last executing test programs: 27.450947626s ago: executing program 2 (id=15): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x12, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000040000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x9}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6f8, 0x48a21}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x203}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x4c}, 0x1, 0x200000000000000, 0x0, 0x240400d5}, 0x2000c000) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0xc}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, r6, 0x1, 0x5}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 21.666419255s ago: executing program 1 (id=22): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) wait4(r0, 0x0, 0x80000000, &(0x7f0000000240)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 19.680396765s ago: executing program 1 (id=24): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_procfs(r0, &(0x7f0000000000)='net/dev\x00') bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8d90}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) fsopen(0x0, 0x1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x65) mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) 19.568896798s ago: executing program 0 (id=25): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/3, 0x3}, 0x53}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x2, 0x300) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40440d9) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 18.526280665s ago: executing program 1 (id=26): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) close_range(r5, 0xffffffffffffffff, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='clear_refs\x00') syz_mount_image$vfat(&(0x7f0000002100), &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x304982f, 0x0, 0x3, 0x0, &(0x7f0000000240)) 18.228651493s ago: executing program 0 (id=27): socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000100)=""/66, 0x42, &(0x7f0000000340)={0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xca76b41c29be2ae, 0x0) 16.74521601s ago: executing program 2 (id=28): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() setrlimit(0x0, &(0x7f0000000080)={0x9a4, 0x4}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd2(0x42000006, 0x801) socket$kcm(0x2, 0x200000000000001, 0x106) 16.113561957s ago: executing program 0 (id=29): syz_open_dev$vim2m(0x0, 0x40003, 0x2) socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000600)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x8000000000000001, 0x1, 0x2, 0xcc62, 0x9], 0x0, 0x0}, 0x78) msgget(0x1, 0x501) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) socket$inet6(0xa, 0x3, 0x5) r5 = socket$inet(0x2, 0xa, 0x200000) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x80051) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000002a0003050002000000000000180000800c"], 0x28}], 0x1}, 0x14008010) 15.962810651s ago: executing program 1 (id=30): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1", 0x2c}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbfbf", 0xbd}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 14.257009205s ago: executing program 2 (id=31): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xa, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$full(0xffffffffffffff9c, 0x0, 0x80100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) getsockname$packet(r3, 0x0, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x1d, 0x4e60, @rand_addr=0x64010100}, 0x10) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) 14.154211117s ago: executing program 3 (id=32): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) time(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r5, 0x0, r4, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x1b) 12.356603283s ago: executing program 0 (id=33): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11.227652252s ago: executing program 0 (id=35): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x1000) fanotify_mark(r2, 0x105, 0x10000839, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r2, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) 11.208157652s ago: executing program 3 (id=36): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x1eb080, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x21, 0x2, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0xb, 0x32165b32, {}, 0x3, 0x107fffffff, 0x8}}}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003b00010322bc7022fddbdf2508000000a921d2ff139f8eaa0750"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0xc, 0x0, 0x0, 0x0, '\x00', 0xffffffff}, 0x0, [0x40000000, 0x9, 0x4, 0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x8002, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0xe, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0xc, 0x2, 0xfffffffffffffffc, 0x4, 0x0, 0x10000, 0x4, 0xfdfffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20040000000, 0x0, 0x8, 0x80000000, 0xc20, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x3, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x1073, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7, 0x7, 0x20, 0x4, 0xffffffff80000001, 0x2000000000002, 0x4, 0xfffffffffffffffc, 0x4, 0x0, 0x3]}) openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000740)={0x0, 0x0, 0x10, 0x1c53, 0x8}) bind$inet(r3, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 11.159067684s ago: executing program 1 (id=37): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x4, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$netlink(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00', {0x401, 0xf50, 0xd4b6, 0xf}, 0x10, [0x2, 0x2, 0x56, 0x5, 0x8, 0x0, 0x6, 0x7, 0x5, 0x8, 0x5, 0x7, 0x7415, 0x3a, 0x1, 0x2, 0xffff0a37, 0x7, 0x7, 0x8, 0x0, 0x6, 0x5, 0x2, 0xffffffff, 0x6a, 0x8, 0x9, 0x7, 0xff, 0x7, 0xc4b3, 0xd66, 0x9, 0x8000, 0x2, 0x8, 0x4, 0x400, 0xf, 0x4, 0x2, 0xfff, 0x3, 0x7fffffff, 0x6, 0x7, 0x0, 0x4, 0x80, 0x4, 0x1, 0x6, 0x0, 0x80, 0x4, 0x80000001, 0x0, 0x1, 0x49, 0x6, 0x7, 0x4, 0xe], [0x2, 0x101, 0x0, 0x2a3, 0xffff, 0x4, 0x1, 0x8, 0x3, 0x0, 0x9, 0x3, 0x5, 0x8, 0x3, 0xd1, 0x8, 0x2, 0xffffffff, 0x6, 0x6be, 0xfffffffe, 0xc1bb, 0x80000000, 0x10001, 0x8001, 0x0, 0xdf7f, 0xfe5d, 0x6, 0x9, 0x9, 0x800, 0x0, 0x1, 0xa, 0x1c5, 0x9, 0x8, 0x116, 0x3, 0x6, 0x6, 0x447, 0xa, 0x10000, 0xb9, 0x10000, 0x3, 0xf, 0x40, 0x4, 0x5, 0x4, 0x562, 0x8, 0x5, 0xbcf0, 0x3, 0x9, 0x6, 0x6, 0x10], [0xfffffffe, 0xffff, 0x1, 0x5, 0x2, 0x1, 0xfffff800, 0x3, 0x4, 0x6d, 0x2, 0x7f, 0xffff, 0xfffff000, 0xa72f, 0x5, 0xef, 0x383c, 0x10, 0x3e9, 0x8001, 0x2, 0x3ff, 0x0, 0x6, 0xfffffff8, 0x9, 0x7, 0x2, 0x0, 0x72, 0x5e, 0x4, 0x7612, 0x598, 0x400, 0x10001, 0xc9b, 0x4, 0x6, 0xffff, 0x1, 0x2, 0xffffd185, 0x9, 0x7f, 0x4, 0x5, 0x4, 0x8d6, 0x0, 0xead3, 0x0, 0xe70f, 0x4, 0x3, 0x0, 0x81, 0x9, 0x8, 0x9d, 0x5, 0x3, 0x7fffffff], [0x6, 0x2, 0x12, 0x7, 0x8, 0x5, 0x6d0c, 0x8, 0x6, 0xc4d6ad62, 0x7, 0x5, 0x9, 0xb2, 0x1, 0x9, 0x0, 0x200, 0x0, 0x2, 0x2, 0xb, 0x10001, 0xbfe, 0x6, 0x7, 0xc, 0xb90, 0x0, 0x9, 0x6f51eeea, 0x3ff, 0xfffffff7, 0xfffffff9, 0xffffff66, 0x9, 0x590d, 0x1, 0x4, 0x4, 0x3, 0x401, 0xf22, 0x6, 0xe9246ed2, 0x8, 0x8, 0x9, 0x3, 0x5, 0xffff455f, 0x4, 0x8, 0x149, 0x8001, 0x4, 0x418, 0x10000, 0x8, 0x5, 0x100, 0x8, 0x8001, 0x1]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback}, &(0x7f0000000340)=0xc) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.217759424s ago: executing program 1 (id=38): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @mcast2, [0x0, 0xff000000, 0xffffffff, 0xff], [0xff, 0x47066fef753f41fe, 0xff000000, 0xff], 'veth1_to_hsr\x00', 'bond0\x00', {0xff}, {}, 0x87, 0x2, 0x3, 0xa}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x156, 0x0) r3 = dup2(r2, r1) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 8.061620464s ago: executing program 0 (id=39): r0 = fsopen(&(0x7f0000000280)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x68040000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 7.956922556s ago: executing program 3 (id=40): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffe08, &(0x7f0000000040)=0xfffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace(0x4208, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) msgget(0x2, 0x217) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) 6.265944349s ago: executing program 3 (id=41): mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='dirsync'}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f00000024c0)=""/4127, 0x101f}], 0x1, 0x4800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000008c0)={0x84, 0x0, &(0x7f00000006c0)=[@free_buffer, @release, @enter_looper, @acquire_done={0x40106309, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x9, 0x2, 0x20}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/62, 0x3e, 0x2, 0x27}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}, 0x440}, @dead_binder_done], 0x7f, 0x0, &(0x7f00000007c0)="01e2eaaa4ab214ff85b7d8ae1f414f06dd2ba992d7ea6fc0d717515abf243424d3550a401ec0434a10b932264bdb6d37047b996500c5eb96391ce8aa6cfbc9e21eaf0a80a9c25b9ecbe7eb7f8599b953704b2862b92c809f9fda594629a7a90b7496e0b9525adbb948295d44cd84a3f72748ca582993a2671e87d17e1e4027"}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000000000001a00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x2404c804}, 0x2200c414) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x64a, &(0x7f0000000c80)="$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") 3.847950781s ago: executing program 2 (id=42): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8881}, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r3, 0x0, 0x20, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 1.92600661s ago: executing program 3 (id=43): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000001000)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000001200)='1', 0x1) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)="30a1", 0x2) 1.910003341s ago: executing program 2 (id=44): mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f00000024c0)=""/4127, 0x101f}], 0x1, 0x4800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000008c0)={0x84, 0x0, &(0x7f00000006c0)=[@free_buffer, @release, @enter_looper, @acquire_done={0x40106309, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x9, 0x2, 0x20}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/62, 0x3e, 0x2, 0x27}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}, 0x440}, @dead_binder_done], 0x0, 0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000000000001a00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x2404c804}, 0x2200c414) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x64a, &(0x7f0000000c80)="$eJzs3c9rXFsdAPDvvdPkJWl86RMRX1AMuHgFaZrUYtWNbV3YRcGCXYi4aGiSGjq1JUnB1oIJuFBQEHFbpBv/AffSvTsR1J1roYpUFLR0HvfOnWQymV9pMjNJ7ucDkzn33DNzznfunNxz586ZG0BpzWV/0ogPI97eSSJmmtZNR33lXFHu9b+e3c1uSdRq3/5nEkmR1yifFPdni4WJiPjj9YhPVvbXu/Hk6f2laq3uxxEXNx88urjx5OmFtQdL91burfxg8dJXLl9Z+Ori5cWmhr67s8X9jZvf+uwvfvL9L6/+qXohiatxe+xHy9ESx1GZi7l4W4TYnH8mIq5kiTavy0lzCkIotUrxfhyLiE/HTFTypbqZWPv5SBsHDFStElHrLulVADipdG8oq8Y4oHFs399x8O0Bj0qG59W1+gHQbvzZeCjyzPpHDhP5sdHU66TpyKj+2ca5I6g/q+PNs4nnb57NPo89n0P8d2frnDmCejrZ2o6Iz7Tb/knetnN5pFn86Z5j/TQiFiJivGjfNw7RhqQpPYjPYbo5SPzN2yGL/2pxn+Vff8f6Wz/WGnb8AJTTy2vFjnwrW9rd/2Vjj8b4J4rxT/OYcfrwp2Ryo97/7R//Nepv7O8n8nFP2jIOy8Yst9o/5Vhrxt9+duNXneqvj/9mnzduWf2NseAwvNqOmG2J/6dZsMX4J4s/aTP+zYrcudpfHd/88z9udFo36vhrLyI+anv8szsqzVJdzk9eXF2rrizU/+48Zrypjt//4Xu/7VR/+/jfG1C0+2Xbf6pD/E3bP219XPaaPGr/lNutGb+79eJBp/qne27/9O/jSf14s/Ga/nB7c3N9MWI8uVkUKfKXNjfXL3WPNyvTOCebPUcW//kvtO//e97/LVFNNv5l9uHRd+6/7rTuXd7/TSeT39b6bEMnWfzLvbf/vv6f5f2yzzr+893Hn+u0rlv8k4cJDAAAAAAAAEoozc/BJun8TjpN5+fr82U/FVNp9eHG5hdXHz6eiIjz+fchx9JIk/wrIzP15WR1rbqyWHwftrF8qWX5SxHxQUT8ujKZL8/ffVhdHnXwAAAAAAAAAAAAAAAAAAAAcEycLeb/N34T/d+V+vx/oCR6X2Bu3/UfgFNikBeYBI63vP9328W/P7y2AMNl/w/lpf9Deen/UF76P5SX/g/lpf9Deen/UF76PwAAAACcSh98/uVfk4jY+tpkfsuMF+tM+oXTbexApSsDawcwfHo0lNfOqX+DfSidvsb//yt+HHDwzQFGIGmXmQ8Oat07/8u2j9y1ffi2AQAAAAAAAAAAAAB1H33Yef7/weYGAyeNaX9QXoeY/++nA+CE89P/UF6O8YEes/hjotOKXvP/AQAAAAAAAAAAAIAjM53fknS+mAs8HWk6Px/xiYg4F2PJ6lp1ZSEi3o+Iv1TG3suWF0fdaAAAAAAAAAAAAAAAAAAAADhlNp48vb9Ura6sNyf+vy/ndCcaV0HtXbjWR5muia/HAR8VyfBflsmIGPlGGVjiTFNOErGVbflj0bD1jTgezcgTI/7HBAAAAAAAAAAAAAAAAAAAJdQ097i92d8MuUUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMHy71//vkVieqj+gr8J7E6OOEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4mT4OAAD//wdySCI=") 0s ago: executing program 2 (id=45): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0x6}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4050) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts. [ 79.232736][ T5763] cgroup: Unknown subsys name 'net' [ 79.344189][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.051788][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.694579][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.703430][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.711740][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.736619][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.744631][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.752485][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.800771][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.809568][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.817614][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.826227][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.834045][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.843309][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.861537][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.916026][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.919169][ T5084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.931745][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.934330][ T5084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.947482][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.954836][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.963327][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.970869][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.984584][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.002638][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.010642][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.372831][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 83.537944][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 83.587018][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 83.625420][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.633304][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.640849][ T5774] bridge_slave_0: entered allmulticast mode [ 83.648622][ T5774] bridge_slave_0: entered promiscuous mode [ 83.662511][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.669753][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.677161][ T5774] bridge_slave_1: entered allmulticast mode [ 83.684391][ T5774] bridge_slave_1: entered promiscuous mode [ 83.710893][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 83.781827][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.795030][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.878275][ T5774] team0: Port device team_slave_0 added [ 83.896179][ T5774] team0: Port device team_slave_1 added [ 83.950176][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.957875][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.965326][ T5781] bridge_slave_0: entered allmulticast mode [ 83.972871][ T5781] bridge_slave_0: entered promiscuous mode [ 84.004199][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.011403][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.037764][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.058060][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.065054][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.094308][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.106393][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.113590][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.121350][ T5781] bridge_slave_1: entered allmulticast mode [ 84.128802][ T5781] bridge_slave_1: entered promiscuous mode [ 84.138707][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.145878][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.153046][ T5778] bridge_slave_0: entered allmulticast mode [ 84.161025][ T5778] bridge_slave_0: entered promiscuous mode [ 84.201062][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.211164][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.218641][ T5778] bridge_slave_1: entered allmulticast mode [ 84.225776][ T5778] bridge_slave_1: entered promiscuous mode [ 84.274756][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.282202][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.289816][ T5780] bridge_slave_0: entered allmulticast mode [ 84.297886][ T5780] bridge_slave_0: entered promiscuous mode [ 84.309501][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.344169][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.353603][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.363786][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.371100][ T5780] bridge_slave_1: entered allmulticast mode [ 84.378718][ T5780] bridge_slave_1: entered promiscuous mode [ 84.387393][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.415708][ T5774] hsr_slave_0: entered promiscuous mode [ 84.422331][ T5774] hsr_slave_1: entered promiscuous mode [ 84.438833][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.486075][ T5778] team0: Port device team_slave_0 added [ 84.518549][ T5781] team0: Port device team_slave_0 added [ 84.537892][ T5778] team0: Port device team_slave_1 added [ 84.553407][ T5781] team0: Port device team_slave_1 added [ 84.562268][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.610744][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.639880][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.647056][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.673166][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.698521][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.705607][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.731666][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.763136][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.771151][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.797669][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.809626][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.816867][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.829226][ T5776] Bluetooth: hci0: command tx timeout [ 84.843023][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.912668][ T5780] team0: Port device team_slave_0 added [ 84.916207][ T5776] Bluetooth: hci1: command tx timeout [ 84.938367][ T5780] team0: Port device team_slave_1 added [ 85.003836][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.011131][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.037563][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.067811][ T5776] Bluetooth: hci2: command tx timeout [ 85.075930][ T5776] Bluetooth: hci3: command tx timeout [ 85.083256][ T5778] hsr_slave_0: entered promiscuous mode [ 85.090285][ T5778] hsr_slave_1: entered promiscuous mode [ 85.096732][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.104559][ T5778] Cannot create hsr debugfs directory [ 85.112605][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.119757][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.145808][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.204985][ T5781] hsr_slave_0: entered promiscuous mode [ 85.213004][ T5781] hsr_slave_1: entered promiscuous mode [ 85.230668][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.238433][ T5781] Cannot create hsr debugfs directory [ 85.317336][ T5780] hsr_slave_0: entered promiscuous mode [ 85.323952][ T5780] hsr_slave_1: entered promiscuous mode [ 85.332713][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.340772][ T5780] Cannot create hsr debugfs directory [ 85.588191][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.640221][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.650935][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.695981][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.778763][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.797825][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.831238][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.871205][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.915164][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.929813][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.947250][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.967123][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.059527][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.072879][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.087598][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.099625][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.134182][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.161574][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.215284][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.222691][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.251049][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.258270][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.375340][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.454369][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.486440][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.493648][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.528527][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.552136][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.567679][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.574900][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.660987][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.681502][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.694713][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.701954][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.760657][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.767891][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.783406][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.790590][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.820946][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.828187][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.854550][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.906742][ T5776] Bluetooth: hci0: command tx timeout [ 86.998215][ T5776] Bluetooth: hci1: command tx timeout [ 87.093672][ T5774] veth0_vlan: entered promiscuous mode [ 87.138400][ T5774] veth1_vlan: entered promiscuous mode [ 87.146209][ T5776] Bluetooth: hci3: command tx timeout [ 87.155903][ T5776] Bluetooth: hci2: command tx timeout [ 87.257495][ T5774] veth0_macvtap: entered promiscuous mode [ 87.271474][ T5774] veth1_macvtap: entered promiscuous mode [ 87.341785][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.371674][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.433550][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.456043][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.464843][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.502156][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.613898][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.684614][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.737555][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.859959][ T5778] veth0_vlan: entered promiscuous mode [ 87.869537][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.885057][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.924048][ T5778] veth1_vlan: entered promiscuous mode [ 88.012727][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.018899][ T5781] veth0_vlan: entered promiscuous mode [ 88.037954][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.112555][ T5780] veth0_vlan: entered promiscuous mode [ 88.140199][ T5781] veth1_vlan: entered promiscuous mode [ 88.168568][ T5778] veth0_macvtap: entered promiscuous mode [ 88.200611][ T5780] veth1_vlan: entered promiscuous mode [ 88.225441][ T5778] veth1_macvtap: entered promiscuous mode [ 88.320767][ T5781] veth0_macvtap: entered promiscuous mode [ 88.355007][ T5781] veth1_macvtap: entered promiscuous mode [ 88.371576][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.345492][ C0] sched: RT throttling activated [ 90.355713][ T5084] Bluetooth: hci0: command tx timeout [ 90.362481][ T5776] Bluetooth: hci1: command tx timeout [ 90.366119][ T5084] Bluetooth: hci2: command tx timeout [ 90.780975][ T5084] Bluetooth: hci3: command tx timeout [ 90.800726][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.827822][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.911010][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.934283][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.959387][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.971223][ T5844] syz.0.5[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.992684][ T5780] veth0_macvtap: entered promiscuous mode [ 91.026766][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.048217][ T5844] loop0: detected capacity change from 0 to 512 [ 91.055700][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.064462][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.080104][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.100078][ T5780] veth1_macvtap: entered promiscuous mode [ 91.117461][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.133946][ T5844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 91.150463][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.160956][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.175388][ T5844] ext4 filesystem being mounted at /1/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.187136][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.217452][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.303990][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.318613][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.333551][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.348749][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.364347][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.398323][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.414425][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.426630][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.442356][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.464368][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.476505][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.497987][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.512845][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.528064][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.555821][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.564681][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.594338][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.607837][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.618649][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.630005][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.641291][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.652833][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.672208][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.363686][ T27] cfg80211: failed to load regulatory.db [ 92.412350][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.454000][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.473183][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.499379][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.583283][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.628792][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.809352][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.826386][ T5776] Bluetooth: hci1: command tx timeout [ 92.831934][ T51] Bluetooth: hci3: command tx timeout [ 92.837685][ T5084] Bluetooth: hci2: command tx timeout [ 92.843564][ T5786] Bluetooth: hci0: command tx timeout [ 92.862574][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.039192][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.084959][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.163055][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.211711][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.322927][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.351686][ T5855] loop1: detected capacity change from 0 to 128 [ 93.353057][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.884354][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.893033][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.920805][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 94.074418][ T28] audit: type=1326 audit(1785776874.743:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.1.2" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456d79e019 code=0x7ffc0000 [ 94.449844][ T28] audit: type=1326 audit(1785776874.753:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.1.2" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456d79e019 code=0x7ffc0000 [ 94.563194][ T28] audit: type=1326 audit(1785776874.753:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.1.2" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f456d79e019 code=0x7ffc0000 [ 94.751057][ T28] audit: type=1326 audit(1785776874.753:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.1.2" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456d79e019 code=0x7ffc0000 [ 94.805699][ T28] audit: type=1326 audit(1785776874.753:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.1.2" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456d79e019 code=0x7ffc0000 [ 94.945661][ T28] audit: type=1326 audit(1785776874.753:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.1.2" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f456d79e019 code=0x7ffc0000 [ 94.976380][ T28] audit: type=1326 audit(1785776874.753:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.1.2" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456d79e019 code=0x7ffc0000 [ 95.033518][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 95.042502][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 95.743516][ T28] audit: type=1326 audit(1785776874.763:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.1.2" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456d79e019 code=0x7ffc0000 [ 97.081508][ T28] audit: type=1326 audit(1785776874.763:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.1.2" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f456d79e019 code=0x7ffc0000 [ 97.220780][ T28] audit: type=1326 audit(1785776874.763:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.1.2" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456d79e019 code=0x7ffc0000 [ 97.694881][ T5886] Zero length message leads to an empty skb [ 99.736151][ T5892] tty tty4: ldisc open failed (-12), clearing slot 3 [ 99.745117][ T5894] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 100.115954][ T5900] block device autoloading is deprecated and will be removed. [ 101.035686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 104.056726][ T5911] loop3: detected capacity change from 0 to 8192 [ 104.118726][ T5911] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.408555][ T5950] netlink: 'syz.0.25': attribute type 1 has an invalid length. [ 111.302811][ T5955] loop1: detected capacity change from 0 to 512 [ 111.364638][ T5955] EXT4-fs: Ignoring removed bh option [ 111.494280][ T5955] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.26: corrupted in-inode xattr: e_value size too large [ 111.565098][ T5955] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.26: couldn't read orphan inode 15 (err -117) [ 111.586903][ T5955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.716701][ T5962] vlan2: entered allmulticast mode [ 111.721961][ T5962] veth0_vlan: entered allmulticast mode [ 111.930550][ T5962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.713978][ T5963] Config c/1 of g1 needs at least one function. [ 112.886896][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 113.633018][ T5963] udc dummy_udc.0: failed to start g1: -22 [ 113.649956][ T5963] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 113.691345][ T5963] UDC core: g1: couldn't find an available UDC or it's busy [ 115.490383][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.929318][ T5979] syz.0.29 uses obsolete (PF_INET,SOCK_PACKET) [ 123.993119][ T6026] ERROR: device name not specified. [ 124.624900][ T6029] loop2: detected capacity change from 0 to 128 [ 124.652697][ T6029] ======================================================= [ 124.652697][ T6029] WARNING: The mand mount option has been deprecated and [ 124.652697][ T6029] and is ignored by this kernel. Remove the mand [ 124.652697][ T6029] option from the mount to silence this warning. [ 124.652697][ T6029] ======================================================= [ 124.840426][ T6029] EXT4-fs (loop2): Test dummy encryption mode enabled [ 124.900814][ T6029] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.995954][ T6029] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.999923][ T5781] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.835388][ T6046] loop3: detected capacity change from 0 to 1024 [ 127.511714][ T6046] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.528193][ T6046] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #11: comm syz.3.41: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 127.549155][ T6046] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.41: couldn't read orphan inode 11 (err -117) [ 127.564191][ T6046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.857786][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.215088][ T6058] loop2: detected capacity change from 0 to 1024 [ 129.350535][ T6058] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.376272][ T6058] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #11: comm syz.2.44: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 129.399114][ T6058] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.44: couldn't read orphan inode 11 (err -117) [ 129.413027][ T6058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.652565][ T6057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.44'. [ 129.729814][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.757395][ T6061] [ 129.759803][ T6061] ====================================================== [ 129.766862][ T6061] WARNING: possible circular locking dependency detected [ 129.774154][ T6061] syzkaller #0 Not tainted [ 129.778593][ T6061] ------------------------------------------------------ [ 129.785625][ T6061] syz.3.43/6061 is trying to acquire lock: [ 129.791480][ T6061] ffff888148c71fc0 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430 [ 129.803088][ T6061] [ 129.803088][ T6061] but task is already holding lock: [ 129.810488][ T6061] ffff88805e29b120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 129.819585][ T6061] [ 129.819585][ T6061] which lock already depends on the new lock. [ 129.819585][ T6061] [ 129.830005][ T6061] [ 129.830005][ T6061] the existing dependency chain (in reverse order) is: [ 129.839034][ T6061] [ 129.839034][ T6061] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 129.846703][ T6061] __mutex_lock+0x135/0xc80 [ 129.851765][ T6061] tcm_set_name+0x2a/0x90 [ 129.856650][ T6061] function_make+0x199/0x350 [ 129.861784][ T6061] configfs_mkdir+0x515/0x9e0 [ 129.867011][ T6061] vfs_mkdir+0x2a5/0x470 [ 129.871796][ T6061] do_mkdirat+0x1dc/0x450 [ 129.876671][ T6061] __x64_sys_mkdir+0x6e/0x80 [ 129.881802][ T6061] do_syscall_64+0x55/0xb0 [ 129.886772][ T6061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.893208][ T6061] [ 129.893208][ T6061] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 129.901485][ T6061] __mutex_lock+0x135/0xc80 [ 129.906540][ T6061] uvcg_streaming_header_allow_link+0x71/0x4a0 [ 129.913249][ T6061] configfs_symlink+0x5a5/0xfe0 [ 129.918652][ T6061] vfs_symlink+0x138/0x2b0 [ 129.923623][ T6061] do_symlinkat+0x1ba/0x400 [ 129.928673][ T6061] __x64_sys_symlink+0x7e/0x90 [ 129.933986][ T6061] do_syscall_64+0x55/0xb0 [ 129.938944][ T6061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.945380][ T6061] [ 129.945380][ T6061] -> #0 (&sb->s_type->i_mutex_key#21){++++}-{3:3}: [ 129.954100][ T6061] __lock_acquire+0x37ef/0x7d80 [ 129.959496][ T6061] lock_acquire+0x19e/0x420 [ 129.964545][ T6061] down_write+0x97/0x200 [ 129.969342][ T6061] configfs_depend_item_unlocked+0x157/0x430 [ 129.975868][ T6061] usbg_make_tpg+0x1f7/0x580 [ 129.981006][ T6061] target_fabric_make_tpg+0xa4/0x6d0 [ 129.986837][ T6061] configfs_mkdir+0x515/0x9e0 [ 129.992063][ T6061] vfs_mkdir+0x2a5/0x470 [ 129.996871][ T6061] do_mkdirat+0x1dc/0x450 [ 130.001740][ T6061] __x64_sys_mkdir+0x6e/0x80 [ 130.006877][ T6061] do_syscall_64+0x55/0xb0 [ 130.011838][ T6061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.018272][ T6061] [ 130.018272][ T6061] other info that might help us debug this: [ 130.018272][ T6061] [ 130.028514][ T6061] Chain exists of: [ 130.028514][ T6061] &sb->s_type->i_mutex_key#21 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 130.028514][ T6061] [ 130.043237][ T6061] Possible unsafe locking scenario: [ 130.043237][ T6061] [ 130.050706][ T6061] CPU0 CPU1 [ 130.056088][ T6061] ---- ---- [ 130.061478][ T6061] lock(&opts->dep_lock); [ 130.065921][ T6061] lock(gadget_subsys.su_mutex); [ 130.073482][ T6061] lock(&opts->dep_lock); [ 130.080436][ T6061] lock(&sb->s_type->i_mutex_key#21); [ 130.085920][ T6061] [ 130.085920][ T6061] *** DEADLOCK *** [ 130.085920][ T6061] [ 130.094076][ T6061] 5 locks held by syz.3.43/6061: [ 130.099032][ T6061] #0: ffff88801fada418 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 130.108304][ T6061] #1: ffff888079369090 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 130.119148][ T6061] #2: ffffffff8db2b830 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0 [ 130.128933][ T6061] #3: ffffffff8de58f08 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf8/0x580 [ 130.138662][ T6061] #4: ffff88805e29b120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 130.148217][ T6061] [ 130.148217][ T6061] stack backtrace: [ 130.154146][ T6061] CPU: 1 PID: 6061 Comm: syz.3.43 Not tainted syzkaller #0 [ 130.161370][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.171515][ T6061] Call Trace: [ 130.174830][ T6061] [ 130.177791][ T6061] dump_stack_lvl+0x18c/0x250 [ 130.182519][ T6061] ? load_image+0x420/0x420 [ 130.187060][ T6061] ? show_regs_print_info+0x20/0x20 [ 130.192292][ T6061] ? print_circular_bug+0x12b/0x1a0 [ 130.197547][ T6061] check_noncircular+0x2fc/0x400 [ 130.202536][ T6061] ? look_up_lock_class+0x75/0x140 [ 130.207708][ T6061] ? print_deadlock_bug+0x5d0/0x5d0 [ 130.212949][ T6061] ? lockdep_lock+0xf5/0x230 [ 130.217595][ T6061] ? __lock_acquire+0x357f/0x7d80 [ 130.222661][ T6061] ? _find_first_zero_bit+0xd6/0x100 [ 130.227997][ T6061] __lock_acquire+0x37ef/0x7d80 [ 130.232909][ T6061] ? is_bpf_text_address+0x28f/0x2a0 [ 130.238239][ T6061] ? verify_lock_unused+0x140/0x140 [ 130.243485][ T6061] lock_acquire+0x19e/0x420 [ 130.248025][ T6061] ? configfs_depend_item_unlocked+0x157/0x430 [ 130.254230][ T6061] ? trace_raw_output_contention_end+0xd0/0xd0 [ 130.260419][ T6061] ? __might_sleep+0xe0/0xe0 [ 130.265042][ T6061] ? rcu_is_watching+0x15/0xb0 [ 130.269852][ T6061] ? read_lock_is_recursive+0x20/0x20 [ 130.275256][ T6061] ? trace_contention_end+0x39/0xe0 [ 130.280488][ T6061] ? __mutex_lock+0x30d/0xc80 [ 130.285203][ T6061] ? do_syscall_64+0x55/0xb0 [ 130.289830][ T6061] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.295939][ T6061] down_write+0x97/0x200 [ 130.300226][ T6061] ? configfs_depend_item_unlocked+0x157/0x430 [ 130.306416][ T6061] ? down_read_killable+0x340/0x340 [ 130.311660][ T6061] configfs_depend_item_unlocked+0x157/0x430 [ 130.317686][ T6061] usbg_make_tpg+0x1f7/0x580 [ 130.322340][ T6061] ? usbg_drop_tport+0x20/0x20 [ 130.327155][ T6061] ? vscnprintf+0x80/0x80 [ 130.331532][ T6061] target_fabric_make_tpg+0xa4/0x6d0 [ 130.336861][ T6061] ? target_fabric_release_wwn+0xb0/0xb0 [ 130.342535][ T6061] configfs_mkdir+0x515/0x9e0 [ 130.347252][ T6061] vfs_mkdir+0x2a5/0x470 [ 130.351543][ T6061] do_mkdirat+0x1dc/0x450 [ 130.355918][ T6061] ? vfs_mkdir+0x470/0x470 [ 130.360372][ T6061] ? getname_flags+0x20a/0x500 [ 130.365186][ T6061] __x64_sys_mkdir+0x6e/0x80 [ 130.369813][ T6061] do_syscall_64+0x55/0xb0 [ 130.374290][ T6061] ? clear_bhb_loop+0x40/0x90 [ 130.379037][ T6061] ? clear_bhb_loop+0x40/0x90 [ 130.383753][ T6061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.389694][ T6061] RIP: 0033:0x7fb2f2d9e019 [ 130.394151][ T6061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.413788][ T6061] RSP: 002b:00007fb2f3d07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 130.422236][ T6061] RAX: ffffffffffffffda RBX: 00007fb2f3025fa0 RCX: 00007fb2f2d9e019 [ 130.430245][ T6061] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000c00 [ 130.438265][ T6061] RBP: 00007fb2f2e3500c R08: 0000000000000000 R09: 0000000000000000 [ 130.446276][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.454280][ T6061] R13: 00007fb2f3026038 R14: 00007fb2f3025fa0 R15: 00007ffe4269e4a8 [ 130.462300][ T6061] [ 133.072074][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.078459][ T1292] ieee802154 phy1 wpan1: encryption failed: -22