last executing test programs: 12m11.378704716s ago: executing program 1 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/179, 0xb3) read$FUSE(r2, &(0x7f0000006780)={0x2020}, 0x2020) 12m9.91805004s ago: executing program 1 (id=246): socket$igmp6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) 12m9.837786982s ago: executing program 1 (id=248): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r3, 0x3, {0x0, 0x1}}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_procfs(0x0, 0x0) 12m9.588170428s ago: executing program 1 (id=252): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7c, 0x10000, 0x8004, 0x4, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x40080000006, 0xb06c}, 0x0, 0x0) 12m8.135410792s ago: executing program 1 (id=255): mmap$IORING_OFF_PBUF_RING(0x0, 0x0, 0x300000a, 0x11, 0xffffffffffffffff, 0x82397a24) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000140)=""/147, &(0x7f0000000280)=0x93) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x0, 0xfffffffffffffffe}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000007000/0x2000)=nil) 12m7.044329088s ago: executing program 1 (id=257): socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x100009, 0x1, 0xfffffe0000000001, 0xda11, 0x90000000}, 0x0) unshare(0x42060680) r0 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008800, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x80003}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205a1, 0x110}, [@IFLA_TXQLEN={0x8, 0xd, 0xfffff326}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000406010300000000000000000500000805000100070000eca777215e4970a1310000000005871a5b3c55a2036b3490585c8680d4b90f1c3ed86347cb095d855e535e8551c5e04cf293080401c8c49835ef06562f", @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) 12m2.031586666s ago: executing program 2 (id=271): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 12m1.500993278s ago: executing program 2 (id=273): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18, 0x800}, 0xc084) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) 12m0.367247715s ago: executing program 2 (id=281): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file7\x00', 0x0, &(0x7f0000000080), 0x1, 0x507, &(0x7f0000000c00)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/cpu/0/msr\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000003c0)='./tracing/events/enable\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="73686f72746e3d312c696f636861727365743d6d616363656e746575726f2c757466383d312c757466383d312c696f636861727365743d63833934392c6e66732c756e695f786c6174653d302c756e695f786c6174653d302c757466383d302c726f6469722c757466383d312c757466383d302c73686f72746e616d653d6d697865642c696f636861727365743d6d6163677265656b2c00"/166], 0x0, 0x37c, &(0x7f0000000880)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 11m58.89160621s ago: executing program 2 (id=287): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f00000001c0)="bcfdc195f8b8fff0d7d38cebc3ab0a281077b472f633f263e6cec7a46ae5a30d3b4a34df3f57560217ec82ad86f90bcdc0538fb8d3974e4345d3653747b5e8e4effd9e38b7d65a6e70ead21cf7dfda1f078866875d57cfd0e398fea002ae797187ebfa9f216c998eb937235458bcf702c6ae803dfa6793c87e4471f181c01ac16cb88a61517b028928a8d3768eb6c7ffe91ec60acba2e36b0f517bc3469e9ab5a000c95300c7e59dfa32e844a00ababe920de9e0700a7a15450d9c090d2d2dff7170fd51617a", 0xc6, 0xfffffffffffffffe) 11m57.324836047s ago: executing program 2 (id=292): setpriority(0x0, 0xffffffffffffffff, 0x9) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) r2 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000100)='rw\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000480)='freezer.self_freezing\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e26, @rand_addr=0xfffffc13}}) 11m55.976031619s ago: executing program 32 (id=292): setpriority(0x0, 0xffffffffffffffff, 0x9) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) r2 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000100)='rw\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000480)='freezer.self_freezing\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e26, @rand_addr=0xfffffc13}}) 11m51.784034368s ago: executing program 33 (id=257): socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x100009, 0x1, 0xfffffe0000000001, 0xda11, 0x90000000}, 0x0) unshare(0x42060680) r0 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008800, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x80003}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205a1, 0x110}, [@IFLA_TXQLEN={0x8, 0xd, 0xfffff326}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000406010300000000000000000500000805000100070000eca777215e4970a1310000000005871a5b3c55a2036b3490585c8680d4b90f1c3ed86347cb095d855e535e8551c5e04cf293080401c8c49835ef06562f", @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) 9m12.23449169s ago: executing program 5 (id=730): inotify_init1(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000300), &(0x7f0000000280)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x8000, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x2, {0x0, 0x3}}}}}}}}, 0x0) 9m8.322872782s ago: executing program 5 (id=736): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003a80)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 9m7.897701672s ago: executing program 5 (id=739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) pread64(r4, 0x0, 0x0, 0xcd32) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x1000}]}]}, 0x30}}, 0x0) socket(0x29, 0x80805, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 9m5.940521068s ago: executing program 5 (id=743): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 9m1.494070403s ago: executing program 5 (id=753): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x201008, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x4) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x4) munlock(&(0x7f0000ff2000/0xd000)=nil, 0xd000) fallocate(r0, 0x20000, 0x0, 0x6000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x13, r0, 0x0) 8m59.756372994s ago: executing program 5 (id=762): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x3808004, &(0x7f0000000600)=ANY=[], 0x5, 0x14fe, &(0x7f00000020c0)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001800)={0x1, 0x0, [{0x0, 0x2a, &(0x7f0000000100)=""/42}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000280)=0x1) 8m58.779132777s ago: executing program 34 (id=762): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x3808004, &(0x7f0000000600)=ANY=[], 0x5, 0x14fe, &(0x7f00000020c0)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001800)={0x1, 0x0, [{0x0, 0x2a, &(0x7f0000000100)=""/42}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000280)=0x1) 2m45.942172018s ago: executing program 0 (id=1592): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 2m45.001482239s ago: executing program 0 (id=1593): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 2m44.874129493s ago: executing program 0 (id=1595): r0 = socket$packet(0x11, 0x2, 0x300) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0xce21, @loopback}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r2, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r5, r2, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 2m44.654198908s ago: executing program 0 (id=1598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r4, 0x0, 0x0) 2m42.901185869s ago: executing program 0 (id=1600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000080)) syz_open_dev$vbi(0x0, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0000380004804e", @ANYRESOCT], 0x4c}, 0x1, 0x0, 0x0, 0x404c011}, 0xc000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08002320"], 0xb) 2m29.077180025s ago: executing program 0 (id=1632): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) 2m26.891424887s ago: executing program 35 (id=1632): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) 2m12.449331947s ago: executing program 4 (id=1661): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) socket$netlink(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xd) writev(r4, &(0x7f0000000900)=[{&(0x7f0000000080)="72f70b67bbb8fbb6f9ff486627d6c331ed4b9e08a95e4c15bc5db5609412b7bdc661a9f9c37a7dad8ff53f53ddac96745521ba9eb7e8486990fbc948b0a86eb372365a45dfa3f5c5111e7a522627f110f16c597e85012adfde2db9c63775747719c78946a3faf1eb7921774442aad78ff78ad43063c1f3739364cecb309a4a", 0x7f}, {&(0x7f0000000740)="0c7547ed166791f0df96a20a193e89ffe4dda942", 0xfffffed1}], 0x2) 2m10.798708226s ago: executing program 4 (id=1663): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 2m10.550567382s ago: executing program 4 (id=1664): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009967, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 2m9.38609197s ago: executing program 4 (id=1665): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) r2 = socket(0x8, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x108, 0x42020054, &(0x7f0000000240), 0x0) bind(r2, &(0x7f0000000100)=@generic={0x8, "0000ffff0100feffffff00"}, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) 2m9.250921862s ago: executing program 4 (id=1666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 2m7.750164048s ago: executing program 4 (id=1669): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x60}, {}, {0x6, 0x0, 0xfa}, {}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pipe2(&(0x7f0000000040), 0x800) r1 = syz_io_uring_setup(0x34bc, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 1m52.649128414s ago: executing program 36 (id=1669): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x60}, {}, {0x6, 0x0, 0xfa}, {}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pipe2(&(0x7f0000000040), 0x800) r1 = syz_io_uring_setup(0x34bc, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 57.030093045s ago: executing program 3 (id=1779): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000015}, 0xc844) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$nci(0xffffff9c, 0x0, 0x2, 0x0) write$nci(r0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) inotify_add_watch(0xffffffffffffffff, 0x0, 0x850003d1) writev(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, 0x0, 0x0) 53.213153015s ago: executing program 3 (id=1783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') read$FUSE(r4, &(0x7f0000004440)={0x2020}, 0x2020) 51.393077849s ago: executing program 3 (id=1784): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) 42.81781652s ago: executing program 3 (id=1796): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) setresuid(0xee01, 0x0, 0x0) r3 = open(0x0, 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x9, 0xff, 0xfffff024}, {0x20, 0x0, 0x4b, 0xfffff038}, {0x6, 0xfe, 0xd, 0x2000100}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) 41.619904809s ago: executing program 3 (id=1799): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001100010027bd7000ffdbdf25ac1e0001000000000000080000000000000004d60a003c0014000d00"], 0x3c}}, 0x0) 39.662328375s ago: executing program 3 (id=1801): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000e963953ae9"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r6, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xffffffffffffff80}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) close(r4) 24.353162026s ago: executing program 37 (id=1801): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000e963953ae9"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r6, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xffffffffffffff80}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) close(r4) 22.817836222s ago: executing program 9 (id=1843): bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0xff81, @none}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r4, &(0x7f0000000100)=""/9, 0xfffffd87) 20.515293296s ago: executing program 9 (id=1844): r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x303000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r2 = socket(0x2a, 0x2, 0x9) ioctl$sock_inet6_SIOCADDRT(r2, 0x8915, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 16.593529429s ago: executing program 7 (id=1851): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x9, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x84042, 0xc2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 16.55964742s ago: executing program 6 (id=1852): r0 = socket$inet6(0xa, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x86, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16.55582008s ago: executing program 8 (id=1862): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_create(0x9, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) 15.28708928s ago: executing program 8 (id=1854): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 14.910903929s ago: executing program 6 (id=1855): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x44842, 0x1ef) r2 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) mq_notify(r2, &(0x7f0000002640)={0x0, 0xe, 0x1}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x29, &(0x7f00000004c0)={0x0, 0x1010000}, 0x10}, 0x94) write(r4, &(0x7f00000000c0)='7', 0x1) r6 = fsopen(&(0x7f0000000140)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000040)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xa9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) sendfile(r1, r3, 0x0, 0xfffe82) 12.74462562s ago: executing program 8 (id=1856): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) 12.654025092s ago: executing program 7 (id=1857): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000001"], 0x18) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) 12.544905154s ago: executing program 9 (id=1858): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket(0x28, 0x3, 0x28) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mremap(&(0x7f0000666000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000080)="d6", 0x33) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) splice(r3, 0x0, r6, 0x0, 0x1e8640, 0x0) 12.493471486s ago: executing program 6 (id=1859): r0 = fanotify_init(0x20, 0x0) fanotify_mark(r0, 0x641, 0x40001002, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000001"], 0x18) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) creat(0x0, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0xfa) openat(r2, &(0x7f0000000180)='./file2\x00', 0x143042, 0x0) 12.352587089s ago: executing program 7 (id=1860): r0 = fanotify_init(0x20, 0x0) fanotify_mark(r0, 0x641, 0x40001002, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000001"], 0x18) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) creat(0x0, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0xfa) openat(r2, &(0x7f0000000180)='./file2\x00', 0x143042, 0x0) 11.964262668s ago: executing program 7 (id=1861): openat$nullb(0xffffffffffffff9c, 0x0, 0x185202, 0x0) socket$inet(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x7, 0x3ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffff8) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 11.46603119s ago: executing program 9 (id=1863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r4, 0x65, 0x1, &(0x7f0000000080), 0x1d0) dup3(r3, r4, 0x80000) 11.46461311s ago: executing program 6 (id=1872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r4}, 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000700)=@sack_info={r6, 0x2, 0x6}, &(0x7f0000000740)=0xc) 10.395865505s ago: executing program 6 (id=1864): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000240)=@in4={0x21, 0xfffc, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 9.114035495s ago: executing program 7 (id=1865): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f0000000280)={[{@discard_async}, {@compress}, {@nossd_spread}]}, 0x1, 0x5599, &(0x7f000000f080)="$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") mkdir(0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x1) io_submit(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000300), 0x0) r1 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 9.060893287s ago: executing program 8 (id=1866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x39) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 7.526884443s ago: executing program 8 (id=1867): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r4 = syz_clone(0x4800011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x40000000, 0x0) ptrace$setopts(0x4202, r4, 0x4, 0x5414a65b01c0ac5) 5.669919556s ago: executing program 9 (id=1868): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x46, 0xc11, &(0x7f0000000d00)="$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") setrlimit(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) mount$bpf(0x0, 0x0, 0x0, 0x908422, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) write$UHID_INPUT(r4, &(0x7f0000001940)={0xe, {"a2e3ad21ed0d52f90b9b500987f70e06d038e7ff7fc6e5539b324b298b089b07083f6d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b3b070d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934280fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a884f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caa70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa1811cf867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4d13a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bd3a20d1cbe68981f392203ddf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f301000080813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7818876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a3d47b8645a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488a8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3d46ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c8985887855fecc37b3d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe57491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a9d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483ef1ab6a911e818e022939987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de9925838b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf65e4c9b23af506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 23.48428ms ago: executing program 2 (id=1838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$rds(0x15, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x24, r4, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "12"}]}, 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x24, r9, 0x1, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '\"'}]}, 0x24}}, 0x0) 22.73794ms ago: executing program 8 (id=1879): r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r4, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0x40045304, &(0x7f0000000000)) tkill(r3, 0x7) listen(r0, 0xffffffff) 10.47417ms ago: executing program 6 (id=1880): gettid() writev(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = gettid() tkill(r1, 0x2a) 9.89468ms ago: executing program 7 (id=1881): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x39) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r3, &(0x7f0000000100)=""/9, 0xfffffd87) 0s ago: executing program 9 (id=1882): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) kernel console output (not intermixed with test programs): 6.603'. [ 305.180612][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.603'. [ 307.290758][ T6823] CIFS: Attempting to mount \\::1\share [ 307.333498][ T6823] CIFS: VFS: Error connecting to socket. Aborting operation. [ 307.353484][ T6823] CIFS: VFS: cifs_mount failed w/return code = -101 [ 312.562958][ T6887] loop5: detected capacity change from 0 to 256 [ 312.994525][ T6887] exfat: Deprecated parameter 'utf8' [ 313.018438][ T6887] exfat: Deprecated parameter 'utf8' [ 313.062729][ T6887] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 316.064956][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 316.302159][ T6930] loop5: detected capacity change from 0 to 1024 [ 316.338606][ T6930] EXT4-fs: Ignoring removed bh option [ 316.403642][ T6930] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 316.561857][ T6930] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 317.058159][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.065205][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.134642][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 319.987372][ T5470] EXT4-fs (loop5): unmounting filesystem. [ 320.972166][ T6983] loop6: detected capacity change from 0 to 8 [ 320.982714][ T26] audit: type=1326 audit(2000000165.380:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428499e159 code=0x7ffc0000 [ 321.050124][ T26] audit: type=1326 audit(2000000165.420:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428499e159 code=0x7ffc0000 [ 321.448034][ T26] audit: type=1326 audit(2000000165.420:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428499e159 code=0x7ffc0000 [ 321.665469][ T6993] SQUASHFS error: zlib decompression failed, data probably corrupt [ 321.675185][ T6993] SQUASHFS error: Failed to read block 0x4e8: -5 [ 321.827753][ T26] audit: type=1326 audit(2000000165.420:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f428499e159 code=0x7ffc0000 [ 321.923174][ T26] audit: type=1326 audit(2000000165.420:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428499e159 code=0x7ffc0000 [ 321.998411][ T26] audit: type=1326 audit(2000000165.420:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428499e159 code=0x7ffc0000 [ 322.034716][ T4322] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 322.102556][ T26] audit: type=1326 audit(2000000165.420:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428499e159 code=0x7ffc0000 [ 322.214834][ T26] audit: type=1326 audit(2000000165.420:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428499e159 code=0x7ffc0000 [ 322.270572][ T4322] usb 4-1: config index 0 descriptor too short (expected 100, got 68) [ 322.289595][ T4322] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 322.327417][ T26] audit: type=1326 audit(2000000165.420:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f428499e159 code=0x7ffc0000 [ 322.360369][ T4322] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 322.437674][ T26] audit: type=1326 audit(2000000165.420:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428499e159 code=0x7ffc0000 [ 322.450290][ T4322] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.953052][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 322.966615][ T4322] usb 4-1: SerialNumber: syz [ 323.014170][ T6995] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 323.250829][ T6995] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 323.694437][ T6995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.826242][ T6995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.182857][ T4322] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 324.415694][ T4322] usb 4-1: USB disconnect, device number 3 [ 324.422965][ T4322] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 328.371704][ T7065] ip_tables: iptables: counters copy to user failed while replacing table [ 334.244813][ T7115] loop6: detected capacity change from 0 to 512 [ 334.277086][ T7115] EXT4-fs: Ignoring removed bh option [ 334.350875][ T7115] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 334.376969][ T7115] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 334.403077][ T7115] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.674: Corrupt directory, running e2fsck is recommended [ 334.483965][ T7115] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 334.524066][ T7115] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.674: corrupted in-inode xattr [ 334.574527][ T7115] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.674: couldn't read orphan inode 15 (err -117) [ 334.615080][ T7115] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 334.730375][ T7127] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 334.742004][ T7127] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 334.752468][ T7127] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.674: Corrupt directory, running e2fsck is recommended [ 334.768011][ T7127] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 334.779571][ T7127] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 334.790376][ T7127] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.674: Corrupt directory, running e2fsck is recommended [ 334.900509][ T7115] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 334.912411][ T7115] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 334.922856][ T7115] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.674: Corrupt directory, running e2fsck is recommended [ 334.935816][ T7115] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 3: comm syz.6.674: path /48/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 334.956521][ T7115] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 22: comm syz.6.674: path /48/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0 [ 334.976266][ T7115] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 8: comm syz.6.674: path /48/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 335.146490][ T5514] EXT4-fs (loop6): unmounting filesystem. [ 335.175863][ T7117] loop3: detected capacity change from 0 to 32768 [ 335.342701][ T7117] XFS (loop3): Mounting V5 Filesystem [ 336.398104][ T7117] XFS (loop3): Ending clean mount [ 337.136732][ T4273] XFS (loop3): Unmounting Filesystem [ 343.562848][ T7230] loop6: detected capacity change from 0 to 128 [ 345.877397][ T7246] tipc: Started in network mode [ 345.933824][ T7246] tipc: Node identity 4, cluster identity 4711 [ 345.989347][ T7246] tipc: Node number set to 4 [ 351.624283][ T7309] netlink: 'syz.0.716': attribute type 13 has an invalid length. [ 351.652702][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 351.692778][ T7309] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 351.793267][ T7311] loop3: detected capacity change from 0 to 8 [ 352.002747][ T7317] SQUASHFS error: zlib decompression failed, data probably corrupt [ 352.085618][ T7317] SQUASHFS error: Failed to read block 0x4e8: -5 [ 352.111312][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 352.111396][ T26] audit: type=1800 audit(2000000196.510:186): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.719" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 353.122783][ T26] audit: type=1326 audit(2000000197.520:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.0.720" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 353.233946][ T26] audit: type=1326 audit(2000000197.550:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.0.720" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 353.356111][ T26] audit: type=1326 audit(2000000197.550:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.0.720" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 353.513102][ T26] audit: type=1326 audit(2000000197.550:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.0.720" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 353.987693][ T26] audit: type=1326 audit(2000000197.550:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.0.720" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 354.216066][ T26] audit: type=1326 audit(2000000197.550:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.0.720" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 354.240606][ T26] audit: type=1326 audit(2000000197.550:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.0.720" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 354.354720][ T26] audit: type=1326 audit(2000000197.550:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.0.720" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 354.414940][ T26] audit: type=1326 audit(2000000197.550:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.0.720" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 359.134808][ T7373] netlink: 'syz.0.733': attribute type 9 has an invalid length. [ 361.359073][ T7393] xt_CT: No such helper "netbios-ns" [ 364.573296][ T7431] loop5: detected capacity change from 0 to 2048 [ 364.795971][ T7431] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 364.904329][ T7439] loop3: detected capacity change from 0 to 512 [ 364.949188][ T7439] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 365.706703][ T7439] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 365.789276][ T7431] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.115195][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 367.922217][ T7461] loop3: detected capacity change from 0 to 1024 [ 367.993003][ T7461] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 368.019796][ T5470] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 368.066934][ T5470] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 369.565711][ T7492] netlink: 276 bytes leftover after parsing attributes in process `syz.4.759'. [ 369.624824][ T7492] tipc: Enabling of bearer rejected, failed to enable media [ 373.696483][ T4656] tipc: Left network mode [ 374.247786][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.287338][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.304483][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.318475][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.328298][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 374.340482][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.851895][ T7531] loop6: detected capacity change from 0 to 32768 [ 375.070716][ T7531] XFS (loop6): Mounting V5 Filesystem [ 376.787205][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 376.806126][ T7531] XFS (loop6): log mount failed [ 377.194468][ T7550] chnl_net:caif_netlink_parms(): no params data found [ 377.597162][ T7550] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.629593][ T7550] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.650768][ T7550] device bridge_slave_0 entered promiscuous mode [ 377.700767][ T7596] netlink: 'syz.4.772': attribute type 13 has an invalid length. [ 378.444602][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.450985][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.507980][ T7550] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.538185][ T7550] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.602512][ T7550] device bridge_slave_1 entered promiscuous mode [ 378.817391][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 379.459917][ T7550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.737378][ T7550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.918910][ T7550] team0: Port device team_slave_0 added [ 380.944742][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 381.300908][ T7550] team0: Port device team_slave_1 added [ 381.416271][ T4656] device hsr_slave_0 left promiscuous mode [ 381.423066][ T4656] device hsr_slave_1 left promiscuous mode [ 381.473880][ T4656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.507001][ T4656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.558651][ T4656] device bridge_slave_1 left promiscuous mode [ 381.575930][ T4656] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.586499][ T4656] device bridge_slave_0 left promiscuous mode [ 381.592771][ T4656] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.617297][ T4656] bond2 (unregistering): (slave geneve2): Releasing active interface [ 382.994809][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 383.448199][ T4656] bond2 (unregistering): Released all slaves [ 383.501401][ T4656] bond1 (unregistering): (slave vlan2): Releasing active interface [ 383.544687][ T4656] bond1 (unregistering): Released all slaves [ 384.226546][ T4656] team0 (unregistering): Port device team_slave_1 removed [ 384.284516][ T4656] team0 (unregistering): Port device team_slave_0 removed [ 384.331795][ T4656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.376347][ T4656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.693388][ T4656] bond0 (unregistering): Released all slaves [ 384.799698][ T7550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.807082][ T7550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.833598][ T7550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.845551][ T7661] netlink: 'syz.4.793': attribute type 10 has an invalid length. [ 384.853960][ T7661] device bridge0 left promiscuous mode [ 384.881402][ T7661] device bridge0 entered promiscuous mode [ 384.893152][ T7661] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 384.903841][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.793'. [ 384.915994][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.927012][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.961979][ T7668] bond0: (slave bridge0): Releasing backup interface [ 384.969502][ T7668] device bridge0 left promiscuous mode [ 385.008357][ T7678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.046898][ T7550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.064130][ T7550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.108198][ T7550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.219767][ T7550] device hsr_slave_0 entered promiscuous mode [ 385.242551][ T7550] device hsr_slave_1 entered promiscuous mode [ 385.262446][ T7550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.287747][ T7550] Cannot create hsr debugfs directory [ 386.233269][ T7696] loop3: detected capacity change from 0 to 1024 [ 386.407951][ T7696] hfsplus: request for non-existent node 33423360 in B*Tree [ 386.442384][ T7550] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 386.470645][ T7550] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 386.476520][ T7696] hfsplus: request for non-existent node 33423360 in B*Tree [ 386.527707][ T7550] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 386.555543][ T7704] hfsplus: request for non-existent node 33423360 in B*Tree [ 386.577379][ T7550] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 386.598695][ T7704] hfsplus: request for non-existent node 33423360 in B*Tree [ 386.700205][ T7696] hfsplus: request for non-existent node 33423360 in B*Tree [ 386.710183][ T7696] hfsplus: request for non-existent node 33423360 in B*Tree [ 386.790644][ T7696] hfsplus: request for non-existent node 33423360 in B*Tree [ 386.811724][ T7696] hfsplus: request for non-existent node 33423360 in B*Tree [ 386.870029][ T7704] hfsplus: request for non-existent node 33423360 in B*Tree [ 386.896848][ T7704] hfsplus: request for non-existent node 33423360 in B*Tree [ 386.921029][ T7550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.938466][ T7696] hfsplus: request for non-existent node 33423360 in B*Tree [ 386.965133][ T7696] hfsplus: request for non-existent node 33423360 in B*Tree [ 386.992639][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.010834][ T7713] hfsplus: request for non-existent node 33423360 in B*Tree [ 387.024875][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.035192][ T7713] hfsplus: request for non-existent node 33423360 in B*Tree [ 387.063868][ T7550] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.074375][ T7704] hfsplus: request for non-existent node 33423360 in B*Tree [ 387.083734][ T7704] hfsplus: request for non-existent node 33423360 in B*Tree [ 387.107089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.128684][ T7696] hfsplus: request for non-existent node 33423360 in B*Tree [ 387.138670][ T7696] hfsplus: request for non-existent node 33423360 in B*Tree [ 387.157462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.185659][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.192845][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.215857][ T7696] hfsplus: request for non-existent node 33423360 in B*Tree [ 387.223291][ T7696] hfsplus: request for non-existent node 33423360 in B*Tree [ 387.254272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 387.264139][ T7696] hfsplus: request for non-existent node 33423360 in B*Tree [ 387.295183][ T7696] hfsplus: request for non-existent node 33423360 in B*Tree [ 387.315340][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 387.324283][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 387.343162][ T7696] hfsplus: request for non-existent node 33423360 in B*Tree [ 387.361626][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.368852][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.383454][ T7696] hfsplus: request for non-existent node 33423360 in B*Tree [ 387.423421][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 387.452709][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 387.478962][ T7702] loop6: detected capacity change from 0 to 32768 [ 387.525971][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 387.541277][ T7702] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.800 (7702) [ 387.568472][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 387.628679][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 387.658461][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 387.684076][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 387.729288][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 387.743852][ T7702] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 387.772027][ T7550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 387.789078][ T7702] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 387.817193][ T7702] BTRFS info (device loop6): use zlib compression, level 3 [ 387.826034][ T7550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 387.849930][ T7702] BTRFS info (device loop6): turning on sync discard [ 387.860095][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 387.876519][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 387.876622][ T7702] BTRFS info (device loop6): using free space tree [ 387.907659][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.293195][ T7702] BTRFS info (device loop6): enabling ssd optimizations [ 388.344746][ T4320] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 388.554794][ T4320] usb 4-1: Using ep0 maxpacket: 8 [ 388.561980][ T4320] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.656512][ T4320] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 388.692292][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 388.718967][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 388.740541][ T4320] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.774379][ T7550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.801967][ T4320] usb 4-1: config 0 interface 0 has no altsetting 0 [ 388.859020][ T4320] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 388.928252][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.022316][ T4320] usb 4-1: config 0 descriptor?? [ 389.059488][ T7742] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 389.294996][ T26] kauditd_printk_skb: 66 callbacks suppressed [ 389.295013][ T26] audit: type=1800 audit(2000000233.680:262): pid=7774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.800" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 389.332081][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.361075][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.583121][ T4320] usbhid 4-1:0.0: can't add hid device: -71 [ 389.594990][ T4320] usbhid: probe of 4-1:0.0 failed with error -71 [ 389.643716][ T4320] usb 4-1: USB disconnect, device number 4 [ 389.911390][ T5514] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 390.415077][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 390.437875][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 390.567396][ T7550] device veth0_vlan entered promiscuous mode [ 390.589061][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 390.617033][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 390.676301][ T7550] device veth1_vlan entered promiscuous mode [ 390.717291][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 390.751071][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 390.777924][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 391.014038][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 391.063960][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 391.076431][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 391.094091][ T7550] device veth0_macvtap entered promiscuous mode [ 391.363653][ T7550] device veth1_macvtap entered promiscuous mode [ 392.280798][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.451808][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.573382][ T7550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.733301][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.824897][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.113769][ T7550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.178197][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.816'. [ 393.835041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 393.843490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 393.964296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 394.586923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 394.596209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 394.605403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 394.618308][ T7550] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.627192][ T7550] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.014666][ T7550] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.078925][ T7550] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.727721][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.763140][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.839423][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 397.115466][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.761230][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.986625][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 400.458912][ T7880] loop7: detected capacity change from 0 to 512 [ 400.718467][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 401.829085][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 402.193781][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 402.300364][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 402.375688][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 402.480970][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 402.532164][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 402.586999][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 402.844838][ T7896] device syzkaller0 entered promiscuous mode [ 402.911860][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'. [ 403.656573][ T7916] xt_CT: No such helper "pptp" [ 403.910073][ T7910] bond0: (slave bond_slave_1): Releasing backup interface [ 410.227300][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 411.599769][ T7969] sctp: failed to load transform for md5: -2 [ 411.606382][ T7974] sctp: failed to load transform for md5: -2 [ 411.613874][ T7980] sctp: failed to load transform for md5: -2 [ 411.620370][ T7982] sctp: failed to load transform for md5: -2 [ 411.819169][ T8011] mmap: syz.7.850 (8011) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 416.519878][ T8058] device hsr0 entered promiscuous mode [ 417.836817][ T8084] loop6: detected capacity change from 0 to 512 [ 417.930685][ T8087] loop7: detected capacity change from 0 to 512 [ 418.001670][ T8084] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 418.028444][ T8087] EXT4-fs: Ignoring removed i_version option [ 418.708652][ T8084] EXT4-fs error (device loop6): ext4_init_orphan_info:621: comm syz.6.852: orphan file block 0: bad magic [ 418.729502][ T8087] EXT4-fs: Ignoring removed oldalloc option [ 418.785429][ T8084] EXT4-fs (loop6): mount failed [ 418.902326][ T8087] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 418.954015][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.852'. [ 419.716056][ T8114] loop6: detected capacity change from 0 to 256 [ 420.753285][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.6.865'. [ 420.788547][ T8114] netlink: 104 bytes leftover after parsing attributes in process `syz.6.865'. [ 420.891098][ T8114] netlink: 104 bytes leftover after parsing attributes in process `syz.6.865'. [ 420.926512][ T7550] EXT4-fs (loop7): unmounting filesystem. [ 421.155689][ T8134] device syzkaller0 entered promiscuous mode [ 421.984966][ T3600] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 423.066432][ T3600] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 423.096137][ T3600] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.154636][ T3600] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 423.181590][ T3600] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.256521][ T3600] usb 8-1: config 0 descriptor?? [ 423.401667][ T8161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.877'. [ 423.717424][ T3600] isku 0003:1E7D:319C.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.7-1/input0 [ 423.879593][ T3600] isku 0003:1E7D:319C.0001: couldn't init struct isku_device [ 423.897479][ T3600] isku 0003:1E7D:319C.0001: couldn't install keyboard [ 423.941020][ T3600] isku: probe of 0003:1E7D:319C.0001 failed with error -71 [ 424.030759][ T3600] usb 8-1: USB disconnect, device number 2 [ 424.262452][ T8168] loop3: detected capacity change from 0 to 32768 [ 424.317592][ T8172] trusted_key: encrypted_key: insufficient parameters specified [ 424.360600][ T8168] XFS (loop3): Mounting V5 Filesystem [ 424.475224][ T8168] XFS (loop3): Ending clean mount [ 424.487183][ T8168] XFS (loop3): Quotacheck needed: Please wait. [ 424.542309][ T8168] XFS (loop3): Quotacheck: Done. [ 425.232470][ T8170] fido_id[8170]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 425.251555][ T4273] XFS (loop3): Unmounting Filesystem [ 432.126019][ T8251] device syzkaller0 entered promiscuous mode [ 435.995447][ T8287] capability: warning: `syz.7.902' uses deprecated v2 capabilities in a way that may be insecure [ 437.613823][ T8304] loop6: detected capacity change from 0 to 32768 [ 437.984296][ T8304] XFS (loop6): Mounting V5 Filesystem [ 438.945690][ T8304] XFS (loop6): Ending clean mount [ 438.955294][ T8304] XFS (loop6): Quotacheck needed: Please wait. [ 439.048986][ T8304] XFS (loop6): Quotacheck: Done. [ 439.879382][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.886059][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.912737][ T5514] XFS (loop6): Unmounting Filesystem [ 440.457190][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'. [ 440.961268][ T8323] bond0: (slave bond_slave_0): Releasing backup interface [ 441.048516][ T8323] team0: Port device team_slave_0 removed [ 441.132120][ T8323] team0: Port device team_slave_1 removed [ 441.159890][ T8323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.207884][ T8323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.255554][ T8323] bond1: (slave veth3): Releasing backup interface [ 441.310033][ T8328] team0: Port device xfrm0 added [ 441.317653][ T8337] fuse: Unknown parameter 'group_i' [ 441.403388][ T8335] loop3: detected capacity change from 0 to 4096 [ 441.454332][ T8335] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 442.326778][ T8335] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 442.603313][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 445.072126][ T8386] loop7: detected capacity change from 0 to 32768 [ 445.182899][ T8386] XFS (loop7): Mounting V5 Filesystem [ 445.277113][ T8386] XFS (loop7): Ending clean mount [ 445.288258][ T8386] XFS (loop7): Quotacheck needed: Please wait. [ 445.370600][ T8386] XFS (loop7): Quotacheck: Done. [ 445.618327][ T8382] sctp: failed to load transform for md5: -2 [ 445.618717][ T8387] sctp: failed to load transform for md5: -2 [ 445.630920][ T8388] sctp: failed to load transform for md5: -2 [ 445.637980][ T8403] sctp: failed to load transform for md5: -2 [ 445.681541][ T8394] sctp: failed to load transform for md5: -2 [ 446.233146][ T7550] XFS (loop7): Unmounting Filesystem [ 446.462093][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.924'. [ 446.571204][ T8437] device macvtap1 entered promiscuous mode [ 446.630537][ T8437] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 448.138238][ T8473] loop6: detected capacity change from 0 to 256 [ 448.209700][ T8475] loop7: detected capacity change from 0 to 16 [ 448.277802][ T8475] erofs: (device loop7): mounted with root inode @ nid 36. [ 449.148401][ T8480] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 449.159285][ T8480] FAT-fs (loop6): Filesystem has been set read-only [ 449.166581][ T8480] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 449.177058][ T8480] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 449.194471][ T8480] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 449.429661][ T26] audit: type=1800 audit(2000000293.600:263): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.932" name="file1" dev="loop6" ino=1048650 res=0 errno=0 [ 450.068914][ T8485] netlink: 48 bytes leftover after parsing attributes in process `syz.7.934'. [ 450.155525][ T8485] netlink: 'syz.7.934': attribute type 4 has an invalid length. [ 450.265729][ T8485] netlink: 11575 bytes leftover after parsing attributes in process `syz.7.934'. [ 451.086118][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.7.938'. [ 451.722204][ T8509] device syzkaller0 entered promiscuous mode [ 454.517474][ T8543] Cannot find add_set index 0 as target [ 455.472514][ T26] audit: type=1326 audit(2000000299.870:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.0.947" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 455.559156][ T26] audit: type=1326 audit(2000000299.910:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.0.947" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 455.641485][ T26] audit: type=1326 audit(2000000299.910:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.0.947" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 455.715013][ T26] audit: type=1326 audit(2000000299.910:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.0.947" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 456.045594][ T26] audit: type=1326 audit(2000000299.910:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.0.947" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 456.077539][ T26] audit: type=1326 audit(2000000299.910:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.0.947" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 456.257533][ T26] audit: type=1326 audit(2000000299.910:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.0.947" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 456.392606][ T26] audit: type=1326 audit(2000000299.910:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.0.947" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 456.479419][ T26] audit: type=1326 audit(2000000299.910:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.0.947" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 457.634645][ T26] audit: type=1326 audit(2000000299.910:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.0.947" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8759e159 code=0x7ffc0000 [ 457.856098][ T8576] tipc: Started in network mode [ 458.310995][ T8576] tipc: Node identity da79351bbd83, cluster identity 4711 [ 458.769557][ T8576] tipc: Enabled bearer , priority 0 [ 459.144970][ T8581] device syzkaller0 entered promiscuous mode [ 459.504796][ T8581] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 459.918076][ T8583] tipc: Resetting bearer [ 459.947385][ T22] tipc: Node number set to 1744450843 [ 459.982759][ T8574] tipc: Resetting bearer [ 460.087994][ T8593] xt_CT: No such helper "pptp" [ 460.295273][ T8574] tipc: Disabling bearer [ 464.553601][ T8632] PKCS8: Unsupported PKCS#8 version [ 467.858859][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.7.972'. [ 471.243496][ T8696] netlink: 'syz.3.990': attribute type 1 has an invalid length. [ 471.289593][ T8696] 8021q: adding VLAN 0 to HW filter on device bond2 [ 471.367913][ T8696] device gretap1 entered promiscuous mode [ 471.435297][ T8696] bond2: (slave gretap1): making interface the new active one [ 471.622577][ T8696] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 471.682877][ T8700] device macvlan2 entered promiscuous mode [ 471.701318][ T8708] Cannot find add_set index 0 as target [ 471.779509][ T8700] device bond2 entered promiscuous mode [ 472.505543][ T8700] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 472.528968][ T8700] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 472.565485][ T8700] device bond2 left promiscuous mode [ 472.856887][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 475.995629][ T8755] binder: 8754:8755 ioctl c00c620f ffffffff81000000 returned -14 [ 476.389179][ T8766] netlink: 44 bytes leftover after parsing attributes in process `syz.0.992'. [ 478.434245][ T8785] loop3: detected capacity change from 0 to 128 [ 478.475036][ T8785] EXT4-fs (loop3): Test dummy encryption mode enabled [ 478.600765][ T8785] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 478.707764][ T8791] Cannot find add_set index 0 as target [ 478.778425][ T8785] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 480.457227][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 481.142640][ T8808] binder: 8807:8808 unknown command 1074553619 [ 481.179727][ T8808] binder: 8807:8808 ioctl c0306201 200000000040 returned -22 [ 485.951413][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 485.951430][ T26] audit: type=1800 audit(2000000330.350:312): pid=8864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1011" name="memory_backed" dev="configfs" ino=47369 res=0 errno=0 [ 486.114744][ T26] audit: type=1800 audit(2000000330.400:313): pid=8864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1011" name="zone_nr_conv" dev="configfs" ino=47370 res=0 errno=0 [ 486.165538][ T26] audit: type=1800 audit(2000000330.400:314): pid=8864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1011" name="power" dev="configfs" ino=47371 res=0 errno=0 [ 486.253300][ T8864] null_blk: disk nullb1 created [ 486.824854][ T8882] xt_nat: multiple ranges no longer supported [ 488.087418][ T8900] loop7: detected capacity change from 0 to 256 [ 488.096420][ T8900] exfat: Deprecated parameter 'namecase' [ 488.108758][ T8900] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 488.148197][ T8900] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xd31fc67a, utbl_chksum : 0xe619d30d) [ 489.284493][ T8909] futex_wake_op: syz.4.1023 tries to shift op by 144; fix this program [ 490.088292][ T8919] netlink: 'syz.7.1024': attribute type 1 has an invalid length. [ 491.121266][ T8922] bond1: (slave veth3): Enslaving as an active interface with a down link [ 491.182540][ T8925] bond1: (slave veth5): Enslaving as an active interface with a down link [ 491.258172][ T26] audit: type=1326 audit(2000000335.660:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.0.1025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed8759e159 code=0x0 [ 491.533475][ T8938] device syzkaller0 entered promiscuous mode [ 491.553373][ T8938] 0: reclassify loop, rule prio 0, protocol 700 [ 491.720325][ T8945] loop6: detected capacity change from 0 to 164 [ 492.139081][ T8953] rock: directory entry would overflow storage [ 492.146201][ T8953] rock: sig=0x4f50, size=4, remaining=3 [ 492.151842][ T8953] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 492.375741][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'. [ 494.245039][ T26] audit: type=1400 audit(2000000338.600:316): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=8966 comm="syz.6.1037" name="p" offset=33 [ 498.264615][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 498.596934][ T9034] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1051'. [ 499.390817][ T9036] overlayfs: failed to clone upperpath [ 500.964628][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 501.298947][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.305507][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.345205][ T9068] IPVS: Error connecting to the multicast addr [ 501.395107][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 501.448591][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.566732][ T9072] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 501.651580][ T9076] netlink: 'syz.7.1060': attribute type 9 has an invalid length. [ 502.704401][ T9086] loop3: detected capacity change from 0 to 1024 [ 503.260933][ T9093] vivid-004: ================= START STATUS ================= [ 503.270705][ T9093] vivid-004: Radio HW Seek Mode: Bounded [ 503.277198][ T9093] vivid-004: Radio Programmable HW Seek: false [ 503.283654][ T9093] vivid-004: RDS Rx I/O Mode: Block I/O [ 503.289444][ T9093] vivid-004: Generate RBDS Instead of RDS: false [ 503.296045][ T9093] vivid-004: RDS Reception: true [ 503.301255][ T9093] vivid-004: RDS Program Type: 0 inactive [ 503.307322][ T9093] vivid-004: RDS PS Name: inactive [ 503.312956][ T9093] vivid-004: RDS Radio Text: inactive [ 503.318743][ T9093] vivid-004: RDS Traffic Announcement: false inactive [ 503.328283][ T9093] vivid-004: RDS Traffic Program: false inactive [ 503.336245][ T9093] vivid-004: RDS Music: false inactive [ 503.342060][ T9093] vivid-004: ================== END STATUS ================== [ 503.367376][ T9086] hfsplus: unable to parse mount options [ 504.432460][ T9096] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 505.261884][ T9123] IPVS: Error connecting to the multicast addr [ 506.661190][ T4286] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 506.670020][ T4286] Bluetooth: hci1: Injecting HCI hardware error event [ 506.680859][ T4288] Bluetooth: hci1: hardware error 0x00 [ 507.792031][ T9148] syz.6.1080: attempt to access beyond end of device [ 507.792031][ T9148] nbd6: rw=0, sector=1, nr_sectors = 1 limit=0 [ 507.815150][ T9148] qnx4: unable to read the superblock [ 508.815706][ T4288] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 509.121687][ T9161] tipc: Started in network mode [ 509.126696][ T9161] tipc: Node identity 7e7c666ae4b5, cluster identity 4711 [ 509.154351][ T9161] tipc: Enabled bearer , priority 0 [ 509.299726][ T9161] syzkaller0: mtu less than device minimum [ 509.357979][ T9166] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.367386][ T9166] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.376247][ T9166] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.385110][ T9166] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.401994][ T9166] device vxlan1 entered promiscuous mode [ 509.869681][ T9166] team0: Device vxlan1 is of different type [ 510.145626][ T9166] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.154822][ T9166] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.163755][ T9166] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.172825][ T9166] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.800537][ T9179] binder: 9177:9179 ioctl c0306201 200000000080 returned -14 [ 511.855421][ T3600] tipc: Node number set to 2596890218 [ 515.936872][ T9209] loop3: detected capacity change from 0 to 4096 [ 516.087666][ T9209] ntfs3: loop3: failed to replay log file. Can't mount rw! [ 516.176370][ T7966] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 522.080935][ T9261] vivid-000: kernel_thread() failed [ 522.836601][ T9269] netlink: 'syz.6.1105': attribute type 1 has an invalid length. [ 523.458406][ T9269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 524.868738][ T9276] device gretap1 entered promiscuous mode [ 524.898761][ T9276] bond1: (slave gretap1): making interface the new active one [ 524.964720][ T9276] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 525.015764][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 525.083873][ T9280] device macvlan2 entered promiscuous mode [ 525.122735][ T9280] device bond1 entered promiscuous mode [ 525.722419][ T9280] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 525.953008][ T9280] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 525.995432][ T9280] device bond1 left promiscuous mode [ 527.123164][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1115'. [ 528.673490][ T9317] loop7: detected capacity change from 0 to 1024 [ 528.750733][ T9317] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 529.543487][ T7550] EXT4-fs (loop7): unmounting filesystem. [ 530.827720][ T9331] overlayfs: failed to clone lowerpath [ 531.315728][ T9346] sctp: failed to load transform for md5: -2 [ 531.321953][ T9356] sctp: failed to load transform for md5: -4 [ 531.328222][ T9359] sctp: failed to load transform for md5: -4 [ 531.334690][ T9360] sctp: failed to load transform for md5: -4 [ 531.341128][ T9351] sctp: failed to load transform for md5: -2 [ 537.296884][ T26] audit: type=1326 audit(2000000381.700:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.3.1134" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe61319e159 code=0x0 [ 538.695316][ T9433] loop7: detected capacity change from 0 to 128 [ 540.937788][ T9465] futex_wake_op: syz.0.1142 tries to shift op by 144; fix this program [ 546.369328][ T9511] kvm [9510]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 546.397313][ T9511] kvm [9510]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 546.437040][ T9511] kvm [9510]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 546.479772][ T9511] kvm [9510]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 546.499209][ T9511] kvm [9510]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 546.515299][ T9511] kvm [9510]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 546.524063][ T9511] kvm [9510]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 546.637798][ T9511] kvm [9510]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 546.682241][ T9511] kvm [9510]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 546.727810][ T9511] kvm [9510]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 547.566496][ T9522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.250079][ T9535] futex_wake_op: syz.7.1160 tries to shift op by 144; fix this program [ 553.218145][ T9585] o2cb: This node has not been configured. [ 553.224435][ T9585] o2cb: Cluster check failed. Fix errors before retrying. [ 553.231966][ T9585] (syz.7.1168,9585,1):user_dlm_register:674 ERROR: status = -22 [ 553.239798][ T9585] (syz.7.1168,9585,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 554.327194][ T9592] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9592] [ 556.145632][ T9598] tipc: Enabling of bearer rejected, already enabled [ 556.175203][ T9598] sch_tbf: burst 173 is lower than device syzkaller0 mtu (65589) ! [ 556.244793][ T9599] syzkaller0: mtu less than device minimum [ 558.830890][ T9620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1177'. [ 558.889539][ T9620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1177'. [ 562.738277][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.744715][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.774685][ T4359] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 563.236197][ T4359] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 563.255960][ T4359] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 563.288136][ T4359] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 563.307521][ T4359] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.344791][ T4359] usb 8-1: Product: syz [ 563.352315][ T4359] usb 8-1: Manufacturer: syz [ 564.146784][ T4359] usb 8-1: SerialNumber: syz [ 564.173472][ T4359] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 564.218103][ T4359] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 564.248054][ T4359] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 566.283782][ T9691] bond0 speed is unknown, defaulting to 1000 [ 566.291433][ T9691] bond0 speed is unknown, defaulting to 1000 [ 566.308007][ T9691] bond0 speed is unknown, defaulting to 1000 [ 566.340649][ T9691] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 566.373564][ T9691] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 566.459680][ T9691] bond0 speed is unknown, defaulting to 1000 [ 566.472412][ T9691] bond0 speed is unknown, defaulting to 1000 [ 566.484382][ T9691] bond0 speed is unknown, defaulting to 1000 [ 566.497085][ T9691] bond0 speed is unknown, defaulting to 1000 [ 566.509427][ T9691] bond0 speed is unknown, defaulting to 1000 [ 569.056233][ T9677] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 569.081854][ T9677] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 569.126183][ T4359] usb 8-1: USB disconnect, device number 3 [ 569.224867][ T4359] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 569.309273][ T4359] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 569.346880][ T4359] ti_usb_3410_5052 8-1:2.0: device disconnected [ 570.136063][ T9751] rnbd_client L600: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 570.175893][ T9751] rtrs_client L2076: : Failed to resolve address, err: -19 [ 570.191248][ T9751] rtrs_client L2619: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 570.337210][ T4288] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 570.346825][ T4288] Bluetooth: hci3: Injecting HCI hardware error event [ 570.364914][ T4289] Bluetooth: hci3: hardware error 0x00 [ 572.510314][ T9762] bond0 speed is unknown, defaulting to 1000 [ 572.749052][ T4289] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 574.654271][ T9780] loop3: detected capacity change from 0 to 512 [ 574.674050][ T9780] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 574.724685][ T9780] EXT4-fs (loop3): 1 truncate cleaned up [ 574.736623][ T9780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 575.641667][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 577.546869][ T9824] device syzkaller0 entered promiscuous mode [ 577.977738][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'. [ 579.093577][ T9840] loop7: detected capacity change from 0 to 512 [ 579.157533][ T9840] EXT4-fs error (device loop7): ext4_quota_enable:7049: inode #4: comm syz.7.1226: casefold flag without casefold feature [ 579.198915][ T9840] EXT4-fs (loop7): Remounting filesystem read-only [ 579.266001][ T9840] EXT4-fs error (device loop7): ext4_quota_enable:7052: comm syz.7.1226: Bad quota inode: 4, type: 1 [ 579.516273][ T9840] EXT4-fs (loop7): Remounting filesystem read-only [ 579.649197][ T9840] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 580.009523][ T9840] EXT4-fs (loop7): mount failed [ 580.813085][ T9863] overlayfs: failed to clone upperpath [ 581.271327][ T9859] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 581.713387][ T9873] tipc: Enabling of bearer rejected, failed to enable media [ 588.735339][ T9954] nvme_fcloop: unknown parameter or missing value 'r' [ 592.895031][T10002] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 594.994403][T10031] loop6: detected capacity change from 0 to 2048 [ 595.064575][T10042] nftables ruleset with unbound set [ 596.266296][T10079] loop7: detected capacity change from 0 to 1024 [ 596.832275][T10031] NILFS (loop6): invalid segment: Magic number mismatch [ 596.879281][T10031] NILFS (loop6): trying rollback from an earlier position [ 597.128312][T10031] NILFS (loop6): recovery complete [ 597.204884][T10031] NILFS (loop6): error -4 creating segctord thread [ 597.520738][T10124] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 599.484496][ T4288] Bluetooth: hci2: command 0x201b tx timeout [ 608.165757][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1290'. [ 609.345403][T10194] tipc: Enabling of bearer rejected, failed to enable media [ 609.711185][T10206] loop6: detected capacity change from 0 to 512 [ 610.534064][T10206] EXT4-fs error (device loop6): ext4_quota_enable:7049: inode #4: comm syz.6.1284: casefold flag without casefold feature [ 610.557280][T10206] EXT4-fs (loop6): Remounting filesystem read-only [ 610.568108][T10206] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.1284: Bad quota inode: 4, type: 1 [ 610.589522][T10206] EXT4-fs (loop6): Remounting filesystem read-only [ 610.599627][T10206] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 610.615880][T10206] EXT4-fs (loop6): mount failed [ 611.582833][T10217] device bond_slave_0 entered promiscuous mode [ 611.589181][T10217] device bond_slave_1 entered promiscuous mode [ 611.639985][T10217] device vlan2 entered promiscuous mode [ 611.661501][T10217] device bond0 entered promiscuous mode [ 611.722697][T10221] netlink: 'syz.0.1300': attribute type 4 has an invalid length. [ 615.999809][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1319'. [ 624.178168][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.184587][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.048194][T10329] syz.3.1328: attempt to access beyond end of device [ 626.048194][T10329] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 626.061181][T10329] qnx4: unable to read the superblock [ 626.200571][T10331] syz.7.1329 (10331): attempted to duplicate a private mapping with mremap. This is not supported. [ 628.273993][ T26] audit: type=1800 audit(4147484120.673:318): pid=10338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1332" name="bus" dev="ramfs" ino=51230 res=0 errno=0 [ 630.914955][T10371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1331'. [ 632.435623][T10385] jffs2: notice: (10385) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 632.876875][T10390] lo: Caught tx_queue_len zero misconfig [ 633.020001][T10385] jffs2 filesystem being mounted at /259/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 634.093898][T10402] MPTCP: kernel_bind error, err=-99 [ 636.870693][T10418] syz.7.1350: attempt to access beyond end of device [ 636.870693][T10418] nbd7: rw=0, sector=1, nr_sectors = 1 limit=0 [ 636.890394][T10418] qnx4: unable to read the superblock [ 646.424300][T10517] netlink: 'syz.0.1378': attribute type 1 has an invalid length. [ 649.958023][T10522] bond1: (slave bridge1): making interface the new active one [ 649.979824][T10522] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 650.991433][T10542] loop7: detected capacity change from 0 to 128 [ 651.103995][T10542] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 651.133753][T10542] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 651.832606][ T7550] EXT4-fs (loop7): unmounting filesystem. [ 655.740077][T10582] netlink: 'syz.6.1397': attribute type 1 has an invalid length. [ 656.131975][T10582] bond2: (slave gretap2): Enslaving as a backup interface with an up link [ 656.144883][T10587] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1397'. [ 656.217257][T10587] 8021q: adding VLAN 0 to HW filter on device bond2 [ 656.224172][T10088] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 656.238677][T10100] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 656.554560][T10100] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 656.771152][T10596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.782001][T10596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.903733][T10596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.051535][T10596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.926725][T10656] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 663.089016][T10656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 663.102055][T10657] device gretap1 entered promiscuous mode [ 663.165747][T10657] bond2: (slave gretap1): making interface the new active one [ 663.319513][T10657] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 663.584233][T10659] device macvlan2 entered promiscuous mode [ 663.807137][T10659] device bond2 entered promiscuous mode [ 663.998026][T10659] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 664.006568][T10659] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 664.035281][T10659] device bond2 left promiscuous mode [ 664.154608][T10088] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 669.966076][T10718] virtio-fs: tag not found [ 671.508650][ T26] audit: type=1804 audit(4147484163.913:319): pid=10735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1431" name="bus" dev="ramfs" ino=51654 res=1 errno=0 [ 672.163191][T10737] syz.0.1430 (10737) used greatest stack depth: 16864 bytes left [ 672.227165][ T26] audit: type=1804 audit(4147484163.913:320): pid=10735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1431" name="bus" dev="ramfs" ino=51654 res=1 errno=0 [ 672.398309][T10732] syz.7.1420 (10732): drop_caches: 2 [ 672.767839][T10747] loop3: detected capacity change from 0 to 128 [ 673.205586][T10747] FAT-fs (loop3): Unrecognized mount option "gid=¡¾¡´Çu$Uô-±Fò’ÈJm® "ªù [ 673.205586][T10747] ÊnW ¤ÞÁ# ϲ°–غ^î`¾ÒÚFéGkQäðñ" or missing value [ 673.425006][ T7793] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 673.725933][ T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 673.756869][ T7793] usb 8-1: config 0 has no interfaces? [ 673.762417][ T7793] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 674.486485][ T7793] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.505427][ T7793] usb 8-1: config 0 descriptor?? [ 674.544046][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 674.555573][ T26] audit: type=1326 audit(4147484166.943:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.4.1442" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428499e159 code=0x7ffc0000 [ 674.583929][ T26] audit: type=1326 audit(4147484166.963:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.4.1442" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428499e159 code=0x7ffc0000 [ 674.590087][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 674.617541][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 674.626595][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 674.635624][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 674.649262][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 674.656977][ T22] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.694642][ T26] audit: type=1326 audit(4147484166.983:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.4.1442" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428499e159 code=0x7ffc0000 [ 674.770707][T10748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.831982][ T22] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.844157][ T22] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 674.857127][ T22] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 674.866914][ T22] usb 4-1: Product: syz [ 674.871125][ T22] usb 4-1: Manufacturer: syz [ 674.918563][T10748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.931665][ T22] hub 4-1:4.0: USB hub found [ 674.936735][ T26] audit: type=1326 audit(4147484166.983:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.4.1442" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f428499e159 code=0x7ffc0000 [ 674.963447][T10778] overlayfs: failed to clone lowerpath [ 674.969802][T10780] tipc: New replicast peer: 172.20.20.187 [ 674.980852][T10780] tipc: Enabled bearer , priority 10 [ 675.001350][ T4317] usb 8-1: USB disconnect, device number 4 [ 675.060614][ T26] audit: type=1326 audit(4147484166.983:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.4.1442" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428499e159 code=0x7ffc0000 [ 675.093584][ T26] audit: type=1326 audit(4147484166.983:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.4.1442" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428499e159 code=0x7ffc0000 [ 675.125557][ T26] audit: type=1326 audit(4147484166.983:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.4.1442" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428499e159 code=0x7ffc0000 [ 675.357880][ T26] audit: type=1326 audit(4147484166.983:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.4.1442" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428499e159 code=0x7ffc0000 [ 675.361298][ T22] hub 4-1:4.0: 2 ports detected [ 675.755170][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'. [ 675.768195][T10786] device erspan1 entered promiscuous mode [ 676.078288][ T22] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 676.100977][ T22] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 676.156252][ T22] usb 4-1: USB disconnect, device number 5 [ 678.458490][ T4317] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 679.189929][T10816] netlink: 'syz.4.1455': attribute type 10 has an invalid length. [ 679.267834][T10816] device dummy0 left promiscuous mode [ 680.164248][T10816] device dummy0 entered promiscuous mode [ 680.178731][T10816] team0: Device dummy0 is of different type [ 681.527784][T10848] loop3: detected capacity change from 0 to 512 [ 681.788539][T10848] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 681.806036][T10848] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 682.621092][T10857] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 682.670147][T10857] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 682.926581][T10863] netlink: 'syz.6.1463': attribute type 1 has an invalid length. [ 682.971949][T10863] 8021q: adding VLAN 0 to HW filter on device bond3 [ 683.013757][T10863] device macvlan2 entered promiscuous mode [ 683.878990][T10863] device bond3 entered promiscuous mode [ 683.885765][T10863] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 683.905552][T10863] device bond3 left promiscuous mode [ 683.998866][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 685.947457][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.953849][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.746919][T10919] netlink: 'syz.7.1478': attribute type 1 has an invalid length. [ 691.815398][T10919] 8021q: adding VLAN 0 to HW filter on device bond2 [ 691.855417][T10921] device gretap1 entered promiscuous mode [ 691.908112][T10921] bond2: (slave gretap1): making interface the new active one [ 692.860583][T10921] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 692.895105][T10929] overlayfs: failed to clone upperpath [ 692.911266][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 692.956571][T10919] device macvlan2 entered promiscuous mode [ 692.963679][T10919] device bond2 entered promiscuous mode [ 692.976954][T10919] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 692.998068][T10919] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 693.051564][T10919] device bond2 left promiscuous mode [ 693.985991][T10943] tipc: Started in network mode [ 693.997040][T10943] tipc: Node identity d2b59f52c5a1, cluster identity 4711 [ 694.198818][T10943] tipc: Enabled bearer , priority 0 [ 694.403569][T10945] device syzkaller0 entered promiscuous mode [ 694.549858][T10952] tipc: Resetting bearer [ 694.630761][T10939] tipc: Resetting bearer [ 695.707147][T10939] tipc: Disabling bearer [ 697.459744][ T3600] tipc: Node number set to 387227474 [ 699.871642][T10983] loop7: detected capacity change from 0 to 32768 [ 699.942996][T10983] XFS (loop7): Mounting V5 Filesystem [ 700.002872][T10983] XFS (loop7): Ending clean mount [ 700.021785][T10983] XFS (loop7): Quotacheck needed: Please wait. [ 700.084163][T10983] XFS (loop7): Quotacheck: Done. [ 700.783961][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 700.783978][ T26] audit: type=1800 audit(4147484193.033:387): pid=11004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1492" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=4429 res=0 errno=0 [ 700.882654][T11008] netlink: 'syz.0.1493': attribute type 1 has an invalid length. [ 701.677667][ T7550] XFS (loop7): Unmounting Filesystem [ 701.711745][T11008] 8021q: adding VLAN 0 to HW filter on device bond2 [ 701.723525][T11001] kvm_pr_unimpl_wrmsr: 54 callbacks suppressed [ 701.723617][T11001] kvm [10998]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 701.742703][T11009] device gretap1 entered promiscuous mode [ 701.767968][T11009] bond2: (slave gretap1): making interface the new active one [ 701.776948][T11009] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 701.792570][T11001] kvm [10998]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 701.800896][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 701.832477][T11011] device macvlan2 entered promiscuous mode [ 701.859439][T11011] device bond2 entered promiscuous mode [ 701.878992][T11001] kvm [10998]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 701.902389][T11011] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 701.918275][T11011] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 702.008738][T11011] device bond2 left promiscuous mode [ 703.504447][ T4317] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 703.720174][ T4317] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.765702][ T4317] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 704.039244][ T4317] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 704.074415][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.161425][ T4317] usb 4-1: config 0 descriptor?? [ 704.190617][ T4317] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 704.280493][T11032] tipc: Enabling of bearer rejected, failed to enable media [ 704.477689][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1500'. [ 704.507660][ T3600] usb 4-1: USB disconnect, device number 6 [ 711.949561][T11112] futex_wake_op: syz.7.1521 tries to shift op by 144; fix this program [ 713.184562][ T3600] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 713.399389][ T3600] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.553542][ T3600] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 713.923766][ T3600] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 713.952153][T11129] overlayfs: failed to clone upperpath [ 713.970470][ T3600] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.175149][ T3600] usb 8-1: config 0 descriptor?? [ 714.192771][ T3600] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 714.768908][T11137] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 714.824703][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1522'. [ 714.853990][T11120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.966327][T11120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.979059][T11120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.991651][T11120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.512274][T11157] fuse: Bad value for 'group_id' [ 717.576574][T11159] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 717.618096][ T7795] usb 8-1: USB disconnect, device number 6 [ 719.906270][ T26] audit: type=1326 audit(4147484212.303:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.0.1537" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed8759e159 code=0x0 [ 721.167470][T11179] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 722.329893][T11199] loop3: detected capacity change from 0 to 128 [ 722.352401][T11199] vfat filesystem being mounted at /290/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 723.394797][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1547'. [ 723.403805][T11214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.412866][T11214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.295884][ T26] audit: type=1326 audit(4147484222.693:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.6.1558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fa099e159 code=0x0 [ 730.753535][T11254] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 734.160649][T11288] jffs2: notice: (11288) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 734.229516][T11288] jffs2 filesystem being mounted at /228/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 734.465101][T11285] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 736.938471][T11317] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 744.587399][T11440] netlink: 'syz.4.1590': attribute type 4 has an invalid length. [ 747.435479][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.441949][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.495467][T11473] device syzkaller0 entered promiscuous mode [ 753.319803][T11545] o2cb: This node has not been configured. [ 753.325810][T11545] o2cb: Cluster check failed. Fix errors before retrying. [ 753.333086][T11545] (syz.3.1616,11545,1):user_dlm_register:674 ERROR: status = -22 [ 753.340957][T11545] (syz.3.1616,11545,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 754.149357][T11547] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 756.731816][T11561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.056711][T10108] tipc: Disabling bearer [ 759.070598][T10108] tipc: Left network mode [ 763.671850][T11652] ip_tables: iptables: counters copy to user failed while replacing table [ 765.831412][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 765.841746][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 765.850056][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 765.862259][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 765.870199][T10108] bond2: (slave gretap1): Releasing active interface [ 765.879968][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 765.887469][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 766.118773][T11669] bond0 speed is unknown, defaulting to 1000 [ 767.466622][T11691] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 768.203955][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 770.268644][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 770.665845][T11717] overlayfs: failed to clone upperpath [ 772.770183][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 774.814478][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 774.878046][T11746] loop3: detected capacity change from 0 to 512 [ 774.945129][T11746] EXT4-fs (loop3): Test dummy encryption mode enabled [ 774.956326][T11746] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 775.036103][T11746] EXT4-fs (loop3): 1 truncate cleaned up [ 775.058123][T11746] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 775.199596][T11709] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.799421][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 776.944298][T11758] loop3: detected capacity change from 0 to 512 [ 777.010232][T11758] EXT4-fs error (device loop3): ext4_quota_enable:7049: inode #4: comm syz.3.1659: casefold flag without casefold feature [ 777.033493][T11758] EXT4-fs (loop3): Remounting filesystem read-only [ 777.043461][T11758] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.1659: Bad quota inode: 4, type: 1 [ 777.077617][T11758] EXT4-fs (loop3): Remounting filesystem read-only [ 777.084199][T11758] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 777.140796][T11758] EXT4-fs (loop3): mount failed [ 778.602465][T11766] sctp: failed to load transform for md5: -2 [ 779.297126][T11784] overlayfs: failed to clone upperpath [ 781.263346][T11709] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.272420][T11709] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.281608][T11709] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.291086][T11709] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.590795][T11778] device syzkaller0 left promiscuous mode [ 781.611453][T10108] device hsr_slave_0 left promiscuous mode [ 781.621947][T10108] device hsr_slave_1 left promiscuous mode [ 781.630866][T10108] device bridge_slave_1 left promiscuous mode [ 781.637495][T10108] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.647953][T10108] device bridge_slave_0 left promiscuous mode [ 781.654615][T10108] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.287828][T10108] bond2 (unregistering): Released all slaves [ 784.345673][T10108] bond1 (unregistering): (slave bridge1): Releasing active interface [ 784.435657][T10108] bond1 (unregistering): Released all slaves [ 788.022983][T10108] team0 (unregistering): Port device team_slave_1 removed [ 790.636743][T10108] team0 (unregistering): Port device team_slave_0 removed [ 790.848245][T10108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.005705][T10108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.661566][T10108] bond0 (unregistering): Released all slaves [ 797.008509][T11669] chnl_net:caif_netlink_parms(): no params data found [ 797.037636][T11862] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1682'. [ 797.806433][T11669] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.892893][T11669] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.983091][ T4289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 797.995535][ T4289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 798.003532][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 798.123945][T11669] device bridge_slave_0 entered promiscuous mode [ 798.382603][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 798.396262][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 798.407301][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 798.466975][T11669] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.632633][T11669] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.679044][T11669] device bridge_slave_1 entered promiscuous mode [ 798.766605][T11669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.779568][T11669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.815783][T11669] team0: Port device team_slave_0 added [ 798.827715][T11669] team0: Port device team_slave_1 added [ 798.850137][T11669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.862697][T11669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.942339][T11669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.078905][T11892] bond0 speed is unknown, defaulting to 1000 [ 799.162423][T11669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.188336][T11669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.228994][T11669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.038994][T11669] device hsr_slave_0 entered promiscuous mode [ 800.088003][T11669] device hsr_slave_1 entered promiscuous mode [ 800.364011][T11922] bond0 speed is unknown, defaulting to 1000 [ 801.175495][ T4286] Bluetooth: hci5: command 0x0409 tx timeout [ 801.338410][T11892] chnl_net:caif_netlink_parms(): no params data found [ 803.060566][T11669] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 803.076073][T11669] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 803.089259][T11960] loop3: detected capacity change from 0 to 8 [ 803.111791][T11892] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.132236][T11960] SQUASHFS error: zlib decompression failed, data probably corrupt [ 803.143832][T11960] SQUASHFS error: Failed to read block 0x9b: -5 [ 803.157124][T11892] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.170933][T11960] SQUASHFS error: Unable to read metadata cache entry [99] [ 803.198558][T11960] SQUASHFS error: Unable to read inode 0x127 [ 803.214898][ T4286] Bluetooth: hci5: command 0x041b tx timeout [ 803.256259][T11892] device bridge_slave_0 entered promiscuous mode [ 803.301683][T11669] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 803.398253][T11962] loop3: detected capacity change from 0 to 4096 [ 803.448732][T11892] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.469433][T11964] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 803.481087][T11892] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.533028][T11892] device bridge_slave_1 entered promiscuous mode [ 804.264903][T11669] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 804.600775][T11892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.617132][T11892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.735647][T11892] team0: Port device team_slave_0 added [ 804.752190][T10108] tipc: Disabling bearer [ 804.762935][T10108] tipc: Left network mode [ 804.770372][T11892] team0: Port device team_slave_1 added [ 804.816760][T11892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.824591][T11892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.851795][T11892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.886889][T11669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.030508][T11892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.048201][T11892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.088023][T11892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.117608][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 805.140579][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 805.191208][T11669] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.233907][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 805.253443][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 805.294989][ T4286] Bluetooth: hci5: command 0x040f tx timeout [ 805.315550][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.322687][ T1213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.017954][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 806.082093][T11892] device hsr_slave_0 entered promiscuous mode [ 806.270756][T11892] device hsr_slave_1 entered promiscuous mode [ 806.293548][T11892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 806.309306][T11892] Cannot create hsr debugfs directory [ 806.350808][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 807.434495][ T4286] Bluetooth: hci5: command 0x0419 tx timeout [ 808.235333][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 808.390851][ T1213] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.398105][ T1213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.490740][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 808.500191][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.507708][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.552355][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 808.624814][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 808.642493][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 808.654211][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 808.679986][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 808.718918][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 808.727818][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 808.736632][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 808.808072][T10108] team0: Port device xfrm0 removed [ 808.858739][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 808.871030][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 808.884235][T11669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 811.003937][T12021] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 811.310560][T10108] bond2: (slave gretap1): Releasing active interface [ 812.301113][T11892] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 812.337165][T10100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 812.374615][T10100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 812.411063][T11669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.593506][T11892] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 812.654780][T11892] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 812.670693][T11892] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 814.756538][T11892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.338417][T12068] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[12069] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12068] [ 818.892484][T10108] bond2 (unregistering): Released all slaves [ 819.065064][T10108] bond1 (unregistering): Released all slaves [ 820.953010][T12102] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 821.356086][T12107] syz.6.1726 sent an empty control message without MSG_MORE. [ 822.988611][T10108] bond0 (unregistering): Released all slaves [ 823.050484][T11892] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.171087][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 823.250264][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 823.262292][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 823.271305][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 823.290303][ T4656] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.297482][ T4656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.331875][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 823.374904][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 823.394697][ T4656] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.401833][ T4656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.412982][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 823.422372][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 823.438464][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 823.452921][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 823.465265][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 823.474390][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 823.482376][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 823.489949][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 823.497559][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 823.506658][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 823.516112][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 823.525085][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 823.533739][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 823.568286][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 823.576927][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 823.585703][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 823.597640][T11892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 823.619958][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 823.641778][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 823.756034][T12121] bond0 speed is unknown, defaulting to 1000 [ 823.912726][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 823.920838][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 823.959629][T11892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.238796][T12121] chnl_net:caif_netlink_parms(): no params data found [ 824.481214][T12121] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.509370][T12121] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.530292][T12121] device bridge_slave_0 entered promiscuous mode [ 824.549314][T12121] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.594458][T12121] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.624455][T12121] device bridge_slave_1 entered promiscuous mode [ 824.732712][T12121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.757232][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 824.766997][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 824.785023][T12121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.857185][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 824.869102][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 824.896919][T11892] device veth0_vlan entered promiscuous mode [ 824.918612][T12121] team0: Port device team_slave_0 added [ 824.953038][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 824.965758][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 824.975576][T12121] team0: Port device team_slave_1 added [ 825.001324][T12121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.009166][T12121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.035359][T12121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.076615][T11892] device veth1_vlan entered promiscuous mode [ 825.085618][T12121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.092611][T12121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.119447][T12121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.181259][T12121] device hsr_slave_0 entered promiscuous mode [ 825.188695][T12121] device hsr_slave_1 entered promiscuous mode [ 825.195867][T12121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 825.203467][T12121] Cannot create hsr debugfs directory [ 825.213496][T11892] device veth0_macvtap entered promiscuous mode [ 825.229641][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 825.238825][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 825.248340][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 825.257434][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 825.268794][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 825.328599][T11892] device veth1_macvtap entered promiscuous mode [ 825.430438][T11892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.449826][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 825.465378][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 825.477949][T11892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.534709][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 825.552231][T10100] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 825.561870][T10100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 825.574082][T11892] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.588186][T11892] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.598217][T11892] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.612709][T11892] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.819064][T10100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.836478][T10100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.867946][T10100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 825.969698][T10100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.988910][T10100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.006044][T10100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 828.144593][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 828.883660][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 828.922340][T10108] device hsr_slave_0 left promiscuous mode [ 828.931247][T10108] device hsr_slave_1 left promiscuous mode [ 828.942139][T10108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.986744][T10108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.023325][T10108] device bridge_slave_1 left promiscuous mode [ 829.121267][T12180] kvm [12176]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 829.153762][T10108] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.223328][T10108] device bridge_slave_0 left promiscuous mode [ 829.319874][T10108] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.608963][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 832.666278][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 833.174074][T10108] team0 (unregistering): Port device team_slave_1 removed [ 833.773861][T12226] loop7: detected capacity change from 0 to 4096 [ 834.199963][T12226] ntfs3: loop7: failed to replay log file. Can't mount rw! [ 834.305202][T10108] team0 (unregistering): Port device team_slave_0 removed [ 834.529481][T10108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.143972][T12242] overlayfs: missing 'lowerdir' [ 838.141201][T10108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.040596][T10108] bond0 (unregistering): Released all slaves [ 839.316498][T12232] netlink: 5 bytes leftover after parsing attributes in process `syz.9.1746'. [ 839.362220][T12232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 839.543595][T12121] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 839.553685][T12121] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 839.606382][T12121] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 839.640191][T12121] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 839.875458][T12121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.937836][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 839.968410][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 839.988653][T12121] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.035321][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 840.056316][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 840.095565][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.102724][ T1213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.154920][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 840.164952][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 840.205108][ T1213] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.212228][ T1213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.244904][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 840.256050][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 840.269152][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 840.287336][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 840.308227][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 840.367220][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 840.388325][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 840.408880][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 840.420728][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 840.445111][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 840.470565][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 840.485295][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 840.501772][T12121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 840.872773][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 840.886612][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 840.899057][T12121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.219268][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 841.231612][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 841.263409][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 841.280424][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 841.298278][T12121] device veth0_vlan entered promiscuous mode [ 841.306036][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 841.330231][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 841.343098][T12121] device veth1_vlan entered promiscuous mode [ 841.370259][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 841.382550][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 841.392961][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 841.402302][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 841.417850][T12121] device veth0_macvtap entered promiscuous mode [ 841.429408][T12121] device veth1_macvtap entered promiscuous mode [ 841.452022][T12121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.463504][T12121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.478482][T12121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.486940][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 841.496926][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 841.505988][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 841.516817][T12121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.528995][T12121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.541041][T12121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.552795][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 841.565298][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 841.577270][T12121] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.586131][T12121] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.596045][T12121] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.605335][T12121] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.721325][ T4656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.734525][ T4656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.748407][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 841.772605][T10108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.781406][T10108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.793877][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 841.960898][T12278] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.970568][T12278] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.979771][T12278] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.988705][T12278] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.185697][T12278] team0: Port device vxlan0 added [ 846.101691][T12356] overlayfs: failed to clone upperpath [ 846.914916][ T7796] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 847.216935][ T7796] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 847.249052][ T7796] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.759174][ T7796] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 847.948120][T12376] fuse: Bad value for 'fd' [ 847.976332][ T7796] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 848.044481][ T7796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.502052][ T7796] usb 8-1: config 0 descriptor?? [ 849.251759][ T7796] usbhid 8-1:0.0: can't add hid device: -71 [ 849.297393][ T7796] usbhid: probe of 8-1:0.0 failed with error -71 [ 850.064843][ T7796] usb 8-1: USB disconnect, device number 7 [ 850.396061][T12400] loop7: detected capacity change from 0 to 512 [ 851.111853][T12400] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 851.236573][T12400] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 853.543553][T12416] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 855.113265][T12395] Set syz1 is full, maxelem 65536 reached [ 855.604030][T12432] loop9: detected capacity change from 0 to 4096 [ 856.028240][T12418] EXT4-fs warning (device loop7): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop7. [ 856.196586][ T7550] EXT4-fs (loop7): unmounting filesystem. [ 856.601408][T12432] ntfs3: loop9: failed to replay log file. Can't mount rw! [ 860.989120][T12463] jffs2: notice: (12463) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 861.125384][T12463] jffs2 filesystem being mounted at /283/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 861.603262][T12470] jffs2: notice: (12470) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 861.724441][T12470] jffs2 filesystem being mounted at /197/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 861.759278][T12475] jffs2 filesystem being mounted at /284/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 864.269344][T12504] loop7: detected capacity change from 0 to 164 [ 869.890378][T12542] jffs2: notice: (12542) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 869.947741][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.954114][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.005781][T12542] jffs2 filesystem being mounted at /288/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 870.240168][T12546] jffs2: notice: (12546) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 870.424694][T12550] jffs2 filesystem being mounted at /289/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 870.449123][T12546] jffs2 filesystem being mounted at /201/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 871.449432][T12576] loop7: detected capacity change from 0 to 512 [ 872.935266][T12576] EXT4-fs: Ignoring removed orlov option [ 872.954375][T12576] ext4: Bad value for 'data' [ 875.738726][T12604] netlink: 'syz.9.1815': attribute type 10 has an invalid length. [ 875.785877][T12605] jffs2: notice: (12605) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 875.818860][T12604] team0: Port device dummy0 added [ 875.853897][T12605] jffs2 filesystem being mounted at /291/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 877.047327][T12624] jffs2: notice: (12624) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 877.071969][T12624] jffs2 filesystem being mounted at /205/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 877.450556][T12635] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 879.350373][T12648] kAFS: Can only specify source 'none' with -o dyn [ 879.572230][T12651] loop9: detected capacity change from 0 to 512 [ 880.350472][T12651] EXT4-fs: Ignoring removed orlov option [ 880.356377][T12651] ext4: Bad value for 'data' [ 882.101425][T12667] jffs2: notice: (12667) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 883.112211][T12667] jffs2 filesystem being mounted at /23/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 883.394365][T12682] jffs2: notice: (12682) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 883.497206][T12682] jffs2 filesystem being mounted at /208/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 889.384161][T12738] loop7: detected capacity change from 0 to 256 [ 890.752993][T12738] vfat filesystem being mounted at /210/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 890.975946][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 890.993857][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 891.003643][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 891.033109][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 891.044979][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 891.052242][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 891.232682][T12745] jffs2: notice: (12745) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 891.281950][T12745] jffs2 filesystem being mounted at /211/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 891.491181][T12739] bond0 speed is unknown, defaulting to 1000 [ 891.664078][T12760] jffs2: notice: (12760) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 891.712038][T12760] jffs2 filesystem being mounted at /212/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 891.763493][T10118] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.804691][T10118] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.149814][T10118] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.360402][T10118] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.733751][T12739] chnl_net:caif_netlink_parms(): no params data found [ 893.017098][T10118] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.049587][T10118] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.144589][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 895.214594][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 895.231943][T10118] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.276078][T10118] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.728251][ T9574] rpcbind: server 127.0.0.1 not responding, timed out [ 897.103085][T12739] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.136522][T12739] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.209700][T12739] device bridge_slave_0 entered promiscuous mode [ 897.221149][T12818] jffs2: notice: (12818) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 897.280482][T12739] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.294643][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 897.333924][T12739] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.357013][T12820] jffs2 filesystem being mounted at /216/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 897.371260][T12818] jffs2 filesystem being mounted at /302/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 897.408385][T12739] device bridge_slave_1 entered promiscuous mode [ 897.698999][T12739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.989453][T12739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.162957][T12739] team0: Port device team_slave_0 added [ 898.179537][T10118] tipc: Disabling bearer [ 898.195079][T10118] tipc: Left network mode [ 898.204029][T12739] team0: Port device team_slave_1 added [ 898.474663][T12843] sctp: [Deprecated]: syz.6.1872 (pid 12843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 898.474663][T12843] Use struct sctp_sack_info instead [ 899.376817][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 899.565744][T10118] bond1: (slave ip6gretap1): Removing an active aggregator [ 899.614949][T10098] bond1: Warning: Found an uninitialized port [ 900.110216][T10098] bond1: Warning: Found an uninitialized port [ 900.251870][T12851] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 900.258788][T10118] bond1: (slave ip6gretap1): Releasing backup interface [ 900.277683][T12739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.288023][T12739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.464373][T12739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.094108][T12739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.113887][T12739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.191122][T12739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.669492][T12739] device hsr_slave_0 entered promiscuous mode [ 902.689052][T12739] device hsr_slave_1 entered promiscuous mode [ 902.922533][T12855] loop7: detected capacity change from 0 to 32768 [ 902.988633][T12855] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 scanned by syz.7.1865 (12855) [ 903.093589][T12855] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 903.146642][T12855] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 903.204148][T12855] BTRFS info (device loop7): turning on async discard [ 903.249438][T12855] BTRFS info (device loop7): use zlib compression, level 3 [ 903.269721][T12855] BTRFS info (device loop7): using free space tree [ 903.325567][T10118] bond2: (slave gretap1): Releasing active interface [ 903.341509][T11865] udevd[11865]: symlink '../../loop7' '/dev/disk/by-diskseq/271.tmp-b7:7' failed: Read-only file system [ 903.357710][T11865] udevd[11865]: symlink '../../loop7' '/dev/disk/by-uuid/5e4b7888-5e56-43f0-8345-635ad0fd87c6.tmp-b7:7' failed: Read-only file system [ 903.799798][T12855] BTRFS error (device loop7): open_ctree failed: -12 [ 903.915744][T12897] loop9: detected capacity change from 0 to 2048 [ 903.998365][T12897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 904.271271][T11911] udevd[11911]: symlink '../../loop9' '/dev/disk/by-diskseq/272.tmp-b7:9' failed: Read-only file system [ 905.187985][T11911] udevd[11911]: symlink '../../loop9' '/dev/disk/by-label/LinuxUDF.tmp-b7:9' failed: Read-only file system [ 905.245733][T11911] udevd[11911]: symlink '../../loop9' '/dev/disk/by-uuid/1234567812345678.tmp-b7:9' failed: Read-only file system [ 905.529551][T11911] udevd[11911]: symlink '../../loop9' '/dev/disk/by-diskseq/272.tmp-b7:9' failed: Read-only file system [ 905.597263][T11911] udevd[11911]: symlink '../../loop9' '/dev/disk/by-diskseq/272.tmp-b7:9' failed: Read-only file system [ 905.628866][T11865] udevd[11865]: symlink '../../loop7' '/dev/disk/by-diskseq/271.tmp-b7:7' failed: Read-only file system [ 905.658010][T11911] udevd[11911]: symlink '../../loop9' '/dev/disk/by-diskseq/274.tmp-b7:9' failed: Read-only file system [ 905.672137][T11865] udevd[11865]: symlink '../../loop7' '/dev/disk/by-diskseq/271.tmp-b7:7' failed: Read-only file system [ 906.199868][T10118] device hsr_slave_0 left promiscuous mode [ 906.210402][T10118] device hsr_slave_1 left promiscuous mode [ 906.217272][T10118] device bridge_slave_1 left promiscuous mode [ 906.223554][T10118] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.237303][T10118] device bridge_slave_0 left promiscuous mode [ 906.243559][T10118] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.290802][T10118] device veth1_macvtap left promiscuous mode [ 906.296886][T10118] device veth0_macvtap left promiscuous mode [ 906.302958][T10118] device veth1_vlan left promiscuous mode [ 906.309277][T10118] device veth0_vlan left promiscuous mode [ 906.421105][T10118] team0 (unregistering): Port device vxlan0 removed [ 906.569643][T10118] bond2 (unregistering): Released all slaves [ 906.718985][T10118] bond1 (unregistering): Released all slaves [ 907.234698][T10118] team0 (unregistering): Port device team_slave_1 removed [ 907.291421][T10118] team0 (unregistering): Port device team_slave_0 removed [ 907.347474][T10118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 907.356336][T10118] device bond_slave_1 left promiscuous mode [ 907.406424][T10118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 907.415793][T10118] device bond_slave_0 left promiscuous mode [ 907.721430][T10118] bond0 (unregistering): Released all slaves [ 907.986787][T12739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 908.000927][T12739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 908.017979][T12739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 908.031950][T12739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 908.175405][T12739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.189967][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 908.199312][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 908.229146][T12739] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.245147][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 908.259592][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 908.269169][ T4456] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.276351][ T4456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.288698][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 908.305716][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 908.318816][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 908.328084][ T1213] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.335236][ T1213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.351764][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 908.373120][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 908.386100][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 908.408526][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 908.423798][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 908.437960][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 908.451198][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 908.475853][T12739] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 908.494855][T12739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 908.526161][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 908.550908][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 908.563786][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 908.596107][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 908.619869][T10091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 908.791136][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 908.799292][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 908.817078][T12739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.845939][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 908.860989][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 908.886204][T12739] device veth0_vlan entered promiscuous mode [ 908.896369][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 908.911016][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 908.920191][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 908.932926][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 908.948649][T12739] device veth1_vlan entered promiscuous mode [ 908.972826][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 908.982174][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 908.996584][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 909.009762][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 909.021511][T12739] device veth0_macvtap entered promiscuous mode [ 909.032878][T12739] device veth1_macvtap entered promiscuous mode [ 909.057587][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.068562][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.078730][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.093147][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.110038][T12739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.118439][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 909.128597][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 909.140405][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 909.150696][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 909.162060][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.173316][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.184151][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.198574][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.211100][T12739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.223432][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 909.232872][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 909.244956][T12739] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.253891][T12739] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.264955][T12739] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.273685][T12739] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.351643][T10091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.368325][T10091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.409945][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 909.422159][ T1213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.430927][ T1213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.443336][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 909.540360][T11865] udevd[11865]: symlink '../../loop2' '/dev/disk/by-diskseq/130.tmp-b7:2' failed: Read-only file system [ 909.735625][T12953] [ 909.738126][T12953] ====================================================== [ 909.745176][T12953] WARNING: possible circular locking dependency detected [ 909.752240][T12953] syzkaller #0 Not tainted [ 909.756766][T12953] ------------------------------------------------------ [ 909.763803][T12953] syz.9.1882/12953 is trying to acquire lock: [ 909.769894][T12953] ffff888148cfc660 (&sb->s_type->i_mutex_key#34){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 909.781564][T12953] [ 909.781564][T12953] but task is already holding lock: [ 909.788950][T12953] ffff88805865c920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 909.798163][T12953] [ 909.798163][T12953] which lock already depends on the new lock. [ 909.798163][T12953] [ 909.808579][T12953] [ 909.808579][T12953] the existing dependency chain (in reverse order) is: [ 909.817606][T12953] [ 909.817606][T12953] -> #3 (&opts->dep_lock){+.+.}-{3:3}: [ 909.825298][T12953] __mutex_lock+0x12d/0xae0 [ 909.830430][T12953] usbg_make_tpg+0x144/0x580 [ 909.835600][T12953] target_fabric_make_tpg+0xa0/0x6d0 [ 909.841508][T12953] configfs_mkdir+0x511/0x9e0 [ 909.846745][T12953] vfs_mkdir+0x386/0x570 [ 909.851585][T12953] do_mkdirat+0x1d8/0x440 [ 909.856465][T12953] __x64_sys_mkdir+0x6a/0x80 [ 909.861604][T12953] do_syscall_64+0x4c/0xa0 [ 909.866596][T12953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.873059][T12953] [ 909.873059][T12953] -> #2 (tpg_instances_lock){+.+.}-{3:3}: [ 909.881008][T12953] __mutex_lock+0x12d/0xae0 [ 909.886067][T12953] tcm_alloc+0x1d/0x2c0 [ 909.890777][T12953] usb_get_function+0x59/0xa0 [ 909.896086][T12953] config_usb_cfg_link+0x144/0x250 [ 909.901745][T12953] configfs_symlink+0x5a4/0x13c0 [ 909.907230][T12953] vfs_symlink+0x245/0x3d0 [ 909.912226][T12953] do_symlinkat+0x1b6/0x400 [ 909.917296][T12953] __x64_sys_symlinkat+0x95/0xa0 [ 909.922791][T12953] do_syscall_64+0x4c/0xa0 [ 909.927777][T12953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.934219][T12953] [ 909.934219][T12953] -> #1 (&gi->lock){+.+.}-{3:3}: [ 909.941377][T12953] __mutex_lock+0x12d/0xae0 [ 909.946446][T12953] config_usb_cfg_link+0x55/0x250 [ 909.952034][T12953] configfs_symlink+0x5a4/0x13c0 [ 909.957519][T12953] vfs_symlink+0x245/0x3d0 [ 909.962494][T12953] do_symlinkat+0x1b6/0x400 [ 909.967551][T12953] __x64_sys_symlinkat+0x95/0xa0 [ 909.973049][T12953] do_syscall_64+0x4c/0xa0 [ 909.978039][T12953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.984490][T12953] [ 909.984490][T12953] -> #0 (&sb->s_type->i_mutex_key#34){++++}-{3:3}: [ 909.993230][T12953] __lock_acquire+0x2d18/0x7c40 [ 909.998726][T12953] lock_acquire+0x1bb/0x4a0 [ 910.003791][T12953] down_write+0x36/0x60 [ 910.008529][T12953] configfs_depend_item_unlocked+0x14f/0x430 [ 910.015069][T12953] usbg_make_tpg+0x1f3/0x580 [ 910.020223][T12953] target_fabric_make_tpg+0xa0/0x6d0 [ 910.026080][T12953] configfs_mkdir+0x511/0x9e0 [ 910.031326][T12953] vfs_mkdir+0x386/0x570 [ 910.036134][T12953] do_mkdirat+0x1d8/0x440 [ 910.041013][T12953] __x64_sys_mkdir+0x6a/0x80 [ 910.046165][T12953] do_syscall_64+0x4c/0xa0 [ 910.051141][T12953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 910.057625][T12953] [ 910.057625][T12953] other info that might help us debug this: [ 910.057625][T12953] [ 910.067884][T12953] Chain exists of: [ 910.067884][T12953] &sb->s_type->i_mutex_key#34 --> tpg_instances_lock --> &opts->dep_lock [ 910.067884][T12953] [ 910.082365][T12953] Possible unsafe locking scenario: [ 910.082365][T12953] [ 910.089849][T12953] CPU0 CPU1 [ 910.095256][T12953] ---- ---- [ 910.100649][T12953] lock(&opts->dep_lock); [ 910.105098][T12953] lock(tpg_instances_lock); [ 910.112339][T12953] lock(&opts->dep_lock); [ 910.119325][T12953] lock(&sb->s_type->i_mutex_key#34); [ 910.124842][T12953] [ 910.124842][T12953] *** DEADLOCK *** [ 910.124842][T12953] [ 910.133005][T12953] 5 locks held by syz.9.1882/12953: [ 910.138232][T12953] #0: ffff888140072460 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 910.147608][T12953] #1: ffff8880516a64c0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 910.158459][T12953] #2: ffffffff8d4e9df0 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 910.168259][T12953] #3: ffffffff8d809448 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 910.177981][T12953] #4: ffff88805865c920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 910.187516][T12953] [ 910.187516][T12953] stack backtrace: [ 910.193443][T12953] CPU: 0 PID: 12953 Comm: syz.9.1882 Not tainted syzkaller #0 [ 910.200928][T12953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 910.211023][T12953] Call Trace: [ 910.214387][T12953] [ 910.217384][T12953] dump_stack_lvl+0x188/0x24e [ 910.222199][T12953] ? load_image+0x410/0x410 [ 910.226803][T12953] ? show_regs_print_info+0x12/0x12 [ 910.232070][T12953] ? print_circular_bug+0x12b/0x1a0 [ 910.237322][T12953] check_noncircular+0x296/0x330 [ 910.242299][T12953] ? look_up_lock_class+0x75/0x140 [ 910.247502][T12953] ? add_chain_block+0x9b0/0x9b0 [ 910.251305][T11865] udevd[11865]: symlink '../../loop2' '/dev/disk/by-diskseq/130.tmp-b7:2' failed: Read-only file system [ 910.252465][T12953] ? lockdep_lock+0xf1/0x1f0 [ 910.268187][T12953] ? _find_first_zero_bit+0xd2/0x100 [ 910.273525][T12953] __lock_acquire+0x2d18/0x7c40 [ 910.278429][T12953] ? __kernel_text_address+0x9/0x30 [ 910.283736][T12953] ? verify_lock_unused+0x140/0x140 [ 910.288990][T12953] ? __mutex_trylock_common+0x15c/0x260 [ 910.294583][T12953] lock_acquire+0x1bb/0x4a0 [ 910.299150][T12953] ? configfs_depend_item_unlocked+0x14f/0x430 [ 910.305358][T12953] ? __might_sleep+0xd0/0xd0 [ 910.310034][T12953] ? read_lock_is_recursive+0x10/0x10 [ 910.315448][T12953] ? __mutex_trylock_common+0x15c/0x260 [ 910.321043][T12953] ? usbg_make_tpg+0x144/0x580 [ 910.325845][T12953] ? mutex_lock_nested+0x10/0x10 [ 910.330832][T12953] down_write+0x36/0x60 [ 910.335028][T12953] ? configfs_depend_item_unlocked+0x14f/0x430 [ 910.341222][T12953] configfs_depend_item_unlocked+0x14f/0x430 [ 910.347256][T12953] usbg_make_tpg+0x1f3/0x580 [ 910.351895][T12953] ? configfs_mkdir+0x4b5/0x9e0 [ 910.356792][T12953] ? usbg_drop_tport+0x20/0x20 [ 910.361608][T12953] ? vscnprintf+0x80/0x80 [ 910.365981][T12953] ? __kmem_cache_alloc_node+0x19d/0x270 [ 910.371757][T12953] target_fabric_make_tpg+0xa0/0x6d0 [ 910.377087][T12953] ? target_fabric_release_wwn+0xa0/0xa0 [ 910.382758][T12953] configfs_mkdir+0x511/0x9e0 [ 910.387513][T12953] vfs_mkdir+0x386/0x570 [ 910.391800][T12953] do_mkdirat+0x1d8/0x440 [ 910.396182][T12953] ? vfs_mkdir+0x570/0x570 [ 910.400640][T12953] ? getname_flags+0x206/0x500 [ 910.405439][T12953] __x64_sys_mkdir+0x6a/0x80 [ 910.410154][T12953] do_syscall_64+0x4c/0xa0 [ 910.414617][T12953] ? clear_bhb_loop+0x60/0xb0 [ 910.419336][T12953] ? clear_bhb_loop+0x60/0xb0 [ 910.424050][T12953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 910.429968][T12953] RIP: 0033:0x7effb7f9e159 [ 910.434474][T12953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.454311][T12953] RSP: 002b:00007effb8ea4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 910.462750][T12953] RAX: ffffffffffffffda RBX: 00007effb8226090 RCX: 00007effb7f9e159 [ 910.470742][T12953] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 910.478735][T12953] RBP: 00007effb8035024 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 910.486735][T12953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.494723][T12953] R13: 00007effb8226128 R14: 00007effb8226090 R15: 00007fff116b5028 [ 910.502720][T12953] [ 912.779617][ T5019] tipc: Left network mode [ 913.353458][ T5019] bond1: (slave gretap1): Releasing active interface [ 913.363814][ T5019] bond2: (slave gretap2): Removing an active aggregator [ 913.371653][ T5019] bond2: (slave gretap2): Releasing backup interface [ 913.827860][ T5019] device hsr_slave_0 left promiscuous mode [ 913.834165][ T5019] device hsr_slave_1 left promiscuous mode [ 913.841799][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.852208][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.860652][ T5019] device bridge_slave_1 left promiscuous mode [ 913.868331][ T5019] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.876499][ T5019] device bridge_slave_0 left promiscuous mode [ 913.882748][ T5019] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.069788][ T5019] bond3 (unregistering): Released all slaves [ 914.084295][ T5019] bond2 (unregistering): Released all slaves [ 914.100094][ T5019] bond1 (unregistering): Released all slaves [ 914.593840][ T5019] team0 (unregistering): Port device team_slave_1 removed [ 914.639510][ T5019] team0 (unregistering): Port device team_slave_0 removed [ 914.704456][ T5019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.766231][ T5019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.787009][T12112] infiniband syz1: ib_query_port failed (-19) [ 915.075092][ T5019] bond0 (unregistering): Released all slaves [ 915.676410][ T5019] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.720295][ T5019] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.779039][ T5019] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.828664][ T5019] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.214166][ T5019] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.259756][ T5019] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.309131][ T5019] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.348359][ T5019] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.430916][ T5019] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.468474][ T5019] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.510194][ T5019] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.548899][ T5019] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.666561][ T5019] tipc: Left network mode [ 917.368498][ T5019] bond2: (slave gretap1): Releasing active interface [ 918.137523][ T5019] device hsr_slave_0 left promiscuous mode [ 918.143852][ T5019] device hsr_slave_1 left promiscuous mode [ 918.150478][ T5019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.159209][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.168755][ T5019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 918.177364][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.185543][ T5019] device bridge_slave_1 left promiscuous mode [ 918.191751][ T5019] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.200355][ T5019] device bridge_slave_0 left promiscuous mode [ 918.206768][ T5019] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.217653][ T5019] device hsr_slave_0 left promiscuous mode [ 918.224203][ T5019] device hsr_slave_1 left promiscuous mode [ 918.230782][ T5019] device bridge_slave_1 left promiscuous mode [ 918.237182][ T5019] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.247709][ T5019] device hsr_slave_0 left promiscuous mode [ 918.254772][ T5019] device hsr_slave_1 left promiscuous mode [ 918.261314][ T5019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.271981][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.280036][ T5019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 918.287856][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.296254][ T5019] device bridge_slave_1 left promiscuous mode [ 918.302468][ T5019] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.310891][ T5019] device bridge_slave_0 left promiscuous mode [ 918.317399][ T5019] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.329202][ T5019] device hsr_slave_0 left promiscuous mode [ 918.335563][ T5019] device hsr_slave_1 left promiscuous mode [ 918.341837][ T5019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.349773][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.358015][ T5019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 918.365798][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.373406][ T5019] device bridge_slave_1 left promiscuous mode [ 918.381028][ T5019] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.389916][ T5019] device bridge_slave_0 left promiscuous mode [ 918.396344][ T5019] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.408787][ T5019] device veth1_macvtap left promiscuous mode [ 918.415387][ T5019] device veth0_macvtap left promiscuous mode [ 918.421462][ T5019] device veth1_vlan left promiscuous mode [ 918.427343][ T5019] device veth0_vlan left promiscuous mode [ 918.434027][ T5019] device veth1_macvtap left promiscuous mode [ 918.440504][ T5019] device veth0_macvtap left promiscuous mode [ 918.446657][ T5019] device veth1_vlan left promiscuous mode [ 918.452475][ T5019] device veth0_vlan left promiscuous mode [ 918.459616][ T5019] device veth1_macvtap left promiscuous mode [ 918.465889][ T5019] device veth0_macvtap left promiscuous mode [ 918.471922][ T5019] device veth1_vlan left promiscuous mode [ 918.477914][ T5019] device veth0_vlan left promiscuous mode [ 918.723280][ T5019] team0 (unregistering): Port device team_slave_1 removed [ 918.753754][ T5019] team0 (unregistering): Port device team_slave_0 removed [ 918.783567][ T5019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.814090][ T5019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.866294][ T5019] bond0 (unregistering): Released all slaves [ 919.038756][ T5019] bond2 (unregistering): Released all slaves [ 919.065812][ T5019] bond1 (unregistering): (slave veth5): Releasing active interface [ 919.093801][ T5019] bond1 (unregistering): (slave veth3): Releasing active interface [ 919.105508][ T5019] bond1 (unregistering): Released all slaves [ 919.535807][ T5019] team0 (unregistering): Port device team_slave_1 removed [ 919.579381][ T5019] team0 (unregistering): Port device team_slave_0 removed [ 919.622622][ T5019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.667744][ T5019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface