last executing test programs: 17m52.817421251s ago: executing program 32 (id=145): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="ffffffffffffffff098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17m44.63087415s ago: executing program 33 (id=182): syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0), 0x6, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0xc2a02) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc1205531, &(0x7f0000002680)=""/4078) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003c80)={0x14, 0x2b, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x90, 0xa, 0x148, 0xe0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg2\x00', {0x8, 0xff, 0x46, 0x0, 0x0, 0x7fff, 0x200}, {0x8}}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x5, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x428) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x888e, r3, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) syz_open_dev$audion(0x0, 0x4, 0x4200) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000600)={0x24, 0x14, 0x1, 0x70bd2b, 0x25dfdbfc, {0x2c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "92a1054e157f762d90"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x0, 0x700001b, 0x148, 0xf0, 0x148, 0x268, 0x206, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@common=@ttl={{0x28}, {0x0, 0x4e}}, @common=@addrtype={{0x30}, {0xb07, 0x302, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0xfffffffe, 0x0, 0xc, 0x0, 0x531aeecb, 0xc07, 0x18, 0x18}, {0xfff}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@private0, [0xff, 0xffffff00], 0x4e22, 0x2b, 0x1, 0x4e20, 0x10, 0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x3, 0x3, 0xd, '\x00', 'syz0\x00', {0x54}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r10, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x40000) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB, @ANYRES32=r2, @ANYBLOB="1d003300d00009000802110000010802110000005050505050"], 0x44}}, 0x0) 17m41.364659317s ago: executing program 34 (id=97): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000a00)={0x1, 0x0, [{0x1, 0x0, 0x3, 0x6, 0x6, 0xfffffffb, 0x2c0000}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a40)={"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"}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000340)) 17m32.082366329s ago: executing program 35 (id=219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xd}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xc2f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 17m7.819694128s ago: executing program 36 (id=265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000003400)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x6, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xf}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r1, &(0x7f0000000400), 0x1000) read(r1, &(0x7f0000000400), 0x1000) 17m0.004364215s ago: executing program 37 (id=359): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000007d40)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x8, 0x6, 0x7b, @private0, @rand_addr=' \x01\x00', 0x20, 0x10, 0x3fb, 0xffe}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 16m25.086348146s ago: executing program 38 (id=513): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) syz_open_dev$video(&(0x7f0000000040), 0xa8, 0x41841) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0xa, 0x20082f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16m13.378763214s ago: executing program 39 (id=559): openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000000140)) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') set_mempolicy(0x4005, 0x0, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000a80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e734fdc2da8c998a8700232e5263a04392efa56fc98553afa5a498c8c3a3206f2b25a00c0ec0d1202c822ab708037a4c29a9c81216c73358cda8b1a2532650070aaf77d3ac8e46f2b2b5ed7828c6165514d2f40c6cf8eb2e325f9d2b7750af696145751cdfc7d00f6021f29a689969eadb6a870fb43b3f6badebdc0048aa9956828007502b62", @ANYRES16, @ANYRES64, @ANYBLOB="f47d9d"], 0x1, 0x65c, &(0x7f0000002280)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x68800, 0x1c) getdents64(r0, 0x0, 0x4f) 15m59.973569876s ago: executing program 9 (id=614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000340)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xffffffffffffff72}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m59.29663059s ago: executing program 9 (id=618): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 15m59.066305899s ago: executing program 9 (id=620): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800000, 0x13, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x2, 0x3c00000000000000, 0x9, 0x9, 0x9, 0x403, 0x0, 0x7], 0x25000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15m58.630471201s ago: executing program 40 (id=621): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xb, 0xa, 0xfff5, 0x3, 0xa, "96ca676bc0d8a891"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x41, 0x4, 0x5, 0x13, "b0bf2ebb48c849ac4000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000002f00)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000000140)="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", 0x2000, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m58.383947682s ago: executing program 9 (id=625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0xd, @loopback, 0x9}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c0203010902"], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cdg', 0x3) shutdown(r0, 0x1) 15m57.813464958s ago: executing program 41 (id=625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0xd, @loopback, 0x9}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c0203010902"], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cdg', 0x3) shutdown(r0, 0x1) 15m35.040999457s ago: executing program 0 (id=680): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@lfs_mode}, {@usrjquota={'usrjquota', 0x3d, 'nouser_xattr'}}, {@acl}, {@resgid={'resgid', 0x3d, 0xee00}}, {@inline_xattr}, {@grpjquota={'grpjquota', 0x3d, '('}}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@noinline_dentry}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x552b, &(0x7f0000000b40)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 15m32.264621402s ago: executing program 0 (id=694): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x1, r2}) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) 15m30.768156122s ago: executing program 0 (id=709): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/80, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000004100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x25000}) 15m30.392706265s ago: executing program 42 (id=709): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/80, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000004100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x25000}) 13m37.334772406s ago: executing program 1 (id=1420): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) socket$alg(0x26, 0x5, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 13m37.183183371s ago: executing program 1 (id=1421): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) socket$tipc(0x1e, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000840), &(0x7f0000000140)=r1}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 13m36.954963979s ago: executing program 1 (id=1424): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x41}]}) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13m35.773351297s ago: executing program 1 (id=1428): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x20, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x20}, 0x1, 0x0, 0x0, 0x85}, 0x4080044) ptrace(0x10, r1) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r1, 0x5, &(0x7f00000000c0)={0x19, 0x40, 0x7}) 13m35.33639513s ago: executing program 1 (id=1430): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40286608, 0x0) 13m33.147726276s ago: executing program 1 (id=1439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000000b0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000013000100"/20, @ANYRES32=r5, @ANYBLOB='A\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000700)={0x11, 0x300, r5}, 0x14) setsockopt$sock_int(r6, 0x1, 0xc, &(0x7f00000005c0)=0x10001, 0x4) write(r6, &(0x7f0000000600)='\x00', 0x1) 13m32.871701882s ago: executing program 43 (id=1439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000000b0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000013000100"/20, @ANYRES32=r5, @ANYBLOB='A\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000700)={0x11, 0x300, r5}, 0x14) setsockopt$sock_int(r6, 0x1, 0xc, &(0x7f00000005c0)=0x10001, 0x4) write(r6, &(0x7f0000000600)='\x00', 0x1) 13m9.935693236s ago: executing program 7 (id=1513): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13m8.534924644s ago: executing program 7 (id=1517): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38, 0x400c0}}], 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13m7.162996136s ago: executing program 7 (id=1522): syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {0x0, 0xd}, {0xffe0, 0xa}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x3, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0xffffffff, 0x7, 0x3aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0xc1}, 0x400c810) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 13m6.159225015s ago: executing program 7 (id=1525): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc2}}) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x814414, &(0x7f0000000140)=ANY=[], 0x1, 0x725, &(0x7f00000012c0)="$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") read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='environ\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x4, 0xac5) syz_clone3(&(0x7f0000000440)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r3, 0x0, 0x0) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r2, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) 13m4.757538633s ago: executing program 7 (id=1529): socket$key(0xf, 0x3, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_ra={0xc0}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a31000000000500010007"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 13m3.45989682s ago: executing program 7 (id=1535): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x62, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20040080) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13m2.965177828s ago: executing program 44 (id=1535): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x62, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20040080) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12m38.137741639s ago: executing program 8 (id=1605): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0xfea000, 0x2000402) 12m36.383469238s ago: executing program 8 (id=1607): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) unshare(0x22020600) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) pwritev(r2, 0x0, 0x0, 0x7, 0x4) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0x604, 0x0) 12m32.338505309s ago: executing program 8 (id=1623): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000c80)={"43d064455ca79c3698dcca60005c1ba163b1d8f04d69d873792c0cbfc95dacc7cd39a49df12a052d0d8f1bd04b722b4f262437efc030e706916de618763f4600660b41f320706e06860fe29f1bb455ef507156d0a5738f130784a1aad99f74b3e592254eede14eb1b64af356cfaa8ff002c4deed28995dc5e6ee13c4a1b39ba72979c5f3ed91ff89e73e09f7f88fe58bce505f0500764c95c8bed7499213d10731b60ed6c8806ab094843295ac02f06dc46485bb56f2eb2eb3c5ef1e50a2431a2082b54c4b0e1357daaefd30e08322fb5f922f6d9fa3226faf7aeb9630aabe81617fe2849d8ab92fb80f07dfa9d831f4f7ef48923e28553f0c31cf1343d4c0d4dee937e639670fc2ceab9e5048d5bcd9f52a9c90ddd1fee1fda90a114fdf7298b7607c5294efdea04743a0045e96aae496fcb06636a8620f6e007ee5f5c24ab0d0f85cfb3a7820dbe2241b017e917eafb27d13feba7de3a28dd4c29c7959ae5c0724c848f8960fbea5f7b7a35ac32fa6bbf869030a1b61fb0d20a5631dcea68ffa7d456869c4e79f6033f38fa88ccd53dc1feb5381c01dd71ec0446e3633270b7fb961e04ad7e1f44e3fd0d96c724499e1ec2cff23a3d5a97952ec0a44dd967491dc45d4df48ad83027df0be02e35ca4c107bdf957f4c7a831dff89f998a2e1302445dc02b5fc38f7c8a6260723e535062319cb68cb309e91b88c55014bb436c5d9f6bf35cbe24605821baf9ea6aaa31cb2dd74e29863a0c71e3367846cffe17c4a29a76eb635e95c6d7f4d846f3369aedbfb70b3716c1c0234a0deb9abfac12686d45ba97952e8a50480c5f44e038b1a4d5cd9301d02b942afacfaa30b6ef315d72eaf41dddda4983608dc2f5d5e92392a141b0f2f8d34042d1a6cd45d9f9df4c83b8c8b55959d58843ab3564d3f49d81ed2ccd42bb8ad9c8e4b92c2df872c9383c88f4b1bbaf116fff233f55d99b43677eb29ad63e00ea4eee69c72a604b2cdd7641d9c682d1d4ea8e5bd0de857ac1a55b2d6374a4a18af8f27887ffb4b2168e764a5aa9b303a35873d2177de8c5a00be39726baa6d336b6a36b8ec6743454b4542f3fb3ca678a0ecca17ba7c2655931f38ed26219fde45ab8469db2a156953b028abec63c6b841c8bd9f9f0861e7aeb8195013444d2d326cad53718e40be06aea644573a9ef22b13692a17ed8a451af9e2de15b4bfce7c257063e28c07e4c3301a1bff37d72efc14d34ddabbb286f53264e0c8122f215de4f2e06f6e0472674c2476a61ad2e309abfed7e3367bc7373876507764e60b193e8c5abbe95f42adfc74dd25c9098dfba8272f7361d0000000000000000000000000000000000000000000000000000e000"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x400004, 0x2f4, 0x100000008, 0x0, 0x1, 0x6, 0x4, 0x8, 0x37b7, 0xe9, 0x0, 0x6, 0x7, 0x2, 0x3ff, 0x45d], 0xeeef0000, 0x4fb40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) 12m31.555658924s ago: executing program 8 (id=1630): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x138, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x81}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x2, 0x7, 0x800005ffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12m30.832040608s ago: executing program 8 (id=1633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 12m29.594209783s ago: executing program 8 (id=1636): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0xc000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r3, 0x0) 12m14.380704169s ago: executing program 45 (id=1636): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0xc000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r3, 0x0) 7m11.176021014s ago: executing program 2 (id=2147): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x4e10db25}, 0x8) shutdown(r4, 0x1) 7m9.288618528s ago: executing program 2 (id=2148): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='vers\x00', &(0x7f0000000080)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source\x00', &(0x7f0000000100)='127.0.0.1:/export\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='027.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 7m3.996045507s ago: executing program 2 (id=2154): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x249, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0xd8}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04015b0c"], 0x7) 6m56.46469244s ago: executing program 2 (id=2163): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x33, 0x65, 0x36, 0x65, 0x66, 0x34, 0x63, 0x64, 0x31, 0x1d, 0x38, 0x37, 0x38, 0x0, 0x36, 0x33]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x3d}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x0, 0x30, 0x32, 0x34, 0x64, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566768899aabbccddeeff001122c6445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x35, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x65, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x36, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x63, 0x66, 0x30, 0x64, 0x31, 0x30, 0x66]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x31, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 6m56.179929036s ago: executing program 2 (id=2164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_to_bridge\x00', @random="0100"}) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) readv(r4, &(0x7f0000000040)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 6m54.373763544s ago: executing program 2 (id=2166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xffffffff, 0x0, 0x34325241, 0x0, 0x3, [{0x0, 0x3}, {0xfffffffc, 0x20000000}, {}, {0x8}, {0x0, 0x400000}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x7, 0x0, 0x4}}) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r4], 0x40}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) dup(0xffffffffffffffff) socket(0xa, 0x5, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 6m38.212351528s ago: executing program 46 (id=2166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xffffffff, 0x0, 0x34325241, 0x0, 0x3, [{0x0, 0x3}, {0xfffffffc, 0x20000000}, {}, {0x8}, {0x0, 0x400000}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x7, 0x0, 0x4}}) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r4], 0x40}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) dup(0xffffffffffffffff) socket(0xa, 0x5, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 5m35.689600042s ago: executing program 3 (id=2235): gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x4c8080, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000a40)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x9, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x8e665f0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c8e, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0x1, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x81, 0x2000007ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffe, 0x2, 0x1, 0x3, 0x10, 0x4000100000001]}) 5m32.286158737s ago: executing program 3 (id=2237): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x52, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x2a}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0)="a6", 0x1, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x63, 0x6e, 0x35, 0x30, 0x30, 0x30, 0x62, 0x35, 0x30, 0x34, 0x65]}, &(0x7f0000000100)={0x0, "0011223344556677880000bbccddeeff00112266778899aabbccddeeff0011223344556677a899aabbff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 5m31.86315385s ago: executing program 3 (id=2239): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = accept(r1, 0x0, &(0x7f0000000580)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x800, 0xfffffffe) write(r4, &(0x7f00000000c0), 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000300)=0xf) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 5m28.396067658s ago: executing program 3 (id=2242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) r5 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)=@generic={0x19, "459754d151572dfb8708e85fa111c2be372e43808bf6b8fa7c788f0c6904fda9c965795e71828afcbc13e7e83d1123832d39cc712f546d96b3809009250ea2450800200000000000dafff5a70753bf8df9632e71d8e7e261340052d5569225e00fdf6c9194f8ca3991543010589fd4088d13b5030000006b00"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)="3c32c01bd63a2b3d488f807e97a4c2056453909ae1d9bec47b0d5b69f47358179b277b55c07a70052da97785586b73b0990cd6544dfb4a610e7a388c2897457e2b65ca47de372320a2d0d0d2df7813720edd5ad3c7524e6c5b30201b9ed38f1ccdcf918a470139000c23fcc3034b627b1287c0a20a49f3ff13c0493f0593abad19f173c884d327967a3c10bec45a5db921b04cc5", 0x94}], 0x1, &(0x7f00000004c0)=ANY=[], 0x18}, 0x2c000811) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 5m28.191375718s ago: executing program 4 (id=2243): syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x7, 'vlan1\x00', {0x6}, 0xfff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$sock_timeval(r2, 0x1, 0x15, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x2, &(0x7f00000016c0)=""/4143, &(0x7f0000000000)=0x102f) mmap(&(0x7f0000548000/0x3000)=nil, 0x3000, 0x2000009, 0x1032, r2, 0x874fe000) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x24008818, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x0) shutdown(r3, 0x1) close(r0) eventfd2(0xb, 0x1) 5m26.66794683s ago: executing program 3 (id=2245): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r0, r5, 0x0, 0x7ffff004) 5m21.790818947s ago: executing program 4 (id=2249): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mlock(&(0x7f0000341000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000640)={{0x9, 0x4, 0x7, 0x3, 'syz0\x00', 0x4}, 0x0, [0x5, 0x5, 0x1, 0x8, 0x6, 0x720, 0x4, 0x7, 0x8, 0x6, 0x4, 0x6, 0x7e, 0x3ff, 0x1, 0x7, 0xa9, 0x1000, 0x19564bd4, 0x3, 0x1, 0x80, 0x3, 0x8, 0x40, 0x2, 0x4, 0x1, 0x0, 0x9, 0x1, 0xffffffffffffff09, 0x5, 0x3, 0x8, 0x4, 0x3, 0x7, 0x7, 0x2, 0x6f, 0x800, 0x7, 0x20006, 0x100000000000f676, 0x2, 0x9, 0x8000000000000000, 0x10001, 0x4, 0xfffffffffffffff6, 0x9, 0x0, 0x2, 0x8000000000000001, 0x0, 0x7fffffffffffffff, 0x1, 0x8, 0x8, 0x8, 0x6, 0x7, 0x3, 0x81, 0x65c, 0x4, 0x2, 0xb3, 0x400, 0x0, 0x9, 0x6f, 0x0, 0x6, 0x81, 0x0, 0x4, 0x2, 0xffff, 0x1, 0x80000001, 0x7, 0xfece, 0x201d1db0, 0x8, 0x9, 0x3, 0xffff, 0x100, 0x2, 0x40, 0xb, 0x4, 0x6, 0x0, 0x5, 0x800, 0x5, 0x1, 0x2, 0x1d, 0xefffffffffff8000, 0x0, 0x1, 0x4, 0x3, 0x75c, 0x4, 0x0, 0x7, 0x3, 0x3, 0x0, 0xa, 0xfffffffffffffff8, 0x5, 0x2, 0xffffffffffff0262, 0x7ddb, 0x1, 0x7ff, 0x6, 0x10000, 0x4, 0x750d, 0x6]}) close_range(r0, 0xffffffffffffffff, 0x0) 5m19.835245424s ago: executing program 4 (id=2251): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x5c}, [@ldst={0x6, 0x0, 0x5, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x176) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x10040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_getparam(0x0, &(0x7f0000002b80)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) write$proc_mixer(r0, &(0x7f0000000080)=ANY=[], 0x1001) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}, 0x0) 5m18.1921958s ago: executing program 4 (id=2252): chdir(&(0x7f0000000480)='./cgroup\x00') syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000068b87753"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000380)=0xfffffffe, 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) 5m17.089168789s ago: executing program 4 (id=2254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x28, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @dstopts={0x0, 0x2, '\x00', [@generic={0x0, 0x15, "58090e541b64f22a8982d3f5aaacd21a0ca186608b"}]}]}}}}}, 0x0) sched_setaffinity(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) 5m15.559781352s ago: executing program 4 (id=2255): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_BMAP(r1, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000140)={0x25, 0x3, 0x0, {0x4, 0x4, 0x0, 'GPL\x00'}}, 0x25) shmget(0x2, 0x3000, 0x78000000, &(0x7f00003f2000/0x3000)=nil) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x7, 0x9, 0x1}, 0x50) 5m14.079872996s ago: executing program 3 (id=2256): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100037040100"/20, @ANYRES32=r4, @ANYBLOB="c30801000b2eba2628001280090001007665746800000000180002801400010000000000", @ANYRES32=r4, @ANYBLOB="0002020081025495"], 0x48}, 0x1, 0x0, 0x0, 0x404c000}, 0x14) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x170, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe2, 0xa8, @random="e09163270d7070ac38774108f7165f0bba78f4fc06155b4f0e9129b4e0373219a4adf1f612d832cdac1147980bfdc15e6884ff090df3dccaf52cd7d2e1c4260e2aa6aae5d9916409b9286daf91fe86fa8d7a096efcdc68782029dacacb32fbd6fd5814ee94d979bae72a75d803113d9faa0ca506fbc1b3b50f37cf94ba54c5337018273c311fc2f854025d08393afee67258575f7adc228613e094c25cc262090f192798ed0c954938ef752b6c4e08ccf06375eadbee70dcc32bbcf9b5aa433fc518964e3727f844c0024c7c0c1d9efae5fa24793898eed18b274a788865"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x170}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000)=0x3, 0x4) close(r6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r1, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x0, 0x10000000}, @flat=@binder={0x73622a85, 0x100}, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x82000000000006}) 4m58.011123981s ago: executing program 47 (id=2255): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_BMAP(r1, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000140)={0x25, 0x3, 0x0, {0x4, 0x4, 0x0, 'GPL\x00'}}, 0x25) shmget(0x2, 0x3000, 0x78000000, &(0x7f00003f2000/0x3000)=nil) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x7, 0x9, 0x1}, 0x50) 4m57.835815576s ago: executing program 48 (id=2256): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100037040100"/20, @ANYRES32=r4, @ANYBLOB="c30801000b2eba2628001280090001007665746800000000180002801400010000000000", @ANYRES32=r4, @ANYBLOB="0002020081025495"], 0x48}, 0x1, 0x0, 0x0, 0x404c000}, 0x14) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x170, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe2, 0xa8, @random="e09163270d7070ac38774108f7165f0bba78f4fc06155b4f0e9129b4e0373219a4adf1f612d832cdac1147980bfdc15e6884ff090df3dccaf52cd7d2e1c4260e2aa6aae5d9916409b9286daf91fe86fa8d7a096efcdc68782029dacacb32fbd6fd5814ee94d979bae72a75d803113d9faa0ca506fbc1b3b50f37cf94ba54c5337018273c311fc2f854025d08393afee67258575f7adc228613e094c25cc262090f192798ed0c954938ef752b6c4e08ccf06375eadbee70dcc32bbcf9b5aa433fc518964e3727f844c0024c7c0c1d9efae5fa24793898eed18b274a788865"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x170}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000)=0x3, 0x4) close(r6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r1, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x0, 0x10000000}, @flat=@binder={0x73622a85, 0x100}, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x82000000000006}) 1m8.630401696s ago: executing program 0 (id=2264): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000002c0)={0x3f}) timer_getoverrun(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f0000000100)='-1\x00', 0x2) 1m5.11998951s ago: executing program 0 (id=2381): socket$nl_rdma(0x10, 0x3, 0x14) fremovexattr(0xffffffffffffffff, &(0x7f0000000400)=@known='security.apparmor\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109042, 0x15) pwrite64(r4, &(0x7f0000000000)="ff", 0x1, 0x1000000) 58.214464748s ago: executing program 0 (id=2383): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r2, 0x101843) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) pwritev(r3, &(0x7f0000000480)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x8b, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x40000000) 54.114887902s ago: executing program 9 (id=2263): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x44050) syz_open_dev$I2C(0x0, 0x2, 0x94bc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x25) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000012c0)=""/102376, 0x18fe8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) sched_setaffinity(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 50.217516292s ago: executing program 9 (id=2388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socket$inet6(0xa, 0x3, 0x3) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x8) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r4 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x34000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)) 41.847652128s ago: executing program 49 (id=2383): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r2, 0x101843) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) pwritev(r3, &(0x7f0000000480)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x8b, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x40000000) 33.911058661s ago: executing program 50 (id=2388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socket$inet6(0xa, 0x3, 0x3) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x8) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r4 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x34000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)) 10.965877535s ago: executing program 6 (id=2424): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0), 0x0, 0x20004004) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) 10.850488835s ago: executing program 5 (id=2425): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f0000000200)={0x2}, 0x8, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r4, &(0x7f0000000040)="3c5c413ecd45036a2762bb626c65640a", 0x10) 9.703987869s ago: executing program 5 (id=2426): openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(&(0x7f0000000240)='./file0\x00', 0x97) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f00000006c0)=0xe8) stat(&(0x7f0000000400)='mnt/encrypted_dir\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000300), &(0x7f0000000340)='./bus\x00', &(0x7f00000003c0), 0x221800, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="1b726f6f746d6f64653d30303041303030304f30303030303030303036303030302c757365725f69643d", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',blksize=0x0000000000000600,allow_other,max_read=0x0000000000000000,default_permissions,allow_other,blksize=0x0000000000000300,hash,appraise_type=imasig,\x00']) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000280), 0x1004) r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0xd, 0x1, 0x89, 0xd615, 0x7, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, r5, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) 8.712394477s ago: executing program 5 (id=2427): socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7b68fc283eed8441}, 0x28) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x1005c48, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) wait4(0x0, 0x0, 0x0, 0x0) 7.459722119s ago: executing program 5 (id=2428): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0), 0x0, 0x20004004) 7.422853705s ago: executing program 6 (id=2429): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3400202010000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x1, @private2}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000a00)="6b8005dd64cacdced53aa5273e23f7c9db65f75fbed7c768dd0873dd216f64c804dcab4f9db818f4f1397b351ece58159f2b008f38d4a587509134c4c2e88bfd1a7a8e0a222bd55422bb39b8d54b3cb9b38b792e55048fc5f902ef59df515a33f45eac5c9fcec1542c248a9f", 0x6c}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xffff}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000200)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000400)) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) write$binfmt_script(r5, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000001b00), 0xfffffd9d) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 6.251608583s ago: executing program 6 (id=2430): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[], 0x1e, 0x14fd, &(0x7f00000021c0)="$eJzs3Au0jtXWOPA511oPm6Q3yX3NNR/etLFIklyS5JIkyZEkt4QkSZKkcr8lIQm5J7mH5BaS+/2We5Ik7SQJyS1Z/6HT+XRO5/v3ne873zDGt+dvjGfsNd/nneuZ65177Od53j3e97sOg6rUq1qxDjPD/wj+9UdXAEgBgL4AcA0ARABQMlvJbJf2Z9LY9X92EPHv9eDUK12BuJKk/+mb9D99k/6nb9L/9E36n75J/9M36X/6Jv0XIj3bOi33tbKl303e/0/P5Pz/f0ha0dFfrS96fcd/IUX6n75J/9M36X/6Jv1P36T/6Zv0P32T/qdv0n8h0rP//nvH8r+D/wvblf79E0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRPpwNlxkA+Nv4StclhBBCCCGEEEKIf5+Q8UpXIIQQQgghhBBCiP99CAo0GIggA2SEFMgEmeEqyAJXQ1a4BhJwLWSD6yA7XA85ICfkgtyQB/JCPrBA4IAhhvxQAJJwAxSEGyEVCkFhKAIeikIxuAmKw81QAm6BknArlILboDSUgbJQDm6H8nAHVIA7oSLcBZWgMlSBqnA3VIN7oDrcCzXgPqgJ90MteABqw1+gDjwIdeEhqAcPQ314BBpAQ2gEjaHJfyv/RXgJXobO0AW6QjfoDj2gJ/SC3tAH+sIr0A9SfnttBsIgeB0GwxswBN6EoTAMhsNbMAJGwigYDWNgLIyDt2E8vAMT4F2YCJNgMkyBqTANpsN7MANmwix4H2bDBzAH5sI8mA8L4ENYCItgMXwES+BjWArLYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCp/ANtgOO2An7ILdsAc+hb3wGeyDz2E/fPEv5p/5h/yOCAioUKFBgxkwA6ZgCmbGzJgFs2BWzIoJTGA2zIbZMTvmwBw35sJcmAfzYD7Mh4SEjIz5MT8mMYkFsSCmYioWxsLo0WMxLIbF8WYsgSWwJJbEUlgKS2MZLIPlsByWx/JYAStgRayIlbASVsEqeDfejfdgdayONbAG1sSaWAtrYVre2lgH62BdrIv1sB7Wx/rYABtgI2yETbAJNsWm2AybYQtsgS2xJbbCVtgaW2MbbINtsS22w3bYHttjB+yAHfEFfAFfxBfxZXwZu2Al1Q27Y3fsiT2xN/bBPvgK9sNX8VV8DQfgQByEr+Pr+AYOwdM4FIfhcByO5dVIHIWjkdVYHIfjcDyOxwk4ASfiJJyEU3AqTsPpOB1n4Eycie/jbPwAP8C5OBfn4wJcgAtxES7GxbgEz+BSXIbLcQWuxFW4EtfgWlyD63EDrsdNuAm34Bb8BD/B7bgdd+JO3I0GAD/Fz/AzHID7cT8ewAN4EA/iITyEaZiGh/EwHsEjeBSP4jE8hsfxBJ7EE3gKT+FpPINn8Syex/N4AZ/L803d3YXWDQB1iVFGZVAZVIpKUZlVZpVFZVFZVVaVUAmVTWVT2VV2lUPlULlULpVH5VH51DlFihSrWOVX+VVSJVVBVVClqlRVWBVWXnlVTBVTxVVxVUKVUCXVraqUuk2VVmVUc19OlVPlVQtfQd2pKqqKqpKqrKqoqqqqqqaqqeqquqqhaqiaqqaqpR5QtVU37I0PqkudqacGYn01CBuohqqRaqzewEdVUzUEm6nmqoV6XA3DodhKNfWt1VOqjRqFbdUzajQ+q9qrsdhBPa86qhdUJ/Wiekk1851VFzURu6nuagr2VL1Ub9VHzcDK6lLHqqjX1AA1UA1Sr6v5+IYaot5UQ9UwNVy9pUaokWqUGq3GqLFqnHpbjVfvqAnqXTVRTVKT1RQ1VU1T09V7aoaaqWap99Vs9YGao+aqeWq+WqA+VAvVIrVYfaSWqI/VUrVMLVcr1Eq1Sq1Wa9RatU6tVxvURrVJbVZb1Fb1idqmtqsdaqfapXarPepTtVd9pvapz9V+9YU6oL5UB9VX6pD6WqWpb9Rh9a06or5TR9X36pj6QR1XJ9RJ9aM6pX5Sp9UZdVadU+fVz+qC+kVdVEGBRq201kZHOoPOqFN0Jp1ZX6Wz6Kt1Vn2NTuhrdTZ9nc6ur9c5dE6dS+fWeXRenU9bTdpp1rHOrwvopL5BF9Q36lRdSBfWRbTXRXUxfZMurm/WJfQtuqS+VZfSt+nSuowuq8vp23V5fYeuoO/UFfVdupKurKvoqvpuXU3fo6vre3UNfZ+uqe/XtfQDurb+i66jH9R19UO6nn5Y19eP6Aa6oW6kG+sm+lHdVD+mm+nmuoV+XLfUT+hW+kndWj+l2+indVv9jG6nn9Xt9XO6g35ed9Qv6E76F31RB91Zd9FddTfdXffQPXUv3Vv30X31K7qfflX316/pAXqgHqRf14P1G3qIflMP1cP0cP2WHqFH6lF6tB6jx+px+m09Xr+jJ+h39UQ9SU/WU/RUPU33/m2mWf+F/Hf+SX7/X4++RW/Vn+hterveoXfqXXq33qP36L16r96n9+n9er8+oA/og/qgPqQP6TSdpg/rw/qIPqKP6qP6mD6mj+sT+pz+UZ/SP+nT+ow+o8/p8/q8vvDbawAGjTLaGBOZDCajSTGZTGZzlclirjZZzTUmYa412cx1Jru53uQwOU0uk9vkMXlNPmMNGWfYxCa/KWCS5gb87aRpCpsixpuippi56V/JNwXNjSbVFPq7/D+rr4lpYpqapqaZaWZamBampWlpWplWprVpbdqYNqataWvamXamvWlvOpgOpqPpaDqZTuYl85LpbDqbrqar6W56mJ6ml+lt+pi+5hXTz/Qz/U1/M8AMMIPMIDPYDDZDzBAz1Aw1w81wM8KMMKPMKDPGjDHjzDgz3ow3E8wEM9FMNJPNZDPVTDXTzXQzw8wws8wsM9vMNnPMHDPPzDMLzAKz0Cw0i81is8QsMUvNMrPMrDArzCqzyqwxa8w6s85sMBvMJrPJLM241Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQXPIHDJpJs0cNofNEXPEHDVHzTFzzBw3x81Jc9KcMqfMaXPanDVnzXlz3lwwF8xFc/HSZV+kIhWZyEQZogxRSpQSZY4yR1miLFHWKGuUiBJRtihblD26PsoR5YxyRbmjPFHeKF9kI4pcxFEc5Y8KRMnohqhgdGOUGhWKCkdFIh8VjYpFN0XFo5ujEtEtUcno1qhUdFtUOioTlY3KRbdH5aM7ogrRnVHF6K6oUlQ5qhJVje6OqkX3RNWje6Ma0X1Rzej+qFb0QFQ7+ktUJ3owqhs9FNWLHo7qR49EDaKGUaOocdTk3zp/CKdzPuY72y62q+1mu9setqftZXvbPravfcX2s6/a/vY1O8AOtIPs63awfcMOsW/aoXaYHW7fsiPsSDvKjrZj7Fg7zr5tx9t37AT7rp1oJ9nJdoqdaqfZ6fY9O8POtLPs+3a2/cDOsXPtPDvfLrAf2oV2kV1sP7JL7Md2qV1ml9sVdqVdZVfbNXatXWfX2w12o91kN9stdqv9xG6z2+0Ou9PusrvtHvup3Ws/s/vs53a//cIesF/ag/Yre8h+bdPsN/aw/dYesd/Zo/Z7e8z+YI/bE/ak/dGesj/Z0/aMPWvP2fP2Z3vB/mIv2nDp4v7S6Z0MGcpAGSiFUigzZaYslIWyUlZKUIKyUTbKTtkpB+WgXJSL8lAeykf56BImpvyUn5KUpIJUkFIplQpTYfLkqRgVo+JUnEpQCSpJJakUlaLSVJrKUlm6nW6nO+gOupPupLvoLqpMlakqVaVqVI2qU3WqQTWoJtWkWlSLalNtqkN1qC7VpXpUj+pTfWpADagRNaIm1ISaUlNqRs2oBbWgltSSWlErak2tqQ21obbUltpRO2pP7akDdaCO1JE6USd6iV6iztSZulJX6k7dqSf1pN7Um/pSX+pH/ag/9acBNIAG0SAaTINpCA2hoTSMhtNbNIJG0igaTWNoLI2jcTSextMEmkATaSJNpsk0labSdJpOM2gGzaJZNJtm0xyaQ/NoHi2gBbSQFtJiWkxLaAktpaW0nJbTSlpJq2k1raW1tJ7W00baSJtpM22lrbSNttEO2kG7aBftoT20l/bSPtpH+2k/HaADdJAO0iE6RGmURofpMB2hI3SUjtIxOkbH6TidpJN0ik7RaTpNZ+ksnaef6QL9QhcpUIrL5DK7q1wWd7XL6q5x/xjncrldHpfX5XPW5XA5/y4m51yqK+QKuyLOu6KumLvJpV66pfpdXNqVcWVdOXe7K+/ucBX+EFdz97jq7l5Xw93nqrq7/y6u6e53tdzDrrZ7xNVxDV1d19jVcw+7+u4R18A1dI1cY9fSPeFauSdda/eUa+Oe/kO80C1ya906t95tcHvdZ+6sO+eOuO/cefez6+y6uL7uFdfPver6u9fcADfwD/Fw95Yb4Ua6UW60G+PG/iGe7Ka4qW6am+7eczPczD/EC9yHbrZb7Oa4uW6em/9rfKmmxe4jt8R97Ja6ZW65W+FWulVutVvzH7WucJvcZrfF7XGfum1uu9vhdrpdbvev8aV17HOfu/3uC3fYfesOuq/cIXfUpblvfo0vre+o+94dcz+44+6EO+l+dKfcT+60O/Pr+i+t/Uf3i7voggNGVqzZcMQZOCOncCbOzFdxFr6as/I1nOBrORtfx9n5es7BOTkX5+Y8nJfzsWVix8wx5+cCnOQbuCDfyKlciAtzEfZclIvxTVycb+YSfAuX5Fu5FN/GpbkMl+VyfDuX5zu4At/JFfkursSVuQpX5bu5Gt/D1flersH3cU2+n2vxA1yb/8J1+EGuyw9xPX6Y6/Mj3IAbciNuzE34UW7Kj3Ezbs4t+HFuyU9wK36SW/NT3Iaf5rb8DLfjZ7k9P8cd+HnuyC9wJ36RX+KXuTN34a7cjbtzD+7Jvbg39+G+/Ar341e5P7/GA3ggD+LXeTC/wUP4TR7Kw3g4v8UjeCSP4tE8hsfyOH6bx/M7PIHf5Yk8iSfzFJ7K03g6v8czeCbP4vd5Nn/Ac3guz+P5vIA/5IW8iBfzR7yEP+alvIyX8wpeyat4Na/htbyO1/MG3sibeDNv4a38CW/j7byDd/Iu3s17+FPey5/xPv6c9/MXfIC/5IP8FR/irzmNv+HD/C0f4e/4KH/Px/gHPs4n+CT/yKf4Jz7NZ/gsn+Pz/DNf4F/4IgeGGGMV69jEUZwhzhinxJnizPFVcZb46jhrfE2ciK+Ns8XXxdnj6+Mccc44V5w7zhPnjfPFNqbYxRzHcf64QJyMb4gLxjfGqXGhuHBcJPZx0bhYfFNcPL45LhHfEpeMb41LxbfFpeMy8cP3lYtvj8vHd8QV4jvjivFdcaW4clwlrhrfHVeL74mrx/fGNeL74hLx/XGt+IEYfvu8St34obhe/HBcP34kbhA3jBvFjeMm8aNx0/ixuFncPG4RPx63jJ+IW8VPxq3jp+I28dN/ur9r3C3uHveIe8Qh3KvnJecnFyQ/TC5MLkouTn6UXJL8OLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklGULVjODRK6+98ZHP4DP6FJ/JZ/ZX+Sz+ap/VX+MT/lqfzV/ns/vrfQ6f0+fyuX0en9fn89aTd5597PP7Aj7pb/AF/Y0+1RfyhX0R731RX8w39k18E9/UP+ab+ea+hX/cP+6f8E/4J/2T/infxj/t2/pnfDv/rG/vn/PP+ed9R/+C7+Rf9C/5l31n38V39V19d9/d9/Q9fW/f2/f1fX0/38/39/39AD/AD/KD/GA/2A/xQ/xQP9QP98P9CD/Cj/Kj/Bg/xo/z4/x4P95P8BP8RD/RT/aT/VQ/1U/30/0MP8PP8rP87NTZfo6f4+f5eX6BX+AX+oV+sV/sl/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/2qf5b/xh/60/4r/zR/33/pj/wR/3J/xJ/6M/5X/yp/0Zf9af8+f9z/6C/8Vf9MGPS7ydGJ94JzEh8W5iYmJSYnJiSmJqYlpieuK9xIzEzMSsxPuJ2YkPEnMScxPzEvMTCxIfJhYmFiUWJz5KLEl8nFiaWJZYnliRWJlYlQgh77Y45A8FQjLcEAqGG0NqKBQKhyLBh6KhWLgpFA83hxLhllAy3BpKhdtC6VAmlA2PhAahYWgUGocm4dHQNDwWmoXmoUV4PLQMT4RW4cnQOjwV2oSnQ9vwTGgXng3tw3OhQ3g+dPzbHVd4OXQOXULX0C10Dz1Cz9Ar9A59Qt/wSugXXg39w2thQBgYBoXXw+DwRhgS3gxDw7AwPLwVRoSRYVQYHcaEsWFceDuMD++ECeHdMDFMCpPDlDA1TAvTw3thRpgZZoX3w+zwQZgT5oZ5YX5YED4MC8OisDh8FJaEj8PSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBJ2Ba2hx1hZ9gVdoc94dOwN3wW9oXPw/7wRTgQvgwHw1fhUPg6pIVvwuHwbTgSvgtHw/fhWPghHA8nwsnwYzgVfgqnw5lwNpwL58PP4UL4JVyUz6wJIYQQQvyX9PiT/d3+yWMGANRv4+4AcPX23Gm/368BYGOOv457qTwtEwDwVJcOD/5tq1Spa9euvz13qYaowFwASPzDAX6Ll0ELeAJaQ3Mo/k/r66VeOM9/Mn/yVoDMv8tJgcvx5fm//E/mf/Tx4QtLxWez/X/mnwuQWuByTia4HC+DFpdWA82hxH8yf86mf1J/pq/GATT7XU4WuBxfrr8YPAZPQ+u/e6YQQgghhBBCCPFXvVTZdn92/3zp/jyPuZyTES7Hf3Z/LoQQQgghhBBCiCvv2Rc6Pflo69bN28lABjKQwX8MrvRfJiGEEEIIIcS/2+WL/suPZbqSBQkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOnQ7770KxMA/K98ndiVXqMQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQghxpf2/AAAA//+7dzOa") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x80}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000300000000000000a300081dbd69d546428b003c1f050000"], 0x48) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x4000, &(0x7f0000000f80)=ANY=[@ANYBLOB="726f6469722c726f6469722c73686f72746e616d653d77696e39352c757466383d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c7574e1ceece133b051e34e66383d302c73686fe8746e616d653d77696e39352c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c757365667265652c757466383d312c666c7573682c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c747a3d5554432c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d6d616363656c7469632c00"], 0x1, 0x36b, &(0x7f0000000340)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 6.249336323s ago: executing program 5 (id=2436): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0xc000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000850}, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) setpriority(0x1, 0x0, 0x80000000) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000480), 0x482, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xa) 2.18643534s ago: executing program 6 (id=2431): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) socket$kcm(0x29, 0x2, 0x0) mount(&(0x7f0000000040)=@filename='configfs\x00', 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r4 = fanotify_init(0x4, 0x1) fanotify_mark(r4, 0x20, 0x40000000, 0xffffffffffffffff, &(0x7f0000000580)='configfs\x00') fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000000c0)=0x4, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xc2}, 0x1c) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.108465432s ago: executing program 6 (id=2432): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f0000000200)={0x2}, 0x8, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r4, &(0x7f0000000040)="3c5c413ecd45036a2762bb626c65640a", 0x10) 1.029667616s ago: executing program 5 (id=2433): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x1c8983, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x40046607, &(0x7f00000003c0)={@id, 0x10, 0x0, '\x00', @d}) mount(0x0, &(0x7f0000000140)='./dev\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r2, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") 0s ago: executing program 6 (id=2434): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)="2e2f30a9efdfd4981b0c2ad178c2a1b338000000", 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='1', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='loop\n', 0x5) close(r4) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x500, 0x0) write(r5, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): in warm state [ 483.692492][ T8] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -110 [ 484.922425][ T6796] usb 7-1: USB disconnect, device number 7 [ 485.254035][T14638] syzkaller0: entered promiscuous mode [ 485.269038][T14638] syzkaller0: entered allmulticast mode [ 486.870164][T14658] syzkaller0: entered promiscuous mode [ 486.905748][T14658] syzkaller0: entered allmulticast mode [ 492.591028][T14716] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 496.138026][T14731] overlayfs: overlapping lowerdir path [ 497.701278][T14754] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1799'. [ 497.781475][T14754] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1799'. [ 501.691539][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.697970][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.955366][ T5813] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 507.150542][ T5813] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.193874][ T5813] usb 6-1: config 0 has no interfaces? [ 507.227198][ T5813] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 507.268416][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 507.317795][ T5813] usb 6-1: SerialNumber: syz [ 507.466822][ T5813] usb 6-1: config 0 descriptor?? [ 509.800530][T14830] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input27 [ 509.933282][ T5813] usb 6-1: USB disconnect, device number 8 [ 510.476573][T14869] overlayfs: failed to clone upperpath [ 514.958077][T14916] netlink: 'syz.6.1835': attribute type 10 has an invalid length. [ 515.113580][T14916] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.121036][T14916] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.284801][T14916] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.292001][T14916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.299421][T14916] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.306541][T14916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.601678][T14916] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 515.713735][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1835'. [ 515.798042][T14919] bridge_slave_1: left allmulticast mode [ 515.830168][T14919] bridge_slave_1: left promiscuous mode [ 515.889139][T14919] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.969126][T14919] bridge_slave_0: left allmulticast mode [ 516.011907][T14919] bridge_slave_0: left promiscuous mode [ 516.040238][T14919] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.234874][T14919] bond0: (slave bridge0): Releasing backup interface [ 516.522516][T14949] syz.4.1838: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 516.619906][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1836'. [ 516.629500][ C0] hrtimer: interrupt took 719694 ns [ 516.676050][T14949] CPU: 0 PID: 14949 Comm: syz.4.1838 Not tainted syzkaller #0 [ 516.683532][T14949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 516.693616][T14949] Call Trace: [ 516.696890][T14949] [ 516.699812][T14949] dump_stack_lvl+0x18c/0x250 [ 516.704510][T14949] ? show_regs_print_info+0x20/0x20 [ 516.709737][T14949] ? load_image+0x420/0x420 [ 516.714236][T14949] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 516.720641][T14949] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 516.727135][T14949] warn_alloc+0x246/0x340 [ 516.731478][T14949] ? zone_watermark_ok_safe+0x230/0x230 [ 516.737015][T14949] ? _raw_spin_unlock+0x28/0x40 [ 516.741855][T14949] ? memset_orig+0x36/0xac [ 516.746261][T14949] __vmalloc_node_range+0x661/0x1320 [ 516.751586][T14949] ? __alloc_pages+0xae/0x460 [ 516.756258][T14949] ? free_vm_area+0x50/0x50 [ 516.760769][T14949] ? packet_set_ring+0x77d/0x2490 [ 516.765806][T14949] vzalloc+0x79/0x90 [ 516.769696][T14949] ? packet_set_ring+0x77d/0x2490 [ 516.774709][T14949] packet_set_ring+0x77d/0x2490 [ 516.779566][T14949] ? packet_mmap+0x510/0x510 [ 516.784140][T14949] ? __lock_acquire+0x7d80/0x7d80 [ 516.789150][T14949] ? __local_bh_enable_ip+0x13a/0x1c0 [ 516.794503][T14949] ? lockdep_hardirqs_on+0x98/0x150 [ 516.799683][T14949] ? __might_fault+0xaa/0x120 [ 516.804344][T14949] ? __might_fault+0xc6/0x120 [ 516.808999][T14949] ? __might_fault+0xaa/0x120 [ 516.813677][T14949] ? _copy_from_user+0xa5/0xe0 [ 516.818445][T14949] packet_setsockopt+0xdb0/0x1500 [ 516.823457][T14949] ? packet_ioctl+0x350/0x350 [ 516.828129][T14949] ? aa_sk_perm+0x83c/0x970 [ 516.832619][T14949] ? __fget_files+0x28/0x460 [ 516.837196][T14949] ? aa_af_perm+0x330/0x330 [ 516.841684][T14949] ? __fget_files+0x28/0x460 [ 516.846261][T14949] ? aa_sock_opt_perm+0x74/0x100 [ 516.851183][T14949] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 516.856730][T14949] ? security_socket_setsockopt+0x7e/0xa0 [ 516.862441][T14949] ? packet_ioctl+0x350/0x350 [ 516.867104][T14949] do_sock_setsockopt+0x175/0x1a0 [ 516.872130][T14949] ? __fdget+0x180/0x210 [ 516.876357][T14949] __x64_sys_setsockopt+0x182/0x200 [ 516.881570][T14949] do_syscall_64+0x55/0xb0 [ 516.885994][T14949] ? clear_bhb_loop+0x40/0x90 [ 516.890668][T14949] ? clear_bhb_loop+0x40/0x90 [ 516.895371][T14949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.901266][T14949] RIP: 0033:0x7f170d59e159 [ 516.905696][T14949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.925328][T14949] RSP: 002b:00007f170e4ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 516.933745][T14949] RAX: ffffffffffffffda RBX: 00007f170d826090 RCX: 00007f170d59e159 [ 516.941706][T14949] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000005 [ 516.949665][T14949] RBP: 00007f170d63506b R08: 000000000000001c R09: 0000000000000000 [ 516.957646][T14949] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 516.965621][T14949] R13: 00007f170d826128 R14: 00007f170d826090 R15: 00007ffed8422638 [ 516.973660][T14949] [ 518.056745][T14971] loop5: detected capacity change from 0 to 8 [ 518.885913][T14972] bond_slave_0: entered promiscuous mode [ 518.892413][T14972] bond_slave_1: entered promiscuous mode [ 519.078470][T14972] vlan2: entered promiscuous mode [ 519.125849][T14972] bond0: entered promiscuous mode [ 519.999963][T14949] Mem-Info: [ 520.031891][T14949] active_anon:40854 inactive_anon:0 isolated_anon:0 [ 520.031891][T14949] active_file:18560 inactive_file:40241 isolated_file:0 [ 520.031891][T14949] unevictable:3111 dirty:24 writeback:13 [ 520.031891][T14949] slab_reclaimable:12270 slab_unreclaimable:99572 [ 520.031891][T14949] mapped:25612 shmem:36460 pagetables:606 [ 520.031891][T14949] sec_pagetables:0 bounce:0 [ 520.031891][T14949] kernel_misc_reclaimable:0 [ 520.031891][T14949] free:1281457 free_pcp:11239 free_cma:0 [ 520.513558][T14949] Node 0 active_anon:153228kB inactive_anon:0kB active_file:74236kB inactive_file:160748kB unevictable:10908kB isolated(anon):0kB isolated(file):0kB mapped:102308kB dirty:32kB writeback:12kB shmem:129996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10832kB pagetables:2272kB sec_pagetables:0kB all_unreclaimable? no [ 522.216230][T15004] syzkaller0: entered promiscuous mode [ 522.243508][T14949] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 522.311058][T15004] syzkaller0: entered allmulticast mode [ 522.602940][T14949] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 522.906715][T14949] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 522.912976][T14949] Node 0 DMA32 free:1190464kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:173552kB inactive_anon:0kB active_file:74236kB inactive_file:159944kB unevictable:10908kB writepending:60kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:42832kB local_pcp:42832kB free_cma:0kB [ 523.194881][T15018] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1851'. [ 523.300063][T14949] lowmem_reserve[]: 0 0 0 0 0 [ 523.363774][T14949] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:812kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 523.704803][T14949] lowmem_reserve[]: 0 0 0 0 0 [ 525.165665][T14949] Node 1 Normal free:3902064kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8288kB local_pcp:8288kB free_cma:0kB [ 525.435285][T14949] lowmem_reserve[]: 0 0 0 0 0 [ 525.440432][T14949] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 525.548799][T14949] Node 0 DMA32: 690*4kB (UME) 87*8kB (UME) 202*16kB (UME) 8*32kB (UE) 32*64kB (UME) 176*128kB (ME) 73*256kB (M) 30*512kB (M) 5*1024kB (M) 2*2048kB (UM) 272*4096kB (UM) = 1188896kB [ 525.659764][T14949] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 525.748430][T14949] Node 1 Normal: 240*4kB (UME) 64*8kB (UE) 33*16kB (UME) 233*32kB (UME) 76*64kB (UE) 17*128kB (UME) 2*256kB (UE) 2*512kB (UM) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3902064kB [ 525.879610][T14949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.966686][T14949] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 526.050467][T14949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 526.123053][T14949] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 526.694698][T14949] 93166 total pagecache pages [ 526.724617][T14949] 0 pages in swap cache [ 526.758741][T14949] Free swap = 124708kB [ 526.788787][T14949] Total swap = 124996kB [ 526.821990][T14949] 2097051 pages RAM [ 526.851702][T14949] 0 pages HighMem/MovableOnly [ 526.884793][T14949] 416965 pages reserved [ 528.388724][T14949] 0 pages cma reserved [ 531.088331][T15057] syzkaller0: entered promiscuous mode [ 531.119013][T15057] syzkaller0: entered allmulticast mode [ 542.035574][T15119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1871'. [ 542.118930][T15119] mac80211_hwsim hwsim29 wlan1: left allmulticast mode [ 542.170672][T15119] mac80211_hwsim hwsim29 wlan1: left promiscuous mode [ 542.220456][T15119] bridge0: port 3(wlan1) entered disabled state [ 542.455802][T15119] bridge_slave_1: left allmulticast mode [ 542.809716][T15119] bridge_slave_1: left promiscuous mode [ 542.855914][T15119] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.924399][T15119] bridge_slave_0: left allmulticast mode [ 542.949296][T15119] bridge_slave_0: left promiscuous mode [ 542.980594][T15119] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.357009][T15119] team0: Port device bridge0 removed [ 543.496175][T15130] block device autoloading is deprecated and will be removed. [ 543.659433][ T5778] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 543.715171][T15129] md: invalid raid superblock magic on ram0 [ 543.777761][T15129] md: ram0 does not have a valid v0.0 superblock, not importing! [ 543.857298][T15129] md: md_import_device returned -22 [ 549.878524][T15169] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input29 [ 552.058264][T15188] overlayfs: failed to clone upperpath [ 552.562151][T15197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1890'. [ 552.835384][T15201] bond3: entered promiscuous mode [ 552.879578][T15201] bond3: entered allmulticast mode [ 558.492296][T15236] vlan0: entered promiscuous mode [ 563.139542][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.149245][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.376078][T15296] netlink: 'syz.2.1909': attribute type 4 has an invalid length. [ 568.114564][ T27] audit: type=1326 audit(2000000239.950:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15308 comm="syz.2.1912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b12f9e159 code=0x0 [ 568.306330][ T27] audit: type=1326 audit(2000000240.080:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15308 comm="syz.2.1912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b12f9e159 code=0x0 [ 569.724615][T15334] loop6: detected capacity change from 0 to 128 [ 569.861870][T15334] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 570.953450][T15334] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 572.526462][T14007] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 579.893584][T15406] loop6: detected capacity change from 0 to 512 [ 579.994968][T15406] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 580.386058][T15406] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.1929: invalid indirect mapped block 4294967295 (level 0) [ 580.585686][T15406] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.1929: invalid indirect mapped block 4294967295 (level 1) [ 582.570902][T15406] EXT4-fs (loop6): 1 orphan inode deleted [ 582.628014][T15406] EXT4-fs (loop6): 1 truncate cleaned up [ 582.672627][T15406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.710739][T15424] loop5: detected capacity change from 0 to 512 [ 582.795235][T15424] EXT4-fs: Ignoring removed nobh option [ 582.890892][T15424] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1932: invalid indirect mapped block 256 (level 2) [ 582.952887][T15406] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.142500][T15424] EXT4-fs (loop5): 2 truncates cleaned up [ 583.224934][T15424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.607919][T15423] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.1932: bg 0: block 5: invalid block bitmap [ 585.431711][T15414] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 585.630488][T15423] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 585.643954][T15423] EXT4-fs (loop5): This should not happen!! Data will be lost [ 585.643954][T15423] [ 585.654399][T15423] EXT4-fs (loop5): Total free blocks count 0 [ 585.660867][T15423] EXT4-fs (loop5): Free/Dirty block details [ 585.667415][T15423] EXT4-fs (loop5): free_blocks=0 [ 585.672752][T15423] EXT4-fs (loop5): dirty_blocks=33 [ 585.678453][T15423] EXT4-fs (loop5): Block reservation details [ 585.684883][T15423] EXT4-fs (loop5): i_reserved_data_blocks=33 [ 585.813887][T12879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.504464][T15485] kvm: kvm [15483]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 598.157601][ T27] audit: type=1800 audit(2000000269.780:165): pid=15548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1957" name="no_out_endpoint" dev="configfs" ino=44069 res=0 errno=0 [ 598.233749][T15544] tipc: Enabled bearer , priority 0 [ 598.369454][T15550] syzkaller0: entered promiscuous mode [ 598.446184][ T27] audit: type=1800 audit(2000000269.892:166): pid=15543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1957" name="subclass" dev="configfs" ino=44071 res=0 errno=0 [ 598.472609][T15550] syzkaller0: entered allmulticast mode [ 598.545429][T15544] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 598.704447][ T27] audit: type=1800 audit(2000000269.902:167): pid=15543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1957" name="report_length" dev="configfs" ino=44072 res=0 errno=0 [ 598.852625][T15556] tipc: Resetting bearer [ 599.021973][T15541] tipc: Resetting bearer [ 599.289256][T15541] tipc: Disabling bearer [ 601.130897][T15568] syzkaller0: entered promiscuous mode [ 601.136861][T15568] syzkaller0: entered allmulticast mode [ 605.508273][T15596] ip_tables: iptables: counters copy to user failed while replacing table [ 606.321878][ T27] audit: type=1326 audit(2000000277.413:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.4.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170d59e159 code=0x7ffc0000 [ 606.463209][ T27] audit: type=1326 audit(2000000277.413:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.4.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170d59e159 code=0x7ffc0000 [ 606.581337][T15601] loop5: detected capacity change from 0 to 32768 [ 606.589352][ T27] audit: type=1326 audit(2000000277.450:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.4.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f170d59e159 code=0x7ffc0000 [ 606.709035][T15601] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 606.722967][ T27] audit: type=1326 audit(2000000277.450:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.4.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170d59e159 code=0x7ffc0000 [ 606.852417][ T27] audit: type=1326 audit(2000000277.450:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.4.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170d59e159 code=0x7ffc0000 [ 606.984054][T15601] XFS (loop5): Ending clean mount [ 607.047326][ T27] audit: type=1326 audit(2000000277.469:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.4.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f170d59e159 code=0x7ffc0000 [ 607.172920][T15601] XFS (loop5): Quotacheck needed: Please wait. [ 607.235302][ T27] audit: type=1326 audit(2000000277.469:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.4.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170d59e159 code=0x7ffc0000 [ 607.410286][T15601] XFS (loop5): Quotacheck: Done. [ 607.415732][ T27] audit: type=1326 audit(2000000277.478:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.4.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f170d55e98e code=0x7ffc0000 [ 607.734226][ T27] audit: type=1326 audit(2000000277.478:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.4.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170d59e159 code=0x7ffc0000 [ 608.268292][T12879] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 608.289289][ T27] audit: type=1326 audit(2000000277.478:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.4.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170d59e159 code=0x7ffc0000 [ 609.968966][T15629] gadgetfs: bound to dummy_udc driver [ 610.271399][ T5811] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 610.284551][ C0] gadgetfs: connected [ 610.310148][ T5811] gadgetfs: disconnected [ 610.513024][ C0] gadgetfs: connected [ 610.529099][ T5811] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 610.544852][ T5811] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 610.573484][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.600078][ C0] gadgetfs: configuration #1 [ 610.747738][T15627] gadgetfs: suspended from state 3 [ 610.768661][T15627] gadgetfs: disconnected [ 610.776205][ T5811] usb 1-1: USB disconnect, device number 5 [ 614.773505][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1981'. [ 614.817335][T15642] syz_tun: entered allmulticast mode [ 618.943903][T15653] block nbd6: shutting down sockets [ 619.413832][T15664] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1988'. [ 620.019413][T15669] No source specified [ 620.028818][T15664] netlink: 'syz.6.1988': attribute type 11 has an invalid length. [ 620.996574][T15681] tipc: Enabling of bearer rejected, failed to enable media [ 621.501347][T15685] kvm: kvm [15683]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80000000139b [ 621.671071][T15685] kvm: kvm [15683]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 626.894349][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.901193][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.278531][T15761] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input30 [ 647.437726][T15843] loop6: detected capacity change from 0 to 512 [ 647.578255][T15843] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 647.626808][T15843] System zones: 1-12 [ 647.694395][T15843] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.2023: missing EA_INODE flag [ 647.824293][T15843] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2023: error while reading EA inode 12 err=-117 [ 647.953488][T15843] EXT4-fs (loop6): 1 orphan inode deleted [ 647.993789][T15843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.590151][T15857] overlayfs: upper fs does not support tmpfile. [ 649.975822][T14007] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.090359][T15895] syzkaller0: entered promiscuous mode [ 656.516546][T15895] syzkaller0: entered allmulticast mode [ 656.565956][T15899] tipc: Started in network mode [ 656.605195][T15899] tipc: Node identity de47cb3060af, cluster identity 4711 [ 656.663820][T15899] tipc: Enabled bearer , priority 0 [ 657.386376][T15904] tipc: Resetting bearer [ 657.444410][T15892] tipc: Resetting bearer [ 657.623258][T15892] tipc: Disabling bearer [ 657.849700][ T5830] tipc: Node number set to 3202927408 [ 660.307727][T15917] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 660.316860][T15917] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 660.326367][T15917] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 660.337181][T15917] Error parsing options; rc = [-22] [ 660.860995][T15929] device-mapper: ioctl: device has been removed from the dev hash table. [ 663.273472][T15956] syz_tun: entered allmulticast mode [ 663.347324][T15955] syz_tun: left allmulticast mode [ 674.823930][T16044] loop5: detected capacity change from 0 to 32768 [ 674.994331][T16044] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 675.260521][T16044] XFS (loop5): Ending clean mount [ 675.346324][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2067'. [ 675.964893][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 675.964917][ T27] audit: type=1800 audit(2000000342.563:205): pid=16044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2061" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 676.465113][T16092] ceph: No mds server is up or the cluster is laggy [ 678.479173][T12879] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 681.213983][T16154] loop6: detected capacity change from 0 to 128 [ 681.223510][T16154] zonefs (loop6) ERROR: Not a zoned block device [ 684.000964][ T5778] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 684.028745][ T5778] Bluetooth: hci4: Injecting HCI hardware error event [ 684.090177][ T5778] Bluetooth: hci4: hardware error 0x00 [ 685.097049][T16175] kAFS: No cell specified [ 685.327830][T16184] syzkaller0: entered promiscuous mode [ 685.380104][T16184] syzkaller0: entered allmulticast mode [ 686.860408][T16195] syzkaller0: entered promiscuous mode [ 686.991786][T16195] syzkaller0: entered allmulticast mode [ 688.906425][ T5778] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 689.251070][T16205] netlink: 'syz.6.2090': attribute type 4 has an invalid length. [ 692.302081][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.308984][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.767439][ T5811] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 694.041393][ T5811] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 694.551501][T16228] ceph: No mds server is up or the cluster is laggy [ 694.641524][ T5811] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 704.220512][T16293] overlayfs: failed to clone lowerpath [ 704.276354][T16294] overlayfs: failed to clone lowerpath [ 704.814695][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2108'. [ 705.082224][T16303] loop5: detected capacity change from 0 to 512 [ 705.344027][T16305] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 706.702856][T16303] loop5: detected capacity change from 0 to 1024 [ 706.743607][T16303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.082949][T12879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.824539][T16381] loop5: detected capacity change from 0 to 1024 [ 718.924807][T16381] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 719.076992][T16381] JBD2: no valid journal superblock found [ 719.139334][T16381] EXT4-fs (loop5): Could not load journal inode [ 719.272460][T16384] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 724.811140][T16423] netlink: 'syz.4.2136': attribute type 1 has an invalid length. [ 725.053522][T16427] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.170491][T16427] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.239619][T16427] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.301517][T16427] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.380973][T16427] bond1: (slave geneve2): making interface the new active one [ 725.496188][T16427] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 725.588986][T16423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2136'. [ 725.668296][T16423] bond1: entered promiscuous mode [ 725.741942][T16423] geneve2: entered promiscuous mode [ 725.758044][T16427] syz.4.2136 (16427) used greatest stack depth: 19176 bytes left [ 725.803693][T16423] bond1: entered allmulticast mode [ 725.809237][T16423] geneve2: entered allmulticast mode [ 725.924696][T16423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 727.654437][T16446] tipc: Enabling of bearer rejected, failed to enable media [ 731.720640][T16469] sctp: [Deprecated]: syz.5.2135 (pid 16469) Use of int in maxseg socket option. [ 731.720640][T16469] Use struct sctp_assoc_value instead [ 743.882234][T16558] loop6: detected capacity change from 0 to 512 [ 744.244093][T16558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.987344][T16558] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 749.582507][T14007] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.318820][T16596] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2167'. [ 752.403357][ T27] audit: type=1800 audit(2000000420.056:206): pid=16602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2168" name=08 dev="sda1" ino=2074 res=0 errno=0 [ 761.367966][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 761.468756][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 763.153475][T16625] loop5: detected capacity change from 0 to 128 [ 763.251953][T16625] EXT4-fs (loop5): Test dummy encryption mode enabled [ 763.390507][T16625] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 763.507310][T16625] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 764.237225][T12879] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 765.204852][T16641] loop5: detected capacity change from 0 to 2048 [ 765.381172][T16641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 766.320444][ T27] audit: type=1800 audit(2000000433.086:207): pid=16648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2179" name="UDC" dev="configfs" ino=46763 res=0 errno=0 [ 766.826804][T16657] loop6: detected capacity change from 0 to 164 [ 766.872679][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 767.060961][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 767.075917][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 767.084351][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 767.100141][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 767.394207][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 769.356218][T16671] FAULT_INJECTION: forcing a failure. [ 769.356218][T16671] name failslab, interval 1, probability 0, space 0, times 0 [ 769.369839][T16671] CPU: 0 PID: 16671 Comm: syz.5.2182 Not tainted syzkaller #0 [ 769.377287][T16671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 769.387326][T16671] Call Trace: [ 769.390607][T16671] [ 769.393526][T16671] dump_stack_lvl+0x18c/0x250 [ 769.398212][T16671] ? show_regs_print_info+0x20/0x20 [ 769.403396][T16671] ? load_image+0x420/0x420 [ 769.407905][T16671] ? __might_sleep+0xe0/0xe0 [ 769.412489][T16671] ? __lock_acquire+0x7d80/0x7d80 [ 769.417513][T16671] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 769.424176][T16671] should_fail_ex+0x394/0x4c0 [ 769.428845][T16671] should_failslab+0x9/0x20 [ 769.433333][T16671] slab_pre_alloc_hook+0x59/0x300 [ 769.438357][T16671] ? pcpu_alloc+0x11e7/0x1880 [ 769.443013][T16671] ? percpu_ref_init+0xc3/0x340 [ 769.447845][T16671] __kmem_cache_alloc_node+0x53/0x250 [ 769.453202][T16671] ? percpu_ref_init+0xc3/0x340 [ 769.458029][T16671] ? io_allocate_scq_urings+0x620/0x620 [ 769.463557][T16671] kmalloc_trace+0x2a/0xe0 [ 769.467961][T16671] percpu_ref_init+0xc3/0x340 [ 769.472620][T16671] io_ring_ctx_alloc+0x205/0xc10 [ 769.477541][T16671] io_uring_create+0x2df/0x1330 [ 769.482371][T16671] ? __might_fault+0xc6/0x120 [ 769.487030][T16671] ? __might_fault+0xaa/0x120 [ 769.491690][T16671] __se_sys_io_uring_setup+0x29f/0x2b0 [ 769.497142][T16671] ? __x64_sys_io_uring_setup+0x60/0x60 [ 769.502672][T16671] ? trace_event_buffer_commit+0x258/0x7c0 [ 769.508484][T16671] ? trace_sys_enter+0x1f/0x80 [ 769.513231][T16671] do_syscall_64+0x55/0xb0 [ 769.517630][T16671] ? clear_bhb_loop+0x40/0x90 [ 769.522287][T16671] ? clear_bhb_loop+0x40/0x90 [ 769.526950][T16671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 769.532838][T16671] RIP: 0033:0x7fbbaaf9e159 [ 769.537241][T16671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.556828][T16671] RSP: 002b:00007fbbabe33fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 769.565221][T16671] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007fbbaaf9e159 [ 769.573172][T16671] RDX: 0000200000000040 RSI: 0000200000000340 RDI: 0000000000000021 [ 769.581122][T16671] RBP: 00007fbbab03506b R08: 0000000000000000 R09: 0000000000000000 [ 769.589076][T16671] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000040 [ 769.597046][T16671] R13: 0000200000000140 R14: 0000200000000000 R15: 00007ffeaff220e8 [ 769.605003][T16671] [ 769.721428][ T51] Bluetooth: hci1: command tx timeout [ 770.446798][T16655] chnl_net:caif_netlink_parms(): no params data found [ 770.918325][T16690] syzkaller0: entered promiscuous mode [ 770.977108][T16690] syzkaller0: entered allmulticast mode [ 771.679355][T16655] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.745028][T16655] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.807069][T16655] bridge_slave_0: entered allmulticast mode [ 771.942554][ T51] Bluetooth: hci1: command tx timeout [ 772.006945][T16655] bridge_slave_0: entered promiscuous mode [ 778.724833][ T51] Bluetooth: hci1: command tx timeout [ 781.120531][ T51] Bluetooth: hci1: command tx timeout [ 781.296296][T16655] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.303964][T16655] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.553808][T16655] bridge_slave_1: entered allmulticast mode [ 781.643316][T16655] bridge_slave_1: entered promiscuous mode [ 783.672690][T16655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.908978][T16655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.611556][T16655] team0: Port device team_slave_0 added [ 785.747391][T16655] team0: Port device team_slave_1 added [ 785.811543][T16729] tipc: Enabled bearer , priority 0 [ 785.890687][T16726] syzkaller0: entered promiscuous mode [ 785.929323][T16726] syzkaller0: entered allmulticast mode [ 785.988950][T16729] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 787.606723][T16735] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 787.700499][T16738] tipc: Resetting bearer [ 787.754073][T16655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.815591][T16655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.016286][T16655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.108313][T16655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.191898][T16655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.383955][T16655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.492588][T16723] tipc: Resetting bearer [ 788.770974][T16723] tipc: Disabling bearer [ 789.119875][T16655] hsr_slave_0: entered promiscuous mode [ 789.191154][T16655] hsr_slave_1: entered promiscuous mode [ 789.274398][T16655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 789.346551][T16655] Cannot create hsr debugfs directory [ 789.548312][T16750] loop6: detected capacity change from 0 to 164 [ 791.421260][T16655] netdevsim netdevsim3 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.000154][T16784] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 793.731913][T16655] netdevsim netdevsim3 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.792874][T16792] netlink: 'syz.5.2201': attribute type 10 has an invalid length. [ 793.833836][T16792] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.841774][T16792] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.923628][T16792] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.932068][T16792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.940102][T16792] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.947760][T16792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.028304][T16792] .`: (slave bridge0): Enslaving as an active interface with an up link [ 794.057382][T16793] netlink: 'syz.5.2201': attribute type 10 has an invalid length. [ 794.145148][T16793] 8021q: adding VLAN 0 to HW filter on device .` [ 794.162828][T16793] team0: Port device .` added [ 794.173281][T16799] bridge0: left allmulticast mode [ 794.445397][T16655] netdevsim netdevsim3 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.474761][T16804] netlink: 'syz.4.2203': attribute type 10 has an invalid length. [ 795.592870][T16655] netdevsim netdevsim3 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.439544][T16823] binder: 16822:16823 ioctl c0306201 200000000080 returned -14 [ 796.585825][T16823] binder: 16822:16823 ioctl c0306201 2000000003c0 returned -14 [ 796.641140][T16827] binder_alloc: 16822: binder_alloc_buf size -240 failed, no address space [ 798.239761][T16827] binder_alloc: allocated: 4160 (num: 1 largest: 4160), free: 8128 (num: 1 largest: 8128) [ 799.797213][T16655] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 799.893344][T16655] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 799.969684][T16655] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 800.174470][T16843] netlink: 'syz.4.2214': attribute type 10 has an invalid length. [ 800.231932][T16655] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 800.293507][T16845] netlink: 'syz.4.2214': attribute type 10 has an invalid length. [ 800.332080][T16847] loop6: detected capacity change from 0 to 256 [ 800.349102][T16845] bond0: left promiscuous mode [ 800.377175][T16845] bond_slave_0: left promiscuous mode [ 800.656586][T16845] bond_slave_1: left promiscuous mode [ 801.032838][T16845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.114951][T16845] team0: Port device bond0 added [ 803.195608][T16655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.318118][T16655] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.500112][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.507800][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.706998][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.714702][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.050847][T16655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 804.152854][T16655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 804.293925][T16866] loop5: detected capacity change from 0 to 8 [ 804.454336][T16866] SQUASHFS error: zlib decompression failed, data probably corrupt [ 804.559886][T16866] SQUASHFS error: Failed to read block 0x9b: -5 [ 804.626256][T16866] SQUASHFS error: Unable to read metadata cache entry [99] [ 804.693716][T16866] SQUASHFS error: Unable to read inode 0x127 [ 804.946938][T16866] loop5: detected capacity change from 0 to 4096 [ 805.062008][T16874] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 806.310261][T16655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.330376][T16655] veth0_vlan: entered promiscuous mode [ 809.443788][T16655] veth1_vlan: entered promiscuous mode [ 809.490895][T16896] loop6: detected capacity change from 0 to 256 [ 809.535683][T16897] loop5: detected capacity change from 0 to 256 [ 809.603774][T16896] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 809.663608][T16897] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 809.687716][T16899] ip_tables: iptables: counters copy to user failed while replacing table [ 809.744879][T16655] veth0_macvtap: entered promiscuous mode [ 809.850600][T16655] veth1_macvtap: entered promiscuous mode [ 810.062967][T16655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.196797][T16655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.309458][T16655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.378202][T16908] loop2: detected capacity change from 0 to 7 [ 810.428609][T16655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.463494][T16908] Dev loop2: unable to read RDB block 7 [ 810.469496][T16908] loop2: AHDI p1 p2 p3 [ 810.502341][T16655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.524554][T16908] loop2: partition table partially beyond EOD, truncated [ 810.559243][T16908] loop2: p1 start 1601398130 is beyond EOD, truncated [ 810.566707][T16908] loop2: p2 start 1702059890 is beyond EOD, truncated [ 810.594655][T16655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.627155][T16655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.724905][T16655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.801587][T16655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.927417][T16655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.051232][T16655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.125984][T16655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.698527][T16655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.774665][T16655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.843104][T16655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.944518][T16655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.249728][T16927] loop6: detected capacity change from 0 to 2048 [ 818.266780][T16655] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.371566][T16655] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.286824][T16927] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 821.287253][T16927] EXT4-fs: failed to create workqueue [ 821.304869][T16935] loop5: detected capacity change from 0 to 256 [ 821.343165][T16655] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.407870][T16655] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.668826][T16927] EXT4-fs (loop6): mount failed [ 822.782950][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.875712][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.114561][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.215489][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.769615][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 823.777686][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 824.510502][T16966] loop5: detected capacity change from 0 to 128 [ 824.826839][T16969] loop3: detected capacity change from 0 to 512 [ 824.851480][T16969] EXT4-fs (loop3): Test dummy encryption mode enabled [ 824.858770][T16969] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 824.921830][T16969] EXT4-fs (loop3): 1 truncate cleaned up [ 824.929034][T16969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 827.280680][T16973] SET target dimension over the limit! [ 827.521750][T16655] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.825059][T17002] loop5: detected capacity change from 0 to 1024 [ 834.931529][T17002] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 836.310102][T17002] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 836.520926][T17002] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 836.639317][T17002] EXT4-fs error (device loop5): ext4_get_journal_inode:5820: inode #5: comm syz.5.2240: unexpected bad inode w/o EXT4_IGET_BAD [ 838.523780][T17019] overlayfs: missing 'lowerdir' [ 838.769989][T17002] EXT4-fs (loop5): no journal found [ 838.775661][T17002] EXT4-fs (loop5): can't get journal size [ 838.910646][T17002] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 838.911067][T17002] EXT4-fs: failed to create workqueue [ 839.001230][T17002] EXT4-fs (loop5): mount failed [ 853.586555][ T27] audit: type=1800 audit(2000000514.700:208): pid=17092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2250" name=08 dev="sda1" ino=2074 res=0 errno=0 [ 858.592733][T17121] loop6: detected capacity change from 0 to 8192 [ 864.941561][T17121] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 867.039083][T17133] loop7: detected capacity change from 0 to 16384 [ 867.356156][T17138] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 867.459556][T17139] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2265'. [ 867.495941][T17133] loop7: detected capacity change from 16384 to 0 [ 869.036227][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 869.063271][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 869.080328][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 869.091246][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 869.099873][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 869.111393][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 869.217292][T17156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 869.235128][T17156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 869.244686][T17156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 869.259769][T17156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 869.270027][T17156] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 869.277870][T17156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 871.090362][ T41] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.386876][T17156] Bluetooth: hci1: command tx timeout [ 871.477702][T17156] Bluetooth: hci2: command tx timeout [ 871.699249][ T41] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.157045][ T41] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.579599][ T41] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.615883][T17156] Bluetooth: hci1: command tx timeout [ 873.695135][T17156] Bluetooth: hci2: command tx timeout [ 874.062192][ T41] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.200391][ T41] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.353956][ T41] netdevsim netdevsim3 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.455931][ T41] netdevsim netdevsim3 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.720335][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.775457][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 874.937435][T17154] chnl_net:caif_netlink_parms(): no params data found [ 875.413609][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.525061][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 875.781715][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.834324][T17156] Bluetooth: hci1: command tx timeout [ 875.864803][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 875.920721][T17156] Bluetooth: hci2: command tx timeout [ 879.863506][T17156] Bluetooth: hci1: command tx timeout [ 879.869333][T17156] Bluetooth: hci2: command tx timeout [ 879.914784][T17205] loop6: detected capacity change from 0 to 164 [ 880.722027][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.776294][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 880.909063][T17152] chnl_net:caif_netlink_parms(): no params data found [ 882.771542][T17154] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.779186][T17154] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.857275][T17154] bridge_slave_0: entered allmulticast mode [ 882.901417][T17154] bridge_slave_0: entered promiscuous mode [ 882.950500][T17154] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.012671][T17154] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.071087][T17154] bridge_slave_1: entered allmulticast mode [ 883.078640][T17154] bridge_slave_1: entered promiscuous mode [ 883.241579][ T41] netdevsim netdevsim4 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.490485][ T41] netdevsim netdevsim4 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.617447][ T41] netdevsim netdevsim4 eth20: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.737277][T17152] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.776928][T17152] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.784687][T17152] bridge_slave_0: entered allmulticast mode [ 883.884763][T17152] bridge_slave_0: entered promiscuous mode [ 883.936065][T17152] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.982373][T17152] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.029054][T17152] bridge_slave_1: entered allmulticast mode [ 884.098329][T17152] bridge_slave_1: entered promiscuous mode [ 884.181834][ T41] netdevsim netdevsim4 eth21: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.270962][T17154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.335584][T17154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.621953][T17154] team0: Port device team_slave_0 added [ 884.669005][T17152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.744939][ T41] tipc: Disabling bearer [ 884.787468][ T41] tipc: Left network mode [ 884.823770][T17154] team0: Port device team_slave_1 added [ 884.946026][T17152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.317318][T17154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.375075][T17154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.473872][T17154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.515180][T17247] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2274'. [ 887.715517][T17247] veth0_to_bond: entered promiscuous mode [ 887.737244][T17247] veth0_to_bond: entered allmulticast mode [ 887.860695][T17152] team0: Port device team_slave_0 added [ 887.891834][T17152] team0: Port device team_slave_1 added [ 889.351627][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 889.455240][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 890.346044][T17154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.397831][T17154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.580166][T17154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.874174][T17152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.276992][T17152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.373859][T17152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.022642][T17152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.052775][T17152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 896.147783][T17152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.196325][T17154] hsr_slave_0: entered promiscuous mode [ 896.243574][T17154] hsr_slave_1: entered promiscuous mode [ 896.279984][T17154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 896.321399][T17154] Cannot create hsr debugfs directory [ 899.835700][T17152] hsr_slave_0: entered promiscuous mode [ 899.887736][T17152] hsr_slave_1: entered promiscuous mode [ 899.935993][T17152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 900.178695][T17279] loop6: detected capacity change from 0 to 32768 [ 900.218999][T17152] Cannot create hsr debugfs directory [ 900.271355][T17279] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 900.828733][T14007] ocfs2: Unmounting device (7,6) on (node local) [ 903.575446][ T5813] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 903.858078][ T5813] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.929330][ T5813] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 904.035268][ T5813] usb 7-1: config 0 interface 0 has no altsetting 0 [ 904.099308][ T5813] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 904.174455][ T5813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.234408][ T5813] usb 7-1: config 0 descriptor?? [ 904.572482][ T5813] usbhid 7-1:0.0: can't add hid device: -71 [ 905.977846][ T5813] usbhid: probe of 7-1:0.0 failed with error -71 [ 906.032142][ T5813] usb 7-1: USB disconnect, device number 8 [ 906.215217][T17154] netdevsim netdevsim0 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 906.532753][T17154] netdevsim netdevsim0 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.542810][T17154] netdevsim netdevsim0 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.626383][ T789] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 909.837912][T17154] netdevsim netdevsim0 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.904367][ T789] usb 6-1: device descriptor read/64, error -71 [ 910.065617][ T41] hsr_slave_0: left promiscuous mode [ 910.113923][ T41] hsr_slave_1: left promiscuous mode [ 910.182584][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.193610][ T789] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 910.237387][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.301628][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.309650][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.439022][ T789] usb 6-1: device descriptor read/64, error -71 [ 910.453558][ T41] bridge_slave_1: left allmulticast mode [ 910.548498][ T41] bridge_slave_1: left promiscuous mode [ 910.615042][ T789] usb usb6-port1: attempt power cycle [ 910.657432][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.086922][ T41] bridge_slave_0: left allmulticast mode [ 911.196076][ T41] bridge_slave_0: left promiscuous mode [ 911.271730][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.464561][ T41] hsr_slave_0: left promiscuous mode [ 911.563954][ T41] hsr_slave_1: left promiscuous mode [ 911.642062][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.706880][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.299898][ T41] veth1_macvtap: left promiscuous mode [ 913.363619][ T41] veth0_macvtap: left promiscuous mode [ 913.418402][ T41] veth1_vlan: left promiscuous mode [ 913.443167][ T41] veth0_vlan: left promiscuous mode [ 913.559220][ T41] veth1_macvtap: left promiscuous mode [ 913.592745][ T41] veth0_macvtap: left promiscuous mode [ 913.598785][ T41] veth1_vlan: left promiscuous mode [ 918.917730][ T41] team0 (unregistering): Port device team_slave_1 removed [ 919.007776][ T41] team0 (unregistering): Port device team_slave_0 removed [ 919.105286][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.214604][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.918524][ T41] bond0 (unregistering): Released all slaves [ 920.072382][ T41] bond1 (unregistering): (slave geneve2): Releasing active interface [ 920.081116][ T41] geneve2 (unregistering): left promiscuous mode [ 920.098037][ T41] geneve2 (unregistering): left allmulticast mode [ 920.385781][ T41] bond1 (unregistering): Released all slaves [ 920.475290][ T41] team0 (unregistering): Port device bridge0 removed [ 921.439059][ T41] team0 (unregistering): Port device team_slave_1 removed [ 921.528364][ T41] team0 (unregistering): Port device team_slave_0 removed [ 921.622943][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 921.725273][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.170625][ T41] team0 (unregistering): Port device bond0 removed [ 922.237523][ T41] bond0 (unregistering): Released all slaves [ 922.271641][ T41] lo (unregistering): left allmulticast mode [ 922.313275][T17369] syzkaller0: entered promiscuous mode [ 922.355008][T17369] syzkaller0: entered allmulticast mode [ 925.693032][T17409] blktrace: Concurrent blktraces are not allowed on loop0 [ 925.911914][T17154] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 926.799522][T17152] netdevsim netdevsim9 eth31 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 927.035886][T17154] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 927.161899][T17154] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 927.248703][T17154] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 927.729079][T17152] netdevsim netdevsim9 eth30 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 927.795495][ T27] audit: type=1800 audit(2000000584.107:209): pid=17424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2294" name=08 dev="sda1" ino=2074 res=0 errno=0 [ 928.302119][T17428] loop5: detected capacity change from 0 to 164 [ 928.678864][T17152] netdevsim netdevsim9 eth29 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 928.807416][T17433] loop5: detected capacity change from 0 to 512 [ 931.877632][T17152] netdevsim netdevsim9 eth16 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 932.195665][ T41] IPVS: stop unused estimator thread 0... [ 933.914143][T17156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 933.931663][T17156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 933.947747][T17156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 933.960436][T17156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 933.980401][T17156] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 933.988235][T17156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 934.096416][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 934.111323][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 934.150508][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 934.178086][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 934.186285][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 934.194513][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 935.157612][T17462] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 936.970249][T17156] Bluetooth: hci3: command tx timeout [ 936.977626][T17156] Bluetooth: hci5: command tx timeout [ 937.304696][T17463] configfs-gadget.g1 gadget.0: HOST MAC 5a:4f:1f:4c:12:32 [ 937.313023][T17463] configfs-gadget.g1 gadget.0: MAC 9e:90:5e:ee:76:4d [ 938.148060][ T11] netdevsim netdevsim0 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.826899][T17156] Bluetooth: hci5: command tx timeout [ 939.833163][ T51] Bluetooth: hci3: command tx timeout [ 940.257433][ T11] netdevsim netdevsim0 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.872254][ T11] netdevsim netdevsim0 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.971785][ T11] netdevsim netdevsim0 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 941.221341][T17489] syz.5.2304 (17489) used greatest stack depth: 16712 bytes left [ 941.339795][T17451] chnl_net:caif_netlink_parms(): no params data found [ 941.429344][T17449] chnl_net:caif_netlink_parms(): no params data found [ 942.029809][ T51] Bluetooth: hci3: command tx timeout [ 942.035714][T17156] Bluetooth: hci5: command tx timeout [ 944.253446][ T51] Bluetooth: hci3: command tx timeout [ 944.259335][ T51] Bluetooth: hci5: command tx timeout [ 946.603893][T17502] Failed to get privilege flags for destination (handle=0x2:0x0) [ 946.776182][T17451] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.819149][T17451] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.848238][T17509] loop5: detected capacity change from 0 to 512 [ 946.887043][T17451] bridge_slave_0: entered allmulticast mode [ 946.928278][T17509] EXT4-fs error (device loop5): ext4_ext_check_inode:532: inode #4: comm syz.5.2306: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 946.959742][T17451] bridge_slave_0: entered promiscuous mode [ 946.983528][T17509] EXT4-fs error (device loop5): ext4_quota_enable:7147: comm syz.5.2306: Bad quota inode: 4, type: 1 [ 946.999183][T17509] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 947.016212][T17509] EXT4-fs (loop5): mount failed [ 949.160589][T17451] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.222436][T17451] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.278969][T17451] bridge_slave_1: entered allmulticast mode [ 949.332085][T17451] bridge_slave_1: entered promiscuous mode [ 949.377448][T17449] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.414508][T17449] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.459908][T17449] bridge_slave_0: entered allmulticast mode [ 949.498801][T17449] bridge_slave_0: entered promiscuous mode [ 951.033297][T17451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.068415][T17524] null_blk: disk rnullb0 created [ 951.099963][T17449] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.127969][T17449] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.157414][T17449] bridge_slave_1: entered allmulticast mode [ 951.288500][T17449] bridge_slave_1: entered promiscuous mode [ 951.344460][T17451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.722448][T17531] FAULT_INJECTION: forcing a failure. [ 952.722448][T17531] name failslab, interval 1, probability 0, space 0, times 0 [ 952.736114][T17531] CPU: 0 PID: 17531 Comm: syz.5.2310 Not tainted syzkaller #0 [ 952.743575][T17531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 952.753619][T17531] Call Trace: [ 952.756885][T17531] [ 952.759806][T17531] dump_stack_lvl+0x18c/0x250 [ 952.764480][T17531] ? show_regs_print_info+0x20/0x20 [ 952.769675][T17531] ? load_image+0x420/0x420 [ 952.774169][T17531] ? __might_sleep+0xe0/0xe0 [ 952.778754][T17531] ? __lock_acquire+0x7d80/0x7d80 [ 952.783770][T17531] should_fail_ex+0x394/0x4c0 [ 952.788464][T17531] should_failslab+0x9/0x20 [ 952.792957][T17531] slab_pre_alloc_hook+0x59/0x300 [ 952.797982][T17531] ? __kasan_slab_alloc+0x6c/0x80 [ 952.803006][T17531] kmem_cache_alloc_node+0x5e/0x310 [ 952.808191][T17531] ? __alloc_skb+0x103/0x2c0 [ 952.812799][T17531] __alloc_skb+0x103/0x2c0 [ 952.817215][T17531] audit_log_start+0x15e/0x890 [ 952.821972][T17531] ? audit_serial+0x30/0x30 [ 952.826460][T17531] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 952.832424][T17531] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 952.838411][T17531] audit_seccomp+0x63/0x180 [ 952.842918][T17531] __secure_computing+0x22c/0x2f0 [ 952.847943][T17531] syscall_trace_enter+0xab/0x150 [ 952.852957][T17531] do_syscall_64+0x28/0xb0 [ 952.857358][T17531] ? clear_bhb_loop+0x40/0x90 [ 952.862020][T17531] ? clear_bhb_loop+0x40/0x90 [ 952.866680][T17531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 952.872558][T17531] RIP: 0033:0x7fbbaaf9e159 [ 952.876966][T17531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.896573][T17531] RSP: 002b:00007fbbabe339f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 952.904985][T17531] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fbbaaf9e159 [ 952.912959][T17531] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 952.920917][T17531] RBP: 00007fbbabe34030 R08: 0000000000000000 R09: 000000000000000b [ 952.928877][T17531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 952.936833][T17531] R13: 00007fbbab226038 R14: 00007ffeaff99080 R15: 000000000002c622 [ 952.944803][T17531] [ 952.962474][T17531] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 952.970119][T17531] audit: out of memory in audit_log_start [ 953.090500][T17451] team0: Port device team_slave_0 added [ 953.126002][T17451] team0: Port device team_slave_1 added [ 953.322798][ T11] hsr_slave_0: left promiscuous mode [ 953.373304][ T11] hsr_slave_1: left promiscuous mode [ 953.393928][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.432499][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.490793][ T11] bridge_slave_1: left allmulticast mode [ 953.496904][ T11] bridge_slave_1: left promiscuous mode [ 953.543550][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.605109][ T11] bridge_slave_0: left allmulticast mode [ 953.628793][ T11] bridge_slave_0: left promiscuous mode [ 953.634968][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.130978][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 955.138492][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 955.194511][ T11] team0 (unregistering): Port device team_slave_1 removed [ 955.513982][ T11] team0 (unregistering): Port device team_slave_0 removed [ 957.020257][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.311601][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 957.913415][ T11] bond0 (unregistering): Released all slaves [ 958.294919][T17449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.347428][T17449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.539945][T17451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.579804][T17451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.726305][T17451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.969788][T17451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.866138][T17451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.068208][T17556] loop5: detected capacity change from 0 to 1024 [ 961.076298][T17556] EXT4-fs: Ignoring removed bh option [ 961.116372][T17556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 961.272295][T12879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.289611][T17451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.357016][T17449] team0: Port device team_slave_0 added [ 961.457255][T17449] team0: Port device team_slave_1 added [ 961.695790][T17449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.704056][T17561] fuse: Unknown parameter '017777777777777777777770x0000000000000000' [ 961.727509][T17449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.775607][T17561] ip_tables: iptables: counters copy to user failed while replacing table [ 963.984665][T17449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.219366][T17564] hub 1-0:1.0: USB hub found [ 964.266845][T17449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.298961][T17564] hub 1-0:1.0: 1 port detected [ 964.318833][T17449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.344858][ C0] vkms_vblank_simulate: vblank timer overrun [ 964.491277][T17449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.876773][T17451] hsr_slave_0: entered promiscuous mode [ 966.949968][T17451] hsr_slave_1: entered promiscuous mode [ 967.388660][T17449] hsr_slave_0: entered promiscuous mode [ 967.479741][T17449] hsr_slave_1: entered promiscuous mode [ 967.522956][T17449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 967.580265][T17449] Cannot create hsr debugfs directory [ 968.783133][ T27] audit: type=1326 audit(2000000623.456:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.5.2320" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbaaf9e159 code=0x7ffc0000 [ 969.072367][ T27] audit: type=1326 audit(2000000623.456:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.5.2320" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbaaf9e159 code=0x7ffc0000 [ 969.128945][T17579] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2322'. [ 969.395033][ T27] audit: type=1326 audit(2000000623.465:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.5.2320" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbaaf9e159 code=0x7ffc0000 [ 969.489314][T17581] loop6: detected capacity change from 0 to 1024 [ 969.513542][T17581] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 969.565334][T17581] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 969.574277][T17581] EXT4-fs (loop6): orphan cleanup on readonly fs [ 969.609086][T17581] Quota error (device loop6): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 969.619904][T17581] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 969.631789][T17581] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.2322: Failed to acquire dquot type 0 [ 969.645092][T17581] Quota error (device loop6): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 969.655960][T17581] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 969.666818][T17581] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.2322: Failed to acquire dquot type 0 [ 969.679744][T17581] EXT4-fs error (device loop6): ext4_free_blocks:6694: comm syz.6.2322: Freeing blocks not in datazone - block = 0, count = 4096 [ 969.698024][T17581] Quota error (device loop6): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 969.709066][T17581] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 969.719776][T17581] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.2322: Failed to acquire dquot type 0 [ 969.735411][T17581] EXT4-fs (loop6): 1 orphan inode deleted [ 969.804104][T17581] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 969.862721][ T27] audit: type=1326 audit(2000000623.465:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.5.2320" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbbaaf9e159 code=0x7ffc0000 [ 971.872220][T17449] netdevsim netdevsim0 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.036006][T17451] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 972.091042][T17451] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 972.155186][T17451] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 972.215620][T17449] netdevsim netdevsim0 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.328418][T17451] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 972.434045][T17449] netdevsim netdevsim0 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.584839][ T11] hsr_slave_0: left promiscuous mode [ 972.605020][ T11] hsr_slave_1: left promiscuous mode [ 972.642731][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.689110][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.774122][ T11] bridge_slave_1: left allmulticast mode [ 972.807169][ T11] bridge_slave_1: left promiscuous mode [ 972.814664][T14007] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.851012][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.916684][ T11] bridge_slave_0: left allmulticast mode [ 972.922834][ T11] bridge_slave_0: left promiscuous mode [ 973.011216][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.058652][T17591] overlayfs: overlapping lowerdir path [ 976.884993][ T11] team0 (unregistering): Port device team_slave_1 removed [ 977.106155][ T11] team0 (unregistering): Port device team_slave_0 removed [ 977.307671][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.183525][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.464177][ T11] bond0 (unregistering): Released all slaves [ 981.540455][T17449] netdevsim netdevsim0 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.776559][T17451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.013610][T17451] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.138459][T17356] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.146113][T17356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.221425][T17612] loop6: detected capacity change from 0 to 164 [ 983.255548][T17449] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 983.314948][T17449] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 983.402917][T17356] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.410582][T17356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.554744][T17449] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 983.668334][T17449] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 985.472932][T17451] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 985.871834][T17451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 986.443032][T17449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.604153][T17449] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.770487][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.778132][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.925430][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.933108][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.280716][T16317] IPVS: starting estimator thread 0... [ 989.376371][T17449] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 989.442495][T17628] IPVS: using max 37 ests per chain, 88800 per kthread [ 989.462144][T17449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 989.487959][T17625] page:ffffea0001364000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4d900 [ 989.499649][T17625] head:ffffea0001364000 order:7 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 989.509440][T17625] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 989.517697][T17625] page_type: 0xffffffff() [ 989.522385][T17625] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 989.531957][T17625] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 989.541372][T17625] page dumped because: unmovable page [ 989.547226][T17625] page_owner tracks the page as allocated [ 989.554312][T17625] page last allocated via order 7, migratetype Unmovable, gfp_mask 0x152dc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_ZERO), pid 12879, tgid 12879 (syz-executor), ts 365679194431, free_ts 317130417110 [ 989.576668][T17625] post_alloc_hook+0x1c1/0x200 [ 989.581934][T17625] get_page_from_freelist+0x2181/0x22a0 [ 989.587939][T17625] __alloc_pages+0x1f0/0x460 [ 989.593010][T17625] __kmalloc_large_node+0x8c/0x1f0 [ 989.598561][T17625] __kmalloc_node+0x112/0x240 [ 989.603699][T17625] kvmalloc_node+0x70/0x180 [ 989.608669][T17625] ieee80211_txq_setup_flows+0x167/0xf20 [ 989.614909][T17625] ieee80211_register_hw+0x2924/0x3b30 [ 989.620834][T17625] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 989.627107][T17625] hwsim_new_radio_nl+0xdad/0x1a70 [ 989.632714][T17625] genl_family_rcv_msg_doit+0x21a/0x310 [ 989.638807][T17625] genl_rcv_msg+0x611/0x7a0 [ 989.643707][T17625] netlink_rcv_skb+0x235/0x4c0 [ 989.648993][T17625] genl_rcv+0x28/0x40 [ 989.653334][T17625] netlink_unicast+0x7b1/0x930 [ 989.658990][T17625] netlink_sendmsg+0x8d0/0xbf0 [ 989.664375][T17625] page last free stack trace: [ 989.669498][T17625] __free_pages_ok+0x994/0xad0 [ 989.674717][T17625] io_pages_unmap+0x1c4/0x300 [ 989.679895][T17625] io_rings_free+0x83/0x3d0 [ 989.684802][T17625] io_ring_ctx_free+0x745/0x950 [ 989.690166][T17625] io_ring_exit_work+0x7a6/0x830 [ 989.695550][T17625] process_scheduled_works+0xa60/0x1600 [ 989.701717][T17625] worker_thread+0xa5e/0xfe0 [ 989.706702][T17625] kthread+0x2fa/0x390 [ 989.711187][T17625] ret_from_fork+0x48/0x80 [ 989.715981][T17625] ret_from_fork_asm+0x11/0x20 [ 990.803561][T17451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.183958][T17636] loop5: detected capacity change from 0 to 512 [ 991.362302][T17636] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.2336: corrupted in-inode xattr: invalid ea_ino [ 991.509305][T17636] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.2336: couldn't read orphan inode 15 (err -117) [ 991.624496][T17636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.990602][T17449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.550189][T12879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.614261][T17449] veth0_vlan: entered promiscuous mode [ 992.739571][T17449] veth1_vlan: entered promiscuous mode [ 992.936288][T17451] veth0_vlan: entered promiscuous mode [ 993.011070][T17451] veth1_vlan: entered promiscuous mode [ 993.110106][T17449] veth0_macvtap: entered promiscuous mode [ 993.189377][T17449] veth1_macvtap: entered promiscuous mode [ 993.274563][T17451] veth0_macvtap: entered promiscuous mode [ 993.317486][T17449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.354858][T17449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.414748][T17449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.445734][T17449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.477327][T17449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.505083][T17449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.549744][T17449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 993.568414][T17451] veth1_macvtap: entered promiscuous mode [ 993.662438][T17449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.742703][T17449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.999479][T17665] loop5: detected capacity change from 0 to 164 [ 994.017322][T17449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.417074][T17449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.501604][T17449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.555447][T17449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.626061][T17449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 994.801842][T17449] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.882227][T17449] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.547106][T17677] No source specified [ 996.780307][T17674] FAULT_INJECTION: forcing a failure. [ 996.780307][T17674] name failslab, interval 1, probability 0, space 0, times 0 [ 996.793930][T17674] CPU: 0 PID: 17674 Comm: syz.6.2339 Not tainted syzkaller #0 [ 996.801379][T17674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 996.811418][T17674] Call Trace: [ 996.814698][T17674] [ 996.817614][T17674] dump_stack_lvl+0x18c/0x250 [ 996.822286][T17674] ? show_regs_print_info+0x20/0x20 [ 996.827484][T17674] ? load_image+0x420/0x420 [ 996.831969][T17674] ? __might_sleep+0xe0/0xe0 [ 996.836542][T17674] ? __lock_acquire+0x7d80/0x7d80 [ 996.841559][T17674] should_fail_ex+0x394/0x4c0 [ 996.846230][T17674] should_failslab+0x9/0x20 [ 996.850718][T17674] slab_pre_alloc_hook+0x59/0x300 [ 996.855730][T17674] ? __kasan_slab_alloc+0x6c/0x80 [ 996.860740][T17674] kmem_cache_alloc_node+0x5e/0x310 [ 996.865940][T17674] ? __alloc_skb+0x103/0x2c0 [ 996.870533][T17674] __alloc_skb+0x103/0x2c0 [ 996.874946][T17674] audit_log_start+0x15e/0x890 [ 996.879712][T17674] ? audit_serial+0x30/0x30 [ 996.884198][T17674] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 996.890163][T17674] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 996.896126][T17674] audit_seccomp+0x63/0x180 [ 996.900613][T17674] __secure_computing+0x22c/0x2f0 [ 996.905622][T17674] syscall_trace_enter+0xab/0x150 [ 996.910629][T17674] do_syscall_64+0x28/0xb0 [ 996.915030][T17674] ? clear_bhb_loop+0x40/0x90 [ 996.919688][T17674] ? clear_bhb_loop+0x40/0x90 [ 996.924349][T17674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 996.930248][T17674] RIP: 0033:0x7fa247f9e159 [ 996.934651][T17674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.954239][T17674] RSP: 002b:00007fa248de49f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 996.962635][T17674] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fa247f9e159 [ 996.970590][T17674] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 996.978546][T17674] RBP: 00007fa248de5030 R08: 0000000000000000 R09: 000000000000000b [ 996.986498][T17674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 996.994451][T17674] R13: 00007fa248226038 R14: 00007ffd279d6080 R15: 000000000002e574 [ 997.002411][T17674] [ 997.005462][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.027178][T17674] audit_log_lost: 103 callbacks suppressed [ 997.027188][T17674] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 997.040587][T17674] audit: out of memory in audit_log_start [ 997.175033][T17449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.230123][T17449] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.593666][T17689] loop5: detected capacity change from 0 to 256 [ 1002.020461][T17156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1002.039063][T17156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1002.049746][T17156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1002.059414][T17156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1002.067730][T17156] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1002.077018][T17156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1002.292200][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1002.316826][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1002.327234][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1002.336940][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1002.345153][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1002.353270][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1003.894082][T17715] loop5: detected capacity change from 0 to 164 [ 1004.533515][ T51] Bluetooth: hci1: command tx timeout [ 1004.634197][ T51] Bluetooth: hci2: command tx timeout [ 1004.935527][T17726] loop5: detected capacity change from 0 to 512 [ 1004.995208][T17726] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1005.074321][T17726] ext4: Unknown parameter 'fsname' [ 1005.363188][T17730] loop6: detected capacity change from 0 to 2048 [ 1005.793908][T17730] EXT4-fs (loop6): failed to initialize system zone (-117) [ 1005.959372][T17730] EXT4-fs (loop6): mount failed [ 1007.908165][ T51] Bluetooth: hci1: command tx timeout [ 1007.914058][T17156] Bluetooth: hci2: command tx timeout [ 1008.683011][ T41] netdevsim netdevsim9 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 1008.747877][T17699] chnl_net:caif_netlink_parms(): no params data found [ 1008.836362][ T41] netdevsim netdevsim9 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 1008.925920][ T41] netdevsim netdevsim9 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.073917][ T41] netdevsim netdevsim9 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 1011.259829][ T51] Bluetooth: hci1: command tx timeout [ 1011.265730][T17156] Bluetooth: hci2: command tx timeout [ 1011.956149][T17769] loop5: detected capacity change from 0 to 256 [ 1013.419226][T17771] input: syz1 as /devices/virtual/input/input33 [ 1013.513924][T17156] Bluetooth: hci2: command tx timeout [ 1013.519887][ T51] Bluetooth: hci1: command tx timeout [ 1013.586519][T17769] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1013.745730][T17704] chnl_net:caif_netlink_parms(): no params data found [ 1014.736587][T17699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.780516][T17699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.827616][T17699] bridge_slave_0: entered allmulticast mode [ 1014.881742][T17699] bridge_slave_0: entered promiscuous mode [ 1014.924551][T17699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.975843][T17699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.121366][T17699] bridge_slave_1: entered allmulticast mode [ 1015.128940][T17699] bridge_slave_1: entered promiscuous mode [ 1017.244600][T17699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.357496][T17699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.818870][T17793] loop6: detected capacity change from 0 to 164 [ 1018.111396][T17704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.180227][T17704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.188013][T17704] bridge_slave_0: entered allmulticast mode [ 1018.281900][T17704] bridge_slave_0: entered promiscuous mode [ 1019.751272][T17704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.758880][T17704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.867992][T17704] bridge_slave_1: entered allmulticast mode [ 1019.911824][T17704] bridge_slave_1: entered promiscuous mode [ 1019.970844][T17699] team0: Port device team_slave_0 added [ 1020.063520][T17699] team0: Port device team_slave_1 added [ 1020.200484][ T41] hsr_slave_0: left promiscuous mode [ 1020.251609][ T41] hsr_slave_1: left promiscuous mode [ 1020.283733][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.649318][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1021.661078][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1021.708623][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.749162][ T41] bridge_slave_1: left allmulticast mode [ 1021.782774][ T41] bridge_slave_1: left promiscuous mode [ 1021.921326][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.038687][ T41] bridge_slave_0: left allmulticast mode [ 1022.044791][ T41] bridge_slave_0: left promiscuous mode [ 1022.113216][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.281701][ T41] veth1_macvtap: left promiscuous mode [ 1022.354461][ T41] veth0_macvtap: left promiscuous mode [ 1022.402262][ T41] veth1_vlan: left promiscuous mode [ 1022.407994][ T41] veth0_vlan: left promiscuous mode [ 1023.528815][T17805] udevd[17805]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1026.521933][T17819] loop6: detected capacity change from 0 to 1024 [ 1026.529842][T17819] EXT4-fs: Ignoring removed bh option [ 1026.573728][T17819] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1026.750510][T14007] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.468419][T17828] fuse: Bad value for 'fd' [ 1031.783083][T17832] loop6: detected capacity change from 0 to 164 [ 1031.805556][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1033.428595][T17835] blktrace: Concurrent blktraces are not allowed on loop0 [ 1033.733787][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1036.425270][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1036.905703][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.993612][T17843] loop6: detected capacity change from 0 to 256 [ 1042.445453][ T41] bond0 (unregistering): Released all slaves [ 1042.696700][ T6796] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1042.866479][T17704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.944840][T17704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.967832][ T6796] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.046691][T17699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.054169][T17699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.087876][ T6796] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1043.158759][ T6796] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1043.226858][ T6796] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1043.279326][ T6796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.300978][T17699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.343438][ T6796] usb 6-1: config 0 descriptor?? [ 1043.401349][T17699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.451972][T17699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.684520][ T6796] usbhid 6-1:0.0: can't add hid device: -71 [ 1043.691352][T17699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.151336][ T6796] usbhid: probe of 6-1:0.0 failed with error -71 [ 1045.246246][ T6796] usb 6-1: USB disconnect, device number 12 [ 1047.837290][T17704] team0: Port device team_slave_0 added [ 1047.943114][T17704] team0: Port device team_slave_1 added [ 1048.040806][T17699] hsr_slave_0: entered promiscuous mode [ 1048.155641][T17699] hsr_slave_1: entered promiscuous mode [ 1048.498619][T17704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.543983][T17704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.785491][T17704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.947169][T17704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.010956][T17704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.205083][T17704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.837538][T17699] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.145830][T17704] hsr_slave_0: entered promiscuous mode [ 1052.198480][T17704] hsr_slave_1: entered promiscuous mode [ 1052.214366][T17704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1052.241758][T17704] Cannot create hsr debugfs directory [ 1052.402702][T17699] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.644376][T17699] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.906728][T17699] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.067310][T17699] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1055.778069][T17704] netdevsim netdevsim9 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.257893][T17699] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1056.597222][T17699] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1056.664375][T17704] netdevsim netdevsim9 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.853299][T17699] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1056.888905][T17704] netdevsim netdevsim9 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.175714][T17704] netdevsim netdevsim9 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.216321][ T41] hsr_slave_0: left promiscuous mode [ 1060.257470][ T41] hsr_slave_1: left promiscuous mode [ 1060.296085][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.339953][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.391996][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.434774][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.479581][ T41] bridge_slave_1: left allmulticast mode [ 1060.513804][ T41] bridge_slave_1: left promiscuous mode [ 1060.546005][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.606330][ T41] bridge_slave_0: left allmulticast mode [ 1062.030104][ T41] bridge_slave_0: left promiscuous mode [ 1062.149799][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.523830][ T41] veth1_macvtap: left promiscuous mode [ 1062.529801][ T41] veth0_macvtap: left promiscuous mode [ 1062.614013][ T41] veth1_vlan: left promiscuous mode [ 1062.673239][ T41] veth0_vlan: left promiscuous mode [ 1063.755982][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1063.770782][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1063.801187][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1063.811676][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1063.830391][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1063.845699][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1063.890751][T17957] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1063.915484][T17957] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1063.924798][T17957] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1063.935805][T17957] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1063.954279][T17957] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1063.967398][T17957] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1066.284111][T17968] loop5: detected capacity change from 0 to 512 [ 1066.300887][T17957] Bluetooth: hci3: command tx timeout [ 1066.308292][T17957] Bluetooth: hci5: command tx timeout [ 1066.405660][T17968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.790740][T12879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.915782][T17978] loop6: detected capacity change from 0 to 512 [ 1075.497293][ T5778] Bluetooth: hci5: command tx timeout [ 1075.505007][T17957] Bluetooth: hci3: command tx timeout [ 1075.898735][T17991] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2378'. [ 1076.891673][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1076.983908][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1077.060743][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.143354][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.673000][ T5778] Bluetooth: hci5: command tx timeout [ 1077.679067][ T5778] Bluetooth: hci3: command tx timeout [ 1077.693456][ T41] bond0 (unregistering): Released all slaves [ 1080.196189][ T5778] Bluetooth: hci3: command tx timeout [ 1080.202073][T17957] Bluetooth: hci5: command tx timeout [ 1081.262763][T17951] chnl_net:caif_netlink_parms(): no params data found [ 1081.756236][T17954] chnl_net:caif_netlink_parms(): no params data found [ 1082.311321][T17951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.376848][T17951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.384853][T17951] bridge_slave_0: entered allmulticast mode [ 1082.480524][T17951] bridge_slave_0: entered promiscuous mode [ 1082.620999][T17951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.634133][T17951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.641882][T17951] bridge_slave_1: entered allmulticast mode [ 1082.687171][T17951] bridge_slave_1: entered promiscuous mode [ 1082.850277][T17951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.919720][T17951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.980959][T17954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.001337][T17954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.040018][T17954] bridge_slave_0: entered allmulticast mode [ 1083.047785][T17954] bridge_slave_0: entered promiscuous mode [ 1083.079524][T17954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.123380][T17954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.141665][T17954] bridge_slave_1: entered allmulticast mode [ 1083.172546][T17954] bridge_slave_1: entered promiscuous mode [ 1083.334563][T17954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.387625][T17951] team0: Port device team_slave_0 added [ 1083.423903][T17951] team0: Port device team_slave_1 added [ 1083.483265][T17954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.572822][T17951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.624637][T17951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.658929][T17951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.721658][ T41] netdevsim netdevsim9 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 1083.754283][T17954] team0: Port device team_slave_0 added [ 1083.770531][T17951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.802348][T17951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.888910][T17951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.962785][ T41] netdevsim netdevsim9 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 1084.024032][ T41] netdevsim netdevsim9 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 1084.072749][T17954] team0: Port device team_slave_1 added [ 1084.196501][ T41] netdevsim netdevsim9 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 1084.297340][T17951] hsr_slave_0: entered promiscuous mode [ 1084.333333][T17951] hsr_slave_1: entered promiscuous mode [ 1084.371132][T17951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1084.392073][T17951] Cannot create hsr debugfs directory [ 1084.573959][T17954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.607697][T17954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1084.683893][T17954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.729857][T17954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.737320][T17954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1084.835367][T17954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.313167][T17954] hsr_slave_0: entered promiscuous mode [ 1085.335675][T17954] hsr_slave_1: entered promiscuous mode [ 1085.363935][T17954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1085.384736][T17954] Cannot create hsr debugfs directory [ 1085.705565][ T41] netdevsim netdevsim0 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.847930][ T41] netdevsim netdevsim0 eth22: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.930200][ T41] netdevsim netdevsim0 eth23: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.071186][ T41] netdevsim netdevsim0 eth24: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.244331][T17951] netdevsim netdevsim0 eth24 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.406936][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1086.413710][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1086.476369][T17951] netdevsim netdevsim0 eth23 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.613742][T17951] netdevsim netdevsim0 eth22 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.740525][T17951] netdevsim netdevsim0 eth16 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1087.365901][ T41] hsr_slave_0: left promiscuous mode [ 1087.420132][ T41] hsr_slave_1: left promiscuous mode [ 1087.496744][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.530063][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.561667][ T41] bridge_slave_1: left allmulticast mode [ 1087.567757][ T41] bridge_slave_1: left promiscuous mode [ 1087.590957][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.625875][ T41] bridge_slave_0: left allmulticast mode [ 1087.631975][ T41] bridge_slave_0: left promiscuous mode [ 1087.674433][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.720921][ T41] hsr_slave_0: left promiscuous mode [ 1087.728344][ T41] hsr_slave_1: left promiscuous mode [ 1087.752358][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.793011][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.813514][ T41] bridge_slave_1: left allmulticast mode [ 1087.834919][ T41] bridge_slave_1: left promiscuous mode [ 1087.851417][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.879277][ T41] bridge_slave_0: left allmulticast mode [ 1087.913808][ T41] bridge_slave_0: left promiscuous mode [ 1087.920012][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.652321][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1088.762924][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1088.826543][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1088.886164][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.091268][ T41] bond0 (unregistering): Released all slaves [ 1089.461064][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1089.521235][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1089.579827][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.643972][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.856172][ T41] bond0 (unregistering): Released all slaves [ 1090.216150][T17951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1090.295055][T17954] netdevsim netdevsim9 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1090.443578][T17951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1090.516948][T17951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1090.565883][T17954] netdevsim netdevsim9 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1090.650515][T17951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1090.722329][T17954] netdevsim netdevsim9 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1090.870344][T17954] netdevsim netdevsim9 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.162782][T17951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.444002][T17951] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.563337][T17354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.570990][T17354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.678005][T17354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.685700][T17354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.778614][T17954] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1091.817357][T17954] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1091.866553][T17954] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1091.898645][T17954] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1091.978851][T17951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1092.230469][T17954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.311427][T17954] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.377315][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.384981][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.482680][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.490351][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.693366][T17951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1092.880110][T17951] veth0_vlan: entered promiscuous mode [ 1092.965704][T17951] veth1_vlan: entered promiscuous mode [ 1093.117235][T17951] veth0_macvtap: entered promiscuous mode [ 1093.202836][T17951] veth1_macvtap: entered promiscuous mode [ 1093.313012][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1093.343756][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.361400][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1093.372894][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.388646][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1093.407861][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.426429][T17951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1093.456766][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1093.474688][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.489412][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1093.503956][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.524687][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1093.536220][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.549380][T17951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1093.588926][T17954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.625885][T17951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.676023][T17951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.685390][T17951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.752109][T17951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.107346][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.183229][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.287164][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.295595][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.747641][T18152] ceph: No mds server is up or the cluster is laggy [ 1099.785675][T17954] veth0_vlan: entered promiscuous mode [ 1099.815462][ T789] libceph: connect (1)[c::]:6789 error -22 [ 1099.882512][T17954] veth1_vlan: entered promiscuous mode [ 1099.898176][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 1100.108935][T17954] veth0_macvtap: entered promiscuous mode [ 1100.273233][T17954] veth1_macvtap: entered promiscuous mode [ 1100.435289][T17954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.546255][T18167] loop6: detected capacity change from 0 to 8 [ 1100.560518][T17954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.648008][T18167] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1100.656542][T18167] SQUASHFS error: Failed to read block 0x9b: -5 [ 1100.695915][T17954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.806458][T17954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.837742][T18167] SQUASHFS error: Unable to read metadata cache entry [99] [ 1100.888910][T18167] SQUASHFS error: Unable to read inode 0x127 [ 1100.919527][T17954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1101.019624][T17954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.093181][T17954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1101.180548][T17954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.264132][T17954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.386548][T17954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.459343][T18167] loop6: detected capacity change from 0 to 4096 [ 1101.522301][T18172] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1101.592646][T17954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.725540][T17954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.348106][T17954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.581208][T17954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.666626][T17954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.752137][T17954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.880653][T17954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.983334][T17954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1103.103742][T17954] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.216348][T17954] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.816824][T17954] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.951410][T18185] loop5: detected capacity change from 0 to 512 [ 1104.984593][T17954] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.019649][T18185] EXT4-fs: inline encryption not supported [ 1105.120930][T18185] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1105.156719][T18189] fuse: Unknown parameter '017777777777777777777770x0000000000000000' [ 1105.241750][T18189] ip_tables: iptables: counters copy to user failed while replacing table [ 1105.325055][T18185] EXT4-fs (loop5): 1 truncate cleaned up [ 1105.416643][T18185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1106.372281][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.749781][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.963676][T18189] hub 1-0:1.0: USB hub found [ 1107.971656][T18189] hub 1-0:1.0: 1 port detected [ 1108.006692][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.307732][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.670651][T18198] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1108.923876][T12879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.081503][T18210] loop5: detected capacity change from 0 to 512 [ 1113.089224][T18210] EXT4-fs: Ignoring removed nobh option [ 1113.111379][T18210] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1113.119171][T18210] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #15: comm syz.5.2386: corrupted inode contents [ 1113.132733][T18210] EXT4-fs (loop5): Remounting filesystem read-only [ 1113.139934][T18210] EXT4-fs (loop5): 1 orphan inode deleted [ 1113.147396][T18210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1113.211856][T12879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.943703][T18221] gadgetfs: bound to dummy_udc driver [ 1119.035064][T18234] SET target dimension over the limit! [ 1121.700119][T18246] loop6: detected capacity change from 0 to 2048 [ 1121.856854][T18246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1124.154465][T14007] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.143410][T18261] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1128.371206][ T27] audit: type=1800 audit(2000000772.736:317): pid=18269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2399" name=08 dev="sda1" ino=2074 res=0 errno=0 [ 1129.389314][T17957] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1129.405400][T17957] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1129.448693][T17957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1129.500729][T17957] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1129.513469][T17957] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1129.521462][T17957] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1129.579158][T18279] loop5: detected capacity change from 0 to 164 [ 1129.931705][T18283] input: syz1 as /devices/virtual/input/input35 [ 1130.258680][T18284] rock: directory entry would overflow storage [ 1130.258836][T18284] rock: sig=0x4f50, size=4, remaining=3 [ 1130.258847][T18284] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1131.017494][T17354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.724095][T17957] Bluetooth: hci1: command tx timeout [ 1135.547001][T17957] Bluetooth: hci1: command tx timeout [ 1135.642365][T17354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.786896][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1135.801099][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1135.814195][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1135.823131][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1135.832880][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1135.842366][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1137.425534][T17354] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.731717][ T5778] Bluetooth: hci1: command tx timeout [ 1138.076274][ T5778] Bluetooth: hci2: command tx timeout [ 1138.128788][T17354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.347266][ T5778] Bluetooth: hci1: command tx timeout [ 1141.353786][ T5778] Bluetooth: hci2: command tx timeout [ 1141.702629][T17354] netdevsim netdevsim0 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.918982][T18276] chnl_net:caif_netlink_parms(): no params data found [ 1142.034627][T17354] netdevsim netdevsim0 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 1142.145284][T17354] netdevsim netdevsim0 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 1142.155482][T18345] loop6: detected capacity change from 0 to 512 [ 1142.209254][T18345] EXT4-fs: Invalid want_extra_isize 234 [ 1143.526460][T17957] Bluetooth: hci2: command tx timeout [ 1144.775983][T17354] netdevsim netdevsim0 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 1144.804924][T18349] loop6: detected capacity change from 0 to 1024 [ 1145.688254][ T27] audit: type=1800 audit(2000000788.947:318): pid=18358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2416" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1145.772513][T17957] Bluetooth: hci2: command tx timeout [ 1146.333864][T18306] chnl_net:caif_netlink_parms(): no params data found [ 1146.739333][T18371] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1146.754011][T18367] netlink: 'syz.6.2417': attribute type 4 has an invalid length. [ 1147.238159][T18276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.290735][T18276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.298538][T18276] bridge_slave_0: entered allmulticast mode [ 1147.569237][T18276] bridge_slave_0: entered promiscuous mode [ 1149.206281][T17957] Bluetooth: hci2: command tx timeout [ 1149.626488][T18276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.684608][T18276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.726896][T18276] bridge_slave_1: entered allmulticast mode [ 1149.775525][T18276] bridge_slave_1: entered promiscuous mode [ 1150.003533][T18401] loop5: detected capacity change from 0 to 1024 [ 1150.364330][T18276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.702307][T18276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.089602][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1152.096498][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1152.197745][T18306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.239369][T18306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.304205][T18306] bridge_slave_0: entered allmulticast mode [ 1152.353820][T18306] bridge_slave_0: entered promiscuous mode [ 1153.024116][T18276] team0: Port device team_slave_0 added [ 1153.061118][T18306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.107883][T18306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.146440][T18306] bridge_slave_1: entered allmulticast mode [ 1153.187193][T18306] bridge_slave_1: entered promiscuous mode [ 1153.513055][T18276] team0: Port device team_slave_1 added [ 1153.852759][T18276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.896138][T18276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.034688][T18276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.141142][T18306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.208329][T18306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.308005][T18276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1154.344789][T18276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.493466][T18276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.956636][T17354] hsr_slave_0: left promiscuous mode [ 1155.978063][T17354] hsr_slave_1: left promiscuous mode [ 1155.992755][T17354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1156.023102][T17354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1156.058591][T17354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1156.076953][T17354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1156.120535][T17354] bridge_slave_1: left allmulticast mode [ 1156.126633][T17354] bridge_slave_1: left promiscuous mode [ 1156.157692][T17354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.189795][T17354] bridge_slave_0: left allmulticast mode [ 1156.210770][T17354] bridge_slave_0: left promiscuous mode [ 1156.243111][T17354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.305248][T17354] veth1_macvtap: left promiscuous mode [ 1156.311266][T17354] veth0_macvtap: left promiscuous mode [ 1156.324338][T17354] veth1_vlan: left promiscuous mode [ 1156.330218][T17354] veth0_vlan: left promiscuous mode [ 1158.329725][T18448] loop6: detected capacity change from 0 to 256 [ 1159.331845][T18448] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1159.687691][T18447] gadgetfs: bound to dummy_udc driver [ 1160.385288][ T8] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1160.415267][ C0] gadgetfs: connected [ 1160.421336][ T8] gadgetfs: disconnected [ 1165.236473][T18468] nvmet: adding nsid 1 to subsystem testsubsys [ 1165.300262][T18468] [ 1165.302612][T18468] ====================================================== [ 1165.309627][T18468] WARNING: possible circular locking dependency detected [ 1165.316656][T18468] syzkaller #0 Not tainted [ 1165.321047][T18468] ------------------------------------------------------ [ 1165.328040][T18468] syz.6.2434/18468 is trying to acquire lock: [ 1165.334101][T18468] ffff8880666cc418 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1165.342783][T18468] [ 1165.342783][T18468] but task is already holding lock: [ 1165.350124][T18468] ffff888063941070 (&subsys->lock){+.+.}-{3:3}, at: nvmet_ns_enable+0x4d/0x8c0 [ 1165.359054][T18468] [ 1165.359054][T18468] which lock already depends on the new lock. [ 1165.359054][T18468] [ 1165.369455][T18468] [ 1165.369455][T18468] the existing dependency chain (in reverse order) is: [ 1165.378446][T18468] [ 1165.378446][T18468] -> #6 (&subsys->lock){+.+.}-{3:3}: [ 1165.385891][T18468] __mutex_lock+0x135/0xc80 [ 1165.390897][T18468] nvmet_ns_buffered_io_store+0xe2/0x200 [ 1165.397029][T18468] configfs_write_iter+0x312/0x400 [ 1165.402640][T18468] vfs_write+0x474/0x9a0 [ 1165.407386][T18468] ksys_write+0x151/0x260 [ 1165.412236][T18468] do_syscall_64+0x55/0xb0 [ 1165.417153][T18468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1165.423549][T18468] [ 1165.423549][T18468] -> #5 (&p->frag_sem){++++}-{3:3}: [ 1165.430924][T18468] down_read+0x46/0x2e0 [ 1165.435585][T18468] configfs_write_iter+0x215/0x400 [ 1165.441214][T18468] vfs_write+0x474/0x9a0 [ 1165.445956][T18468] ksys_write+0x151/0x260 [ 1165.450785][T18468] do_syscall_64+0x55/0xb0 [ 1165.455713][T18468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1165.462108][T18468] [ 1165.462108][T18468] -> #4 (&buffer->mutex){+.+.}-{3:3}: [ 1165.469638][T18468] __mutex_lock+0x135/0xc80 [ 1165.474638][T18468] configfs_read_iter+0x72/0x570 [ 1165.480071][T18468] __kernel_read+0x2e5/0x730 [ 1165.485160][T18468] integrity_kernel_read+0x8a/0xd0 [ 1165.490767][T18468] ima_calc_file_hash+0xb1f/0x1960 [ 1165.496374][T18468] ima_collect_measurement+0x4d4/0xa30 [ 1165.502331][T18468] process_measurement+0x123a/0x1d50 [ 1165.508113][T18468] ima_file_check+0xcc/0x110 [ 1165.513199][T18468] path_openat+0x2910/0x3270 [ 1165.518287][T18468] do_filp_open+0x1f2/0x430 [ 1165.523289][T18468] do_sys_openat2+0x134/0x1d0 [ 1165.528489][T18468] __x64_sys_openat+0x139/0x160 [ 1165.533841][T18468] do_syscall_64+0x55/0xb0 [ 1165.538757][T18468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1165.545148][T18468] [ 1165.545148][T18468] -> #3 (&iint_mutex_key[depth]){+.+.}-{3:3}: [ 1165.553371][T18468] __mutex_lock+0x135/0xc80 [ 1165.558372][T18468] process_measurement+0x739/0x1d50 [ 1165.564071][T18468] ima_file_check+0xcc/0x110 [ 1165.569164][T18468] path_openat+0x2910/0x3270 [ 1165.574256][T18468] do_file_open_root+0x2f3/0x5a0 [ 1165.579689][T18468] file_open_root+0x167/0x1c0 [ 1165.584886][T18468] kernel_read_file_from_path_initns+0x151/0x230 [ 1165.591714][T18468] _request_firmware+0xb43/0x1520 [ 1165.597240][T18468] request_firmware+0x36/0x50 [ 1165.602416][T18468] reg_reload_regdb+0x9a/0x490 [ 1165.607679][T18468] genl_family_rcv_msg_doit+0x21a/0x310 [ 1165.613724][T18468] genl_rcv_msg+0x611/0x7a0 [ 1165.618725][T18468] netlink_rcv_skb+0x235/0x4c0 [ 1165.623988][T18468] genl_rcv+0x28/0x40 [ 1165.628470][T18468] netlink_unicast+0x7b1/0x930 [ 1165.633773][T18468] netlink_sendmsg+0x8d0/0xbf0 [ 1165.639059][T18468] ____sys_sendmsg+0x61b/0x980 [ 1165.644337][T18468] ___sys_sendmsg+0x2a6/0x360 [ 1165.649521][T18468] __se_sys_sendmsg+0x1d0/0x2c0 [ 1165.654873][T18468] do_syscall_64+0x55/0xb0 [ 1165.659791][T18468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1165.666205][T18468] [ 1165.666205][T18468] -> #2 (cb_lock){++++}-{3:3}: [ 1165.673129][T18468] down_read+0x46/0x2e0 [ 1165.677802][T18468] genl_rcv+0x19/0x40 [ 1165.682287][T18468] netlink_unicast+0x7b1/0x930 [ 1165.687565][T18468] netlink_sendmsg+0x8d0/0xbf0 [ 1165.692829][T18468] sock_sendmsg+0x23b/0x3a0 [ 1165.697854][T18468] splice_to_socket+0xb92/0x1270 [ 1165.703308][T18468] do_splice+0xe45/0x1b20 [ 1165.708146][T18468] __se_sys_splice+0x398/0x4a0 [ 1165.713439][T18468] do_syscall_64+0x55/0xb0 [ 1165.718369][T18468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1165.724775][T18468] [ 1165.724775][T18468] -> #1 (&pipe->mutex/1){+.+.}-{3:3}: [ 1165.732320][T18468] __mutex_lock+0x135/0xc80 [ 1165.737330][T18468] iter_file_splice_write+0x1ba/0xcf0 [ 1165.743207][T18468] ovl_splice_write+0x2bb/0x4c0 [ 1165.748562][T18468] do_splice+0xe45/0x1b20 [ 1165.753391][T18468] __se_sys_splice+0x398/0x4a0 [ 1165.758661][T18468] do_syscall_64+0x55/0xb0 [ 1165.763593][T18468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1165.770006][T18468] [ 1165.770006][T18468] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 1165.777372][T18468] __lock_acquire+0x37ef/0x7d80 [ 1165.782734][T18468] lock_acquire+0x19e/0x420 [ 1165.787741][T18468] sb_start_write+0x4d/0x1c0 [ 1165.792860][T18468] mnt_want_write+0x41/0x90 [ 1165.797875][T18468] path_openat+0x768/0x3270 [ 1165.802882][T18468] do_filp_open+0x1f2/0x430 [ 1165.807886][T18468] filp_open+0x180/0x1e0 [ 1165.812630][T18468] nvmet_file_ns_enable+0x74/0x330 [ 1165.818268][T18468] nvmet_ns_enable+0xf4/0x8c0 [ 1165.823443][T18468] nvmet_ns_enable_store+0xd8/0x170 [ 1165.829156][T18468] configfs_write_iter+0x312/0x400 [ 1165.834771][T18468] vfs_write+0x474/0x9a0 [ 1165.839535][T18468] ksys_write+0x151/0x260 [ 1165.844369][T18468] do_syscall_64+0x55/0xb0 [ 1165.849288][T18468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1165.855683][T18468] [ 1165.855683][T18468] other info that might help us debug this: [ 1165.855683][T18468] [ 1165.865887][T18468] Chain exists of: [ 1165.865887][T18468] sb_writers#5 --> &p->frag_sem --> &subsys->lock [ 1165.865887][T18468] [ 1165.878228][T18468] Possible unsafe locking scenario: [ 1165.878228][T18468] [ 1165.885656][T18468] CPU0 CPU1 [ 1165.890998][T18468] ---- ---- [ 1165.896337][T18468] lock(&subsys->lock); [ 1165.900560][T18468] lock(&p->frag_sem); [ 1165.907212][T18468] lock(&subsys->lock); [ 1165.913971][T18468] rlock(sb_writers#5); [ 1165.918194][T18468] [ 1165.918194][T18468] *** DEADLOCK *** [ 1165.918194][T18468] [ 1165.926314][T18468] 6 locks held by syz.6.2434/18468: [ 1165.931498][T18468] #0: ffff888021566d48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 1165.940700][T18468] #1: ffff888018342418 (sb_writers#31){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 1165.949644][T18468] #2: ffff88802597d088 (&buffer->mutex){+.+.}-{3:3}, at: configfs_write_iter+0x81/0x400 [ 1165.959444][T18468] #3: ffff888065449378 (&p->frag_sem){++++}-{3:3}, at: configfs_write_iter+0x215/0x400 [ 1165.969156][T18468] #4: ffffffff8daef530 (nvmet_config_sem){+.+.}-{3:3}, at: nvmet_ns_enable_store+0xc9/0x170 [ 1165.979319][T18468] #5: ffff888063941070 (&subsys->lock){+.+.}-{3:3}, at: nvmet_ns_enable+0x4d/0x8c0 [ 1165.988699][T18468] [ 1165.988699][T18468] stack backtrace: [ 1165.994569][T18468] CPU: 0 PID: 18468 Comm: syz.6.2434 Not tainted syzkaller #0 [ 1166.002006][T18468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1166.012045][T18468] Call Trace: [ 1166.015309][T18468] [ 1166.018223][T18468] dump_stack_lvl+0x18c/0x250 [ 1166.022888][T18468] ? load_image+0x420/0x420 [ 1166.027370][T18468] ? show_regs_print_info+0x20/0x20 [ 1166.032556][T18468] ? print_circular_bug+0x12b/0x1a0 [ 1166.037740][T18468] check_noncircular+0x2fc/0x400 [ 1166.042657][T18468] ? print_deadlock_bug+0x5d0/0x5d0 [ 1166.047852][T18468] ? lockdep_lock+0xf5/0x230 [ 1166.052419][T18468] ? __lock_acquire+0x357f/0x7d80 [ 1166.057424][T18468] ? _find_first_zero_bit+0xd6/0x100 [ 1166.062691][T18468] __lock_acquire+0x37ef/0x7d80 [ 1166.067530][T18468] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1166.073665][T18468] ? verify_lock_unused+0x140/0x140 [ 1166.078856][T18468] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1166.084993][T18468] lock_acquire+0x19e/0x420 [ 1166.089474][T18468] ? mnt_want_write+0x41/0x90 [ 1166.094131][T18468] ? leave_rcu+0xf4/0x160 [ 1166.098439][T18468] ? __might_sleep+0xe0/0xe0 [ 1166.103011][T18468] ? read_lock_is_recursive+0x20/0x20 [ 1166.108368][T18468] sb_start_write+0x4d/0x1c0 [ 1166.112939][T18468] ? mnt_want_write+0x41/0x90 [ 1166.117598][T18468] mnt_want_write+0x41/0x90 [ 1166.122085][T18468] path_openat+0x768/0x3270 [ 1166.126570][T18468] ? kmem_cache_alloc+0x17e/0x2c0 [ 1166.131591][T18468] ? getname_kernel+0x5a/0x2f0 [ 1166.136345][T18468] ? vfs_write+0x474/0x9a0 [ 1166.140743][T18468] ? do_filp_open+0x430/0x430 [ 1166.145403][T18468] do_filp_open+0x1f2/0x430 [ 1166.149885][T18468] ? vfs_tmpfile+0x620/0x620 [ 1166.154461][T18468] ? rcu_is_watching+0x15/0xb0 [ 1166.159204][T18468] ? getname_kernel+0x146/0x2f0 [ 1166.164031][T18468] filp_open+0x180/0x1e0 [ 1166.168272][T18468] ? file_open_name+0x1c0/0x1c0 [ 1166.173099][T18468] ? lockdep_hardirqs_on+0x98/0x150 [ 1166.178276][T18468] nvmet_file_ns_enable+0x74/0x330 [ 1166.183370][T18468] nvmet_ns_enable+0xf4/0x8c0 [ 1166.188024][T18468] nvmet_ns_enable_store+0xd8/0x170 [ 1166.193201][T18468] ? nvmet_ns_enable_show+0x60/0x60 [ 1166.198393][T18468] ? down_read+0x1ac/0x2e0 [ 1166.202793][T18468] configfs_write_iter+0x312/0x400 [ 1166.207902][T18468] ? nvmet_ns_enable_show+0x60/0x60 [ 1166.213079][T18468] vfs_write+0x474/0x9a0 [ 1166.217323][T18468] ? file_end_write+0x250/0x250 [ 1166.222162][T18468] ? __fget_files+0x3fc/0x460 [ 1166.226822][T18468] ? __fdget_pos+0x2a3/0x330 [ 1166.231390][T18468] ? ksys_write+0x74/0x260 [ 1166.235801][T18468] ksys_write+0x151/0x260 [ 1166.240119][T18468] ? __ia32_sys_read+0x90/0x90 [ 1166.244866][T18468] ? trace_sys_enter+0x1f/0x80 [ 1166.249612][T18468] do_syscall_64+0x55/0xb0 [ 1166.254012][T18468] ? clear_bhb_loop+0x40/0x90 [ 1166.258678][T18468] ? clear_bhb_loop+0x40/0x90 [ 1166.263339][T18468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1166.269214][T18468] RIP: 0033:0x7fa247f9e159 [ 1166.273621][T18468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.293204][T18468] RSP: 002b:00007fa248de5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1166.301630][T18468] RAX: ffffffffffffffda RBX: 00007fa248225fa0 RCX: 00007fa247f9e159 [ 1166.309609][T18468] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000005 [ 1166.317576][T18468] RBP: 00007fa24803506b R08: 0000000000000000 R09: 0000000000000000 [ 1166.325539][T18468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1166.333500][T18468] R13: 00007fa248226038 R14: 00007fa248225fa0 R15: 00007ffd279d3438 [ 1166.341471][T18468] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1166.656451][T17354] team0 (unregistering): Port device team_slave_1 removed [ 1166.764480][T17354] team0 (unregistering): Port device team_slave_0 removed [ 1166.798774][T18468] nvmet: failed to open file ./0©ïßÔ˜ *Ñx¡³8: (-2) [ 1166.865284][T17354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1166.994219][T17354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1167.577941][T17354] bond0 (unregistering): Released all slaves [ 1167.677799][T18276] hsr_slave_0: entered promiscuous mode [ 1167.684511][T18276] hsr_slave_1: entered promiscuous mode [ 1167.694702][T18306] team0: Port device team_slave_0 added [ 1167.754946][T18465] syz_tun (unregistering): left allmulticast mode [ 1168.948171][T17354] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.165515][T17354] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.268540][T17354] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.371965][T17354] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.465474][T17354] netdevsim netdevsim6 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.506000][T17354] netdevsim netdevsim6 eth22: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.548058][T17354] netdevsim netdevsim6 eth23: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.578890][T17354] netdevsim netdevsim6 eth24: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.597114][T17354] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.670826][T17354] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.724313][T17354] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.786276][T17354] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.866898][T17354] netdevsim netdevsim5 eth25: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.915807][T17354] netdevsim netdevsim5 eth26: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.954766][T17354] netdevsim netdevsim5 eth27: set [0, 0] type 1 family 0 port 8472 - 0 [ 1170.002852][T17354] netdevsim netdevsim5 eth28: set [0, 0] type 1 family 0 port 8472 - 0 [ 1170.039715][T17354] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.107847][T17354] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.161858][T17354] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.226190][T17354] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.329049][T17354] netdevsim netdevsim9 eth29: set [0, 0] type 1 family 0 port 8472 - 0 [ 1170.366368][T17354] netdevsim netdevsim9 eth30: set [0, 0] type 1 family 0 port 8472 - 0 [ 1170.399946][T17354] netdevsim netdevsim9 eth31: set [0, 0] type 1 family 0 port 8472 - 0 [ 1170.438944][T17354] netdevsim netdevsim9 eth32: set [0, 0] type 1 family 0 port 8472 - 0 [ 1170.487553][T17354] tipc: Left network mode [ 1170.500892][T17354] tipc: Left network mode [ 1171.731237][T17354] bridge_slave_1: left allmulticast mode [ 1171.737078][T17354] bridge_slave_1: left promiscuous mode [ 1171.759365][T17354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.782562][T17354] bridge_slave_0: left allmulticast mode [ 1171.788378][T17354] bridge_slave_0: left promiscuous mode [ 1171.807527][T17354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.832219][T17354] hsr_slave_0: left promiscuous mode [ 1171.859014][T17354] hsr_slave_1: left promiscuous mode [ 1171.865170][T17354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.886741][T17354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.903096][T17354] bridge_slave_1: left allmulticast mode [ 1171.908926][T17354] bridge_slave_1: left promiscuous mode [ 1171.930569][T17354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.953337][T17354] bridge_slave_0: left allmulticast mode [ 1171.959187][T17354] bridge_slave_0: left promiscuous mode [ 1171.974587][T17354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.008565][T17354] hsr_slave_0: left promiscuous mode [ 1172.030535][T17354] hsr_slave_1: left promiscuous mode [ 1172.036462][T17354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.059032][T17354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.081380][T17354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.088988][T17354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.126962][T17354] hsr_slave_0: left promiscuous mode [ 1172.133059][T17354] hsr_slave_1: left promiscuous mode [ 1172.157746][T17354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.165371][T17354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.181381][T17354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.189314][T17354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.197159][T17354] bridge_slave_1: left allmulticast mode [ 1172.205152][T17354] bridge_slave_1: left promiscuous mode [ 1172.211559][T17354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.221690][T17354] bridge_slave_0: left allmulticast mode [ 1172.227491][T17354] bridge_slave_0: left promiscuous mode [ 1172.234490][T17354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.247816][T17354] hsr_slave_0: left promiscuous mode [ 1172.254112][T17354] hsr_slave_1: left promiscuous mode [ 1172.259997][T17354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.270116][T17354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.279128][T17354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.288378][T17354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.296343][T17354] bridge_slave_1: left allmulticast mode [ 1172.302142][T17354] bridge_slave_1: left promiscuous mode [ 1172.309636][T17354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.318286][T17354] bridge_slave_0: left allmulticast mode [ 1172.324078][T17354] bridge_slave_0: left promiscuous mode [ 1172.331777][T17354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.345680][T17354] veth1_macvtap: left promiscuous mode [ 1172.354056][T17354] veth0_macvtap: left promiscuous mode [ 1172.360236][T17354] veth1_vlan: left promiscuous mode [ 1172.365664][T17354] veth0_vlan: left promiscuous mode [ 1172.374477][T17354] veth1_macvtap: left promiscuous mode [ 1172.381329][T17354] veth0_macvtap: left promiscuous mode [ 1172.387029][T17354] veth1_vlan: left promiscuous mode [ 1172.394524][T17354] veth0_vlan: left promiscuous mode [ 1172.401077][T17354] veth1_macvtap: left promiscuous mode [ 1172.407101][T17354] veth0_macvtap: left promiscuous mode [ 1172.414235][T17354] veth1_vlan: left promiscuous mode [ 1172.419650][T17354] veth0_vlan: left promiscuous mode [ 1172.629055][T17354] team0 (unregistering): Port device team_slave_0 removed [ 1172.666821][T17354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1172.685076][T17354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1172.755844][T17354] bond0 (unregistering): Released all slaves [ 1172.834877][T17354] team0 (unregistering): Port device team_slave_1 removed [ 1172.869795][T17354] team0 (unregistering): Port device team_slave_0 removed [ 1172.907290][T17354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1172.953006][T17354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.037160][T17354] bond0 (unregistering): Released all slaves [ 1173.280073][T17354] team0 (unregistering): Port device team_slave_1 removed [ 1173.316932][T17354] team0 (unregistering): Port device team_slave_0 removed [ 1173.357547][T17354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.368944][T17354] bond_slave_1 (unregistering): left promiscuous mode [ 1173.404123][T17354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.418279][T17354] bond_slave_0 (unregistering): left promiscuous mode [ 1173.508065][T17354] bond0 (unregistering): Released all slaves [ 1173.714075][T17354] bond1 (unregistering): Released all slaves [ 1173.857265][T17354] team0 (unregistering): Port device team_slave_1 removed [ 1173.893236][T17354] team0 (unregistering): Port device team_slave_0 removed [ 1173.932745][T17354] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.969460][T17354] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1174.056755][T16317] infiniband syz2: ib_query_port failed (-19) [ 1174.064078][T17354] team0 (unregistering): Port device .` removed [ 1174.128293][T17354] .` (unregistering): (slave bridge0): Releasing backup interface [ 1174.139115][T17354] .` (unregistering): Released all slaves [ 1174.400137][T17354] team0 (unregistering): Port device team_slave_1 removed [ 1174.435098][T17354] team0 (unregistering): Port device team_slave_0 removed [ 1174.473181][T17354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1174.490149][T17354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1174.581528][T17354] bond0 (unregistering): Released all slaves