last executing test programs: 9m9.792689644s ago: executing program 32 (id=81): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x8000}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 8m23.76752488s ago: executing program 5 (id=224): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="2c000100000000000030303030003030303030303030303030303030352c00d745dcab34ff634099d402406184d688f81f99d01ce1164bfd68777e4bdfe2e9fae18a6c91c70bc34f974b265a58d1889c9c38e7e32895b1921f8e4b4b41f3ef0debac34b19aa687221a6b942eb396159ef6de9645e4b33865d6b62e564277ed35923544b6379822861ec79f423c1b0372e2b26bdba81fcea8c4d1eb657869c87c4d7cf2b187c387d632e58f44956d2d7b16ba93153514087b38676f72cab9f62f53f331bb7f952ef5ab05e9403afa22e65743c583ba30683ac5e30173cdb5c216d879ead8b3ee56d602a39e33c63ba2754ccfe231c2e1b660f2a68cc14a9186ee2e834be5f10b09"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$eJzs3b9vW1sdAPDvdeImL8996YM3AAJeeRQKqur8aBtVZaBdQKiqhKiYGNqQuFEUu47ipDShQzqyI1GJCf4ENgakTgxsbLCxlAGpQAVqkBiM7vVt6iZxYl5+uLU/H+nm3nOu4+85ds85vqe5PgEMrLMRsRkRpyLibkSM5/lJvsX11pY+7uWLR3NbLx7NJdFs3v5Hkp1P86Ltd1Lv5885GhE/+G7Ej5PdcRvrG0uz1WplJU9PrNaWJxrrGxcXC3nO9MzUzOTVS1emj6yuH9d+8/w7izd/+LvffunZHze/+dO0WKWfnc7OtdfjKLWqXoxSW95wRNw8jmA9Mpz/++Hdk7a2z0TEJ1n7H4+h7N0EAPpZszkezfH2NADQ79Lr/1IkhXI+F1CKQqFcbs3hfRRjhWq9sXphvL52fz6yOawzUSzcW6xWJvO5wjNRTNL0VHb8Oj0dm2+kL0XEhxHx85H3snR5rl6d7+UHHwAYYO/vGP//PdIa/wGAPjfa6wIAACfO+A8Ag8f4DwCD5/8Y/90dCAB9wvU/AAwe4z8ADJ4Dx//HJ1MOAOBEfP/WrXRrbuXffz3/YH3tW6UHF+crjaVybW2uPFdfWS4v1OsL1Up5rtnMf63j1z1X6/Xlqcvbycb6xp1afe3+6p3F2uxC5U6leAJ1AgD29+HHT/+cRMTmtfeyLdoGd2M19LdCrwsA9MxQrwsA9Iz7eWBwdXGNbxoA+tweS/S+oeOfCD2x+Cu8q85/3vw/DKpu5//dIgT959PN/3/7yMsBnDzz/zC4ms3Emv8AMGDM8QOH+v9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGFClbEsK5Wwt8M30Z6FcjjgdEWeimNxbrFYmI+KDiPjTSHEkTU/1utAAwCEV/pbk63+dHz9X2nn2VPKfkWwfET/55e1fPJxdXV2ZSvP/uZ2/+iTPnz7ViwoAAO2u785qjdP5vu1C/uWLR3OvtpMs4vMbrcVF07hb+dY6MxzD2X40ihEx9q8kT7ekn1eGjiD+5uOI+Nzr+j9si1DK5kBaK5/ujJ/GPn0M8V+//jvjF96IX8jOpfti9lp89gjKAoPm6Y1WP5m3vbSJ5e2vEGez/d7tfzTroQ7vVf+3tav/K2z3f0O74idZmz+7nd6/JM8v//57uzKb461zjyO+MLxX/GQ7ftKh/z3XZR3/8sUvf9LpXPNXEedj7/gttaybnVitLU801jcuLtZmFyoLlfvT0zNTM5NXL12ZnsjmqFs//7BXjL9fu/BBp/hp/cc6xB89oP5f67L+v/7v3R99ZZ/43/jq3u//R/vET8fEr3cZf3bsesflu9P48x3qf9D7f6HL+M/+ujHf5UMBgBPQWN9Ymq1WKysHHKSfNQ96jIOeHEQc8nliM6LntejLg2LX7evtO+h1zwQct/ZhBAAAAAAAAAAAAAAAeDs11jeWRqLDbUClo7pBDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI7H/wIAAP//L93NTg==") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 8m21.338657622s ago: executing program 5 (id=233): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x2, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 8m15.550633549s ago: executing program 5 (id=244): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x6, 0x2f6, &(0x7f0000000a00)="$eJzs3T9rJGUYAPBnks3uRItNYSUHDmhhdVyutdkgdyCm8kihFhq8CxzZINxBwFPcpLISbCws/ASC4EfwA9j4DQRbwe5OOHhl/mUmySa3wm1E7/dr8sw7z/POM3+SnRR58/G1g/27Rewdf/Fb5HkWK5OYxJMsNmIlWkepNqs3J98EAPBf9iSl+LP5fD+38/jiuiwi8uW2BgAsyaWf/ycGXfjTlbQFACzRnfc/eHdre/vWe0WRx+2Drw53yt/sy6/l3p/Xt/bifkzjXtyIcTyNqF4U1qJ6WyjD2yml2aAobcQbB7PDnbLy4KNfmvm3/oio6jdjHBvV0MnbRlX/zvatzaLWq5+VfbxU1u/F/UlZfzPG8UpTPDpdf3NOfewM483X6/rq+NdjHL9+Ep/GNO5WTXT1X24Wxdvp28eff1i2V9Zns8OdUZXXSav9rfWrukEAAAAAAAAAAAAAAAAAAAAAAPwvXW/WzhlFtX5POdSsv7P6tNxYi6K1cXp9nro+ayfqrw+UUpql+L5dX+dGURSpSezqB/HqoL+wIAAAAAAAAAAAAAAAAAAAALy4Hn72aH93Or334LkE7WoAg4j4607E+Zy1iHj2PJPeyGtxefKoOebudLrShKdzBv2RWG1zsohL2yhP4jldlmcF6+d6boIfflxoniziqBnJL02+Vt+CJZ/Oo/326drfzeZfw1G0I3nzkHw3jOhyhhc+JEenR4YXtZFi3uN3UTBsg/Xo7RovVv51c7blPC9XI7N219H5qsjONJZlvZy3fq/nakays2cxrK7qvDYib4OqPKX2Fpzk5As9z5HXR+9+RrTfYZnVOgAAAAAAAAAAAAAAAAAAYKm6v/6ds/P4zPbjcX9rJY2W2xsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXJXu////g2DWFC+QPIwHD//lUwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAF8HcAAAD//7KmW+0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), &(0x7f0000002740), 0x800, r3}, 0x38) 8m13.775280743s ago: executing program 33 (id=244): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x6, 0x2f6, &(0x7f0000000a00)="$eJzs3T9rJGUYAPBnks3uRItNYSUHDmhhdVyutdkgdyCm8kihFhq8CxzZINxBwFPcpLISbCws/ASC4EfwA9j4DQRbwe5OOHhl/mUmySa3wm1E7/dr8sw7z/POM3+SnRR58/G1g/27Rewdf/Fb5HkWK5OYxJMsNmIlWkepNqs3J98EAPBf9iSl+LP5fD+38/jiuiwi8uW2BgAsyaWf/ycGXfjTlbQFACzRnfc/eHdre/vWe0WRx+2Drw53yt/sy6/l3p/Xt/bifkzjXtyIcTyNqF4U1qJ6WyjD2yml2aAobcQbB7PDnbLy4KNfmvm3/oio6jdjHBvV0MnbRlX/zvatzaLWq5+VfbxU1u/F/UlZfzPG8UpTPDpdf3NOfewM483X6/rq+NdjHL9+Ep/GNO5WTXT1X24Wxdvp28eff1i2V9Zns8OdUZXXSav9rfWrukEAAAAAAAAAAAAAAAAAAAAAAPwvXW/WzhlFtX5POdSsv7P6tNxYi6K1cXp9nro+ayfqrw+UUpql+L5dX+dGURSpSezqB/HqoL+wIAAAAAAAAAAAAAAAAAAAALy4Hn72aH93Or334LkE7WoAg4j4607E+Zy1iHj2PJPeyGtxefKoOebudLrShKdzBv2RWG1zsohL2yhP4jldlmcF6+d6boIfflxoniziqBnJL02+Vt+CJZ/Oo/326drfzeZfw1G0I3nzkHw3jOhyhhc+JEenR4YXtZFi3uN3UTBsg/Xo7RovVv51c7blPC9XI7N219H5qsjONJZlvZy3fq/nakays2cxrK7qvDYib4OqPKX2Fpzk5As9z5HXR+9+RrTfYZnVOgAAAAAAAAAAAAAAAAAAYKm6v/6ds/P4zPbjcX9rJY2W2xsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXJXu////g2DWFC+QPIwHD//lUwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAF8HcAAAD//7KmW+0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), &(0x7f0000002740), 0x800, r3}, 0x38) 8m9.690728927s ago: executing program 3 (id=261): setns(0xffffffffffffffff, 0x24020000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000680)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e31429fd3000175e63fb8d38a8700"/252, 0xfc) 8m8.486866337s ago: executing program 3 (id=262): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x3e, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) 8m7.487574113s ago: executing program 3 (id=265): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0x2, 0x2, 0x8, 0x7}, 0x3b, [0x401, 0x7ff, 0x401, 0x8, 0x10000, 0x45, 0x200, 0x401, 0x7, 0x290, 0xfc, 0x80000000, 0x8, 0x3, 0xfffffd05, 0x9, 0x50d6, 0x7ff, 0xa, 0x0, 0xd4, 0x4, 0x5, 0x1d231da2, 0x6, 0x5, 0x0, 0x9, 0x0, 0x3, 0x101, 0xfffffffd, 0x800, 0xfffffffa, 0x9, 0x7, 0x8, 0x9, 0xf94d, 0x7, 0x3, 0xffffff00, 0x0, 0x575c, 0x4002, 0x5a, 0x2, 0x0, 0x5, 0x5, 0x1ff, 0x2, 0x1, 0x3, 0x6, 0x670, 0x9, 0x8002, 0x2, 0x9b2, 0x0, 0x2, 0x1, 0x1], [0x4, 0x8000, 0xa, 0xfffff2e1, 0x9ca4, 0xffffffff, 0x0, 0x7f, 0x72a8, 0x400, 0x86, 0x2, 0x4, 0x56e, 0x6, 0x4, 0x1100, 0x88a, 0x2, 0x8, 0xb2, 0x106c, 0xa2b8, 0xc60, 0x6740, 0xf2f1, 0x5, 0x1, 0x5, 0xfffffffd, 0x3, 0x0, 0x7fffffff, 0x1, 0x81, 0x6, 0x6, 0x0, 0x183, 0x401, 0x6, 0xf, 0xd349, 0x9, 0x6, 0x0, 0x9, 0x0, 0x7fff, 0x2, 0xffffffb1, 0x4, 0x6, 0x6, 0x9, 0x1, 0x2, 0x800, 0x4, 0x3, 0x4, 0x7fffffff, 0xc2577131, 0x7], [0x4, 0x5, 0x8, 0x2, 0x5, 0x80, 0xfffffff7, 0x3, 0x7, 0xb5, 0xfffffffa, 0x100, 0x0, 0x1, 0x1, 0x7, 0x8a85, 0x4, 0x430fb4df, 0x7, 0x7, 0x8, 0x8, 0x2, 0x2, 0x9, 0x1000, 0x54e934b9, 0x37, 0x10001, 0x0, 0x8000, 0x32, 0x4, 0x6, 0x6, 0x5, 0xcf9, 0x6, 0x9, 0x2, 0xe, 0x0, 0x7f, 0xffffffff, 0x0, 0xfffffffd, 0x5, 0x0, 0xa, 0x7fffffff, 0xffffffc0, 0x5, 0x6, 0xfff, 0x101, 0x400007, 0x8, 0x2, 0x3, 0x5, 0x83, 0xfffffff8, 0xb6], [0x4, 0x2, 0x4, 0x1, 0x6, 0x7, 0x2, 0x9, 0x16, 0x0, 0x7fff, 0x7fff, 0xd, 0x1, 0x5, 0x5, 0x4, 0x9, 0x20000005, 0x8, 0x7, 0x2, 0x4689, 0xe97f, 0x80000000, 0x5, 0xcd3, 0xc0000000, 0x5, 0xfffff800, 0xe, 0x26419275, 0x80000001, 0x3, 0xfff, 0x8, 0xef7, 0x4ff, 0x1, 0xfffffff0, 0x7, 0x7b9, 0x52a, 0x5, 0x0, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x2, 0xb2a, 0x3, 0x189f, 0x9, 0x9, 0xffff, 0xd, 0xfb9, 0x77, 0x5, 0xfffffffa, 0x6e, 0x1]}, 0x45c) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d0200000000000000000000000038"], 0x51) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, 0x0, 0x0) close(r2) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000005c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x12000847) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 8m5.692640908s ago: executing program 3 (id=269): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xd9000}, 0x1, 0x2}) 8m5.298029909s ago: executing program 3 (id=271): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085f, &(0x7f0000000100)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@abort}]}, 0x1, 0x548, &(0x7f00000008c0)="$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") 8m3.047474305s ago: executing program 3 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffff, 0x2, 0xfffff535, 0x1, 0x2}, 0xa, 0x0, 0xee, 0x5, 0x18c, 0x8, 0x1a, 0xb, 0x7, 0xfffffffb, {0x2063, 0x5, 0x10, 0x5, 0x1000, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000002c0), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 7m48.488531164s ago: executing program 34 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffff, 0x2, 0xfffff535, 0x1, 0x2}, 0xa, 0x0, 0xee, 0x5, 0x18c, 0x8, 0x1a, 0xb, 0x7, 0xfffffffb, {0x2063, 0x5, 0x10, 0x5, 0x1000, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000002c0), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 6m54.460953314s ago: executing program 7 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) 6m52.015812626s ago: executing program 7 (id=429): ustat(0x9, &(0x7f0000000000)) ustat(0x33, &(0x7f0000000040)) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa9}, "cfca23f3acbded24d53c7c7f1cb87e52c09a6d5bbd3670384b5b51e61897fc810d02256d52e3056b14e7e2d19dc9f61f06cfaa297d3745f447a3efa1f6d71f1f4fc30e36252e84a4fb729cb0c9d161d9429fca2dfb1ea4aa6bb71d4d4337d40cd5131a3480eabdd51e2978196c39179f52296c7388384ea50705a35a358e19f8df4fad22e2a6a9379723252ef5bcc953577d4bdc800736462532b678fca8e351d015c8aa89ef45e629"}, 0xad) syz_emit_vhci(0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x82000, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000240)=0x1311112) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x3f}, @l2cap_cid_signaling={{0x3b}, [@l2cap_cmd_rej_unk={{0x1, 0xff, 0x2}, {0x9}}, @l2cap_info_rsp={{0xb, 0xc, 0x19}, {0x5, 0x8, "a41424f2b04ae4a6c4b9fe29117fc10f8b01ccd093"}}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0x2, 0xfffa}}, @l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x4, 0x5}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x7, 0x9}}]}}, 0x44) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x220c0, 0x0) syz_emit_vhci(&(0x7f000019c080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfe, 0x0, 0xb}}}, 0xc) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x80) 6m50.565903023s ago: executing program 7 (id=433): socket$alg(0x26, 0x5, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x28002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) 6m49.10082044s ago: executing program 7 (id=439): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0xfffffda5, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x44820, 0x100a8}}}}}}, @IFLA_GROUP={0x8, 0x1b, 0xd}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) 6m46.169331244s ago: executing program 7 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) 6m43.332954766s ago: executing program 7 (id=449): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc, 0x6c}, 0x0, @in6=@empty, 0xfffffffc, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 6m27.623852664s ago: executing program 35 (id=449): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc, 0x6c}, 0x0, @in6=@empty, 0xfffffffc, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3m35.471378308s ago: executing program 6 (id=879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x8) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r3, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 3m34.405794545s ago: executing program 6 (id=884): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b00)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x9000, 0x6e, &(0x7f0000000600)=""/110}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3m32.577554262s ago: executing program 6 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) 3m30.852254355s ago: executing program 6 (id=888): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 3m26.002919778s ago: executing program 6 (id=899): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004280)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) 3m25.271431356s ago: executing program 6 (id=901): sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) open(0x0, 0x80243, 0x1df2a23c5997fa5f) unshare(0x28000600) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x2d088000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x8040600) 3m23.55663445s ago: executing program 36 (id=901): sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) open(0x0, 0x80243, 0x1df2a23c5997fa5f) unshare(0x28000600) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x2d088000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x8040600) 2m14.502874981s ago: executing program 9 (id=1044): ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_pts(r4, 0x800) 2m12.045617813s ago: executing program 9 (id=1047): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) 2m8.271338219s ago: executing program 9 (id=1054): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b///o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) r4 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, 0x0) shmctl$IPC_RMID(r3, 0x0) 1m56.574216045s ago: executing program 9 (id=1070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0xfffffffd, 0x526}, 0xd7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}, 0x2000600d) 1m41.269879223s ago: executing program 37 (id=1070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0xfffffffd, 0x526}, 0xd7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}, 0x2000600d) 1m0.689992121s ago: executing program 8 (id=1195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r5}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 59.422113824s ago: executing program 8 (id=1201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x9, @pix_mp={0x4, 0x5, 0x34524742, 0x5, 0x4, [{0x8, 0xb}, {0x7, 0x9}, {0x1}, {0xd, 0xc2c}, {0xd, 0xe0}, {0x200, 0x7ff}, {0x80000002, 0x3}, {0x7f, 0x6}], 0xff, 0x68, 0x4, 0x2, 0x7}}) 57.710911097s ago: executing program 8 (id=1205): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r0 = timerfd_create(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040005}, 0x8800) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x5dd889b3, 0x0, 0x0, 0x4000, 0x0, 0x100, 0x10001, 0xa, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x1000, 0x100000001, 0x2, 0x3, 0x0, 0x3, 0x4000000000000000}) 55.356095977s ago: executing program 8 (id=1208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r4, 0xfffffffffffffffd) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x513000, 0x1000, 0x0, 0x1f}, 0x20) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x214003, 0x0) 53.811515076s ago: executing program 8 (id=1210): r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 44.631453659s ago: executing program 8 (id=1228): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x24, 0x0, 0x1, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x1a04447, &(0x7f0000000640)=ANY=[], 0x8, 0x1e6, &(0x7f0000000400)="$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") 28.310833732s ago: executing program 38 (id=1228): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x24, 0x0, 0x1, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x1a04447, &(0x7f0000000640)=ANY=[], 0x8, 0x1e6, &(0x7f0000000400)="$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") 19.279191161s ago: executing program 1 (id=1290): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x30}, 0xa, 0x0, 0x1, 0x6, 0xbc, 0x5}, 0x20) ioctl(0xffffffffffffffff, 0x8b32, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80000) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) sendmsg$inet_sctp(r0, 0x0, 0x4000890) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) 14.251873298s ago: executing program 4 (id=1291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x106f) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 12.991072181s ago: executing program 4 (id=1292): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r4}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket(0x1, 0xa, 0x8) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x4b) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f002}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa}}}, 0x24}}, 0x0) 12.984978321s ago: executing program 0 (id=1301): creat(&(0x7f00000000c0)='./file0/file0/file0/file0\x00', 0x30c4194f2fc7b8b4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0xc12, &(0x7f0000000740)={[{@check_relaxed}, {@session={'session', 0x3d, 0x13}}, {@unhide}, {@cruft}, {@check_strict}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@hide}, {@unhide}, {}, {@hide}, {@session={'session', 0x3d, 0x5d}}]}, 0x4, 0xa09, &(0x7f0000003280)="$eJzs3ctvXGdfB/Dv8SVx3SpJ21BK1DaTlKRuaxzbaROiLkpiTxIXX5DtSI1YNKVxUBRDoQGprZCaIsSKCiQQC9hVrGBTqRu6Qd3BDlYskFD/hepd5V351TkzTsb2jMdOHDtNP59oLuec33me37k+mfGZ84SflpWDa4ZWVqrHAw5f+dddyJjH2IXJH77+5qvy8eWd7Etv3i7+PRlIUkv6kryY9E9Mzs/NdCnoVnItyfdJkWR/Gq9bci3F3+aZ+8Pfp/jnst6O9m21ZLpZ4Wdtr/c/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4HBUTk6OjY8W+TM1eeb/WkNQ2mJicnyuysrJxyuo8Dd9VvX4X33WtNynKRwYGVrv6fvHw/ckvJKkdz0uNoZeqDskzkM+ffuHQO8/39azO3ymbh7J/68Xe/uzzWx8uLy990jlk5YvGMuxMbo+ZS/XZqYW5qZnzl+q1qYW52rkzZ0ZPXb64ULs4NV1fuLqwWJ+pTczXzy/OzdeGJl6vjZ07d7pWH7k6d2X20uTIdH115NnfGh8dPVN7b+T36ufnF+ZmT703sjBxeWp6emr2UhVTTi5jzpY74u9OLdYW6+dnarUbN5eXTq/LqXf9yi6DxrotSRk03i1ofHR8fGxsfHzsy2bv2fdGnHn73NtnR0f7RtfJhohHtNPyeHmq82be4TM4PLieRvufTGcqs7mS91Nr+28ik5nPXGY6TG9abf9PnKpvWm9r+99s5ftaJh8pn47nlebgQIf2v0Muu/fvdj7L57mVD7Oc5Szlkz3PaHf/XUo9s5nKQuYylZmcr8bUmmNqOZczOZPRfJDLOZqF1HIxU5lOPQu5moUspl7tUROZTz3ns5i5zKeWoUzk9dQylnM5l9OppZ6RXM1crmQ2lzKZ81UpN3KzWu+nN8nxXtDYVoLGNwla35iX+/r22v/6k/o/QbZs50/i8IBWmu3/vu6hQxO7kRAAAACw437jv3Lg8HP/+f9JkZer7+UvTk3X393rtAAAAIAdVF2u91L50l++ezlF+fl/dK/TAgAAAHZQUf3GrkgymKONd6u/hPIlAAAAADwhqr//v5Li6P0RPv8DAADAE6b7Pfa7RhTDq7f/rV1vvF5vRjSGisGLU9P1kYm56XfGcrK6y0D1S4MNpfUmRX/184M3cqwRdWyw8Tp4v8SyzoEyamzknbG8kePNBRl6tXx5dahN5Hgj8rVG5Gutkb1ZE3m6jASAJ93xTdrjrbb/b2S4ETF8pGry+460aYNHtawA8Li418fOL5tdmrVp/5sRr3Rq/9/a5PN/GfFcbhxtXFIwko/ycZZzPcNpXnFwtF2pq70RNC5DGO7ybcBg85KF/znbk+EN3wcM3FvW1tiljGe47TcCLeUWqzmcbsT1PpptAAC77fim7fDW2v/hLp//B11SCACPlZX9SdWD/b2u7Lu/+WI7wUuf3N7rZQQA1tJKAwAAAAAAAAAAAAAAAAAAAAAAAAAAwM7b0g38//tksry8lGzrtv8P+WZgOxlu/qYnu5Tznr/pTbJXtb+77Y4klspt/BCV/ttTDzX7E/WmPFR2vEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACedEXS2258T7I/yWiSU7uf1aNzZ68T2Cm1B5utuJu7+TQHdjodAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICfu+b9/3vSeH26MSp9PcmJJNeS/P5e57iT7u51Anvmj6rnlvv/9yT9WSnS19jsKfonJufnZsrNX+wvp//w9TdflY/uZW/sVaEsoKxhTecSzRpaxvSvnevZaq7ByaXbt/7s4z+pTV6odswLixenJ2cuzf/O/cAXim8bXSC0doOwmu9fnPiPv2sZva9Z+bflkra3vt6LVb2TG+v99XZzd6h3C24uL42XNS3W31/88z+++WnLpOdyLHl1KBlaW9Mflo8ONR1bvz7XKn4s/ro4kH/MtWr7l2ujWCnKTXSwWv6nbtxcXhr56OPl682c/vKtL9bkdChHk1xPBrae09HqfNJWtdf19Je1jlZB5dPhLuVtqqXEsQ7r9dlqlxnc1jLUOi9Dpct6b2Z0um1Gf/+nz+fktrf0yS41tlX8WPxfcTn/m79q6f+jp9z+J9L26GxTRBXZsqe0TltzePU0IqslH2+d8MH6MjselTwCf5M/yG/f2/49Lef/5rbanfNRS43tj4tk+8fFvxzc0KLcV7VIh9e1SM2zT6d5mnkebkR1yPPX8mbSd2RbZ5Q3u5xRHtXx/0/FUH6RO/r/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHn9F0ttufE9yIsmhJAfL4Vqysj7mzgPU1zNYPEiaO+ZBcv7pKTouaHG3Wv8HdjkhAAAAAAAAAB6RC5M/fP3NV+Wj+ntwb36zpzmllvQlOVT8Q//E5PzcTJeC+pNrq3/SH9heDtfKp2fuD39fDr3YZaa9vXwAAH7SfhUAAP//BDJpug==") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) 12.976527781s ago: executing program 2 (id=1302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r4, 0xfffffffffffffffd) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x513000, 0x1000, 0x0, 0x1f}, 0x20) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x214003, 0x0) 11.41588819s ago: executing program 1 (id=1293): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x9, 0xf, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xb, 0xfb}}}}}]}}]}}, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe25, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 11.409062141s ago: executing program 0 (id=1304): r0 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x700, 0x1, 0x1000, 0xc, {{0x5, 0x4, 0x2, 0x17, 0x14, 0x67, 0x0, 0x35, 0x2f, 0x0, @private=0xa010100, @loopback}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) msgctl$IPC_RMID(0x0, 0x0) 11.405045501s ago: executing program 2 (id=1305): creat(&(0x7f00000000c0)='./file0/file0/file0/file0\x00', 0x30c4194f2fc7b8b4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0xc12, &(0x7f0000000740)={[{@check_relaxed}, {@session={'session', 0x3d, 0x13}}, {@unhide}, {@cruft}, {@check_strict}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@hide}, {@unhide}, {}, {@hide}, {@session={'session', 0x3d, 0x5d}}]}, 0x4, 0xa09, &(0x7f0000003280)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) 8.525263724s ago: executing program 4 (id=1294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) read(r5, &(0x7f0000000040)=""/252, 0xfc) 8.523987194s ago: executing program 0 (id=1307): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000280)={0x0, 0x4000, &(0x7f00000002c0)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008894}, 0x40000) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000001c0)) 8.523801424s ago: executing program 2 (id=1295): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x10004e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe86, &(0x7f0000000240)=0xfffffffffffffffe) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.853718866s ago: executing program 0 (id=1296): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x50) 5.480780341s ago: executing program 4 (id=1297): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x2080) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 5.454102912s ago: executing program 1 (id=1311): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) recvmmsg(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x0, 0x0) clock_gettime(0xaa36e421d3e1fd1, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2.638686313s ago: executing program 5 (id=1259): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0x3f}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 2.637969293s ago: executing program 0 (id=1313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) socket(0x80000000000000a, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pipe(&(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000100)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.631098944s ago: executing program 2 (id=1314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2.630108233s ago: executing program 1 (id=1315): socket$kcm(0xa, 0x3, 0x3a) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 2.620426043s ago: executing program 4 (id=1316): r0 = socket$inet(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x10002, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, 0x0) 1.540707491s ago: executing program 5 (id=1298): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) pwrite64(r3, &(0x7f0000000040)="10", 0xffffffb7, 0x8080c61) 1.539985931s ago: executing program 1 (id=1318): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x5b) keyctl$revoke(0x3, r3) 1.539717031s ago: executing program 2 (id=1299): socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x5b) 1.513891332s ago: executing program 0 (id=1300): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$kcm(0x10, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 387.10929ms ago: executing program 1 (id=1303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1ea74798, 0x7ffffffe, 0x0, 0x7fffffff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0x8, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x4, 0x7, 0x1, 0x6, 0xc}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffff8, 0x6}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004044}, 0xb32019a74e55d2de) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 343.410691ms ago: executing program 2 (id=1306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0xfffffffd, 0x526}, 0xd7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)='\x00\x00', 0x2}, {&(0x7f0000000480)="34058a63c4934da4b9a24af8fcfa583c373d", 0x12}], 0x2}, 0x2000600d) 181.300255ms ago: executing program 4 (id=1308): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x3b) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(0x0, 0x1b6) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000240)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1f7) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') openat(0xffffffffffffff9c, &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x800, 0x0) 0s ago: executing program 5 (id=1309): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xce9}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x28000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) unshare(0x20040600) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r0, 0x0, 0x40010) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0x1) ioctl$PPPIOCGNPMODE(r3, 0x4004743c, 0x0) kernel console output (not intermixed with test programs): o 512 [ 187.027217][ T5579] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 187.191073][ T5579] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 187.281482][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 187.422693][ T5482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.523717][ T5482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.549877][ T5482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.703138][ T5482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.750691][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 188.819430][ T5482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.944193][ T4796] device hsr_slave_0 left promiscuous mode [ 188.980167][ T4796] device hsr_slave_1 left promiscuous mode [ 189.009945][ T4796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.017550][ T4796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.057563][ T4796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.076625][ T4796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.095690][ T4796] device bridge_slave_1 left promiscuous mode [ 189.122953][ T4796] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.189166][ T4796] device bridge_slave_0 left promiscuous mode [ 189.205125][ T4796] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.359714][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 189.405879][ T4796] device veth1_macvtap left promiscuous mode [ 189.421697][ T4796] device veth0_macvtap left promiscuous mode [ 189.427873][ T4796] device veth1_vlan left promiscuous mode [ 189.473702][ T4796] device veth0_vlan left promiscuous mode [ 189.588136][ T5612] loop0: detected capacity change from 0 to 2048 [ 189.705159][ T5612] Alternate GPT is invalid, using primary GPT. [ 189.725863][ T5612] loop0: p2 p3 p7 [ 190.279323][ T4266] udevd[4266]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 190.280127][ T5486] udevd[5486]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 190.622328][ T5624] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 190.634179][ T5624] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 190.660344][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 191.283611][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 191.637586][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 191.643246][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 191.772625][ T4796] team0 (unregistering): Port device team_slave_1 removed [ 191.817601][ T4796] team0 (unregistering): Port device team_slave_0 removed [ 192.008914][ T4796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.044161][ T5634] UHID_CREATE from different security context by process 194 (syz.1.282), this is not allowed. [ 192.067598][ T4796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.293439][ T4677] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 192.477489][ T4796] bond0 (unregistering): Released all slaves [ 192.489904][ T4677] usb 1-1: Using ep0 maxpacket: 32 [ 192.496982][ T4677] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.507593][ T4677] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 192.517442][ T4677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.533167][ T4677] usb 1-1: config 0 descriptor?? [ 192.574314][ T4677] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 192.757777][ T5597] device syzkaller0 entered promiscuous mode [ 193.669181][ T4336] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 194.520350][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.526741][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.651947][ T4336] usb 2-1: Using ep0 maxpacket: 16 [ 194.725386][ T4336] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 194.735262][ T4336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.744024][ T4336] usb 2-1: Product: syz [ 194.748306][ T4336] usb 2-1: Manufacturer: syz [ 194.753338][ T4336] usb 2-1: SerialNumber: syz [ 195.039941][ T4277] usb 1-1: USB disconnect, device number 2 [ 195.199685][ T5641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.228400][ T5641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.096929][ T4336] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 196.185797][ T4336] usb 2-1: USB disconnect, device number 4 [ 203.226198][ T5689] netlink: 76 bytes leftover after parsing attributes in process `syz.1.297'. [ 203.295888][ T5482] device hsr_slave_0 entered promiscuous mode [ 203.335998][ T5482] device hsr_slave_1 entered promiscuous mode [ 203.345334][ T5482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.375329][ T5482] Cannot create hsr debugfs directory [ 207.122307][ T5741] netlink: 'syz.1.308': attribute type 1 has an invalid length. [ 207.219043][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.232547][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.241950][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.251086][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.258644][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.266093][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.426456][ T5741] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.152109][ T5748] bond2: (slave gretap1): making interface the new active one [ 208.472838][ T5748] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 208.571788][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 208.726133][ T27] audit: type=1326 audit(1785768825.252:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5765 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba779e019 code=0x7ffc0000 [ 208.782987][ T27] audit: type=1326 audit(1785768825.282:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5765 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba779e019 code=0x7ffc0000 [ 208.787620][ T5482] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 208.848096][ T27] audit: type=1326 audit(1785768825.282:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5765 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba779e019 code=0x7ffc0000 [ 208.884833][ T5482] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 208.915773][ T5482] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 208.945229][ T27] audit: type=1326 audit(1785768825.292:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5765 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ba779e019 code=0x7ffc0000 [ 208.978555][ T27] audit: type=1326 audit(1785768825.292:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5765 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba779e019 code=0x7ffc0000 [ 209.012094][ T5482] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 209.030314][ T27] audit: type=1326 audit(1785768825.292:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5765 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba779e019 code=0x7ffc0000 [ 209.056402][ T27] audit: type=1326 audit(1785768825.292:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5765 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba779e019 code=0x7ffc0000 [ 209.081440][ T27] audit: type=1326 audit(1785768825.292:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5765 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba779e019 code=0x7ffc0000 [ 209.200062][ T27] audit: type=1326 audit(1785768825.292:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5765 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ba779e019 code=0x7ffc0000 [ 209.225196][ T27] audit: type=1326 audit(1785768825.292:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5765 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba779e019 code=0x7ffc0000 [ 209.265266][ T4332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.280659][ T49] Bluetooth: hci5: command 0x0409 tx timeout [ 209.323723][ T5738] chnl_net:caif_netlink_parms(): no params data found [ 209.427931][ T4332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.579259][ T4332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.683739][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.695291][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.704081][ T5738] device bridge_slave_0 entered promiscuous mode [ 209.729382][ T4332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.755681][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.779154][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.801685][ T5738] device bridge_slave_1 entered promiscuous mode [ 209.876510][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.920490][ T5794] tipc: Enabling of bearer rejected, failed to enable media [ 209.962218][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.018317][ T5482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.072613][ T5738] team0: Port device team_slave_0 added [ 210.105179][ T5738] team0: Port device team_slave_1 added [ 210.154431][ T5801] loop1: detected capacity change from 0 to 256 [ 210.175224][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.192725][ T5801] exfat: Deprecated parameter 'utf8' [ 210.205845][ T5801] exfat: Deprecated parameter 'utf8' [ 210.222972][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.246210][ T5801] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 210.256059][ T5482] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.327989][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.390461][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.429395][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.436631][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.520580][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.527586][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.605515][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.619222][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.638059][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.675321][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.706345][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.713543][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.727424][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.806048][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.847776][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.931370][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.438265][ T5822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'. [ 212.054853][ T49] Bluetooth: hci5: command 0x041b tx timeout [ 212.196966][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.296818][ T5828] loop1: detected capacity change from 0 to 2048 [ 212.365395][ T5828] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.451910][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.610073][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.713413][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.926826][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.148404][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.199299][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.263764][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.322456][ T5738] device hsr_slave_0 entered promiscuous mode [ 213.370119][ T5738] device hsr_slave_1 entered promiscuous mode [ 213.389977][ T5738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.397684][ T5738] Cannot create hsr debugfs directory [ 213.495416][ T5482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.789818][ T27] kauditd_printk_skb: 72 callbacks suppressed [ 213.789834][ T27] audit: type=1326 audit(1785768830.082:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.2.326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f462a99e019 code=0x7ffc0000 [ 214.571995][ T4288] Bluetooth: hci5: command 0x040f tx timeout [ 214.579301][ T27] audit: type=1326 audit(1785768830.082:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.2.326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462a99e019 code=0x7ffc0000 [ 214.623767][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.655905][ T27] audit: type=1326 audit(1785768830.082:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.2.326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462a99e019 code=0x7ffc0000 [ 214.657750][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.681109][ T27] audit: type=1326 audit(1785768830.082:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.2.326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f462a99e019 code=0x7ffc0000 [ 214.718952][ T27] audit: type=1326 audit(1785768830.312:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.2.326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462a99e019 code=0x7ffc0000 [ 214.750582][ T27] audit: type=1326 audit(1785768830.312:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.2.326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462a99e019 code=0x7ffc0000 [ 214.825193][ T27] audit: type=1326 audit(1785768830.522:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.2.326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f462a99e019 code=0x7ffc0000 [ 216.060692][ T27] audit: type=1326 audit(1785768830.522:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.2.326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462a99e019 code=0x7ffc0000 [ 216.190034][ T27] audit: type=1326 audit(1785768830.522:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.2.326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462a99e019 code=0x7ffc0000 [ 216.271735][ T27] audit: type=1326 audit(1785768830.622:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.2.326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f462a95e84e code=0x7ffc0000 [ 216.639786][ T49] Bluetooth: hci5: command 0x0419 tx timeout [ 216.894315][ T5482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.923286][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.933221][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.154994][ T5738] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 217.266450][ T5738] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 218.258854][ T5879] netlink: 276 bytes leftover after parsing attributes in process `syz.2.330'. [ 218.426346][ T5738] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 218.446615][ T5738] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 218.476230][ T5879] tipc: Enabling of bearer rejected, failed to enable media [ 219.158522][ T4332] device hsr_slave_0 left promiscuous mode [ 219.174522][ T4332] device hsr_slave_1 left promiscuous mode [ 219.203658][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.252007][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.270993][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.305976][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.330995][ T4332] device bridge_slave_1 left promiscuous mode [ 219.353678][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.396003][ T4332] device bridge_slave_0 left promiscuous mode [ 219.420144][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.540970][ T4332] device veth1_macvtap left promiscuous mode [ 219.547158][ T4332] device veth0_macvtap left promiscuous mode [ 219.564770][ T4332] device veth1_vlan left promiscuous mode [ 219.580651][ T4332] device veth0_vlan left promiscuous mode [ 220.684829][ T5911] loop1: detected capacity change from 0 to 2048 [ 220.754326][ T5911] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 220.765135][ T5911] NILFS (loop1): mounting unchecked fs [ 220.856889][ T5911] NILFS (loop1): recovery complete [ 220.903340][ T5915] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.623981][ T4332] team0 (unregistering): Port device team_slave_1 removed [ 221.781139][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.877176][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.382753][ T4332] bond0 (unregistering): Released all slaves [ 222.559278][ T5909] netlink: 'syz.0.337': attribute type 4 has an invalid length. [ 222.611737][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.623975][ T5914] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.636771][ T5914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.655124][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 222.681940][ T5921] bridge1: port 1(veth3) entered blocking state [ 222.688513][ T5921] bridge1: port 1(veth3) entered disabled state [ 222.696804][ T5921] device veth3 entered promiscuous mode [ 222.736233][ T5922] bridge1: port 2(veth0_to_bond) entered blocking state [ 222.748517][ T5922] bridge1: port 2(veth0_to_bond) entered disabled state [ 222.756309][ T5922] device veth0_to_bond entered promiscuous mode [ 222.769180][ T5923] bridge1: port 3(veth5) entered blocking state [ 222.775660][ T5923] bridge1: port 3(veth5) entered disabled state [ 222.783153][ T5923] device veth5 entered promiscuous mode [ 222.793207][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.802279][ T5923] Zero length message leads to an empty skb [ 222.846291][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.876709][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.943815][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.967596][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 223.099351][ T5482] device veth0_vlan entered promiscuous mode [ 223.113795][ T5482] device veth1_vlan entered promiscuous mode [ 223.125645][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.134846][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.183592][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.241227][ T5938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.341'. [ 223.320952][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.903314][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.910527][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.980896][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.998836][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.007509][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.014672][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.032146][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.060855][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.090481][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.102473][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.124543][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.150943][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.172993][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.188309][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.203794][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 224.228198][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.246833][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 224.261060][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 224.292259][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.311173][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.336436][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.354900][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.426854][ T5738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.485137][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.516837][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.567460][ T5482] device veth0_macvtap entered promiscuous mode [ 224.591568][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.618268][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.660746][ T5482] device veth1_macvtap entered promiscuous mode [ 224.688191][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.720579][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 224.774977][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.827663][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.876512][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.968511][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.035488][ T5482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.058757][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.078773][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.131221][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.169272][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.226715][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.283280][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.314294][ T5482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.344806][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.407522][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.526643][ T5482] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.576653][ T5482] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.642151][ T5987] netlink: 165 bytes leftover after parsing attributes in process `syz.1.347'. [ 225.690727][ T5482] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.819736][ T5482] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.343644][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.369094][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.397160][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.422577][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 226.422590][ T27] audit: type=1326 audit(1785768842.952:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.2.349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f462a99e019 code=0x0 [ 226.472452][ T5244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.505994][ T5244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.583075][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.621911][ T5547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.675729][ T5547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.719424][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.861230][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 228.899791][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 228.909103][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 229.056386][ T6036] loop0: detected capacity change from 0 to 256 [ 229.271126][ T6054] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[5482] was attempted by ""[6054] [ 229.879400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.889114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.913171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.940646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.987333][ T5738] device veth0_vlan entered promiscuous mode [ 230.009931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.034953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.137667][ T5738] device veth1_vlan entered promiscuous mode [ 230.178285][ T5738] device veth0_macvtap entered promiscuous mode [ 230.207663][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 230.263285][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 230.548361][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 230.781762][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.848445][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 230.876054][ T6068] loop0: detected capacity change from 0 to 64 [ 230.938441][ T6066] fuse: Bad value for 'fd' [ 230.988198][ T5738] device veth1_macvtap entered promiscuous mode [ 231.018171][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.047954][ T6073] loop6: detected capacity change from 0 to 1024 [ 231.110848][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.155086][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.183368][ T6073] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 231.189618][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.209757][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.221058][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.231863][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.243490][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.254101][ T6073] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.256327][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.275563][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.287185][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.298036][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.308218][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.319199][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.331128][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.338637][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.382224][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.430566][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.471332][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.599359][ T5738] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.623936][ T6073] EXT4-fs error (device loop6): ext4_free_blocks:6220: comm syz.6.364: Freeing blocks not in datazone - block = 0, count = 16 [ 231.640561][ T5738] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.667153][ T5738] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.689871][ T5738] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.745128][ T5482] EXT4-fs (loop6): unmounting filesystem. [ 233.708746][ T5197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.736910][ T5197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.961026][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 234.181839][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.430928][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.585835][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 236.478375][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.377'. [ 238.039988][ T6139] xt_TPROXY: Can be used only with -p tcp or -p udp [ 238.329453][ T6140] loop6: detected capacity change from 0 to 512 [ 238.339634][ T6140] EXT4-fs: Ignoring removed oldalloc option [ 238.345765][ T6140] EXT4-fs: Ignoring removed bh option [ 238.521374][ T6140] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 238.647524][ T6140] EXT4-fs (loop6): 1 truncate cleaned up [ 238.653639][ T6140] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 239.001564][ T5482] EXT4-fs (loop6): unmounting filesystem. [ 241.850424][ T6184] ubi: mtd0 is already attached to ubi0 [ 241.989002][ T6184] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 242.009728][ T6184] UBIFS error (pid: 6184): cannot open "ubi0_0", error -19 [ 243.098148][ T6200] device syzkaller0 entered promiscuous mode [ 243.491140][ T6199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.392'. [ 253.069166][ T6275] netlink: 28 bytes leftover after parsing attributes in process `syz.7.408'. [ 255.840693][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.855433][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.247288][ T6307] loop6: detected capacity change from 0 to 4096 [ 256.283057][ T6307] EXT4-fs: inline encryption not supported [ 256.315220][ T6307] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 256.374287][ T6307] EXT4-fs (loop6): Test dummy encryption mode enabled [ 256.426511][ T6307] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 256.445731][ T6307] System zones: 0-5 [ 256.494516][ T6307] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 257.137923][ T4288] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 257.391152][ T5482] EXT4-fs (loop6): unmounting filesystem. [ 257.535312][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 260.260307][ T6375] netlink: 28 bytes leftover after parsing attributes in process `syz.6.425'. [ 260.873105][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 263.883703][ T6421] loop0: detected capacity change from 0 to 4096 [ 264.746117][ T6421] ntfs3: loop0: failed to replay log file. Can't mount rw! [ 269.552366][ T6456] netlink: 'syz.6.450': attribute type 1 has an invalid length. [ 269.977359][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 270.012064][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 270.088989][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 270.206726][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 270.281639][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 270.437035][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 270.465351][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 277.201028][ T6535] netlink: 'syz.0.469': attribute type 11 has an invalid length. [ 278.036441][ T6540] netlink: 24 bytes leftover after parsing attributes in process `syz.6.468'. [ 278.281771][ T6547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.430166][ T6535] device wlan0 entered promiscuous mode [ 282.934835][ T6580] netlink: 128 bytes leftover after parsing attributes in process `syz.1.477'. [ 282.943945][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 282.953301][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 282.962229][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 285.609669][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 285.957021][ T7] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 286.526265][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.597134][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.613697][ T7] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 287.318324][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.330845][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.339896][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.348023][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.355541][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 287.362962][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.413693][ T7] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 287.542356][ T7] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 287.609677][ T7] usb 7-1: Manufacturer: syz [ 287.621766][ T7] usb 7-1: config 0 descriptor?? [ 287.914489][ T6641] kvm [6640]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800 [ 288.011641][ T6641] kvm [6640]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 288.069840][ T7] usbhid 7-1:0.0: can't add hid device: -71 [ 288.075885][ T7] usbhid: probe of 7-1:0.0 failed with error -71 [ 288.162362][ T7] usb 7-1: USB disconnect, device number 2 [ 289.067433][ T6628] chnl_net:caif_netlink_parms(): no params data found [ 289.228729][ T6628] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.289671][ T6628] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.298859][ T6628] device bridge_slave_0 entered promiscuous mode [ 289.352367][ T6628] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.365764][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.390882][ T6628] device bridge_slave_1 entered promiscuous mode [ 289.439862][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 289.457437][ T6628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.485966][ T6628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.581399][ T6628] team0: Port device team_slave_0 added [ 289.597043][ T6628] team0: Port device team_slave_1 added [ 289.659766][ T6628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.666782][ T6628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.709596][ T6628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.801549][ T6628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.822390][ T6628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.873440][ T6628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.982669][ T6628] device hsr_slave_0 entered promiscuous mode [ 289.995662][ T6628] device hsr_slave_1 entered promiscuous mode [ 290.238353][ T4796] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.256707][ T6628] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 290.268494][ T6628] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 290.278673][ T6628] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 290.289027][ T6628] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 290.326995][ T4796] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.404378][ T6628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.432390][ T4796] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.452767][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 290.464477][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.476853][ T6628] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.490387][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 290.502570][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.512462][ T4513] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.519719][ T4513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.558310][ T4796] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.572776][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.581711][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.590910][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.599440][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.606607][ T4513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.615965][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.628979][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.658152][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.678318][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.687565][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.696576][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.706487][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 290.716054][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 290.725291][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.745705][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.756350][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.767678][ T6628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.218886][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.226598][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 291.246680][ T6628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.519710][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 291.867989][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 291.887127][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.021015][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.029441][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.045656][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 292.056446][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 292.072179][ T6628] device veth0_vlan entered promiscuous mode [ 292.102236][ T6628] device veth1_vlan entered promiscuous mode [ 292.124930][ T4796] device hsr_slave_0 left promiscuous mode [ 292.137595][ T4796] device hsr_slave_1 left promiscuous mode [ 292.145517][ T4796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.153336][ T4796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.170215][ T4796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.177870][ T4796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.186386][ T4796] device bridge_slave_1 left promiscuous mode [ 292.193689][ T4796] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.207577][ T4796] device bridge_slave_0 left promiscuous mode [ 292.215580][ T4796] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.246686][ T4796] device veth1_macvtap left promiscuous mode [ 292.256884][ T4796] device veth0_macvtap left promiscuous mode [ 292.263681][ T4796] device veth1_vlan left promiscuous mode [ 292.269483][ T4796] device veth0_vlan left promiscuous mode [ 292.855644][ T4796] team0 (unregistering): Port device team_slave_1 removed [ 292.905214][ T4796] team0 (unregistering): Port device team_slave_0 removed [ 292.949284][ T4796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.001414][ T4796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.375679][ T4796] bond0 (unregistering): Released all slaves [ 293.508848][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 293.518954][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 293.538181][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.551300][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.563748][ T6628] device veth0_macvtap entered promiscuous mode [ 293.574599][ T6628] device veth1_macvtap entered promiscuous mode [ 293.600651][ T49] Bluetooth: hci3: command 0x040f tx timeout [ 293.626277][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.643387][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.653997][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.664643][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.674899][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.685716][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.697397][ T6628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.715942][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.726737][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.737115][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.747762][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.757955][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.768459][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.788229][ T6628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.797403][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 293.806302][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.815441][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.824479][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.833763][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 293.842447][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.855701][ T6628] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.865509][ T6628] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.874351][ T6628] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.885394][ T6628] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.006659][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.018753][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.046026][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 294.066069][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.073984][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.084217][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 294.257742][ T6720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.258316][ T6720] netlink: 'syz.6.502': attribute type 21 has an invalid length. [ 295.613866][ T6750] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 295.679691][ T49] Bluetooth: hci3: command 0x0419 tx timeout [ 295.952688][ T6763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.064964][ T6762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.881533][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 299.724372][ T6803] syz.8.511 (6803) used greatest stack depth: 17808 bytes left [ 300.709374][ T4319] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 300.925072][ T4319] usb 1-1: not running at top speed; connect to a high speed hub [ 300.997357][ T4319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.015153][ T4319] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 301.663176][ T4319] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 301.690600][ T49] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 301.699425][ T49] Bluetooth: hci1: Injecting HCI hardware error event [ 301.713326][ T4288] Bluetooth: hci1: hardware error 0x00 [ 301.729635][ T4319] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 301.775381][ T4319] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.806362][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.829093][ T4319] usb 1-1: Product: syz [ 301.836312][ T4319] usb 1-1: Manufacturer: syz [ 301.843657][ T4319] usb 1-1: SerialNumber: syz [ 303.209667][ T4319] usb 1-1: 0:2 : does not exist [ 303.230018][ T4319] usb 1-1: USB disconnect, device number 3 [ 303.731121][ T6860] loop0: detected capacity change from 0 to 512 [ 304.622317][ T4288] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 304.628980][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 304.659005][ T6860] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 304.700582][ T6860] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 304.936760][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 304.972674][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.180923][ T6834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.267062][ T6834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.987620][ T6834] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.005321][ T6834] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.017999][ T6834] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.033426][ T6834] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.083763][ T27] audit: type=1800 audit(1785768924.612:108): pid=6883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.543" name="bus" dev="ramfs" ino=46223 res=0 errno=0 [ 308.196071][ T6875] netlink: 'syz.8.529': attribute type 10 has an invalid length. [ 308.227978][ T6875] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 314.614456][ T6976] loop8: detected capacity change from 0 to 512 [ 315.245056][ T6976] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 315.326465][ T6971] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 315.390081][ T6976] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 316.261050][ T6628] EXT4-fs (loop8): unmounting filesystem. [ 317.202202][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.211317][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.223214][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.550'. [ 317.235268][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.550'. [ 317.946311][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'. [ 319.638856][ T7007] team0: Port device team_slave_0 removed [ 319.684858][ T7013] netlink: 12 bytes leftover after parsing attributes in process `syz.8.561'. [ 320.046603][ T7041] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 320.074319][ T7043] loop8: detected capacity change from 0 to 512 [ 320.106330][ T7043] ext4: Unknown parameter 'appraise_type' [ 320.922693][ T7059] loop6: detected capacity change from 0 to 512 [ 320.943070][ T7059] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 321.487269][ T7059] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 322.346853][ T5482] EXT4-fs (loop6): unmounting filesystem. [ 323.212117][ T7069] netlink: 'syz.0.574': attribute type 4 has an invalid length. [ 323.220217][ T7069] netlink: 17 bytes leftover after parsing attributes in process `syz.0.574'. [ 333.051655][ T7135] loop8: detected capacity change from 0 to 1024 [ 333.106021][ T7135] hfsplus: unable to parse mount options [ 334.343366][ T7124] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 335.397883][ T7160] device syzkaller0 entered promiscuous mode [ 337.532415][ T4287] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 337.541845][ T4287] Bluetooth: hci3: Injecting HCI hardware error event [ 337.554775][ T4288] Bluetooth: hci3: hardware error 0x00 [ 340.289958][ T4288] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 340.668407][ T7232] loop0: detected capacity change from 0 to 512 [ 340.752769][ T7232] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 340.788990][ T7232] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 340.808102][ T7232] System zones: 1-12 [ 340.833311][ T7232] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.619: bad orphan inode 16 [ 340.853544][ T7232] ext4_test_bit(bit=15, block=4) = 0 [ 340.858967][ T7232] EXT4-fs (loop0): 1 orphan inode deleted [ 340.865048][ T7232] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 342.030504][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 342.799289][ T7257] loop0: detected capacity change from 0 to 512 [ 342.830697][ T7257] EXT4-fs: Ignoring removed orlov option [ 342.842664][ T7257] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 342.928297][ T7262] netlink: 92 bytes leftover after parsing attributes in process `syz.1.607'. [ 342.949027][ T7257] EXT4-fs (loop0): Test dummy encryption mode enabled [ 343.027940][ T7257] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 343.566539][ T7257] EXT4-fs (loop0): 1 truncate cleaned up [ 343.573700][ T7257] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 345.826210][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 345.969889][ T7284] netlink: 'syz.0.621': attribute type 1 has an invalid length. [ 345.992670][ T7284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.074535][ T7284] bond1: (slave veth5): Enslaving as an active interface with a down link [ 346.412157][ T7288] device bond1 entered promiscuous mode [ 346.454893][ T7284] device macvlan2 entered promiscuous mode [ 346.502283][ T7284] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 347.998432][ T7307] loop8: detected capacity change from 0 to 32768 [ 348.091362][ T7307] JBD2: Ignoring recovery information on journal [ 348.169166][ T7307] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 348.278912][ T7315] Set syz1 is full, maxelem 1029 reached [ 348.596921][ T6628] ocfs2: Unmounting device (7,8) on (node local) [ 350.508015][ T7340] loop6: detected capacity change from 0 to 2048 [ 350.656151][ T7340] Alternate GPT is invalid, using primary GPT. [ 350.774816][ T7340] loop6: p2 p3 p7 [ 351.384294][ T3638] Alternate GPT is invalid, using primary GPT. [ 351.424864][ T3638] loop6: p2 p3 p7 [ 352.698366][ T7369] device syzkaller0 entered promiscuous mode [ 352.717714][ T7373] bridge0: port 3(erspan0) entered blocking state [ 352.724813][ T7373] bridge0: port 3(erspan0) entered disabled state [ 352.732510][ T7373] device erspan0 entered promiscuous mode [ 352.741857][ T7373] bridge0: port 3(erspan0) entered blocking state [ 352.748807][ T7373] bridge0: port 3(erspan0) entered forwarding state [ 353.529851][ T7239] udevd[7239]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 353.559408][ T7376] udevd[7376]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 353.572700][ T7356] udevd[7356]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 353.689748][ T7394] futex_wake_op: syz.8.641 tries to shift op by 144; fix this program [ 354.109993][ T7396] loop0: detected capacity change from 0 to 32768 [ 354.225512][ T7396] JBD2: Ignoring recovery information on journal [ 354.548092][ T7396] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 354.601266][ T7239] udevd[7239]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 354.618417][ T7124] udevd[7124]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 354.904484][ T7356] udevd[7356]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 355.938390][ T7] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 356.159683][ T7] usb 9-1: Using ep0 maxpacket: 32 [ 356.166747][ T7] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.287092][ T7] usb 9-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 358.172550][ T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.198172][ T7] usb 9-1: config 0 descriptor?? [ 358.255920][ T7] usb 9-1: can't set config #0, error -71 [ 358.294942][ T7] usb 9-1: USB disconnect, device number 2 [ 359.816015][ T4274] ocfs2: Unmounting device (7,0) on (node local) [ 360.581080][ T7456] netlink: 'syz.2.656': attribute type 4 has an invalid length. [ 361.849355][ T7469] loop0: detected capacity change from 0 to 512 [ 362.226446][ T7469] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 362.925090][ T7469] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 363.341799][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 365.144856][ T7495] tipc: Enabling of bearer rejected, failed to enable media [ 366.498203][ T7509] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 368.667701][ T7536] loop6: detected capacity change from 0 to 512 [ 368.699999][ T7536] ext4: Unknown parameter 'appraise_type' [ 372.788828][ T7570] device syzkaller0 entered promiscuous mode [ 372.838572][ T7570] tipc: Started in network mode [ 372.879843][ T7570] tipc: Node identity 9ab5b1d936eb, cluster identity 4711 [ 372.903295][ T7570] tipc: Enabled bearer , priority 0 [ 372.916976][ T7569] tipc: Resetting bearer [ 372.990745][ T7569] tipc: Disabling bearer [ 373.295973][ T7593] loop0: detected capacity change from 0 to 64 [ 373.354994][ T7593] hfs: keylen 40 too large [ 374.348741][ T27] audit: type=1800 audit(1785768990.872:109): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.683" name="bus" dev="ramfs" ino=48101 res=0 errno=0 [ 379.108040][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.114493][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.666264][ T7691] No such timeout policy "syz1" [ 386.226497][ T7705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.713'. [ 387.719426][ T7743] 0: reclassify loop, rule prio 0, protocol 700 [ 388.241793][ T7754] syz.1.724 uses obsolete (PF_INET,SOCK_PACKET) [ 389.025185][ T7751] loop6: detected capacity change from 0 to 1024 [ 389.411588][ T7751] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 390.150229][ T7751] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002] [ 390.259816][ T7751] System zones: 0-1, 3-12 [ 390.358072][ T7751] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 391.767859][ T5482] EXT4-fs (loop6): unmounting filesystem. [ 392.488357][ T7814] tipc: Enabling of bearer rejected, failed to enable media [ 393.885075][ T7828] loop6: detected capacity change from 0 to 1764 [ 393.924811][ T7828] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 395.621700][ T7857] loop6: detected capacity change from 0 to 256 [ 395.628912][ T7857] exfat: Deprecated parameter 'utf8' [ 395.634423][ T7857] exfat: Deprecated parameter 'namecase' [ 395.640316][ T7857] exfat: Deprecated parameter 'utf8' [ 395.675306][ T7857] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 395.732432][ T7857] exfat filesystem being mounted at /71/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 396.062994][ T7869] syz.6.743: attempt to access beyond end of device [ 396.062994][ T7869] loop6: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 396.080380][ T7869] syz.6.743: attempt to access beyond end of device [ 396.080380][ T7869] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 396.102646][ T7869] [syz.6.743/7869] FS: loop6 File: /file1 would truncate fibmap result [ 396.141560][ T27] audit: type=1800 audit(3933252660.624:110): pid=7869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.743" name="file1" dev="loop6" ino=1048672 res=0 errno=0 [ 396.884193][ T7875] vivid-001: disconnect [ 396.974267][ T7871] vivid-001: reconnect [ 398.687920][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 398.752296][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.766101][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.762023][ T7959] kvm [7958]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x1 [ 408.883744][ T7959] kvm [7958]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x80 [ 408.901518][ T7959] kvm [7958]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x81 [ 415.082514][ T8033] device syzkaller0 entered promiscuous mode [ 418.225059][ T8062] o2cb: This node has not been configured. [ 418.231382][ T8062] o2cb: Cluster check failed. Fix errors before retrying. [ 418.238792][ T8062] (syz.6.788,8062,1):user_dlm_register:674 ERROR: status = -22 [ 418.246546][ T8062] (syz.6.788,8062,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 418.935342][ T8069] loop6: detected capacity change from 0 to 512 [ 419.007588][ T8069] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 419.080712][ T8066] kvm [8063]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100008099 [ 419.118907][ T8066] kvm [8063]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8001000040d6 [ 419.136013][ T8069] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 419.160606][ T8066] kvm [8063]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x280000006883 [ 419.259907][ T8069] EXT4-fs (loop6): 1 truncate cleaned up [ 419.265610][ T8069] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 419.274828][ T8066] kvm [8063]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 420.303393][ T5482] EXT4-fs (loop6): unmounting filesystem. [ 420.629375][ T8098] loop0: detected capacity change from 0 to 512 [ 420.691270][ T8098] EXT4-fs: Ignoring removed nobh option [ 420.696881][ T8098] EXT4-fs: Ignoring removed nobh option [ 420.758535][ T8098] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 420.813223][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'. [ 420.848819][ T8098] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 420.862774][ T8098] System zones: 1-12 [ 420.867791][ T8098] EXT4-fs (loop0): orphan cleanup on readonly fs [ 420.874803][ T8098] EXT4-fs error (device loop0): __ext4_iget:5102: inode #11: block 1042: comm syz.0.790: invalid block [ 420.888434][ T8098] EXT4-fs (loop0): Remounting filesystem read-only [ 420.896637][ T8098] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.790: couldn't read orphan inode 11 (err -117) [ 420.912619][ T8098] EXT4-fs (loop0): Remounting filesystem read-only [ 420.919187][ T8098] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 420.970110][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 422.123800][ T8127] loop6: detected capacity change from 0 to 4096 [ 422.195859][ T8127] EXT4-fs (loop6): Test dummy encryption mode enabled [ 422.255902][ T8127] EXT4-fs (loop6): DAX unsupported by block device. [ 426.412827][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 426.607668][ T7] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 426.668350][ T7] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 426.778781][ T7] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 426.871120][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.909111][ T7] usb 1-1: Product: syz [ 426.922185][ T7] usb 1-1: Manufacturer: syz [ 426.927394][ T7] usb 1-1: SerialNumber: syz [ 427.092023][ T7] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 427.140351][ T7] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 427.215209][ T7] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 427.292938][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.6.815'. [ 427.421680][ T8187] bridge1: port 1(veth3) entered blocking state [ 427.442474][ T8187] bridge1: port 1(veth3) entered disabled state [ 427.469397][ T8187] device veth3 entered promiscuous mode [ 427.542903][ T8185] bridge1: port 2(veth0_to_bond) entered blocking state [ 427.589767][ T8185] bridge1: port 2(veth0_to_bond) entered disabled state [ 427.608352][ T8185] device veth0_to_bond entered promiscuous mode [ 427.652572][ T8192] bridge1: port 3(veth5) entered blocking state [ 427.658966][ T8192] bridge1: port 3(veth5) entered disabled state [ 427.738465][ T8192] device veth5 entered promiscuous mode [ 428.033693][ T8204] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6628] was attempted by ""[8204] [ 431.438279][ T8241] "syz.1.828" (8241) uses obsolete ecb(arc4) skcipher [ 431.619130][ T8169] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 431.662076][ T8169] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 431.684555][ T7] usb 1-1: USB disconnect, device number 4 [ 431.701340][ T7] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 431.764579][ T8248] syz.1.828 sent an empty control message without MSG_MORE. [ 432.378596][ T7] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 432.523181][ T7] ti_usb_3410_5052 1-1:2.0: device disconnected [ 440.142406][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.150882][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.234912][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'. [ 440.320416][ T4321] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 440.342507][ T8323] bridge1: port 1(veth7) entered blocking state [ 440.359222][ T8323] bridge1: port 1(veth7) entered disabled state [ 440.392623][ T8323] device veth7 entered promiscuous mode [ 440.413174][ T8319] bridge1: port 2(veth0_to_bond) entered blocking state [ 440.429007][ T8319] bridge1: port 2(veth0_to_bond) entered disabled state [ 440.446216][ T8319] device veth0_to_bond entered promiscuous mode [ 440.511152][ T4321] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 440.539808][ T4321] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 440.553551][ T8323] bridge1: port 3(veth9) entered blocking state [ 440.569676][ T8323] bridge1: port 3(veth9) entered disabled state [ 440.581769][ T4321] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 440.598901][ T8323] device veth9 entered promiscuous mode [ 440.607930][ T4321] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.628125][ T4321] usb 9-1: Product: syz [ 440.641962][ T4321] usb 9-1: Manufacturer: syz [ 440.656878][ T4321] usb 9-1: SerialNumber: syz [ 440.696350][ T4321] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 440.750194][ T4321] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 440.804940][ T4321] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 443.931068][ T8310] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 443.956794][ T8310] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 443.989749][ T8310] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 444.009861][ T8310] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 444.106065][ T7] usb 9-1: USB disconnect, device number 3 [ 444.149948][ T7] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 444.336331][ T7] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 444.347635][ T7] ti_usb_3410_5052 9-1:2.0: device disconnected [ 452.249996][ T128] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 452.469883][ T128] usb 7-1: Using ep0 maxpacket: 16 [ 452.515526][ T128] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 452.610259][ T128] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.685022][ T128] usb 7-1: Product: syz [ 452.745973][ T128] usb 7-1: Manufacturer: syz [ 452.769982][ T128] usb 7-1: SerialNumber: syz [ 453.280275][ T8471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.299950][ T8471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.342689][ T128] snd-usb-audio: probe of 7-1:1.0 failed with error -71 [ 453.381362][ T128] usb 7-1: USB disconnect, device number 3 [ 455.189146][ T8532] netlink: 12 bytes leftover after parsing attributes in process `syz.8.874'. [ 455.259763][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.6.873'. [ 455.272552][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.6.873'. [ 455.902934][ T8532] bridge1: port 1(veth3) entered blocking state [ 455.929638][ T8532] bridge1: port 1(veth3) entered disabled state [ 455.938520][ T8532] device veth3 entered promiscuous mode [ 455.986753][ T8541] bridge1: port 2(veth0_to_bond) entered blocking state [ 456.040001][ T8541] bridge1: port 2(veth0_to_bond) entered disabled state [ 456.048158][ T8541] device veth0_to_bond entered promiscuous mode [ 456.097573][ T8546] bridge1: port 3(veth5) entered blocking state [ 456.109022][ T8546] bridge1: port 3(veth5) entered disabled state [ 456.159310][ T8546] device veth5 entered promiscuous mode [ 456.552467][ T8559] loop0: detected capacity change from 0 to 512 [ 456.955460][ T8559] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 458.079848][ T27] audit: type=1800 audit(3933252722.604:111): pid=8559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.880" name=08 dev="loop0" ino=18 res=0 errno=0 [ 458.316042][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 462.913078][ T8614] loop6: detected capacity change from 0 to 2048 [ 462.989216][ T8614] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 463.126725][ T8614] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 464.802412][ T5482] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 465.168365][ T5482] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 466.082045][ T8654] MPTCP: kernel_bind error, err=-99 [ 466.601439][ T4392] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.970039][ T4392] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.217629][ T4392] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.377274][ T4392] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.576463][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 468.592203][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 468.602430][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 468.611767][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 468.619384][ T49] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 468.628329][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 468.736565][ T4392] tipc: Left network mode [ 468.921704][ T8688] chnl_net:caif_netlink_parms(): no params data found [ 469.047122][ T8688] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.054447][ T8688] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.068995][ T8688] device bridge_slave_0 entered promiscuous mode [ 469.113202][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.128165][ T8688] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.137126][ T8688] device bridge_slave_1 entered promiscuous mode [ 469.218509][ T8688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.233751][ T8688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.286542][ T8688] team0: Port device team_slave_0 added [ 469.295205][ T8688] team0: Port device team_slave_1 added [ 469.320493][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.327476][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.353909][ T8688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.387282][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.394631][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.421335][ T8688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.492056][ T8688] device hsr_slave_0 entered promiscuous mode [ 469.499163][ T8688] device hsr_slave_1 entered promiscuous mode [ 469.512740][ T8688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.524055][ T8688] Cannot create hsr debugfs directory [ 469.962069][ T8688] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 469.982247][ T8688] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 469.992799][ T8688] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 470.014527][ T4392] device veth5 left promiscuous mode [ 470.032268][ T4392] bridge1: port 3(veth5) entered disabled state [ 470.040794][ T4392] device veth0_to_bond left promiscuous mode [ 470.046970][ T4392] bridge1: port 2(veth0_to_bond) entered disabled state [ 470.055852][ T4392] device veth3 left promiscuous mode [ 470.061573][ T4392] bridge1: port 1(veth3) entered disabled state [ 470.073806][ T4392] device hsr_slave_0 left promiscuous mode [ 470.083976][ T4392] device hsr_slave_1 left promiscuous mode [ 470.090933][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.098389][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.106786][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.119742][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.132240][ T4392] device bridge_slave_1 left promiscuous mode [ 470.138485][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.149692][ T4392] device bridge_slave_0 left promiscuous mode [ 470.155994][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.189521][ T4392] device veth1_macvtap left promiscuous mode [ 470.195617][ T4392] device veth0_macvtap left promiscuous mode [ 470.202206][ T4392] device veth1_vlan left promiscuous mode [ 470.208070][ T4392] device veth0_vlan left promiscuous mode [ 470.732777][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 471.011409][ T4392] team0 (unregistering): Port device team_slave_1 removed [ 471.065185][ T4392] team0 (unregistering): Port device team_slave_0 removed [ 471.114772][ T4392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.167652][ T4392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.553074][ T4392] bond0 (unregistering): Released all slaves [ 471.676661][ T8688] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 471.795727][ T8688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.815553][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 471.824651][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 471.835103][ T8688] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.858975][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 471.880372][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 471.896405][ T4691] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.903600][ T4691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.916881][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 471.936686][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 471.945993][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 471.955263][ T4691] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.962602][ T4691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.973918][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 471.983095][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 472.031777][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 472.043319][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 472.053805][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 472.074753][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 472.095051][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 472.122739][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 472.143936][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.155482][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 472.164409][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 472.175305][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 472.476038][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 472.485349][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 472.499037][ T8688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.800536][ T49] Bluetooth: hci4: command 0x041b tx timeout [ 472.931969][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 472.946241][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 472.986576][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 473.000724][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 473.011342][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 473.028587][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 473.043119][ T8688] device veth0_vlan entered promiscuous mode [ 473.060132][ T8688] device veth1_vlan entered promiscuous mode [ 473.096765][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 473.106468][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 473.124812][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 473.140256][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 473.154630][ T8688] device veth0_macvtap entered promiscuous mode [ 473.172639][ T8688] device veth1_macvtap entered promiscuous mode [ 473.197290][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.212774][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.224369][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.240860][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.255692][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.265790][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 473.275884][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 473.287527][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 473.298783][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 473.316154][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.328548][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.346005][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.356577][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.382410][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.397394][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 473.406985][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 473.419010][ T8688] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.429077][ T8688] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.444516][ T8688] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.455871][ T8688] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.562855][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.590618][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.618977][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 473.637432][ T5197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.645718][ T5197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.656524][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 473.872225][ T8804] netlink: 'syz.9.903': attribute type 4 has an invalid length. [ 473.880149][ T8804] netlink: 17 bytes leftover after parsing attributes in process `syz.9.903'. [ 474.956556][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 475.224301][ T8808] loop0: detected capacity change from 0 to 128 [ 475.652693][ T8808] hpfs: hpfs_map_sector(): read error [ 476.056591][ T8836] loop9: detected capacity change from 0 to 4096 [ 476.154604][ T8836] ntfs3: loop9: failed to replay log file. Can't mount rw! [ 476.263970][ T8800] loop0: detected capacity change from 0 to 8192 [ 476.304053][ T8800] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 476.389729][ T8800] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 476.447514][ T8800] REISERFS (device loop0): using ordered data mode [ 476.455728][ T8800] reiserfs: using flush barriers [ 476.482546][ T8800] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 476.544536][ T8800] REISERFS (device loop0): checking transaction log (loop0) [ 476.599749][ T8800] REISERFS (device loop0): Using r5 hash to sort names [ 476.828899][ T8800] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 476.851930][ T8800] reiserfs filesystem being mounted at /192/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 478.025648][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 478.879735][ T128] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 479.105115][ T128] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 479.252576][ T128] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.541767][ T128] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.552272][ T128] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 479.567187][ T128] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 479.659506][ T128] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 480.070820][ T128] usb 9-1: Manufacturer: syz [ 480.149471][ T128] usb 9-1: config 0 descriptor?? [ 480.658381][ T8876] device bond_slave_0 entered promiscuous mode [ 480.666713][ T8876] device bond_slave_1 entered promiscuous mode [ 480.686220][ T8876] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 480.705933][ T8876] bond1: (slave macvlan2): making interface the new active one [ 480.718122][ T8876] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 480.842446][ T128] usbhid 9-1:0.0: can't add hid device: -71 [ 480.869551][ T128] usbhid: probe of 9-1:0.0 failed with error -71 [ 481.060818][ T8888] netlink: 'syz.2.921': attribute type 4 has an invalid length. [ 481.068517][ T8888] netlink: 17 bytes leftover after parsing attributes in process `syz.2.921'. [ 482.019942][ T128] usb 9-1: USB disconnect, device number 4 [ 485.798092][ T8921] netlink: 'syz.1.928': attribute type 10 has an invalid length. [ 485.831786][ T8921] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 485.952484][ T8930] loop8: detected capacity change from 0 to 128 [ 485.986814][ T8930] hpfs: hpfs_map_sector(): read error [ 488.296814][ T8930] loop8: detected capacity change from 0 to 8192 [ 489.191162][ T8930] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 489.259863][ T8930] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 489.296326][ T8930] REISERFS (device loop8): using ordered data mode [ 489.378972][ T8930] reiserfs: using flush barriers [ 489.405476][ T8930] REISERFS warning (device loop8): journal-1256 journal_init: unable to get memory for journal structure [ 489.895460][ T8967] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 491.868391][ T8992] netlink: 'syz.9.948': attribute type 10 has an invalid length. [ 491.891914][ T8992] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 493.351462][ T9013] xt_CT: You must specify a L4 protocol and not use inversions on it [ 493.361199][ T9013] netlink: 'syz.0.951': attribute type 21 has an invalid length. [ 493.679608][ T49] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 493.688776][ T49] Bluetooth: hci4: Injecting HCI hardware error event [ 493.700431][ T4288] Bluetooth: hci4: hardware error 0x00 [ 495.413272][ T9052] loop9: detected capacity change from 0 to 128 [ 495.759759][ T4288] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 495.820107][ T9052] hpfs: hpfs_map_sector(): read error [ 497.979552][ T9047] loop8: detected capacity change from 0 to 256 [ 499.950451][ T9047] vfat filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 500.411668][ T9095] netlink: 'syz.0.962': attribute type 10 has an invalid length. [ 500.425804][ T9095] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 502.758596][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.765195][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.901230][ T9130] device syzkaller0 entered promiscuous mode [ 507.039761][ T4288] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 507.048667][ T4288] Bluetooth: hci2: Injecting HCI hardware error event [ 507.071971][ T4287] Bluetooth: hci2: hardware error 0x00 [ 507.330454][ T9168] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 507.342723][ T9168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 507.368176][ T9168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 507.709355][ T9168] device bridge_slave_0 left promiscuous mode [ 507.994801][ T9168] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.202220][ T9168] device bridge_slave_1 left promiscuous mode [ 508.208524][ T9168] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.263158][ T9168] bond0: (slave bond_slave_0): Releasing backup interface [ 508.294903][ T9168] bond0: (slave bond_slave_1): Releasing backup interface [ 508.407878][ T9168] team0: Port device team_slave_0 removed [ 508.433793][ T9168] team0: Port device team_slave_1 removed [ 508.447670][ T9168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.456113][ T9168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.465582][ T9168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.473822][ T9168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.488739][ T9168] bond0: (slave wlan1): Releasing backup interface [ 508.524462][ T9175] team0: Mode changed to "activebackup" [ 508.684784][ T9187] netlink: 'syz.2.980': attribute type 10 has an invalid length. [ 508.696509][ T9187] device wlan1 entered promiscuous mode [ 508.703463][ T9187] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 511.234753][ T4287] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 512.309526][ T4321] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 512.512488][ T4321] usb 1-1: config 0 has no interfaces? [ 512.521069][ T4321] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 512.658077][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.181344][ T4321] usb 1-1: Product: syz [ 513.263945][ T4321] usb 1-1: Manufacturer: syz [ 513.337257][ T4321] usb 1-1: SerialNumber: syz [ 513.511696][ T4321] usb 1-1: config 0 descriptor?? [ 514.280982][ T4318] usb 1-1: USB disconnect, device number 5 [ 515.962867][ T9273] device syzkaller0 entered promiscuous mode [ 521.443666][ T9320] tipc: Enabled bearer , priority 0 [ 521.491923][ T9323] tipc: Resetting bearer [ 526.981394][ T9379] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 527.526496][ T4287] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 527.535352][ T4287] Bluetooth: hci0: Injecting HCI hardware error event [ 527.551835][ T4288] Bluetooth: hci0: hardware error 0x00 [ 528.645137][ T9381] tipc: Enabling of bearer rejected, failed to enable media [ 528.818144][ T9389] device syzkaller0 entered promiscuous mode [ 530.377921][ T4287] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 530.860140][ T4288] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 533.856356][ T9415] Set syz1 is full, maxelem 6117 reached [ 534.364289][ T9501] device syzkaller0 entered promiscuous mode [ 537.008189][ T9535] device syzkaller0 entered promiscuous mode [ 541.297913][ T9557] netlink: 'syz.1.1050': attribute type 10 has an invalid length. [ 541.618604][ T9557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.647424][ T9557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.711502][ T9564] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 542.289923][ T9557] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 542.413331][ T9557] bond0 (unregistering): Released all slaves [ 548.641792][ T9601] tipc: Enabling of bearer rejected, already enabled [ 550.739016][ T9624] device syzkaller0 left promiscuous mode [ 556.619054][ T9676] device syzkaller0 entered promiscuous mode [ 560.252732][ T9729] vhci_hcd: not connected 4 [ 563.042110][ T9770] o2cb: This node has not been configured. [ 563.048015][ T9770] o2cb: Cluster check failed. Fix errors before retrying. [ 563.055362][ T9770] (syz.1.1087,9770,1):user_dlm_register:674 ERROR: status = -22 [ 563.063086][ T9770] (syz.1.1087,9770,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 563.616563][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.616690][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.207172][ T9761] kvm [9759]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 564.230459][ T9761] kvm [9759]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x180 [ 564.249838][ T9761] kvm [9759]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 564.260327][ T9761] kvm [9759]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x380 [ 570.784317][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 570.808625][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 570.819058][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 570.842103][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 570.851599][ T49] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 570.866150][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 572.362465][ T9800] device erspan0 left promiscuous mode [ 572.368142][ T9800] bridge0: port 3(erspan0) entered disabled state [ 572.409244][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 572.431536][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 572.439240][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 572.470810][ T9800] device bridge_slave_0 left promiscuous mode [ 572.476993][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.506572][ T9800] device bridge_slave_1 left promiscuous mode [ 572.520217][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.538577][ T9800] device veth0_to_bond left promiscuous mode [ 572.545122][ T9800] bridge1: port 2(veth0_to_bond) entered disabled state [ 572.555621][ T9800] bond0: (slave bond_slave_0): Releasing backup interface [ 572.568499][ T9800] bond0: (slave bond_slave_1): Releasing backup interface [ 572.608100][ T9800] team0: Port device team_slave_0 removed [ 572.623797][ T9800] team0: Port device team_slave_1 removed [ 572.634655][ T9800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.642214][ T9800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.651039][ T9800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.658472][ T9800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.672270][ T9800] bond0: (slave wlan1): Releasing backup interface [ 572.686339][ T9800] device veth3 left promiscuous mode [ 572.692333][ T9800] bridge1: port 1(veth3) entered disabled state [ 572.700950][ T9800] device veth5 left promiscuous mode [ 572.706330][ T9800] bridge1: port 3(veth5) entered disabled state [ 572.716476][ T9801] team0: Mode changed to "activebackup" [ 572.909760][ T9839] device bridge_slave_0 left promiscuous mode [ 572.930714][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.959151][ T9839] device bridge_slave_1 left promiscuous mode [ 572.969521][ T4288] Bluetooth: hci5: command 0x0409 tx timeout [ 572.996019][ T9839] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.008312][ T9839] device veth0_to_bond left promiscuous mode [ 573.015004][ T9839] bridge1: port 2(veth0_to_bond) entered disabled state [ 573.024273][ T9839] bond0: (slave bond_slave_0): Releasing backup interface [ 573.743744][ T9839] bond0: (slave bond_slave_1): Releasing backup interface [ 573.794596][ T9839] team0: Port device team_slave_1 removed [ 573.825087][ T9839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.869601][ T9839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.896021][ T9839] bond0: (slave wlan1): Releasing backup interface [ 573.933790][ T9839] bond1: (slave veth5): Releasing active interface [ 573.971488][ T9839] device veth7 left promiscuous mode [ 573.976989][ T9839] bridge1: port 1(veth7) entered disabled state [ 574.040067][ T9839] device veth9 left promiscuous mode [ 574.049720][ T9839] bridge1: port 3(veth9) entered disabled state [ 574.880557][ T9860] o2cb: This node has not been configured. [ 574.886567][ T9860] o2cb: Cluster check failed. Fix errors before retrying. [ 574.893921][ T9860] (syz.0.1110,9860,0):user_dlm_register:674 ERROR: status = -22 [ 574.901774][ T9860] (syz.0.1110,9860,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 575.041233][ T49] Bluetooth: hci5: command 0x041b tx timeout [ 575.501197][ T9811] chnl_net:caif_netlink_parms(): no params data found [ 576.353130][ T9811] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.527599][ T9811] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.556586][ T9811] device bridge_slave_0 entered promiscuous mode [ 576.586821][ T9811] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.615351][ T9811] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.630605][ T9811] device bridge_slave_1 entered promiscuous mode [ 576.834878][ T9485] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.119593][ T4288] Bluetooth: hci5: command 0x040f tx timeout [ 577.908747][ T9896] device bond_slave_0 left promiscuous mode [ 577.916569][ T9896] device bond_slave_1 left promiscuous mode [ 577.923732][ T9896] device wlan1 left promiscuous mode [ 578.187067][ T9896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.218755][ T9896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.481299][ T9896] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.490573][ T9896] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.499783][ T9896] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.508774][ T9896] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.845137][ T9485] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.893062][ T9811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.917886][ T9811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.935100][ T4288] Bluetooth: hci5: command 0x0419 tx timeout [ 580.346430][ T9485] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.426298][ T9923] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.435750][ T9923] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.444554][ T9923] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.453329][ T9923] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.656681][ T9923] team0: Port device vxlan0 added [ 581.999068][ T9811] team0: Port device team_slave_0 added [ 582.146088][ T9485] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.201906][ T9984] tipc: Started in network mode [ 582.210396][ T9984] tipc: Node identity aa31c8c7855d, cluster identity 4711 [ 582.237347][ T9984] tipc: Enabled bearer , priority 0 [ 582.255557][ T9985] device syzkaller0 entered promiscuous mode [ 582.271152][ T9997] device syzkaller0 entered promiscuous mode [ 582.285575][ T9811] team0: Port device team_slave_1 added [ 582.338823][ T9985] tipc: Resetting bearer [ 582.386734][ T9985] tipc: Disabling bearer [ 582.414964][ T9811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.436737][ T9811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.462829][ C0] vkms_vblank_simulate: vblank timer overrun [ 582.564225][ T9811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.595453][ T9811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.751005][ T9811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.144388][T10017] vhci_hcd: not connected 4 [ 583.704498][ T9811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.804520][T10023] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.814195][T10023] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.823617][T10023] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.833041][T10023] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.996043][T10039] device bridge_slave_0 left promiscuous mode [ 588.020250][T10039] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.036411][T10039] device bridge_slave_1 left promiscuous mode [ 588.043169][T10039] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.058927][T10039] bond0: (slave bond_slave_0): Releasing backup interface [ 588.068281][T10039] bond0: (slave bond_slave_1): Releasing backup interface [ 588.104235][T10039] team0: Port device team_slave_0 removed [ 588.117962][T10039] team0: Port device team_slave_1 removed [ 588.137611][T10039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.154355][T10039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.166543][T10039] bond0: (slave wlan1): Releasing backup interface [ 588.179180][T10039] bond1: (slave macvlan2): Releasing active interface [ 588.208489][T10040] team0: Mode changed to "activebackup" [ 588.973038][ T9811] device hsr_slave_0 entered promiscuous mode [ 588.985984][ T9811] device hsr_slave_1 entered promiscuous mode [ 589.126170][ T9811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.180967][ T9811] Cannot create hsr debugfs directory [ 589.227421][T10084] tipc: Enabling of bearer rejected, already enabled [ 594.208521][T10121] loop0: detected capacity change from 0 to 32768 [ 594.336474][T10121] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1154 (10121) [ 595.020256][T10121] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 595.034436][T10121] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 595.051379][T10121] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 595.106556][T10151] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by " [ 595.211590][T10121] BTRFS info (device loop0): use zstd compression, level 3 [ 595.337535][T10121] BTRFS info (device loop0): using free space tree [ 596.715478][T10121] BTRFS error (device loop0): open_ctree failed: -12 [ 597.759021][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1167'. [ 598.353492][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1167'. [ 599.503501][T10245] tipc: Enabling of bearer rejected, failed to enable media [ 599.971072][ T9811] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 600.044880][ T9811] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 600.099880][ T9811] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 600.217186][ T9485] device hsr_slave_0 left promiscuous mode [ 600.223808][ T9485] device hsr_slave_1 left promiscuous mode [ 600.320097][ T9485] device veth1_macvtap left promiscuous mode [ 600.345796][ T9485] device veth0_macvtap left promiscuous mode [ 600.351989][ T9485] device veth1_vlan left promiscuous mode [ 600.370092][ T9485] device veth0_vlan left promiscuous mode [ 601.986392][ T9485] bond0 (unregistering): Released all slaves [ 602.087228][ T9811] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 602.183363][ T9811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.241380][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 602.250527][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 602.268037][ T9811] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.286612][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 602.295425][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 602.304664][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.311870][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.326886][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 602.338623][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 602.357854][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.365071][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.381548][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 602.391043][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 602.430884][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 602.462170][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 602.485556][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 602.510479][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 602.520737][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 602.537444][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 602.548732][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 602.563181][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 602.577083][ T9811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 602.588529][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 602.597854][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 602.620454][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 603.032659][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 603.040626][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 603.054302][ T9811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.409610][ T9485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 603.421360][ T9485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 603.444408][ T9485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 603.457948][ T9485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 603.467179][ T9485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 603.475247][ T9485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 603.486399][ T9811] device veth0_vlan entered promiscuous mode [ 603.504232][ T9811] device veth1_vlan entered promiscuous mode [ 603.528257][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 603.537872][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 603.546186][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 603.556083][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 603.575387][ T9811] device veth0_macvtap entered promiscuous mode [ 603.592419][ T9811] device veth1_macvtap entered promiscuous mode [ 603.615050][ T9811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.623640][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 603.631992][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 603.642356][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 603.656895][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 603.674369][ T9811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.682982][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 603.692834][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 603.705373][ T9811] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.714814][ T9811] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.726074][ T9811] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.738688][ T9811] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.814253][ T9493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.824500][ T9493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.835373][ T9493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 603.875577][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.884484][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.894013][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 610.388211][T10385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1191'. [ 610.463614][T10389] loop4: detected capacity change from 0 to 8 [ 610.720667][T10389] SQUASHFS error: zlib decompression failed, data probably corrupt [ 610.728977][T10389] SQUASHFS error: Failed to read block 0x9b: -5 [ 610.735280][T10389] SQUASHFS error: Unable to read metadata cache entry [99] [ 610.742708][T10389] SQUASHFS error: Unable to read inode 0x127 [ 611.492445][T10397] overlayfs: failed to clone upperpath [ 612.267990][T10408] netlink: 'syz.2.1199': attribute type 49 has an invalid length. [ 613.157446][T10408] device ip6gretap0 entered promiscuous mode [ 614.947238][T10446] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by " [ 617.015361][T10460] befs: (nullb0): invalid magic header [ 620.579575][T10488] netlink: 'syz.1.1222': attribute type 10 has an invalid length. [ 626.885344][T10540] loop4: detected capacity change from 0 to 2048 [ 627.010776][T10540] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 627.134892][T10540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 627.436257][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.444205][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.911599][T10565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.995400][T10198] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 630.281463][T10576] loop8: detected capacity change from 0 to 16 [ 630.431823][T10576] erofs: (device loop8): mounted with root inode @ nid 36. [ 630.823094][T10198] usb 5-1: Using ep0 maxpacket: 8 [ 630.932521][T10198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.945387][T10198] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 630.959287][T10198] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 630.968565][T10198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.979156][T10198] usb 5-1: config 0 descriptor?? [ 631.284416][T10198] usbhid 5-1:0.0: can't add hid device: -71 [ 631.291852][T10198] usbhid: probe of 5-1:0.0 failed with error -71 [ 631.357590][T10198] usb 5-1: USB disconnect, device number 2 [ 632.080055][T10599] device syzkaller0 entered promiscuous mode [ 634.565318][T10621] device syzkaller0 entered promiscuous mode [ 635.832335][T10638] loop4: detected capacity change from 0 to 2048 [ 636.002627][T10638] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 637.251004][T10656] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 1642: i_size: 4096 lbcount: 4608 extent 332+4608 [ 640.436134][T10689] loop4: detected capacity change from 0 to 64 [ 640.679415][T10689] hfs: keylen 40 too large [ 641.138148][T10694] bridge0: port 1(erspan0) entered blocking state [ 641.145123][T10694] bridge0: port 1(erspan0) entered disabled state [ 641.155443][T10694] device erspan0 entered promiscuous mode [ 646.906924][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 646.923293][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 646.932280][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 646.937190][T10756] loop0: detected capacity change from 0 to 512 [ 646.988454][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 646.999883][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 647.009430][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 647.085093][T10756] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 647.239388][T10756] EXT4-fs (loop0): 1 truncate cleaned up [ 647.280298][T10756] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 648.262156][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 648.496769][T10753] chnl_net:caif_netlink_parms(): no params data found [ 648.779388][T10198] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 649.561916][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 649.593820][T10198] usb 1-1: Using ep0 maxpacket: 8 [ 649.601588][T10198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.627670][T10198] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 649.653684][T10198] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 649.704965][T10198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.812142][ T9973] tipc: Left network mode [ 649.814545][T10198] usb 1-1: config 0 descriptor?? [ 649.854058][T10753] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.876475][T10753] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.907721][T10753] device bridge_slave_0 entered promiscuous mode [ 649.953523][T10753] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.983144][T10753] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.049412][T10753] device bridge_slave_1 entered promiscuous mode [ 650.116614][T10753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.018595][T10753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.032520][T10198] usbhid 1-1:0.0: can't add hid device: -71 [ 651.050293][T10198] usbhid: probe of 1-1:0.0 failed with error -71 [ 651.094880][T10198] usb 1-1: USB disconnect, device number 6 [ 651.265231][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 652.233934][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 652.268727][T10753] team0: Port device team_slave_0 added [ 652.341271][T10753] team0: Port device team_slave_1 added [ 652.486900][T10753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.510873][T10753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.526402][T10834] loop0: detected capacity change from 0 to 512 [ 652.576122][T10834] EXT4-fs: inline encryption not supported [ 652.628412][T10753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.644854][T10834] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 652.750528][T10834] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 652.783307][T10753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.787057][T10834] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1282: invalid indirect mapped block 2683928664 (level 1) [ 652.819022][T10834] EXT4-fs (loop0): 1 truncate cleaned up [ 652.829740][T10834] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 652.868038][T10753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.046156][T10753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.795280][ T27] audit: type=1800 audit(3933253426.161:112): pid=10847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1282" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 653.933262][T10753] device hsr_slave_0 entered promiscuous mode [ 653.966814][T10753] device hsr_slave_1 entered promiscuous mode [ 654.007337][T10753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 654.015033][T10753] Cannot create hsr debugfs directory [ 654.734565][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 654.742802][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 656.883025][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 659.680193][T10899] loop0: detected capacity change from 0 to 1764 [ 659.743033][T10899] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 660.315660][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1292'. [ 660.747001][ T9973] device hsr_slave_0 left promiscuous mode [ 660.890635][ T9973] device hsr_slave_1 left promiscuous mode [ 662.955000][ T9973] bond0 (unregistering): Released all slaves [ 666.552450][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 666.716283][T10955] team0: Port device team_slave_0 removed [ 667.125500][T10753] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 667.158091][T10753] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 667.185628][T10753] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 667.220517][T10753] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 667.342294][T10753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.366721][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 667.376215][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 667.388267][T10753] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.400951][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 667.411526][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 667.429343][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.436526][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.474827][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 667.493488][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 667.502410][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 667.512634][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.519857][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.534558][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 667.570680][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 667.581401][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 667.593289][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 667.602950][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 667.614166][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 667.623838][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 667.632866][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 667.644972][T10753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 667.657359][T10753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 667.666431][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 667.675553][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 667.684238][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 667.992718][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 668.007334][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 668.020885][T10753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.419204][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 668.431169][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 668.458495][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 668.469788][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 668.479555][T10753] device veth0_vlan entered promiscuous mode [ 668.487214][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 668.495857][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 668.512737][T10753] device veth1_vlan entered promiscuous mode [ 668.541920][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 668.551861][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 668.560135][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 668.570198][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 668.582385][T10753] device veth0_macvtap entered promiscuous mode [ 668.595462][T10753] device veth1_macvtap entered promiscuous mode [ 668.613747][T10753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.625064][T10753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.641909][T10753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.651502][ T9478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 668.663906][ T9478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 668.672608][ T9478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 668.686624][ T9478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 668.699492][T10753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.715469][T10753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.728316][T10753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.741243][ T9478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 668.750964][ T9478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 668.767777][T10753] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.781440][T10753] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.791580][T10753] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.804810][T10753] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.939135][ T9478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.966259][ T9478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.990680][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 669.007303][ T4796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.017760][ T4796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.028899][ T9478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 671.851510][T11075] [ 671.853892][T11075] ====================================================== [ 671.861276][T11075] WARNING: possible circular locking dependency detected [ 671.868327][T11075] syzkaller #0 Not tainted [ 671.872757][T11075] ------------------------------------------------------ [ 671.879834][T11075] syz.4.1308/11075 is trying to acquire lock: [ 671.885921][T11075] ffff8880239933f0 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 671.897564][T11075] [ 671.897564][T11075] but task is already holding lock: [ 671.905177][T11075] ffff88801df81920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 671.914932][T11075] [ 671.914932][T11075] which lock already depends on the new lock. [ 671.914932][T11075] [ 671.925347][T11075] [ 671.925347][T11075] the existing dependency chain (in reverse order) is: [ 671.934807][T11075] [ 671.934807][T11075] -> #3 (&opts->dep_lock){+.+.}-{3:3}: [ 671.942460][T11075] __mutex_lock+0x12d/0xae0 [ 671.947601][T11075] usbg_make_tpg+0x144/0x580 [ 671.952709][T11075] target_fabric_make_tpg+0xa0/0x6d0 [ 671.958611][T11075] configfs_mkdir+0x511/0x9e0 [ 671.963898][T11075] vfs_mkdir+0x386/0x570 [ 671.968724][T11075] do_mkdirat+0x1d8/0x440 [ 671.973564][T11075] __x64_sys_mkdir+0x6a/0x80 [ 671.978755][T11075] do_syscall_64+0x4c/0xa0 [ 671.983714][T11075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 671.990320][T11075] [ 671.990320][T11075] -> #2 (tpg_instances_lock){+.+.}-{3:3}: [ 671.998340][T11075] __mutex_lock+0x12d/0xae0 [ 672.003375][T11075] usbg_make_tpg+0xf4/0x580 [ 672.008483][T11075] target_fabric_make_tpg+0xa0/0x6d0 [ 672.014280][T11075] configfs_mkdir+0x511/0x9e0 [ 672.019474][T11075] vfs_mkdir+0x386/0x570 [ 672.024229][T11075] do_mkdirat+0x1d8/0x440 [ 672.029073][T11075] __x64_sys_mkdir+0x6a/0x80 [ 672.034176][T11075] do_syscall_64+0x4c/0xa0 [ 672.039112][T11075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 672.045521][T11075] [ 672.045521][T11075] -> #1 (&subsys->su_mutex){+.+.}-{3:3}: [ 672.053331][T11075] __mutex_lock+0x12d/0xae0 [ 672.058363][T11075] configfs_rmdir+0x638/0x980 [ 672.063563][T11075] vfs_rmdir+0x34e/0x4a0 [ 672.068361][T11075] do_rmdir+0x29a/0x5c0 [ 672.073058][T11075] __x64_sys_rmdir+0x45/0x50 [ 672.078264][T11075] do_syscall_64+0x4c/0xa0 [ 672.083205][T11075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 672.089618][T11075] [ 672.089618][T11075] -> #0 (&sb->s_type->i_mutex_key#21){++++}-{3:3}: [ 672.098391][T11075] __lock_acquire+0x2d18/0x7c40 [ 672.103787][T11075] lock_acquire+0x1bb/0x4a0 [ 672.108801][T11075] down_write+0x36/0x60 [ 672.113553][T11075] configfs_depend_item_unlocked+0x14f/0x430 [ 672.120313][T11075] usbg_make_tpg+0x1f3/0x580 [ 672.125420][T11075] target_fabric_make_tpg+0xa0/0x6d0 [ 672.131244][T11075] configfs_mkdir+0x511/0x9e0 [ 672.136468][T11075] vfs_mkdir+0x386/0x570 [ 672.141237][T11075] do_mkdirat+0x1d8/0x440 [ 672.146080][T11075] __x64_sys_mkdir+0x6a/0x80 [ 672.151182][T11075] do_syscall_64+0x4c/0xa0 [ 672.156134][T11075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 672.162564][T11075] [ 672.162564][T11075] other info that might help us debug this: [ 672.162564][T11075] [ 672.172785][T11075] Chain exists of: [ 672.172785][T11075] &sb->s_type->i_mutex_key#21 --> tpg_instances_lock --> &opts->dep_lock [ 672.172785][T11075] [ 672.187305][T11075] Possible unsafe locking scenario: [ 672.187305][T11075] [ 672.194742][T11075] CPU0 CPU1 [ 672.200090][T11075] ---- ---- [ 672.205450][T11075] lock(&opts->dep_lock); [ 672.209856][T11075] lock(tpg_instances_lock); [ 672.217037][T11075] lock(&opts->dep_lock); [ 672.223977][T11075] lock(&sb->s_type->i_mutex_key#21); [ 672.229460][T11075] [ 672.229460][T11075] *** DEADLOCK *** [ 672.229460][T11075] [ 672.237603][T11075] 5 locks held by syz.4.1308/11075: [ 672.242882][T11075] #0: ffff8881466fe460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 672.252141][T11075] #1: ffff88805575dfb0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 672.262938][T11075] #2: ffffffff8d4e96b0 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 672.272677][T11075] #3: ffffffff8d8089e8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 672.282422][T11075] #4: ffff88801df81920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 672.292010][T11075] [ 672.292010][T11075] stack backtrace: [ 672.297998][T11075] CPU: 1 PID: 11075 Comm: syz.4.1308 Not tainted syzkaller #0 [ 672.305447][T11075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 672.315505][T11075] Call Trace: [ 672.318780][T11075] [ 672.321704][T11075] dump_stack_lvl+0x188/0x24e [ 672.326385][T11075] ? load_image+0x410/0x410 [ 672.330905][T11075] ? show_regs_print_info+0x12/0x12 [ 672.336118][T11075] ? print_circular_bug+0x12b/0x1a0 [ 672.341317][T11075] check_noncircular+0x296/0x330 [ 672.346257][T11075] ? add_chain_block+0x9b0/0x9b0 [ 672.351195][T11075] ? lockdep_lock+0xf1/0x1f0 [ 672.355787][T11075] ? _find_first_zero_bit+0xd2/0x100 [ 672.361166][T11075] __lock_acquire+0x2d18/0x7c40 [ 672.366022][T11075] ? __sched_text_start+0x8/0x8 [ 672.370869][T11075] ? verify_lock_unused+0x140/0x140 [ 672.376063][T11075] ? __mutex_trylock_common+0x15c/0x260 [ 672.381605][T11075] lock_acquire+0x1bb/0x4a0 [ 672.386108][T11075] ? configfs_depend_item_unlocked+0x14f/0x430 [ 672.392261][T11075] ? __might_sleep+0xd0/0xd0 [ 672.396913][T11075] ? read_lock_is_recursive+0x10/0x10 [ 672.402301][T11075] ? __mutex_trylock_common+0x15c/0x260 [ 672.407847][T11075] ? usbg_make_tpg+0x144/0x580 [ 672.412706][T11075] ? mutex_lock_nested+0x10/0x10 [ 672.417658][T11075] down_write+0x36/0x60 [ 672.421812][T11075] ? configfs_depend_item_unlocked+0x14f/0x430 [ 672.427964][T11075] configfs_depend_item_unlocked+0x14f/0x430 [ 672.433944][T11075] usbg_make_tpg+0x1f3/0x580 [ 672.438531][T11075] ? configfs_mkdir+0x4b5/0x9e0 [ 672.443394][T11075] ? usbg_drop_tport+0x20/0x20 [ 672.448180][T11075] ? vscnprintf+0x80/0x80 [ 672.452551][T11075] ? __kmem_cache_alloc_node+0x19d/0x270 [ 672.458197][T11075] target_fabric_make_tpg+0xa0/0x6d0 [ 672.463501][T11075] ? target_fabric_release_wwn+0xa0/0xa0 [ 672.469178][T11075] configfs_mkdir+0x511/0x9e0 [ 672.473861][T11075] vfs_mkdir+0x386/0x570 [ 672.478151][T11075] do_mkdirat+0x1d8/0x440 [ 672.482475][T11075] ? vfs_mkdir+0x570/0x570 [ 672.486894][T11075] ? getname_flags+0x206/0x500 [ 672.491648][T11075] __x64_sys_mkdir+0x6a/0x80 [ 672.496233][T11075] do_syscall_64+0x4c/0xa0 [ 672.500644][T11075] ? clear_bhb_loop+0x60/0xb0 [ 672.505316][T11075] ? clear_bhb_loop+0x60/0xb0 [ 672.509985][T11075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 672.515883][T11075] RIP: 0033:0x7f24e379e019 [ 672.520295][T11075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.539910][T11075] RSP: 002b:00007f24e45d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 672.548317][T11075] RAX: ffffffffffffffda RBX: 00007f24e3a25fa0 RCX: 00007f24e379e019 [ 672.556285][T11075] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 672.564245][T11075] RBP: 00007f24e383500c R08: 0000000000000000 R09: 0000000000000000 [ 672.572300][T11075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.580265][T11075] R13: 00007f24e3a26038 R14: 00007f24e3a25fa0 R15: 00007ffca12cb1e8 [ 672.588247][T11075] [ 672.753231][T11079] smc: net device lo applied user defined pnetid SYZ0 [ 673.277348][ T4517] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.436561][ T4517] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.535111][ T4517] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.657873][ T4517] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.447772][ T4517] bond2: (slave gretap1): Releasing active interface [ 674.827141][ T4517] device veth5 left promiscuous mode [ 674.832589][ T4517] bridge1: port 3(veth5) entered disabled state [ 674.866843][ T4517] device veth0_to_bond left promiscuous mode [ 674.873765][ T4517] bridge1: port 2(veth0_to_bond) entered disabled state [ 674.881925][ T4517] device veth3 left promiscuous mode [ 674.887592][ T4517] bridge1: port 1(veth3) entered disabled state [ 674.897289][ T4517] device hsr_slave_0 left promiscuous mode [ 674.903872][ T4517] device hsr_slave_1 left promiscuous mode [ 674.911071][ T4517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.918700][ T4517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.929097][ T4517] device bridge_slave_1 left promiscuous mode [ 674.935747][ T4517] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.943936][ T4517] device bridge_slave_0 left promiscuous mode [ 674.950151][ T4517] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.961474][ T4517] team0 (unregistering): Port device vxlan0 removed [ 675.236339][ T4517] bond2 (unregistering): Released all slaves [ 675.257831][ T4517] bond1 (unregistering): (slave geneve2): Releasing active interface [ 675.411139][ T4517] bond1 (unregistering): Released all slaves [ 675.823174][ T4517] team0 (unregistering): Port device team_slave_1 removed [ 676.849345][ T4517] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.914661][ T4517] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.996572][ T4517] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.049256][ T4517] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.745534][ T4517] tipc: Left network mode [ 677.750610][ T4517] tipc: Disabling bearer [ 677.756835][ T4517] tipc: Left network mode [ 678.543919][ T4517] device erspan0 left promiscuous mode [ 678.550891][ T4517] bridge0: port 1(erspan0) entered disabled state [ 679.417510][ T4517] device hsr_slave_0 left promiscuous mode [ 679.424957][ T4517] device hsr_slave_1 left promiscuous mode [ 679.431734][ T4517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.439177][ T4517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.447139][ T4517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.455086][ T4517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.462926][ T4517] device bridge_slave_1 left promiscuous mode [ 679.469132][ T4517] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.477758][ T4517] device bridge_slave_0 left promiscuous mode [ 679.484193][ T4517] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.504223][ T4517] device hsr_slave_0 left promiscuous mode [ 679.510542][ T4517] device hsr_slave_1 left promiscuous mode [ 679.519965][ T4517] device hsr_slave_0 left promiscuous mode [ 679.526430][ T4517] device hsr_slave_1 left promiscuous mode [ 679.534888][ T4517] device veth1_macvtap left promiscuous mode [ 679.541651][ T4517] device veth0_macvtap left promiscuous mode [ 679.547812][ T4517] device veth1_vlan left promiscuous mode [ 679.553623][ T4517] device veth0_vlan left promiscuous mode [ 679.733418][ T4517] team0 (unregistering): Port device team_slave_1 removed [ 679.761601][ T4517] team0 (unregistering): Port device team_slave_0 removed [ 679.791834][ T4517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.823456][ T4517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.867746][ T4517] bond0 (unregistering): Released all slaves [ 679.935109][ T4517] bond1 (unregistering): Released all slaves [ 680.779453][ T4517] bond0 (unregistering): Released all slaves [ 681.099615][ T4517] bond1 (unregistering): Released all slaves