last executing test programs: 5m55.91406612s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) 5m54.818893107s ago: executing program 1 (id=19): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) kcmp(r2, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, 0x0, 0x2000800) 5m53.610443296s ago: executing program 1 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r1, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect(r2, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r2, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) 5m37.407783729s ago: executing program 32 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r1, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect(r2, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r2, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) 4m37.848412601s ago: executing program 5 (id=283): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 4m37.034671941s ago: executing program 5 (id=287): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 4m35.917747758s ago: executing program 5 (id=289): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setuid(0xee01) r3 = syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, 0xffffffffffffffff, 0x0) 4m34.542396311s ago: executing program 5 (id=292): socket(0x9, 0x4, 0xe4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002480), &(0x7f0000002500)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_key={0x1, 0x8}]}, 0x80}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000003}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040044}, 0x0) unshare(0x6020400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 4m34.289917657s ago: executing program 5 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) dup(0xffffffffffffffff) listen(0xffffffffffffffff, 0x1ff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe61e2840a154f0c4, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10142, 0x0) 4m33.36674077s ago: executing program 5 (id=298): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_add_watch(0xffffffffffffffff, 0x0, 0x850003d1) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) 4m18.06661663s ago: executing program 33 (id=298): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_add_watch(0xffffffffffffffff, 0x0, 0x850003d1) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) 8.958901884s ago: executing program 3 (id=1178): pipe(0x0) inotify_init1(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xf0) fanotify_init(0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.702058888s ago: executing program 4 (id=1186): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddb", @ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x44010) socket$netlink(0x10, 0x3, 0x8000000004) r3 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r5, 0x186a0, 0x0) 6.569329301s ago: executing program 6 (id=1189): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup2(r2, r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) 6.559493562s ago: executing program 3 (id=1190): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 6.528643502s ago: executing program 4 (id=1191): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) close(r4) inotify_init1(0x800) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x800000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, r5) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='sockfs\x00', 0x0) unshare(0x22020600) fsmount(r6, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0xb, 0x0, 0xfffffffc, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x5, 0xffffffff}}, @TCA_CT_LABELS={0x14, 0x7, "97b357887853f846620853baa9b1ad04"}, @TCA_CT_ZONE={0x6, 0x4, 0x188}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c804}, 0x10008010) 5.924815007s ago: executing program 6 (id=1194): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup2(r2, r1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 4.908087372s ago: executing program 4 (id=1196): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xff, 0x8}}]}, 0x38}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) writev(r4, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a71898733f0dcb64c38849be0185191621d8d87c521201593212da719d600d9262d4ac59dfb5ec2b503053b465b55ae5c7ca58b82c73ad9aa7872d1e4060a6112879a7afe128f10bf20cfd", 0x5b}, {&(0x7f0000000300)}, {0x0}, {0x0}, {&(0x7f00000004c0)="a407d58cecfb1369d434cee2363e2e667262a9fda651de7eb280ec8ff5087e00", 0x20}, {0x0}], 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) 4.907505902s ago: executing program 6 (id=1197): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000340)=0xb0000) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) open(0x0, 0x4200, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 3.570228864s ago: executing program 4 (id=1199): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup2(r2, r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 3.569884374s ago: executing program 0 (id=1200): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup2(r2, r1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 3.524992755s ago: executing program 4 (id=1201): pipe(&(0x7f0000000000)) inotify_init1(0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xf0) fanotify_init(0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.482567076s ago: executing program 3 (id=1202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xb482) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r4, 0x80079a0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r5, r4, 0x0, 0x10000000000) 3.428690717s ago: executing program 6 (id=1203): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e64}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, r3, 0x2) openat(0xffffffffffffff9c, 0x0, 0x80241, 0x48) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cb, 0x0) 3.428091997s ago: executing program 0 (id=1213): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup2(r2, r1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 3.359201969s ago: executing program 0 (id=1204): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup2(r2, r1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 2.687954046s ago: executing program 0 (id=1205): pipe(0x0) inotify_init1(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xf0) fanotify_init(0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.350962843s ago: executing program 2 (id=1206): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000500)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e3371", 0x24}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0x6) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r2, 0x701, 0x0, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x2c}}, 0x40) r5 = socket$rds(0x15, 0x5, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10, 0x800) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000280)={@private=0xa010100, @remote, @broadcast}, 0xc) setsockopt$llc_int(r6, 0x10c, 0x6, &(0x7f0000000200)=0x81, 0x4) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000800)={&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4044004}, 0x40) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES64=0x77359400, @ANYRES64=r5, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB='\x00\x00\x00@'], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8004) 2.347940843s ago: executing program 3 (id=1207): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x100, 0x7, 0x1, 0xfffffffe, 0x81, 0x1000, 0x80003, 0x20000004, 0x0, 0x1000a, 0x4, 0xb059, 0x100, 0xb6ac, 0x9, 0xffffffff, 0x20000006, 0x10008, 0xfe9, 0x401, 0x6, 0x9, 0x4, 0x9, 0x48, 0x1, 0x5, 0x10, 0x81, 0x4000007, 0xff]}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r2 = socket$inet6(0xa, 0x3, 0x7) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40051}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x0, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0x3, 0xffffffff}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r6, 0x1ff, 0x0, 0x12000, 0x3, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x3], [0x0, 0x1001000, 0x800001, 0x4], [0x0, 0x401, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]}) close(0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) 2.225231766s ago: executing program 2 (id=1208): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 2.126020569s ago: executing program 2 (id=1209): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85513, &(0x7f0000002600)={{0x2, 0x4, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x2ea, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x7, 0x25c, 0x0, 0x10001, 0x7, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x76, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7b, 0x1, 0x0, 0xca, 0x4, 0x0, 0xff, 0x48b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x13, 0x8838, 0x0, 0x1, 0x4, 0x0, 0x2, 0x7f, 0x3, 0x800000000000000, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x5, 0x4, 0x0, 0x6, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x4fbc, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x80000001, 0x0, 0x0, 0x4, 0x9]}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getpgrp(0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000780)={{0x3, 0x0, 0x1000000}, 0x0, [0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x1, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x40800000000000, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x10, 0xfffffffffffffffe, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x40, 0x0, 0x59ed, 0x1000000000000000, 0x0, 0x4001ff, 0x0, 0x0, 0x0, 0x3, 0xd, 0x100000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x8, 0x2, 0x0, 0x80000000000, 0x0, 0x3f92, 0x0, 0x0, 0xb4b, 0x1, 0x0, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}) 1.235499231s ago: executing program 6 (id=1210): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000140)=0x7, 0x4) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4048044) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89b0, &(0x7f0000000440)={'vlan0\x00', @random="1800002000"}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2012, 0x8000, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x20, 0x4000, 0x0, 0x2f, 0x0, @remote, @multicast1}}}}) 1.224682271s ago: executing program 2 (id=1211): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup2(r2, r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 1.166106662s ago: executing program 3 (id=1212): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000001dc0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xfffffffeffffffff, {0x5, 0x3, 0x0, 0x4000000000004, 0xfffffffd, 0x6, {0x2, 0xfff, 0x808, 0xfffffffffbd, 0x8, 0x81, 0xfaae, 0x6, 0x2, 0x4000, 0xe44, r6, r7, 0x4, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000008200)="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", 0x2000, &(0x7f000000acc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a4c0)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$can_bcm(r3, &(0x7f0000001ff0), 0x10) 1.165700732s ago: executing program 4 (id=1214): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0x8341, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x12, 0x308, 0x128, 0x206, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'caif0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f, 0x7f00}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'geneve0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xd, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b9", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r5, 0x0, 0x80) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') pread64(r6, &(0x7f0000000f80)=""/212, 0xd4, 0xffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) syz_usb_connect(0x3, 0x4a, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}}, 0x440088c4) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4) 1.144394943s ago: executing program 0 (id=1215): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup2(r2, r1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 1.086140154s ago: executing program 2 (id=1216): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup2(r2, r1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 1.082426574s ago: executing program 0 (id=1217): socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000004c0)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec01b3b820b1fdfffa233394c6e77c8285b061be4d1d842e4a63ec47a083470f375b81080001cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8cdc85b032f67dc95a947e63e3667ac2b1c953f5017b3cf2ce986800b84dcc3b33bfe950832606c010ac9f8a252454548986e9b7a88529e53efe01210aad5b2300137f1a62cd7a4a17b307956"], 0xff, 0x2a0, &(0x7f00000001c0)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0x2000, 0x0) r2 = add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', 0x0, 0x0, r2) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) syz_emit_ethernet(0x46, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pipe(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x5) accept$inet6(r4, 0x0, 0x0) 915.541718ms ago: executing program 2 (id=1218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 54.162129ms ago: executing program 3 (id=1219): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400), 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='1', 0x1) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') mkdir(0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) 0s ago: executing program 6 (id=1220): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) kernel console output (not intermixed with test programs): ready [ 67.215588][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.228747][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.237487][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.246545][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.256623][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.276727][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.295032][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.305088][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.316050][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.328031][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.339662][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.348735][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.357456][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.366943][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.376940][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.385927][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.394009][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.403922][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.422801][ T4187] device veth0_vlan entered promiscuous mode [ 67.438999][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.459279][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.467144][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.495743][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.510585][ T4187] device veth1_vlan entered promiscuous mode [ 67.549212][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.567655][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.655259][ T4187] device veth0_macvtap entered promiscuous mode [ 67.669471][ T4187] device veth1_macvtap entered promiscuous mode [ 67.686621][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.705890][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.718711][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.774537][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.789191][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.800084][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.811597][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.834726][ T4186] device veth0_vlan entered promiscuous mode [ 67.848731][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.856582][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.859746][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.003388][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 68.034661][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.099118][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.154584][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.207796][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.263313][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.314699][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.374128][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.439852][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 68.445931][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 68.452078][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 68.458785][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.467035][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.475138][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 68.494019][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.524339][ T4186] device veth1_vlan entered promiscuous mode [ 68.576004][ T4186] device veth0_macvtap entered promiscuous mode [ 68.623802][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.677943][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.694139][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.705857][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.723436][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.735806][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.753326][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.762897][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.772943][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.784048][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.793030][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.803074][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.823097][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.832925][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.841779][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.850717][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.509202][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.517066][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.590978][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.608133][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.622357][ T4186] device veth1_macvtap entered promiscuous mode [ 69.631725][ T4280] Zero length message leads to an empty skb [ 69.649421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.659224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.667258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.732781][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.744083][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.755380][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.764572][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.783561][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.795320][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.805645][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.818350][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.829604][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.840679][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.852383][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.949938][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.957970][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.967658][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.990165][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.000890][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.013719][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.022249][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.034325][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.059738][ T2304] Bluetooth: hci3: command 0x0419 tx timeout [ 70.101931][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.290303][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.467537][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.659791][ T4236] Bluetooth: hci4: command 0x0419 tx timeout [ 70.665884][ T4236] Bluetooth: hci0: command 0x0419 tx timeout [ 70.672112][ T4236] Bluetooth: hci1: command 0x0419 tx timeout [ 70.678424][ T4236] Bluetooth: hci2: command 0x0419 tx timeout [ 70.693091][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.712532][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.724415][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.861957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.872196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.881783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.891635][ T4287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 70.903345][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.994961][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.006854][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.017491][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.345109][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.351969][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.154258][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.191936][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.489771][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.511240][ T4301] loop0: detected capacity change from 0 to 128 [ 72.677215][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.692410][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.741021][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.751048][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.427766][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.476493][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.053463][ T4317] loop0: detected capacity change from 0 to 16 [ 74.283873][ T4317] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 146300) [ 74.298424][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.850233][ T4330] ODEBUG: Out of memory. ODEBUG disabled [ 75.599782][ T4322] sched: RT throttling activated [ 76.259971][ T13] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 76.296491][ T13] usb 3-1: can't read configurations, error -71 [ 76.523453][ T4338] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.688539][ T4344] tipc: Started in network mode [ 76.693694][ T4344] tipc: Node identity 6a4ebcb7293d, cluster identity 4711 [ 76.759298][ T4344] tipc: Enabled bearer , priority 0 [ 76.797875][ T4357] device syzkaller0 entered promiscuous mode [ 77.331266][ T4344] tipc: Resetting bearer [ 77.469929][ T4343] tipc: Resetting bearer [ 77.517426][ T4343] tipc: Disabling bearer [ 77.925203][ T4375] process 'syz.4.29' launched '/dev/fd/4' with NULL argv: empty string added [ 78.160104][ T4377] loop0: detected capacity change from 0 to 4096 [ 78.221981][ T4377] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 78.450475][ T4377] EXT4-fs (loop0): Test dummy encryption mode enabled [ 78.506781][ T4377] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 78.761098][ T4388] device syzkaller0 entered promiscuous mode [ 79.047855][ T4395] loop4: detected capacity change from 0 to 256 [ 79.108912][ T4395] ======================================================= [ 79.108912][ T4395] WARNING: The mand mount option has been deprecated and [ 79.108912][ T4395] and is ignored by this kernel. Remove the mand [ 79.108912][ T4395] option from the mount to silence this warning. [ 79.108912][ T4395] ======================================================= [ 79.182974][ T4398] Cannot find del_set index 0 as target [ 79.908583][ T4395] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.984458][ T4399] loop3: detected capacity change from 0 to 4096 [ 79.996552][ T4395] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 80.073922][ T4404] fuse: Bad value for 'fd' [ 80.173995][ T4395] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 80.809910][ T4399] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 81.845299][ T4434] loop2: detected capacity change from 0 to 512 [ 81.852458][ T1110] cfg80211: failed to load regulatory.db [ 81.939670][ T26] audit: type=1800 audit(1785429461.958:2): pid=4395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.34" name="file1" dev="loop4" ino=1048592 res=0 errno=0 [ 82.039456][ T4434] EXT4-fs (loop2): Ignoring removed bh option [ 82.125847][ T4197] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 82.154759][ T4434] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.41: corrupted in-inode xattr [ 82.423806][ T4434] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.41: couldn't read orphan inode 15 (err -117) [ 82.531355][ T4447] Cannot find del_set index 0 as target [ 83.157095][ T4434] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 84.384400][ T4235] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.672774][ T4235] usb 5-1: Using ep0 maxpacket: 16 [ 84.801667][ T4279] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.828368][ T4235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.866729][ T4235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.916062][ T4457] device syzkaller0 entered promiscuous mode [ 84.922362][ T4235] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.982754][ T4235] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 85.002987][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.048450][ T4235] usb 5-1: config 0 descriptor?? [ 85.108516][ T4279] usb 4-1: Using ep0 maxpacket: 16 [ 85.529643][ T4279] usb 4-1: unable to get BOS descriptor or descriptor too short [ 86.092935][ T4470] device syzkaller0 entered promiscuous mode [ 86.283267][ T4235] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0001/input/input5 [ 86.390940][ T4235] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 86.454700][ T4451] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.627654][ T4230] usb 5-1: USB disconnect, device number 2 [ 88.068868][ T4279] usb 4-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=62.7c [ 88.086595][ T4279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=27 [ 88.095545][ T4279] usb 4-1: Product: syz [ 88.168147][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 88.178160][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 88.188138][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 88.198133][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 88.208133][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 88.218132][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 88.228126][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 88.238133][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 88.248125][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 88.258127][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 88.878251][ T4279] usb 4-1: can't set config #2, error -71 [ 89.527556][ T4279] usb 4-1: USB disconnect, device number 2 [ 89.555927][ T4511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.61'. [ 90.208383][ T4515] tipc: Started in network mode [ 90.213310][ T4515] tipc: Node identity a683625fe652, cluster identity 4711 [ 90.229952][ T4515] tipc: Enabled bearer , priority 0 [ 90.240481][ T4515] device syzkaller0 entered promiscuous mode [ 90.262195][ T4517] netlink: 84 bytes leftover after parsing attributes in process `syz.4.64'. [ 90.288751][ T4515] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 90.323187][ T4515] tipc: Resetting bearer [ 90.355049][ T4514] tipc: Resetting bearer [ 90.370320][ T4514] tipc: Disabling bearer [ 90.556534][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.585836][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.604025][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.660336][ T4519] device bridge_slave_0 left promiscuous mode [ 90.667897][ T4519] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.711918][ T4524] input: syz1 as /devices/virtual/input/input6 [ 90.832414][ T4519] device bridge_slave_1 left promiscuous mode [ 90.859370][ T4519] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.905301][ T4519] bond0: (slave bond_slave_0): Releasing backup interface [ 90.968596][ T4519] bond0: (slave bond_slave_1): Releasing backup interface [ 91.081293][ T4519] team0: Port device team_slave_0 removed [ 91.113802][ T4519] team0: Port device team_slave_1 removed [ 91.132100][ T4519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.150016][ T4519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.195237][ T4519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.204221][ T4538] loop0: detected capacity change from 0 to 4096 [ 91.215100][ T4519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.235377][ T4538] EXT4-fs (loop0): Test dummy encryption mode enabled [ 91.244694][ T4538] EXT4-fs (loop0): Ignoring removed oldalloc option [ 91.296735][ T4538] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,oldalloc,,errors=continue. Quota mode: writeback. [ 91.407841][ T4519] syz.4.65 (4519) used greatest stack depth: 21136 bytes left [ 91.750473][ T4538] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 94.855928][ T4581] device syzkaller0 entered promiscuous mode [ 96.196564][ T4599] loop4: detected capacity change from 0 to 2048 [ 96.362953][ T4599] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.395605][ T4599] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.603169][ T4186] syz-executor (4186) used greatest stack depth: 20848 bytes left [ 97.320716][ T4279] Bluetooth: hci5: command 0x0409 tx timeout [ 97.486171][ T4513] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.676880][ T4586] chnl_net:caif_netlink_parms(): no params data found [ 97.758678][ T4513] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.806926][ T4626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.88'. [ 98.959207][ T4513] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.069879][ T4639] device syzkaller0 entered promiscuous mode [ 99.080819][ T4639] 0: reclassify loop, rule prio 0, protocol 800 [ 99.092701][ T4586] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.128730][ T4586] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.149462][ T4586] device bridge_slave_0 entered promiscuous mode [ 99.338236][ T4279] Bluetooth: hci5: command 0x041b tx timeout [ 99.873054][ T4586] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.923316][ T4586] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.940383][ T4586] device bridge_slave_1 entered promiscuous mode [ 99.990658][ T4651] loop4: detected capacity change from 0 to 256 [ 100.024688][ T4513] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.081817][ T4651] FAT-fs (loop4): bogus sectors per cluster 0 [ 100.093796][ T4586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.106977][ T4651] FAT-fs (loop4): Can't find a valid FAT filesystem [ 100.153162][ T4586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.236372][ T4651] loop4: detected capacity change from 0 to 1024 [ 100.265103][ T4586] team0: Port device team_slave_0 added [ 100.273698][ T4586] team0: Port device team_slave_1 added [ 100.297032][ T4586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.304277][ T4586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.333433][ T4586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.377475][ T4586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.390759][ T4586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.418229][ T4586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.493589][ T4586] device hsr_slave_0 entered promiscuous mode [ 100.500905][ T4586] device hsr_slave_1 entered promiscuous mode [ 101.023665][ T4586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.215321][ T4586] Cannot create hsr debugfs directory [ 101.339993][ T4635] hfsplus: b-tree write err: -5, ino 25 [ 101.350048][ T4635] hfsplus: b-tree write err: -5, ino 4 [ 101.355843][ T4635] hfsplus: b-tree write err: -5, ino 2 [ 101.418427][ T23] Bluetooth: hci5: command 0x040f tx timeout [ 101.445782][ T4635] hfsplus: b-tree write err: -5, ino 26 [ 101.987517][ T4586] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.076827][ T4586] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.191492][ T4586] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 102.600854][ T4586] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.226589][ T4722] tipc: Started in network mode [ 103.271467][ T4722] tipc: Node identity 122498fd16ff, cluster identity 4711 [ 103.498273][ T23] Bluetooth: hci5: command 0x0419 tx timeout [ 103.566514][ T4722] tipc: Enabled bearer , priority 0 [ 103.736804][ T4719] device syzkaller0 entered promiscuous mode [ 104.537511][ T4745] autofs4:pid:4745:autofs_fill_super: called with bogus options [ 105.936694][ T4279] tipc: Node number set to 81500413 [ 105.947463][ T4737] tipc: Resetting bearer [ 106.002190][ T4737] tipc: Disabling bearer [ 106.160658][ T4586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.186738][ T4586] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.237810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.252940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.534696][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.615195][ T4756] loop0: detected capacity change from 0 to 512 [ 106.686323][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.855245][ T4635] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.862407][ T4635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.883711][ T4756] EXT4-fs (loop0): Ignoring removed oldalloc option [ 106.935033][ T4756] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.991011][ T4759] netlink: 'syz.4.120': attribute type 1 has an invalid length. [ 107.017252][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.048927][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.058658][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.068497][ T4756] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,dioread_nolock,noinit_itable,,errors=continue. Quota mode: writeback. [ 107.084156][ T4756] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.084908][ T4635] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.101709][ T4635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.143719][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.154904][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.165034][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.175497][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.217447][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.262435][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.287945][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.314886][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.349667][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.365462][ T4759] netlink: 28 bytes leftover after parsing attributes in process `syz.4.120'. [ 107.461170][ T26] audit: type=1326 audit(1785429487.478:3): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.3.124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d73869f99 code=0x0 [ 107.497764][ T4513] device hsr_slave_0 left promiscuous mode [ 107.513373][ T4513] device hsr_slave_1 left promiscuous mode [ 107.528999][ T4513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.538196][ T26] audit: type=1326 audit(1785429487.508:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bcc6ff99 code=0x7ffc0000 [ 107.546829][ T4513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.604558][ T4513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.616315][ T26] audit: type=1326 audit(1785429487.588:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bcc6ff99 code=0x7ffc0000 [ 107.624072][ T4513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.667666][ T4513] device bridge_slave_1 left promiscuous mode [ 107.672424][ T26] audit: type=1326 audit(1785429487.678:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fc8bcc6ff99 code=0x7ffc0000 [ 107.686612][ T4513] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.718286][ T26] audit: type=1326 audit(1785429487.678:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bcc6ff99 code=0x7ffc0000 [ 107.742126][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.756735][ T4513] device bridge_slave_0 left promiscuous mode [ 107.770754][ T4513] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.809252][ T26] audit: type=1326 audit(1785429487.678:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bcc6ff99 code=0x7ffc0000 [ 107.838512][ T4513] device veth1_macvtap left promiscuous mode [ 107.846119][ T4513] device veth0_macvtap left promiscuous mode [ 107.871333][ T4513] device veth1_vlan left promiscuous mode [ 107.895501][ T26] audit: type=1326 audit(1785429487.678:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8bcc6ff99 code=0x7ffc0000 [ 107.919370][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.920728][ T4513] device veth0_vlan left promiscuous mode [ 107.970496][ T26] audit: type=1326 audit(1785429487.678:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bcc6ff99 code=0x7ffc0000 [ 108.019557][ T26] audit: type=1326 audit(1785429487.678:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bcc6ff99 code=0x7ffc0000 [ 108.044219][ T26] audit: type=1326 audit(1785429487.678:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.123" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8bcc6ff99 code=0x7ffc0000 [ 108.226949][ T4513] team0 (unregistering): Port device team_slave_1 removed [ 108.240934][ T4513] team0 (unregistering): Port device team_slave_0 removed [ 108.254925][ T4513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.272045][ T4513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.355584][ T4513] bond0 (unregistering): Released all slaves [ 108.430555][ T4586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.442956][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.469308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.483373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.492222][ T4801] tipc: Started in network mode [ 108.497133][ T4801] tipc: Node identity 96cd6ac68517, cluster identity 4711 [ 108.505022][ T4801] tipc: Enabled bearer , priority 0 [ 108.586095][ T4801] tipc: Disabling bearer [ 110.055046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.096816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.258445][ T4586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.937984][ T4840] TC_ACT_REPEAT abuse ? [ 112.775647][ T4846] loop0: detected capacity change from 0 to 4096 [ 112.807216][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.834622][ T4846] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 112.851309][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.888771][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.928922][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.967286][ T4586] device veth0_vlan entered promiscuous mode [ 112.982841][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.009355][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.215691][ T4586] device veth1_vlan entered promiscuous mode [ 113.282181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.295840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.403057][ T4188] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 113.460049][ T4188] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 113.507421][ T4192] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 113.522450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.563543][ T4188] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 113.641643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.823557][ T4586] device veth0_macvtap entered promiscuous mode [ 113.831653][ T4192] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.974470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.105105][ T4586] device veth1_macvtap entered promiscuous mode [ 114.516191][ T4879] fido_id[4879]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 114.520308][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.601829][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.798743][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.878300][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.970122][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.243315][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.335780][ T4586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.384985][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.395840][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.125207][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.135749][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.148252][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.158751][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.172682][ T4586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.183879][ T4586] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.267211][ T4586] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.310502][ T4586] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.337130][ T4586] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.367508][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.402626][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.425640][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.445235][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.475229][ T4892] device syzkaller0 entered promiscuous mode [ 116.559282][ T4903] syz.4.145 uses obsolete (PF_INET,SOCK_PACKET) [ 116.712676][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.754118][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.775574][ T4905] device syzkaller0 entered promiscuous mode [ 116.858442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.004208][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.054724][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.069504][ T4918] device syzkaller0 entered promiscuous mode [ 117.100663][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.191238][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 117.191253][ T26] audit: type=1326 audit(1785429497.208:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4921 comm="syz.4.149" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7bc5a6f99 code=0x0 [ 117.352509][ T4928] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.361684][ T4928] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.370467][ T4928] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.379244][ T4928] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.506802][ T4928] team0: Port device vxlan0 added [ 117.938204][ T4953] loop5: detected capacity change from 0 to 256 [ 118.096311][ T4953] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 120.768058][ T4414] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 121.790206][ T4986] netlink: 'syz.5.158': attribute type 10 has an invalid length. [ 121.826962][ T4986] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 122.626505][ T4996] device syzkaller0 entered promiscuous mode [ 122.735027][ T5003] tipc: Enabled bearer , priority 0 [ 122.750593][ T4994] loop3: detected capacity change from 0 to 4096 [ 122.866622][ T4994] EXT4-fs (loop3): Test dummy encryption mode enabled [ 122.918446][ T4994] EXT4-fs (loop3): inline encryption not supported [ 122.925395][ T4994] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 123.436120][ T4994] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 123.483592][ T4994] System zones: 0-5 [ 123.498047][ T5005] device syzkaller0 entered promiscuous mode [ 123.526019][ T4994] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 123.692401][ T5001] tipc: Resetting bearer [ 124.148502][ T4880] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 124.172016][ T5001] tipc: Disabling bearer [ 124.413917][ T5015] netlink: 'syz.0.170': attribute type 1 has an invalid length. [ 124.447750][ T5015] device bond1 entered promiscuous mode [ 124.492945][ T5015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.493858][ T5019] overlayfs: './file0' not a directory [ 124.507778][ T5020] bond1: (slave erspan1): making interface the new active one [ 124.515738][ T5020] device erspan1 entered promiscuous mode [ 124.525011][ T5020] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 124.569680][ T7] tipc: Node number set to 1131658423 [ 124.646237][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 124.666285][ T4880] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 124.721323][ T5039] tipc: Enabled bearer , priority 0 [ 124.736346][ T5039] device syzkaller0 entered promiscuous mode [ 124.809778][ T5039] tipc: Resetting bearer [ 124.834947][ T5038] tipc: Resetting bearer [ 124.854095][ T26] audit: type=1804 audit(1785429504.868:34): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.171" name="/newroot/44/bus/bus" dev="overlay" ino=271 res=1 errno=0 [ 124.879580][ T4880] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 124.884685][ T5038] tipc: Disabling bearer [ 124.898488][ T4880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.936975][ T4880] usb 6-1: Product: syz [ 124.946016][ T4880] usb 6-1: Manufacturer: syz [ 124.952848][ T5048] loop2: detected capacity change from 0 to 4096 [ 124.964633][ T4880] usb 6-1: SerialNumber: syz [ 124.982471][ T4880] usb 6-1: config 0 descriptor?? [ 125.009639][ T5016] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.010993][ T5048] EXT4-fs (loop2): Test dummy encryption mode enabled [ 125.030560][ T4880] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 125.093927][ T5020] syz.0.170 (5020) used greatest stack depth: 18320 bytes left [ 125.135776][ T5048] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000004000000,noauto_da_alloc,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 125.162282][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.312056][ T4880] usb 6-1: USB disconnect, device number 2 [ 125.409998][ T5058] loop0: detected capacity change from 0 to 2048 [ 125.451960][ T5061] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 125.480112][ T5041] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 125.500380][ T5061] device syzkaller0 entered promiscuous mode [ 125.524098][ T5058] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 125.707022][ T5058] loop0: detected capacity change from 0 to 256 [ 125.765990][ T5069] loop2: detected capacity change from 0 to 64 [ 125.908678][ T5058] exfat: Deprecated parameter 'namecase' [ 125.914877][ T5058] exfat: Deprecated parameter 'namecase' [ 126.938495][ T5058] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8300b014, utbl_chksum : 0xe619d30d) [ 127.226725][ T5069] attempt to access beyond end of device [ 127.226725][ T5069] loop2: rw=2049, want=164, limit=64 [ 127.259703][ T5069] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 128.516174][ T5069] attempt to access beyond end of device [ 128.516174][ T5069] loop2: rw=2049, want=168, limit=64 [ 128.531233][ T5095] bridge0: port 3(macvlan2) entered blocking state [ 128.540417][ T5069] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 128.558508][ T5095] bridge0: port 3(macvlan2) entered disabled state [ 128.609509][ T5095] device macvlan2 entered promiscuous mode [ 128.618737][ T5069] attempt to access beyond end of device [ 128.618737][ T5069] loop2: rw=2049, want=170, limit=64 [ 128.627462][ T5095] bridge0: port 3(macvlan2) entered blocking state [ 128.636285][ T5095] bridge0: port 3(macvlan2) entered forwarding state [ 128.679869][ T5069] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 128.717999][ T5069] attempt to access beyond end of device [ 128.717999][ T5069] loop2: rw=2049, want=172, limit=64 [ 128.764180][ T5069] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 128.816227][ T5069] attempt to access beyond end of device [ 128.816227][ T5069] loop2: rw=2049, want=173, limit=64 [ 128.856743][ T5069] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 128.872026][ T5069] attempt to access beyond end of device [ 128.872026][ T5069] loop2: rw=2049, want=174, limit=64 [ 129.325842][ T5121] device syzkaller0 entered promiscuous mode [ 129.378718][ T5069] Buffer I/O error on dev loop2, logical block 173, lost async page write [ 129.387328][ T5069] attempt to access beyond end of device [ 129.387328][ T5069] loop2: rw=2049, want=175, limit=64 [ 129.535420][ T5069] Buffer I/O error on dev loop2, logical block 174, lost async page write [ 129.582472][ T5069] attempt to access beyond end of device [ 129.582472][ T5069] loop2: rw=2049, want=176, limit=64 [ 129.654457][ T5069] Buffer I/O error on dev loop2, logical block 175, lost async page write [ 129.730920][ T5069] attempt to access beyond end of device [ 129.730920][ T5069] loop2: rw=2049, want=177, limit=64 [ 129.801481][ T5069] Buffer I/O error on dev loop2, logical block 176, lost async page write [ 129.850449][ T5069] attempt to access beyond end of device [ 129.850449][ T5069] loop2: rw=2049, want=178, limit=64 [ 129.884864][ T5069] Buffer I/O error on dev loop2, logical block 177, lost async page write [ 130.138043][ T5132] device syzkaller0 entered promiscuous mode [ 130.434047][ T5143] loop2: detected capacity change from 0 to 16 [ 130.560433][ T5143] erofs: (device loop2): mounted with root inode @ nid 36. [ 132.724200][ T5193] loop3: detected capacity change from 0 to 512 [ 132.791870][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.798625][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.018292][ T4279] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 133.066946][ T5193] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.206: iget: bad i_size value: 38620345925642 [ 133.133458][ T5193] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.206: couldn't read orphan inode 15 (err -117) [ 133.217484][ T5193] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.280897][ T4279] usb 1-1: Using ep0 maxpacket: 16 [ 133.310009][ T5211] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.206: bg 0: block 5: invalid block bitmap [ 133.779360][ T4279] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.012495][ T5215] using random self ethernet address [ 134.019877][ T5211] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 108 with error 28 [ 134.034318][ T5211] EXT4-fs (loop3): This should not happen!! Data will be lost [ 134.034318][ T5211] [ 134.038237][ T4279] usb 1-1: config 0 interface 0 has no altsetting 0 [ 134.044208][ T5211] EXT4-fs (loop3): Total free blocks count 0 [ 134.056668][ T5211] EXT4-fs (loop3): Free/Dirty block details [ 134.063990][ T5211] EXT4-fs (loop3): free_blocks=0 [ 134.069121][ T5211] EXT4-fs (loop3): dirty_blocks=108 [ 134.074351][ T5211] EXT4-fs (loop3): Block reservation details [ 134.080414][ T5211] EXT4-fs (loop3): i_reserved_data_blocks=108 [ 134.099816][ T5215] using random host ethernet address [ 134.167296][ T4279] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 134.211939][ T4279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.251874][ T4279] usb 1-1: config 0 descriptor?? [ 134.332653][ T5229] file system registered [ 134.375324][ T5229] No source specified [ 134.419655][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 134.636483][ T5244] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 134.828260][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.612235][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.622254][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.635384][ T7] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.644893][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.655476][ T7] usb 3-1: config 0 descriptor?? [ 136.150955][ T7] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 136.228754][ T4279] usbhid 1-1:0.0: can't add hid device: -71 [ 136.237065][ T4279] usbhid: probe of 1-1:0.0 failed with error -71 [ 136.417295][ T4279] usb 1-1: USB disconnect, device number 2 [ 137.061240][ T7] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 137.155160][ T7] usb 3-1: USB disconnect, device number 4 [ 138.294023][ T5273] fido_id[5273]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 140.305639][ T5313] loop3: detected capacity change from 0 to 128 [ 141.812912][ T5331] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.820551][ T5331] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.895735][ T5340] binder_alloc: 5330: binder_alloc_buf, no vma [ 141.980365][ T5331] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.987921][ T5331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.996289][ T5331] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.003428][ T5331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.042580][ T5331] team0: Port device bridge0 added [ 142.824570][ T5353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 142.888379][ T5353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.923792][ T5357] loop2: detected capacity change from 0 to 2048 [ 143.028788][ T5367] binder_alloc: 5360: binder_alloc_buf, no vma [ 143.110256][ T5353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.267553][ T5357] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 143.789970][ T5355] loop2: detected capacity change from 0 to 256 [ 143.862081][ T5375] device syzkaller0 entered promiscuous mode [ 143.876229][ T5355] exfat: Deprecated parameter 'namecase' [ 143.923770][ T5355] exfat: Deprecated parameter 'namecase' [ 143.980279][ T5355] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8300b014, utbl_chksum : 0xe619d30d) [ 145.631653][ T4880] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.677592][ T5405] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.684874][ T5405] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.714286][ T5405] team0: Port device bridge0 removed [ 145.720375][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 145.797992][ T5409] UBIFS error (pid: 5409): cannot open "", error -22 [ 145.911891][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.066378][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.156005][ T5405] device bridge_slave_0 left promiscuous mode [ 146.190873][ T5405] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.490607][ T5405] device bridge_slave_1 left promiscuous mode [ 146.507333][ T5405] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.546397][ T5405] bond0: (slave bond_slave_0): Releasing backup interface [ 147.271431][ T5413] loop5: detected capacity change from 0 to 128 [ 147.399078][ T4880] usb 1-1: unable to read config index 0 descriptor/all [ 147.409211][ T4880] usb 1-1: can't read configurations, error -71 [ 147.460326][ T5405] bond0: (slave bond_slave_1): Releasing backup interface [ 147.530254][ T5405] team0: Port device team_slave_0 removed [ 148.051590][ T5405] team0: Port device team_slave_1 removed [ 148.064487][ T5405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.075080][ T5405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.084018][ T5405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.092140][ T5405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.606398][ T5451] binder_alloc: 5442: binder_alloc_buf, no vma [ 149.474070][ T5461] loop5: detected capacity change from 0 to 512 [ 149.545145][ T5465] device syzkaller0 entered promiscuous mode [ 149.566076][ T5465] 0: reclassify loop, rule prio 0, protocol 800 [ 149.635393][ T5461] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.261: iget: bad i_size value: 38620345925642 [ 149.679868][ T5461] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.261: couldn't read orphan inode 15 (err -117) [ 149.728966][ T5475] device syzkaller0 entered promiscuous mode [ 149.748236][ T5461] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.841593][ T5486] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.261: bg 0: block 5: invalid block bitmap [ 149.854452][ T5486] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 240 with error 28 [ 149.867064][ T5486] EXT4-fs (loop5): This should not happen!! Data will be lost [ 149.867064][ T5486] [ 149.876767][ T5486] EXT4-fs (loop5): Total free blocks count 0 [ 149.882993][ T5486] EXT4-fs (loop5): Free/Dirty block details [ 149.888930][ T5486] EXT4-fs (loop5): free_blocks=0 [ 149.893874][ T5486] EXT4-fs (loop5): dirty_blocks=240 [ 149.899150][ T5486] EXT4-fs (loop5): Block reservation details [ 149.905119][ T5486] EXT4-fs (loop5): i_reserved_data_blocks=240 [ 149.984190][ T5487] Set syz0 is full, maxelem 0 reached [ 150.774717][ T5494] device syzkaller0 entered promiscuous mode [ 151.021561][ T26] audit: type=1326 audit(1785429531.038:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5505 comm="syz.3.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 151.070838][ T5506] loop2: detected capacity change from 0 to 7 [ 151.096761][ T5506] loop2: [ 151.098046][ T5513] device syzkaller0 entered promiscuous mode [ 151.100561][ T26] audit: type=1326 audit(1785429531.088:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5505 comm="syz.3.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 151.138240][ T5506] loop2: partition table partially beyond EOD, truncated [ 152.050828][ T26] audit: type=1326 audit(1785429531.088:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5505 comm="syz.3.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 152.118962][ T26] audit: type=1326 audit(1785429531.088:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5505 comm="syz.3.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 152.143780][ T26] audit: type=1326 audit(1785429531.088:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5505 comm="syz.3.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 152.190684][ T26] audit: type=1326 audit(1785429531.088:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5505 comm="syz.3.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 152.653557][ T5530] device syzkaller0 entered promiscuous mode [ 152.659396][ T26] audit: type=1326 audit(1785429531.088:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5505 comm="syz.3.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 152.795759][ T26] audit: type=1326 audit(1785429531.088:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5505 comm="syz.3.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 153.046764][ T26] audit: type=1326 audit(1785429531.088:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5505 comm="syz.3.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 153.080001][ T5541] binder: BINDER_SET_CONTEXT_MGR already set [ 153.159154][ T5541] binder: 5534:5541 ioctl 4018620d 2000000002c0 returned -16 [ 153.310675][ T26] audit: type=1326 audit(1785429531.088:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5505 comm="syz.3.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 153.885701][ T5564] set match dimension is over the limit! [ 155.967522][ T5578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 156.425364][ T5593] device syzkaller0 entered promiscuous mode [ 156.515734][ T5598] gfs2: gfs2 mount does not exist [ 157.291959][ T5610] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 157.318820][ T5613] loop4: detected capacity change from 0 to 512 [ 157.373060][ T5610] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 157.395447][ T5613] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 157.417582][ T5617] netlink: 44 bytes leftover after parsing attributes in process `syz.2.303'. [ 157.535943][ T5623] loop2: detected capacity change from 0 to 128 [ 158.986199][ T5632] tipc: Enabled bearer , priority 0 [ 159.034945][ T5632] device syzkaller0 entered promiscuous mode [ 159.099436][ T5632] tipc: Resetting bearer [ 159.116725][ T5637] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 159.158992][ T5631] tipc: Resetting bearer [ 159.192476][ T5631] tipc: Disabling bearer [ 159.202515][ T5637] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 159.644873][ T5653] device syzkaller0 entered promiscuous mode [ 159.708407][ T5658] device syzkaller0 entered promiscuous mode [ 160.072032][ T5651] syz.0.309 (5651): drop_caches: 2 [ 161.468224][ T5691] cgroup: Invalid name [ 161.886849][ T5704] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 161.971573][ T5706] device syzkaller0 entered promiscuous mode [ 162.062506][ T5704] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 162.147251][ T5712] device syzkaller0 entered promiscuous mode [ 162.271534][ T5718] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.353465][ T5718] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 163.585129][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 163.602843][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 163.621225][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 163.637324][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 163.652596][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 163.666645][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 163.681699][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 164.689037][ T5763] loop3: detected capacity change from 0 to 32768 [ 164.729599][ T5768] cgroup: Invalid name [ 164.754750][ T5763] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.332 (5763) [ 164.840773][ T5763] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 164.849966][ T5763] BTRFS info (device loop3): metadata ratio 65537 [ 164.856408][ T5763] BTRFS info (device loop3): turning on sync discard [ 164.863510][ T5763] BTRFS info (device loop3): using free space tree [ 164.870070][ T5763] BTRFS info (device loop3): has skinny extents [ 165.132995][ T5763] BTRFS info (device loop3): enabling ssd optimizations [ 165.959417][ T5807] tipc: Enabling of bearer rejected, failed to enable media [ 166.566326][ T5839] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 168.907575][ T5813] syz.4.338 (5813): drop_caches: 2 [ 169.627784][ T5863] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 169.971262][ T5860] loop4: detected capacity change from 0 to 128 [ 170.034582][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 170.054908][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 170.083596][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 170.126957][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 170.176455][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 170.199998][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 170.214552][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 170.297258][ T5871] cgroup: Invalid name [ 170.443587][ T5876] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 171.305474][ T5895] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 172.444989][ T5908] netlink: 'syz.0.362': attribute type 1 has an invalid length. [ 172.499321][ T5908] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.893304][ T5911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.362'. [ 172.943864][ T5908] bond2: (slave dummy0): making interface the new active one [ 172.969309][ T5908] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 173.072238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 173.214905][ T5933] overlayfs: failed to clone upperpath [ 173.246150][ T1214] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.291706][ T1214] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.896080][ T5948] xt_HMARK: spi-set and port-set can't be combined [ 173.990713][ T1214] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.009651][ T1214] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.237824][ T1214] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.265412][ T1214] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.365731][ T5924] chnl_net:caif_netlink_parms(): no params data found [ 174.495773][ T1214] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.507859][ T1214] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.733518][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 174.761207][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.775651][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.785406][ T5924] device bridge_slave_0 entered promiscuous mode [ 174.801344][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.814059][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.823707][ T5924] device bridge_slave_1 entered promiscuous mode [ 174.862850][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.884524][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.944052][ T5924] team0: Port device team_slave_0 added [ 174.976527][ T5924] team0: Port device team_slave_1 added [ 175.026988][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.034529][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.060493][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.073287][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.080310][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.098328][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 175.106812][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.154316][ T5924] device hsr_slave_0 entered promiscuous mode [ 175.161827][ T5924] device hsr_slave_1 entered promiscuous mode [ 175.168437][ T5924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.176301][ T5924] Cannot create hsr debugfs directory [ 175.342621][ T5924] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 175.356428][ T5924] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 175.367262][ T5924] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 175.376444][ T5924] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 175.454168][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.476009][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.484638][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.496666][ T5924] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.524508][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.535383][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.544358][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.551492][ T4294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.570016][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.582423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.591717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.602728][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.609866][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.632254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.647188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.662377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.672100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.699172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.707602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.716897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.725696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.735292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.746498][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.875819][ T1214] bond0: (slave wlan1): Releasing backup interface [ 175.924813][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.932529][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.955157][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.089779][ T1214] device hsr_slave_0 left promiscuous mode [ 176.097210][ T1214] device hsr_slave_1 left promiscuous mode [ 176.104209][ T1214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.112484][ T1214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.121491][ T1214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.129564][ T1214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.137343][ T1214] device bridge_slave_1 left promiscuous mode [ 176.145808][ T1214] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.156276][ T1214] device bridge_slave_0 left promiscuous mode [ 176.165503][ T1214] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.185876][ T1214] device veth1_macvtap left promiscuous mode [ 176.195481][ T1214] device veth0_macvtap left promiscuous mode [ 176.202496][ T1214] device veth1_vlan left promiscuous mode [ 176.208932][ T1214] device veth0_vlan left promiscuous mode [ 176.284236][ T1214] team0 (unregistering): Port device vxlan0 removed [ 176.351426][ T1214] team0 (unregistering): Port device team_slave_1 removed [ 176.366763][ T1214] team0 (unregistering): Port device team_slave_0 removed [ 176.383105][ T1214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.396425][ T1214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.452928][ T1214] bond0 (unregistering): Released all slaves [ 176.667866][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.677490][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.718074][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.733942][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.753625][ T5924] device veth0_vlan entered promiscuous mode [ 176.764468][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.777999][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.805836][ T5924] device veth1_vlan entered promiscuous mode [ 176.843875][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.860167][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.873810][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.884966][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.902608][ T5924] device veth0_macvtap entered promiscuous mode [ 176.922682][ T5924] device veth1_macvtap entered promiscuous mode [ 176.951800][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.964764][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.975125][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.985823][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.996676][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.019561][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.030580][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.040503][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.049493][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.063041][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.073608][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.085120][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.102215][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.113270][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.129016][ T5924] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.137743][ T5924] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.149448][ T5924] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.158443][ T5924] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.178227][ T4259] Bluetooth: hci0: command 0x041b tx timeout [ 177.252879][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.269564][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.277391][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.325201][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.334111][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.346887][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.258241][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 179.953369][ T6053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.386'. [ 181.481753][ T4259] Bluetooth: hci0: command 0x0419 tx timeout [ 181.846717][ T6078] device syzkaller0 entered promiscuous mode [ 183.750663][ T6101] Cannot find set identified by id 0 to match [ 183.965030][ T6099] capability: warning: `syz.3.391' uses deprecated v2 capabilities in a way that may be insecure [ 184.628605][ T6115] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 184.690712][ T6116] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 184.789107][ T6118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.395'. [ 185.414327][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 185.445029][ T6126] overlayfs: failed to clone lowerpath [ 185.548463][ T6124] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 185.595371][ T6124] team0: Port device team_slave_0 removed [ 185.978334][ T4880] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 186.058870][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 186.081743][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 186.090468][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 186.096895][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 186.948191][ T4880] usb 7-1: Using ep0 maxpacket: 16 [ 187.088416][ T4880] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.857109][ T4880] usb 7-1: config 0 interface 0 has no altsetting 0 [ 187.863952][ T4880] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 187.873406][ T4880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.909465][ T4880] usb 7-1: config 0 descriptor?? [ 188.013705][ T6168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.407'. [ 188.758383][ T4880] usbhid 7-1:0.0: can't add hid device: -71 [ 188.768185][ T4880] usbhid: probe of 7-1:0.0 failed with error -71 [ 188.775399][ T6182] device syzkaller0 entered promiscuous mode [ 188.830830][ T4880] usb 7-1: USB disconnect, device number 2 [ 191.141312][ T6215] loop3: detected capacity change from 0 to 256 [ 191.242475][ T6215] FAT-fs (loop3): bogus sectors per cluster 0 [ 191.250956][ T6215] FAT-fs (loop3): Can't find a valid FAT filesystem [ 191.571491][ T6215] loop3: detected capacity change from 0 to 1024 [ 192.228578][ T4513] hfsplus: b-tree write err: -5, ino 25 [ 192.234356][ T4513] hfsplus: b-tree write err: -5, ino 4 [ 192.277662][ T4513] hfsplus: b-tree write err: -5, ino 2 [ 192.328440][ T4513] hfsplus: b-tree write err: -5, ino 26 [ 193.175990][ T6251] loop3: detected capacity change from 0 to 4096 [ 193.343850][ T6251] EXT4-fs (loop3): Test dummy encryption mode enabled [ 194.038483][ T6251] EXT4-fs (loop3): Ignoring removed oldalloc option [ 194.093696][ T6251] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,oldalloc,,errors=continue. Quota mode: writeback. [ 194.248686][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.255078][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.410891][ T6283] tipc: Enabling of bearer rejected, failed to enable media [ 195.175310][ T6300] tipc: Enabled bearer , priority 0 [ 195.203222][ T6300] device syzkaller0 entered promiscuous mode [ 195.234004][ T6300] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 195.274455][ T6300] tipc: Resetting bearer [ 195.306549][ T6298] tipc: Resetting bearer [ 195.333927][ T6298] tipc: Disabling bearer [ 195.549369][ T6313] loop6: detected capacity change from 0 to 256 [ 195.648854][ T6318] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 196.410433][ T6313] FAT-fs (loop6): bogus sectors per cluster 0 [ 196.416561][ T6313] FAT-fs (loop6): Can't find a valid FAT filesystem [ 197.042303][ T6342] device syzkaller0 entered promiscuous mode [ 197.340357][ T6355] device syzkaller0 entered promiscuous mode [ 197.506908][ T6359] tipc: Enabling of bearer rejected, failed to enable media [ 197.586446][ T6329] syz.3.439 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 197.610936][ T6368] tipc: Enabling of bearer rejected, failed to enable media [ 197.702211][ T6358] loop6: detected capacity change from 0 to 4096 [ 197.817520][ T6358] EXT4-fs (loop6): Test dummy encryption mode enabled [ 197.864656][ T6358] EXT4-fs (loop6): Ignoring removed oldalloc option [ 198.364037][ T6358] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,oldalloc,,errors=continue. Quota mode: writeback. [ 201.233616][ T6439] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 201.348335][ T6444] tipc: Started in network mode [ 201.368247][ T6444] tipc: Node identity bab5116d39f4, cluster identity 4711 [ 201.407238][ T6444] tipc: Enabled bearer , priority 0 [ 201.457038][ T6448] device syzkaller0 entered promiscuous mode [ 201.469557][ T6453] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 201.535521][ T6444] tipc: Resetting bearer [ 201.556950][ T6458] tipc: Enabling of bearer rejected, failed to enable media [ 201.648393][ T6443] tipc: Resetting bearer [ 201.685068][ T6443] tipc: Disabling bearer [ 204.218388][ T5824] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 204.274973][ T144] wlan1: Trigger new scan to find an IBSS to join [ 204.838485][ T5824] usb 4-1: config 0 has no interfaces? [ 204.845307][ T5824] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 205.167591][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.185268][ T5824] usb 4-1: config 0 descriptor?? [ 205.817680][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 205.817693][ T26] audit: type=1326 audit(1785429585.828:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.2.469" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f713d1fef99 code=0x0 [ 206.184639][ T6509] loop6: detected capacity change from 0 to 1024 [ 207.580639][ T7] usb 4-1: USB disconnect, device number 3 [ 208.081975][ T6584] tipc: Enabled bearer , priority 0 [ 208.116494][ T6584] device syzkaller0 entered promiscuous mode [ 208.157573][ T6584] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 208.258348][ T6584] tipc: Resetting bearer [ 208.363101][ T6583] tipc: Resetting bearer [ 208.434485][ T6583] tipc: Disabling bearer [ 208.458546][ T6586] tipc: Enabling of bearer rejected, failed to enable media [ 208.593851][ T6595] device syzkaller0 entered promiscuous mode [ 208.653147][ T6595] tipc: Enabled bearer , priority 0 [ 209.950967][ T4880] tipc: Node number set to 2202079597 [ 209.957299][ T4248] wlan1: Trigger new scan to find an IBSS to join [ 210.222777][ T6611] tipc: Resetting bearer [ 210.397707][ T6611] tipc: Disabling bearer [ 211.283184][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.551401][ T6654] tipc: Enabling of bearer rejected, failed to enable media [ 212.587328][ T6655] tipc: Enabled bearer , priority 0 [ 212.618661][ T6655] device syzkaller0 entered promiscuous mode [ 212.680323][ T6655] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 212.815301][ T6669] tipc: Resetting bearer [ 212.861482][ T6650] tipc: Resetting bearer [ 212.947328][ T6650] tipc: Disabling bearer [ 213.047897][ T6673] tipc: Enabled bearer , priority 0 [ 213.084930][ T6673] device syzkaller0 entered promiscuous mode [ 213.108455][ T6673] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 213.300612][ T6673] tipc: Resetting bearer [ 213.342365][ T6671] tipc: Resetting bearer [ 214.068843][ T6671] tipc: Disabling bearer [ 214.946971][ T6698] loop6: detected capacity change from 0 to 2048 [ 215.216202][ T6698] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 215.274954][ T6712] loop3: detected capacity change from 0 to 4096 [ 215.317018][ T6698] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 215.337751][ T6698] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.351696][ T6712] EXT4-fs (loop3): Test dummy encryption mode enabled [ 215.361970][ T6712] EXT4-fs (loop3): Ignoring removed oldalloc option [ 215.454700][ T6712] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,oldalloc,,errors=continue. Quota mode: writeback. [ 216.393694][ T6733] device syzkaller0 entered promiscuous mode [ 217.421565][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.509'. [ 217.666785][ T6753] tipc: Enabled bearer , priority 0 [ 217.705511][ T6753] device syzkaller0 entered promiscuous mode [ 217.750410][ T6753] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 217.799802][ T6753] tipc: Resetting bearer [ 217.806843][ T6752] tipc: Resetting bearer [ 217.848077][ T6752] tipc: Disabling bearer [ 217.917446][ T6759] tc action pedit unable to extract header offset for header type (0x4) [ 217.925873][ T6759] tc action pedit unable to extract header offset for header type (0x4) [ 217.934278][ T6759] tc action pedit unable to extract header offset for header type (0x4) [ 217.942671][ T6759] tc action pedit unable to extract header offset for header type (0x4) [ 217.951062][ T6759] tc action pedit unable to extract header offset for header type (0x4) [ 217.959434][ T6759] tc action pedit unable to extract header offset for header type (0x4) [ 217.967815][ T6759] tc action pedit unable to extract header offset for header type (0x4) [ 217.976205][ T6759] tc action pedit unable to extract header offset for header type (0x4) [ 217.984669][ T6759] tc action pedit unable to extract header offset for header type (0x4) [ 217.993049][ T6759] tc action pedit unable to extract header offset for header type (0x4) [ 218.001515][ T6759] 0: reclassify loop, rule prio 0, protocol 800 [ 218.205666][ T6773] device syzkaller0 entered promiscuous mode [ 218.392591][ T6780] device syzkaller0 entered promiscuous mode [ 219.044472][ T6801] device syzkaller0 entered promiscuous mode [ 219.079558][ T6801] 0: reclassify loop, rule prio 0, protocol 700 [ 219.268683][ T6815] tipc: Enabling of bearer rejected, failed to enable media [ 219.462316][ T6829] tipc: Enabled bearer , priority 0 [ 219.480594][ T6829] device syzkaller0 entered promiscuous mode [ 219.510646][ T6829] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 219.561132][ T6829] tipc: Resetting bearer [ 219.584009][ T6828] tipc: Resetting bearer [ 219.600437][ T6828] tipc: Disabling bearer [ 219.869445][ T6853] loop6: detected capacity change from 0 to 512 [ 221.273587][ T6856] tipc: Enabling of bearer rejected, failed to enable media [ 221.488962][ T6874] loop0: detected capacity change from 0 to 1024 [ 222.468447][ T6557] wlan1: Trigger new scan to find an IBSS to join [ 222.502860][ T6890] tipc: Enabling of bearer rejected, failed to enable media [ 222.752491][ T6905] device syzkaller0 entered promiscuous mode [ 222.834143][ T6905] tipc: Enabled bearer , priority 0 [ 223.242471][ T6906] loop3: detected capacity change from 0 to 512 [ 223.284570][ T6905] tipc: Resetting bearer [ 223.522986][ T6906] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.543: inode has both inline data and extents flags [ 223.539543][ T6906] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.543: couldn't read orphan inode 15 (err -117) [ 223.552356][ T6906] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 223.767946][ T6903] tipc: Resetting bearer [ 224.004776][ T6903] tipc: Disabling bearer [ 224.778768][ T1214] wlan1: Trigger new scan to find an IBSS to join [ 225.040274][ T6932] loop6: detected capacity change from 0 to 32768 [ 225.468600][ T6932] XFS (loop6): Mounting V5 Filesystem [ 225.870064][ T6932] XFS (loop6): Ending clean mount [ 225.886771][ T6932] XFS (loop6): Quotacheck needed: Please wait. [ 226.077356][ T6954] netlink: 'syz.3.554': attribute type 9 has an invalid length. [ 226.085690][ T6954] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.554'. [ 226.799029][ T6932] XFS (loop6): Quotacheck: Done. [ 227.088072][ T26] audit: type=1800 audit(1785429607.098:48): pid=6960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.551" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4429 res=0 errno=0 [ 227.282546][ T5924] XFS (loop6): Unmounting Filesystem [ 227.498898][ T6967] loop0: detected capacity change from 0 to 128 [ 227.518609][ T6968] loop3: detected capacity change from 0 to 1024 [ 227.706783][ T6967] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 227.818263][ T9] wlan1: Trigger new scan to find an IBSS to join [ 228.779163][ T9] wlan1: Trigger new scan to find an IBSS to join [ 229.038740][ T6552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.075224][ T6994] tc action pedit offset 132 out of bounds [ 229.336259][ T7014] tipc: Enabled bearer , priority 0 [ 229.367331][ T7014] device syzkaller0 entered promiscuous mode [ 229.405585][ T7014] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 229.556595][ T7023] netem: change failed [ 229.575056][ T7027] tipc: Resetting bearer [ 229.685651][ T7010] tipc: Resetting bearer [ 229.818330][ T4248] wlan1: Trigger new scan to find an IBSS to join [ 229.891577][ T7010] tipc: Disabling bearer [ 229.901324][ T6552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.097681][ T7054] Non-string source [ 233.832156][ T9] wlan1: Trigger new scan to find an IBSS to join [ 234.040891][ T7069] tc action pedit 'at' offset -2147483648 out of bounds [ 234.735949][ T7091] tipc: Enabling of bearer rejected, failed to enable media [ 236.015673][ T6557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.805430][ T7105] device syzkaller0 entered promiscuous mode [ 238.784029][ T7128] loop3: detected capacity change from 0 to 512 [ 238.826605][ T7128] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 238.876028][ T7128] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 238.924393][ T7128] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 238.948581][ T7128] EXT4-fs (loop3): 1 truncate cleaned up [ 238.961488][ T7128] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 241.725840][ T7153] tipc: Enabling of bearer rejected, failed to enable media [ 241.776451][ T7152] device syzkaller0 entered promiscuous mode [ 244.447104][ T7184] loop3: detected capacity change from 0 to 128 [ 244.610022][ T7184] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.746895][ T7184] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 245.616775][ T7207] fuse: Unknown parameter '0x0000000000000005' [ 246.100607][ T7212] tipc: Enabled bearer , priority 0 [ 246.121280][ T7212] device syzkaller0 entered promiscuous mode [ 246.173970][ T7212] tipc: Resetting bearer [ 246.186707][ T7209] tipc: Resetting bearer [ 246.266561][ T7209] tipc: Disabling bearer [ 246.637000][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.6.614'. [ 248.364998][ T7247] loop3: detected capacity change from 0 to 16 [ 250.048530][ T7247] erofs: (device loop3): mounted with root inode @ nid 36. [ 250.066146][ T7245] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 251.599476][ T4259] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 251.888249][ T4259] usb 4-1: Using ep0 maxpacket: 16 [ 251.962849][ T7272] device syzkaller0 entered promiscuous mode [ 252.021212][ T4259] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 252.045897][ T4259] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.080716][ T4259] usb 4-1: config 0 descriptor?? [ 252.151742][ T4259] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 252.432427][ T7276] device syzkaller0 entered promiscuous mode [ 252.470203][ T7276] simple: bas]9oς>Q/ic_1 [ 252.475564][ T7276] simple: bas]9oς>Q/ic_2 [ 252.480488][ T7276] simple: bas]9oς>Q/ic_3 [ 252.485345][ T7276] simple: bas]9oς>Q/ic_4 [ 252.490249][ T7276] simple: bas]9oς>Q/ic_5 [ 252.495099][ T7276] simple: bas]9oς>Q/ic_6 [ 252.500009][ T7276] simple: bas]9oς>Q/ic_7 [ 252.504863][ T7276] simple: bas]9oς>Q/ic_8 [ 252.509764][ T7276] simple: bas]9oς>Q/ic_9 [ 252.514619][ T7276] simple: bas]9oς>Q/ic_10 [ 252.519613][ T7276] simple: bas]9oς>Q/ic_11 [ 252.524604][ T7276] simple: bas]9oς>Q/ic_12 [ 252.529601][ T7276] simple: bas]9oς>Q/ic_13 [ 252.534553][ T7276] simple: bas]9oς>Q/ic_14 [ 252.539551][ T7276] simple: bas]9oς>Q/ic_15 [ 252.544510][ T7276] simple: bas]9oς>Q/ic_16 [ 252.549506][ T7276] simple: bas]9oς>Q/ic_17 [ 252.554444][ T7276] simple: bas]9oς>Q/ic_18 [ 252.559447][ T7276] simple: bas]9oς>Q/ic_19 [ 252.564404][ T7276] simple: bas]9oς>Q/ic_20 [ 252.569388][ T7276] simple: bas]9oς>Q/ic_21 [ 252.574330][ T7276] simple: bas]9oς>Q/ic_22 [ 252.579358][ T7276] simple: bas]9oς>Q/ic_23 [ 252.584295][ T7276] simple: bas]9oς>Q/ic_24 [ 252.589314][ T7276] simple: bas]9oς>Q/ic_25 [ 252.594473][ T7276] simple: bas]9oς>Q/ic_26 [ 252.599467][ T7276] simple: bas]9oς>Q/ic_27 [ 252.604411][ T7276] simple: bas]9oς>Q/ic_28 [ 252.609590][ T7276] simple: bas]9oς>Q/ic_29 [ 252.614529][ T7276] simple: bas]9oς>Q/ic_30 [ 252.619522][ T7276] simple: bas]9oς>Q/ic_31 [ 252.624464][ T7276] simple: bas]9oς>Q/ic_32 [ 252.629456][ T7276] TC_ACT_REPEAT abuse ? [ 255.182355][ T7304] device syzkaller0 entered promiscuous mode [ 255.428511][ T4259] gspca_sonixj: reg_w1 err -71 [ 255.433500][ T4259] sonixj: probe of 4-1:0.0 failed with error -71 [ 255.489609][ T4259] usb 4-1: USB disconnect, device number 4 [ 257.173908][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.180375][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.181688][ T26] audit: type=1326 audit(1785429634.707:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.4.639" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7bc5a6f99 code=0x7ffc0000 [ 257.825191][ T7329] "syz.4.643" (7329) uses obsolete ecb(arc4) skcipher [ 258.094146][ T26] audit: type=1326 audit(1785429634.707:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.4.639" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7bc5a6f99 code=0x7ffc0000 [ 258.158322][ T26] audit: type=1326 audit(1785429634.707:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.4.639" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fc7bc5a6f99 code=0x7ffc0000 [ 258.228301][ T26] audit: type=1326 audit(1785429634.707:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.4.639" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7bc5a6f99 code=0x7ffc0000 [ 258.314890][ T26] audit: type=1326 audit(1785429634.717:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.4.639" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7bc5a6f99 code=0x7ffc0000 [ 258.442959][ T26] audit: type=1326 audit(1785429634.717:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.4.639" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fc7bc5a6f99 code=0x7ffc0000 [ 258.519685][ T26] audit: type=1326 audit(1785429634.717:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.4.639" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7bc5a6f99 code=0x7ffc0000 [ 258.695933][ T26] audit: type=1326 audit(1785429634.717:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.4.639" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7bc5a6f99 code=0x7ffc0000 [ 258.828357][ T26] audit: type=1326 audit(1785429634.717:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.4.639" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fc7bc5a6f99 code=0x7ffc0000 [ 260.072873][ T26] audit: type=1326 audit(1785429634.717:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.4.639" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7bc5a6f99 code=0x7ffc0000 [ 261.463733][ T7397] tipc: Enabling of bearer rejected, failed to enable media [ 263.107427][ T7426] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 263.186344][ T7426] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 264.208855][ T6550] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 266.564708][ T7460] loop6: detected capacity change from 0 to 512 [ 266.630112][ T7460] EXT4-fs (loop6): inodes count not valid: 40 vs 32 [ 268.498769][ T7486] xt_cgroup: path and classid specified [ 270.249752][ T7498] tipc: Enabled bearer , priority 0 [ 270.257393][ T7498] device syzkaller0 entered promiscuous mode [ 271.125841][ T7504] loop0: detected capacity change from 0 to 32768 [ 271.420591][ T7516] tipc: Resetting bearer [ 271.465840][ T7504] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 271.566082][ T7516] tipc: Disabling bearer [ 271.899163][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 271.899199][ T26] audit: type=1800 audit(1785429650.897:75): pid=7528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.684" name="file1" dev="loop0" ino=17059 res=0 errno=0 [ 272.064882][ T7504] syz.0.684 (7504) used greatest stack depth: 18304 bytes left [ 272.106887][ T7529] loop6: detected capacity change from 0 to 16 [ 272.134265][ T7531] tipc: Enabled bearer , priority 0 [ 272.142365][ T7531] device syzkaller0 entered promiscuous mode [ 272.181249][ T7531] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 272.278656][ T7531] tipc: Resetting bearer [ 272.312756][ T7529] erofs: (device loop6): erofs_superblock_csum_verify: invalid checksum 0xea26c732, 0x02d6543f expected [ 272.347761][ T6061] udevd[6061]: incorrect erofs checksum on /dev/loop6 [ 272.382899][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 273.688322][ T7530] tipc: Resetting bearer [ 274.915725][ T7530] tipc: Disabling bearer [ 274.948388][ T7] tipc: Node number set to 1087464031 [ 275.101364][ T7555] bridge0: port 1(syz_tun) entered blocking state [ 275.980986][ T7555] bridge0: port 1(syz_tun) entered disabled state [ 275.993433][ T7555] device syz_tun entered promiscuous mode [ 276.008560][ T7555] bridge0: port 1(syz_tun) entered blocking state [ 276.015082][ T7555] bridge0: port 1(syz_tun) entered forwarding state [ 276.033179][ T7562] tipc: Enabled bearer , priority 0 [ 276.064729][ T7562] device syzkaller0 entered promiscuous mode [ 276.111257][ T7562] tipc: Resetting bearer [ 276.163014][ T7558] tipc: Resetting bearer [ 276.193609][ T7558] tipc: Disabling bearer [ 276.307433][ T7564] tipc: Enabling of bearer rejected, failed to enable media [ 278.510239][ T7612] loop6: detected capacity change from 0 to 512 [ 278.528335][ T7614] tipc: Enabled bearer , priority 0 [ 278.537551][ T7614] device syzkaller0 entered promiscuous mode [ 278.553891][ T7614] tipc: Resetting bearer [ 278.638753][ T7611] tipc: Resetting bearer [ 278.672912][ T7612] EXT4-fs (loop6): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 278.681913][ T7612] EXT4-fs (loop6): can't mount with both data=journal and dax [ 278.713789][ T7611] tipc: Disabling bearer [ 278.754041][ T7615] tipc: Enabled bearer , priority 0 [ 278.770860][ T7618] device syzkaller0 entered promiscuous mode [ 278.781659][ T7619] tipc: Resetting bearer [ 278.801759][ T7613] tipc: Resetting bearer [ 278.829996][ T7613] tipc: Disabling bearer [ 283.056426][ T7661] syz.4.725 (7661) used greatest stack depth: 17440 bytes left [ 283.253483][ T7669] tipc: Enabling of bearer rejected, failed to enable media [ 283.409184][ T7677] autofs4:pid:7677:autofs_fill_super: called with bogus options [ 284.523888][ T7694] loop6: detected capacity change from 0 to 4096 [ 284.880638][ T7694] NILFS (loop6): bad btree root (ino=2): level = 0, flags = 0x9, nchildren = 0 [ 284.890428][ T7694] NILFS (loop6): error -5 getting root inode [ 284.907215][ T7696] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.100939][ T7727] loop3: detected capacity change from 0 to 40427 [ 287.225315][ T7727] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 287.233603][ T7727] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 287.249401][ T7727] F2FS-fs (loop3): invalid crc value [ 287.526879][ T7727] F2FS-fs (loop3): Found nat_bits in checkpoint [ 287.603792][ T7727] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 287.611499][ T7727] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 287.748339][ T7740] tipc: Enabling of bearer rejected, failed to enable media [ 290.298160][ T4279] Bluetooth: hci0: command 0x0411 tx timeout [ 291.907720][ T7785] 9pnet_virtio: no channels available for device 127.0.0.1 [ 292.598704][ T7796] kcapi: manufacturer command 4294967295 unknown. [ 295.509741][ T7831] device syzkaller0 entered promiscuous mode [ 296.530538][ T7840] netlink: 'syz.6.770': attribute type 21 has an invalid length. [ 296.596960][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.770'. [ 296.965335][ T7840] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 297.403806][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 297.826606][ T7875] netlink: 'syz.6.774': attribute type 5 has an invalid length. [ 297.834404][ T7875] netlink: 48 bytes leftover after parsing attributes in process `syz.6.774'. [ 299.038589][ T7890] db_root: cannot be changed: target drivers registered [ 299.194947][ T7899] device syzkaller1 entered promiscuous mode [ 299.207634][ T7892] loop6: detected capacity change from 0 to 4096 [ 299.248485][ T7901] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 300.177872][ T26] audit: type=1326 audit(1785429679.187:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.3.783" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 300.496591][ T26] audit: type=1326 audit(1785429679.257:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.3.783" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 300.538483][ T7914] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 300.597352][ T26] audit: type=1326 audit(1785429679.257:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.3.783" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 301.816287][ T7927] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 302.021673][ T26] audit: type=1326 audit(1785429679.257:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.3.783" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 302.049549][ T26] audit: type=1326 audit(1785429679.257:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.3.783" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 302.097735][ T26] audit: type=1326 audit(1785429679.257:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.3.783" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 302.965483][ T26] audit: type=1326 audit(1785429679.257:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.3.783" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 303.213534][ T26] audit: type=1326 audit(1785429679.267:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.3.783" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 303.266808][ T7949] loop0: detected capacity change from 0 to 1024 [ 303.650934][ T7957] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 303.669892][ T7961] hugetlbfs: syz.4.793 (7961): Using mlock ulimits for SHM_HUGETLB is deprecated [ 303.679043][ T7949] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 303.781268][ T7968] loop3: detected capacity change from 0 to 16 [ 303.874169][ T7968] erofs: (device loop3): mounted with root inode @ nid 36. [ 304.813658][ T7979] binder: BINDER_SET_CONTEXT_MGR already set [ 304.819900][ T7979] binder: 7973:7979 ioctl 4018620d 200000004a80 returned -16 [ 307.947814][ T8012] device syzkaller0 entered promiscuous mode [ 313.504822][ T8057] trusted_key: encrypted_key: insufficient parameters specified [ 313.604832][ T8056] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 313.717321][ T8058] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 313.774623][ T8059] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 315.055783][ T8066] device syzkaller0 entered promiscuous mode [ 315.083206][ T8066] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 317.108689][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.115046][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.375177][ T150] block nbd0: Attempted send on invalid socket [ 319.382618][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.396817][ T8117] FAT-fs (nbd0): unable to read boot sector [ 319.398179][ T5824] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 320.729373][ T8131] device syzkaller0 entered promiscuous mode [ 320.755060][ T8124] tc action pedit offset must be on 32 bit boundaries [ 320.761922][ T8124] tc action pedit offset must be on 32 bit boundaries [ 320.768752][ T8124] tc action pedit offset must be on 32 bit boundaries [ 320.775535][ T8124] tc action pedit offset must be on 32 bit boundaries [ 320.776805][ T8131] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 320.782371][ T8124] tc action pedit offset must be on 32 bit boundaries [ 320.782479][ T8124] tc action pedit offset must be on 32 bit boundaries [ 320.782489][ T8124] tc action pedit offset must be on 32 bit boundaries [ 320.782498][ T8124] tc action pedit offset must be on 32 bit boundaries [ 320.782507][ T8124] tc action pedit offset must be on 32 bit boundaries [ 320.782516][ T8124] tc action pedit offset must be on 32 bit boundaries [ 320.782540][ T8124] 0: reclassify loop, rule prio 0, protocol 800 [ 321.444553][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 321.457640][ T5824] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.471622][ T5824] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 321.480957][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.499681][ T5824] usb 4-1: config 0 descriptor?? [ 321.528387][ T5824] usb 4-1: can't set config #0, error -71 [ 321.546632][ T5824] usb 4-1: USB disconnect, device number 5 [ 322.151633][ T8153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.840'. [ 325.492799][ T8189] loop6: detected capacity change from 0 to 1024 [ 326.455281][ T8189] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 327.882563][ T8238] overlayfs: failed to clone upperpath [ 331.042111][ T8313] ksmbd: Unknown IPC event: 3, ignore. [ 331.189021][ T8276] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 334.245195][ T26] audit: type=1326 audit(1785429713.257:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.2.878" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713d1fef99 code=0x7ffc0000 [ 334.512087][ T26] audit: type=1326 audit(1785429713.257:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.2.878" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713d1fef99 code=0x7ffc0000 [ 335.233850][ T26] audit: type=1326 audit(1785429713.327:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.2.878" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f713d1fef99 code=0x7ffc0000 [ 335.382848][ T26] audit: type=1326 audit(1785429713.327:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.2.878" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713d1fef99 code=0x7ffc0000 [ 335.456209][ T26] audit: type=1326 audit(1785429713.327:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.2.878" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713d1fef99 code=0x7ffc0000 [ 335.524552][ T26] audit: type=1326 audit(1785429713.327:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.2.878" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f713d1fef99 code=0x7ffc0000 [ 335.669375][ T26] audit: type=1326 audit(1785429713.327:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.2.878" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713d1fef99 code=0x7ffc0000 [ 335.698181][ T26] audit: type=1326 audit(1785429713.327:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.2.878" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713d1fef99 code=0x7ffc0000 [ 336.505218][ T26] audit: type=1326 audit(1785429713.337:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.2.878" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f713d1fef99 code=0x7ffc0000 [ 336.554913][ T26] audit: type=1326 audit(1785429713.337:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.2.878" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713d1fef99 code=0x7ffc0000 [ 341.237115][ T8412] tcf_pedit_act: 7 callbacks suppressed [ 341.237131][ T8412] tc action pedit unable to extract header offset for header type (0x4) [ 341.251193][ T8412] tc action pedit unable to extract header offset for header type (0x4) [ 341.259600][ T8412] tc action pedit unable to extract header offset for header type (0x4) [ 341.268338][ T8412] tc action pedit unable to extract header offset for header type (0x4) [ 341.276694][ T8412] tc action pedit unable to extract header offset for header type (0x4) [ 341.285110][ T8412] tc action pedit unable to extract header offset for header type (0x4) [ 341.293543][ T8412] tc action pedit unable to extract header offset for header type (0x4) [ 341.301944][ T8412] tc action pedit unable to extract header offset for header type (0x4) [ 341.310339][ T8412] tc action pedit unable to extract header offset for header type (0x4) [ 341.318716][ T8412] tc action pedit unable to extract header offset for header type (0x4) [ 341.327081][ T8412] 0: reclassify loop, rule prio 0, protocol 800 [ 341.723190][ T8430] loop3: detected capacity change from 0 to 8 [ 343.638709][ T8453] tipc: Enabling of bearer rejected, failed to enable media [ 347.287828][ T8499] loop6: detected capacity change from 0 to 512 [ 348.939202][ T8499] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.926: inode has both inline data and extents flags [ 348.957038][ T8499] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.926: couldn't read orphan inode 15 (err -117) [ 348.970560][ T8499] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 349.084172][ T8507] tipc: Enabling of bearer rejected, failed to enable media [ 349.638919][ T8519] netlink: 'syz.2.927': attribute type 9 has an invalid length. [ 349.646612][ T8519] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.927'. [ 350.521312][ T8532] loop3: detected capacity change from 0 to 512 [ 352.710442][ T8559] tipc: Enabling of bearer rejected, failed to enable media [ 353.724806][ T8571] tipc: Enabling of bearer rejected, failed to enable media [ 354.123784][ T8581] netlink: 'syz.3.947': attribute type 21 has an invalid length. [ 354.135428][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.947'. [ 354.185818][ T8581] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 357.479942][ T8607] device syzkaller0 entered promiscuous mode [ 359.767700][ T8660] device syzkaller0 entered promiscuous mode [ 359.830216][ T8660] tipc: Enabled bearer , priority 0 [ 359.916865][ T8677] tipc: Resetting bearer [ 359.941489][ T8658] tipc: Resetting bearer [ 359.960358][ T8658] tipc: Disabling bearer [ 360.867165][ T8691] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 360.913939][ T8691] loop3: detected capacity change from 0 to 128 [ 363.325646][ T4513] Bluetooth: Error in BCSP hdr checksum [ 363.580573][ T6546] Bluetooth: Error in BCSP hdr checksum [ 363.598674][ T8731] tipc: Enabling of bearer rejected, failed to enable media [ 363.820506][ T4513] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 364.747291][ T5324] Process accounting resumed [ 364.873671][ T8746] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 364.943727][ T8745] loop6: detected capacity change from 0 to 1764 [ 366.261622][ T8751] tipc: Enabling of bearer rejected, failed to enable media [ 366.289216][ T5324] Bluetooth: hci5: command 0x1003 tx timeout [ 366.439061][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 367.064418][ T8733] Process accounting resumed [ 368.293038][ T8804] tipc: Enabling of bearer rejected, failed to enable media [ 368.496062][ T5324] Bluetooth: hci5: command 0x1001 tx timeout [ 368.560259][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 370.521981][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 370.522092][ T26] audit: type=1326 audit(1785429749.487:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.3.1000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 370.628169][ T4279] Bluetooth: hci5: command 0x1009 tx timeout [ 370.737846][ T26] audit: type=1326 audit(1785429749.487:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.3.1000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 370.963479][ T26] audit: type=1326 audit(1785429749.497:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.3.1000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 371.045884][ T26] audit: type=1326 audit(1785429749.497:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.3.1000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 371.078216][ T26] audit: type=1326 audit(1785429749.497:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.3.1000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 371.328026][ T26] audit: type=1326 audit(1785429749.497:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.3.1000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 373.807399][ T26] audit: type=1326 audit(1785429749.497:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.3.1000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 373.964235][ T26] audit: type=1326 audit(1785429749.497:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.3.1000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 373.994880][ T26] audit: type=1326 audit(1785429749.497:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.3.1000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 374.035932][ T26] audit: type=1326 audit(1785429749.497:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.3.1000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 375.141708][ T8867] misc userio: Invalid payload size [ 375.156503][ T8867] netlink: 120 bytes leftover after parsing attributes in process `syz.6.998'. [ 376.591556][ T8889] loop3: detected capacity change from 0 to 512 [ 377.638063][ T8889] EXT4-fs (loop3): Test dummy encryption mode enabled [ 377.704698][ T8895] tipc: Enabling of bearer rejected, failed to enable media [ 377.721597][ T8889] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.1021: inode has both inline data and extents flags [ 377.735424][ T8889] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1021: couldn't read orphan inode 15 (err -117) [ 377.753577][ T8889] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 378.081286][ T8902] ksmbd: Unknown IPC event: 3, ignore. [ 378.540287][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.546635][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.636737][ T8918] loop6: detected capacity change from 0 to 32768 [ 380.326912][ T8918] XFS (loop6): Mounting V5 Filesystem [ 380.782215][ T8942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1032'. [ 380.798832][ T8918] XFS (loop6): Ending clean mount [ 380.816640][ T8918] XFS (loop6): Quotacheck needed: Please wait. [ 380.904253][ T8918] XFS (loop6): Quotacheck: Done. [ 381.619131][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 381.619146][ T26] audit: type=1800 audit(1785429760.167:127): pid=8957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1026" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4430 res=0 errno=0 [ 382.116691][ T8964] tipc: Enabling of bearer rejected, failed to enable media [ 383.727542][ T9007] fuse: Bad value for 'fd' [ 384.975116][ T5924] XFS (loop6): Unmounting Filesystem [ 385.836864][ T9034] tipc: Enabling of bearer rejected, failed to enable media [ 389.551570][ T9079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1068'. [ 389.570050][ T26] audit: type=1107 audit(1785429768.587:128): pid=9074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 389.570050][ T26] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 389.570050][ T26] Вh0VZ2' [ 389.608307][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.328225][ T5828] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 390.588457][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 390.855412][ T5828] usb 4-1: unable to get BOS descriptor or descriptor too short [ 391.730811][ T5828] usb 4-1: too many endpoints for config 1 interface 2 altsetting 1: 128, using maximum allowed: 30 [ 391.983719][ T5828] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 391.996841][ T5828] usb 4-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 392.087867][ T9101] overlayfs: failed to clone upperpath [ 392.128245][ T5828] usb 4-1: string descriptor 0 read error: -71 [ 392.135121][ T5828] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 392.146702][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.238530][ T5828] usb 4-1: can't set config #1, error -71 [ 392.305014][ T5828] usb 4-1: USB disconnect, device number 6 [ 397.126142][ T8271] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 399.248781][ T9214] device syzkaller0 entered promiscuous mode [ 400.333315][ T9259] loop3: detected capacity change from 0 to 256 [ 400.456329][ T9259] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 401.331993][ T9281] netlink: 'syz.0.1117': attribute type 9 has an invalid length. [ 401.339868][ T9281] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1117'. [ 402.250076][ T9288] xt_cgroup: path and classid specified [ 405.514561][ T9326] tipc: Enabling of bearer rejected, failed to enable media [ 406.639927][ T9346] netlink: 'syz.6.1134': attribute type 9 has an invalid length. [ 406.647777][ T9346] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.1134'. [ 407.452166][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 407.485295][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 407.495037][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 407.499683][ T9350] xt_cgroup: path and classid specified [ 407.520819][ T9349] device bridge_slave_0 left promiscuous mode [ 407.527209][ T9349] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.279947][ T9349] device bridge_slave_1 left promiscuous mode [ 408.299866][ T9349] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.334698][ T9349] bond0: (slave bond_slave_0): Releasing backup interface [ 408.421089][ T9349] bond0: (slave bond_slave_1): Releasing backup interface [ 408.534651][ T9349] team0: Port device team_slave_0 removed [ 408.629592][ T9349] team0: Port device team_slave_1 removed [ 408.680654][ T9349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.690979][ T9349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.706030][ T9349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.714181][ T9349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.856670][ T9379] tipc: Enabling of bearer rejected, failed to enable media [ 410.603308][ T9402] tipc: Enabling of bearer rejected, failed to enable media [ 413.194912][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 413.208205][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 413.223767][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 413.232157][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 413.241190][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 413.249376][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 413.258201][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 413.266197][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 413.275067][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 413.283122][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 413.292247][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 413.300655][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 413.309755][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 413.318520][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 413.345739][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 413.354424][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 413.701189][ T9439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.170087][ T9460] batman_adv: batadv0: Adding interface: macvtap1 [ 415.176615][ T9460] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.555058][ T9471] loop6: detected capacity change from 0 to 4096 [ 416.579216][ T9471] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 417.976487][ T9460] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 418.083688][ T9477] overlayfs: failed to clone upperpath [ 422.781613][ T9522] tipc: Enabling of bearer rejected, failed to enable media [ 423.694116][ T9541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1186'. [ 424.486160][ T9555] 9pnet: Insufficient options for proto=fd [ 426.843198][ T9575] tipc: Enabling of bearer rejected, failed to enable media [ 427.058946][ T9595] loop6: detected capacity change from 0 to 128 [ 429.203504][ T4333] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 429.306470][ T9626] ip6t_srh: unknown srh match flags FF3F [ 430.302051][ T26] audit: type=1326 audit(1785429808.697:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9624 comm="syz.3.1212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 430.370308][ T9641] tipc: Enabling of bearer rejected, failed to enable media [ 430.552275][ T26] audit: type=1326 audit(1785429808.697:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9624 comm="syz.3.1212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 430.579908][ T9654] [ 430.582268][ T9654] ====================================================== [ 430.589285][ T9654] WARNING: possible circular locking dependency detected [ 430.596397][ T9654] syzkaller #0 Not tainted [ 430.600802][ T9654] ------------------------------------------------------ [ 430.607801][ T9654] syz.3.1219/9654 is trying to acquire lock: [ 430.613758][ T9654] ffff888017043900 (&sb->s_type->i_mutex_key#28){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 430.625314][ T9654] [ 430.625314][ T9654] but task is already holding lock: [ 430.632666][ T9654] ffff888079ac0920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 430.641779][ T9654] [ 430.641779][ T9654] which lock already depends on the new lock. [ 430.641779][ T9654] [ 430.652187][ T9654] [ 430.652187][ T9654] the existing dependency chain (in reverse order) is: [ 430.661188][ T9654] [ 430.661188][ T9654] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 430.668833][ T9654] __mutex_lock_common+0x1e5/0x2400 [ 430.674735][ T9654] mutex_lock_nested+0x17/0x20 [ 430.680022][ T9654] tcm_set_name+0x26/0x90 [ 430.684867][ T9654] function_make+0x195/0x350 [ 430.690031][ T9654] configfs_mkdir+0x511/0x9e0 [ 430.695217][ T9654] vfs_mkdir+0x386/0x570 [ 430.699982][ T9654] do_mkdirat+0x1dd/0x5c0 [ 430.704818][ T9654] __x64_sys_mkdir+0x6a/0x80 [ 430.709929][ T9654] do_syscall_64+0x4c/0xa0 [ 430.714904][ T9654] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 430.721307][ T9654] [ 430.721307][ T9654] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 430.729543][ T9654] __mutex_lock_common+0x1e5/0x2400 [ 430.735255][ T9654] mutex_lock_nested+0x17/0x20 [ 430.740522][ T9654] configfs_rmdir+0x638/0x980 [ 430.745710][ T9654] vfs_rmdir+0x19d/0x410 [ 430.750464][ T9654] do_rmdir+0x27f/0x710 [ 430.755124][ T9654] __x64_sys_rmdir+0x45/0x50 [ 430.760219][ T9654] do_syscall_64+0x4c/0xa0 [ 430.765141][ T9654] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 430.771541][ T9654] [ 430.771541][ T9654] -> #0 (&sb->s_type->i_mutex_key#28){++++}-{3:3}: [ 430.780219][ T9654] __lock_acquire+0x2c66/0x7b50 [ 430.785611][ T9654] lock_acquire+0x19e/0x400 [ 430.790649][ T9654] down_write+0x38/0x60 [ 430.795321][ T9654] configfs_depend_item_unlocked+0x14f/0x430 [ 430.801813][ T9654] usbg_make_tpg+0x1f3/0x580 [ 430.806912][ T9654] target_fabric_make_tpg+0xa0/0x6d0 [ 430.812794][ T9654] configfs_mkdir+0x511/0x9e0 [ 430.817979][ T9654] vfs_mkdir+0x386/0x570 [ 430.822729][ T9654] do_mkdirat+0x1dd/0x5c0 [ 430.827562][ T9654] __x64_sys_mkdir+0x6a/0x80 [ 430.832658][ T9654] do_syscall_64+0x4c/0xa0 [ 430.837589][ T9654] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 430.843993][ T9654] [ 430.843993][ T9654] other info that might help us debug this: [ 430.843993][ T9654] [ 430.854207][ T9654] Chain exists of: [ 430.854207][ T9654] &sb->s_type->i_mutex_key#28 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 430.854207][ T9654] [ 430.868882][ T9654] Possible unsafe locking scenario: [ 430.868882][ T9654] [ 430.876315][ T9654] CPU0 CPU1 [ 430.881665][ T9654] ---- ---- [ 430.887014][ T9654] lock(&opts->dep_lock); [ 430.891504][ T9654] lock(gadget_subsys.su_mutex); [ 430.899028][ T9654] lock(&opts->dep_lock); [ 430.905954][ T9654] lock(&sb->s_type->i_mutex_key#28); [ 430.911403][ T9654] [ 430.911403][ T9654] *** DEADLOCK *** [ 430.911403][ T9654] [ 430.919530][ T9654] 5 locks held by syz.3.1219/9654: [ 430.924623][ T9654] #0: ffff88801dc7c460 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 430.933934][ T9654] #1: ffff88805f255aa0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 430.944723][ T9654] #2: ffffffff8cc23e70 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 430.954450][ T9654] #3: ffffffff8cf21328 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 430.964109][ T9654] #4: ffff888079ac0920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 430.973582][ T9654] [ 430.973582][ T9654] stack backtrace: [ 430.979465][ T9654] CPU: 1 PID: 9654 Comm: syz.3.1219 Not tainted syzkaller #0 [ 430.986820][ T9654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 430.996955][ T9654] Call Trace: [ 431.000289][ T9654] [ 431.003275][ T9654] dump_stack_lvl+0x188/0x250 [ 431.008017][ T9654] ? load_image+0x410/0x410 [ 431.012546][ T9654] ? show_regs_print_info+0x20/0x20 [ 431.017742][ T9654] ? print_circular_bug+0x12b/0x1a0 [ 431.022941][ T9654] check_noncircular+0x296/0x330 [ 431.027875][ T9654] ? add_chain_block+0x9b0/0x9b0 [ 431.032805][ T9654] ? lockdep_lock+0xf1/0x1f0 [ 431.037384][ T9654] ? mark_lock+0x94/0x320 [ 431.041701][ T9654] ? mark_lock+0x94/0x320 [ 431.046016][ T9654] ? _find_first_zero_bit+0xd1/0xf0 [ 431.051271][ T9654] __lock_acquire+0x2c66/0x7b50 [ 431.056120][ T9654] ? verify_lock_unused+0x140/0x140 [ 431.061308][ T9654] ? __mutex_trylock_common+0x15c/0x260 [ 431.066929][ T9654] ? rcu_lock_release+0x20/0x20 [ 431.071771][ T9654] lock_acquire+0x19e/0x400 [ 431.076260][ T9654] ? configfs_depend_item_unlocked+0x14f/0x430 [ 431.082406][ T9654] ? __might_sleep+0xf0/0xf0 [ 431.087068][ T9654] ? __kasan_kmalloc+0xc6/0xe0 [ 431.091861][ T9654] ? read_lock_is_recursive+0x10/0x10 [ 431.097224][ T9654] ? mutex_lock_io_nested+0x60/0x60 [ 431.102413][ T9654] down_write+0x38/0x60 [ 431.106558][ T9654] ? configfs_depend_item_unlocked+0x14f/0x430 [ 431.112716][ T9654] configfs_depend_item_unlocked+0x14f/0x430 [ 431.118695][ T9654] usbg_make_tpg+0x1f3/0x580 [ 431.123278][ T9654] ? mutex_lock_io_nested+0x60/0x60 [ 431.128464][ T9654] ? usbg_drop_tport+0x20/0x20 [ 431.133213][ T9654] ? vscnprintf+0x80/0x80 [ 431.137551][ T9654] target_fabric_make_tpg+0xa0/0x6d0 [ 431.142822][ T9654] ? target_fabric_release_wwn+0xa0/0xa0 [ 431.148445][ T9654] configfs_mkdir+0x511/0x9e0 [ 431.153115][ T9654] vfs_mkdir+0x386/0x570 [ 431.157355][ T9654] do_mkdirat+0x1dd/0x5c0 [ 431.161676][ T9654] ? vfs_mkdir+0x570/0x570 [ 431.166077][ T9654] ? getname_flags+0x1f9/0x4f0 [ 431.170830][ T9654] __x64_sys_mkdir+0x6a/0x80 [ 431.175448][ T9654] do_syscall_64+0x4c/0xa0 [ 431.179851][ T9654] ? clear_bhb_loop+0x30/0x80 [ 431.184521][ T9654] ? clear_bhb_loop+0x30/0x80 [ 431.189183][ T9654] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 431.195095][ T9654] RIP: 0033:0x7f9d73869f99 [ 431.199569][ T9654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.219200][ T9654] RSP: 002b:00007f9d71ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 431.227669][ T9654] RAX: ffffffffffffffda RBX: 00007f9d73af1fa0 RCX: 00007f9d73869f99 [ 431.235629][ T9654] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000c00 [ 431.243592][ T9654] RBP: 00007f9d73900ec4 R08: 0000000000000000 R09: 0000000000000000 [ 431.251665][ T9654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.259626][ T9654] R13: 00007f9d73af2038 R14: 00007f9d73af1fa0 R15: 00007fff05552bf8 [ 431.267599][ T9654] [ 431.311109][ T26] audit: type=1326 audit(1785429808.697:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9624 comm="syz.3.1212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 431.341704][ T26] audit: type=1326 audit(1785429808.697:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9624 comm="syz.3.1212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 431.368174][ T9654] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 431.368475][ T26] audit: type=1326 audit(1785429808.697:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9624 comm="syz.3.1212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 431.403085][ T26] audit: type=1326 audit(1785429808.697:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9624 comm="syz.3.1212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 431.428783][ T26] audit: type=1326 audit(1785429808.697:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9624 comm="syz.3.1212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 431.454672][ T26] audit: type=1326 audit(1785429808.697:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9624 comm="syz.3.1212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 431.480282][ T26] audit: type=1326 audit(1785429808.697:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9624 comm="syz.3.1212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 431.506034][ T26] audit: type=1326 audit(1785429808.697:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9624 comm="syz.3.1212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d73869f99 code=0x7ffc0000 [ 431.530134][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.979705][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.986003][ T1422] ieee802154 phy1 wpan1: encryption failed: -22