2400c8c4) 615.047286ms ago: executing program 6 (id=3425): socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$xdp(0x2c, 0x3, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3908, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 420.74364ms ago: executing program 3 (id=3426): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x108) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502002f00040600666c616773000702000000000200030000", 0x35) 0s ago: executing program 3 (id=3427): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) kernel console output (not intermixed with test programs): line encryption not supported [ 633.350106][T10821] udevd[10821]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 633.426121][T10820] EXT4-fs (loop1): Test dummy encryption mode enabled [ 633.451678][T10820] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 633.537988][T10820] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.1364: bad orphan inode 131083 [ 633.620403][T10820] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 634.846498][T10842] tipc: Started in network mode [ 634.870224][T10842] tipc: Node identity 2000004, cluster identity 4711 [ 634.923351][T10842] tipc: Node number set to 33554436 [ 635.981684][T10853] netlink: 'syz.0.1371': attribute type 1 has an invalid length. [ 638.064598][ T4885] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.104990][ T4290] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 638.513624][ T4885] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.110036][T10889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 639.212064][T10889] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.226994][T10830] EXT4-fs (loop1): unmounting filesystem. [ 639.309368][T10889] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 640.077565][T10890] netlink: 'syz.6.1378': attribute type 9 has an invalid length. [ 640.448711][ T4885] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.540726][ T4885] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.619761][T10939] bond0 speed is unknown, defaulting to 1000 [ 646.628327][T10939] bond0 speed is unknown, defaulting to 1000 [ 646.634886][T10939] bond0 speed is unknown, defaulting to 1000 [ 646.736794][T10939] infiniband syz0: set down [ 646.741401][T10939] infiniband syz0: added bond0 [ 646.748612][T10939] rdma_rxe: unable to create cq [ 646.753577][T10939] infiniband syz0: Couldn't create ib_mad CQ [ 646.760400][T10939] infiniband syz0: Couldn't open port 1 [ 646.790332][ T1178] bond0 speed is unknown, defaulting to 1000 [ 646.837554][T10939] RDS/IB: syz0: added [ 646.841661][T10939] smc: adding ib device syz0 with port count 1 [ 646.847956][T10939] smc: ib device syz0 port 1 has pnetid [ 646.856638][T10939] bond0 speed is unknown, defaulting to 1000 [ 646.966560][T10939] bond0 speed is unknown, defaulting to 1000 [ 647.077957][T10939] bond0 speed is unknown, defaulting to 1000 [ 647.186892][T10939] bond0 speed is unknown, defaulting to 1000 [ 647.293719][T10939] bond0 speed is unknown, defaulting to 1000 [ 647.407988][T10939] bond0 speed is unknown, defaulting to 1000 [ 647.488623][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 647.521688][T10939] bond0 speed is unknown, defaulting to 1000 [ 647.619502][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 647.627741][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 647.636656][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 647.696543][ T4369] bond0 speed is unknown, defaulting to 1000 [ 647.716781][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 647.724204][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 648.201543][T10988] rxe_eth0 speed is unknown, defaulting to 1000 [ 649.708931][T11025] IPv6: NLM_F_CREATE should be specified when creating new route [ 649.804889][T11024] No source specified [ 649.847908][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 650.435200][T10124] syz.0.1215 (10124) used greatest stack depth: 18032 bytes left [ 652.481950][T10988] bond0 speed is unknown, defaulting to 1000 [ 652.486651][ T4292] Bluetooth: hci0: command 0x041b tx timeout [ 653.191496][T11048] tipc: Enabling of bearer rejected, failed to enable media [ 654.059896][T11054] ERROR: device name not specified. [ 654.544376][T11060] trusted_key: encrypted_key: insufficient parameters specified [ 655.395507][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 657.425845][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 657.431958][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 657.893026][T11090] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 657.902141][T11090] Error parsing options; rc = [-22] [ 658.575310][T11090] device vlan0 entered promiscuous mode [ 658.594663][T11090] team0: Port device vlan0 added [ 658.758067][T10988] chnl_net:caif_netlink_parms(): no params data found [ 658.882991][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1410'. [ 660.549420][T10988] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.790136][ T4582] rpcbind: server 127.0.0.1 not responding, timed out [ 660.864043][T10988] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.942536][T10988] device bridge_slave_0 entered promiscuous mode [ 661.155590][ T4885] device hsr_slave_0 left promiscuous mode [ 661.166075][ T4885] device hsr_slave_1 left promiscuous mode [ 661.235348][ T4885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.247656][ T4885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.255879][ T4885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.263523][ T4885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.271713][ T4885] device bridge_slave_1 left promiscuous mode [ 661.278360][ T4885] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.333646][ T4885] device bridge_slave_0 left promiscuous mode [ 661.342244][ T4885] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.684958][T11129] xt_socket: unknown flags 0x4c [ 662.415049][ T4885] device veth1_macvtap left promiscuous mode [ 662.425317][ T4885] device veth0_macvtap left promiscuous mode [ 662.439353][ T4885] device veth1_vlan left promiscuous mode [ 662.458912][ T4885] device veth0_vlan left promiscuous mode [ 663.714265][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 663.714281][ T27] audit: type=1800 audit(2000000777.614:551): pid=11134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1420" name="bus" dev="ramfs" ino=60411 res=0 errno=0 [ 664.209389][T11155] nftables ruleset with unbound set [ 665.973328][T11168] futex_wake_op: syz.6.1427 tries to shift op by 144; fix this program [ 666.490417][T11180] futex_wake_op: syz.6.1431 tries to shift op by 144; fix this program [ 667.414110][T11190] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 669.113753][T11199] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1436'. [ 671.046566][ T4885] team0 (unregistering): Port device team_slave_1 removed [ 671.188982][ T4885] team0 (unregistering): Port device team_slave_0 removed [ 671.269683][ T4885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.385543][ T4885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.011418][ T4885] bond0 (unregistering): Released all slaves [ 672.138591][T10988] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.153857][T10988] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.162261][T10988] device bridge_slave_1 entered promiscuous mode [ 672.733406][T11185] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.147790][T10602] syz.7.1315 (10602) used greatest stack depth: 17936 bytes left [ 673.398786][T11185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.445059][T11185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.951250][T11185] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.960782][T11185] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.969975][T11185] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.978982][T11185] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.089188][T10988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.166564][T10988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.467219][T10988] team0: Port device team_slave_0 added [ 674.475764][T10988] team0: Port device team_slave_1 added [ 676.300480][T10988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.317435][T10988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.525191][T10988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.575307][T10988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.582388][T10988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.611938][T10988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.747173][T10988] device hsr_slave_0 entered promiscuous mode [ 678.395793][T10988] device hsr_slave_1 entered promiscuous mode [ 678.405378][T10988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 678.414307][T11246] netlink: 'syz.6.1449': attribute type 11 has an invalid length. [ 678.438868][T10988] Cannot create hsr debugfs directory [ 679.839870][T10988] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.046128][T11278] overlayfs: failed to clone upperpath [ 680.280895][T10988] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.101270][T10988] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.930792][ T8284] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 681.967217][T11299] ceph: No mds server is up or the cluster is laggy [ 682.064540][T10988] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.186685][T11315] fuse: Bad value for 'fd' [ 683.554841][T10988] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 683.575502][T11329] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1462'. [ 683.665514][T10988] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 683.789815][T10988] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 683.853850][T11336] xt_socket: unknown flags 0x4c [ 684.477249][T10988] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 684.752993][T10988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.814789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 684.843808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 684.888590][T11344] loop6: detected capacity change from 0 to 512 [ 684.906298][T10988] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.971296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 684.994344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 685.012692][T11344] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 685.021268][T11344] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.032877][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.040023][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.049005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 686.191855][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.198211][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.230415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 686.323043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 686.392494][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.399698][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.449173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 686.458448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 686.467904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 686.469353][ T9772] EXT4-fs (loop6): unmounting filesystem. [ 686.484785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 686.493602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 686.527666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 686.599070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 686.608459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 686.631323][T10988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 686.644583][T11359] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1472'. [ 686.701104][T10988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 686.714940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 686.724547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 686.738027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 686.781802][T11364] netlink: 'syz.6.1474': attribute type 1 has an invalid length. [ 686.859718][T11364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 686.957768][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 687.006126][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 687.035401][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 687.057653][T11361] batman_adv: batadv0: Interface deactivated: veth0 [ 687.072429][T11361] batman_adv: batadv0: Removing interface: veth0 [ 687.096806][T11361] device bridge_slave_0 left promiscuous mode [ 687.145870][T11361] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.031043][T11361] device bridge_slave_1 left promiscuous mode [ 688.072094][T11361] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.410072][T11361] bond0: (slave bond_slave_0): Releasing backup interface [ 688.840818][T11361] bond0: (slave bond_slave_1): Releasing backup interface [ 688.945300][T11361] team0: Port device team_slave_0 removed [ 688.964466][T11361] team0: Port device team_slave_1 removed [ 688.971964][T11361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.979628][T11361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.990835][T11361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.000923][T11361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.039643][T11368] bond1: (slave gretap1): making interface the new active one [ 689.066891][T11368] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 689.083004][T11369] team0: Mode changed to "broadcast" [ 689.127957][T11372] tipc: Started in network mode [ 689.141788][T11372] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 689.149206][T11372] tipc: Enabled bearer , priority 0 [ 689.233795][T11371] device vlan0 entered promiscuous mode [ 689.308246][T11371] team0: Port device vlan0 added [ 689.329379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 689.558808][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1480'. [ 689.680152][T11401] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1479'. [ 690.452475][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1481'. [ 690.693258][ T4625] tipc: Node number set to 11578026 [ 690.739911][T11416] futex_wake_op: syz.7.1482 tries to shift op by 144; fix this program [ 690.765816][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 690.792637][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 690.833430][T10988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.932096][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 690.968952][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 691.052963][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 691.080591][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 691.113423][T10988] device veth0_vlan entered promiscuous mode [ 691.141081][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 691.163707][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 691.194768][T10988] device veth1_vlan entered promiscuous mode [ 691.255718][T10985] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 691.286958][T10985] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 691.330734][T10985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 691.395492][T10985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 692.251696][T10988] device veth0_macvtap entered promiscuous mode [ 692.379405][T10985] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 692.407778][T10988] device veth1_macvtap entered promiscuous mode [ 692.499413][T10988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.531722][T10988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.571041][T10988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.591072][T10988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.847072][T10988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.244769][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 693.311794][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 694.323563][T10988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.400878][T10988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.446871][T10988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.623562][T10988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.671189][T10988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.910893][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 695.054481][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 695.234291][T10988] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.741096][T10988] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.790722][T10988] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.799505][T10988] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.964883][T11478] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1499'. [ 696.153531][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1499'. [ 696.938134][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1499'. [ 696.973020][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1499'. [ 698.892180][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.916097][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.132296][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1499'. [ 699.155376][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 699.181254][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1499'. [ 699.899009][ T7204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.996036][ T7204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.191096][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 704.638423][T11549] tipc: Enabling of bearer rejected, failed to enable media [ 714.016567][T11619] loop6: detected capacity change from 0 to 2048 [ 714.042485][T11619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 714.211018][T11622] x_tables: duplicate underflow at hook 1 [ 718.022238][T11654] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 718.030230][T11654] Error parsing options; rc = [-22] [ 718.547577][T11654] device vlan0 entered promiscuous mode [ 718.566234][T11654] team0: Port device vlan0 added [ 720.743658][T11678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1530'. [ 721.451182][T11684] device syzkaller0 entered promiscuous mode [ 721.510508][T11687] tipc: Enabling of bearer rejected, failed to enable media [ 723.360100][ T4290] Bluetooth: to_multiplier 0 < 10 [ 727.903925][ T4292] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 727.913329][ T4292] Bluetooth: hci0: Injecting HCI hardware error event [ 727.924673][ T4290] Bluetooth: hci0: hardware error 0x00 [ 730.216764][ T4290] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 730.660132][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1574'. [ 733.077786][T11815] futex_wake_op: syz.0.1577 tries to shift op by 144; fix this program [ 733.878778][T11818] syz.0.1577 sent an empty control message without MSG_MORE. [ 734.073001][ T27] audit: type=1800 audit(2000000847.982:552): pid=11814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1579" name="file1" dev="sda1" ino=2054 res=0 errno=0 [ 734.158562][ T27] audit: type=1800 audit(2000000848.022:553): pid=11817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1579" name="file1" dev="sda1" ino=2054 res=0 errno=0 [ 736.010258][T11851] __vm_enough_memory: pid: 11851, comm: syz.2.1589, no enough memory for the allocation [ 737.176609][T11862] loop2: detected capacity change from 0 to 1024 [ 739.306274][T11870] device bridge_slave_1 entered promiscuous mode [ 742.928794][T11918] loop2: detected capacity change from 0 to 512 [ 745.614103][T11945] lo speed is unknown, defaulting to 1000 [ 745.622344][T11945] lo speed is unknown, defaulting to 1000 [ 745.629383][T11945] lo speed is unknown, defaulting to 1000 [ 745.639108][T11945] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 745.726194][T11947] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1596'. [ 746.448072][T11945] lo speed is unknown, defaulting to 1000 [ 746.498159][T11945] lo speed is unknown, defaulting to 1000 [ 746.528371][T11945] lo speed is unknown, defaulting to 1000 [ 746.539018][T11945] lo speed is unknown, defaulting to 1000 [ 746.554641][T11945] lo speed is unknown, defaulting to 1000 [ 746.561544][T11945] lo speed is unknown, defaulting to 1000 [ 746.580357][T11945] lo speed is unknown, defaulting to 1000 [ 746.656300][T11953] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1615'. [ 747.098651][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.105516][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.451855][T11977] fuse: Invalid rootmode [ 749.477261][T11977] 9pnet_fd: Insufficient options for proto=fd [ 751.824012][T12016] jffs2: notice: (12016) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 752.357174][T12016] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 757.575596][T12072] loop6: detected capacity change from 0 to 2048 [ 757.614183][T12072] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 757.639503][T12072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 761.752318][T12105] futex_wake_op: syz.6.1647 tries to shift op by 144; fix this program [ 763.729219][ T27] audit: type=1326 audit(2000000878.640:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.6.1653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 763.775753][ T27] audit: type=1326 audit(2000000878.680:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.6.1653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 763.828175][ T27] audit: type=1326 audit(2000000878.740:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.6.1653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 763.985018][ T27] audit: type=1326 audit(2000000878.760:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.6.1653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 764.010610][ T27] audit: type=1326 audit(2000000878.760:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.6.1653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 764.041535][ T27] audit: type=1326 audit(2000000878.780:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.6.1653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 764.791527][ T27] audit: type=1326 audit(2000000878.780:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.6.1653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 764.833807][ T27] audit: type=1326 audit(2000000878.780:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.6.1653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 765.680807][ T27] audit: type=1326 audit(2000000878.780:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.6.1653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 765.923808][ T27] audit: type=1326 audit(2000000878.780:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.6.1653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 770.023903][T12176] netlink: 'syz.6.1664': attribute type 1 has an invalid length. [ 770.115081][T12176] device bond2 entered promiscuous mode [ 770.156454][T12176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 772.163573][T12181] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1664'. [ 774.004350][T12203] ip_tables: iptables: counters copy to user failed while replacing table [ 775.490572][T12224] netlink: 'syz.6.1673': attribute type 10 has an invalid length. [ 775.700279][T12224] team0 (unregistering): Port device team_slave_0 removed [ 775.768036][T12224] team0 (unregistering): Port device team_slave_1 removed [ 775.818668][T12224] team0 (unregistering): Port device vlan0 removed [ 776.265719][T12223] syz.2.1674 (12223): drop_caches: 2 [ 781.514224][T12305] loop2: detected capacity change from 0 to 512 [ 781.787191][T12305] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 781.808453][T12305] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1693: invalid indirect mapped block 256 (level 1) [ 782.213586][T12305] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1693: invalid indirect mapped block 2683928664 (level 1) [ 782.572561][T12305] EXT4-fs (loop2): 1 truncate cleaned up [ 782.585061][T12305] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 783.764587][T12311] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 783.898190][T10988] EXT4-fs (loop2): unmounting filesystem. [ 785.513781][T12342] loop2: detected capacity change from 0 to 4096 [ 786.379334][T12342] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 786.599709][T12365] mmap: syz.7.1703 (12365): VmData 37523456 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 787.324073][T10988] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 787.410500][T12378] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 787.470774][T12378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 787.544658][T12378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 787.644032][T12378] team0: Port device vlan0 removed [ 787.746681][T12382] team0: Mode changed to "loadbalance" [ 787.773837][ T6601] tipc: Resetting bearer [ 787.808222][T12385] team0: Port device vlan0 added [ 787.831552][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 788.188741][T12400] futex_wake_op: syz.3.1710 tries to shift op by 144; fix this program [ 799.365267][ T6601] rpcbind: server 127.0.0.1 not responding, timed out [ 799.522862][T12507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.805344][T12514] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 799.964558][T12507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.736612][T12507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.831031][T12507] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.080027][T12507] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.578004][T12507] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.600911][T12507] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.617196][T12507] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.976245][T12546] IPVS: set_ctl: invalid protocol: 137 172.30.0.7:20001 [ 802.007907][T12549] futex_wake_op: syz.7.1741 tries to shift op by 144; fix this program [ 802.242895][T12556] __vm_enough_memory: pid: 12556, comm: syz.3.1753, no enough memory for the allocation [ 803.016745][T12560] device bridge1 entered promiscuous mode [ 803.043915][T12560] team0: Port device bridge1 added [ 803.088535][T12560] bridge0: port 1(team0) entered blocking state [ 803.098369][T12563] loop6: detected capacity change from 0 to 512 [ 803.114737][T12560] bridge0: port 1(team0) entered disabled state [ 803.164043][T12560] device team0 entered promiscuous mode [ 803.169864][T12563] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 803.194029][T12560] bridge0: port 1(team0) entered blocking state [ 803.200478][T12560] bridge0: port 1(team0) entered forwarding state [ 803.268525][T12563] EXT4-fs (loop6): 1 truncate cleaned up [ 803.274280][T12563] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 804.605935][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 804.605952][ T27] audit: type=1800 audit(2000000919.220:586): pid=12585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1745" name="file1" dev="loop6" ino=13 res=0 errno=0 [ 804.653766][T12585] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1745: invalid indirect mapped block 4294967295 (level 1) [ 804.676369][T12585] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1745: invalid indirect mapped block 65535 (level 2) [ 804.839110][ T9772] EXT4-fs (loop6): unmounting filesystem. [ 806.985174][T12606] __vm_enough_memory: pid: 12606, comm: syz.0.1757, no enough memory for the allocation [ 808.539449][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.545887][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.786638][T12633] ip_tables: iptables: counters copy to user failed while replacing table [ 811.766873][T12653] loop6: detected capacity change from 0 to 2048 [ 811.813508][T12653] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 811.887706][T12653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 812.273952][T12653] UDF-fs: warning (device loop6): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 135168 lbcount: 139264 extent 129+103936 [ 814.760699][T12694] loop6: detected capacity change from 0 to 512 [ 814.774288][T12694] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 816.454139][T12694] EXT4-fs error (device loop6): ext4_init_orphan_info:623: comm syz.6.1777: orphan file block 0: bad magic [ 816.468451][T12694] EXT4-fs (loop6): mount failed [ 816.796882][T12708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1780'. [ 817.947918][T12715] loop6: detected capacity change from 0 to 2048 [ 817.959748][T12715] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 817.997345][T12715] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 818.416118][T12721] device macvlan0 entered promiscuous mode [ 819.740742][T12739] device syzkaller0 entered promiscuous mode [ 819.941731][T12744] syz.2.1789 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 819.993710][T12744] CPU: 0 PID: 12744 Comm: syz.2.1789 Not tainted syzkaller #0 [ 820.001258][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 820.011377][T12744] Call Trace: [ 820.014701][T12744] [ 820.017763][T12744] dump_stack_lvl+0x188/0x24e [ 820.022510][T12744] ? ___ratelimit+0x14e/0x610 [ 820.027313][T12744] ? show_regs_print_info+0x12/0x12 [ 820.032580][T12744] ? load_image+0x410/0x410 [ 820.037155][T12744] ? ___ratelimit+0x474/0x610 [ 820.041902][T12744] ? radix_tree_cpu_dead+0x160/0x160 [ 820.047283][T12744] dump_header+0xd8/0x820 [ 820.051676][T12744] oom_kill_process+0x361/0x550 [ 820.056667][T12744] out_of_memory+0xe25/0x1220 [ 820.061415][T12744] ? mutex_lock_nested+0x10/0x10 [ 820.066427][T12744] ? unregister_oom_notifier+0x20/0x20 [ 820.071956][T12744] mem_cgroup_out_of_memory+0x2c0/0x390 [ 820.077682][T12744] ? mem_cgroup_oom_trylock+0x210/0x210 [ 820.083309][T12744] ? do_raw_spin_unlock+0x11d/0x230 [ 820.088587][T12744] try_charge_memcg+0xc9d/0x17c0 [ 820.093634][T12744] ? percpu_ref_put+0x180/0x180 [ 820.098616][T12744] ? get_mem_cgroup_from_mm+0x34/0x290 [ 820.104153][T12744] charge_memcg+0x117/0x3b0 [ 820.108724][T12744] ? __mem_cgroup_charge+0x80/0x80 [ 820.113898][T12744] ? get_mem_cgroup_from_mm+0x34/0x290 [ 820.119418][T12744] ? get_mem_cgroup_from_mm+0x34/0x290 [ 820.125029][T12744] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 820.130647][T12744] __mem_cgroup_charge+0x21/0x80 [ 820.135644][T12744] shmem_add_to_page_cache+0x8d7/0x1c90 [ 820.141329][T12744] ? __filemap_get_folio+0x10f/0xde0 [ 820.146745][T12744] ? __filemap_get_folio+0x10f/0xde0 [ 820.152095][T12744] ? put_page+0x270/0x270 [ 820.156483][T12744] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 820.162543][T12744] ? mark_lock+0x94/0x320 [ 820.166962][T12744] ? __lock_acquire+0x142d/0x7ea0 [ 820.172068][T12744] shmem_get_folio_gfp+0x1663/0x35e0 [ 820.177450][T12744] shmem_fault+0x1b6/0x790 [ 820.181948][T12744] ? shmem_fallocate+0xfc0/0xfc0 [ 820.186947][T12744] ? count_memcg_event_mm+0x8a/0x3c0 [ 820.192374][T12744] ? count_memcg_event_mm+0x36b/0x3c0 [ 820.197799][T12744] ? count_memcg_event_mm+0x8a/0x3c0 [ 820.203139][T12744] ? put_page+0x270/0x270 [ 820.207529][T12744] __do_fault+0x13b/0x4e0 [ 820.212002][T12744] ? handle_mm_fault+0x1804/0x3d40 [ 820.217182][T12744] handle_mm_fault+0x192e/0x3d40 [ 820.222198][T12744] ? numa_migrate_prep+0x250/0x250 [ 820.227399][T12744] __get_user_pages+0x40d/0xec0 [ 820.232330][T12744] ? populate_vma_page_range+0x2b0/0x2b0 [ 820.238039][T12744] ? print_deadlock_bug+0x5d0/0x5d0 [ 820.243306][T12744] ? get_user_pages_unlocked+0x3cb/0x720 [ 820.249012][T12744] ? down_read_killable+0x1cc/0x340 [ 820.254401][T12744] get_user_pages_unlocked+0x255/0x720 [ 820.259931][T12744] ? get_user_pages_unlocked+0x491/0x720 [ 820.265643][T12744] ? __gup_longterm_locked+0x1b20/0x1b20 [ 820.271357][T12744] ? internal_get_user_pages_fast+0x1dc8/0x2670 [ 820.277674][T12744] internal_get_user_pages_fast+0x1f49/0x2670 [ 820.283844][T12744] ? get_user_pages_fast_only+0x40/0x40 [ 820.289480][T12744] __iov_iter_get_pages_alloc+0x379/0xaf0 [ 820.295372][T12744] iov_iter_get_pages2+0x5b/0x90 [ 820.300375][T12744] bio_iov_iter_get_pages+0x339/0x1200 [ 820.306017][T12744] ? bio_associate_blkg+0x1c/0x1c0 [ 820.311264][T12744] ? bio_iov_bvec_set+0x330/0x330 [ 820.316352][T12744] ? bio_init+0x15c/0x2d0 [ 820.320749][T12744] blkdev_direct_IO+0xca1/0x1220 [ 820.325749][T12744] ? __lock_acquire+0x7ea0/0x7ea0 [ 820.330847][T12744] ? blkdev_write_end+0x2b0/0x2b0 [ 820.335950][T12744] ? filemap_write_and_wait_range+0x186/0x210 [ 820.342105][T12744] ? __fsnotify_parent+0x72a/0x820 [ 820.347397][T12744] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 820.354055][T12744] blkdev_read_iter+0x35a/0x570 [ 820.359023][T12744] do_iter_read+0x629/0xb10 [ 820.363597][T12744] ? vfs_iter_read+0xa0/0xa0 [ 820.368234][T12744] ? __import_iovec+0x306/0x510 [ 820.373163][T12744] ? import_iovec+0x6f/0xa0 [ 820.377737][T12744] do_preadv+0x233/0x390 [ 820.382041][T12744] ? do_writev+0x480/0x480 [ 820.386548][T12744] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 820.392600][T12744] ? lock_chain_count+0x20/0x20 [ 820.397529][T12744] ? lockdep_hardirqs_on+0x94/0x140 [ 820.402797][T12744] ? __x64_sys_preadv2+0xba/0x100 [ 820.407881][T12744] do_syscall_64+0x4c/0xa0 [ 820.412364][T12744] ? clear_bhb_loop+0x60/0xb0 [ 820.417101][T12744] ? clear_bhb_loop+0x60/0xb0 [ 820.421841][T12744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 820.427812][T12744] RIP: 0033:0x7f16b099f559 [ 820.432307][T12744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.451981][T12744] RSP: 002b:00007f16b185e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 820.460463][T12744] RAX: ffffffffffffffda RBX: 00007f16b0c25fa0 RCX: 00007f16b099f559 [ 820.468488][T12744] RDX: 0000000000000005 RSI: 0000200000000080 RDI: 0000000000000009 [ 820.476512][T12744] RBP: 00007f16b0a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 820.484535][T12744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.492552][T12744] R13: 00007f16b0c26038 R14: 00007f16b0c25fa0 R15: 00007ffce6ea68e8 [ 820.500602][T12744] [ 821.059957][T12762] device syzkaller0 entered promiscuous mode [ 821.184527][T12744] memory: usage 96kB, limit 96kB, failcnt 64 [ 821.191023][T12744] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 821.224975][T12744] kmem: usage 16kB, limit 9007199254740988kB, failcnt 0 [ 821.269565][T12744] Memory cgroup stats for /syz2/test: [ 821.270431][T12744] anon 0 [ 821.270431][T12744] file 81920 [ 821.270431][T12744] kernel 16384 [ 821.270431][T12744] kernel_stack 0 [ 821.270431][T12744] pagetables 4096 [ 821.270431][T12744] sec_pagetables 0 [ 821.270431][T12744] percpu 0 [ 821.270431][T12744] sock 0 [ 821.270431][T12744] vmalloc 0 [ 821.270431][T12744] shmem 81920 [ 821.270431][T12744] zswap 0 [ 821.270431][T12744] zswapped 0 [ 821.270431][T12744] file_mapped 0 [ 821.270431][T12744] file_dirty 0 [ 821.270431][T12744] file_writeback 0 [ 821.270431][T12744] swapcached 4096 [ 821.270431][T12744] anon_thp 0 [ 821.270431][T12744] file_thp 0 [ 821.270431][T12744] shmem_thp 0 [ 821.270431][T12744] inactive_anon 0 [ 821.270431][T12744] active_anon 81920 [ 821.270431][T12744] inactive_file 0 [ 821.270431][T12744] active_file 0 [ 821.270431][T12744] unevictable 0 [ 821.270431][T12744] slab_reclaimable 4952 [ 821.270431][T12744] slab_unreclaimable 6952 [ 821.270431][T12744] slab 11904 [ 821.619059][T12744] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1789,pid=12743,uid=0 [ 821.700835][T12744] Memory cgroup out of memory: Killed process 12743 (syz.2.1789) total-vm:102272kB, anon-rss:1420kB, file-rss:22088kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 824.415595][T12824] syz.2.1803 (12824): drop_caches: 2 [ 824.421989][T12824] syz.2.1803 (12824): drop_caches: 2 [ 824.690403][T12825] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[9011] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12825] [ 825.844314][T12835] device syzkaller0 entered promiscuous mode [ 829.877762][T12874] netlink: 'syz.2.1817': attribute type 10 has an invalid length. [ 829.998568][T12879] loop6: detected capacity change from 0 to 128 [ 832.044727][T12874] team0 (unregistering): Port device team_slave_0 removed [ 832.149525][T12874] team0 (unregistering): Port device team_slave_1 removed [ 832.272895][T12874] team0 (unregistering): Port device vlan0 removed [ 832.330632][ T27] audit: type=1326 audit(2000000947.240:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d1b9f559 code=0x7ffc0000 [ 832.410369][T12900] overlayfs: overlapping lowerdir path [ 832.431923][ T27] audit: type=1326 audit(2000000947.270:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d1b9f559 code=0x7ffc0000 [ 832.582894][ T27] audit: type=1326 audit(2000000947.270:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa0d1b9f559 code=0x7ffc0000 [ 832.716578][ T27] audit: type=1326 audit(2000000947.270:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa0d1b9f2c2 code=0x7ffc0000 [ 832.784334][T12909] tipc: Started in network mode [ 832.799680][T12909] tipc: Node identity ba3101fa2013, cluster identity 4711 [ 832.814056][ T27] audit: type=1326 audit(2000000947.270:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa0d1b5fd8e code=0x7ffc0000 [ 832.855135][T12909] tipc: Enabled bearer , priority 0 [ 832.883583][T12913] device syzkaller0 entered promiscuous mode [ 832.945053][ T27] audit: type=1326 audit(2000000947.270:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa0d1b9f387 code=0x7ffc0000 [ 835.579890][ T4625] tipc: Node number set to 2585919994 [ 835.605135][ T27] audit: type=1326 audit(2000000947.290:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0d1b5fd8e code=0x7ffc0000 [ 835.639057][T12914] tipc: Resetting bearer [ 835.798061][ T27] audit: type=1326 audit(2000000947.300:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa0d1b5fd8e code=0x7ffc0000 [ 835.842340][T12916] tipc: Resetting bearer [ 836.116182][ T27] audit: type=1326 audit(2000000947.300:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d1b9f559 code=0x7ffc0000 [ 837.462895][ T27] audit: type=1326 audit(2000000947.300:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa0d1b9f559 code=0x7ffc0000 [ 837.675391][ T27] audit: type=1326 audit(2000000947.320:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d1b9f559 code=0x7ffc0000 [ 837.743367][ T27] audit: type=1326 audit(2000000947.320:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d1b9f559 code=0x7ffc0000 [ 837.802479][ T27] audit: type=1326 audit(2000000947.320:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa0d1b9f559 code=0x7ffc0000 [ 837.952055][ T27] audit: type=1326 audit(2000000947.320:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d1b9f559 code=0x7ffc0000 [ 837.990845][ T27] audit: type=1326 audit(2000000947.320:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d1b9f559 code=0x7ffc0000 [ 838.141707][ T27] audit: type=1326 audit(2000000947.320:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fa0d1b9f559 code=0x7ffc0000 [ 838.195922][ T27] audit: type=1326 audit(2000000947.320:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d1b9f559 code=0x7ffc0000 [ 838.448084][ T27] audit: type=1326 audit(2000000947.320:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d1b9f559 code=0x7ffc0000 [ 838.497763][ T27] audit: type=1326 audit(2000000947.320:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.7.1824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa0d1b9f559 code=0x7ffc0000 [ 838.824189][T12916] tipc: Disabling bearer [ 838.972990][T12946] netlink: 'syz.2.1832': attribute type 1 has an invalid length. [ 843.164647][T12987] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 843.180779][T12987] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 843.191055][T12987] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 843.237889][T12987] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 843.467611][T12987] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 843.914878][T12987] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 843.962991][T12987] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 844.016737][T12987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 844.056831][T12987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 844.097852][T12987] device bridge_slave_0 left promiscuous mode [ 844.104159][T12987] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.204215][T12987] device bridge_slave_1 left promiscuous mode [ 844.233485][T12987] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.973795][T12977] loop6: detected capacity change from 0 to 1024 [ 844.996436][T12987] team0: Port device team_slave_0 removed [ 845.079414][T12977] EXT4-fs: Ignoring removed nomblk_io_submit option [ 845.127329][T12987] team0: Port device team_slave_1 removed [ 845.183144][T12977] ext4: Unknown parameter 'measure' [ 845.241213][T12987] bond0: (slave bridge1): Releasing active interface [ 845.331945][T12989] team0: Mode changed to "loadbalance" [ 846.428989][T12990] device vlan0 entered promiscuous mode [ 846.645438][T13009] device syzkaller0 entered promiscuous mode [ 852.410662][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 852.489998][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 852.532826][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 852.565202][T13076] batman_adv: batadv0: Interface deactivated: veth0 [ 852.583254][T13076] batman_adv: batadv0: Removing interface: veth0 [ 852.623422][T13076] device bridge_slave_0 left promiscuous mode [ 852.660864][T13076] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.715244][T13076] device bridge_slave_1 left promiscuous mode [ 852.766167][T13076] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.323377][T13086] loop6: detected capacity change from 0 to 2048 [ 853.397314][T13086] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 853.477324][T13086] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 853.608825][T13076] bond0: (slave bond_slave_0): Releasing backup interface [ 853.776539][T13076] bond0: (slave bond_slave_1): Releasing backup interface [ 854.053219][T13076] team0: Port device team_slave_0 removed [ 855.012243][T13076] team0: Port device team_slave_1 removed [ 855.032902][T13076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.054460][T13076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.114582][T13076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.161746][T13076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.597550][T13078] team0: Mode changed to "loadbalance" [ 855.784381][T13080] device vlan0 entered promiscuous mode [ 856.261130][T13109] ip_tables: iptables: counters copy to user failed while replacing table [ 856.284131][T13080] team0: Port device vlan0 added [ 856.910241][T13129] overlayfs: failed to clone upperpath [ 858.918937][T13140] loop6: detected capacity change from 0 to 1024 [ 858.931001][T13140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 858.937861][T13140] ext4: Unknown parameter 'measure' [ 859.355997][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 859.356014][ T27] audit: type=1326 audit(2000000974.250:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.6.1874" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 860.935230][ T27] audit: type=1326 audit(2000000974.250:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.6.1874" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 861.499810][ T27] audit: type=1326 audit(2000000974.250:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.6.1874" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 861.547926][ T27] audit: type=1326 audit(2000000976.460:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.6.1874" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f159d7992d7 code=0x7ffc0000 [ 862.454081][ T27] audit: type=1326 audit(2000000976.460:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.6.1874" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f159d7408d9 code=0x7ffc0000 [ 862.521034][ T27] audit: type=1326 audit(2000000976.460:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.6.1874" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 862.656303][ T27] audit: type=1326 audit(2000000976.460:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.6.1874" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 862.836572][ T27] audit: type=1326 audit(2000000976.460:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.6.1874" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f159d7992d7 code=0x7ffc0000 [ 863.496150][ T27] audit: type=1326 audit(2000000976.460:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.6.1874" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f159d7408d9 code=0x7ffc0000 [ 863.612150][ T27] audit: type=1326 audit(2000000976.460:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.6.1874" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f159d7992d7 code=0x7ffc0000 [ 864.622599][T13202] loop6: detected capacity change from 0 to 2048 [ 864.885744][T13202] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 864.908870][T13202] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 866.619109][T13223] loop2: detected capacity change from 0 to 512 [ 866.672712][T13223] UDF-fs: bad mount option "./dev" or missing value [ 869.978965][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.985407][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.201714][T13261] overlayfs: failed to clone upperpath [ 871.552948][T13266] loop6: detected capacity change from 0 to 2048 [ 871.638270][T13266] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 871.664587][T13266] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 874.420816][ T6601] rpcbind: server 127.0.0.1 not responding, timed out [ 876.537816][T13301] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 877.016318][T13323] tipc: Enabled bearer , priority 0 [ 877.044438][T13323] device syzkaller0 entered promiscuous mode [ 877.123146][T13323] tipc: Resetting bearer [ 877.221387][T13322] tipc: Resetting bearer [ 878.876759][T13322] tipc: Disabling bearer [ 878.938156][T13326] tipc: Enabling of bearer rejected, failed to enable media [ 880.844829][T13346] loop6: detected capacity change from 0 to 512 [ 880.924883][T13346] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 882.488163][T13346] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 882.537503][T13346] EXT4-fs (loop6): orphan cleanup on readonly fs [ 882.543948][T13346] EXT4-fs error (device loop6): ext4_orphan_get:1435: comm syz.6.1916: bad orphan inode 15 [ 883.406559][ T11] rpcbind: server 127.0.0.1 not responding, timed out [ 883.417398][T13346] ext4_test_bit(bit=14, block=5) = 0 [ 883.422780][T13346] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 883.561005][ T9772] EXT4-fs (loop6): unmounting filesystem. [ 885.471487][T13385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1924'. [ 885.480587][T13385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1924'. [ 885.638002][T13398] tipc: Enabling of bearer rejected, failed to enable media [ 889.728722][T13431] loop6: detected capacity change from 0 to 2048 [ 889.744178][T13431] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 889.759565][T13431] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 890.658905][T13437] futex_wake_op: syz.2.1931 tries to shift op by 144; fix this program [ 898.792942][ T9] rpcbind: server 127.0.0.1 not responding, timed out [ 901.924692][ T11] rpcbind: server 127.0.0.1 not responding, timed out [ 904.361636][T13549] loop2: detected capacity change from 0 to 1024 [ 904.372251][T13549] EXT4-fs: Ignoring removed nomblk_io_submit option [ 904.379001][T13549] ext4: Unknown parameter 'measure' [ 905.077003][T13504] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 906.074254][T13563] loop2: detected capacity change from 0 to 512 [ 906.330617][T13563] EXT4-fs error (device loop2): __ext4_iget:5102: inode #2: block 131072: comm syz.2.1963: invalid block [ 906.406402][T13563] EXT4-fs (loop2): get root inode failed [ 906.412116][T13563] EXT4-fs (loop2): mount failed [ 911.111134][T13613] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 911.118615][T13613] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 911.128339][T13613] vhci_hcd vhci_hcd.0: Device attached [ 911.269274][T13614] vhci_hcd: connection closed [ 911.274704][ T4444] vhci_hcd: stop threads [ 911.858091][ T4444] vhci_hcd: release socket [ 911.915910][ T4444] vhci_hcd: disconnect device [ 913.121874][T13629] device team0 left promiscuous mode [ 913.158643][T13629] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1977'. [ 913.208187][T13629] bridge0: port 1(team0) entered disabled state [ 915.776466][T13665] loop6: detected capacity change from 0 to 128 [ 915.840728][T13665] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 916.023918][T13665] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 918.392562][T13706] loop6: detected capacity change from 0 to 2048 [ 918.469836][T13706] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 918.484201][T13706] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 918.957805][ T27] kauditd_printk_skb: 61 callbacks suppressed [ 918.957821][ T27] audit: type=1326 audit(2000001033.870:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.2.2000" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f16b099f559 code=0x0 [ 919.633977][T13721] loop6: detected capacity change from 0 to 1024 [ 922.454293][T13739] loop2: detected capacity change from 0 to 4096 [ 922.638426][T13739] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 922.651384][T13750] loop6: detected capacity change from 0 to 512 [ 922.720783][T13750] EXT4-fs: Ignoring removed nomblk_io_submit option [ 922.864667][T13750] EXT4-fs (loop6): can't mount with both data=journal and delalloc [ 923.378032][T13766] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 923.965456][T10988] EXT4-fs (loop2): unmounting filesystem. [ 925.876598][T13798] Set syz1 is full, maxelem 256 reached [ 927.597247][T13820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2024'. [ 931.418508][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.424868][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.912433][ T4444] rpcbind: server 127.0.0.1 not responding, timed out [ 937.363076][T13921] loop2: detected capacity change from 0 to 2048 [ 937.403930][T13921] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 937.425565][T13921] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 937.569568][T13924] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 937.576160][T13924] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 937.586854][T13924] vhci_hcd vhci_hcd.0: Device attached [ 937.796169][ T4414] vhci_hcd: vhci_device speed not set [ 937.896800][ T4414] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 938.440158][T13925] vhci_hcd: connection closed [ 938.441897][ T7119] vhci_hcd: stop threads [ 938.455142][ T7119] vhci_hcd: release socket [ 938.462903][ T7119] vhci_hcd: disconnect device [ 939.816441][T13934] loop2: detected capacity change from 0 to 64 [ 939.894802][T13934] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 941.061891][T13944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2054'. [ 941.495294][T13948] loop6: detected capacity change from 0 to 512 [ 941.751567][T13948] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 942.093044][T13948] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2057: invalid indirect mapped block 256 (level 1) [ 942.359323][T13948] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2057: invalid indirect mapped block 2683928664 (level 1) [ 942.486820][T13948] EXT4-fs (loop6): 1 truncate cleaned up [ 942.533192][T13948] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 943.525589][ T9772] EXT4-fs (loop6): unmounting filesystem. [ 943.595911][ T4414] vhci_hcd: vhci_device speed not set [ 943.727598][T13976] device syzkaller0 entered promiscuous mode [ 946.636472][T14037] rxe_eth0 speed is unknown, defaulting to 1000 [ 947.339654][T14043] loop6: detected capacity change from 0 to 2048 [ 947.681475][T14043] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 948.589901][ T9772] EXT4-fs (loop6): unmounting filesystem. [ 948.811886][T14037] bond0 speed is unknown, defaulting to 1000 [ 951.176581][T14037] lo speed is unknown, defaulting to 1000 [ 952.855914][ T4261] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 953.065855][ T4261] usb 7-1: Using ep0 maxpacket: 32 [ 953.073712][ T4261] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 953.102789][ T4261] usb 7-1: config 0 has no interface number 0 [ 953.119090][ T4261] usb 7-1: config 0 interface 184 has no altsetting 0 [ 953.157672][ T4261] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 953.209573][ T4261] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.305622][ T4261] usb 7-1: Product: syz [ 953.317235][ T4261] usb 7-1: Manufacturer: syz [ 953.326088][ T4261] usb 7-1: SerialNumber: syz [ 953.515607][ T4261] usb 7-1: config 0 descriptor?? [ 953.775415][ T4261] smsc75xx v1.0.0 [ 954.103527][T14143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2079'. [ 954.427027][ T4261] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 954.460290][ T4261] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 956.812224][ T4261] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 956.876458][ T4261] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 956.925834][ T4261] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 956.985888][ T4261] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 957.045986][ T4261] usb 7-1: USB disconnect, device number 10 [ 958.272466][T14206] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2109'. [ 962.078717][T14247] loop6: detected capacity change from 0 to 2048 [ 962.088968][T14247] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 962.103437][T14247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 962.540258][T14250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2117'. [ 962.630838][T14252] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 964.544105][T14273] IPVS: Error connecting to the multicast addr [ 967.558260][T14302] loop6: detected capacity change from 0 to 2048 [ 967.598155][T14302] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 967.610885][T14302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 967.745446][T14308] Set syz1 is full, maxelem 256 reached [ 968.870574][T14319] device syzkaller0 entered promiscuous mode [ 969.948293][T14324] loop6: detected capacity change from 0 to 2048 [ 969.959037][T14324] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 969.973767][T14324] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 972.024646][T14344] loop2: detected capacity change from 0 to 128 [ 973.346013][T14353] loop6: detected capacity change from 0 to 2048 [ 973.411719][T14353] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 973.430300][T14353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 975.484814][T14367] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 975.491409][T14367] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 975.499304][T14367] vhci_hcd vhci_hcd.0: Device attached [ 975.606375][T14368] vhci_hcd: connection closed [ 975.609566][T10984] vhci_hcd: stop threads [ 975.693287][T10984] vhci_hcd: release socket [ 975.707903][ T4625] vhci_hcd: vhci_device speed not set [ 975.786002][ T4625] usb 45-1: new full-speed USB device number 3 using vhci_hcd [ 975.803486][T10984] vhci_hcd: disconnect device [ 976.301128][T14375] loop2: detected capacity change from 0 to 512 [ 976.358417][T14375] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 976.518915][T14375] EXT4-fs (loop2): 1 truncate cleaned up [ 976.539149][T14375] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 976.584319][T14385] loop6: detected capacity change from 0 to 512 [ 976.808508][T14385] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 976.855982][T14385] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 977.368441][ T4292] Bluetooth: hci4: unexpected subevent 0x1a length: 66 > 6 [ 977.556096][ T27] audit: type=1800 audit(2000001092.260:691): pid=14397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2149" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 977.832392][T10988] EXT4-fs (loop2): unmounting filesystem. [ 978.348261][ T9772] EXT4-fs (loop6): unmounting filesystem. [ 979.205858][ T1178] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 981.015977][ T4625] vhci_hcd: vhci_device speed not set [ 981.675980][T14430] loop6: detected capacity change from 0 to 2048 [ 981.692434][ T1178] usb 3-1: device descriptor read/all, error -71 [ 981.701521][T14430] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 981.715690][T14430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 988.053535][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2177'. [ 988.062561][T14508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2177'. [ 988.071613][T14508] netlink: 'syz.3.2177': attribute type 15 has an invalid length. [ 993.382434][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.391965][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.299328][T14637] loop2: detected capacity change from 0 to 2048 [ 1003.314120][T14637] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1003.323907][T14637] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 1003.332451][T14637] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1003.591616][T14647] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1006.301533][ T4292] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1006.310831][ T4292] Bluetooth: hci3: Injecting HCI hardware error event [ 1006.323071][ T4290] Bluetooth: hci3: hardware error 0x00 [ 1008.626365][ T4290] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1010.454243][T14716] tc action pedit 'at' offset 49 out of bounds [ 1010.461318][T14716] tc action pedit 'at' offset 49 out of bounds [ 1010.467603][T14716] tc action pedit 'at' offset 49 out of bounds [ 1010.473797][T14716] tc action pedit 'at' offset 49 out of bounds [ 1010.480026][T14716] tc action pedit 'at' offset 49 out of bounds [ 1010.486245][T14716] tc action pedit 'at' offset 49 out of bounds [ 1010.492447][T14716] tc action pedit 'at' offset 49 out of bounds [ 1010.498699][T14716] tc action pedit 'at' offset 49 out of bounds [ 1010.504910][T14716] tc action pedit 'at' offset 49 out of bounds [ 1010.511151][T14716] tc action pedit 'at' offset 49 out of bounds [ 1010.517486][T14716] 0: reclassify loop, rule prio 0, protocol 800 [ 1013.768112][T14738] ceph: No mds server is up or the cluster is laggy [ 1013.857075][ T8286] libceph: connect (1)[c::]:6789 error -101 [ 1013.863420][ T8286] libceph: mon0 (1)[c::]:6789 connect error [ 1014.787632][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2230'. [ 1014.796602][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2230'. [ 1014.805534][T14767] netlink: 'syz.6.2230': attribute type 15 has an invalid length. [ 1014.884593][T14764] loop2: detected capacity change from 0 to 2048 [ 1015.000575][T14764] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1015.030905][T14764] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1016.625874][ T8283] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1017.457425][ T8283] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1017.467217][ T8283] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.475404][ T8283] usb 7-1: Product: syz [ 1017.480385][ T8283] usb 7-1: Manufacturer: syz [ 1017.485157][ T8283] usb 7-1: SerialNumber: syz [ 1017.502166][ T27] audit: type=1800 audit(2000001132.410:692): pid=14784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2233" name="size" dev="configfs" ino=69036 res=0 errno=0 [ 1017.523004][ T8283] usb 7-1: config 0 descriptor?? [ 1017.689918][ T27] audit: type=1800 audit(2000001132.450:693): pid=14784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2233" name="zoned" dev="configfs" ino=69037 res=0 errno=0 [ 1017.767362][ T27] audit: type=1800 audit(2000001132.450:694): pid=14784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2233" name="power" dev="configfs" ino=69038 res=0 errno=0 [ 1017.820086][T14784] null_blk: disk nullb1 created [ 1017.904547][ T8283] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 011 [ 1019.319775][ T8283] usb 7-1: USB disconnect, device number 11 [ 1019.447587][T14823] loop6: detected capacity change from 0 to 128 [ 1019.807104][T14833] overlayfs: failed to clone upperpath [ 1022.870296][ T4290] Bluetooth: Wrong link type (-22) [ 1025.508727][T14889] loop6: detected capacity change from 0 to 128 [ 1025.990512][T14899] loop2: detected capacity change from 0 to 512 [ 1026.690304][T14899] EXT4-fs (loop2): 1 orphan inode deleted [ 1026.696445][T14899] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1026.705684][T14899] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1026.721256][ T9] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1026.942881][T14907] loop6: detected capacity change from 0 to 512 [ 1026.957623][T14907] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1027.302522][T14907] EXT4-fs (loop6): 1 truncate cleaned up [ 1027.308346][T14907] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1027.393193][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 1 [ 1027.747226][T10988] EXT4-fs (loop2): unmounting filesystem. [ 1027.818189][ T9772] EXT4-fs (loop6): unmounting filesystem. [ 1028.256994][ T8284] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1028.430860][T14923] loop2: detected capacity change from 0 to 1024 [ 1028.458775][ T8284] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1028.488423][ T8284] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.518711][T14923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1028.527906][ T8284] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1028.547472][ T8284] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1028.562605][ T8284] usb 7-1: string descriptor 0 read error: -22 [ 1028.569373][ T8284] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1028.578931][ T8284] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.763765][T10988] EXT4-fs (loop2): unmounting filesystem. [ 1028.798181][ T8284] usb 7-1: Can't get UAC3 power state for id 10 [ 1028.893052][ T8284] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 1028.919475][ T8284] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1029.158162][ T8284] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1029.169072][ T8284] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1029.545152][ T8284] usb 7-1: USB disconnect, device number 12 [ 1030.714138][T14955] loop2: detected capacity change from 0 to 128 [ 1031.117561][T14963] loop6: detected capacity change from 0 to 512 [ 1031.880080][T14963] EXT4-fs (loop6): 1 orphan inode deleted [ 1031.886854][T14963] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1031.899095][ T4307] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1031.899372][T14963] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.994408][ T4307] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 1 [ 1032.148940][ T9772] EXT4-fs (loop6): unmounting filesystem. [ 1040.634573][T15046] loop2: detected capacity change from 0 to 512 [ 1040.842038][T15046] loop2: detected capacity change from 0 to 2048 [ 1040.880187][T15046] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 1041.722827][T15067] loop6: detected capacity change from 0 to 32768 [ 1041.753158][T15067] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.2295 (15067) [ 1041.787534][T15067] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1041.798308][T15067] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1041.807602][T15067] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1041.817898][T15067] BTRFS info (device loop6): use zstd compression, level 3 [ 1041.825150][T15067] BTRFS info (device loop6): force clearing of disk cache [ 1041.832377][T15067] BTRFS info (device loop6): enabling disk space caching [ 1041.839602][T15067] BTRFS info (device loop6): disk space caching is enabled [ 1042.094568][T15091] loop2: detected capacity change from 0 to 2048 [ 1042.109124][T15091] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1042.121989][T15091] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1042.551730][T15067] BTRFS info (device loop6): enabling ssd optimizations [ 1042.587240][T15067] BTRFS info (device loop6): rebuilding free space tree [ 1042.654291][T15067] BTRFS info (device loop6): disabling free space tree [ 1042.661475][T15067] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1042.672006][T15067] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1044.671613][ T9772] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1046.924464][T15161] loop6: detected capacity change from 0 to 512 [ 1047.900649][T15168] loop2: detected capacity change from 0 to 2048 [ 1048.029258][T15176] cgroup: Unknown subsys name './file1' [ 1048.035233][T15168] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1049.128075][T15168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1050.409788][T15202] tipc: Enabling of bearer rejected, failed to enable media [ 1050.534723][T15205] netlink: 'syz.6.2317': attribute type 1 has an invalid length. [ 1050.658597][T15205] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1054.536670][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.543045][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.159227][T15316] SET target dimension over the limit! [ 1059.243913][T15336] cgroup: Unknown subsys name './file1' [ 1059.321849][T15337] loop2: detected capacity change from 0 to 2048 [ 1059.383241][T15337] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1059.465970][T15337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1060.044862][T15354] loop6: detected capacity change from 0 to 4096 [ 1060.112881][T15358] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1068.001945][T15446] loop6: detected capacity change from 0 to 2048 [ 1068.021236][T15446] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1068.035064][T15446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1068.097855][T15445] sctp: [Deprecated]: syz.0.2365 (pid 15445) Use of int in max_burst socket option. [ 1068.097855][T15445] Use struct sctp_assoc_value instead [ 1071.608065][ T4280] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1071.617335][ T4280] Bluetooth: hci1: Injecting HCI hardware error event [ 1071.694072][ T4280] Bluetooth: hci1: hardware error 0x00 [ 1074.351152][ T27] audit: type=1326 audit(2000001188.310:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.2.2382" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b099f559 code=0x7ffc0000 [ 1074.356104][ T4280] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1074.602913][ T27] audit: type=1326 audit(2000001188.310:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.2.2382" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b099f559 code=0x7ffc0000 [ 1074.734571][ T27] audit: type=1326 audit(2000001188.320:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.2.2382" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f16b099f559 code=0x7ffc0000 [ 1074.854044][T15500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2385'. [ 1074.895825][T15500] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2385'. [ 1074.955847][ T27] audit: type=1326 audit(2000001188.320:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.2.2382" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b099f559 code=0x7ffc0000 [ 1075.009975][T15500] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.072673][T15500] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.146574][T15500] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.162115][ T27] audit: type=1326 audit(2000001188.330:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.2.2382" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b099f559 code=0x7ffc0000 [ 1075.234446][T15500] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.294326][T15500] device geneve2 entered promiscuous mode [ 1075.317642][ T27] audit: type=1326 audit(2000001188.340:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.2.2382" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f16b099f559 code=0x7ffc0000 [ 1075.456263][ T27] audit: type=1326 audit(2000001188.340:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.2.2382" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b099f559 code=0x7ffc0000 [ 1075.568597][ T27] audit: type=1326 audit(2000001188.340:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.2.2382" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b099f559 code=0x7ffc0000 [ 1075.920128][T15511] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2387'. [ 1076.466902][ T4280] Bluetooth: hci1: Opcode 0x206c failed: -110 [ 1078.548872][ T4280] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 1078.622524][T15539] netlink: 'syz.0.2393': attribute type 3 has an invalid length. [ 1080.723351][T15570] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1083.467551][T15605] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1088.693239][T15668] loop6: detected capacity change from 0 to 128 [ 1088.957728][T15672] loop2: detected capacity change from 0 to 2048 [ 1089.026784][T15672] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1089.040087][T15672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1089.802462][T15680] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1089.809065][T15680] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1089.816907][T15680] vhci_hcd vhci_hcd.0: Device attached [ 1089.869139][T15681] vhci_hcd: connection closed [ 1089.870258][ T9] vhci_hcd: stop threads [ 1090.439762][ T9] vhci_hcd: release socket [ 1090.515859][T15149] vhci_hcd: vhci_device speed not set [ 1090.555812][ T9] vhci_hcd: disconnect device [ 1090.892848][T15691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2430'. [ 1092.519276][T15715] loop6: detected capacity change from 0 to 128 [ 1094.885672][T15748] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2444'. [ 1102.974727][T15836] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1102.981343][T15836] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1103.028093][T15836] vhci_hcd vhci_hcd.0: Device attached [ 1103.157231][T15837] vhci_hcd: connection closed [ 1103.158049][ T4579] vhci_hcd: stop threads [ 1103.226800][ T4579] vhci_hcd: release socket [ 1103.256398][T15580] vhci_hcd: vhci_device speed not set [ 1103.311016][ T4579] vhci_hcd: disconnect device [ 1103.329918][T15580] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 1103.985383][T15854] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2470'. [ 1104.262172][T15866] loop6: detected capacity change from 0 to 128 [ 1105.576780][T15885] xt_TCPMSS: Only works on TCP SYN packets [ 1109.065839][T15580] vhci_hcd: vhci_device speed not set [ 1112.953784][T15956] loop6: detected capacity change from 0 to 128 [ 1113.253147][T15966] IPVS: Error connecting to the multicast addr [ 1116.196276][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.202640][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.377633][T16007] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1119.384293][T16007] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1119.428867][T16014] vhci_hcd: connection closed [ 1119.430565][T16007] vhci_hcd vhci_hcd.0: Device attached [ 1119.572683][ T9730] vhci_hcd: stop threads [ 1119.580732][ T9730] vhci_hcd: release socket [ 1119.604972][ T9730] vhci_hcd: disconnect device [ 1119.652958][T15149] vhci_hcd: vhci_device speed not set [ 1120.511874][T16030] vivid-002: kernel_thread() failed [ 1121.073611][T16043] loop6: detected capacity change from 0 to 512 [ 1121.233176][T16043] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 1121.241677][T16043] System zones: 1-12 [ 1121.326307][T16043] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.2506: corrupted inode contents [ 1121.348812][T16043] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1121.361054][T16043] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.2506: corrupted inode contents [ 1121.376944][T16043] EXT4-fs error (device loop6): ext4_evict_inode:329: inode #15: comm syz.6.2506: mark_inode_dirty error [ 1121.391541][T16043] EXT4-fs (loop6): 1 orphan inode deleted [ 1121.397521][T16043] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1121.559004][ T9772] EXT4-fs (loop6): unmounting filesystem. [ 1121.844995][T16059] Bluetooth: MGMT ver 1.22 [ 1122.550669][T16074] loop2: detected capacity change from 0 to 512 [ 1122.620775][T16074] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1123.046738][T16081] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1123.053339][T16081] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1123.061382][T16081] vhci_hcd vhci_hcd.0: Device attached [ 1123.295971][T15149] vhci_hcd: vhci_device speed not set [ 1123.375977][T15149] usb 45-1: new full-speed USB device number 5 using vhci_hcd [ 1123.792648][T16082] vhci_hcd: connection reset by peer [ 1123.808682][ T4582] vhci_hcd: stop threads [ 1124.408391][ T4582] vhci_hcd: release socket [ 1124.482550][ T4582] vhci_hcd: disconnect device [ 1124.926224][ T27] audit: type=1326 audit(2000001239.840:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.6.2523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 1125.010574][ T27] audit: type=1326 audit(2000001239.840:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.6.2523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 1125.119409][ T27] audit: type=1326 audit(2000001239.870:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.6.2523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 1125.256941][ T27] audit: type=1326 audit(2000001239.870:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.6.2523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 1125.391801][ T27] audit: type=1326 audit(2000001239.870:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.6.2523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 1125.548479][ T27] audit: type=1326 audit(2000001239.880:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.6.2523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 1125.655204][ T27] audit: type=1326 audit(2000001239.880:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.6.2523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 1125.679366][ C1] vkms_vblank_simulate: vblank timer overrun [ 1126.067782][ T27] audit: type=1326 audit(2000001239.880:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.6.2523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 1126.609792][ T27] audit: type=1326 audit(2000001239.880:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.6.2523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 1126.765642][ T27] audit: type=1326 audit(2000001239.880:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.6.2523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159d79f559 code=0x7ffc0000 [ 1128.616151][T15149] vhci_hcd: vhci_device speed not set [ 1131.731322][T16162] infiniband syz0: set down [ 1131.835825][T15580] bond0 speed is unknown, defaulting to 1000 [ 1135.937433][T16227] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1138.587977][T16242] device syzkaller0 entered promiscuous mode [ 1140.575239][T16261] loop2: detected capacity change from 0 to 1024 [ 1140.714511][T16261] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1141.657963][T10988] EXT4-fs (loop2): unmounting filesystem. [ 1143.279026][T16291] loop2: detected capacity change from 0 to 1024 [ 1143.405224][T16291] EXT4-fs: quotafile must be on filesystem root [ 1145.162158][T16318] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1145.849814][T16311] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1145.856391][T16311] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1145.864453][T16311] vhci_hcd vhci_hcd.0: Device attached [ 1145.875920][T16316] vhci_hcd: connection closed [ 1145.877925][ T6363] vhci_hcd: stop threads [ 1145.916614][ T6363] vhci_hcd: release socket [ 1145.926333][ T6363] vhci_hcd: disconnect device [ 1149.280060][T16361] loop6: detected capacity change from 0 to 2048 [ 1149.379206][T16361] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1150.370143][T16373] cgroup: Unknown subsys name './file1' [ 1150.536393][ T9772] EXT4-fs (loop6): unmounting filesystem. [ 1151.195634][T16385] overlayfs: failed to resolve './cgroup': -2 [ 1153.675187][T16406] device syzkaller0 entered promiscuous mode [ 1155.278557][T16424] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1155.285169][T16424] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1155.292903][T16424] vhci_hcd vhci_hcd.0: Device attached [ 1155.310267][T16426] vhci_hcd: connection closed [ 1155.310515][ T6601] vhci_hcd: stop threads [ 1155.630609][ T6601] vhci_hcd: release socket [ 1155.996086][ T6601] vhci_hcd: disconnect device [ 1156.057557][ T4625] vhci_hcd: vhci_device speed not set [ 1158.403071][T16452] loop6: detected capacity change from 0 to 4096 [ 1158.446914][T16452] EXT4-fs: inline encryption not supported [ 1158.514607][T16452] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1158.531381][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 1158.531396][ T27] audit: type=1326 audit(2000001273.440:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16457 comm="syz.0.2603" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d0a39f559 code=0x0 [ 1158.594003][T16452] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1158.681636][T16465] CIFS mount error: No usable UNC path provided in device string! [ 1158.681636][T16465] [ 1158.757282][T16465] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1159.552115][T16468] overlayfs: failed to resolve './bus': -2 [ 1162.121585][ T9772] EXT4-fs (loop6): unmounting filesystem. [ 1162.587513][T16488] device syzkaller0 entered promiscuous mode [ 1163.558975][T16498] loop6: detected capacity change from 0 to 256 [ 1165.619561][T16509] device syzkaller0 entered promiscuous mode [ 1167.318927][T16532] loop6: detected capacity change from 0 to 128 [ 1167.392362][T16536] ISOFS: Unable to identify CD-ROM format. [ 1169.193728][T16536] loop2: detected capacity change from 0 to 32768 [ 1169.384327][ T27] audit: type=1800 audit(2000001284.290:740): pid=16536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2624" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 1171.809830][T16595] cgroup: Unknown subsys name './file1' [ 1174.201733][T16639] futex_wake_op: syz.6.2643 tries to shift op by 144; fix this program [ 1174.242532][T16639] loop6: detected capacity change from 0 to 256 [ 1174.316732][T16639] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1174.464805][T16639] rxe_eth0 speed is unknown, defaulting to 1000 [ 1174.936499][T16639] bond0 speed is unknown, defaulting to 1000 [ 1175.288663][T16639] lo speed is unknown, defaulting to 1000 [ 1176.473106][T16656] loop6: detected capacity change from 0 to 512 [ 1176.618530][T16656] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1178.627312][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.633760][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.216465][T16656] EXT4-fs error (device loop6): ext4_orphan_get:1435: comm syz.6.2648: bad orphan inode 13 [ 1179.280263][T16656] ext4_test_bit(bit=12, block=18) = 1 [ 1179.308631][T16656] is_bad_inode(inode)=0 [ 1179.312981][T16656] NEXT_ORPHAN(inode)=0 [ 1179.369580][T16656] max_ino=32 [ 1179.372853][T16656] i_nlink=1 [ 1179.398396][T16656] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1179.540471][ T9772] EXT4-fs (loop6): unmounting filesystem. [ 1181.684280][T16699] Cannot find add_set index 0 as target [ 1188.562219][T16764] SET target dimension over the limit! [ 1189.287705][T16771] loop2: detected capacity change from 0 to 512 [ 1189.783782][T16782] loop2: detected capacity change from 0 to 512 [ 1194.534639][T16815] loop2: detected capacity change from 0 to 4096 [ 1194.631199][T16815] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1196.108461][T10988] EXT4-fs (loop2): unmounting filesystem. [ 1196.249239][T16839] SET target dimension over the limit! [ 1201.429833][T16878] loop6: detected capacity change from 0 to 4096 [ 1201.587363][T16878] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1202.567292][ T9772] EXT4-fs (loop6): unmounting filesystem. [ 1206.497245][T16934] loop2: detected capacity change from 0 to 32768 [ 1206.508636][T16934] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.2709 (16934) [ 1206.698030][T16934] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1206.708368][T16934] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1206.717201][T16934] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1206.726667][T16934] BTRFS info (device loop2): use zstd compression, level 3 [ 1206.734224][T16934] BTRFS info (device loop2): force clearing of disk cache [ 1206.741498][T16934] BTRFS info (device loop2): enabling disk space caching [ 1206.748661][T16934] BTRFS info (device loop2): disk space caching is enabled [ 1207.074533][T16960] sctp: [Deprecated]: syz.6.2711 (pid 16960) Use of int in max_burst socket option. [ 1207.074533][T16960] Use struct sctp_assoc_value instead [ 1207.281429][T16934] BTRFS info (device loop2): enabling ssd optimizations [ 1207.292611][T16934] BTRFS info (device loop2): rebuilding free space tree [ 1207.841746][T16934] BTRFS info (device loop2): disabling free space tree [ 1207.848840][T16934] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1207.858672][T16934] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1208.958020][T10988] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1209.105870][T16979] device syzkaller0 entered promiscuous mode [ 1210.754871][T17002] futex_wake_op: syz.2.2716 tries to shift op by 144; fix this program [ 1211.250522][T17002] rxe_eth0 speed is unknown, defaulting to 1000 [ 1211.352617][T17002] bond0 speed is unknown, defaulting to 1000 [ 1211.454226][T17002] lo speed is unknown, defaulting to 1000 [ 1212.195865][T17017] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2722'. [ 1216.092006][T17052] Can't find ip_set type hash:ne [ 1216.223073][T17054] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1218.808865][T17095] loop2: detected capacity change from 0 to 2048 [ 1218.894917][T17095] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1218.925302][T17095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1220.095734][T17113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1220.182846][T17111] Can't find ip_set type hash:ne [ 1220.559639][T17122] loop2: detected capacity change from 0 to 128 [ 1220.646737][T17122] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1220.691685][T17122] ext4 filesystem being mounted at /232/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1221.649734][T10988] EXT4-fs (loop2): unmounting filesystem. [ 1223.507550][T17172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1225.744086][T17198] loop6: detected capacity change from 0 to 512 [ 1225.997036][T17198] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1226.012595][T17198] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2769: invalid indirect mapped block 256 (level 1) [ 1226.112519][T17198] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2769: invalid indirect mapped block 2683928664 (level 1) [ 1226.168218][T17198] EXT4-fs (loop6): 1 truncate cleaned up [ 1226.173960][T17198] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1227.119393][ T9772] EXT4-fs (loop6): unmounting filesystem. [ 1227.286975][ T27] audit: type=1400 audit(2000001342.190:741): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=17224 comm="syz.6.2775" name="/" offset=53 [ 1230.339495][T17298] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1234.034504][T17327] loop2: detected capacity change from 0 to 512 [ 1234.144542][T17327] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1234.190927][T17327] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2786: invalid indirect mapped block 256 (level 1) [ 1234.233175][T17327] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2786: invalid indirect mapped block 2683928664 (level 1) [ 1234.263306][T17327] EXT4-fs (loop2): 1 truncate cleaned up [ 1234.284019][T17327] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1235.190854][T10988] EXT4-fs (loop2): unmounting filesystem. [ 1236.449212][T17357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2792'. [ 1239.176580][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.182949][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.788864][T17401] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2804'. [ 1240.798130][T17401] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2804'. [ 1243.415308][T17427] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1243.422000][T17427] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1243.744397][T17427] vhci_hcd vhci_hcd.0: Device attached [ 1243.875286][T17436] loop6: detected capacity change from 0 to 2048 [ 1243.887973][T17436] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1243.901217][T17436] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1243.946809][T17429] vhci_hcd: connection closed [ 1243.949011][ T47] vhci_hcd: stop threads [ 1243.965848][T15149] vhci_hcd: vhci_device speed not set [ 1244.006406][ T47] vhci_hcd: release socket [ 1244.036088][T15149] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 1244.084322][ T47] vhci_hcd: disconnect device [ 1246.836008][ T27] audit: type=1400 audit(2000001361.740:742): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=17462 comm="syz.6.2817" name="/" offset=53 [ 1249.117650][T17493] loop6: detected capacity change from 0 to 64 [ 1249.756953][T15149] vhci_hcd: vhci_device speed not set [ 1249.809554][T17489] team0: Failed to send options change via netlink (err -105) [ 1249.873850][T17489] team0: Port device bridge0 added [ 1250.004866][T17499] device vlan0 left promiscuous mode [ 1250.048030][T17513] loop2: detected capacity change from 0 to 128 [ 1250.115936][T17505] netem: change failed [ 1251.107815][T14033] kworker/u4:31: attempt to access beyond end of device [ 1251.107815][T14033] loop2: rw=1, sector=145, nr_sectors = 312 limit=128 [ 1251.364788][T17535] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 1255.410947][T17575] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1256.204929][T17595] loop2: detected capacity change from 0 to 32768 [ 1256.251370][T17595] JBD2: Ignoring recovery information on journal [ 1256.260119][T17595] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 1256.269347][T17595] JBD2: bad block at offset 32 [ 1256.292330][T17595] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1256.766415][T17605] OCFS2: ERROR (device loop2): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 1256.789426][T17605] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1256.799466][T17605] OCFS2: File system is now read-only. [ 1256.805000][T17605] (syz.2.2852,17605,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 1256.813817][T17605] (syz.2.2852,17605,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 1256.822170][T17605] (syz.2.2852,17605,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 1256.830534][T17605] (syz.2.2852,17605,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 1256.839398][T17605] (syz.2.2852,17605,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 1256.847480][T17605] (syz.2.2852,17605,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 1256.856267][T17605] (syz.2.2852,17605,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 1256.868966][T17605] (syz.2.2852,17605,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 1258.076182][T10988] ocfs2: Unmounting device (7,2) on (node local) [ 1261.609657][T17661] loop6: detected capacity change from 0 to 1024 [ 1264.470476][T17704] loop6: detected capacity change from 0 to 164 [ 1264.749636][T17712] loop2: detected capacity change from 0 to 128 [ 1266.157107][ T76] kworker/u4:4: attempt to access beyond end of device [ 1266.157107][ T76] loop2: rw=1, sector=145, nr_sectors = 392 limit=128 [ 1266.395036][T17741] loop2: detected capacity change from 0 to 1024 [ 1271.995698][T17810] netlink: 'syz.0.2903': attribute type 4 has an invalid length. [ 1272.003552][T17810] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2903'. [ 1274.295821][T10980] rpcbind: server 127.0.0.1 not responding, timed out [ 1277.515131][T17874] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1277.555389][ T27] audit: type=1400 audit(2000001392.460:743): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=17863 comm="syz.6.2921" name="/" offset=53 [ 1278.615953][ C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1279.459355][ T27] audit: type=1400 audit(2000001394.370:744): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=17905 comm="syz.6.2928" name="/" offset=53 [ 1280.085525][T17910] loop2: detected capacity change from 0 to 1764 [ 1280.634937][T17924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.642343][T17924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.110011][T17927] device vlan0 left promiscuous mode [ 1282.126477][T17927] device macvlan0 left promiscuous mode [ 1283.137159][T17946] fuse: Bad value for 'fd' [ 1283.195855][T17962] loop6: detected capacity change from 0 to 2048 [ 1283.207625][T17962] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1283.221539][T17962] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1286.301374][T18010] loop6: detected capacity change from 0 to 1764 [ 1287.363174][T18027] device bridge_slave_0 left promiscuous mode [ 1288.467221][T18027] device vlan0 left promiscuous mode [ 1288.474523][T18027] device bond2 left promiscuous mode [ 1288.553345][T18027] device geneve2 left promiscuous mode [ 1291.742581][T18074] netlink: 'syz.3.2970': attribute type 4 has an invalid length. [ 1291.750532][T18074] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2970'. [ 1295.705046][T18116] loop2: detected capacity change from 0 to 128 [ 1297.104987][T18140] netlink: 'syz.6.2983': attribute type 4 has an invalid length. [ 1297.113034][T18140] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.2983'. [ 1298.196184][T18148] futex_wake_op: syz.0.2988 tries to shift op by 144; fix this program [ 1299.057251][T18160] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1299.063825][T18160] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1299.071338][T18160] vhci_hcd vhci_hcd.0: Device attached [ 1299.087284][T18164] vhci_hcd: connection closed [ 1299.089144][ T4885] vhci_hcd: stop threads [ 1299.146055][ T4885] vhci_hcd: release socket [ 1299.160439][ T4885] vhci_hcd: disconnect device [ 1300.122142][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.129967][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.633826][T18268] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 1306.641569][T18268] Error parsing options; rc = [-22] [ 1309.912657][T18314] loop2: detected capacity change from 0 to 2048 [ 1309.932161][T18314] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1309.945103][T18314] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1310.951554][T18324] binder: 18320:18324 ioctl c0306201 0 returned -14 [ 1312.525510][T18351] loop2: detected capacity change from 0 to 512 [ 1313.287775][T18351] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1313.507491][T18351] EXT4-fs (loop2): 1 truncate cleaned up [ 1313.531885][T18351] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1313.978450][T10988] EXT4-fs (loop2): unmounting filesystem. [ 1314.269448][T18384] binder: 18383:18384 ioctl c0306201 0 returned -14 [ 1315.423948][T18405] loop6: detected capacity change from 0 to 2048 [ 1315.440793][T18405] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1315.454546][T18405] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1316.402416][T18420] device syzkaller0 entered promiscuous mode [ 1318.435083][T18435] loop2: detected capacity change from 0 to 2048 [ 1318.445264][T18435] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1318.461777][T18435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1320.466487][T18491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1321.835923][T18495] device bond_slave_0 entered promiscuous mode [ 1321.842208][T18495] device bond_slave_1 entered promiscuous mode [ 1321.933503][T18495] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1321.997427][T18495] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1322.261519][ T6363] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1322.287957][T18491] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1322.296888][T18503] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3080'. [ 1322.330062][T18503] device bond_slave_0 left promiscuous mode [ 1322.349773][T18503] device bond_slave_1 left promiscuous mode [ 1325.703961][T18503] bond1: (slave macvlan2): Removing an active aggregator [ 1325.712079][T18503] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1325.722899][T10976] bond1: Warning: Found an uninitialized port [ 1325.787258][T18503] bond1: (slave macvlan2): Releasing backup interface [ 1325.814463][T18503] bond1: (slave macvlan2): the permanent HWaddr of slave - 16:68:67:b1:c6:2a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1325.895092][T18503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1325.956207][T18503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1325.979857][T18503] bond0 (unregistering): Released all slaves [ 1327.787943][T18575] loop2: detected capacity change from 0 to 2048 [ 1327.807534][T18575] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1327.822531][T18575] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1328.689030][T18588] : renamed from bond_slave_0 [ 1329.473983][T18610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1329.549006][T18610] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1329.620312][T18610] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 1329.670281][T18612] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1329.741562][T18617] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3105'. [ 1329.791402][ T31] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1330.329309][ T31] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1330.793615][T18626] loop2: detected capacity change from 0 to 2048 [ 1331.173623][T18626] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1331.187727][T18626] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1331.390891][ T27] audit: type=1400 audit(2000000017.170:745): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=18622 comm="syz.6.3090" name="/" offset=53 [ 1331.680999][T18617] bond1: (slave macvlan2): Releasing backup interface [ 1331.698541][T18617] bond1: (slave macvlan2): the permanent HWaddr of slave - d2:59:b1:90:f3:2c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1331.802307][T18617] bond0 (unregistering): Released all slaves [ 1331.815504][T14050] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1335.287559][T18680] device syzkaller0 entered promiscuous mode [ 1336.312929][T18704] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1336.319529][T18704] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1336.327260][T18704] vhci_hcd vhci_hcd.0: Device attached [ 1336.346720][T18705] vhci_hcd: connection closed [ 1336.347568][T14050] vhci_hcd: stop threads [ 1336.383519][T14050] vhci_hcd: release socket [ 1336.411035][T14050] vhci_hcd: disconnect device [ 1336.599390][T18717] bond0 speed is unknown, defaulting to 1000 [ 1336.605921][T18717] bond0 speed is unknown, defaulting to 1000 [ 1336.616051][T18717] bond0 speed is unknown, defaulting to 1000 [ 1336.654921][T18717] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1337.284909][T18717] bond0 speed is unknown, defaulting to 1000 [ 1337.291923][T18717] bond0 speed is unknown, defaulting to 1000 [ 1337.299270][T18717] bond0 speed is unknown, defaulting to 1000 [ 1337.306486][T18717] bond0 speed is unknown, defaulting to 1000 [ 1337.313507][T18717] bond0 speed is unknown, defaulting to 1000 [ 1337.320551][T18717] bond0 speed is unknown, defaulting to 1000 [ 1337.327609][T18717] bond0 speed is unknown, defaulting to 1000 [ 1340.801368][T18751] loop2: detected capacity change from 0 to 2048 [ 1340.842897][T18751] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1340.856617][T18751] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1341.397450][T18764] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1341.688149][T18771] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 1341.695860][T18771] Error parsing options; rc = [-22] [ 1341.706682][T18771] device vlan0 entered promiscuous mode [ 1342.281097][T18771] team0: Port device vlan0 removed [ 1342.442950][T18764] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1342.549664][T18764] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 1342.705856][T18778] binder: 18763:18778 ioctl c0306201 20000001fb40 returned -14 [ 1342.742722][ T4307] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1342.759936][T18777] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1342.884243][T18783] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3140'. [ 1342.997218][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1343.016310][ T4307] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1343.646240][T18802] loop6: detected capacity change from 0 to 2048 [ 1343.701224][T18802] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1344.300206][T18802] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1350.760856][T18865] nvmet: transport type 0 not supported [ 1351.621628][T18870] nvme nvme0: failed to connect socket: -512 [ 1353.038501][T18868] loop6: detected capacity change from 0 to 2048 [ 1353.156082][T18868] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1353.218329][T18868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1354.124249][T18903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1354.181710][T18905] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1355.310699][T18905] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 1355.403285][T18907] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1355.425826][T18903] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3157'. [ 1356.546654][T18903] bond1: (slave macvlan2): Releasing backup interface [ 1356.553505][T18903] bond1: (slave macvlan2): the permanent HWaddr of slave - 6e:a8:22:89:51:58 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1356.651083][T18903] bond0 (unregistering): Released all slaves [ 1356.715863][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1358.705699][ C1] net_ratelimit: 32 callbacks suppressed [ 1361.929980][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.936518][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.370636][T18982] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1364.389075][ C1] net_ratelimit: 35 callbacks suppressed [ 1365.080995][T18997] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3184'. [ 1365.336643][T18997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1365.417876][T18997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1365.437803][T18997] bond0 (unregistering): Released all slaves [ 1366.228259][T19017] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3194'. [ 1366.417475][T19017] bridge0: port 1(wlan1) entered blocking state [ 1366.476380][T19017] bridge0: port 1(wlan1) entered disabled state [ 1366.494158][T19024] loop6: detected capacity change from 0 to 512 [ 1366.501870][T19024] ext4: Unknown parameter 'appraise_type' [ 1367.456739][T19017] device wlan1 entered promiscuous mode [ 1367.517782][T19025] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1369.748794][ C0] net_ratelimit: 31 callbacks suppressed [ 1369.987634][T19020] bridge0: port 1(wlan1) entered disabled state [ 1372.020374][T19020] device wlan1 left promiscuous mode [ 1372.075046][T19020] bridge0: port 1(wlan1) entered disabled state [ 1372.996588][T19081] bond1: option mode: unable to set because the bond device has slaves [ 1373.090535][T19085] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3209'. [ 1373.544470][T19095] loop6: detected capacity change from 0 to 2048 [ 1373.673535][T19095] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1373.702411][T19095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1375.002405][ T6005] net_ratelimit: 37 callbacks suppressed [ 1379.497796][ T27] audit: type=1400 audit(2000000065.280:746): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=19160 comm="syz.6.3230" name="/" offset=53 [ 1380.095753][ T76] net_ratelimit: 43 callbacks suppressed [ 1381.028884][T19183] loop6: detected capacity change from 0 to 2048 [ 1381.398693][T19183] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1381.412291][T19183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1383.524876][T19209] jffs2: notice: (19209) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1383.979939][T19209] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 1384.917483][ T27] audit: type=1400 audit(2000000070.700:747): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=19213 comm="syz.2.3244" name="/" offset=53 [ 1385.115190][ C1] net_ratelimit: 29 callbacks suppressed [ 1385.329292][T19235] netlink: 'syz.6.3247': attribute type 3 has an invalid length. [ 1387.941381][T19266] loop2: detected capacity change from 0 to 128 [ 1389.062859][T19287] nvmet: adding nsid 1 to subsystem testsubsys [ 1389.291784][T19287] nvmet: transport type 0 not supported [ 1390.248811][ C1] net_ratelimit: 34 callbacks suppressed [ 1391.835844][T19316] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1391.842426][T19316] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1391.850055][T19316] vhci_hcd vhci_hcd.0: Device attached [ 1391.864037][T19322] vhci_hcd: connection closed [ 1392.575738][ T4360] vhci_hcd: vhci_device speed not set [ 1392.599344][ T4582] vhci_hcd: stop threads [ 1392.603652][ T4582] vhci_hcd: release socket [ 1392.603731][ T4582] vhci_hcd: disconnect device [ 1392.652621][ T4360] usb 45-1: new full-speed USB device number 7 using vhci_hcd [ 1392.669518][ T4360] usb 45-1: enqueue for inactive port 0 [ 1392.688990][T19329] loop2: detected capacity change from 0 to 128 [ 1392.858721][ T4360] vhci_hcd: vhci_device speed not set [ 1395.735655][ C1] net_ratelimit: 36 callbacks suppressed [ 1396.109421][T19385] loop2: detected capacity change from 0 to 128 [ 1396.344045][T19385] syz.2.3283: attempt to access beyond end of device [ 1396.344045][T19385] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1399.444996][T19426] loop6: detected capacity change from 0 to 2048 [ 1399.628141][T19426] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1399.642837][T19426] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1400.882208][ C1] net_ratelimit: 36 callbacks suppressed [ 1401.324403][T19443] tipc: Enabling of bearer rejected, failed to enable media [ 1402.982727][T19463] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1402.992286][T19463] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1403.002049][T19463] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1403.006828][ T27] audit: type=1800 audit(2000000088.760:748): pid=19463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3304" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1406.375626][ C1] net_ratelimit: 32 callbacks suppressed [ 1407.314483][T19520] futex_wake_op: syz.3.3319 tries to shift op by 144; fix this program [ 1408.401039][ T27] audit: type=1400 audit(2000000094.180:749): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=19523 comm="syz.6.3321" name="/" offset=53 [ 1408.535719][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 1409.824293][T19540] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1409.830889][T19540] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1409.850324][T19540] vhci_hcd vhci_hcd.0: Device attached [ 1410.076055][T15580] vhci_hcd: vhci_device speed not set [ 1410.155885][T15580] usb 45-1: new full-speed USB device number 8 using vhci_hcd [ 1410.611657][T19541] vhci_hcd: connection reset by peer [ 1410.617814][ T4496] vhci_hcd: stop threads [ 1410.622149][ T4496] vhci_hcd: release socket [ 1411.045970][ T4496] vhci_hcd: disconnect device [ 1411.426021][ C0] net_ratelimit: 37 callbacks suppressed [ 1412.308894][T19557] loop6: detected capacity change from 0 to 512 [ 1413.025692][T19573] Cannot find map_set index 32 as target [ 1413.914376][T19588] device syzkaller0 entered promiscuous mode [ 1416.065826][T15580] vhci_hcd: vhci_device speed not set [ 1416.390678][T19621] loop2: detected capacity change from 0 to 2048 [ 1416.422379][T19621] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1416.445525][T19621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1416.540082][ T6005] net_ratelimit: 30 callbacks suppressed [ 1420.017287][T19677] device syzkaller0 entered promiscuous mode [ 1421.021097][ T27] audit: type=1400 audit(2000000106.700:750): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=19698 comm="syz.6.3363" name="/" offset=53 [ 1421.655748][T14050] net_ratelimit: 35 callbacks suppressed [ 1422.150997][T19725] futex_wake_op: syz.6.3369 tries to shift op by 144; fix this program [ 1422.939797][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.953624][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.993166][T19759] bond1: option mode: unable to set because the bond device has slaves [ 1424.110600][T19766] tipc: Enabling of bearer rejected, failed to enable media [ 1424.427301][T19765] loop6: detected capacity change from 0 to 40427 [ 1424.454445][T19765] F2FS-fs (loop6): invalid crc value [ 1424.468970][T19765] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1424.825789][T19765] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1425.311338][T19792] syz.6.3378: attempt to access beyond end of device [ 1425.311338][T19792] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1426.088280][ T9772] syz-executor: attempt to access beyond end of device [ 1426.088280][ T9772] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1426.695822][ C0] net_ratelimit: 30 callbacks suppressed [ 1427.900701][ T27] audit: type=1400 audit(2000000113.680:751): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=19819 comm="syz.6.3382" name="/" offset=53 [ 1432.160377][ C1] net_ratelimit: 28 callbacks suppressed [ 1433.025866][ T3932] netdevsim netdevsim8 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.042036][ T3932] netdevsim netdevsim8 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.065138][ T3932] netdevsim netdevsim8 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.074419][ T3932] netdevsim netdevsim8 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.083125][ T3932] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.091714][ T3932] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.100197][ T3932] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.115630][ T3932] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.137072][ T3932] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.167501][ T3932] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.254799][ T3932] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.289028][T19871] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1433.295648][T19871] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1433.344026][ T3932] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.416932][T19871] vhci_hcd vhci_hcd.0: Device attached [ 1433.434249][ T3932] netdevsim netdevsim1 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.482495][ T3932] netdevsim netdevsim1 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.571213][ T3932] netdevsim netdevsim1 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.636125][T15580] vhci_hcd: vhci_device speed not set [ 1433.650642][ T3932] netdevsim netdevsim1 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.705748][T15580] usb 37-1: new full-speed USB device number 5 using vhci_hcd [ 1433.875258][T19873] vhci_hcd: connection reset by peer [ 1433.897453][ T7119] vhci_hcd: stop threads [ 1433.930753][ T7119] vhci_hcd: release socket [ 1434.112841][ T7119] vhci_hcd: disconnect device [ 1434.555363][T19885] device syzkaller0 entered promiscuous mode [ 1437.219852][T16989] net_ratelimit: 33 callbacks suppressed [ 1437.428505][T19944] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3413'. [ 1438.341340][ T27] audit: type=1400 audit(2000000124.120:752): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=19945 comm="syz.2.3416" name="/" offset=53 [ 1438.866065][T15580] vhci_hcd: vhci_device speed not set [ 1439.290636][ T27] audit: type=1326 audit(2000000125.070:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19978 comm="syz.2.3422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b099f559 code=0x7ffc0000 [ 1439.465173][ T27] audit: type=1326 audit(2000000125.110:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19978 comm="syz.2.3422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b099f559 code=0x7ffc0000 [ 1439.611485][ T27] audit: type=1326 audit(2000000125.110:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19978 comm="syz.2.3422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f16b099f559 code=0x7ffc0000 [ 1439.710140][T19980] rxe_eth0 speed is unknown, defaulting to 1000 [ 1439.719783][ T27] audit: type=1326 audit(2000000125.110:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19978 comm="syz.2.3422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b099f559 code=0x7ffc0000 [ 1439.820064][ T27] audit: type=1326 audit(2000000125.110:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19978 comm="syz.2.3422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f16b099f559 code=0x7ffc0000 [ 1439.906402][ T9] ------------[ cut here ]------------ [ 1439.913112][ T9] WARNING: CPU: 0 PID: 9 at io_uring/io_uring.c:2892 io_ring_exit_work+0x329/0x760 [ 1439.922712][ T9] Modules linked in: [ 1439.926691][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1439.933995][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1439.944128][ T9] Workqueue: events_unbound io_ring_exit_work [ 1439.950271][ T9] RIP: 0010:io_ring_exit_work+0x329/0x760 [ 1439.956068][ T9] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 7e 30 11 00 48 85 c0 75 40 e8 64 c4 56 f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 55 c4 56 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1 [ 1439.976225][ T9] RSP: 0018:ffffc900000e7ac0 EFLAGS: 00010293 [ 1439.982366][ T9] RAX: ffffffff8a2b822b RBX: 1ffff1100f5cdc03 RCX: ffff88813fe80000 [ 1439.990461][ T9] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 1439.998512][ T9] RBP: ffffc900000e7c30 R08: ffffc900000e7a47 R09: 1ffff9200001cf48 [ 1440.006598][ T9] R10: dffffc0000000000 R11: fffff5200001cf49 R12: dffffc0000000000 [ 1440.014896][ T9] R13: 000000010001bc9f R14: 000000010001bca1 R15: ffff88807ae6e018 [ 1440.022976][ T9] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1440.032018][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1440.038692][ T9] CR2: 00007f5e6379ca10 CR3: 000000001e757000 CR4: 00000000003506f0 [ 1440.046736][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1440.054759][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1440.062828][ T9] Call Trace: [ 1440.066212][ T9] [ 1440.069196][ T9] ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0 [ 1440.075031][ T9] ? _raw_spin_unlock+0x40/0x40 [ 1440.079952][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1440.085895][ T9] ? process_one_work+0x7b4/0x1160 [ 1440.091192][ T9] process_one_work+0x8ab/0x1160 [ 1440.096255][ T9] ? worker_detach_from_pool+0x240/0x240 [ 1440.096297][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1440.096325][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1440.096355][ T9] ? wq_worker_running+0x97/0x190 [ 1440.096384][ T9] worker_thread+0xaf5/0x12a0 [ 1440.096458][ T9] kthread+0x29d/0x330 [ 1440.096480][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 1440.123005][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1440.137395][ T9] ret_from_fork+0x1f/0x30 [ 1440.141930][ T9] [ 1440.145002][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1440.152317][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1440.160081][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1440.170153][ T9] Workqueue: events_unbound io_ring_exit_work [ 1440.176254][ T9] Call Trace: [ 1440.179548][ T9] [ 1440.182513][ T9] dump_stack_lvl+0x188/0x24e [ 1440.187225][ T9] ? memcpy+0x3c/0x60 [ 1440.191239][ T9] ? show_regs_print_info+0x12/0x12 [ 1440.196464][ T9] ? load_image+0x410/0x410 [ 1440.201026][ T9] panic+0x2d3/0x710 [ 1440.204946][ T9] ? bpf_jit_dump+0xd0/0xd0 [ 1440.209477][ T9] ? ret_from_fork+0x1f/0x30 [ 1440.214086][ T9] __warn+0x2f8/0x4f0 [ 1440.218096][ T9] ? io_ring_exit_work+0x329/0x760 [ 1440.223327][ T9] ? io_ring_exit_work+0x329/0x760 [ 1440.228460][ T9] report_bug+0x2ba/0x4f0 [ 1440.232910][ T9] ? io_ring_exit_work+0x329/0x760 [ 1440.238040][ T9] handle_bug+0x3a/0x70 [ 1440.242209][ T9] exc_invalid_op+0x16/0x40 [ 1440.246722][ T9] asm_exc_invalid_op+0x16/0x20 [ 1440.251586][ T9] RIP: 0010:io_ring_exit_work+0x329/0x760 [ 1440.257316][ T9] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 7e 30 11 00 48 85 c0 75 40 e8 64 c4 56 f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 55 c4 56 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1 [ 1440.276942][ T9] RSP: 0018:ffffc900000e7ac0 EFLAGS: 00010293 [ 1440.283023][ T9] RAX: ffffffff8a2b822b RBX: 1ffff1100f5cdc03 RCX: ffff88813fe80000 [ 1440.291003][ T9] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 1440.298991][ T9] RBP: ffffc900000e7c30 R08: ffffc900000e7a47 R09: 1ffff9200001cf48 [ 1440.307027][ T9] R10: dffffc0000000000 R11: fffff5200001cf49 R12: dffffc0000000000 [ 1440.315013][ T9] R13: 000000010001bc9f R14: 000000010001bca1 R15: ffff88807ae6e018 [ 1440.323013][ T9] ? io_ring_exit_work+0x329/0x760 [ 1440.328163][ T9] ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0 [ 1440.333993][ T9] ? _raw_spin_unlock+0x40/0x40 [ 1440.338860][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1440.344071][ T9] ? process_one_work+0x7b4/0x1160 [ 1440.349200][ T9] process_one_work+0x8ab/0x1160 [ 1440.354181][ T9] ? worker_detach_from_pool+0x240/0x240 [ 1440.359829][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1440.364859][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1440.370415][ T9] ? wq_worker_running+0x97/0x190 [ 1440.375451][ T9] worker_thread+0xaf5/0x12a0 [ 1440.380179][ T9] kthread+0x29d/0x330 [ 1440.384257][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 1440.389294][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1440.393913][ T9] ret_from_fork+0x1f/0x30 [ 1440.398375][ T9] [ 1440.402008][ T9] Kernel Offset: disabled [ 1440.406494][ T9] Rebooting in 86400 seconds..