last executing test programs: 9m45.405968701s ago: executing program 0 (id=114): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x3b87, &(0x7f0000000240)={0x0, 0x9b6, 0x40, 0x23, 0x2bc}, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20203, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 9m45.053063291s ago: executing program 0 (id=117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)}, 0x4005) 9m38.096836387s ago: executing program 0 (id=149): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 9m37.511271523s ago: executing program 0 (id=157): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 9m37.355224153s ago: executing program 0 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) 9m36.860647608s ago: executing program 0 (id=163): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0x40002) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/103, 0x67}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 9m36.413371502s ago: executing program 32 (id=163): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0x40002) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/103, 0x67}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3m35.064889538s ago: executing program 4 (id=2563): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r0}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0) 3m34.846217606s ago: executing program 4 (id=2566): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x40, 0x32, 0x0, @remote, @local}, {0x4d2, 0x1, @basic={0x0, 0x0, 0x0, [@runt="00112233"]}}}}}}, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe64, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x201}, 0x1c) r2 = socket(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000390400000000fbdbdf2500000000", @ANYRES32=r8, @ANYBLOB="11980400419804002800128008000100736974001c00028008000300ac"], 0x48}}, 0x0) sendto$packet(r6, 0x0, 0x0, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x4, 0x6, @local}, 0x14) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0xe64, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x7ff, @empty, 0x4cae}, 0x1c) 3m33.641274839s ago: executing program 4 (id=2575): r0 = socket$inet_udp(0x2, 0x2, 0x0) listen(r0, 0x7f) 3m33.161560752s ago: executing program 4 (id=2584): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x1048b, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0xa01f, 0x100000110) 3m32.562805026s ago: executing program 4 (id=2589): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000800) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m32.314205878s ago: executing program 4 (id=2590): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, 0x0, 0xc8) 3m23.568792432s ago: executing program 6 (id=2647): syz_emit_ethernet(0x6e, &(0x7f0000000000)={@link_local, @random="000000113aed", @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x38, 0x3a, 0xff, @private1, @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x60, '\x00', {0x7, 0x6, "cadaf7", 0x0, 0x2f, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@srh={0x87, 0x0, 0x4, 0x0, 0x4, 0x10, 0x8}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001680)={0x18, {"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", 0x1000}}, 0x1006) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r6, 0x0}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) quotactl_fd$Q_SYNC(r10, 0xc67439dd2b8d0dc6, 0x0, 0x0) sendmmsg$inet(r9, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x2, 0x48000) pread64(r8, &(0x7f0000000240)=""/203, 0xcb, 0x9) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x7, 0x30, 0x0, 0x8}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000380)={r11, 0xfce661e}, &(0x7f0000000480)=0xc) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x20, 0x8, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x0, 0x0, 0xff, 0x82, 0x0, 0x93}, 0xe) syz_emit_ethernet(0x82, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000300)="8b", 0x1, 0x20000024, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}, 0x1c) 3m22.461515216s ago: executing program 6 (id=2653): socket$inet6(0xa, 0x80002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x301, 0x20}, 0xc) socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) preadv2(r4, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) 3m20.998154749s ago: executing program 6 (id=2660): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x20000) 3m20.392137271s ago: executing program 6 (id=2664): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x8910, &(0x7f0000000940)={'syztnl0\x00', 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x7}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000000)="247c9b06c6cf", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a3", 0x1}], 0x1}}], 0x2, 0x4040881) unshare(0x8040480) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r2], 0x24}}, 0x4000000) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80002}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000040)) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 3m19.792568238s ago: executing program 6 (id=2669): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m19.170266922s ago: executing program 6 (id=2673): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x4f) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) socket$inet(0x2, 0x2, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d40)=@delchain={0x2c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x5c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x1, @private0, 0x80000000}, 0x1c) mlock2(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1) 3m19.052551789s ago: executing program 1 (id=2674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3m17.959054705s ago: executing program 1 (id=2676): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x1f5) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) 3m17.65311814s ago: executing program 1 (id=2679): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}]}, 0x20}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000004000a5012bbd700000000000047c000004"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) 3m17.347654331s ago: executing program 1 (id=2682): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x409}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) 3m16.296589348s ago: executing program 33 (id=2590): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, 0x0, 0xc8) 3m16.176171334s ago: executing program 1 (id=2685): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m15.35529398s ago: executing program 1 (id=2688): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3m3.610699351s ago: executing program 34 (id=2673): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x4f) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) socket$inet(0x2, 0x2, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d40)=@delchain={0x2c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x5c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x1, @private0, 0x80000000}, 0x1c) mlock2(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1) 3m0.057879007s ago: executing program 35 (id=2688): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x0) 13.340379932s ago: executing program 5 (id=3345): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x280) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, 0x0) 12.874109981s ago: executing program 5 (id=3348): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./cgrp2\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgrp2/p0/cpuset.cpus.partition\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='root\n\x00', 0x5) write(r0, &(0x7f0000000500)='member\n\x00', 0x7) 12.761529879s ago: executing program 5 (id=3349): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sigaltstack(&(0x7f0000000000)={0x0}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 10.926171103s ago: executing program 5 (id=3353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x88, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x60, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}]}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 10.47907358s ago: executing program 8 (id=3354): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYBLOB="9f04dcff0e3290a8362c00b30069935f66000000005b8aa6823b2badb585fff1d6b6b31f21a64bc21483140600000000000000aa5a95ec", @ANYRES16, @ANYRES64, @ANYRESHEX], 0x1, 0x14e8, &(0x7f0000002a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl(r0, 0x1, &(0x7f0000000200)) 10.139536375s ago: executing program 7 (id=3355): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000a80)=ANY=[@ANYBLOB="6e6f6164696e6963622c6164696e6963622c616e63686f723d30303030303030303030303030303030303030372c6c6f6e6761642c757466382c756e686964652c756e64656c6574652c696f636861727365743d757466380000000000000003636b3d31383434363734343037333730393535313630372c726f6f746469723d30303030303030303030303030303030303030362c6769643d666f726765742c6e6f7374726963742c6d6f64653d30303030303030303030303030303030303030303030312c6769643d666f726765742c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',bs=00000000000000035019,\x00'], 0x1, 0xc34, &(0x7f0000001bc0)="$eJzs3U9sXNd5N+D3XHHEofx9FRM7ipPGxaQtUlmxXP2LqViFO6pptgFkWQjF7AJwJFLqwBRJkFQjG2nBdNNFFwGKoousCLRGgRQNjKYIumRaF0g2XhRZdUW0sBEUXbBFgKwCFvfOGXFIkTYjkhJpP49N/WbunHPnnHvH98qC3jkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET83iuXz5xNj3sUAMCjdHX0q2fOuf8DwMfKdf//DwAAAAAAAAAAAAAAB12KIp6MFLNXV9N49byjfqVdu3tvbHhk624Dqep5pGpf/tTPnjt/4UsvDF3s5pX29Af032ufjddGr19uvDxzZ3Zucn5+cqIxNt2+OTMxueM97Lb/ZqeqA9C48/rdiVu35hvnnj+/4eV7g+/3P3Fi8NLQs6ef6bYdGx4ZGV1vUt/y4UParsLjaBRxOlI8972fplZEFLH7Y1F/tOd+s4FqEqeqSYwNj1QTmWq3phfKF691D0QR0ejp1Oweo63PRfTVHukctteMWCyHXw74VDm90dnWXOvG1GTjWmtuob3Qnpm+ljqjLefTiCIupoiliFjpf3B3tSiiL1J85/hquhERR7rH4YtVYfD24yj2cY47UI6zUYtYKg7BOTvA+qOIVyPFz945GTfLY5Z/4gsRr5b5g4i3ynwpIpUfjAsR723xOeJw6osi/rw8/5dW00R1PeheV658rfGV6VszPW2715Vf8v7wwJXiMd0fBjblo3HAr031KKJVXfFX08P/ZgcAAAAAAAAAAAAAAACAvTYQRXwmUrzyb39U1RVHVZd+/NLQ7w/+/96a8ac/ZD9l2+cjYrHYWU3u0VwYeC1dS2mntcTqTvdcPYr441z/963HPRgAAAAAAAAAAAAAAAAAAICPtSJ+EilefPdkWoreNcXb07cb11s3pjqrwnbX/u2umb62trbWSJ1s5hzPuZhzKedyzpWcUeT+OZs5xwc6O17Mz5dyLudcyRlHcv+czZzjORdzLuVczrmSM/py/5zNnOM5F3Mu5VzOuZIzDsjavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyVFFPGLSPHtb6ymSBHRjBiPTi73P+7RAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACl/lTE9yNF4w+a97f1RUSq/u04Wf5yIZpHy/xkNIfKfCmal3O2quxrfusxjJ/dqaUifhwp+utv3z/h+fzXOs/ufwzirW+uP/tsXyePdF8cfL//iRPHLw2N/NrT2z1OWw3g1JX29N17jbHhkZHRns19+d0/2bNtML9vsTdTJyLm33jz9dbU1OTcwz8oPwK76H6IHqS+gz/T2oEf4SF6EH0HYhiPZ+58DJT3//cixW+/++/dG37n/l+P/9d5dv8OHz//k/X7/4ubd7TD+3/f5n75/l/e07e6/z/Zs+3F/LuRWl9EfeHObO1ERH3+jTdPt++0bk/enpy+cObMl4eGvnz+TO1oRP1We2qy59GeHC4AAAAAAAAAAAAAAACARycV8buRovXj1dSIiHtVvdbgpaFnTz9zJI5U9VYb6rZfG71+ufHyzJ3Zucn5+cmJxth0++bMxORO365elXuNDY/sy2Q+1MA+j3+g/vLM7Btz7dt/uLDl68fql2/ML8y1bm79cgxEEdHs3XKqGvDY8Eg16Kl2a7rqem3LYvpfXi0V8R+R4uaFRvp83pbr/zdX+G+o/1/cvKN9qv//RM+28j1TKuLnkeK3/uLp+Hw1zmPxwDHL7f4mUpy6+LncLo6W7bpj6HyvQKcysGz7P5HiH36xsW23HvLJ9bZnd3xgD4ny/B+PFN//s+/Gr+dtG7//Yevzf2zzjvbp/D/Vs+3Yhu8r2PXUyef/dKR46cm34zfytg/6/o/ud2+czI3vfz/HPp3/T/VsG8zv+5t7M3UAAAAAAAAAAIBDrZaK+NtI8cORvvRC3raTv/83sXlH+/T3vz7ds21ib9Yr+tAHuz6oAAAAAHBA1FIRP4kUtxfevl9DvbH+u6f+83fW6z+H06ZXqz/n+5XqewP28s//eg3m9x3f/bQBAAAAAAAAAAAAAAAAAADgQEmpiBfyeurjVT3/xLbrqS9Hilf+67ncLp0o23XXgR+sfq1fnZk+fXlqauZma6F1Y2qyMTrbujlZ9n0qUqz+9edy36JaX7273nxnjff1tdjnIsXI33XbdtZi765N/tR627Nl209Eiv/8+41tu+tYf2q97bmy7V9Fiq//09ZtT6y3PV+2/W6k+NHXG922x8q23e9H/fR62+dvzhT7cFYAAAAAAAAAAAAAAAAAAAD4uKmlIv40Uvz3naX7tfx5/f9az9PKW9/sWe9/k3vVOv+D1fr/2z1+mPX/q+8VWNzuXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KMpRRFvRorZq6tpub983lG/0p6+e29seGTrbgOp6nmkal/+1M+eO3/hSy8MXezmB/ffa5+J10avX268PHNndm5yfn5yojE23b45MzG54z3stv9mp6oD0Ljz+t2JW7fmG+eeP7/h5XuD7/c/cWLw0tCzp5/pth0bHhkZ7WnTV3vod39A2mb70SjiLyPFc9/7afphf0QRuz8WH/LZ2W8D1SROVZMYGx6pJjLVbk0vlC9e6x6IIqLR06nZPUaP4FzsSjNisRx+OeBT5fRGZ1tzrRtTk41rrbmF9kJ7Zvpa6oy2nE8jiriYIpYiYqX/wd3VoojXI8V3jq+mf+6PONI9Dl+8OvrVM+e2H0exj3PcgXKcjVrEUnEIztkB1h9F/GOk+Nk7J+Nf+iP6ovMTX4h4tcwfRLwVnfOdyg/GhYj3tvgccTj1RRH/W57/S6vpnf7yetC9rlz5WuMr07dmetp2ryuH/v7wKB3wa1M9ivhRdcVfTf/qv2sAAAAAAAAAAAAAAACAA6SIX40UL757MlX1wfdritvTtxvXWzemOmV93dq/bs302traWiN1splzPOdizqWcyzlXckaR++dslllfWxvPzxdzLuVczrmSM47k/jmbOcdzLuZcyrmccyVn9OX+OZs5x3Mu5lzKuZxzJWcckNo9AAAAAAAAAAAAAAAAAADgo6Wo/knx7W+sprX+zvrS49HJZeuBfuT9XwAAAP//M3/28g==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, &(0x7f0000000100)={0x8000000000000003, 0xcb7}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() r2 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x20042000) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 9.351205927s ago: executing program 8 (id=3357): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1cc4}}, {@nodioread_nolock}]}, 0x5, 0x7eb, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x4) lseek(r0, 0x8, 0x4) 8.631916904s ago: executing program 7 (id=3358): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x69, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080), 0x800) 8.072585612s ago: executing program 9 (id=3360): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040ee507230c04"], 0xa) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) 7.877415891s ago: executing program 7 (id=3362): mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r5, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) socket(0x1e, 0x5, 0x0) 6.986567921s ago: executing program 8 (id=3364): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000540)='./file1\x00', 0xa00010, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/361, @ANYRESHEX=0xee01, @ANYRESOCT=r0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0xd, 0x643, &(0x7f0000001380)="$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") lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) 6.754204517s ago: executing program 3 (id=3365): gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x146) gettid() 6.685161583s ago: executing program 9 (id=3366): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xbc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@iptfs_dont_frag={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) 6.594752447s ago: executing program 2 (id=3367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 6.56391599s ago: executing program 7 (id=3368): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000060a010400000000000000000a00000109da076200010080797a310000000004000480090002"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040050) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/19, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0xfdef) 6.234570668s ago: executing program 5 (id=3369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@keyring={'key_or_keyring:', r4}) add_key(&(0x7f0000000780)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000000c0)="7589d70300", 0x5, r3) 5.554056371s ago: executing program 9 (id=3370): unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[0x0]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x2240, 0x0) read$FUSE(r1, &(0x7f0000002a80)={0x2020}, 0x2020) 4.215440637s ago: executing program 3 (id=3371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800037f030303ee"], 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000000001004001300000000000000000000000000000000005a5da91db7d796659a2402d1fd3051ce8afde87a05e5dc2c394745326bf0b4e50d87da5116df63560c70751a0566a9879f6581d7607a9e5fafcb9bdd1b175cae82497c7b394dccade14f37dfbf1ca23280ea7baaa3641a82658c22d18a5adcd3f829d5c17648cb08e043ca7bcb208cdea4c2725c3b54e500a18e498b09414ac08f06533df4438fd2d1e05bba9f02000000000000e1a0b8f18b49442774a204ea68acdce5a4d2e31b579b2e315a74b71e5651748c8af1e9bd00000000"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) ioctl(r5, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r5, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r5, 0x890b, &(0x7f0000000100)="000000010000000000000000020000000f0000006c6170623000000000000000000000000000000000000000000000000000000000000000e000000000000000") r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000000), 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r7}, 0xc) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) 4.215114752s ago: executing program 5 (id=3372): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') close_range(r1, 0xffffffffffffffff, 0x2) pread64(r1, 0x0, 0x0, 0x8) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb78a405e0483020b99010203010902"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, 0x0, &(0x7f0000000340)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0xb44b19ea93119765) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000d40)='./file5\x00') 3.578520052s ago: executing program 8 (id=3373): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f05000000dc3800000200000009000000005f00003e2e"], &(0x7f0000000340)=""/250, 0x37, 0xfa, 0x9}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp2\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cgrp2\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgrp2/cgroup.subtree_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='+cpuset\n\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cgrp2/p0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./cgrp2/p1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgrp2/p0/cpuset.cpus.partition\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='root\n\x00', 0x5) write(r2, &(0x7f0000000500)='member\n\x00', 0x7) r3 = fsmount(r0, 0x0, 0x1) fchdir(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0xa, 0x19, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xb}, 0x94) 3.519981173s ago: executing program 7 (id=3374): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)="3300000008000601010003000001", 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0xb56cea99d7d0f667]}}, 0x0, 0x27}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)=0x3) syz_usb_connect(0x5, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002ffffff40950b20770000010203010902270001010080fa0904000003ff0000000705810200020007050202000200070583c392"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 3.421364509s ago: executing program 2 (id=3375): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp2\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgrp2/p0/cpuset.cpus.partition\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='root\n\x00', 0x5) write(r0, &(0x7f0000000500)='member\n\x00', 0x7) 3.194863686s ago: executing program 9 (id=3376): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x0, 0x0, 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) 3.040924481s ago: executing program 2 (id=3377): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(r0, r1, 0x0) 3.030042363s ago: executing program 8 (id=3378): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0xb014853145f0758b, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x20000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r5, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSS_SELECT={0x10, 0xe3, 0x0, 0x1, {0xc, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xa, 0x5}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000) 2.81969413s ago: executing program 3 (id=3379): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000340)=[@request_death={0x400c630e, 0x1}, @register_looper], 0x0, 0x0, 0x0}) 2.66025022s ago: executing program 2 (id=3380): mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r5, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) socket(0x1e, 0x5, 0x0) 2.313921885s ago: executing program 3 (id=3381): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x180) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x10) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x14, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x400, &(0x7f0000000080), 0x1, 0x4a6, &(0x7f0000000540)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) creat(0x0, 0x182) r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000b40)={0x0, @in6={{0xa, 0x4e20, 0xfffffffd, @private0, 0x4a98d0b}}, 0x4, 0x86c3}, 0x90) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) writev(0xffffffffffffffff, &(0x7f0000002540)=[{&(0x7f0000000240)="402dadd9fd3363ad8c8ea15cb6100e1c462e11a025a2c8dc30b66cc7255046c52d2c9bc7c24caeb14f31975f54301388ab2f8e82d511dc9e7a96e23863f6ec927246b1875154ed871e2a1849fd75d6c3d6f0ad3240bf9e34899798acf9a2b6d182354531295a558707abad66359aa821fffc6844c0b010518cdab4b4ad2d90b04e675f6b9f75ae0ee55f2a7e93678e657270d5c0a151d8cb883abb30392bd4dde0c588dbf27a19ba87f16576fad734b5c73569b06a99171f8f2afca0d5579e8b07549b1c13ec7d19d143a139cecbbb6e4080e5c9f0a08968225f65666958545c2b99", 0xe2}, {&(0x7f0000000680)="d90a593330c3ff1e684e625afc4a0e000000000000222749fea50e44428f2fdd21d390879a745000000000000095ae8fd913fe5422a2518f557a568d26c82e2757497b351be6f60b4fd685c7a1f7d52839051784053e90aae35b52ff19f0c0ba561d0b86955238fe90c191e63ba476dc279fe59df37480c422df4e28801a275ac92b66fb2162d080b96581f6ed6c6b0cc93d51c08700d94acce084419ddb070da2614a5398474b5c9bea012073c25d8c4f19d01a454da8d94f2c346204b768bd718bbc751b89e1d02c2cd34427cd923b7768c4b79ba15e954e4fb990013b458cd4190d8b0f92", 0xe6}, {&(0x7f0000000000)="0530e4c20885a8643458ec688dfdc12d3800df673facadfbce5d1147c42573748a81a5eb37569231194c", 0x2a}, {&(0x7f00000003c0)="83fa248ce68d0b55f4", 0x9}, {&(0x7f0000000400)="dd65d28ff0e0e67fa4f7e8b3ef5809d0d7f976", 0x13}, {&(0x7f0000000440)="4cbca42571bc1984c1eafda13aefbefa714f9370b3f5d912aa1d54530566d9b19cb498e0e231c156c5184fb001bad69f0145e03e6c4ee6c841d6422922b40b2f731640a84f16ac9398df59c660", 0x4d}, {&(0x7f0000000600)="8093493adb3f0e36b3ec471e946a175576aba899574e34fc491042db8d669774f6a63b81e76556ab3df722a99f036fec3e18976dbb3f8e6f577e55e1704c303dd9b0454935e6d3228551e035a93b48c11d974b9876cb90a1ceae53bce70b08e4e2d6a0916775376cc27deb1fdf70998f995f4f7809d61d6b1f45f0", 0x7b}, {&(0x7f0000001540)="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", 0x12a}], 0x8) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xa1, @local, 0x8}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x40400) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') pread64(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000700)=0x200, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x60300, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0xa1, 0x60000, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x41, 0x0, 0x0, 0x0, @u64=0x1f}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1.767078185s ago: executing program 9 (id=3383): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') read(r1, &(0x7f0000001380)=""/4096, 0x1000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x4d, 0x0, &(0x7f0000000000)=0x2f) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x409c9, 0x0, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) open(&(0x7f0000000180)='./config\x00', 0x4400, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./config/usb_gadget/g1/file0\x00', 0x0, 0x4008, r5}, 0x18) 1.487630551s ago: executing program 2 (id=3384): gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x146) gettid() 1.278847203s ago: executing program 3 (id=3385): ioperm(0x4, 0xa, 0x5) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x1, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') open(&(0x7f00000000c0)='./bus\x00', 0x1c1242, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000780)={@id={0x2, 0x0, @a}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) getsockname$unix(r2, 0x0, &(0x7f0000000800)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_INFO(r3, 0x11, 0x481, 0x0, 0x0) shmat(0x0, 0x0, 0x4000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',shortname=mixed,utf8=1,gid=', @ANYRESHEX=0xee01, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000e40)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r4, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="18190000", @ANYRES32=0x1, @ANYRES32=0x0], &(0x7f0000000040)='GPL\x00', 0x9, 0xc6, &(0x7f0000000140)=""/198, 0x41100, 0x45, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x6, 0x1, 0x9}, 0x10, 0xfbbd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004) getrandom(0x0, 0xffe2, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10000, 0x120) 1.112374452s ago: executing program 8 (id=3386): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000060a010400000000000000000a00000109da076200010080797a310000000004000480090002"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040050) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, 0x0, 0x0) 307.472349ms ago: executing program 7 (id=3387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x6}, {0x8}}}, 0x24}}, 0x40004) 195.110078ms ago: executing program 9 (id=3388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0x392, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r6], 0x44}}, 0x0) 148.448929ms ago: executing program 2 (id=3389): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1fa) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) rmdir(&(0x7f0000000140)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00') 0s ago: executing program 3 (id=3390): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f05000000dc3800000200000009000000005f00003e2e"], &(0x7f0000000340)=""/250, 0x37, 0xfa, 0x9}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp2\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cgrp2\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgrp2/cgroup.subtree_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='+cpuset\n\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cgrp2/p0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./cgrp2/p1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgrp2/p0/cpuset.cpus.partition\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='root\n\x00', 0x5) write(r2, &(0x7f0000000500)='member\n\x00', 0x7) r3 = fsmount(r0, 0x0, 0x1) fchdir(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0xa, 0x19, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xb}, 0x94) kernel console output (not intermixed with test programs): 7527][T14270] ? find_held_lock+0x2b/0x80 [ 492.367582][T14270] ? get_signal+0x7e0/0x21e0 [ 492.367625][T14270] do_group_exit+0xd5/0x2a0 [ 492.367678][T14270] get_signal+0x1ec7/0x21e0 [ 492.367728][T14270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.367786][T14270] ? __pfx_get_signal+0x10/0x10 [ 492.367828][T14270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.367874][T14270] ? do_futex+0x190/0x440 [ 492.367933][T14270] arch_do_signal_or_restart+0x91/0x7e0 [ 492.367992][T14270] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 492.368060][T14270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.368112][T14270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.368166][T14270] exit_to_user_mode_loop+0x139/0x700 [ 492.368212][T14270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 492.368258][T14270] ? rcu_is_watching+0x13/0xc0 [ 492.368316][T14270] do_syscall_64+0x661/0x790 [ 492.368371][T14270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.368410][T14270] RIP: 0033:0x7f2779f9e159 [ 492.368439][T14270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.368477][T14270] RSP: 002b:00007f277aeb70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 492.368514][T14270] RAX: fffffffffffffe00 RBX: 00007f277a225fa8 RCX: 00007f2779f9e159 [ 492.368540][T14270] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f277a225fa8 [ 492.368565][T14270] RBP: 00007f277a225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 492.368589][T14270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.368613][T14270] R13: 00007f277a226038 R14: 00007ffd1d6a2a80 R15: 00007ffd1d6a2b68 [ 492.368664][T14270] [ 492.683174][ T1407] net_ratelimit: 15 callbacks suppressed [ 492.683203][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 492.803665][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 492.913309][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 493.072236][T14283] tipc: Enabled bearer , priority 0 [ 493.073052][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 493.183242][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 493.241565][T14282] tipc: Disabling bearer [ 493.293127][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 493.298013][T14296] syzkaller0: entered promiscuous mode [ 493.298045][T14296] syzkaller0: entered allmulticast mode [ 493.433260][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 493.546853][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 493.580249][T14301] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2519'. [ 493.653717][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 493.754552][T14311] sch_fq: defrate 0 ignored. [ 493.805139][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 494.153980][T14327] team0: Port device bridge0 removed [ 494.187374][T14323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2528'. [ 494.188117][T14323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2528'. [ 494.480911][T14332] tipc: Enabled bearer , priority 0 [ 494.836590][T14331] tipc: Disabling bearer [ 494.994959][T14360] loop4: detected capacity change from 0 to 256 [ 495.060127][T14360] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 496.127751][T14390] netlink: 'syz.5.2547': attribute type 8 has an invalid length. [ 496.771408][T14410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2552'. [ 497.014232][T14418] netlink: 'syz.6.2553': attribute type 4 has an invalid length. [ 497.164235][T14422] syzkaller0: entered promiscuous mode [ 497.164270][T14422] syzkaller0: entered allmulticast mode [ 497.701677][T14449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2566'. [ 497.734453][ T12] net_ratelimit: 33 callbacks suppressed [ 497.734481][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 497.844180][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 498.014049][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 498.123256][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 498.233535][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 498.317193][T14470] loop6: detected capacity change from 0 to 512 [ 498.347793][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 498.401614][T14470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.401746][T14470] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.454634][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 498.475568][T14372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.555450][ T31] audit: type=1800 audit(1791033408.896:45): pid=14470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2570" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 498.593532][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 498.704250][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 498.815785][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 499.135586][ T6388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.179632][T14501] syzkaller0: entered promiscuous mode [ 499.179668][T14501] syzkaller0: entered allmulticast mode [ 499.333483][T14507] loop4: detected capacity change from 0 to 512 [ 499.340467][T14507] EXT4-fs: Ignoring removed nomblk_io_submit option [ 499.378877][T14507] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 499.409897][T14507] EXT4-fs (loop4): orphan cleanup on readonly fs [ 499.425688][T14507] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 499.425732][T14507] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 499.497543][T14507] EXT4-fs (loop4): 1 truncate cleaned up [ 499.521795][T14507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 499.572666][T14513] capability: warning: `syz.1.2583' uses 32-bit capabilities (legacy support in use) [ 499.816490][T14518] loop3: detected capacity change from 0 to 512 [ 499.887860][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.561747][T14538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2587'. [ 501.083686][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.083766][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.784714][ T3330] net_ratelimit: 23 callbacks suppressed [ 502.784743][ T3330] bond1: (slave macvlan3): failed to get link speed/duplex [ 502.893051][ T3330] bond1: (slave macvlan3): failed to get link speed/duplex [ 502.976083][T14589] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2605'. [ 503.007551][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 503.113112][ T3330] bond1: (slave macvlan3): failed to get link speed/duplex [ 503.223568][ T1014] bond1: (slave macvlan3): failed to get link speed/duplex [ 503.333634][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 503.443194][ T3330] bond1: (slave macvlan3): failed to get link speed/duplex [ 503.553687][ T3330] bond1: (slave macvlan3): failed to get link speed/duplex [ 503.702847][T14607] bridge0: port 3(erspan0) entered blocking state [ 503.703285][T14607] bridge0: port 3(erspan0) entered disabled state [ 503.704146][T14607] erspan0: entered allmulticast mode [ 503.716887][T14607] erspan0: entered promiscuous mode [ 503.726501][T14607] erspan0: left allmulticast mode [ 503.726547][T14607] erspan0: left promiscuous mode [ 503.727477][T14607] bridge0: port 3(erspan0) entered disabled state [ 503.831707][ T3330] bond1: (slave macvlan3): failed to get link speed/duplex [ 503.933313][ T1014] bond1: (slave macvlan3): failed to get link speed/duplex [ 504.935517][T14623] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2616'. [ 504.987561][T14625] syzkaller0: entered promiscuous mode [ 504.987594][T14625] syzkaller0: entered allmulticast mode [ 505.287319][T14633] syzkaller0: entered promiscuous mode [ 505.287353][T14633] syzkaller0: entered allmulticast mode [ 505.886669][T14582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 506.774967][T14670] syzkaller0: entered promiscuous mode [ 506.775003][T14670] syzkaller0: entered allmulticast mode [ 507.285215][T14683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2638'. [ 507.698259][T14689] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2640'. [ 507.792340][T14691] syzkaller0: entered promiscuous mode [ 507.792375][T14691] syzkaller0: entered allmulticast mode [ 508.753383][ T1407] net_ratelimit: 32 callbacks suppressed [ 508.753412][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 508.864240][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 508.983923][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 509.093179][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 509.204647][ T3289] bond1: (slave macvlan3): failed to get link speed/duplex [ 509.313106][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 509.345592][T14720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2648'. [ 509.415726][T14721] syzkaller0: entered promiscuous mode [ 509.415763][T14721] syzkaller0: entered allmulticast mode [ 509.423807][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 509.653090][ T1014] bond1: (slave macvlan3): failed to get link speed/duplex [ 509.763172][ T1014] bond1: (slave macvlan3): failed to get link speed/duplex [ 509.873097][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 510.175027][T14738] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2655'. [ 511.773013][T14696] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 512.138338][T14776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2662'. [ 512.359862][T14783] syzkaller0: entered promiscuous mode [ 512.359897][T14783] syzkaller0: entered allmulticast mode [ 512.922341][T14806] FAULT_INJECTION: forcing a failure. [ 512.922341][T14806] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 512.922392][T14806] CPU: 1 UID: 0 PID: 14806 Comm: syz.6.2669 Not tainted syzkaller #0 PREEMPT(full) [ 512.922438][T14806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 512.922462][T14806] Call Trace: [ 512.922474][T14806] [ 512.922489][T14806] dump_stack_lvl+0x100/0x190 [ 512.922549][T14806] should_fail_ex.cold+0x5/0xa [ 512.922601][T14806] strncpy_from_user+0x3b/0x2d0 [ 512.922669][T14806] __do_sys_add_key+0xd4/0x460 [ 512.922723][T14806] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.922774][T14806] ? __pfx___do_sys_add_key+0x10/0x10 [ 512.922844][T14806] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.922900][T14806] do_syscall_64+0x123/0x790 [ 512.922960][T14806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.922999][T14806] RIP: 0033:0x7f5e2a19e159 [ 512.923028][T14806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.923065][T14806] RSP: 002b:00007f5e2b0a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 512.923097][T14806] RAX: ffffffffffffffda RBX: 00007f5e2a425fa0 RCX: 00007f5e2a19e159 [ 512.923119][T14806] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000200 [ 512.923147][T14806] RBP: 00007f5e2a23506b R08: ffffffffffffffff R09: 0000000000000000 [ 512.923169][T14806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.923194][T14806] R13: 00007f5e2a426038 R14: 00007f5e2a425fa0 R15: 00007ffccbb0b988 [ 512.923246][T14806] [ 513.563959][T14821] syzkaller0: entered promiscuous mode [ 513.563995][T14821] syzkaller0: entered allmulticast mode [ 513.915530][T14824] net_ratelimit: 32 callbacks suppressed [ 513.915585][T14824] ip_tables: iptables: counters copy to user failed while replacing table [ 514.006923][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 514.130938][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 514.248738][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 514.404559][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 514.526851][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 514.735639][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 514.853242][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 514.952078][T14833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2679'. [ 514.966524][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 515.074277][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 516.516727][T14847] FAULT_INJECTION: forcing a failure. [ 516.516727][T14847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.516778][T14847] CPU: 0 UID: 0 PID: 14847 Comm: syz.1.2685 Not tainted syzkaller #0 PREEMPT(full) [ 516.516833][T14847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 516.516857][T14847] Call Trace: [ 516.516869][T14847] [ 516.516885][T14847] dump_stack_lvl+0x100/0x190 [ 516.516949][T14847] should_fail_ex.cold+0x5/0xa [ 516.517002][T14847] strncpy_from_user+0x3b/0x2d0 [ 516.517071][T14847] __do_sys_add_key+0xd4/0x460 [ 516.517125][T14847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 516.517178][T14847] ? __pfx___do_sys_add_key+0x10/0x10 [ 516.517241][T14847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 516.517298][T14847] do_syscall_64+0x123/0x790 [ 516.517355][T14847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.517396][T14847] RIP: 0033:0x7f2775b9e159 [ 516.517427][T14847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.517466][T14847] RSP: 002b:00007f2776a96028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 516.517504][T14847] RAX: ffffffffffffffda RBX: 00007f2775e25fa0 RCX: 00007f2775b9e159 [ 516.517530][T14847] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000200 [ 516.517556][T14847] RBP: 00007f2775c3506b R08: ffffffffffffffff R09: 0000000000000000 [ 516.517582][T14847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.517607][T14847] R13: 00007f2775e26038 R14: 00007f2775e25fa0 R15: 00007ffe3f574808 [ 516.517658][T14847] [ 517.146663][ T5636] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 517.152164][ T5636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 517.152907][ T5636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 517.177675][ T5636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 517.180156][ T5636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 518.373468][T14875] loop3: detected capacity change from 0 to 512 [ 518.435140][T14875] EXT4-fs (loop3): 1 orphan inode deleted [ 518.437336][T14875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.440199][T14875] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.476295][ T1407] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 518.476505][ T1407] EXT4-fs error (device loop3): ext4_release_dquot:7103: comm kworker/u8:9: Failed to release dquot type 1 [ 519.535346][ T5635] Bluetooth: hci6: command tx timeout [ 519.589463][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.590156][ T5633] syz_tun (unregistering): left allmulticast mode [ 519.590191][ T5633] syz_tun (unregistering): left promiscuous mode [ 519.590297][ T5633] bridge0: port 3(syz_tun) entered disabled state [ 519.895562][ T75] net_ratelimit: 27 callbacks suppressed [ 519.895591][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 520.005146][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 520.203073][ T75] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.232540][T14893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2694'. [ 520.263769][ T1014] bond1: (slave macvlan3): failed to get link speed/duplex [ 520.373479][ T3330] bond1: (slave macvlan3): failed to get link speed/duplex [ 520.466734][ T75] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.533570][ T3330] bond1: (slave macvlan3): failed to get link speed/duplex [ 520.561387][T14897] loop3: detected capacity change from 0 to 512 [ 520.629779][T14897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.629972][T14897] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.698087][T14897] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.2695: corrupted xattr block 33: invalid checksum [ 520.797298][ T31] audit: type=1800 audit(1791033431.136:46): pid=14897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2695" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 520.827947][T14903] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.2695: corrupted xattr block 33: invalid checksum [ 520.852793][T14897] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.2695: corrupted xattr block 33: invalid checksum [ 521.084573][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.121193][ T75] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.266111][ T3330] bond1: (slave macvlan3): failed to get link speed/duplex [ 521.563101][ T5635] Bluetooth: hci6: command tx timeout [ 521.893108][T14912] xt_CT: You must specify a L4 protocol and not use inversions on it [ 522.745019][ T75] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.929498][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 523.043316][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 523.394823][ T1014] bond1: (slave macvlan3): failed to get link speed/duplex [ 523.643520][ T5635] Bluetooth: hci6: command tx timeout [ 523.713213][ T1014] bond1: (slave macvlan3): failed to get link speed/duplex [ 524.440039][ T75] bridge_slave_1: left allmulticast mode [ 524.440078][ T75] bridge_slave_1: left promiscuous mode [ 524.440341][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.480248][ T75] bridge_slave_0: left allmulticast mode [ 524.480286][ T75] bridge_slave_0: left promiscuous mode [ 524.482229][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.462686][ T75] bond1 (unregistering): Released all slaves [ 525.643659][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 525.696760][ T75] tipc: Left network mode [ 525.726701][ T5635] Bluetooth: hci6: command tx timeout [ 525.731866][ T75] IPVS: stopping master sync thread 5965 ... [ 525.974364][T14955] syzkaller0: entered promiscuous mode [ 525.974399][T14955] syzkaller0: entered allmulticast mode [ 529.204509][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 529.212044][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 529.215575][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 529.242788][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 529.252504][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 530.152759][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 530.505109][T15005] loop3: detected capacity change from 0 to 512 [ 530.517800][T15005] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 530.546823][T15005] EXT4-fs (loop3): failed to initialize system zone (-117) [ 530.548191][T15005] EXT4-fs (loop3): mount failed [ 530.614433][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 530.645211][T14856] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.645385][T14856] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.645540][T14856] bridge_slave_0: entered allmulticast mode [ 530.649286][T14856] bridge_slave_0: entered promiscuous mode [ 530.906009][ T3330] bond1: (slave macvlan3): failed to get link speed/duplex [ 530.931273][T15006] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 530.949455][T14856] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.949582][T14856] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.949769][T14856] bridge_slave_1: entered allmulticast mode [ 530.975090][T14856] bridge_slave_1: entered promiscuous mode [ 531.014990][ T75] hsr_slave_0: left promiscuous mode [ 531.019781][ T75] hsr_slave_1: left promiscuous mode [ 531.020777][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.025382][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.323217][ T5635] Bluetooth: hci5: command tx timeout [ 531.771497][ T75] team0 (unregistering): Port device team_slave_1 removed [ 531.827733][ T75] team0 (unregistering): Port device team_slave_0 removed [ 531.911895][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2720'. [ 531.911945][T15037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2720'. [ 532.211679][T14856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.216491][ T1407] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.216574][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 532.216625][ T1407] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.216687][ T1407] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.216750][ T1407] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.241242][T14856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.438059][T14856] team0: Port device team_slave_0 added [ 532.540688][T14856] team0: Port device team_slave_1 added [ 532.543953][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 532.776934][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 532.797506][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 532.811890][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 532.820211][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 532.820942][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 532.949900][T14856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.949928][T14856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.949976][T14856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.073228][T14856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.073255][T14856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.073304][T14856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.403926][ T5636] Bluetooth: hci5: command tx timeout [ 533.585131][T15056] 9p: Bad value for 'rfdno' [ 534.373054][ T3289] bond1: (slave macvlan3): failed to get link speed/duplex [ 534.488297][ T3330] bond1: (slave macvlan3): failed to get link speed/duplex [ 534.716446][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 534.754703][ T75] IPVS: stop unused estimator thread 0... [ 534.825946][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 534.885348][T14856] hsr_slave_0: entered promiscuous mode [ 534.894130][T14856] hsr_slave_1: entered promiscuous mode [ 534.895023][T14856] debugfs: 'hsr0' already exists in 'hsr' [ 534.895051][T14856] Cannot create hsr debugfs directory [ 534.923108][ T5636] Bluetooth: hci3: command tx timeout [ 535.005533][ T5625] syz_tun (unregistering): left allmulticast mode [ 535.043356][T15074] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 535.106750][T15072] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2729'. [ 535.309024][T15072] syzkaller1: entered promiscuous mode [ 535.309058][T15072] syzkaller1: entered allmulticast mode [ 535.483423][ T5636] Bluetooth: hci5: command tx timeout [ 535.953311][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 535.990512][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 536.525195][T15114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 536.824543][T15114] loop3: detected capacity change from 0 to 512 [ 537.020204][ T5636] Bluetooth: hci3: command tx timeout [ 537.228721][T15114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.228858][T15114] ext4 filesystem being mounted at /454/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 537.299647][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 537.871313][ T5636] Bluetooth: hci5: command tx timeout [ 538.351128][T14990] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.351341][T14990] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.351505][T14990] bridge_slave_0: entered allmulticast mode [ 538.354268][T14990] bridge_slave_0: entered promiscuous mode [ 538.358052][T14990] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.358171][T14990] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.358594][T14990] bridge_slave_1: entered allmulticast mode [ 538.360653][T14990] bridge_slave_1: entered promiscuous mode [ 538.464379][T15126] 9p: Bad value for 'rfdno' [ 539.198011][ T5636] Bluetooth: hci3: command tx timeout [ 539.576679][T14990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.669087][T14990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.687440][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.991955][T14990] team0: Port device team_slave_0 added [ 540.001676][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 540.271622][T14990] team0: Port device team_slave_1 added [ 541.222124][T15162] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2744'. [ 541.253321][ T5636] Bluetooth: hci3: command tx timeout [ 541.360623][T15165] loop3: detected capacity change from 0 to 512 [ 541.494543][T15165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.494673][T15165] ext4 filesystem being mounted at /456/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 541.922233][T14990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.922261][T14990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.922309][T14990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.973250][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 541.975591][T14990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.975612][T14990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.975659][T14990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.162082][T14856] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 542.530496][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.579776][T14856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 542.580906][T14856] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 542.655477][T14856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 542.680541][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 542.682625][T14856] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 542.742442][T14856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 542.917996][T14856] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 542.947950][T14856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 542.993155][ T3289] bond1: (slave macvlan3): failed to get link speed/duplex [ 543.039021][T14990] hsr_slave_0: entered promiscuous mode [ 543.040285][T14990] hsr_slave_1: entered promiscuous mode [ 543.041208][T14990] debugfs: 'hsr0' already exists in 'hsr' [ 543.041236][T14990] Cannot create hsr debugfs directory [ 543.303467][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 543.435001][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 543.753111][ T3289] bond1: (slave macvlan3): failed to get link speed/duplex [ 543.846657][T15200] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 544.593784][ T3289] bond1: (slave macvlan3): failed to get link speed/duplex [ 544.603624][T15207] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 545.423578][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 545.633801][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 545.770357][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 545.782512][T15048] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.801619][T15048] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.806632][T15048] bridge_slave_0: entered allmulticast mode [ 545.812903][T15048] bridge_slave_0: entered promiscuous mode [ 545.858759][T15048] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.858882][T15048] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.859081][T15048] bridge_slave_1: entered allmulticast mode [ 545.899424][T15048] bridge_slave_1: entered promiscuous mode [ 546.091237][T15048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.368161][T15048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.971404][T15048] team0: Port device team_slave_0 added [ 547.037512][T15048] team0: Port device team_slave_1 added [ 547.617245][T15048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.617273][T15048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.617322][T15048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.933748][ T3289] net_ratelimit: 3 callbacks suppressed [ 547.933779][ T3289] bond1: (slave macvlan3): failed to get link speed/duplex [ 547.963980][T15247] loop3: detected capacity change from 0 to 512 [ 547.970383][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8 [ 547.988620][T15048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.988646][T15048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.988693][T15048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.643759][T15118] bond1: (slave macvlan3): failed to get link speed/duplex [ 549.757166][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 549.783255][T14856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.820565][T14856] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.943776][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 549.952616][T14856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 549.952651][T14856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 550.054615][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 550.166608][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 550.273110][T15118] bond1: (slave macvlan3): failed to get link speed/duplex [ 550.395315][T15118] bond1: (slave macvlan3): failed to get link speed/duplex [ 550.513098][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 550.633078][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 550.676215][T14990] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 550.690405][T14990] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 550.924414][ T75] bridge_slave_1: left allmulticast mode [ 550.924452][ T75] bridge_slave_1: left promiscuous mode [ 550.924717][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.958736][ T75] bridge_slave_0: left allmulticast mode [ 550.958771][ T75] bridge_slave_0: left promiscuous mode [ 550.975291][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.065756][ T75] bridge_slave_1: left allmulticast mode [ 551.065795][ T75] bridge_slave_1: left promiscuous mode [ 551.066026][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.875109][ T75] bridge_slave_0: left allmulticast mode [ 551.875149][ T75] bridge_slave_0: left promiscuous mode [ 551.875386][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.544626][ T75] bond1 (unregistering): Released all slaves [ 552.922289][ T75] team0: Port device bridge0 removed [ 552.979282][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.983920][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.985265][ T75] bond0 (unregistering): Released all slaves [ 553.013965][ T1407] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.014091][ T1407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.016975][ T1407] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.017095][ T1407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.038059][T14990] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 553.060175][T14990] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.061225][T14990] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 553.078795][T14990] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 553.144826][T15268] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 553.188210][T14990] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 553.220039][T14990] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 553.295647][ T75] tipc: Left network mode [ 553.356359][T15048] hsr_slave_0: entered promiscuous mode [ 553.357534][T15048] hsr_slave_1: entered promiscuous mode [ 553.358344][T15048] debugfs: 'hsr0' already exists in 'hsr' [ 553.358372][T15048] Cannot create hsr debugfs directory [ 553.373078][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 553.401329][ T75] tipc: Left network mode [ 553.448117][ T75] IPVS: stopping backup sync thread 7753 ... [ 553.450462][ T75] IPVS: stopping backup sync thread 7802 ... [ 553.960083][T14856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.975256][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 554.141255][T15330] loop3: detected capacity change from 0 to 512 [ 554.186884][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 554.699779][T15347] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 554.962659][ T75] hsr_slave_0: left promiscuous mode [ 554.969893][ T75] hsr_slave_1: left promiscuous mode [ 554.970914][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.988467][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.027477][ T75] hsr_slave_0: left promiscuous mode [ 555.028408][ T75] hsr_slave_1: left promiscuous mode [ 555.030994][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.036440][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.435662][ T75] team0 (unregistering): Port device team_slave_1 removed [ 555.477167][ T75] team0 (unregistering): Port device team_slave_0 removed [ 555.881385][T15376] loop3: detected capacity change from 0 to 512 [ 555.896299][T15376] EXT4-fs: Ignoring removed nobh option [ 555.984144][T15376] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #3: comm syz.3.2787: corrupted inode contents [ 555.984197][T15376] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 555.988916][T15376] EXT4-fs (loop3): Remounting filesystem read-only [ 555.992982][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 555.993012][ C0] EXT4-fs (loop3): initial error at time 1791033466: ext4_do_update_inode:5801: inode 3 [ 555.993064][ C0] EXT4-fs (loop3): last error at time 1791033466: ext4_do_update_inode:5801: inode 3 [ 556.061581][T15376] Quota error (device loop3): write_blk: dquota write failed [ 556.061739][T15376] Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota [ 556.062880][T15376] EXT4-fs (loop3): 1 truncate cleaned up [ 556.065475][T15376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.065597][T15376] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.637456][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.198085][ T75] team0 (unregistering): Port device team_slave_1 removed [ 557.255474][ T75] team0 (unregistering): Port device team_slave_0 removed [ 557.452530][T15412] loop3: detected capacity change from 0 to 512 [ 557.515584][T15412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.515712][T15412] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.626447][ T31] audit: type=1800 audit(1791033467.966:47): pid=15412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2794" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 557.911905][T15360] batman_adv: batadv0: Adding interface: gretap1 [ 557.913672][T15360] batman_adv: batadv0: The MTU of interface gretap1 is too small (1414) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.913726][T15360] batman_adv: batadv0: Interface activated: gretap1 [ 557.940446][T15412] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 557.961930][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 558.210925][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.403473][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 558.588725][T15441] netlink: 'syz.3.2799': attribute type 4 has an invalid length. [ 558.597098][T14990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.738755][T15048] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 558.769924][T15048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 558.775391][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 558.776046][T15048] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 558.797504][T15449] FAULT_INJECTION: forcing a failure. [ 558.797504][T15449] name fail_futex, interval 1, probability 0, space 0, times 1 [ 558.797550][T15449] CPU: 0 UID: 0 PID: 15449 Comm: syz.2.2801 Not tainted syzkaller #0 PREEMPT(full) [ 558.797594][T15449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 558.797617][T15449] Call Trace: [ 558.797629][T15449] [ 558.797643][T15449] dump_stack_lvl+0x100/0x190 [ 558.797702][T15449] should_fail_ex.cold+0x5/0xa [ 558.797753][T15449] get_futex_key+0x1d0/0x14f0 [ 558.797808][T15449] ? __pfx_get_futex_key+0x10/0x10 [ 558.797858][T15449] ? tomoyo_path_number_perm+0x28f/0x580 [ 558.797906][T15449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.797969][T15449] futex_wake+0xf4/0x5e0 [ 558.798027][T15449] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 558.798079][T15449] ? __pfx_futex_wake+0x10/0x10 [ 558.798145][T15449] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 558.798193][T15449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.798241][T15449] ? do_vfs_ioctl+0x226/0x13e0 [ 558.798308][T15449] do_futex+0x2b2/0x440 [ 558.798364][T15449] ? __pfx_do_futex+0x10/0x10 [ 558.798417][T15449] ? __fget_files+0x34/0x3d0 [ 558.798460][T15449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.798507][T15449] ? find_held_lock+0x2b/0x80 [ 558.798561][T15449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.798616][T15449] __x64_sys_futex+0x34f/0x4d0 [ 558.798673][T15449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.798720][T15449] ? __fget_files+0x21f/0x3d0 [ 558.798762][T15449] ? __pfx___x64_sys_futex+0x10/0x10 [ 558.798820][T15449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.798872][T15449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.798935][T15449] do_syscall_64+0x123/0x790 [ 558.798992][T15449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.799033][T15449] RIP: 0033:0x7f3fcf99e159 [ 558.799063][T15449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.799102][T15449] RSP: 002b:00007f3fcdbf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 558.799139][T15449] RAX: ffffffffffffffda RBX: 00007f3fcfc25fa8 RCX: 00007f3fcf99e159 [ 558.799165][T15449] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3fcfc25fac [ 558.799191][T15449] RBP: 00007f3fcfc25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 558.799216][T15449] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 558.799241][T15449] R13: 00007f3fcfc26038 R14: 00007fff9c687a40 R15: 00007fff9c687b28 [ 558.799292][T15449] [ 558.834837][T15048] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 558.883375][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 558.889969][T15048] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 558.983328][T15048] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 558.999904][T15048] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 559.037586][T15048] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 559.038932][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 559.105623][T14856] veth0_vlan: entered promiscuous mode [ 559.150991][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 559.238113][T14856] veth1_vlan: entered promiscuous mode [ 559.282052][T14990] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.363496][ T75] IPVS: stop unused estimator thread 0... [ 559.364159][ T75] IPVS: stop unused estimator thread 0... [ 559.448475][ T1407] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.448602][ T1407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.656539][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 559.672411][ T1407] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.672535][ T1407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.786522][T15476] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 559.933882][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 559.940756][T15480] syzkaller0: entered promiscuous mode [ 559.940788][T15480] syzkaller0: entered allmulticast mode [ 560.065112][T14856] veth0_macvtap: entered promiscuous mode [ 560.271905][T14856] veth1_macvtap: entered promiscuous mode [ 560.373250][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 560.536989][T14856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.586471][T14856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.634303][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.635145][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.635493][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.635837][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.685877][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 560.706601][T15048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.941233][T15048] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.989446][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.989576][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.098141][ T1426] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.098268][ T1426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.214305][ T1426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.214337][ T1426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.222875][ T1426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.233498][ T1426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.305688][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.305770][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.210889][T15539] syzkaller0: entered promiscuous mode [ 563.210930][T15539] syzkaller0: entered allmulticast mode [ 563.495164][T15118] net_ratelimit: 12 callbacks suppressed [ 563.495194][T15118] bond1: (slave macvlan3): failed to get link speed/duplex [ 563.994823][T15118] bond1: (slave macvlan3): failed to get link speed/duplex [ 564.211447][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 564.301112][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2821'. [ 564.327159][T14990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.334988][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 564.465357][T15118] bond1: (slave macvlan3): failed to get link speed/duplex [ 564.689312][T15577] team0: No ports can be present during mode change [ 564.765222][T15118] bond1: (slave macvlan3): failed to get link speed/duplex [ 564.874151][T15118] bond1: (slave macvlan3): failed to get link speed/duplex [ 564.984184][T15118] bond1: (slave macvlan3): failed to get link speed/duplex [ 565.098253][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 565.214725][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 565.276928][T14990] veth0_vlan: entered promiscuous mode [ 565.303738][T14990] veth1_vlan: entered promiscuous mode [ 566.209333][T14990] veth0_macvtap: entered promiscuous mode [ 566.278849][T14990] veth1_macvtap: entered promiscuous mode [ 566.430719][T14990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.526704][T14990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.604762][ T3299] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.607578][ T34] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.607644][ T34] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.607704][ T34] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.830936][T15612] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2834'. [ 567.323587][T15614] syzkaller0: entered promiscuous mode [ 567.323621][T15614] syzkaller0: entered allmulticast mode [ 567.673243][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.673292][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.107639][T15048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.312291][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2840'. [ 568.399418][ T3299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.399458][ T3299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.566549][ T12] net_ratelimit: 10 callbacks suppressed [ 568.566577][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 568.676910][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 568.787144][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 568.895626][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 569.004227][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 569.146131][T15048] veth0_vlan: entered promiscuous mode [ 569.181622][T15048] veth1_vlan: entered promiscuous mode [ 569.193967][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 569.351407][T15048] veth0_macvtap: entered promiscuous mode [ 569.421159][T15048] veth1_macvtap: entered promiscuous mode [ 569.473363][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 569.497410][T15048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.548501][T15048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.523828][ T149] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.523912][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 570.527592][ T1426] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.527661][ T1426] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.527723][ T1426] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.636594][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 570.788231][T15688] loop8: detected capacity change from 0 to 4096 [ 570.848845][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 570.924546][T15688] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.949471][ T31] audit: type=1800 audit(1791033481.286:48): pid=15688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2851" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 570.999631][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.999664][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.111008][ T31] audit: type=1804 audit(1791033481.446:49): pid=15688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2851" name=2F6E6577726F6F742F322F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop8" ino=15 res=1 errno=0 [ 571.131645][ T31] audit: type=1800 audit(1791033481.456:50): pid=15688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2851" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 571.155360][T15118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.155392][T15118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.368726][T14990] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.477739][T15707] SET target dimension over the limit! [ 571.898756][T15717] loop8: detected capacity change from 0 to 256 [ 572.079097][T15707] netlink: 'syz.3.2856': attribute type 2 has an invalid length. [ 572.760228][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 572.825311][T15745] loop7: detected capacity change from 0 to 1024 [ 572.844177][T15745] EXT4-fs: Ignoring removed i_version option [ 572.888084][T15745] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 572.888242][T15745] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 572.903398][T15745] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 572.903782][T15745] EXT4-fs (loop7): orphan cleanup on readonly fs [ 572.904027][T15745] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.2868: Freeing blocks not in datazone - block = 0, count = 4096 [ 572.904079][T15745] loop7: lost filesystem error report for type 5 error -117 [ 572.922954][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 572.922988][ C1] EXT4-fs (loop7): initial error at time 1791033483: ext4_free_blocks:6718 [ 572.923026][ C1] EXT4-fs (loop7): last error at time 1791033483: ext4_free_blocks:6718 [ 572.929577][T15745] EXT4-fs (loop7): Remounting filesystem read-only [ 572.929702][T15745] EXT4-fs (loop7): 1 orphan inode deleted [ 572.946995][T15745] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 573.130751][T15747] loop8: detected capacity change from 0 to 4096 [ 573.165516][ T31] audit: type=1326 audit(1791033483.506:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15748 comm="syz.3.2870" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862f79e159 code=0x7ffc0000 [ 573.172635][ T31] audit: type=1326 audit(1791033483.506:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15748 comm="syz.3.2870" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862f79e159 code=0x7ffc0000 [ 573.189032][ T31] audit: type=1326 audit(1791033483.506:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15748 comm="syz.3.2870" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862f79e159 code=0x7ffc0000 [ 573.189113][ T31] audit: type=1326 audit(1791033483.506:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15748 comm="syz.3.2870" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862f79e159 code=0x7ffc0000 [ 573.201768][ T31] audit: type=1326 audit(1791033483.536:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15748 comm="syz.3.2870" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f862f79e159 code=0x7ffc0000 [ 573.252115][ T31] audit: type=1326 audit(1791033483.586:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15748 comm="syz.3.2870" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f862f75e98e code=0x7ffc0000 [ 573.263722][ T31] audit: type=1326 audit(1791033483.586:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15748 comm="syz.3.2870" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f862f75e98e code=0x7ffc0000 [ 573.322332][T15756] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2872'. [ 573.381504][T15747] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.470992][T14856] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.654635][ T1407] net_ratelimit: 15 callbacks suppressed [ 573.654665][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 573.793782][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 573.800942][T14990] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.848255][T15762] loop9: detected capacity change from 0 to 128 [ 573.898771][T15768] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2875'. [ 573.910172][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 574.008763][T15770] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2876'. [ 574.015158][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 574.136728][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 574.245941][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 574.354566][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 574.499171][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 574.571971][T15777] ip_tables: iptables: counters copy to user failed while replacing table [ 574.619298][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 575.846455][T15813] loop3: detected capacity change from 0 to 512 [ 575.919981][T15813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.920112][T15813] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.000138][ T31] kauditd_printk_skb: 50 callbacks suppressed [ 576.000191][ T31] audit: type=1800 audit(1791033486.336:108): pid=15813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2890" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 576.201470][T15828] netlink: 964 bytes leftover after parsing attributes in process `syz.9.2892'. [ 576.455895][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.643350][ T5858] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 576.823021][ T5858] usb 3-1: Using ep0 maxpacket: 16 [ 576.825458][ T5858] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 576.844325][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 576.863185][ T5858] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.863252][ T5858] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.863299][ T5858] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.863340][ T5858] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 576.863389][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0 [ 576.863440][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.960761][ T5858] usb 3-1: config 0 descriptor?? [ 577.261383][T15849] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2897'. [ 578.207920][ T5858] logitech-djreceiver 0003:046D:C53A.0001: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 578.398369][ T5858] usb 3-1: USB disconnect, device number 6 [ 578.706060][T15871] loop3: detected capacity change from 0 to 512 [ 578.724502][T15118] net_ratelimit: 35 callbacks suppressed [ 578.724530][T15118] bond1: (slave macvlan3): failed to get link speed/duplex [ 578.732326][T15861] fido_id[15861]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 578.734369][T15871] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 578.843539][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 580.663612][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 580.815887][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 580.931311][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 581.033114][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 581.143108][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 581.259740][T15118] bond1: (slave macvlan3): failed to get link speed/duplex [ 581.363157][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 581.482720][T15118] bond1: (slave macvlan3): failed to get link speed/duplex [ 581.509527][T15906] : renamed from bond_slave_0 [ 582.512846][T15914] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2918'. [ 583.857158][ T34] net_ratelimit: 6 callbacks suppressed [ 583.857189][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 583.963817][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 584.075694][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 584.183355][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 584.305504][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 584.313242][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 584.670814][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2926'. [ 584.788867][T15959] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2926'. [ 585.747931][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 586.054606][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 586.163855][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 586.214563][T15978] loop8: detected capacity change from 0 to 128 [ 586.239197][T15978] vfat: Unknown parameter 'd' [ 586.274648][T15118] bond1: (slave macvlan3): failed to get link speed/duplex [ 588.048196][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 588.593604][T15984] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2934'. [ 589.470164][ T34] net_ratelimit: 5 callbacks suppressed [ 589.470197][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 589.582645][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 589.683866][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 589.812681][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 589.916030][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 590.024932][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 590.135055][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 590.275365][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 590.384665][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 590.494739][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 591.669350][T16026] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2948'. [ 592.017409][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2946'. [ 592.038971][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12 [ 592.067017][T16030] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2946'. [ 592.146716][T16033] loop9: detected capacity change from 0 to 512 [ 592.208244][ T5636] Bluetooth: hci0: connection err: -111 [ 592.209257][ T5636] Bluetooth: hci0: Unable to find connection for big 0x00 [ 592.295575][T16033] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 592.295729][T16033] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.382164][T16033] EXT4-fs (loop9): shut down requested (0) [ 592.680125][T16047] loop7: detected capacity change from 0 to 128 [ 592.765915][T16047] FAT-fs (loop7): data area starts beyond volume (33 > 0) [ 592.765953][T16047] FAT-fs (loop7): Can't find a valid FAT filesystem [ 593.864786][T15048] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 594.027663][T16049] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2953'. [ 594.554631][ T13] net_ratelimit: 25 callbacks suppressed [ 594.554663][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 594.667244][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 596.090362][T16073] loop3: detected capacity change from 0 to 512 [ 596.476858][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 596.597485][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 596.601694][T16073] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 596.621506][T16073] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.2960: corrupted inode contents [ 596.621544][T16073] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 596.623163][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 596.623194][ C0] EXT4-fs (loop3): initial error at time 1791033506: ext4_mb_generate_buddy:1314 [ 596.623233][ C0] EXT4-fs (loop3): last error at time 1791033506: ext4_mb_generate_buddy:1314 [ 596.678469][T16073] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #16: comm syz.3.2960: mark_inode_dirty error [ 596.678513][T16073] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 596.698042][T16073] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.2960: corrupted inode contents [ 596.698090][T16073] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 596.709862][T16073] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.2960: mark_inode_dirty error [ 596.709907][T16073] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 596.713668][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 596.719581][T16073] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.2960: corrupted inode contents [ 596.719617][T16073] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 596.731799][T16073] EXT4-fs error (device loop3) in ext4_orphan_del:304: Corrupt filesystem [ 596.731827][T16073] loop3: lost filesystem error report for type 5 error -117 [ 596.752723][T16073] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.2960: corrupted inode contents [ 596.752763][T16073] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 596.768357][T16073] EXT4-fs error (device loop3): ext4_truncate:4721: inode #16: comm syz.3.2960: mark_inode_dirty error [ 596.768400][T16073] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 596.775840][T16073] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem [ 596.775869][T16073] loop3: lost filesystem error report for type 5 error -117 [ 596.808311][T16073] EXT4-fs (loop3): 1 truncate cleaned up [ 596.810235][T16073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.810354][T16073] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.841505][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 596.850052][ T1407] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 596.850176][ T1407] EXT4-fs error (device loop3): ext4_release_dquot:7103: comm kworker/u8:9: Failed to release dquot type 1 [ 597.013627][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 597.133324][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 597.207383][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.258904][ T1407] bond1: (slave macvlan3): failed to get link speed/duplex [ 597.348869][T16082] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2962'. [ 597.503937][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 597.675046][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2965'. [ 597.694155][T16085] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2965'. [ 598.202040][T16095] loop9: detected capacity change from 0 to 512 [ 599.483094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 599.893144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 600.166289][ T3289] net_ratelimit: 6 callbacks suppressed [ 600.166313][ T3289] bond1: (slave macvlan3): failed to get link speed/duplex [ 600.221066][T16095] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 600.221210][T16095] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.275131][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 600.391792][T15118] bond1: (slave macvlan3): failed to get link speed/duplex [ 600.496182][T15118] bond1: (slave macvlan3): failed to get link speed/duplex [ 600.521607][T16095] EXT4-fs (loop9): shut down requested (0) [ 600.603205][T15118] bond1: (slave macvlan3): failed to get link speed/duplex [ 600.716598][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 600.824293][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 600.895874][ T5280] 8021q: adding VLAN 0 to HW filter on device eth13 [ 600.935804][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 601.043392][T15118] bond1: (slave macvlan3): failed to get link speed/duplex [ 601.268676][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 602.127566][T15048] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 602.363758][T16121] bridge0: port 3(erspan0) entered blocking state [ 602.364568][T16121] bridge0: port 3(erspan0) entered disabled state [ 602.365469][T16121] erspan0: entered allmulticast mode [ 602.380237][T16121] erspan0: entered promiscuous mode [ 602.384942][T16121] bridge0: port 3(erspan0) entered blocking state [ 602.385071][T16121] bridge0: port 3(erspan0) entered forwarding state [ 602.403432][T16121] erspan0: left allmulticast mode [ 602.403580][T16121] erspan0: left promiscuous mode [ 602.405015][T16121] bridge0: port 3(erspan0) entered disabled state [ 604.603043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 606.022407][ T3289] net_ratelimit: 3 callbacks suppressed [ 606.022437][ T3289] bond1: (slave macvlan3): failed to get link speed/duplex [ 606.128945][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 606.168224][T16135] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2970'. [ 606.254356][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 606.365697][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 606.393327][T16139] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2979'. [ 606.513914][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 606.626590][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 606.735449][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 606.904955][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 606.943387][T16151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2981'. [ 607.589519][T16163] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[16164] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[16163] [ 608.955106][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 609.089353][T15118] bond1: (slave macvlan3): failed to get link speed/duplex [ 609.698555][T16173] udevd[16173]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 610.871740][T16190] loop8: detected capacity change from 0 to 8 [ 611.111686][T16197] bridge0: port 4(erspan0) entered blocking state [ 611.112303][T16197] bridge0: port 4(erspan0) entered disabled state [ 611.113336][T16197] erspan0: entered allmulticast mode [ 611.126875][T16197] erspan0: entered promiscuous mode [ 611.143130][T16197] erspan0: left allmulticast mode [ 611.143196][T16197] erspan0: left promiscuous mode [ 611.144172][T16197] bridge0: port 4(erspan0) entered disabled state [ 612.023926][ T75] net_ratelimit: 12 callbacks suppressed [ 612.023957][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 612.141398][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 612.244863][T16198] bond1: (slave macvlan3): failed to get link speed/duplex [ 612.288606][T16201] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2993'. [ 612.363744][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 612.479869][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 612.677930][T16211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.694451][T16198] bond1: (slave macvlan3): failed to get link speed/duplex [ 612.792046][T16216] loop8: detected capacity change from 0 to 512 [ 612.807924][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 612.909494][T16216] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.909625][T16216] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.916251][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 613.029600][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 613.136260][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 613.377333][T14990] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.402363][T16231] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3000'. [ 613.535234][ T5280] 8021q: adding VLAN 0 to HW filter on device eth14 [ 613.757838][T16243] loop8: detected capacity change from 0 to 8 [ 614.843225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 615.750021][T16244] loop9: detected capacity change from 0 to 512 [ 615.839121][T16244] EXT4-fs (loop9): can't mount with journal_async_commit, fs mounted w/o journal [ 617.128009][T16199] net_ratelimit: 12 callbacks suppressed [ 617.128039][T16199] bond1: (slave macvlan3): failed to get link speed/duplex [ 617.318296][ T1014] bond1: (slave macvlan3): failed to get link speed/duplex [ 617.433550][T16198] bond1: (slave macvlan3): failed to get link speed/duplex [ 618.179587][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 618.832749][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 618.933263][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 619.053558][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 619.176253][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 619.343059][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 619.455144][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 619.909761][T16288] loop3: detected capacity change from 0 to 512 [ 619.959133][T16288] EXT4-fs (loop3): filesystem is read-only [ 619.959445][T16288] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 619.979152][T16288] EXT4-fs (loop3): failed to initialize system zone (-117) [ 619.979275][T16288] EXT4-fs (loop3): mount failed [ 622.045811][ T5280] 8021q: adding VLAN 0 to HW filter on device eth15 [ 622.090907][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3018'. [ 622.193390][T16198] net_ratelimit: 11 callbacks suppressed [ 622.193422][T16198] bond1: (slave macvlan3): failed to get link speed/duplex [ 622.344767][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 622.448175][T16315] loop3: detected capacity change from 0 to 512 [ 622.468790][T16199] bond1: (slave macvlan3): failed to get link speed/duplex [ 622.579900][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 622.766269][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 622.877549][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 623.067070][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 623.189701][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 623.303419][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 623.414323][T16199] bond1: (slave macvlan3): failed to get link speed/duplex [ 623.557847][T16322] input: syz0 as /devices/virtual/input/input5 [ 623.729586][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.729667][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.751162][T16329] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3025'. [ 624.265792][T16350] loop7: detected capacity change from 0 to 512 [ 625.083065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 626.224009][T16350] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.224146][T16350] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.358738][ T31] audit: type=1800 audit(1791033536.696:109): pid=16350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3032" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 626.540975][T16360] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 626.806484][T14856] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.848802][ T5280] 8021q: adding VLAN 0 to HW filter on device eth16 [ 627.235040][ T149] net_ratelimit: 18 callbacks suppressed [ 627.235080][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 627.277857][T16373] 9p: Bad value for 'wfdno' [ 627.346913][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 627.463692][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 627.675786][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 627.783812][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 627.904462][ T1014] bond1: (slave macvlan3): failed to get link speed/duplex [ 628.016813][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 628.053675][T16388] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3043'. [ 628.125359][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 628.265322][ T1014] bond1: (slave macvlan3): failed to get link speed/duplex [ 628.376676][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 630.203056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 631.594821][T16417] syzkaller0: entered promiscuous mode [ 631.594858][T16417] syzkaller0: entered allmulticast mode [ 631.608364][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3034'. [ 631.620200][T16412] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3034'. [ 631.954736][T16432] pimreg: entered allmulticast mode [ 631.971431][T16432] pimreg: left allmulticast mode [ 632.213849][T16438] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3059'. [ 632.304744][ T13] net_ratelimit: 13 callbacks suppressed [ 632.304773][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 632.378175][T16448] loop8: detected capacity change from 0 to 8 [ 632.417929][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 632.524980][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 632.634232][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 632.753405][T14329] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 632.754110][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 632.873883][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 632.925069][T14329] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 632.927253][T14329] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.927330][T14329] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 632.927396][T14329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.986712][T16198] bond1: (slave macvlan3): failed to get link speed/duplex [ 633.098686][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 633.129391][T14329] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 633.216704][T16198] bond1: (slave macvlan3): failed to get link speed/duplex [ 633.227710][T14329] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 633.330552][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 633.684598][ T1861] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 633.811483][T14329] usb 3-1: USB disconnect, device number 7 [ 633.838518][ T1861] usb 9-1: unable to get BOS descriptor or descriptor too short [ 633.838583][ T1861] usb 9-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 633.841412][ T1861] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.841449][ T1861] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 633.841507][ T1861] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 633.899738][ T1861] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 633.899784][ T1861] usb 9-1: Product: syz [ 633.899811][ T1861] usb 9-1: Manufacturer: syz [ 633.944324][ T1861] uvcvideo 9-1:1.0: Found Unit with invalid ID 0 [ 633.944565][ T1861] uvcvideo 9-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 633.944696][ T1861] uvcvideo 9-1:1.0: No streaming interface found for terminal 32770. [ 634.016612][T16484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3072'. [ 634.080010][T16484] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3072'. [ 634.169675][ T5858] usb 9-1: USB disconnect, device number 2 [ 634.178118][T16485] syzkaller0: entered promiscuous mode [ 634.178148][T16485] syzkaller0: entered allmulticast mode [ 634.719035][T16502] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3075'. [ 635.239122][T16512] loop8: detected capacity change from 0 to 2048 [ 635.328342][T16512] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 635.328376][T16512] UDF-fs: Scanning with blocksize 512 failed [ 635.430719][T16512] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 635.552386][T16525] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3082'. [ 635.577590][T16525] syzkaller1: entered promiscuous mode [ 635.577632][T16525] syzkaller1: entered allmulticast mode [ 638.143055][T16199] net_ratelimit: 17 callbacks suppressed [ 638.143086][T16199] bond1: (slave macvlan3): failed to get link speed/duplex [ 638.254200][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 638.319687][T16546] loop7: detected capacity change from 0 to 512 [ 638.363472][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 638.407532][T16544] loop3: detected capacity change from 0 to 512 [ 638.448514][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3087'. [ 638.449189][T16548] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3087'. [ 638.461214][T16546] syz.7.3088: attempt to access beyond end of device [ 638.461214][T16546] loop7: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 638.465499][T16546] syz.7.3088: attempt to access beyond end of device [ 638.465499][T16546] loop7: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 638.465811][ T31] audit: type=1800 audit(1791033548.806:110): pid=16546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3088" name="file2" dev="loop7" ino=1048649 res=0 errno=0 [ 638.496285][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 638.521237][T16544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.529318][T16544] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.564471][T16546] syz.7.3088: attempt to access beyond end of device [ 638.564471][T16546] loop7: rw=8388608, sector=17179852707, nr_sectors = 1 limit=512 [ 638.603543][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 638.639640][ T31] audit: type=1800 audit(1791033548.976:111): pid=16544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3086" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 638.716091][T16199] bond1: (slave macvlan3): failed to get link speed/duplex [ 638.856072][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 638.947264][T16544] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 638.964274][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 639.073169][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 639.121836][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.223971][T16566] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3092'. [ 639.257554][T16570] syzkaller0: entered promiscuous mode [ 639.257588][T16570] syzkaller0: entered allmulticast mode [ 639.445139][T16575] loop3: detected capacity change from 0 to 512 [ 639.495589][T16575] EXT4-fs (loop3): orphan cleanup on readonly fs [ 639.495623][T16575] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 639.505484][T16575] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 639.506649][T16575] EXT4-fs error (device loop3): ext4_clear_blocks:874: inode #13: comm syz.3.3096: attempt to clear invalid blocks 2 len 1 [ 639.506699][T16575] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 639.511544][T16575] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.3096: invalid indirect mapped block 1819239214 (level 0) [ 639.511598][T16575] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 639.512968][ C1] EXT4-fs (loop3): error count since last fsck: 3 [ 639.512996][ C1] EXT4-fs (loop3): initial error at time 1791033549: ext4_mb_generate_buddy:1314 [ 639.513034][ C1] EXT4-fs (loop3): last error at time 1791033549: ext4_free_branches:1020: inode 13 [ 639.514873][T16575] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.3096: invalid indirect mapped block 1819239214 (level 1) [ 639.514926][T16575] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 639.528122][T16575] EXT4-fs (loop3): 1 truncate cleaned up [ 639.539882][T16575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 639.598422][T16575] EXT4-fs (loop3): shut down requested (0) [ 639.864824][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.105500][T16588] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3101'. [ 640.120992][T16588] syzkaller1: entered promiscuous mode [ 640.121022][T16588] syzkaller1: entered allmulticast mode [ 640.852969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 641.514840][ T5636] Bluetooth: hci6: command 0x0406 tx timeout [ 643.727854][ T12] net_ratelimit: 9 callbacks suppressed [ 643.727884][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 643.922224][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 643.959503][ T983] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 644.024835][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 644.117686][ T983] usb 4-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice= 0.00 [ 644.119120][ T983] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.119159][ T983] usb 4-1: config 0 has no interfaces? [ 644.132156][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.132200][ T983] usb 4-1: Product: syz [ 644.132227][ T983] usb 4-1: Manufacturer: syz [ 644.132253][ T983] usb 4-1: SerialNumber: syz [ 644.137404][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 644.179642][ T983] usb 4-1: config 0 descriptor?? [ 644.244548][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 644.354133][T16199] bond1: (slave macvlan3): failed to get link speed/duplex [ 644.422161][T16605] usb 4-1: USB disconnect, device number 2 [ 644.464530][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 644.573172][T16199] bond1: (slave macvlan3): failed to get link speed/duplex [ 644.626623][T16627] loop9: detected capacity change from 0 to 2048 [ 644.683082][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 644.720440][T16627] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 644.794719][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 644.814859][T16627] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 645.560521][T16654] loop8: detected capacity change from 0 to 512 [ 645.620460][T16654] EXT4-fs error (device loop8): ext4_quota_enable:7255: comm syz.8.3123: Bad quota inum: 5, type: 0 [ 645.620512][T16654] loop8: lost filesystem error report for type 5 error -117 [ 645.622979][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 645.623010][ C0] EXT4-fs (loop8): initial error at time 1791033555: ext4_quota_enable:7255 [ 645.623049][ C0] EXT4-fs (loop8): last error at time 1791033555: ext4_quota_enable:7255 [ 645.681883][T16654] EXT4-fs (loop8): Remounting filesystem read-only [ 645.681912][T16654] EXT4-fs warning (device loop8): ext4_enable_quotas:7300: Failed to enable quota tracking (type=0, err=-117, ino=5). Please run e2fsck to fix. [ 645.682419][T16654] EXT4-fs (loop8): mount failed [ 645.725433][T16659] loop9: detected capacity change from 0 to 512 [ 645.806234][T16659] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.806357][T16659] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.991049][T15048] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.040066][T16666] loop7: detected capacity change from 0 to 512 [ 648.123057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 648.461848][T16654] loop8: detected capacity change from 0 to 16 [ 648.522492][T16654] erofs (device loop8): invalid ishare xattr prefix id 0 [ 648.774197][ T1426] net_ratelimit: 15 callbacks suppressed [ 648.774226][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 648.888438][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 648.923603][T16685] sock: sock_set_timeout: `syz.8.3133' (pid 16685) tries to set negative timeout [ 648.994145][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 649.108584][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 649.167627][T16692] loop7: detected capacity change from 0 to 512 [ 649.216112][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 649.268237][T16692] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.268403][T16692] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 649.329176][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 649.348956][ T31] audit: type=1800 audit(1791033559.686:112): pid=16692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3131" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 649.436939][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 649.515648][T16709] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 649.549363][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 649.819995][T14856] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.093829][T16725] loop8: detected capacity change from 0 to 2048 [ 650.133784][T16725] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 650.543481][ T983] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 650.689368][T16735] loop7: detected capacity change from 0 to 512 [ 650.702670][ T983] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 650.703431][ T983] usb 9-1: config 0 has no interfaces? [ 650.712526][ T983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.712568][ T983] usb 9-1: Product: syz [ 650.712596][ T983] usb 9-1: Manufacturer: syz [ 650.712625][ T983] usb 9-1: SerialNumber: syz [ 650.726341][ T983] usb 9-1: config 0 descriptor?? [ 651.089707][T16744] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3146'. [ 651.412396][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 651.572763][ T52] Bluetooth: hci2: unexpected event for opcode 0x203b [ 651.631200][ T983] usb 9-1: USB disconnect, device number 3 [ 652.801774][T16815] loop7: detected capacity change from 0 to 1024 [ 652.807820][T16815] EXT4-fs: Ignoring removed bh option [ 652.861788][T16815] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 652.861948][T16815] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.944278][T16815] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 3: comm syz.7.3164: lblock 3 mapped to illegal pblock 3 (length 3) [ 652.949010][T16815] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 652.949060][T16815] EXT4-fs (loop7): This should not happen!! Data will be lost [ 652.949060][T16815] [ 652.974275][T16815] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: block 3: comm syz.7.3164: lblock 3 mapped to illegal pblock 3 (length 1) [ 652.991690][T16815] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: block 3: comm syz.7.3164: lblock 3 mapped to illegal pblock 3 (length 1) [ 652.996379][T16815] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: block 3: comm syz.7.3164: lblock 3 mapped to illegal pblock 3 (length 1) [ 653.000462][T16815] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: block 3: comm syz.7.3164: lblock 3 mapped to illegal pblock 3 (length 1) [ 653.001216][T16815] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: block 3: comm syz.7.3164: lblock 3 mapped to illegal pblock 3 (length 1) [ 653.015678][T16815] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: block 3: comm syz.7.3164: lblock 3 mapped to illegal pblock 3 (length 1) [ 653.021304][T16815] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: block 3: comm syz.7.3164: lblock 3 mapped to illegal pblock 3 (length 1) [ 653.046104][T16815] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: block 3: comm syz.7.3164: lblock 3 mapped to illegal pblock 3 (length 1) [ 653.046813][T16815] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: block 3: comm syz.7.3164: lblock 3 mapped to illegal pblock 3 (length 1) [ 653.717028][T14856] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 653.720311][T16836] syzkaller0: entered promiscuous mode [ 653.720343][T16836] syzkaller0: entered allmulticast mode [ 653.784220][ T3299] net_ratelimit: 36 callbacks suppressed [ 653.784250][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 654.014217][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 654.128869][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 654.233537][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 654.428750][T16199] bond1: (slave macvlan3): failed to get link speed/duplex [ 654.882137][ T31] audit: type=1800 audit(1791033565.156:113): pid=16874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3180" name=08 dev="sda1" ino=2061 res=0 errno=0 [ 655.119172][ T1014] bond1: (slave macvlan3): failed to get link speed/duplex [ 655.232439][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 655.326896][ T5635] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 655.327117][ T5635] Bluetooth: hci3: Injecting HCI hardware error event [ 655.357223][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 655.395721][T16868] loop7: detected capacity change from 0 to 1024 [ 655.466389][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 655.583618][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 655.916069][T16889] loop9: detected capacity change from 0 to 512 [ 656.098538][T16893] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3188'. [ 656.174961][T16896] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3190'. [ 656.716040][ T52] Bluetooth: hci3: hardware error 0x00 [ 657.910991][T16916] syzkaller0: entered promiscuous mode [ 657.911025][T16916] syzkaller0: entered allmulticast mode [ 658.181155][T16932] loop8: detected capacity change from 0 to 512 [ 658.289543][T16932] syz.8.3201: attempt to access beyond end of device [ 658.289543][T16932] loop8: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 658.302812][T16932] syz.8.3201: attempt to access beyond end of device [ 658.302812][T16932] loop8: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 658.303673][ T31] audit: type=1800 audit(1791033568.646:114): pid=16932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3201" name="file2" dev="loop8" ino=1048650 res=0 errno=0 [ 659.864432][ T52] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 659.905622][ T1426] net_ratelimit: 15 callbacks suppressed [ 659.905650][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 660.160346][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 660.308815][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 660.478185][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 660.521665][T16957] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3206'. [ 660.597236][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 660.703956][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 660.770628][T16979] loop8: detected capacity change from 0 to 256 [ 660.825210][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 660.873423][T16979] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 660.934217][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 661.044391][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 661.154146][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 661.441965][T16973] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 663.050975][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 663.742667][ T31] audit: type=1326 audit(1791033574.076:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.9.3225" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d58f9e159 code=0x7ffc0000 [ 663.742754][ T31] audit: type=1326 audit(1791033574.076:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.9.3225" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d58f9e159 code=0x7ffc0000 [ 663.821979][ T31] audit: type=1326 audit(1791033574.156:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.9.3225" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d58f9e159 code=0x7ffc0000 [ 663.825033][ T31] audit: type=1326 audit(1791033574.156:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.9.3225" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d58f9e159 code=0x7ffc0000 [ 663.825115][ T31] audit: type=1326 audit(1791033574.156:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.9.3225" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d58f9e159 code=0x7ffc0000 [ 663.825189][ T31] audit: type=1326 audit(1791033574.156:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.9.3225" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d58f9e159 code=0x7ffc0000 [ 663.825266][ T31] audit: type=1326 audit(1791033574.166:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.9.3225" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d58f9e159 code=0x7ffc0000 [ 663.825339][ T31] audit: type=1326 audit(1791033574.166:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.9.3225" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d58f9e159 code=0x7ffc0000 [ 663.831215][ T31] audit: type=1326 audit(1791033574.166:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.9.3225" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8d58f9e159 code=0x7ffc0000 [ 663.831294][ T31] audit: type=1326 audit(1791033574.166:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.9.3225" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d58f9e159 code=0x7ffc0000 [ 664.539580][T17042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3229'. [ 664.591020][T17043] loop9: detected capacity change from 0 to 512 [ 664.664768][T17043] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.664897][T17043] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 664.920432][T15048] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.934326][ T34] net_ratelimit: 8 callbacks suppressed [ 664.934351][ T34] bond1: (slave macvlan3): failed to get link speed/duplex [ 665.144091][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 665.253140][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 665.369194][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 665.475910][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 665.483441][ T52] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 665.552727][T17073] loop7: detected capacity change from 0 to 512 [ 665.583120][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 665.677037][T17073] syz.7.3235: attempt to access beyond end of device [ 665.677037][T17073] loop7: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 665.721880][T17073] syz.7.3235: attempt to access beyond end of device [ 665.721880][T17073] loop7: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 665.883158][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 665.931915][T17085] loop8: detected capacity change from 0 to 512 [ 665.974746][T17085] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 666.006720][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 666.099075][T17085] EXT4-fs error (device loop8): ext4_iget_extra_inode:5209: inode #15: comm syz.8.3240: corrupted in-inode xattr: e_value size too large [ 666.099920][T17085] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 666.102968][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 666.103000][ C1] EXT4-fs (loop8): initial error at time 1791033576: ext4_iget_extra_inode:5209: inode 15 [ 666.103051][ C1] EXT4-fs (loop8): last error at time 1791033576: ext4_iget_extra_inode:5209: inode 15 [ 666.144647][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 666.268662][T16199] bond1: (slave macvlan3): failed to get link speed/duplex [ 666.385874][T17085] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.3240: couldn't read orphan inode 15 (err -117) [ 666.386833][T17085] loop8: lost filesystem error report for type 5 error -117 [ 666.511182][T17085] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.885269][T14990] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.093092][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3246'. [ 667.210556][T17109] loop8: detected capacity change from 0 to 512 [ 667.561127][T17109] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.565738][T17109] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 667.773180][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 669.013025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 669.612241][T14990] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.634920][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 669.636285][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 669.636322][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 669.641716][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.641751][ T9] usb 3-1: Product: syz [ 669.641775][ T9] usb 3-1: Manufacturer: syz [ 669.641800][ T9] usb 3-1: SerialNumber: syz [ 670.013113][ T12] net_ratelimit: 16 callbacks suppressed [ 670.013145][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 670.107293][ T9] usb 3-1: unit 4 not found! [ 670.123930][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 670.234828][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 670.293067][ T983] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 670.344009][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 670.438975][ T9] usb 3-1: USB disconnect, device number 8 [ 670.452743][ T983] usb 8-1: not running at top speed; connect to a high speed hub [ 670.452790][ T983] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 670.458091][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 670.488174][ T983] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.488221][ T983] usb 8-1: Product: syz [ 670.488248][ T983] usb 8-1: Manufacturer: syz [ 670.488276][ T983] usb 8-1: SerialNumber: syz [ 670.562344][ T983] keyspan 8-1:1.0: Keyspan 4 port adapter converter detected [ 670.563593][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 670.678365][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 670.694322][ T983] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 670.713710][ T983] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 670.737724][ T983] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 670.769174][ C1] usb 8-1: malformed indat packet [ 670.783140][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 670.802669][ T983] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 670.832064][T17137] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 670.905970][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 670.975836][ T983] usb 8-1: USB disconnect, device number 2 [ 671.014494][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 671.034209][ T983] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 671.090512][ T983] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 671.118113][ T983] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 671.148515][ T983] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 671.151814][ T983] keyspan 8-1:1.0: device disconnected [ 671.175275][T17157] udevd[17157]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 671.338031][T17158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'. [ 675.534207][ T12] net_ratelimit: 14 callbacks suppressed [ 675.534237][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 675.643717][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 675.756020][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 675.779872][T17194] FAULT_INJECTION: forcing a failure. [ 675.779872][T17194] name failslab, interval 1, probability 0, space 0, times 0 [ 675.779926][T17194] CPU: 0 UID: 0 PID: 17194 Comm: syz.8.3269 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.779979][T17194] Tainted: [L]=SOFTLOCKUP [ 675.779993][T17194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 675.780019][T17194] Call Trace: [ 675.780032][T17194] [ 675.780045][T17194] dump_stack_lvl+0x100/0x190 [ 675.780106][T17194] should_fail_ex.cold+0x5/0xa [ 675.780149][T17194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.780202][T17194] should_failslab+0xc2/0x120 [ 675.780256][T17194] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 675.780326][T17194] ? key_alloc+0x423/0x1310 [ 675.780376][T17194] kmemdup_noprof+0x29/0x60 [ 675.780433][T17194] key_alloc+0x423/0x1310 [ 675.780490][T17194] ? __pfx_key_alloc+0x10/0x10 [ 675.780531][T17194] ? __pfx_sprintf+0x10/0x10 [ 675.780577][T17194] ? _get_random_bytes+0xa8/0x220 [ 675.780636][T17194] keyring_alloc+0x44/0xc0 [ 675.780689][T17194] call_sbin_request_key+0x380/0xd90 [ 675.780742][T17194] ? __pfx_call_sbin_request_key+0x10/0x10 [ 675.780781][T17194] ? key_instantiate_and_link+0x39d/0x4b0 [ 675.780824][T17194] ? key_alloc+0xbb4/0x1310 [ 675.780866][T17194] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 675.780940][T17194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.780987][T17194] ? request_key_auth_new+0x732/0xb50 [ 675.781037][T17194] ? __pfx_request_key_auth_new+0x10/0x10 [ 675.781085][T17194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.781139][T17194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.781189][T17194] ? __pfx_call_sbin_request_key+0x10/0x10 [ 675.781240][T17194] request_key_and_link+0x1115/0x1330 [ 675.781289][T17194] ? __pfx_request_key_and_link+0x10/0x10 [ 675.781327][T17194] ? __pfx___might_resched+0x10/0x10 [ 675.781391][T17194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.781446][T17194] ? __pfx_key_default_cmp+0x10/0x10 [ 675.781497][T17194] ? __pfx_keyring_search_iterator+0x10/0x10 [ 675.781551][T17194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.781598][T17194] ? _copy_from_user+0x59/0xd0 [ 675.781665][T17194] __do_sys_request_key+0x2a2/0x3c0 [ 675.781725][T17194] ? __pfx___do_sys_request_key+0x10/0x10 [ 675.781791][T17194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.781848][T17194] do_syscall_64+0x123/0x790 [ 675.781903][T17194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.781944][T17194] RIP: 0033:0x7fadba79e159 [ 675.781975][T17194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.782014][T17194] RSP: 002b:00007fadbb6fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 675.782052][T17194] RAX: ffffffffffffffda RBX: 00007fadbaa25fa0 RCX: 00007fadba79e159 [ 675.782078][T17194] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 675.782105][T17194] RBP: 00007fadba83506b R08: 0000000000000000 R09: 0000000000000000 [ 675.782129][T17194] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 675.782154][T17194] R13: 00007fadbaa26038 R14: 00007fadbaa25fa0 R15: 00007ffcf1ef9c68 [ 675.782206][T17194] [ 675.872555][ T1014] bond1: (slave macvlan3): failed to get link speed/duplex [ 675.976371][ T1014] bond1: (slave macvlan3): failed to get link speed/duplex [ 676.089238][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 676.201567][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 676.305727][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 676.414710][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 676.523097][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 676.914184][T17216] loop9: detected capacity change from 0 to 512 [ 676.931240][T17216] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 677.042321][T17204] udevd[17204]: incorrect ext4 checksum on /dev/loop9 [ 677.151937][T17219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3278'. [ 678.843017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 679.127058][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 679.127080][ T31] audit: type=1400 audit(1791033588.236:134): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=17225 comm="syz.8.3275" [ 680.981442][T17237] loop9: detected capacity change from 0 to 512 [ 681.003132][ T13] net_ratelimit: 10 callbacks suppressed [ 681.003160][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 681.078599][T17233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3280'. [ 681.134512][T16198] bond1: (slave macvlan3): failed to get link speed/duplex [ 681.151090][T17237] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 681.151216][T17237] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.245259][T16199] bond1: (slave macvlan3): failed to get link speed/duplex [ 681.354496][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 681.463066][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 681.573478][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 681.703502][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 681.747637][T15048] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 681.815337][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 681.924681][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 682.043414][T16198] bond1: (slave macvlan3): failed to get link speed/duplex [ 682.430643][T17265] udevd[17265]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 684.655376][T17279] netlink: 964 bytes leftover after parsing attributes in process `syz.9.3291'. [ 685.173374][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.173454][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.364859][ T1014] net_ratelimit: 15 callbacks suppressed [ 687.364889][ T1014] bond1: (slave macvlan3): failed to get link speed/duplex [ 687.596413][T17305] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3298'. [ 687.603719][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 687.653800][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3297'. [ 687.717892][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 687.774206][T17308] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3299'. [ 687.888949][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 688.007435][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 688.118148][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 688.247937][ T1014] bond1: (slave macvlan3): failed to get link speed/duplex [ 688.393053][ T1014] bond1: (slave macvlan3): failed to get link speed/duplex [ 688.506741][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 688.617853][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 690.519886][T17326] loop9: detected capacity change from 0 to 512 [ 690.625462][T17328] udevd[17328]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 690.646466][T17326] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.646622][T17326] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 690.761982][ T31] audit: type=1800 audit(1791033601.096:135): pid=17326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3304" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 690.893855][T17326] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 691.149344][T15048] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.475708][T16199] net_ratelimit: 19 callbacks suppressed [ 692.475740][T16199] bond1: (slave macvlan3): failed to get link speed/duplex [ 692.585346][T16199] bond1: (slave macvlan3): failed to get link speed/duplex [ 692.724600][T17367] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3292'. [ 692.781142][T17371] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3314'. [ 693.292168][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 693.349201][T17379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3316'. [ 693.463587][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 693.573136][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 693.605931][T17384] loop9: detected capacity change from 0 to 512 [ 693.684196][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 693.686297][T17384] syz.9.3318: attempt to access beyond end of device [ 693.686297][T17384] loop9: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 693.689617][T17384] syz.9.3318: attempt to access beyond end of device [ 693.689617][T17384] loop9: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 693.716999][ T31] audit: type=1800 audit(1791033604.056:136): pid=17384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3318" name="file2" dev="loop9" ino=1048653 res=0 errno=0 [ 693.793619][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 693.904176][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 694.014190][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 694.139926][T17328] udevd[17328]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 694.235770][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 694.379394][ T52] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 694.499863][T17411] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3324'. [ 694.924101][T17417] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[15048] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[17417] [ 696.439345][T17444] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3332'. [ 696.485064][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3333'. [ 698.556896][T16198] net_ratelimit: 17 callbacks suppressed [ 698.556926][T16198] bond1: (slave macvlan3): failed to get link speed/duplex [ 698.750230][T16198] bond1: (slave macvlan3): failed to get link speed/duplex [ 698.855900][T16198] bond1: (slave macvlan3): failed to get link speed/duplex [ 698.964971][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 699.074712][T16198] bond1: (slave macvlan3): failed to get link speed/duplex [ 699.184058][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 699.295489][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 699.406733][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 699.514374][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 699.633892][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 701.979492][T17488] loop9: detected capacity change from 0 to 2048 [ 702.041858][T17488] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 702.057793][T17494] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3352'. [ 702.317863][T17498] loop8: detected capacity change from 0 to 256 [ 702.428547][ T5858] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 702.450536][T17498] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 702.613806][ T5858] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 702.617819][ T5858] usb 10-1: config 0 has no interfaces? [ 702.620438][ T5858] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.620478][ T5858] usb 10-1: Product: syz [ 702.620504][ T5858] usb 10-1: Manufacturer: syz [ 702.620532][ T5858] usb 10-1: SerialNumber: syz [ 702.662794][ T5858] usb 10-1: config 0 descriptor?? [ 702.707755][T17503] loop7: detected capacity change from 0 to 2048 [ 702.760261][T17503] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 702.789955][T17503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 703.794172][ T13] net_ratelimit: 12 callbacks suppressed [ 703.794205][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 703.796093][T17513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3356'. [ 703.904605][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 704.025756][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 704.143904][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 704.253166][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 704.338988][ T30] usb 10-1: USB disconnect, device number 2 [ 704.364146][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 704.493270][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 704.549610][T17523] loop8: detected capacity change from 0 to 2048 [ 704.604717][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 704.608296][T17523] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 704.715201][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 704.828407][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 705.351403][T17496] udevd[17496]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 705.490418][T14990] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.820542][T17548] loop8: detected capacity change from 0 to 1024 [ 706.056866][T17557] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3368'. [ 708.853233][ T13] net_ratelimit: 11 callbacks suppressed [ 708.853262][ T13] bond1: (slave macvlan3): failed to get link speed/duplex [ 708.964889][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 709.075916][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 709.264803][ T75] bond1: (slave macvlan3): failed to get link speed/duplex [ 709.303093][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3371'. [ 709.376157][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 709.484875][ T12] bond1: (slave macvlan3): failed to get link speed/duplex [ 709.503486][ T983] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 709.596427][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 709.657768][ T983] usb 8-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice= 0.00 [ 709.662454][ T983] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 709.687792][ T983] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.687843][ T983] usb 8-1: Product: syz [ 709.687871][ T983] usb 8-1: Manufacturer: syz [ 709.687898][ T983] usb 8-1: SerialNumber: syz [ 709.713902][ T3299] bond1: (slave macvlan3): failed to get link speed/duplex [ 710.175097][T17325] udevd[17325]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 710.288224][ T983] asix 8-1:1.0: probe with driver asix failed with error -71 [ 710.437295][ T983] usb 8-1: USB disconnect, device number 3 [ 710.913193][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 710.950734][T17618] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 711.419393][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 711.427287][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 711.432113][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 711.433342][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 711.439231][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 712.547242][T17649] file system registered [ 712.570044][T17649] [ 712.570684][T17650] loop9: detected capacity change from 0 to 512 [ 712.578715][T17649] ====================================================== [ 712.585747][T17649] WARNING: possible circular locking dependency detected [ 712.588663][T17650] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3388'. [ 712.597204][T17644] batman_adv: batadv0: Adding interface: syzkaller0 [ 712.597229][T17644] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.597278][T17644] batman_adv: batadv0: Interface activated: syzkaller0 [ 712.640554][T17649] syzkaller #0 Tainted: G L [ 712.646532][T17649] ------------------------------------------------------ [ 712.653545][T17649] syz.2.3389/17649 is trying to acquire lock: [ 712.659609][T17649] ffffffff90401d08 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 712.669414][T17649] [ 712.669414][T17649] but task is already holding lock: [ 712.676770][T17649] ffff888051f60ac0 (&sb->s_type->i_mutex_key#28){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 712.686495][T17649] [ 712.686495][T17649] which lock already depends on the new lock. [ 712.686495][T17649] [ 712.696889][T17649] [ 712.696889][T17649] the existing dependency chain (in reverse order) is: [ 712.705925][T17649] [ 712.705925][T17649] -> #3 (&sb->s_type->i_mutex_key#28){++++}-{4:4}: [ 712.714659][T17649] lock_acquire+0x1d1/0x380 [ 712.719699][T17649] down_write+0x8b/0x1f0 [ 712.724492][T17649] configfs_depend_item_unlocked+0xf3/0x6a0 [ 712.730944][T17649] usbg_make_tpg+0x251/0x610 [ 712.736094][T17649] target_fabric_make_tpg+0xab/0x8c0 [ 712.741919][T17649] configfs_mkdir+0x525/0xd40 [ 712.747125][T17649] vfs_mkdir+0x364/0x850 [ 712.751918][T17649] filename_mkdirat+0x48b/0x5e0 [ 712.757302][T17649] __x64_sys_mkdirat+0x89/0xc0 [ 712.762606][T17649] do_syscall_64+0x123/0x790 [ 712.767736][T17649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.774172][T17649] [ 712.774172][T17649] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 712.782100][T17649] lock_acquire+0x1d1/0x380 [ 712.787221][T17649] __mutex_lock+0x1a4/0x1bd0 [ 712.792354][T17649] tcm_alloc_inst+0x5f/0x1e0 [ 712.797474][T17649] try_get_usb_function_instance+0x136/0x1f0 [ 712.804000][T17649] usb_get_function_instance+0x16/0x70 [ 712.810026][T17649] function_make+0x18c/0x3f0 [ 712.815148][T17649] configfs_mkdir+0x525/0xd40 [ 712.820355][T17649] vfs_mkdir+0x364/0x850 [ 712.825139][T17649] filename_mkdirat+0x48b/0x5e0 [ 712.830533][T17649] __x64_sys_mkdirat+0x89/0xc0 [ 712.835829][T17649] do_syscall_64+0x123/0x790 [ 712.840959][T17649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.847386][T17649] [ 712.847386][T17649] -> #1 (func_lock){+.+.}-{4:4}: [ 712.854535][T17649] lock_acquire+0x1d1/0x380 [ 712.859573][T17649] __mutex_lock+0x1a4/0x1bd0 [ 712.864704][T17649] try_get_usb_function_instance+0x26/0x1f0 [ 712.871140][T17649] usb_get_function_instance+0x16/0x70 [ 712.877139][T17649] function_make+0x18c/0x3f0 [ 712.882261][T17649] configfs_mkdir+0x525/0xd40 [ 712.887468][T17649] vfs_mkdir+0x364/0x850 [ 712.892254][T17649] filename_mkdirat+0x48b/0x5e0 [ 712.897732][T17649] __x64_sys_mkdirat+0x89/0xc0 [ 712.903032][T17649] do_syscall_64+0x123/0x790 [ 712.908161][T17649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.914759][T17649] [ 712.914759][T17649] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 712.923039][T17649] check_prev_add+0xeb/0xe60 [ 712.928161][T17649] __lock_acquire+0x1528/0x1f40 [ 712.933543][T17649] lock_acquire+0x1d1/0x380 [ 712.938578][T17649] __mutex_lock+0x1a4/0x1bd0 [ 712.943711][T17649] configfs_rmdir+0x5ae/0x950 [ 712.948939][T17649] vfs_rmdir+0x328/0x8a0 [ 712.953756][T17649] filename_rmdir+0x31a/0x5c0 [ 712.958979][T17649] __x64_sys_rmdir+0x46/0x70 [ 712.964142][T17649] do_syscall_64+0x123/0x790 [ 712.969300][T17649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.975751][T17649] [ 712.975751][T17649] other info that might help us debug this: [ 712.975751][T17649] [ 712.986145][T17649] Chain exists of: [ 712.986145][T17649] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#28 [ 712.986145][T17649] [ 713.001249][T17649] Possible unsafe locking scenario: [ 713.001249][T17649] [ 713.008691][T17649] CPU0 CPU1 [ 713.014048][T17649] ---- ---- [ 713.019405][T17649] lock(&sb->s_type->i_mutex_key#28); [ 713.024881][T17649] lock(tpg_instances_lock); [ 713.032084][T17649] lock(&sb->s_type->i_mutex_key#28); [ 713.040080][T17649] lock(gadget_subsys.su_mutex); [ 713.045113][T17649] [ 713.045113][T17649] *** DEADLOCK *** [ 713.045113][T17649] [ 713.053277][T17649] locks held by syz.2.3389/17649: 3, last CPU#0: [ 713.059608][T17649] #0: ffff88801e3c2460 (sb_writers#18){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 713.069076][T17649] #1: ffff888051e8ac00 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 713.080551][T17649] #2: ffff888051f60ac0 (&sb->s_type->i_mutex_key#28){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 713.090725][T17649] [ 713.090725][T17649] stack backtrace: [ 713.096614][T17649] CPU: 0 UID: 0 PID: 17649 Comm: syz.2.3389 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.107571][T17649] Tainted: [L]=SOFTLOCKUP [ 713.111975][T17649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 713.122029][T17649] Call Trace: [ 713.125311][T17649] [ 713.128242][T17649] dump_stack_lvl+0x100/0x190 [ 713.132953][T17649] print_circular_bug.cold+0x178/0x1be [ 713.138451][T17649] check_noncircular+0x146/0x160 [ 713.143397][T17649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.149058][T17649] check_prev_add+0xeb/0xe60 [ 713.153659][T17649] ? __bfs+0x150/0x2a0 [ 713.157758][T17649] __lock_acquire+0x1528/0x1f40 [ 713.162632][T17649] lock_acquire+0x1d1/0x380 [ 713.167152][T17649] ? configfs_rmdir+0x5ae/0x950 [ 713.172042][T17649] ? __pfx___might_resched+0x10/0x10 [ 713.177364][T17649] ? __lock_acquire+0x5c0/0x1f40 [ 713.182324][T17649] __mutex_lock+0x1a4/0x1bd0 [ 713.186935][T17649] ? configfs_rmdir+0x5ae/0x950 [ 713.191822][T17649] ? configfs_rmdir+0x5ae/0x950 [ 713.196704][T17649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.202356][T17649] ? reacquire_held_locks+0xdd/0x1f0 [ 713.207663][T17649] ? __pfx___mutex_lock+0x10/0x10 [ 713.212714][T17649] ? do_raw_spin_lock+0x128/0x260 [ 713.217758][T17649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.223496][T17649] ? find_held_lock+0x2b/0x80 [ 713.228202][T17649] ? fast_dput+0x2fe/0x6f0 [ 713.232641][T17649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.238293][T17649] ? do_raw_spin_unlock+0x145/0x1e0 [ 713.243526][T17649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.249179][T17649] ? _raw_spin_unlock+0x28/0x50 [ 713.254046][T17649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.259700][T17649] ? fast_dput+0x168/0x6f0 [ 713.264149][T17649] ? configfs_rmdir+0x5ae/0x950 [ 713.269032][T17649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.274680][T17649] configfs_rmdir+0x5ae/0x950 [ 713.279398][T17649] ? __pfx_configfs_rmdir+0x10/0x10 [ 713.284654][T17649] ? __pfx_down_write+0x10/0x10 [ 713.289532][T17649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.295204][T17649] vfs_rmdir+0x328/0x8a0 [ 713.299480][T17649] filename_rmdir+0x31a/0x5c0 [ 713.304177][T17649] ? __pfx_filename_rmdir+0x10/0x10 [ 713.309401][T17649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.315051][T17649] ? do_getname+0x191/0x390 [ 713.319579][T17649] __x64_sys_rmdir+0x46/0x70 [ 713.324189][T17649] do_syscall_64+0x123/0x790 [ 713.328802][T17649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.334713][T17649] RIP: 0033:0x7f3fcf99e159 [ 713.339134][T17649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.358765][T17649] RSP: 002b:00007f3fcdbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 713.367196][T17649] RAX: ffffffffffffffda RBX: 00007f3fcfc25fa0 RCX: 00007f3fcf99e159 [ 713.375263][T17649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 713.383245][T17649] RBP: 00007f3fcfa3506b R08: 0000000000000000 R09: 0000000000000000 [ 713.391218][T17649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.399192][T17649] R13: 00007f3fcfc26038 R14: 00007f3fcfc25fa0 R15: 00007fff9c687b28 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 713.407392][T17649] [ 713.490159][ T52] Bluetooth: hci1: command tx timeout [ 713.501749][T17649] unloading [ 713.579935][ T5626] syz_tun (unregistering): left allmulticast mode [ 713.579985][ T5626] syz_tun (unregistering): left promiscuous mode [ 713.580050][ T5626] bridge0: port 3(syz_tun) entered disabled state [ 713.689077][T17641] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 713.715544][T17641] batman_adv: batadv0: Removing interface: syzkaller0 [ 713.948187][T17645] ffs_data_put(): freeing [ 714.429700][T17652] syz_tun (unregistering): left allmulticast mode [ 714.429737][T17652] syz_tun (unregistering): left promiscuous mode [ 714.429801][T17652] bridge0: port 3(syz_tun) entered disabled state [ 714.579415][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.600490][T17645] syz_tun (unregistering): left allmulticast mode [ 714.600574][T17645] syz_tun (unregistering): left promiscuous mode [ 714.600644][T17645] bridge0: port 3(syz_tun) entered disabled state [ 714.635670][ T149] net_ratelimit: 14 callbacks suppressed [ 714.635698][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 714.659378][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.818439][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.833456][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 714.902547][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.943184][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 715.036184][ T13] bridge_slave_1: left allmulticast mode [ 715.036220][ T13] bridge_slave_1: left promiscuous mode [ 715.036386][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.037873][ T13] bridge_slave_0: left allmulticast mode [ 715.037903][ T13] bridge_slave_0: left promiscuous mode [ 715.038069][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.048343][ T13] batman_adv: batadv0: Interface deactivated: gretap1 [ 715.141499][ T13] batman_adv: batadv0: Removing interface: gretap1 [ 715.202350][ T13] bond0 (unregistering): (slave 30): Releasing backup interface [ 715.211993][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.212661][ T13] bond0 (unregistering): Released all slaves [ 715.243310][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 715.353106][T16199] bond1: (slave macvlan3): failed to get link speed/duplex [ 715.463112][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 715.573496][T16199] bond1: (slave macvlan3): failed to get link speed/duplex [ 715.684763][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 715.803283][ T149] bond1: (slave macvlan3): failed to get link speed/duplex [ 715.913706][ T1426] bond1: (slave macvlan3): failed to get link speed/duplex [ 715.958692][ T13] tipc: Left network mode [ 716.098713][ T13] hsr_slave_0: left promiscuous mode [ 716.099244][ T13] hsr_slave_1: left promiscuous mode [ 716.099875][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.101307][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.214497][ T13] team0 (unregistering): Port device team_slave_1 removed [ 716.221127][ T13] team0 (unregistering): Port device team_slave_0 removed [ 716.511691][ T13] IPVS: stop unused estimator thread 0... [ 716.563896][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.625942][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.688926][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.731910][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.858455][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.899243][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.978667][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.039255][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.159088][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.201934][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.229627][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.271276][ T5280] 8021q: adding VLAN 0 to HW filter on device eth17 [ 717.290125][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.946616][ T13] bridge_slave_1: left allmulticast mode [ 717.946654][ T13] bridge_slave_1: left promiscuous mode [ 717.946823][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.949025][ T13] bridge_slave_0: left allmulticast mode [ 717.949055][ T13] bridge_slave_0: left promiscuous mode [ 717.949209][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.981008][ T13] bridge_slave_1: left allmulticast mode [ 717.981041][ T13] bridge_slave_1: left promiscuous mode [ 717.981198][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.000137][ T13] bridge_slave_0: left allmulticast mode [ 718.000170][ T13] bridge_slave_0: left promiscuous mode [ 718.000325][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.026607][ T13] bridge_slave_1: left allmulticast mode [ 718.026643][ T13] bridge_slave_1: left promiscuous mode [ 718.026795][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.028790][ T13] bridge_slave_0: left allmulticast mode [ 718.028820][ T13] bridge_slave_0: left promiscuous mode [ 718.028966][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.060673][ T13] bridge_slave_1: left allmulticast mode [ 718.060704][ T13] bridge_slave_1: left promiscuous mode [ 718.060854][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.077920][ T13] bridge_slave_0: left allmulticast mode [ 718.080304][ T13] bridge_slave_0: left promiscuous mode [ 718.080461][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.105621][ T13] bridge_slave_1: left allmulticast mode [ 718.105668][ T13] bridge_slave_1: left promiscuous mode [ 718.105817][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.107210][ T13] bridge_slave_0: left allmulticast mode [ 718.107239][ T13] bridge_slave_0: left promiscuous mode [ 718.107391][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.252144][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.267735][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.268768][ T13] bond0 (unregistering): Released all slaves [ 718.317520][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.319016][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.320003][ T13] bond0 (unregistering): Released all slaves [ 718.397523][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.398995][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.400003][ T13] bond0 (unregistering): Released all slaves [ 718.469168][ T13] team0: Port device bridge0 removed [ 718.477773][ T13] bond0 (unregistering): left allmulticast mode [ 718.477796][ T13] bond_slave_0: left allmulticast mode [ 718.477818][ T13] bond_slave_1: left allmulticast mode [ 718.480637][ T13] bond1 (unregistering): (slave macvlan3): Removing an active aggregator [ 718.480904][ T13] bond1 (unregistering): (slave macvlan3): Releasing backup interface [ 718.481261][ T13] macvlan3 (unregistering): left allmulticast mode [ 718.518049][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.534101][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.534679][ T13] bond0 (unregistering): Released all slaves [ 718.537376][ T13] bond1 (unregistering): Released all slaves [ 718.601289][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.602334][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.602893][ T13] bond0 (unregistering): Released all slaves [ 718.718740][ T13] tipc: Left network mode [ 719.368122][ T13] hsr_slave_0: left promiscuous mode [ 719.368583][ T13] hsr_slave_1: left promiscuous mode [ 719.369155][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.369182][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.369755][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.369781][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.372881][ T13] hsr_slave_0: left promiscuous mode [ 719.378672][ T13] hsr_slave_1: left promiscuous mode [ 719.379273][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.379299][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.379903][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.379928][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.408054][ T13] hsr_slave_0: left promiscuous mode [ 719.416010][ T13] hsr_slave_1: left promiscuous mode [ 719.416652][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.416679][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.421534][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.421560][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.456452][ T13] hsr_slave_0: left promiscuous mode [ 719.462168][ T13] hsr_slave_1: left promiscuous mode [ 719.462785][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.468020][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.502163][ T13] hsr_slave_0: left promiscuous mode [ 719.507534][ T13] hsr_slave_1: left promiscuous mode [ 719.508750][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.515149][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.534340][ T13] veth1_macvtap: left promiscuous mode [ 719.534383][ T13] veth0_macvtap: left promiscuous mode [ 719.534471][ T13] veth1_vlan: left promiscuous mode [ 719.534534][ T13] veth0_vlan: left promiscuous mode [ 719.553686][ T13] veth1_macvtap: left promiscuous mode [ 719.553731][ T13] veth0_macvtap: left promiscuous mode [ 719.553821][ T13] veth1_vlan: left promiscuous mode [ 719.553899][ T13] veth0_vlan: left promiscuous mode [ 719.575102][ T13] veth1_macvtap: left promiscuous mode [ 719.575147][ T13] veth0_macvtap: left promiscuous mode [ 719.575259][ T13] veth1_vlan: left promiscuous mode [ 719.575339][ T13] veth0_vlan: left promiscuous mode [ 719.810874][ T13] team0 (unregistering): Port device team_slave_1 removed [ 719.825428][ T13] team0 (unregistering): Port device team_slave_0 removed [ 719.952601][ T13] team0 (unregistering): Port device team_slave_1 removed [ 719.964481][ T13] team0 (unregistering): Port device team_slave_0 removed [ 720.086490][ T13] team0 (unregistering): Port device team_slave_1 removed [ 720.090884][ T13] team0 (unregistering): Port device team_slave_0 removed [ 720.252911][ T13] team0 (unregistering): Port device team_slave_1 removed [ 720.260930][ T13] team0 (unregistering): Port device team_slave_0 removed [ 720.410153][ T13] team0 (unregistering): Port device team_slave_1 removed [ 720.426237][ T13] team0 (unregistering): Port device team_slave_0 removed [ 720.500472][ T5280] 8021q: adding VLAN 0 to HW filter on device eth18 [ 720.939791][ T5280] 8021q: adding VLAN 0 to HW filter on device eth19 [ 721.375521][ T5280] 8021q: adding VLAN 0 to HW filter on device eth20 [ 721.467734][ T13] IPVS: stop unused estimator thread 0... [ 721.468182][ T13] IPVS: stop unused estimator thread 0...